last executing test programs: 12m28.802802632s ago: executing program 2 (id=1969): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_connect$uac2(0x4, 0xdc, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000018410e53414000010203010902ca000301079000080b000001062001090400000001012000092401d0000542000413240d050100010200000003000100000002000924080401020003000c240bfe0749ad2e225e599a08240b0803e19bd4092404011ab225469c09040100000102200009040101010102200011240201400201025d114754ef26c9496b112402010002000d078a9c8ada29d0965c090501094fc5fb050f08250102ce25eb7656e716c9c22663f2890004080009040200000102200009040201010102200006240201020109058209"], &(0x7f0000000780)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x310, 0xfe, 0x8, 0x4, 0x10, 0x6}, 0x4e, &(0x7f00000002c0)={0x5, 0xf, 0x4e, 0x6, [@wireless={0xb, 0x10, 0x1, 0x4, 0x6, 0xf, 0x3, 0x401, 0x7}, @wireless={0xb, 0x10, 0x1, 0x4, 0x20, 0x1, 0x9, 0x800, 0xfd}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2efe3bef28e089c2, 0xb, 0x7, 0x2}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4a, 0x8, 0xcb, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x7f, 0xea, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "206eb470be40c3bb861fb22031c56122"}]}, 0xa, [{0x35, &(0x7f0000000340)=@string={0x35, 0x3, "79403859d162a74cf8c2d8c5a842fd34adbc16175669fe3ee2dbde521caa651670c6ed161d0d7b981239250aac4892af88f72b"}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x42b}}, {0xf3, &(0x7f0000000440)=ANY=[@ANYBLOB="f303dce3f5cdb4608388e53e1a23b1407bb002a1c61c0df5fac8e175164e7424dfd6af744c456d6f37c87b3dab76e0df4d443d5c6a425367f69260fede8d9f8401b934da9cb7ae63a51f1ce48b61d25e972fd6237abb03fceac0343822a860edb8c0d289a03642edf6f8a7770dde4250b92c36e7266ba6b58278427711449f8fb9952054c3029d2fe3ab7bd68dc7a31ce7f6b23087eeb00cb20dbe10263105e65376b047e0a65bbb9cf2cfbfdf13ce22a52d4ef67e37f00ad2fc84b2e0e30ebd15143a1f2bca391c8569d06c895f0ef8ee3bd6e36596563f058ec26d7bc6ea3bf16ad73e5af0"]}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x1c09}}, {0x8, &(0x7f0000000580)=@string={0x8, 0x3, "bd55f439b8aa"}}, {0xdc, &(0x7f00000005c0)=@string={0xdc, 0x3, "bbec7d1a920cdb1c046bf9b778599197914ace7b9459635021e85c898512786817573ded3f9242136d5c6ddc8d9fd0e7eecc527ae8277f1039045b561f20f0d2a4e893c882fa11449a345d24c815334ac26c0a048321c413f9e082237b0398c44e866ae1fc61753960d2f38820245d3a1044c4bd00b967dff74bc7b5acc66441b70aa431e8caa6da3a816afc989f30a61512960bbb2af762abe517c30d395426bab1692723b7bac380fc0364184f33c3efa0e7203d96e2e021f7a854deca438301a2bfeb366d5f5b032a3ee55b8d9ea2ac8253e45d996da0d0a3"}}, {0x3, &(0x7f00000006c0)=@string={0x3, 0x3, "ed"}}, {0x45, &(0x7f0000000700)=ANY=[@ANYBLOB="4503b6abf911d7c32969d07764502779f334347a11d457f9534248c43513f62e8a4ab172001a6f7625ff1acce3791857b066bd53ecde3ec45063bc8f3e02d39401f88b92ac"]}]}) r1 = syz_usb_connect$uac2(0x2, 0xd8, &(0x7f0000000840)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc6, 0x3, 0x1, 0x2, 0x90, 0x0, {0x8, 0xb, 0x2, 0x0, 0x1, 0x2, 0x20, 0xc}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x3, 0x21, 0xc9}, [@feature_unit={0xd, 0x24, 0x6, 0x4, 0x1, [0x5, 0x4, 0xc, 0x6]}, @feature_unit={0xb, 0x24, 0x6, 0x1, 0x2, [0x5, 0x8, 0x7]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x359b, 0x18, 0x1, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0xc7, 0xc, 0x2, 0x2}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x80, 0x3, 0xd9, 0x40, 0x2}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x1000, 0x1, 0x4, 0xfd}, @as_header={0x10, 0x24, 0x1, 0x1f, 0x1, 0x1, 0x5, 0x50, 0x8, 0x2}]}, {{0x9, 0x5, 0x1, 0x9, 0xf4beb198acb1a43, 0x7, 0x97, 0x8, {0x8, 0x25, 0x1, 0x80, 0xc, 0x0, 0xf6e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xef, 0x3, 0xa6}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x6}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x6, 0x7, 0x0, {0x8, 0x25, 0x1, 0x82, 0x30, 0x2, 0x4}}}}}}}}]}}, &(0x7f0000000bc0)={0xa, &(0x7f0000000940)={0xa, 0x6, 0x110, 0x80, 0x8, 0x1, 0x20, 0x2}, 0x30, &(0x7f0000000980)={0x5, 0xf, 0x30, 0x3, [@ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x800, 0xf00, 0x1, [0x30, 0xc0]}, @ptm_cap={0x3}, @ssp_cap={0x14, 0x10, 0xa, 0x80, 0x2, 0xc45d, 0xf, 0x8e5, [0xf, 0x3f00]}]}, 0x5, [{0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x41d}}, {0x29, &(0x7f0000000c40)=ANY=[@ANYBLOB="2904000000000000008362c4ba5f3b85a26e19c7cf60d2a9e731a5518065fc0670a5d38cfcfa21b982e414c1c3fa35ac3819c85eb901261aafaed1ee8314e7117c98f1d150631084223f7269df252d6afcfc927a4224880a764e74a1e23c9d1995fd812c010b88082489edc2978e10d2ff3364c16b00"/130]}, {0xd9, &(0x7f0000000a40)=@string={0xd9, 0x3, "873e54effe8a0ec838e5641e27ab8b05e0cca7437fe78c34fae9c4b417feb44424def2e846516eb63016c31b7bf9d0722e4c7f805d4585445a8dd1e5bd97120ed09a760844fcb4e5b5164456af59244cd5be7435397e29f1b44932a56cc2874dba2af7a5606bc1908675889c0fe9c7dd975577baae9b7b089a91ae76940800812403f47ffbab6de508a716fba73d89430afc2cfd80ef123a51f1e9d722c61628a58b625692a4bd9e2ef495e218623e4491381782653d5767c213076d11ae5da17ad6b0319f9a7bbd2da281ddd97572b8d50d8a62735814"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x40e}}, {0x23, &(0x7f0000000000)=ANY=[@ANYBLOB="2303355a48f97166ef818245af7e2ff11a93c36fb6660d9cd8f7e259159fa3aea018e6b421ee8c95b9924282"]}]}) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) socket$kcm(0x11, 0x2, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) write(r2, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0xfdef) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$igmp(0x2, 0x3, 0x2) setgid(0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = socket(0x10, 0x3, 0x0) write(r9, &(0x7f0000000680)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff0500000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e31429fd3000175e63fb8d38a8700"/252, 0xfc) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 12m25.421645997s ago: executing program 2 (id=1973): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x3000)=nil, 0x3000}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000040)={0x28, 0x4, r1, r1, 0x20000004, 0xfffffffffffffff7, 0x3dff}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) readv(r3, &(0x7f0000003480)=[{&(0x7f0000001380)=""/4096, 0x1000}], 0x1) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000280)={0x28, 0x4, r1, 0x0, &(0x7f00004f9000/0x4000)=nil, 0x4000, 0xf3}) 12m25.1996927s ago: executing program 2 (id=1974): mq_open(&(0x7f0000000180)='.-A!\x00', 0x2, 0x1c5, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000001100)={'geneve1\x00', &(0x7f0000001200)=@ethtool_perm_addr={0x24}}) 12m25.007472139s ago: executing program 2 (id=1975): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x40, r2, 0x1, 0x70bd2f, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x4, 0x6e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x99e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}]]}, 0x40}, 0x1, 0x0, 0x0, 0x44091}, 0x4040000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) mincore(&(0x7f00003a2000/0x2000)=nil, 0x2000, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mremap(&(0x7f00005d9000/0x3000)=nil, 0x3000, 0x1000, 0x6, &(0x7f00006c9000/0x1000)=nil) ioctl$SNDCTL_DSP_CHANNELS(r3, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000000)) read$dsp(r3, &(0x7f00000005c0)=""/88, 0x58) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c0000001500010300000000000000000c00000008000100", @ANYRES8=r4], 0x1c}}, 0x4048004) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x6b7e369c4a3770ea) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r9, 0x4068aea3, &(0x7f0000000440)={0xb6, 0x0, 0xd}) ioctl$KDSKBMODE(r7, 0x4b45, &(0x7f0000000080)=0x1) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001900150000000000030000000a000000000000000000000020000980080000"], 0x3c}], 0x1, 0x0, 0x0, 0x40080}, 0x0) io_setup(0x82, &(0x7f0000000240)=0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000080)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x23}, 0x80, 0x0}, 0x44040040) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0) io_submit(r11, 0x1, &(0x7f0000000300)=[0x0]) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="3800001b23266ea5be23ea66", @ANYRESHEX=r1, @ANYBLOB="090200000000fedbdf2501000000050002000a00000014000700ff00000000000000000000000000000108000b00", @ANYRES32], 0x38}}, 0x0) 12m24.321190133s ago: executing program 2 (id=1977): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000400)) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f00000000c0)) sendmmsg$inet(r3, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000280)="9a", 0x1}], 0x1}}], 0x1, 0x4000000) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r6, 0x38, 0x7}, 0xc) r7 = inotify_init1(0x80000) inotify_add_watch(r7, &(0x7f0000000240)='.\x00', 0x60000726) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000080)={0x8}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={r6, 0x2c, &(0x7f0000000180)=[@in={0x2, 0x4e20, @rand_addr=0x64010100}, @in6={0xa, 0x4e21, 0x7, @private2, 0x4}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000100)={r9, 0x100}, 0x8) shutdown(r0, 0x0) shutdown(r0, 0x1) 12m23.105130864s ago: executing program 2 (id=1980): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f0000000b80)=""/195, 0xc3}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4080, 0xff0}, {&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f0000001000)=""/222, 0xde}, {&(0x7f00000007c0)=""/107, 0x6b}], 0xc}, 0xa1ffffff) 12m7.560493162s ago: executing program 32 (id=1980): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90b24fc60", 0x8c0}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000002e80)=[{&(0x7f0000000700)=""/189, 0xbd}, {&(0x7f0000000b80)=""/195, 0xc3}, {&(0x7f00000001c0)=""/124, 0x7c}, {&(0x7f0000000a80)=""/196, 0xc4}, {&(0x7f0000001d80)=""/4080, 0xff0}, {&(0x7f00000002c0)=""/179, 0xb3}, {&(0x7f0000000440)=""/125, 0x7d}, {&(0x7f0000000100)=""/85, 0x55}, {&(0x7f0000000580)=""/239, 0xef}, {&(0x7f00000009c0)=""/132, 0x84}, {&(0x7f0000001000)=""/222, 0xde}, {&(0x7f00000007c0)=""/107, 0x6b}], 0xc}, 0xa1ffffff) 3.892811703s ago: executing program 3 (id=6564): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)={0x128, 0x27, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x10d, 0x0, 0x0, 0x0, @str='6\xcd\xf0\n\xf7Oh\x19\xb9\x98\xd9[\xc6(\xd8\t\xa8u:\x8f\x12\x9d\x0fP\xab\xe1\x9e\xacL\xbcx\xfeX\xe7\x01\x04\x0f\x15\xd6t\xb1\xd2\xa8\xebG\x9a\xdf\xc0Q\x0e\xd2\xcb B\xce\x94\xc3\xa3\v\xb5cL\xc4\xb5\r\x0e\r\x83\xc9b\xc3\n\x8d~Q\xdd~cI\xae\x90Oq^\xef\xf2\x99\xd0c^I\x1c\xfcJ\x0e\xaaW\xbc\x01\xc4\xe2^\xecb\xd4\xec\xf6\x17\xedz\r\x1fx\x87X\x9f)\xbd\x82\xe0\xaf\x8f\xf4 \xc6\xa5\xf9Pk\x05r\x13\xeb\xbaXHd\x14\xda\xa2\x9f\x93v\xe4\xa5\x0e\xf7?\x96~\xf4\xc0\xc3\r\x12[\x96\xad\xf4drW\xb3\x16\r\xfc#\x00Q\a\x92\xb1\xe4\xa0t\x1fX\xfa\xb3\xaeq\xa6Hr>\xbd5\xb8\x9f\x02\xb8\x9d1EB\xf6}\\^X\r\xef)tC>\xb8\xf2\xa5 \x9b\xc6Z\xefj\x17\xcb\xc4~\xf8\xffa\xff \xac\x9c\xfb=\xb8\xc6\xdb\xe4A\xdd\xdd7\xb4\xb0\x8b\xdc\x8aa=I\x9a\xec\xb2\xda=O\x87\xd1\x97\x8e\xf4F\x84\x99A\x8e\xa55\x1e\xde\x05'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x128}], 0x1, 0x0, 0x0, 0x4000}, 0x20004090) r1 = syz_usb_connect(0x6, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=r0], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) getsockopt(r2, 0x1, 0x4a, 0x0, &(0x7f00000003c0)) clock_settime(0x1ed5d7403, &(0x7f0000000000)={0x77359400}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="1b1b", @ANYRES8]) 3.059070183s ago: executing program 3 (id=6567): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x182) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000), 0x101000, 0x800, 0x3, 0x1}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x8, r4}, 0x10) r5 = syz_clone(0x1002200, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) sendto$inet(r1, 0x0, 0x0, 0x4044081, &(0x7f0000000440)={0x2, 0x4e22, @empty}, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)={0x1c, r6, 0x1, 0x70bd2c, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x9}]}, 0x1c}}, 0x4) 2.874697639s ago: executing program 1 (id=6570): syz_open_dev$sndctrl(0x0, 0x0, 0x101700) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) writev(r1, &(0x7f00000024c0)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="c7007adc1515f9bdae98a07b7ddb3fce2bd1dd0631d45d25beff75aff702c8be5d0ea7bc9850be4917431b9aacf480d98ec2624a47df8fc12a64eba6fd313f25542f16a07f2f2b9430c0d9896336b2a43c9b34a9f354bcef8ae1984cd9a6f9c78fa47eeaa566103db22c33c4f2507bfeb97f7b83e260885b87e18849e26b7e927401cfb533866306044673fa021e06759807679e9bc78d98f8bd4c8d8a45e5c2af0d4c5ac6361118d8d0aa93e642845e64dc83528a161e9378932d2c2c64b97e566ce282767c3b7b0d7c0614f3", 0xcd}, {&(0x7f00000011c0)="1403e351410bc68a452e6b2fac92bdf7945b908bebda7196951bd790380f15280bb2c2adfcecb910ff3aa49f53a9b997b761289ac625cb2f6b1b6f4739fae8d90fd61b5eae43c2044777fc1e31df045e6a4b80eb0e235db139bac1724349404755c6e65ca692ffc8b3b7a1", 0x6b}, {&(0x7f0000001240)="ba866f7eb2ef29df409a2adcec8a009bdf178d2ba9d5d0e8c76422ccccf53b192d7827e9bab01cef2a385e11fc5b021ae7e7660125b7fc3ebcabb30249e9d256ca31de4b221d019058f47b4b885e4f1442d6fbd2f1bcc5b64a8da0556220fd3677f360a526a5d51d67d60452bc4354be22c6684c821e7a8895948d56a9a148ed54b7177c9d3ecd", 0x87}, {&(0x7f0000001300)="c963a41d88fc3c0563c93db235e136d7331f73dfe3c3afcfa6824b59b3132af7590ac79fa756f8b6", 0x28}, {&(0x7f0000001340)="2a7a5a0be9c6cd6e8c7d453444f73f2bb69dfdac0047dfd22f4c5ac6f25bf462a50318", 0x23}, {&(0x7f0000001440)="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", 0xca7}], 0x7) 2.811082127s ago: executing program 3 (id=6571): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}, 0x0, 0x6e6bc0}}, 0xb8}}, 0x2c000010) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r1, 0x0, 0x8008000000010, &(0x7f0000005e40)="17001e01020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 2.755695381s ago: executing program 1 (id=6572): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d00000001090224"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) 2.748430516s ago: executing program 3 (id=6573): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x23, &(0x7f0000000000)=0x101, 0x4) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f0000000040)={r4, 0xfff7}, 0x8) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r5, 0x0, 0x0, 0x814, &(0x7f0000000380)={0x2, 0x4e26, @remote}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000300)=0x3ff, 0x1000, 0x2) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_PIT2(r7, 0x4040ae77, &(0x7f0000000040)={0xfffffffe}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x2, 0x180, 0x4, 0x14, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbda], 0x4, 0x43100}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x4, 0x43, 0x2000001, 0x0, 0x2004ce, 0x0, 0xa7c, 0x68ff, 0x80, 0x9, 0x83], 0xeeeb9000, 0x202}) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x9, 0xf9, 0x81, 0x80}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x36, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x4, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x16, 0x7, 0xab, 0x6, 0x9, 0x9, 0xf7, 0x97}, {0x2000, 0x3000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0x31, 0x1, 0x7}, {0x3000, 0x3000, 0x4, 0x22, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0xc, 0xb0, 0x81}, {0x4000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0x100000, [0x3, 0x4, 0x3, 0x8]}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000003b40)={0x1, [{0x2, 0x118, 0x9, &(0x7f0000000140)="98d0a3af5c6b5c51528c5b5633bbed2ece1166b226046de55f74ef43e980e453d21d55"}, {0x4a2283962ed39e8b, 0x28, 0x1, &(0x7f0000000240)="d6ebe53243"}, {0x0, 0x0, 0x0, 0x0}, {0x1, 0x0, 0xb30, 0x0}, {0x1, 0x0, 0x2, 0x0}, {0x1, 0x0, 0x1, 0x0}, {0x2, 0x0, 0x10, 0x0}, {0x1, 0x0, 0xd, 0x0}, {0x0, 0x0, 0x401, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x79c, &(0x7f0000002840)}, {0x1, 0x0, 0x21ef, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0x101, &(0x7f0000002a00)}, {0x1, 0x0, 0x4, 0x0}, {0x1, 0x0, 0x59, 0x0}]}) r9 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x80800) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'ip6erspan0\x00'}) 1.93820135s ago: executing program 4 (id=6575): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto(r1, 0x0, 0x0, 0x40040, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.846590558s ago: executing program 4 (id=6576): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000000000008001240000000000500050002000000050004000000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f00000000c0)={0x3, "2021af5168abac22a20ae3d23cb050156902ba35a1fc7d4893f42da3a82d5a86", 0x20, 0x5, 0x7, 0x8, 0x3}) sendmsg(r0, &(0x7f0000000000)={0x0, 0x46, &(0x7f00000000c0), 0x1}, 0x40000) 1.719138514s ago: executing program 4 (id=6577): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfdff, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 1.718798949s ago: executing program 3 (id=6578): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x8000) (async) r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16], 0x0) 1.666645274s ago: executing program 4 (id=6579): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r2 = socket$kcm(0xa, 0x7, 0x0) sendmsg$sock(r2, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000021c0), 0x4) getsockname$inet6(r1, 0x0, &(0x7f0000002280)) r3 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r3, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000001e00)=""/4096, 0x1000}, {&(0x7f00000009c0)=""/140, 0x8c}, {&(0x7f00000010c0)=""/207, 0xcf}, {&(0x7f00000001c0)=""/125, 0x7d}, {&(0x7f00000006c0)=""/19, 0x13}], 0x5}}], 0x1, 0x20, 0x0) write(r3, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000002c0)=0x0) syz_open_procfs(r5, &(0x7f0000000300)='stack\x00') pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r7, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r8 = dup(r7) write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18) r9 = socket(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000}}, 0x1c) sendmmsg$inet(r9, &(0x7f0000000340)=[{{&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000004340)=ANY=[], 0xe8}}], 0x1, 0x4010) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r8}}) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x2002003, &(0x7f0000000380)=ANY=[@ANYBLOB="4272616e733d66642c99b6af90dedf7266646e6f3d", @ANYRESHEX=r8, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',access=any,uname=-{,mask=^MAY_WRITE,dont_hash,dont_appraise,\x00']) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r7], 0x8) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_opts(r1, 0x29, 0x39, &(0x7f0000000000)=""/82, &(0x7f0000000080)=0x52) 886.115418ms ago: executing program 4 (id=6583): r0 = syz_usb_connect$uac3(0x3, 0x9c, &(0x7f0000000100)=ANY=[@ANYBLOB="12010003000000403512100040000102030109028a000301046008080b0001012430010904000000010130000a2401f5260005000000132403050004030306070000000400010004000924050602"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) ioctl$MEDIA_REQUEST_IOC_QUEUE(0xffffffffffffffff, 0x7c80, 0x0) r1 = syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$uac3(r1, &(0x7f0000000480)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xff, @string={0xff, 0x3, "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"}}}, &(0x7f0000000700)={0x44, &(0x7f00000004c0)={0x20, 0xe, 0x42, "0d9c68a81d873f8bcc0b1619eff3ac2cdccfdda427e667773e3317d87bf6318f61ec9367298ded50a591423804f3ebbff2b377862291ce61f8555b1a250ee97bedc1"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000005c0)={0x20, 0x81, 0x1, "be"}, &(0x7f0000000600)={0x20, 0x82, 0x3, '3yd'}, &(0x7f0000000640)={0x20, 0x83, 0x3, "bc72b4"}, &(0x7f0000000680)={0x20, 0x84, 0x3, "59c66d"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "c5efcd"}}) syz_usb_control_io$uac3(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000180)=ANY=[], 0x0}, 0x0) 885.823545ms ago: executing program 1 (id=6584): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2500, 0x7315, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x4000, 0x2, 0x4, 0x0, @multicast1, @multicast1}}}}) 729.760895ms ago: executing program 0 (id=6585): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x280b00, 0x0) unshare(0x26040900) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) fsync(r0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e07d8230c"], 0xa) mknodat(0xffffffffffffff9c, 0x0, 0x81c0, 0x0) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) 729.549482ms ago: executing program 1 (id=6586): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f00000007c0)=ANY=[@ANYBLOB="14000016", @ANYRES16=r2, @ANYBLOB="030725bd7000000000001f"], 0x14}, 0x1, 0x0, 0x0, 0x2000c094}, 0x0) 598.766587ms ago: executing program 0 (id=6587): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0xfdff, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 596.100067ms ago: executing program 1 (id=6588): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001b40), 0x20341, 0x0) (async, rerun: 32) syz_usb_connect(0x2, 0x2d, &(0x7f0000000d40)={{0x12, 0x1, 0x110, 0x23, 0x6b, 0x25, 0x10, 0x681, 0x10, 0x525e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x64, 0x99, 0x10, 0x70, "", [{{0x9, 0x4, 0x7c, 0x66, 0x1, 0xa, 0x65, 0x6d, 0xf2, [], [{{0x9, 0x5, 0x2, 0x0, 0x40, 0x3, 0x0, 0x6}}]}}]}}]}}, 0x0) (async, rerun: 32) r1 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) (async) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) (async) r3 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x6a, 0x5, 0x0, &(0x7f0000000000)) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, r4, 0x1, 0x70bd2c, 0x44, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_MRU={0x6, 0x1d, 0xfffc}]}, 0x44}}, 0x4) (async) r6 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x12) r7 = syz_open_pts(r6, 0x183000) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x18) 437.549416ms ago: executing program 0 (id=6589): syz_open_dev$sndctrl(0x0, 0x0, 0x101700) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) writev(r1, &(0x7f00000024c0)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="c7007adc1515f9bdae98a07b7ddb3fce2bd1dd0631d45d25beff75aff702c8be5d0ea7bc9850be4917431b9aacf480d98ec2624a47df8fc12a64eba6fd313f25542f16a07f2f2b9430c0d9896336b2a43c9b34a9f354bcef8ae1984cd9a6f9c78fa47eeaa566103db22c33c4f2507bfeb97f7b83e260885b87e18849e26b7e927401cfb533866306044673fa021e06759807679e9bc78d98f8bd4c8d8a45e5c2af0d4c5ac6361118d8d0aa93e642845e64dc83528a161e9378932d2c2c64b97e566ce282767c3b7b0d7c0614f3", 0xcd}, {&(0x7f00000011c0)="1403e351410bc68a452e6b2fac92bdf7945b908bebda7196951bd790380f15280bb2c2adfcecb910ff3aa49f53a9b997b761289ac625cb2f6b1b6f4739fae8d90fd61b5eae43c2044777fc1e31df045e6a4b80eb0e235db139bac1724349404755c6e65ca692ffc8b3b7a1", 0x6b}, {&(0x7f0000001240)="ba866f7eb2ef29df409a2adcec8a009bdf178d2ba9d5d0e8c76422ccccf53b192d7827e9bab01cef2a385e11fc5b021ae7e7660125b7fc3ebcabb30249e9d256ca31de4b221d019058f47b4b885e4f1442d6fbd2f1bcc5b64a8da0556220fd3677f360a526a5d51d67d60452bc4354be22c6684c821e7a8895948d56a9a148ed54b7177c9d3ecd", 0x87}, {&(0x7f0000001300)="c963a41d88fc3c0563c93db235e136d7331f73dfe3c3afcfa6824b59b3132af7590ac79fa756f8b6", 0x28}, {&(0x7f0000001340)="2a7a5a0be9c6cd6e8c7d453444f73f2bb69dfdac0047dfd22f4c5ac6f25bf462a50318", 0x23}, {&(0x7f0000001440)="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", 0xca7}], 0x7) 387.326444ms ago: executing program 1 (id=6590): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)={0x2, 0x10, @remote}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="a9050000004074640001000000", 0x67}, {&(0x7f00000003c0)="f38b350cb3f762fd25ed0e0522dd4396dad7a8450c9310b48c91ad5104d324", 0x1f}], 0x2}}], 0x1, 0x800) socket$kcm(0x10, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x7}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r4, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09040000010209"], 0x0) recvmmsg(r4, &(0x7f00000022c0)=[{{0x0, 0x0, 0x0}, 0x72}], 0x1, 0x10000, 0x0) finit_module(r3, 0x0, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="78010000170001000000000000000000fc0000000000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00"/104, @ANYRES64=r3, @ANYBLOB="9c2484141f9e5d2253f188dc7d2635b546f2935db6f56d4d1f99af41741aab978b483362ec31ac1911cd8026b47c9031bdfcd7fb9d22442279e041d55c7a3ef0788ce75b4851aabcbe405ca45466fa403020cb53a2cbc89d0145ebcc17cf0c774874372d5006ed3eda0138b8fb2fe9bfdf176ee1ba50795c9c8f43d2cecaec70a6c3dbbded745e06abba699179b312ef3dc882b368d3cbd250442c53bde10ce3eab1fbc1da0f259183cf", @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000000000000000000000000a00000000000000", @ANYRES32=r5, @ANYRES32=0xee00, @ANYRES16=r2], 0x178}}, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="120100004366b408c70b0800c84f0102030109022d000100000000090400"], 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e00095a0c"], 0x8) setsockopt$MRT6_PIM(r0, 0x29, 0xcf, &(0x7f0000000100)=0x1, 0x4) r7 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r7, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x8001, 0x4000008}) sendmsg$inet(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x1000000000000092, 0x0, 0x0, 0x1f00c00e}, 0x40010) 326.344321ms ago: executing program 0 (id=6591): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x8043, 0x7, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x300000000000000) 279.591323ms ago: executing program 0 (id=6592): ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) r0 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x18, 0x9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r2, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0xffc4}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x7fffffff, 0x30}, 0xc) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) r3 = dup(r2) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x13f, 0x1}}, 0xfed7) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x20) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x9, @loopback, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r1, &(0x7f00000038c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)='A7', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000680)='&', 0x1}], 0x1}}], 0x2, 0x4000801) read$FUSE(r0, &(0x7f0000003940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000005980)={0x20, 0x0, r4, {0x0, 0x16}}, 0x20) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000100)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4096, 0x1000, 0x1, 0x0}, &(0x7f0000002100)=0x40) 171.233439ms ago: executing program 4 (id=6593): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006325a640402000498b4d00000001090224"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)) 127.754292ms ago: executing program 0 (id=6594): mknod$loop(&(0x7f0000000000)='./file0\x00', 0x6000, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0xa4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000001000)=ANY=[]) (async) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r2 = dup2(r1, r1) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r3, &(0x7f0000004b40)={0x0, 0x0, &(0x7f0000004b00)={&(0x7f0000004640)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x20004000}, 0x40000c4) (async) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000300)={'\x00', 0x2, 0x40000200, 0x3, 0x40000000, 0x5}) prlimit64(0x0, 0xf, &(0x7f0000000140)={0xa, 0x2}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000240)=0x7) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) (async) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r8 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r8, 0x1000006) (async) fcntl$addseals(r8, 0x409, 0x7) (async) r9 = ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r8, 0x0, 0x0, 0x1000000}) ioctl$DMA_BUF_IOCTL_SYNC(r9, 0x40086200, &(0x7f0000000100)=0x2) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) (async) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000040)={0x7, 0xc3, 0x4f4, 0x8}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) (async) ioctl$sock_SIOCETHTOOL(r3, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x2, "2a16"}}) socket(0x23, 0x1, 0x3a) 0s ago: executing program 3 (id=6595): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x8043, 0x7, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f0000000280)={&(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x40, 0x1}, 0x4}}, 0x10, 0x0}, 0xfffffff5) kernel console output (not intermixed with test programs): ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1080.016667][T22702] RSP: 002b:00007ff0dfb06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1080.016691][T22702] RAX: ffffffffffffffda RBX: 00007ff0e1b25fa0 RCX: 00007ff0e18ace59 [ 1080.016708][T22702] RDX: 00002000000002c0 RSI: 00000000c0585605 RDI: 0000000000000003 [ 1080.016725][T22702] RBP: 00007ff0dfb06090 R08: 0000000000000000 R09: 0000000000000000 [ 1080.016740][T22702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1080.016754][T22702] R13: 00007ff0e1b26038 R14: 00007ff0e1b25fa0 R15: 00007fff8dd19ce8 [ 1080.016788][T22702] [ 1080.249791][ T823] mcp2221 0003:04D8:00DD.002E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1080.284153][ T5616] Bluetooth: hci2: command 0x0406 tx timeout [ 1080.781626][T21845] usb 1-1: USB disconnect, device number 102 [ 1080.896047][ T37] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1081.054712][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 1081.057478][ T37] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1081.104982][ T37] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 1081.105030][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.105055][ T37] usb 2-1: Product: syz [ 1081.105073][ T37] usb 2-1: Manufacturer: syz [ 1081.105090][ T37] usb 2-1: SerialNumber: syz [ 1081.232530][ T823] usb 4-1: USB disconnect, device number 5 [ 1081.552065][T22708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1081.564714][T22708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1081.613305][ T37] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1081.614230][ T37] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1081.842863][ T37] usb 2-1: USB disconnect, device number 14 [ 1082.044732][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1082.144141][ T5705] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1082.301779][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 1082.304803][ T5705] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1082.306397][ T5705] usb 5-1: config 42 has an invalid interface number: 178 but max is 0 [ 1082.306425][ T5705] usb 5-1: config 42 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.306448][ T5705] usb 5-1: config 42 has no interface number 0 [ 1082.306483][ T5705] usb 5-1: config 42 interface 178 has no altsetting 0 [ 1082.310462][ T5705] usb 5-1: New USB device found, idVendor=045e, idProduct=00f8, bcdDevice=e0.e5 [ 1082.310495][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.310519][ T5705] usb 5-1: Product: syz [ 1082.310536][ T5705] usb 5-1: Manufacturer: syz [ 1082.310554][ T5705] usb 5-1: SerialNumber: syz [ 1082.666215][ T5705] uvcvideo 5-1:42.178: probe with driver uvcvideo failed with error -22 [ 1082.683395][ T5705] usb 5-1: USB disconnect, device number 66 [ 1082.962939][T22742] netlink: 'syz.0.5925': attribute type 1 has an invalid length. [ 1084.016304][ T5625] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1084.533776][T22774] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x32314142, 5, 0, 0, 0) [ 1085.023014][ T5784] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1085.199201][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 1085.202254][ T5784] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.202332][ T5784] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1085.206598][ T5784] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1085.206625][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.206644][ T5784] usb 2-1: Product: syz [ 1085.206658][ T5784] usb 2-1: Manufacturer: syz [ 1085.206670][ T5784] usb 2-1: SerialNumber: syz [ 1085.283976][ T5784] usb 2-1: config 0 descriptor?? [ 1085.302672][ T5784] appledisplay 2-1:0.0: Could not find int-in endpoint [ 1085.315520][ T5784] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1085.443694][T22805] binder: 22799:22805 ioctl c0306201 200000000640 returned -22 [ 1085.513034][T22785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1085.513681][T22785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1085.622991][ T5775] usb 2-1: USB disconnect, device number 15 [ 1086.500360][ T32] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 1086.584656][ T5705] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1086.584712][ T823] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1086.660828][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 1086.674590][ T32] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1086.674654][ T32] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1086.674681][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1086.674709][ T32] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1086.674736][ T32] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1086.674784][ T32] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1086.674810][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1086.736366][ T823] usb 2-1: device descriptor read/64, error -71 [ 1086.772710][ T5705] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1086.772801][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.772818][ T5705] usb 4-1: Product: syz [ 1086.772830][ T5705] usb 4-1: Manufacturer: syz [ 1086.772841][ T5705] usb 4-1: SerialNumber: syz [ 1086.833464][ T5705] usb 4-1: config 0 descriptor?? [ 1086.950943][ T32] usb 1-1: usb_control_msg returned -32 [ 1086.950997][ T32] usbtmc 1-1:16.0: can't read capabilities [ 1087.040351][ T823] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1087.180957][ T823] usb 2-1: device descriptor read/64, error -71 [ 1087.193726][ T5705] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 1087.314341][ T823] usb usb2-port1: attempt power cycle [ 1087.369891][T22843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.370536][T22843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1087.371777][ T5705] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1087.371807][ T5705] usb 5-1: config 0 has no interface number 0 [ 1087.371855][ T5705] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1087.371885][ T5705] usb 5-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1087.371911][ T5705] usb 5-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1087.371959][ T5705] usb 5-1: config 0 interface 1 has no altsetting 0 [ 1087.371997][ T5705] usb 5-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 1087.372024][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1087.403454][ T5705] usb 5-1: config 0 descriptor?? [ 1087.712257][ T823] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1087.736373][ T823] usb 2-1: device descriptor read/8, error -71 [ 1088.005112][ T823] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1088.027482][ T823] usb 2-1: device descriptor read/8, error -71 [ 1088.106232][ T5705] uclogic 0003:145F:0212.002F: failed retrieving string descriptor #100: -71 [ 1088.106280][ T5705] uclogic 0003:145F:0212.002F: failed retrieving pen parameters: -71 [ 1088.106294][ T5705] uclogic 0003:145F:0212.002F: pen probing failed: -71 [ 1088.106308][ T5705] uclogic 0003:145F:0212.002F: failed probing parameters: -71 [ 1088.106396][ T5705] uclogic 0003:145F:0212.002F: probe with driver uclogic failed with error -71 [ 1088.133090][ T5705] usb 5-1: USB disconnect, device number 67 [ 1088.157317][ T823] usb usb2-port1: unable to enumerate USB device [ 1089.306378][ T823] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1089.462147][T21845] usb 1-1: USB disconnect, device number 103 [ 1089.503054][ T823] usb 5-1: Using ep0 maxpacket: 16 [ 1089.508391][ T823] usb 5-1: config 0 has no interfaces? [ 1089.508432][ T823] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1089.508460][ T823] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.553032][ T823] usb 5-1: config 0 descriptor?? [ 1089.610514][ T823] usb 4-1: USB disconnect, device number 6 [ 1089.836704][T22861] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5968'. [ 1089.989505][T21845] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 1089.991642][ T32] usb 5-1: USB disconnect, device number 68 [ 1090.152300][T21845] usb 1-1: Using ep0 maxpacket: 32 [ 1090.158995][T21845] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1090.159030][T21845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.159055][T21845] usb 1-1: Product: syz [ 1090.159073][T21845] usb 1-1: Manufacturer: syz [ 1090.159091][T21845] usb 1-1: SerialNumber: syz [ 1090.202464][T21845] usb 1-1: config 0 descriptor?? [ 1090.344934][T22874] overlayfs: failed to resolve './bus': -2 [ 1090.354103][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ccd9400: rx timeout, send abort [ 1090.862919][T21845] peak_usb 1-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 1090.896362][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ccd9400: abort rx timeout. Force session deactivation [ 1090.896559][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ccd9000: rx timeout, send abort [ 1091.184398][T21845] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1091.203138][T21845] usb 1-1: USB disconnect, device number 104 [ 1091.394307][T22879] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1091.394329][T22879] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1091.438945][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ccd9000: abort rx timeout. Force session deactivation [ 1091.463614][T22898] fuse: Bad value for 'fd' [ 1091.519787][ T5705] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 1091.558255][T22879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1091.558283][T22879] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1091.701566][ T5705] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1091.701601][ T5705] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.736480][ T5705] usb 4-1: config 0 descriptor?? [ 1091.796916][ T5705] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1092.047722][ T823] hid (null): global environment stack underflow [ 1092.047774][ T823] hid (null): global environment stack underflow [ 1092.047807][ T823] hid (null): unknown global tag 0xd [ 1092.105623][T22912] overlayfs: missing 'workdir' [ 1092.123737][ T5625] block nbd1: Receive control failed (result -32) [ 1092.177290][ T823] hid-generic 0043:0000:0000.0030: global environment stack underflow [ 1092.177313][ T823] hid-generic 0043:0000:0000.0030: item 0 2 1 11 parsing failed [ 1092.183349][ T5705] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 1092.221965][ T823] hid-generic 0043:0000:0000.0030: probe with driver hid-generic failed with error -22 [ 1092.448629][T22879] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1092.448655][T22879] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1092.637141][ T5705] gspca_cpia1: usb_control_msg 02, error -71 [ 1092.638148][ T5705] gspca_cpia1: usb_control_msg 05, error -71 [ 1092.638167][ T5705] cpia1 4-1:0.0: unexpected systemstate: 00 [ 1092.726069][ T5705] usb 4-1: USB disconnect, device number 7 [ 1092.902798][T22879] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1092.902828][T22879] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1093.513793][ T5784] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1093.699859][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 1093.707271][ T5784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1093.723981][ T5784] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1093.724023][ T5784] usb 2-1: can't read configurations, error -22 [ 1093.915392][ T5784] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1094.117663][T22941] FAULT_INJECTION: forcing a failure. [ 1094.117663][T22941] name failslab, interval 1, probability 0, space 0, times 0 [ 1094.117705][T22941] CPU: 1 UID: 0 PID: 22941 Comm: syz.3.5994 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1094.117737][T22941] Tainted: [L]=SOFTLOCKUP [ 1094.117746][T22941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1094.117762][T22941] Call Trace: [ 1094.117770][T22941] [ 1094.117781][T22941] dump_stack_lvl+0xe8/0x150 [ 1094.117817][T22941] should_fail_ex+0x46b/0x600 [ 1094.117858][T22941] should_failslab+0xa8/0x100 [ 1094.117890][T22941] kmem_cache_alloc_noprof+0x87/0x680 [ 1094.117919][T22941] ? do_getname_kernel+0x54/0x230 [ 1094.117949][T22941] do_getname_kernel+0x54/0x230 [ 1094.117976][T22941] ? kern_path+0x1b/0x150 [ 1094.118005][T22941] kern_path+0x25/0x150 [ 1094.118034][T22941] lookup_bdev+0xc8/0x290 [ 1094.118075][T22941] ? __pfx_lookup_bdev+0x10/0x10 [ 1094.118108][T22941] ? rcu_is_watching+0x15/0xb0 [ 1094.118141][T22941] ? kfree+0x4d/0x6c0 [ 1094.118171][T22941] get_tree_bdev_flags+0xbb/0x4f0 [ 1094.118206][T22941] ? __pfx_ext4_fill_super+0x10/0x10 [ 1094.118235][T22941] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 1094.118280][T22941] vfs_get_tree+0x92/0x2a0 [ 1094.118325][T22941] do_new_mount+0x341/0xd30 [ 1094.118351][T22941] ? apparmor_capable+0x126/0x170 [ 1094.118389][T22941] ? __pfx_do_new_mount+0x10/0x10 [ 1094.118417][T22941] ? ns_capable+0x89/0xe0 [ 1094.118456][T22941] ? user_path_at+0xd4/0x160 [ 1094.118491][T22941] ? user_path_at+0xd4/0x160 [ 1094.118524][T22941] __se_sys_mount+0x31d/0x420 [ 1094.118558][T22941] ? __pfx___se_sys_mount+0x10/0x10 [ 1094.118592][T22941] ? __x64_sys_mount+0x20/0xc0 [ 1094.118621][T22941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.118647][T22941] do_syscall_64+0x174/0x580 [ 1094.118683][T22941] ? trace_irq_disable+0x3b/0x140 [ 1094.118711][T22941] ? clear_bhb_loop+0x40/0x90 [ 1094.118740][T22941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.118764][T22941] RIP: 0033:0x7fd0a47ace59 [ 1094.118786][T22941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.118806][T22941] RSP: 002b:00007fd0a2a06028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1094.118831][T22941] RAX: ffffffffffffffda RBX: 00007fd0a4a25fa0 RCX: 00007fd0a47ace59 [ 1094.118849][T22941] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000200000000100 [ 1094.118866][T22941] RBP: 00007fd0a2a06090 R08: 0000000000000000 R09: 0000000000000000 [ 1094.118882][T22941] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000002 [ 1094.118898][T22941] R13: 00007fd0a4a26038 R14: 00007fd0a4a25fa0 R15: 00007ffcdf152688 [ 1094.118934][T22941] [ 1094.119455][T22941] /dev/loop3: Can't lookup blockdev [ 1094.121859][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 1094.184344][ T5784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1094.235089][ T5784] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1094.235134][ T5784] usb 2-1: can't read configurations, error -22 [ 1094.262382][ T5784] usb usb2-port1: attempt power cycle [ 1094.809972][T22958] vivid-000: ================= START STATUS ================= [ 1094.810000][T22958] vivid-000: Test Pattern: 75% Colorbar [ 1094.810028][T22958] vivid-000: Fill Percentage of Frame: 100 [ 1094.810053][T22958] vivid-000: Horizontal Movement: No Movement [ 1094.810077][T22958] vivid-000: Vertical Movement: No Movement [ 1094.810098][T22958] vivid-000: OSD Text Mode: All [ 1094.810119][T22958] vivid-000: Show Border: false [ 1094.810140][T22958] vivid-000: Show Square: false [ 1094.810161][T22958] vivid-000: Sensor Flipped Horizontally: false [ 1094.810183][T22958] vivid-000: Sensor Flipped Vertically: false [ 1094.810206][T22958] vivid-000: Insert SAV Code in Image: false [ 1094.810229][T22958] vivid-000: Insert EAV Code in Image: false [ 1094.810250][T22958] vivid-000: Insert Video Guard Band: false [ 1094.810271][T22958] vivid-000: Reduced Framerate: false [ 1094.810291][T22958] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 1094.810314][T22958] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 1094.810337][T22958] vivid-000: Enable Capture Cropping: true [ 1094.810359][T22958] vivid-000: Enable Capture Composing: true [ 1094.810381][T22958] vivid-000: Enable Capture Scaler: false [ 1094.810403][T22958] vivid-000: Timestamp Source: End of Frame [ 1094.810424][T22958] vivid-000: Colorspace: sRGB [ 1094.810445][T22958] vivid-000: Transfer Function: Default [ 1094.810467][T22958] vivid-000: Y'CbCr Encoding: Default [ 1094.810489][T22958] vivid-000: HSV Encoding: Hue 0-179 [ 1094.810510][T22958] vivid-000: Quantization: Default [ 1094.847047][ T5784] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1094.869575][T22958] [ 1094.869589][T22958] vivid-000: Apply Alpha To Red Only: false [ 1094.869651][T22958] vivid-000: Standard Aspect Ratio: 4x3 [ 1094.869715][T22958] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 1094.869806][T22958] vivid-000: DV Timings: 640x480p59 inactive [ 1094.869880][T22958] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 1094.869924][T22958] vivid-000: Maximum EDID Blocks: 2 [ 1094.870009][T22958] vivid-000: Limited RGB Range (16-235): false [ 1094.870073][T22958] vivid-000: Rx RGB Quantization Range: Automatic [ 1094.870136][T22958] vivid-000: Power Present: 0x00000001 [ 1094.870285][T22958] tpg source WxH: 640x360 (R'G'B) [ 1094.870623][T22958] tpg field: 1 [ 1094.870653][T22958] tpg crop: (0,0)/640x360 [ 1094.870688][T22958] tpg compose: (0,0)/640x360 [ 1094.870737][T22958] tpg colorspace: 5 [ 1094.870762][T22958] tpg transfer function: 0/0 [ 1094.870800][T22958] tpg quantization: 1/0 [ 1094.870831][T22958] tpg RGB range: 0/2 [ 1094.870855][T22958] vivid-000: ================== END STATUS ================== [ 1094.875325][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 1094.889326][ T5784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1094.923181][ T5784] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1094.923225][ T5784] usb 2-1: can't read configurations, error -22 [ 1095.086082][ T5784] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1095.090265][ T5775] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 1095.130667][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 1095.133155][ T5784] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1095.135325][ T5784] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 1095.135365][ T5784] usb 2-1: can't read configurations, error -22 [ 1095.156396][ T5784] usb usb2-port1: unable to enumerate USB device [ 1095.238401][ T5775] usb 1-1: device descriptor read/64, error -71 [ 1095.498251][ T5775] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 1095.639518][ T5775] usb 1-1: device descriptor read/64, error -71 [ 1095.764033][ T5775] usb usb1-port1: attempt power cycle [ 1095.877711][ T9] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1096.054932][ T9] usb 5-1: config 2 has an invalid interface number: 174 but max is 0 [ 1096.054964][ T9] usb 5-1: config 2 has no interface number 0 [ 1096.055014][ T9] usb 5-1: config 2 interface 174 altsetting 0 has an endpoint descriptor with address 0x9E, changing to 0x8E [ 1096.055036][ T9] usb 5-1: config 2 interface 174 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 1023 [ 1096.055056][ T9] usb 5-1: config 2 interface 174 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1096.060544][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=22.7e [ 1096.060583][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.060599][ T9] usb 5-1: Product: syz [ 1096.060611][ T9] usb 5-1: Manufacturer: syz [ 1096.060622][ T9] usb 5-1: SerialNumber: syz [ 1096.135049][T22969] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1096.155448][ T5775] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 1096.171518][ T5775] usb 1-1: device descriptor read/8, error -71 [ 1096.357038][ T9] usb 5-1: probing VID:PID(0424:012C) [ 1096.383913][ T9] usb 5-1: vub300 testing BULK IN EndPoint(0) 8E [ 1096.383946][ T9] usb 5-1: vub300 testing UNKNOWN EndPoint(1) 82 [ 1096.383968][ T9] usb 5-1: vub300 ignoring EndPoint(1) 82 [ 1096.383987][ T9] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 1096.429966][ T9] vub300 5-1:2.174: probe with driver vub300 failed with error -22 [ 1096.430745][ T5775] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 1096.454862][ T5775] usb 1-1: device descriptor read/8, error -71 [ 1096.573288][ T5775] usb usb1-port1: unable to enumerate USB device [ 1096.579713][ T9] usb 5-1: USB disconnect, device number 70 [ 1096.886637][ T37] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1097.052102][ T37] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1097.052127][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1097.056027][ T37] usb 2-1: config 0 descriptor?? [ 1097.295715][ T37] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0e [ 1097.295737][ T37] hackrf 2-1:0.0: Could not detect board [ 1097.295803][ T37] hackrf 2-1:0.0: probe with driver hackrf failed with error -71 [ 1097.329199][ T37] usb 2-1: USB disconnect, device number 24 [ 1097.416635][T22981] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6011'. [ 1098.265943][T23001] Unsupported ieee802154 address type: 0 [ 1098.369847][T23003] FAULT_INJECTION: forcing a failure. [ 1098.369847][T23003] name failslab, interval 1, probability 0, space 0, times 0 [ 1098.369890][T23003] CPU: 0 UID: 0 PID: 23003 Comm: syz.4.6020 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1098.369923][T23003] Tainted: [L]=SOFTLOCKUP [ 1098.369933][T23003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1098.369948][T23003] Call Trace: [ 1098.369958][T23003] [ 1098.369968][T23003] dump_stack_lvl+0xe8/0x150 [ 1098.370012][T23003] should_fail_ex+0x46b/0x600 [ 1098.370053][T23003] should_failslab+0xa8/0x100 [ 1098.370086][T23003] __kmalloc_noprof+0xdf/0x7b0 [ 1098.370113][T23003] ? kfree+0x4d/0x6c0 [ 1098.370137][T23003] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1098.370172][T23003] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1098.370201][T23003] ? tomoyo_domain+0xd7/0x130 [ 1098.370236][T23003] ? tomoyo_path_number_perm+0x219/0x630 [ 1098.370274][T23003] tomoyo_path_number_perm+0x246/0x630 [ 1098.370314][T23003] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1098.370349][T23003] ? __lock_acquire+0x6b5/0x2d10 [ 1098.370381][T23003] ? do_raw_spin_lock+0x12b/0x2f0 [ 1098.370439][T23003] ? __fget_files+0x2a/0x420 [ 1098.370471][T23003] ? __fget_files+0x2a/0x420 [ 1098.370498][T23003] ? __fget_files+0x3a6/0x420 [ 1098.370526][T23003] ? __fget_files+0x2a/0x420 [ 1098.370559][T23003] security_file_ioctl+0xc3/0x2a0 [ 1098.370596][T23003] __se_sys_ioctl+0x47/0x170 [ 1098.370633][T23003] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.370660][T23003] do_syscall_64+0x174/0x580 [ 1098.370696][T23003] ? trace_irq_disable+0x3b/0x140 [ 1098.370724][T23003] ? clear_bhb_loop+0x40/0x90 [ 1098.370752][T23003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1098.370776][T23003] RIP: 0033:0x7ff0e18ace59 [ 1098.370798][T23003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1098.370820][T23003] RSP: 002b:00007ff0dfb06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1098.370845][T23003] RAX: ffffffffffffffda RBX: 00007ff0e1b25fa0 RCX: 00007ff0e18ace59 [ 1098.370863][T23003] RDX: 00002000000000c0 RSI: 00000000c018aec0 RDI: 0000000000000004 [ 1098.370879][T23003] RBP: 00007ff0dfb06090 R08: 0000000000000000 R09: 0000000000000000 [ 1098.370895][T23003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1098.370909][T23003] R13: 00007ff0e1b26038 R14: 00007ff0e1b25fa0 R15: 00007fff8dd19ce8 [ 1098.370945][T23003] [ 1098.370984][T23003] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1098.892855][T21845] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1099.069635][T21845] usb 4-1: Using ep0 maxpacket: 8 [ 1099.085253][T21845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1099.085296][T21845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1099.085321][T21845] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1099.085371][T21845] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 1099.085396][T21845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1099.177625][T21845] usb 4-1: config 0 descriptor?? [ 1099.434589][ T5775] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1099.628282][ T5775] usb 5-1: device descriptor read/64, error -71 [ 1099.806610][ T5705] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 1099.835452][T21845] usbhid 4-1:0.0: can't add hid device: -71 [ 1099.836774][T21845] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1099.860669][T21845] usb 4-1: USB disconnect, device number 8 [ 1099.890169][ T5775] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1099.987532][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 1099.990186][ T5705] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 1099.990218][ T5705] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1099.990243][ T5705] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1099.990267][ T5705] usb 1-1: config 1 has no interface number 0 [ 1099.990314][ T5705] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1099.990343][ T5705] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1099.990390][ T5705] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1099.990417][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.030940][ T5775] usb 5-1: device descriptor read/64, error -71 [ 1100.120306][ T5705] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 1100.172906][ T5775] usb usb5-port1: attempt power cycle [ 1100.365432][ T5705] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 1100.541576][ T5775] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1100.564802][ T5775] usb 5-1: device descriptor read/8, error -71 [ 1100.604301][T21845] usb 1-1: USB disconnect, device number 109 [ 1100.616976][T21845] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 1100.830849][ T5775] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1100.845461][ T5775] usb 5-1: device descriptor read/8, error -71 [ 1100.963952][ T5775] usb usb5-port1: unable to enumerate USB device [ 1101.344566][T23069] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6044'. [ 1101.494896][T23073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6046'. [ 1101.728302][T23079] input: syz1 as /devices/virtual/input/input52 [ 1101.875342][T21845] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1101.951505][T23079] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer. [ 1102.026153][ T5784] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1102.071689][T21845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1102.071722][T21845] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 1102.071749][T21845] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 1102.071765][T21845] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 1102.115901][T21845] usb 2-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 1102.115926][T21845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.115942][T21845] usb 2-1: Product: syz [ 1102.115953][T21845] usb 2-1: Manufacturer: syz [ 1102.115965][T21845] usb 2-1: SerialNumber: syz [ 1102.121876][T21845] usb 2-1: config 0 descriptor?? [ 1102.154758][T21845] ums-isd200 2-1:0.0: USB Mass Storage device detected [ 1102.210752][ T5784] usb 4-1: Using ep0 maxpacket: 32 [ 1102.214046][ T5784] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1102.229438][ T5784] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 1102.229887][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.230447][ T5784] usb 4-1: Product: syz [ 1102.230481][ T5784] usb 4-1: Manufacturer: syz [ 1102.230499][ T5784] usb 4-1: SerialNumber: syz [ 1102.547942][T21845] ums-isd200 2-1:0.0: probe with driver ums-isd200 failed with error -22 [ 1102.582724][T23089] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 1102.675875][T21845] usb 2-1: USB disconnect, device number 25 [ 1102.931191][T23095] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6053'. [ 1102.987311][T23081] kvm: pic: level sensitive irq not supported [ 1102.987405][T23081] picdev_read: 1 callbacks suppressed [ 1102.987428][T23081] kvm: pic: non byte read [ 1102.987794][T23081] kvm: pic: level sensitive irq not supported [ 1102.987861][T23081] kvm: pic: non byte read [ 1102.988268][T23081] kvm: pic: level sensitive irq not supported [ 1102.988411][T23081] kvm: pic: non byte read [ 1102.988685][T23081] kvm: pic: level sensitive irq not supported [ 1102.988837][T23081] kvm: pic: non byte read [ 1102.989098][T23081] kvm: pic: level sensitive irq not supported [ 1102.989160][T23081] kvm: pic: non byte read [ 1102.989512][T23081] kvm: pic: level sensitive irq not supported [ 1102.989591][T23081] kvm: pic: non byte read [ 1102.989951][T23081] kvm: pic: level sensitive irq not supported [ 1102.990020][T23081] kvm: pic: non byte read [ 1103.208166][ T5784] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1103.209960][ T5784] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1103.219081][T21845] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 1103.360116][T21845] usb 2-1: device descriptor read/64, error -71 [ 1103.477508][ T5784] usb 4-1: USB disconnect, device number 9 [ 1103.584056][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1103.631805][T21845] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 1103.685327][ T823] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1103.772053][T21845] usb 2-1: device descriptor read/64, error -71 [ 1103.798679][T23108] FAULT_INJECTION: forcing a failure. [ 1103.798679][T23108] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.798722][T23108] CPU: 0 UID: 0 PID: 23108 Comm: syz.0.6059 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1103.798755][T23108] Tainted: [L]=SOFTLOCKUP [ 1103.798764][T23108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1103.798780][T23108] Call Trace: [ 1103.798790][T23108] [ 1103.798801][T23108] dump_stack_lvl+0xe8/0x150 [ 1103.798835][T23108] should_fail_ex+0x46b/0x600 [ 1103.798876][T23108] should_failslab+0xa8/0x100 [ 1103.798908][T23108] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 1103.798937][T23108] ? __alloc_skb+0x1d0/0x7d0 [ 1103.798970][T23108] ? lockdep_hardirqs_on+0x7a/0x110 [ 1103.799011][T23108] __alloc_skb+0x1d0/0x7d0 [ 1103.799049][T23108] netlink_sendmsg+0x5d4/0xb40 [ 1103.799082][T23108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1103.799108][T23108] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1103.799144][T23108] ? aa_sock_msg_perm+0x122/0x200 [ 1103.799181][T23108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1103.799203][T23108] sock_sendmsg_nosec+0x13a/0x180 [ 1103.799235][T23108] ____sys_sendmsg+0x55c/0x870 [ 1103.799278][T23108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1103.799330][T23108] ? import_iovec+0x73/0xa0 [ 1103.799363][T23108] ___sys_sendmsg+0x2a5/0x360 [ 1103.799399][T23108] ? __lock_acquire+0x6b5/0x2d10 [ 1103.799431][T23108] ? __pfx____sys_sendmsg+0x10/0x10 [ 1103.799510][T23108] ? __fget_files+0x2a/0x420 [ 1103.799537][T23108] ? __fget_files+0x3a6/0x420 [ 1103.799576][T23108] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1103.799616][T23108] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1103.799663][T23108] ? __pfx_ksys_write+0x10/0x10 [ 1103.799704][T23108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.799730][T23108] do_syscall_64+0x174/0x580 [ 1103.799778][T23108] ? trace_irq_disable+0x3b/0x140 [ 1103.799806][T23108] ? clear_bhb_loop+0x40/0x90 [ 1103.799836][T23108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.799860][T23108] RIP: 0033:0x7f409b5bce59 [ 1103.799883][T23108] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.799904][T23108] RSP: 002b:00007f409980e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1103.799928][T23108] RAX: ffffffffffffffda RBX: 00007f409b835fa0 RCX: 00007f409b5bce59 [ 1103.799946][T23108] RDX: 0000000000004094 RSI: 0000200000004340 RDI: 0000000000000003 [ 1103.799962][T23108] RBP: 00007f409980e090 R08: 0000000000000000 R09: 0000000000000000 [ 1103.799978][T23108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1103.799994][T23108] R13: 00007f409b836038 R14: 00007f409b835fa0 R15: 00007ffcc94e0ce8 [ 1103.800029][T23108] [ 1103.910225][T21845] usb usb2-port1: attempt power cycle [ 1103.930989][ T823] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1103.931082][ T823] usb 5-1: config 0 has no interface number 0 [ 1103.931210][ T823] usb 5-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 1103.931324][ T823] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1103.931400][ T823] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1104.189339][ T823] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1104.189374][ T823] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1104.189397][ T823] usb 5-1: Product: syz [ 1104.189415][ T823] usb 5-1: SerialNumber: syz [ 1104.195643][ T823] usb 5-1: config 0 descriptor?? [ 1104.236082][ T823] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1104.249719][ T823] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input53 [ 1104.473047][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 1104.542050][ T5705] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 1104.574734][T21845] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1104.607807][T21845] usb 2-1: device descriptor read/8, error -71 [ 1104.708423][ T5705] usb 1-1: Using ep0 maxpacket: 8 [ 1104.711186][ T5705] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.715012][ T5705] usb 1-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1104.715046][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.715070][ T5705] usb 1-1: Product: syz [ 1104.715096][ T5705] usb 1-1: Manufacturer: syz [ 1104.715114][ T5705] usb 1-1: SerialNumber: syz [ 1104.807928][ T5705] usb 1-1: config 0 descriptor?? [ 1104.821273][ T5705] ati_remote 1-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1104.887088][T23117] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6063'. [ 1104.915800][T21845] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 1104.948371][T21845] usb 2-1: device descriptor read/8, error -71 [ 1105.036109][ T823] usb 1-1: USB disconnect, device number 110 [ 1105.073632][T21845] usb usb2-port1: unable to enumerate USB device [ 1105.166038][ T5705] usb 5-1: USB disconnect, device number 75 [ 1105.219073][ T5705] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1105.561249][T21845] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1105.714019][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 1105.734690][T21845] usb 4-1: Using ep0 maxpacket: 32 [ 1105.737747][T21845] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1105.737780][T21845] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 1105.737808][T21845] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1105.740824][T21845] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1105.740859][T21845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1105.740891][T21845] usb 4-1: Product: syz [ 1105.740908][T21845] usb 4-1: Manufacturer: syz [ 1105.740925][T21845] usb 4-1: SerialNumber: syz [ 1105.815969][T21845] usb 4-1: config 0 descriptor?? [ 1106.232693][T23137] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6072'. [ 1106.292826][T21845] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 1106.292878][T21845] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 1106.364808][ T32] usb 1-1: new full-speed USB device number 111 using dummy_hcd [ 1106.529529][ T32] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 106, changing to 4 [ 1106.529570][ T32] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 1106.533474][ T32] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 1106.533508][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1106.533531][ T32] usb 1-1: Product: syz [ 1106.533548][ T32] usb 1-1: Manufacturer: syz [ 1106.533564][ T32] usb 1-1: SerialNumber: syz [ 1106.898308][T21845] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1106.977999][ T32] usb 1-1: USB disconnect, device number 111 [ 1107.072737][T21845] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1107.083715][T21845] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 18, changing to 8 [ 1107.087721][T21845] usb 2-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice= 0.40 [ 1107.087755][T21845] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.087788][T21845] usb 2-1: Product: syz [ 1107.087805][T21845] usb 2-1: Manufacturer: syz [ 1107.087822][T21845] usb 2-1: SerialNumber: syz [ 1107.194159][ T5792] udevd[5792]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1107.370615][T23147] netlink: 'syz.1.6077': attribute type 16 has an invalid length. [ 1107.408824][T23147] bridge0: port 3(syz_tun) entered blocking state [ 1107.419464][T23147] bridge0: port 3(syz_tun) entered disabled state [ 1107.442430][T23147] syz_tun: entered allmulticast mode [ 1107.511294][T23147] syz_tun: entered promiscuous mode [ 1107.606181][T23147] bridge0: port 3(syz_tun) entered blocking state [ 1107.606445][T23147] bridge0: port 3(syz_tun) entered forwarding state [ 1107.706900][T23161] netlink: 68 bytes leftover after parsing attributes in process `syz.0.6082'. [ 1107.745562][T21845] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1107.839577][T21845] usb 2-1: USB disconnect, device number 30 [ 1108.380658][ T5784] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 1108.565513][ T5784] usb 1-1: Using ep0 maxpacket: 8 [ 1108.578384][T21845] usb 4-1: USB disconnect, device number 10 [ 1108.581365][ T5784] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1108.581446][ T5784] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1108.599977][ T5784] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1108.600017][ T5784] usb 1-1: can't read configurations, error -61 [ 1108.745822][T23184] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6091'. [ 1108.793115][ T5784] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 1108.966238][ T5784] usb 1-1: Using ep0 maxpacket: 8 [ 1108.972324][ T5784] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1108.972389][ T5784] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1108.974711][ T5784] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1108.974753][ T5784] usb 1-1: can't read configurations, error -61 [ 1108.975170][ T5784] usb usb1-port1: attempt power cycle [ 1109.350096][T23197] random: crng reseeded on system resumption [ 1109.378201][ T5784] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 1109.411681][ T5784] usb 1-1: Using ep0 maxpacket: 8 [ 1109.431025][ T5784] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1109.431116][ T5784] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1109.458808][ T5784] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1109.458851][ T5784] usb 1-1: can't read configurations, error -61 [ 1109.616843][ T5784] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 1109.653322][ T5784] usb 1-1: Using ep0 maxpacket: 8 [ 1109.658198][ T5784] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1109.658290][ T5784] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 1109.698703][ T5784] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1109.698746][ T5784] usb 1-1: can't read configurations, error -61 [ 1109.699173][ T5784] usb usb1-port1: unable to enumerate USB device [ 1109.876560][T23208] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6101'. [ 1110.095701][T23215] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1110.379933][T23227] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6111'. [ 1110.592751][ T5775] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1110.734246][ T5775] usb 4-1: device descriptor read/64, error -71 [ 1110.929957][T23240] netlink: 'syz.4.6117': attribute type 10 has an invalid length. [ 1110.929985][T23240] netlink: 55 bytes leftover after parsing attributes in process `syz.4.6117'. [ 1110.994112][ T5775] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1111.134866][ T5775] usb 4-1: device descriptor read/64, error -71 [ 1111.212832][ T5705] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1111.265174][ T5775] usb usb4-port1: attempt power cycle [ 1111.305831][T23247] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6120'. [ 1111.373439][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 1111.380926][ T5705] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1111.383335][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.411134][ T5705] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1111.411170][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1111.411195][ T5705] usb 2-1: Product: syz [ 1111.411211][ T5705] usb 2-1: Manufacturer: syz [ 1111.411229][ T5705] usb 2-1: SerialNumber: syz [ 1111.459233][ T5705] usb 2-1: config 0 descriptor?? [ 1111.633826][ T5775] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1111.656996][ T5775] usb 4-1: device descriptor read/8, error -71 [ 1111.937335][ T5775] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1111.965223][ T5775] usb 4-1: device descriptor read/8, error -71 [ 1112.082095][ T5775] usb usb4-port1: unable to enumerate USB device [ 1113.022260][ T823] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 1113.156513][T23266] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6129'. [ 1113.208655][ T823] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 1113.208689][ T823] usb 1-1: config 0 has no interface number 0 [ 1113.208737][ T823] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1113.212853][ T823] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1113.212895][ T823] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1113.212919][ T823] usb 1-1: Product: syz [ 1113.212936][ T823] usb 1-1: SerialNumber: syz [ 1113.285017][ T823] usb 1-1: config 0 descriptor?? [ 1113.298968][ T823] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 1113.523744][ T5775] usb 1-1: USB disconnect, device number 116 [ 1113.902171][T23280] netlink: 'syz.3.6134': attribute type 2 has an invalid length. [ 1114.104808][ T5705] usb 2-1: USB disconnect, device number 31 [ 1114.390906][T23297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6140'. [ 1114.534551][T23301] netlink: 'syz.1.6141': attribute type 2 has an invalid length. [ 1114.600898][T23306] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6143'. [ 1114.699540][T23308] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[21863] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[23308] [ 1114.729708][T23308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6144'. [ 1114.940281][T23313] Bluetooth: hci3: Frame reassembly failed (-84) [ 1114.976930][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6147'. [ 1115.011143][ T7775] Bluetooth: hci3: Frame reassembly failed (-84) [ 1115.487643][T23325] binder: 23324:23325 ioctl 400c620e 2000000000c0 returned -22 [ 1115.934178][T23337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6155'. [ 1116.133260][T23341] netlink: 4592 bytes leftover after parsing attributes in process `syz.4.6157'. [ 1116.184146][T23343] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6158'. [ 1116.276137][T21845] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 1116.465547][T21845] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1116.465586][T21845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1116.465617][T21845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1116.468635][T21845] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1116.468669][T21845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.468692][T21845] usb 1-1: Product: syz [ 1116.468709][T21845] usb 1-1: Manufacturer: syz [ 1116.468727][T21845] usb 1-1: SerialNumber: syz [ 1116.582374][T21845] usb 1-1: config 0 descriptor?? [ 1116.595639][T21845] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 1116.709316][T23357] FAULT_INJECTION: forcing a failure. [ 1116.709316][T23357] name failslab, interval 1, probability 0, space 0, times 0 [ 1116.709358][T23357] CPU: 0 UID: 0 PID: 23357 Comm: syz.4.6165 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1116.709392][T23357] Tainted: [L]=SOFTLOCKUP [ 1116.709401][T23357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1116.709416][T23357] Call Trace: [ 1116.709426][T23357] [ 1116.709436][T23357] dump_stack_lvl+0xe8/0x150 [ 1116.709470][T23357] should_fail_ex+0x46b/0x600 [ 1116.709510][T23357] should_failslab+0xa8/0x100 [ 1116.709543][T23357] kmem_cache_alloc_noprof+0x87/0x680 [ 1116.709571][T23357] ? do_getname+0x2e/0x250 [ 1116.709599][T23357] do_getname+0x2e/0x250 [ 1116.709622][T23357] ? getname_uflags+0x11/0x30 [ 1116.709649][T23357] do_fchownat+0xe3/0x250 [ 1116.709685][T23357] ? __pfx_do_fchownat+0x10/0x10 [ 1116.709709][T23357] ? __pfx_ksys_write+0x10/0x10 [ 1116.709747][T23357] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.709777][T23357] __x64_sys_lchown+0x85/0xa0 [ 1116.709803][T23357] do_syscall_64+0x174/0x580 [ 1116.709837][T23357] ? trace_irq_disable+0x3b/0x140 [ 1116.709863][T23357] ? clear_bhb_loop+0x40/0x90 [ 1116.709962][T23357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1116.709986][T23357] RIP: 0033:0x7ff0e18ace59 [ 1116.710006][T23357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1116.710025][T23357] RSP: 002b:00007ff0dfb06028 EFLAGS: 00000246 ORIG_RAX: 000000000000005e [ 1116.710049][T23357] RAX: ffffffffffffffda RBX: 00007ff0e1b25fa0 RCX: 00007ff0e18ace59 [ 1116.710066][T23357] RDX: 0000000000000000 RSI: 000000000000ee00 RDI: 0000200000000240 [ 1116.710082][T23357] RBP: 00007ff0dfb06090 R08: 0000000000000000 R09: 0000000000000000 [ 1116.710097][T23357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1116.710112][T23357] R13: 00007ff0e1b26038 R14: 00007ff0e1b25fa0 R15: 00007fff8dd19ce8 [ 1116.710146][T23357] [ 1116.984487][T21845] usb 1-1: USB disconnect, device number 117 [ 1117.154064][ T5625] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1117.329470][ T5775] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1117.500367][ T5775] usb 4-1: device descriptor read/64, error -71 [ 1117.609650][ T5705] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1117.762274][ T5775] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1117.780116][ T5705] usb 5-1: too many configurations: 25, using maximum allowed: 8 [ 1117.809244][ T5705] usb 5-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 1117.809282][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.838716][ T5705] usb 5-1: config 0 descriptor?? [ 1117.855804][ T5705] pwc: Creative Labs Webcam Pro Ex detected. [ 1117.855822][ T5705] pwc: Warning: more than 1 configuration available. [ 1117.909195][ T5775] usb 4-1: device descriptor read/64, error -71 [ 1118.021236][ T5775] usb usb4-port1: attempt power cycle [ 1118.079266][ T5705] pwc: Failed to set LED on/off time (-71) [ 1118.079705][ T5705] pwc: send_video_command error -71 [ 1118.079719][ T5705] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1118.079836][ T5705] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1118.118479][ T5705] usb 5-1: USB disconnect, device number 76 [ 1118.400169][ T5775] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 1118.422643][ T5775] usb 4-1: device descriptor read/8, error -71 [ 1118.693866][ T5775] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 1118.716350][ T5775] usb 4-1: device descriptor read/8, error -71 [ 1118.825542][T23410] netlink: 'syz.4.6188': attribute type 23 has an invalid length. [ 1118.842473][ T5775] usb usb4-port1: unable to enumerate USB device [ 1119.094118][T21845] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1119.260127][T21845] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.260158][T21845] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 1119.262813][T21845] usb 5-1: New USB device found, idVendor=2184, idProduct=001c, bcdDevice=e3.03 [ 1119.262850][T21845] usb 5-1: New USB device strings: Mfr=1, Product=22, SerialNumber=3 [ 1119.262888][T21845] usb 5-1: Product: syz [ 1119.262905][T21845] usb 5-1: Manufacturer: syz [ 1119.262922][T21845] usb 5-1: SerialNumber: syz [ 1119.297003][T21845] usb 5-1: config 0 descriptor?? [ 1119.333448][T21845] cdc_acm 5-1:0.0: skipping garbage [ 1119.500297][T23417] netlink: 76 bytes leftover after parsing attributes in process `syz.1.6191'. [ 1119.505327][T23417] netlink: 'syz.1.6191': attribute type 2 has an invalid length. [ 1119.551026][T21845] usb 5-1: USB disconnect, device number 77 [ 1119.649414][T23425] netlink: 'syz.0.6194': attribute type 25 has an invalid length. [ 1119.649443][T23425] netlink: 'syz.0.6194': attribute type 3 has an invalid length. [ 1119.649454][T23425] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6194'. [ 1119.929483][ T9] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 1119.954026][T23433] syzkaller1: entered allmulticast mode [ 1120.095338][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1120.096752][ T9] usb 1-1: config index 0 descriptor too short (expected 63876, got 142) [ 1120.096877][ T9] usb 1-1: config 73 has an invalid descriptor of length 0, skipping remainder of the config [ 1120.096903][ T9] usb 1-1: config 73 has 1 interface, different from the descriptor's value: 6 [ 1120.096944][ T9] usb 1-1: config 73 interface 0 has no altsetting 0 [ 1120.100501][ T9] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1120.100541][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.100558][ T9] usb 1-1: Product: syz [ 1120.100569][ T9] usb 1-1: Manufacturer: syz [ 1120.100580][ T9] usb 1-1: SerialNumber: syz [ 1120.188718][ T9] usb 1-1: selecting invalid altsetting 1 [ 1120.193471][ T9] usb 1-1: unit 6 not found! [ 1120.193492][ T9] usb 1-1: unit 0 not found! [ 1120.435238][T23439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6201'. [ 1120.463783][ T9] snd-usb-audio 1-1:73.0: probe with driver snd-usb-audio failed with error -22 [ 1120.485429][ T9] usb 1-1: USB disconnect, device number 118 [ 1120.541576][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:73.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1120.591724][ T5705] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1120.639990][T23443] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6203'. [ 1120.640010][T23443] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6203'. [ 1120.742433][ T37] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1120.777375][ T5705] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1120.777433][ T5705] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1120.777451][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.783251][ T5705] usb 2-1: config 0 descriptor?? [ 1120.828375][ T5705] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1120.915806][ T37] usb 5-1: Using ep0 maxpacket: 32 [ 1120.918035][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1120.918072][ T37] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1120.918127][ T37] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1120.918146][ T37] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1120.923730][ T37] usb 5-1: config 0 descriptor?? [ 1121.400209][ T37] savu 0003:1E7D:2D5A.0031: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 1121.676821][ T5784] usb 5-1: USB disconnect, device number 78 [ 1121.741596][ T9] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 1121.891518][T23462] FAULT_INJECTION: forcing a failure. [ 1121.891518][T23462] name failslab, interval 1, probability 0, space 0, times 0 [ 1121.892017][T23462] CPU: 1 UID: 0 PID: 23462 Comm: syz.3.6209 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1121.892063][T23462] Tainted: [L]=SOFTLOCKUP [ 1121.892073][T23462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1121.892087][T23462] Call Trace: [ 1121.892096][T23462] [ 1121.892106][T23462] dump_stack_lvl+0xe8/0x150 [ 1121.892145][T23462] should_fail_ex+0x46b/0x600 [ 1121.892175][T23462] should_failslab+0xa8/0x100 [ 1121.892199][T23462] __kmalloc_noprof+0xdf/0x7b0 [ 1121.892219][T23462] ? tomoyo_encode+0x28b/0x550 [ 1121.892243][T23462] tomoyo_encode+0x28b/0x550 [ 1121.892266][T23462] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1121.892287][T23462] ? tomoyo_domain+0xd7/0x130 [ 1121.892311][T23462] ? tomoyo_path_number_perm+0x219/0x630 [ 1121.892340][T23462] tomoyo_path_number_perm+0x246/0x630 [ 1121.892368][T23462] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1121.892393][T23462] ? __lock_acquire+0x6b5/0x2d10 [ 1121.892415][T23462] ? do_raw_spin_lock+0x12b/0x2f0 [ 1121.892455][T23462] ? __fget_files+0x2a/0x420 [ 1121.892476][T23462] ? __fget_files+0x2a/0x420 [ 1121.892507][T23462] ? __fget_files+0x3a6/0x420 [ 1121.892525][T23462] ? __fget_files+0x2a/0x420 [ 1121.892555][T23462] security_file_ioctl+0xc3/0x2a0 [ 1121.892587][T23462] __se_sys_ioctl+0x47/0x170 [ 1121.892612][T23462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.892630][T23462] do_syscall_64+0x174/0x580 [ 1121.892656][T23462] ? trace_irq_disable+0x3b/0x140 [ 1121.892675][T23462] ? clear_bhb_loop+0x40/0x90 [ 1121.892695][T23462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1121.892713][T23462] RIP: 0033:0x7fd0a47ace59 [ 1121.892728][T23462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1121.892743][T23462] RSP: 002b:00007fd0a29e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1121.892760][T23462] RAX: ffffffffffffffda RBX: 00007fd0a4a26090 RCX: 00007fd0a47ace59 [ 1121.892773][T23462] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 1121.892783][T23462] RBP: 00007fd0a29e5090 R08: 0000000000000000 R09: 0000000000000000 [ 1121.892794][T23462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1121.892804][T23462] R13: 00007fd0a4a26128 R14: 00007fd0a4a26090 R15: 00007ffcdf152688 [ 1121.892829][T23462] [ 1121.892856][T23462] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1122.026033][ T9] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 1122.026065][ T9] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 1122.026084][ T9] usb 1-1: Product: syz [ 1122.026097][ T9] usb 1-1: SerialNumber: syz [ 1122.190505][ T9] usb 1-1: config 0 descriptor?? [ 1122.489287][ T9] usb 1-1: USB disconnect, device number 119 [ 1122.674054][ T5705] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1122.846016][ T5705] usb 5-1: Using ep0 maxpacket: 16 [ 1122.850381][ T5705] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1122.850422][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1122.856080][ T5705] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1122.856116][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.856141][ T5705] usb 5-1: Product: syz [ 1122.856159][ T5705] usb 5-1: Manufacturer: syz [ 1122.856176][ T5705] usb 5-1: SerialNumber: syz [ 1122.935860][ T5705] usb 5-1: config 0 descriptor?? [ 1122.940710][ T5705] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1122.940738][ T5705] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1123.045030][T23472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1123.046483][T23472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1123.224099][T23475] netlink: 'syz.0.6213': attribute type 3 has an invalid length. [ 1123.624024][ T5705] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1123.625294][ T5705] em28xx 5-1:0.0: Config register raw data: 0xea [ 1123.625318][ T5705] em28xx 5-1:0.0: I2S Audio (1 sample rate(s)) [ 1123.625337][ T5705] em28xx 5-1:0.0: No AC97 audio processor [ 1123.696424][T23486] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6217'. [ 1124.067997][ T5705] usb 5-1: USB disconnect, device number 79 [ 1124.180391][ T823] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 1124.269408][ T37] usb 2-1: USB disconnect, device number 32 [ 1124.347812][T23491] FAULT_INJECTION: forcing a failure. [ 1124.347812][T23491] name failslab, interval 1, probability 0, space 0, times 0 [ 1124.347854][T23491] CPU: 0 UID: 0 PID: 23491 Comm: syz.1.6219 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1124.347887][T23491] Tainted: [L]=SOFTLOCKUP [ 1124.347896][T23491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1124.347911][T23491] Call Trace: [ 1124.347920][T23491] [ 1124.347931][T23491] dump_stack_lvl+0xe8/0x150 [ 1124.347965][T23491] should_fail_ex+0x46b/0x600 [ 1124.348007][T23491] should_failslab+0xa8/0x100 [ 1124.348042][T23491] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 1124.348072][T23491] ? __d_alloc+0x37/0x6f0 [ 1124.348109][T23491] __d_alloc+0x37/0x6f0 [ 1124.348147][T23491] d_alloc_parallel+0xe6/0x1610 [ 1124.348181][T23491] ? __d_lookup+0x66/0x780 [ 1124.348217][T23491] ? __d_lookup+0x66/0x780 [ 1124.348255][T23491] ? __d_lookup+0x66/0x780 [ 1124.348293][T23491] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1124.348334][T23491] ? d_lookup+0x1f/0xc0 [ 1124.348369][T23491] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1124.348408][T23491] path_openat+0xccb/0x3960 [ 1124.348484][T23491] ? __pfx_path_openat+0x10/0x10 [ 1124.348536][T23491] ? do_raw_spin_lock+0x12b/0x2f0 [ 1124.348571][T23491] do_file_open+0x23e/0x4a0 [ 1124.348604][T23491] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1124.348644][T23491] ? __pfx_do_file_open+0x10/0x10 [ 1124.348675][T23491] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1124.348729][T23491] ? alloc_fd+0x679/0x6f0 [ 1124.348769][T23491] do_sys_openat2+0x115/0x200 [ 1124.348801][T23491] ? __pfx_do_sys_openat2+0x10/0x10 [ 1124.348829][T23491] ? ksys_write+0x248/0x270 [ 1124.348865][T23491] ? __pfx_ksys_write+0x10/0x10 [ 1124.348899][T23491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.348926][T23491] __x64_sys_open+0x11e/0x150 [ 1124.348958][T23491] do_syscall_64+0x174/0x580 [ 1124.348993][T23491] ? trace_irq_disable+0x3b/0x140 [ 1124.349021][T23491] ? clear_bhb_loop+0x40/0x90 [ 1124.349051][T23491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1124.349075][T23491] RIP: 0033:0x7f2df89ace59 [ 1124.349097][T23491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1124.349119][T23491] RSP: 002b:00007f2df6bfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1124.349144][T23491] RAX: ffffffffffffffda RBX: 00007f2df8c25fa0 RCX: 00007f2df89ace59 [ 1124.349162][T23491] RDX: 00000000000000a2 RSI: 0000000000161841 RDI: 00002000009e1000 [ 1124.349179][T23491] RBP: 00007f2df6bfe090 R08: 0000000000000000 R09: 0000000000000000 [ 1124.349194][T23491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1124.349209][T23491] R13: 00007f2df8c26038 R14: 00007f2df8c25fa0 R15: 00007ffc29ee8b78 [ 1124.349246][T23491] [ 1124.382765][ T823] usb 1-1: Using ep0 maxpacket: 16 [ 1124.549699][ T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1124.549740][ T823] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1124.549765][ T823] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1124.549812][ T823] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1124.549839][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1124.734070][ T823] usb 1-1: config 0 descriptor?? [ 1124.942776][T23494] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 1125.211556][ T823] microsoft 0003:045E:07DA.0032: ignoring exceeding usage max [ 1125.217356][ T823] microsoft 0003:045E:07DA.0032: item fetching failed at offset 8/34 [ 1125.239225][ T823] microsoft 0003:045E:07DA.0032: parse failed [ 1125.239349][ T823] microsoft 0003:045E:07DA.0032: probe with driver microsoft failed with error -22 [ 1125.416905][ T37] usb 1-1: USB disconnect, device number 120 [ 1125.450410][ T9] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1125.617553][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1125.617589][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.617614][ T9] usb 5-1: Product: syz [ 1125.617647][ T9] usb 5-1: Manufacturer: syz [ 1125.617792][ T9] usb 5-1: SerialNumber: syz [ 1126.109462][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1126.109530][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1126.478820][ T5718] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1126.665918][ T5718] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1126.666039][ T5718] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1126.666069][ T5718] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.718007][ T5718] usb 2-1: config 0 descriptor?? [ 1126.733471][ T5718] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1127.226474][T23501] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6223'. [ 1127.237143][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 1127.237203][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1127.265834][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1127.321455][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1127.350682][ T9] usb 5-1: USB disconnect, device number 80 [ 1127.682245][ T37] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1127.844846][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 1127.872281][ T37] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.874822][ T37] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 1127.874868][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.874884][ T37] usb 4-1: Product: syz [ 1127.874896][ T37] usb 4-1: Manufacturer: syz [ 1127.874907][ T37] usb 4-1: SerialNumber: syz [ 1127.929146][ T37] usb 4-1: config 0 descriptor?? [ 1127.940326][ T37] mcba_usb 4-1:0.0: Can't find endpoints [ 1128.065634][T23548] wg2 speed is unknown, defaulting to 1000 [ 1128.156503][ T5705] usb 4-1: USB disconnect, device number 19 [ 1128.808929][T23559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6244'. [ 1128.913118][T23565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.913721][T23565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1129.200395][ T5705] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1129.380352][ T5705] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1129.380388][ T5705] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.380410][ T5705] usb 4-1: Product: syz [ 1129.380426][ T5705] usb 4-1: Manufacturer: syz [ 1129.380446][ T5705] usb 4-1: SerialNumber: syz [ 1129.791733][T23581] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6253'. [ 1130.082208][ T5705] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 1130.082270][ T5705] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1130.083243][ T5705] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1130.125694][ T5705] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 1130.145750][ T5705] usb 4-1: USB disconnect, device number 20 [ 1130.191298][ T9] usb 2-1: USB disconnect, device number 33 [ 1130.314426][T23589] dummy0: entered promiscuous mode [ 1130.863992][T23608] sg_write: data in/out 808464396/136 bytes for SCSI command 0x0-- guessing data in; [ 1130.863992][T23608] program syz.0.6265 not setting count and/or reply_len properly [ 1131.261623][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1131.337154][ T5718] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1131.393085][T23627] fuse: Bad value for 'fd' [ 1131.437960][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1131.438019][ T9] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1131.438046][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.477154][ T9] usb 4-1: config 0 descriptor?? [ 1131.491229][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1131.506602][ T5718] usb 2-1: Using ep0 maxpacket: 16 [ 1131.516641][ T5718] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1131.518138][ T5718] usb 2-1: config 4 has an invalid interface number: 127 but max is 0 [ 1131.518170][ T5718] usb 2-1: config 4 has no interface number 0 [ 1131.518203][ T5718] usb 2-1: config 4 interface 127 has no altsetting 0 [ 1131.519724][ T5718] usb 2-1: language id specifier not provided by device, defaulting to English [ 1131.570131][ T5718] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48 [ 1131.570165][ T5718] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.570188][ T5718] usb 2-1: Product: syz [ 1131.570204][ T5718] usb 2-1: SerialNumber: syz [ 1131.934786][ T5718] usb 2-1: USB disconnect, device number 34 [ 1131.983727][ T6077] udevd[6077]: setting owner of /dev/bus/usb/002/034 to uid=0, gid=0 failed: No such file or directory [ 1132.802187][T23658] fuse: Bad value for 'fd' [ 1133.158199][ T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1133.234132][ T37] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1133.322986][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1133.325529][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1133.325562][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.325590][ T9] usb 5-1: Product: syz [ 1133.325602][ T9] usb 5-1: Manufacturer: syz [ 1133.325619][ T9] usb 5-1: SerialNumber: syz [ 1133.407638][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 1133.410715][ T37] usb 2-1: config 16 interface 0 has no altsetting 0 [ 1133.414455][ T37] usb 2-1: New USB device found, idVendor=03f0, idProduct=011c, bcdDevice=a8.95 [ 1133.414489][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.414513][ T37] usb 2-1: Product: syz [ 1133.414529][ T37] usb 2-1: Manufacturer: syz [ 1133.414546][ T37] usb 2-1: SerialNumber: syz [ 1133.685365][T23669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1133.689020][T23669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1133.768091][ T37] usb 2-1: USB disconnect, device number 35 [ 1134.453111][ T9] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 1134.453159][ T9] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 1134.453182][ T9] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 1134.652814][T23683] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6292'. [ 1134.907484][T23663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1134.934929][T23663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1134.977179][T23690] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6295'. [ 1134.978620][ T9] cdc_ncm 5-1:1.0: setting tx_max = 88 [ 1135.031748][ T9] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 1135.055473][ T9] usb 5-1: USB disconnect, device number 81 [ 1135.065496][ T9] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP) [ 1135.149811][ T5705] usb 4-1: USB disconnect, device number 21 [ 1135.423220][T23697] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6298'. [ 1135.703751][T23704] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6301'. [ 1136.102441][T23722] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6308'. [ 1136.270259][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1136.319355][T23729] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6310'. [ 1136.432899][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 1136.435410][ T9] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 1136.435442][ T9] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 1136.435467][ T9] usb 4-1: config 0 has no interface number 0 [ 1136.435516][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 1136.435545][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 1136.440074][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 1136.440107][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.440131][ T9] usb 4-1: Product: syz [ 1136.440148][ T9] usb 4-1: Manufacturer: syz [ 1136.440164][ T9] usb 4-1: SerialNumber: syz [ 1136.536851][ T9] usb 4-1: config 0 descriptor?? [ 1136.539700][T23717] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1136.540359][T23717] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1136.634578][ T37] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1136.718725][T23739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6315'. [ 1136.809096][T23717] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1136.812537][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 1136.815761][T23717] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1136.818697][ T37] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1136.818736][ T37] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1136.818847][ T37] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1136.818920][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.905513][ T37] usb 2-1: config 0 descriptor?? [ 1137.062497][T23717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.063660][T23717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.137007][T23731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1137.143930][T23731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1137.378573][ T5775] usb 1-1: new full-speed USB device number 121 using dummy_hcd [ 1137.500885][ T37] hid_parser_main: 314 callbacks suppressed [ 1137.500911][ T37] microsoft 0003:045E:07DA.0033: unknown main item tag 0x5 [ 1137.500941][ T37] microsoft 0003:045E:07DA.0033: item fetching failed at offset 25/34 [ 1137.501610][ T37] microsoft 0003:045E:07DA.0033: parse failed [ 1137.501723][ T37] microsoft 0003:045E:07DA.0033: probe with driver microsoft failed with error -22 [ 1137.562980][ T5775] usb 1-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x3B, changing to 0xB [ 1137.563013][ T5775] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0xB has invalid maxpacket 32454, setting to 64 [ 1137.563042][ T5775] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1137.565853][ T5775] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1137.565886][ T5775] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 1137.565907][ T5775] usb 1-1: Product: syz [ 1137.565984][ T5775] usb 1-1: Manufacturer: syz [ 1137.566000][ T5775] usb 1-1: SerialNumber: syz [ 1137.644732][ T5775] usb 1-1: config 0 descriptor?? [ 1137.645793][T23741] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 1137.699104][ T5775] usb 1-1: selecting invalid altsetting 0 [ 1137.713716][ T5718] usb 2-1: USB disconnect, device number 36 [ 1137.835767][ T9] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1137.835802][ T9] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1137.836114][ T9] asix 4-1:0.251: probe with driver asix failed with error -71 [ 1137.894238][ T9] usb 4-1: USB disconnect, device number 22 [ 1138.106598][ T5775] usb 1-1: USB disconnect, device number 121 [ 1138.233563][T23752] wg2 speed is unknown, defaulting to 1000 [ 1138.239714][T23752] wg2 speed is unknown, defaulting to 1000 [ 1138.262282][T23752] wg2 speed is unknown, defaulting to 1000 [ 1138.653229][T23755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6319'. [ 1138.710360][T23760] ubi0: attaching mtd0 [ 1138.893793][T23760] ubi0: scanning is finished [ 1138.980286][T23752] infiniband syz2: set active [ 1138.980404][T23752] infiniband syz2: added wg2 [ 1138.993944][ T37] wg2 speed is unknown, defaulting to 1000 [ 1139.056567][T23752] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1139.078844][T23752] infiniband syz2: Couldn't open port 1 [ 1139.079142][T23752] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1139.079179][T23752] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1139.079223][T23752] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1139.208854][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1139.398199][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1139.407371][ T9] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 1139.438277][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1139.438312][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.438335][ T9] usb 2-1: Product: syz [ 1139.438352][ T9] usb 2-1: Manufacturer: syz [ 1139.438368][ T9] usb 2-1: SerialNumber: syz [ 1139.755676][T23752] RDS/IB: syz2: added [ 1139.755768][T23752] smc: adding ib device syz2 with port count 1 [ 1139.756016][T23752] smc: ib device syz2 port 1 has no pnetid [ 1139.758422][T23752] wg2 speed is unknown, defaulting to 1000 [ 1139.759110][ T37] wg2 speed is unknown, defaulting to 1000 [ 1139.816481][ T9] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1140.040741][T23760] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 1140.040773][T23760] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 1140.040795][T23760] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 1140.040814][T23760] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 1140.040834][T23760] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 1140.040854][T23760] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 1140.040875][T23760] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 2278983162 [ 1140.040898][T23760] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 1140.072711][T23777] ubi0: background thread "ubi_bgt0d" started, PID 23777 [ 1140.312317][ T9] usb 2-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 1140.386862][ T9] usb 2-1: USB disconnect, device number 37 [ 1140.554130][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1141.038939][T23752] wg2 speed is unknown, defaulting to 1000 [ 1141.340010][T23800] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6337'. [ 1141.347874][T23803] FAULT_INJECTION: forcing a failure. [ 1141.347874][T23803] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1141.347917][T23803] CPU: 1 UID: 0 PID: 23803 Comm: syz.1.6336 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1141.348055][T23803] Tainted: [L]=SOFTLOCKUP [ 1141.348096][T23803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1141.348145][T23803] Call Trace: [ 1141.348175][T23803] [ 1141.348206][T23803] dump_stack_lvl+0xe8/0x150 [ 1141.348297][T23803] should_fail_ex+0x46b/0x600 [ 1141.348426][T23803] prepare_alloc_pages+0x22a/0x6b0 [ 1141.348533][T23803] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1141.348629][T23803] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1141.348725][T23803] ? __pfx_policy_nodemask+0x10/0x10 [ 1141.348811][T23803] ? __lock_acquire+0x6b5/0x2d10 [ 1141.348893][T23803] alloc_pages_mpol+0xd1/0x380 [ 1141.348989][T23803] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 1141.349083][T23803] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1141.349165][T23803] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1141.349246][T23803] ? __pte_offset_map+0x29/0x200 [ 1141.349313][T23803] do_pte_missing+0x822/0x2940 [ 1141.349431][T23803] ? handle_mm_fault+0xed/0x14d0 [ 1141.349497][T23803] handle_mm_fault+0xdc2/0x14d0 [ 1141.349529][T23803] ? handle_mm_fault+0xed/0x14d0 [ 1141.349631][T23803] ? __pfx_handle_mm_fault+0x10/0x10 [ 1141.349707][T23803] ? follow_page_pte+0xbe2/0xe60 [ 1141.349802][T23803] ? __pfx_follow_page_pte+0x10/0x10 [ 1141.349901][T23803] __get_user_pages+0x16d4/0x2620 [ 1141.350059][T23803] __gup_longterm_locked+0x3db/0x1630 [ 1141.350169][T23803] ? __pfx_down_read+0x10/0x10 [ 1141.350245][T23803] pin_user_pages+0x9d/0xd0 [ 1141.350330][T23803] xdp_umem_pin_pages+0x11b/0x340 [ 1141.350439][T23803] xdp_umem_create+0x631/0x8b0 [ 1141.350557][T23803] xsk_setsockopt+0x860/0x990 [ 1141.350637][T23803] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1141.350761][T23803] ? aa_sock_opt_perm+0x131/0x1f0 [ 1141.350867][T23803] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1141.350973][T23803] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1141.351040][T23803] do_sock_setsockopt+0x17c/0x1b0 [ 1141.351121][T23803] __x64_sys_setsockopt+0x143/0x1b0 [ 1141.351206][T23803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.351278][T23803] do_syscall_64+0x174/0x580 [ 1141.351380][T23803] ? trace_irq_disable+0x3b/0x140 [ 1141.351452][T23803] ? clear_bhb_loop+0x40/0x90 [ 1141.351528][T23803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.351591][T23803] RIP: 0033:0x7f2df89ace59 [ 1141.351654][T23803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.351708][T23803] RSP: 002b:00007f2df6bdd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1141.351790][T23803] RAX: ffffffffffffffda RBX: 00007f2df8c26090 RCX: 00007f2df89ace59 [ 1141.351842][T23803] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000004 [ 1141.351877][T23803] RBP: 00007f2df6bdd090 R08: 0000000000000020 R09: 0000000000000000 [ 1141.351921][T23803] R10: 0000200000000340 R11: 0000000000000246 R12: 0000000000000002 [ 1141.351956][T23803] R13: 00007f2df8c26128 R14: 00007f2df8c26090 R15: 00007ffc29ee8b78 [ 1141.352051][T23803] [ 1141.984221][T23752] wg2 speed is unknown, defaulting to 1000 [ 1142.028185][ T37] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1142.201839][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 1142.210360][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1142.230598][ T37] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1142.261748][ T37] usb 2-1: New USB device found, idVendor=05ac, idProduct=0320, bcdDevice= 0.40 [ 1142.261786][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.261810][ T37] usb 2-1: Product: syz [ 1142.261827][ T37] usb 2-1: Manufacturer: syz [ 1142.261845][ T37] usb 2-1: SerialNumber: syz [ 1142.585050][ T37] usbhid 2-1:1.0: can't add hid device: -71 [ 1142.585182][ T37] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 1142.616730][ T37] usb 2-1: USB disconnect, device number 38 [ 1143.238155][T23752] wg2 speed is unknown, defaulting to 1000 [ 1143.955818][T23840] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1144.191080][T23842] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.6349'. [ 1144.191871][T23842] netlink: 'syz.3.6349': attribute type 10 has an invalid length. [ 1145.375839][T23752] wg2 speed is unknown, defaulting to 1000 [ 1148.417100][T23916] kvm: user requested TSC rate below hardware speed [ 1148.755457][ T37] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1148.833374][T23922] netlink: 'syz.0.6383': attribute type 21 has an invalid length. [ 1148.851251][T23924] netlink: 'syz.0.6383': attribute type 21 has an invalid length. [ 1149.000528][ T37] usb 4-1: Using ep0 maxpacket: 8 [ 1149.006915][ T37] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 1149.006939][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.006955][ T37] usb 4-1: Product: syz [ 1149.006966][ T37] usb 4-1: Manufacturer: syz [ 1149.006978][ T37] usb 4-1: SerialNumber: syz [ 1149.050916][ T37] usb 4-1: config 0 descriptor?? [ 1149.374956][ T37] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 1149.614660][T23916] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1149.616949][T23916] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.121016][ T37] usb write operation failed. (-71) [ 1152.140591][ T37] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1152.141337][ T37] dvbdev: DVB: registering new adapter (Terratec H7) [ 1152.141395][ T37] usb 4-1: media controller created [ 1152.143441][ T37] usb read operation failed. (-71) [ 1152.143928][ T37] usb write operation failed. (-71) [ 1152.264459][ T37] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 1152.281712][ T37] usb 4-1: USB disconnect, device number 23 [ 1152.937983][T23947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.938584][T23947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1152.972307][T23947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1152.972912][T23947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.196781][ T37] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1153.283803][ T5705] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1153.377619][ T37] usb 5-1: config 36 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1153.379726][ T37] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 1153.379750][ T37] usb 5-1: New USB device strings: Mfr=244, Product=32, SerialNumber=16 [ 1153.379773][ T37] usb 5-1: Product: syz [ 1153.379784][ T37] usb 5-1: Manufacturer: syz [ 1153.379796][ T37] usb 5-1: SerialNumber: syz [ 1153.522005][ T5705] usb 2-1: Using ep0 maxpacket: 8 [ 1153.544423][ T5705] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1153.544605][ T5705] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1153.544633][ T5705] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1153.544723][ T5705] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1153.544759][ T5705] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1153.544807][ T5705] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1153.544895][ T5705] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.724373][ T37] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 1153.752109][ T37] usb 5-1: USB disconnect, device number 82 [ 1153.888940][ T5705] usb 2-1: GET_CAPABILITIES returned 0 [ 1153.888997][ T5705] usbtmc 2-1:16.0: can't read capabilities [ 1154.178881][T23949] usbtmc 2-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 1154.397780][T23949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.399663][T23949] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.431703][ T9] usb 2-1: USB disconnect, device number 39 [ 1154.465382][ T5718] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1154.648944][T23967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.660886][ T823] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 1154.671028][T23967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.692119][ T5718] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1154.699598][ T5718] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1154.699715][ T5718] usb 4-1: can't read configurations, error -71 [ 1154.801830][ T823] usb 5-1: device descriptor read/64, error -71 [ 1155.061958][ T823] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1155.202747][ T823] usb 5-1: device descriptor read/64, error -71 [ 1155.322654][ T823] usb usb5-port1: attempt power cycle [ 1155.530302][T24007] netlink: 666 bytes leftover after parsing attributes in process `syz.1.6418'. [ 1155.691178][ T823] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1155.715482][ T823] usb 5-1: device descriptor read/8, error -71 [ 1155.912628][T24015] serio: Serial port ttynull [ 1155.986059][ T823] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1156.006259][ T823] usb 5-1: device descriptor read/8, error -71 [ 1156.124911][ T823] usb usb5-port1: unable to enumerate USB device [ 1156.232915][ T1013] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1156.439225][T24020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1156.440478][T24020] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1156.494669][ T1013] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1156.495751][ T1013] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 1156.495789][ T1013] usb 4-1: can't read configurations, error -71 [ 1157.029543][ T5705] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1157.035311][ T5718] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 1157.065937][T24031] tipc: Started in network mode [ 1157.065960][T24031] tipc: Node identity 9a97d388c532, cluster identity 4711 [ 1157.066621][T24031] tipc: Enabled bearer , priority 0 [ 1157.081130][T24031] syzkaller0: MTU too low for tipc bearer [ 1157.081193][T24031] tipc: Disabling bearer [ 1157.187093][ T5705] usb 2-1: Using ep0 maxpacket: 32 [ 1157.189882][ T5705] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.192672][ T5705] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 1157.192712][ T5705] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.192730][ T5705] usb 2-1: Product: syz [ 1157.192743][ T5705] usb 2-1: Manufacturer: syz [ 1157.192755][ T5705] usb 2-1: SerialNumber: syz [ 1157.201065][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 1157.256922][ T5718] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 1157.256952][ T5718] usb 1-1: config 0 has no interface number 0 [ 1157.258127][ T5705] usb 2-1: config 0 descriptor?? [ 1157.282361][ T5705] cdc_ether 2-1:0.0: Descriptor too short [ 1157.283957][ T5705] usb 2-1: unsupported MDLM descriptors [ 1157.300766][ T5718] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1157.300800][ T5718] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.300823][ T5718] usb 1-1: Product: syz [ 1157.300840][ T5718] usb 1-1: Manufacturer: syz [ 1157.300856][ T5718] usb 1-1: SerialNumber: syz [ 1157.346360][ T5718] usb 1-1: config 0 descriptor?? [ 1157.366918][ T5718] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1157.496506][ T823] usb 2-1: USB disconnect, device number 40 [ 1157.576770][ T5718] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1157.596491][ T5718] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1157.816220][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 8 [ 1158.200480][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1158.203512][ T1013] usb 1-1: USB disconnect, device number 122 [ 1158.286231][ T1013] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1158.334097][ T1013] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1158.335312][ T1013] quatech2 1-1:0.51: device disconnected [ 1158.555441][T24047] netlink: 'syz.4.6436': attribute type 5 has an invalid length. [ 1158.555465][T24047] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.6436'. [ 1158.901357][T24052] CIFS: enabling forcegid mount option implicitly because gid= option is specified [ 1158.901375][T24052] CIFS mount error: No usable UNC path provided in device string! [ 1158.901375][T24052] [ 1158.901438][T24052] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1158.903947][T24052] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:5 [ 1159.138839][ T1013] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1159.349258][T24047] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1159.349421][T24047] block device autoloading is deprecated and will be removed. [ 1159.393269][T24050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1159.395446][T24050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1159.424605][ T1013] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1159.426936][ T1013] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1159.426970][ T1013] usb 2-1: can't read configurations, error -71 [ 1159.496673][ T5718] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 1159.659558][ T5718] usb 1-1: Using ep0 maxpacket: 32 [ 1159.662097][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1159.662136][ T5718] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1159.662179][ T5718] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1159.662206][ T5718] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.676772][ T5718] usb 1-1: config 0 descriptor?? [ 1159.803630][T24071] netlink: 'syz.3.6447': attribute type 2 has an invalid length. [ 1160.028251][ T823] usb 5-1: new full-speed USB device number 87 using dummy_hcd [ 1160.172138][ T823] usb 5-1: device descriptor read/64, error -71 [ 1160.248487][ T5718] savu 0003:1E7D:2D5A.0034: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0 [ 1160.434223][ T823] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 1160.506868][ T5775] usb 1-1: USB disconnect, device number 123 [ 1160.572902][ T823] usb 5-1: device descriptor read/64, error -71 [ 1160.602723][ T1013] usb 2-1: new low-speed USB device number 42 using dummy_hcd [ 1160.689963][ T823] usb usb5-port1: attempt power cycle [ 1160.754477][ T1013] usb 2-1: device descriptor read/64, error -71 [ 1160.876376][ T1013] usb usb2-port1: attempt power cycle [ 1160.884539][ T5718] usb 4-1: new full-speed USB device number 28 using dummy_hcd [ 1161.049807][ T5718] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 1161.049861][ T5718] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1161.049883][ T5718] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 1161.049915][ T5718] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 1161.049933][ T5718] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1161.056616][ T5718] usb 4-1: config 0 descriptor?? [ 1161.061799][ T823] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1161.064267][T24086] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1161.131647][ T823] usb 5-1: device descriptor read/8, error -71 [ 1161.253324][ T1013] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 1161.275670][ T1013] usb 2-1: device descriptor read/8, error -71 [ 1161.383408][ T823] usb 5-1: new full-speed USB device number 90 using dummy_hcd [ 1161.408672][ T823] usb 5-1: device descriptor read/8, error -71 [ 1161.539697][ T5718] chicony 0003:04F2:0418.0035: unknown main item tag 0x2 [ 1161.539731][ T5718] chicony 0003:04F2:0418.0035: unknown main item tag 0x0 [ 1161.539754][ T5718] chicony 0003:04F2:0418.0035: unknown main item tag 0x1 [ 1161.539776][ T5718] chicony 0003:04F2:0418.0035: unknown main item tag 0x0 [ 1161.539798][ T5718] chicony 0003:04F2:0418.0035: unknown main item tag 0x2 [ 1161.539822][ T5718] chicony 0003:04F2:0418.0035: unknown main item tag 0x0 [ 1161.539844][ T5718] chicony 0003:04F2:0418.0035: unknown main item tag 0x0 [ 1161.539866][ T5718] chicony 0003:04F2:0418.0035: unknown main item tag 0x0 [ 1161.556964][ T1013] usb 2-1: new low-speed USB device number 44 using dummy_hcd [ 1161.617890][ T1013] usb 2-1: device descriptor read/8, error -71 [ 1161.656041][ T823] usb usb5-port1: unable to enumerate USB device [ 1161.658968][ T5718] chicony 0003:04F2:0418.0035: hidraw0: USB HID v0.05 Device [HID 04f2:0418] on usb-dummy_hcd.3-1/input0 [ 1161.730812][ T1013] usb usb2-port1: unable to enumerate USB device [ 1161.777632][ T5718] usb 4-1: USB disconnect, device number 28 [ 1162.847280][ T1013] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 1162.879751][ T5784] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1163.023006][ T1013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1163.023045][ T1013] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1163.023086][ T1013] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1163.023111][ T1013] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.027693][ T1013] usb 1-1: config 0 descriptor?? [ 1163.077684][ T5784] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1163.081671][ T5784] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.081702][ T5784] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1163.118356][ T5784] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1163.118409][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.118432][ T5784] usb 4-1: Product: syz [ 1163.118450][ T5784] usb 4-1: Manufacturer: syz [ 1163.118467][ T5784] usb 4-1: SerialNumber: syz [ 1163.395956][T24095] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.398740][T24095] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.648467][ T5784] usb 4-1: selecting invalid altsetting 1 [ 1163.701666][T24093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.702775][ T5784] usb 4-1: unit 3 not found! [ 1163.705380][ T5784] usb 4-1: cannot request logical cluster ID: 0 (err: -71) [ 1163.705449][ T5784] usb 4-1: invalid MIXER UNIT descriptor 6 [ 1163.706127][T24093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.044453][ T5784] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1164.057437][ T5784] usb 4-1: USB disconnect, device number 29 [ 1164.135482][ T1013] usb 1-1: string descriptor 0 read error: -71 [ 1164.137016][ T6077] udevd[6077]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1164.161821][ T1013] uclogic 0003:256C:006D.0036: failed retrieving string descriptor #200: -71 [ 1164.161888][ T1013] uclogic 0003:256C:006D.0036: failed retrieving pen parameters: -71 [ 1164.161908][ T1013] uclogic 0003:256C:006D.0036: failed probing pen v2 parameters: -71 [ 1164.161966][ T1013] uclogic 0003:256C:006D.0036: failed probing parameters: -71 [ 1164.162166][ T1013] uclogic 0003:256C:006D.0036: probe with driver uclogic failed with error -71 [ 1164.225964][ T1013] usb 1-1: USB disconnect, device number 124 [ 1164.885762][ T1013] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1165.006966][ T5784] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1165.059297][ T1013] usb 4-1: Using ep0 maxpacket: 32 [ 1165.064026][ T1013] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1165.068235][ T1013] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 1165.068268][ T1013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.068293][ T1013] usb 4-1: Product: П [ 1165.068310][ T1013] usb 4-1: Manufacturer: ࠝ [ 1165.068329][ T1013] usb 4-1: SerialNumber: 좜䁩ⷑ콙冃䮣䑚謡똕溪欇▌䫽䚵▢円휑酀刮ኧ齐깄拣⬉덓錳┯ꚥ判﭂슔孨Ẍ߲絡ׄ牎㲰椻帗䟄뭸봵꒤끶ວ孡薶鯹袳篮ㅲ馷ೇ鍷⳽ݬㅭ [ 1165.178634][ T5784] usb 2-1: Using ep0 maxpacket: 16 [ 1165.181525][ T5784] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 1165.181563][ T5784] usb 2-1: config 0 has no interface number 0 [ 1165.181619][ T5784] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1165.181649][ T5784] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1165.203958][ T5784] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1165.204042][ T5784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.204066][ T5784] usb 2-1: Product: syz [ 1165.204083][ T5784] usb 2-1: Manufacturer: syz [ 1165.204100][ T5784] usb 2-1: SerialNumber: syz [ 1165.255557][ T5784] usb 2-1: config 0 descriptor?? [ 1165.258299][T24134] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1165.262984][T24134] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1165.502029][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1165.502060][T24139] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6472'. [ 1165.552832][T24134] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1165.553001][T24134] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1165.773440][ T5784] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1165.773737][ T5784] asix 2-1:0.34: probe with driver asix failed with error -61 [ 1165.884635][ T5718] usb 4-1: USB disconnect, device number 30 [ 1166.006093][T24121] kexec: Could not allocate control_code_buffer [ 1166.057532][T24143] nilfs2: Unknown parameter 'norecovupdate_nr_hwq_lock){++++}-{4:4}, at: add_disk_fwnode+0xe7/0x480 [ 1184.524241][T24452] [ 1184.524241][T24452] but task is already holding lock: [ 1184.524248][T24452] ffffffff8e958b58 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 1184.524297][T24452] [ 1184.524297][T24452] which lock already depends on the new lock. [ 1184.524297][T24452] [ 1184.524306][T24452] [ 1184.524306][T24452] the existing dependency chain (in reverse order) is: [ 1184.524314][T24452] [ 1184.524314][T24452] -> #7 (major_names_lock){+.+.}-{4:4}: [ 1184.524343][T24452] mutex_lock_nested+0x5a/0x1d0 [ 1184.524367][T24452] blk_request_module+0x35/0x2a0 [ 1184.524413][T24452] blkdev_get_no_open+0x3f/0xe0 [ 1184.524318][ C0] BUG: workqueue leaked atomic, lock or RCU: kworker/0:6[5784] [ 1184.524318][ C0] preempt=0x00000000 lock=5->0 RCU=2->2 workfn=usb_giveback_urb_bh [ 1184.524455][T24452] bdev_file_open_by_dev+0xa0/0x240 [ 1184.524478][ C0] INFO: lockdep is turned off. [ 1184.524492][T24452] swsusp_check+0x56/0x490 [ 1184.524498][ C0] CPU: 0 UID: 0 PID: 5784 Comm: kworker/0:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1184.524516][T24452] software_resume+0x51/0x4c0 [ 1184.524534][ C0] Tainted: [L]=SOFTLOCKUP [ 1184.524543][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1184.524550][T24452] resume_store+0x333/0x4f0 [ 1184.524561][ C0] Workqueue: wg-crypt-wg2 wg_packet_decrypt_worker [ 1184.524569][T24452] kernfs_fop_write_iter+0x3b0/0x540 [ 1184.524591][ C0] Call Trace: [ 1184.524601][T24452] vfs_write+0x629/0xba0 [ 1184.524626][ C0] [ 1184.524630][T24452] ksys_write+0x156/0x270 [ 1184.524637][ C0] dump_stack_lvl+0xe8/0x150 [ 1184.524658][T24452] do_syscall_64+0x174/0x580 [ 1184.524669][ C0] process_one_work+0x1097/0x1630 [ 1184.524692][T24452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.524714][T24452] [ 1184.524714][T24452] -> #6 (system_transition_mutex [ 1184.524714][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1184.524734][T24452] ){+.+.}-{4:4}: [ 1184.524747][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1184.524751][T24452] mutex_lock_nested+0x5a/0x1d0 [ 1184.524775][T24452] lock_system_sleep+0x49/0x70 [ 1184.524774][ C0] ? assign_work+0x3d5/0x5e0 [ 1184.524797][T24452] resume_store+0x2ff/0x4f0 [ 1184.524808][ C0] bh_worker+0x5db/0x9d0 [ 1184.524814][T24452] kernfs_fop_write_iter+0x3b0/0x540 [ 1184.524835][ C0] tasklet_action+0xc/0x70 [ 1184.524843][T24452] vfs_write+0x629/0xba0 [ 1184.524855][ C0] handle_softirqs+0x1de/0x6d0 [ 1184.524869][T24452] ksys_write+0x156/0x270 [ 1184.524896][T24452] do_syscall_64+0x174/0x580 [ 1184.524895][ C0] __local_bh_enable_ip+0x170/0x2b0 [ 1184.524926][T24452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.524931][ C0] wg_packet_decrypt_worker+0x2f8/0xd30 [ 1184.524947][T24452] [ 1184.524947][T24452] -> #5 (&of->mutex){+.+.}-{4:4} [ 1184.524961][ C0] ? wg_packet_decrypt_worker+0xde/0xd30 [ 1184.524972][T24452] : [ 1184.524978][T24452] mutex_lock_nested+0x5a/0x1d0 [ 1184.524992][ C0] ? __pfx_wg_packet_decrypt_worker+0x10/0x10 [ 1184.525002][T24452] kernfs_seq_start+0x5c/0x420 [ 1184.525021][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 1184.525031][T24452] seq_read_iter+0x3f8/0xe20 [ 1184.525052][ C0] ? update_se+0x90/0xf30 [ 1184.525063][T24452] vfs_read+0x58b/0xa80 [ 1184.525084][ C0] ? __asan_memset+0x22/0x50 [ 1184.525089][T24452] ksys_read+0x156/0x270 [ 1184.525108][ C0] ? psi_group_change+0xab8/0x1050 [ 1184.525162][T24452] do_syscall_64+0x174/0x580 [ 1184.525171][ C0] ? look_up_lock_class+0x57/0x110 [ 1184.525195][T24452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.525206][ C0] ? register_lock_class+0x31/0x2e0 [ 1184.525217][T24452] [ 1184.525217][T24452] -> #4 (&p->lock){+.+.}-{4:4}: [ 1184.525234][ C0] ? __lock_acquire+0x6b5/0x2d10 [ 1184.525248][T24452] mutex_lock_nested+0x5a/0x1d0 [ 1184.525269][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 1184.525272][T24452] seq_read_iter+0xb8/0xe20 [ 1184.525294][ C0] ? process_one_work+0x8be/0x1630 [ 1184.525326][ C0] ? process_one_work+0x8be/0x1630 [ 1184.525372][ C0] ? process_one_work+0x8be/0x1630 [ 1184.525303][T24452] lo_rw_aio+0xc80/0xf00 [ 1184.525414][ C0] process_one_work+0x98b/0x1630 [ 1184.525415][T24452] loop_process_work+0x92a/0x11b0 [ 1184.525448][T24452] process_one_work+0x98b/0x1630 [ 1184.525457][ C0] ? __pfx_process_one_work+0x10/0x10 [ 1184.525477][T24452] worker_thread+0xb49/0x1140 [ 1184.525489][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1184.525508][T24452] kthread+0x388/0x470 [ 1184.525520][ C0] worker_thread+0xb49/0x1140 [ 1184.525531][T24452] ret_from_fork+0x514/0xb70 [ 1184.525556][T24452] ret_from_fork_asm+0x1a/0x30 [ 1184.525558][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1184.525582][T24452] [ 1184.525582][T24452] -> #3 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 1184.525607][ C0] kthread+0x388/0x470 [ 1184.525615][T24452] process_one_work+0x8d7/0x1630 [ 1184.525632][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1184.525644][T24452] worker_thread+0xb49/0x1140 [ 1184.525665][ C0] ? __pfx_kthread+0x10/0x10 [ 1184.525674][T24452] kthread+0x388/0x470 [ 1184.525691][ C0] ret_from_fork+0x514/0xb70 [ 1184.525694][T24452] ret_from_fork+0x514/0xb70 [ 1184.525715][T24452] ret_from_fork_asm+0x1a/0x30 [ 1184.525719][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1184.525741][T24452] [ 1184.525741][T24452] -> #2 ((wq_completion)loop9 [ 1184.525746][ C0] ? __switch_to+0xc79/0x1410 [ 1184.525759][T24452] ){+.+.}-{0:0}: [ 1184.525770][ C0] ? __pfx_kthread+0x10/0x10 [ 1184.525774][T24452] touch_wq_lockdep_map+0xcb/0x180 [ 1184.525795][T24452] __flush_workqueue+0x14b/0x14f0 [ 1184.525795][ C0] ret_from_fork_asm+0x1a/0x30 [ 1184.525814][T24452] drain_workqueue+0xd3/0x390 [ 1184.525833][ C0] [ 1184.525833][T24452] lo_release+0x287/0x8f0 [ 1184.525859][T24452] bdev_release+0x541/0x660 [ 1184.525887][T24452] blkdev_release+0x15/0x20 [ 1184.525904][T24452] __fput+0x461/0xa70 [ 1184.525924][T24452] task_work_run+0x1d9/0x270 [ 1184.525948][T24452] do_exit+0x70f/0x22c0 [ 1184.525967][T24452] do_group_exit+0x21b/0x2d0 [ 1184.525988][T24452] get_signal+0x1284/0x1330 [ 1184.526015][T24452] arch_do_signal_or_restart+0xbc/0x840 [ 1184.526036][T24452] exit_to_user_mode_loop+0xa9/0x680 [ 1184.526059][T24452] do_syscall_64+0x353/0x580 [ 1184.526088][T24452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.526117][T24452] [ 1184.526117][T24452] -> #1 (&disk->open_mutex#4){+.+.}-{4:4}: [ 1184.526152][T24452] mutex_lock_nested+0x5a/0x1d0 [ 1184.526174][T24452] __del_gendisk+0x127/0x980 [ 1184.526195][T24452] del_gendisk+0xe7/0x160 [ 1184.526216][T24452] loop_remove+0x42/0xc0 [ 1184.526241][T24452] loop_control_ioctl+0x4ba/0x5b0 [ 1184.526267][T24452] __se_sys_ioctl+0xff/0x170 [ 1184.526295][T24452] do_syscall_64+0x174/0x580 [ 1184.526322][T24452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.526342][T24452] [ 1184.526342][T24452] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 1184.526369][T24452] __lock_acquire+0x15a5/0x2d10 [ 1184.526392][T24452] lock_acquire+0x106/0x350 [ 1184.526416][T24452] down_read+0x97/0x200 [ 1184.526434][T24452] add_disk_fwnode+0xe7/0x480 [ 1184.526455][T24452] loop_add+0x86e/0xb50 [ 1184.526481][T24452] blk_request_module+0x27d/0x2a0 [ 1184.526503][T24452] blkdev_get_no_open+0x3f/0xe0 [ 1184.526533][T24452] blkdev_open+0x1f5/0x620 [ 1184.526551][T24452] do_dentry_open+0x83d/0x13e0 [ 1184.526572][T24452] vfs_open+0x3b/0x350 [ 1184.526590][T24452] path_openat+0x2eea/0x3960 [ 1184.526618][T24452] do_file_open+0x23e/0x4a0 [ 1184.526645][T24452] do_sys_openat2+0x115/0x200 [ 1184.526666][T24452] __x64_sys_creat+0x8f/0xc0 [ 1184.526688][T24452] do_syscall_64+0x174/0x580 [ 1184.526718][T24452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.526738][T24452] [ 1184.526738][T24452] other info that might help us debug this: [ 1184.526738][T24452] [ 1184.526746][T24452] Chain exists of: [ 1184.526746][T24452] &set->update_nr_hwq_lock --> system_transition_mutex --> major_names_lock [ 1184.526746][T24452] [ 1184.526781][T24452] Possible unsafe locking scenario: [ 1184.526781][T24452] [ 1184.526789][T24452] CPU0 CPU1 [ 1184.526796][T24452] ---- ---- [ 1184.526803][T24452] lock(major_names_lock); [ 1184.526898][T24452] lock(system_transition_mutex); [ 1184.526972][T24452] lock(major_names_lock); [ 1184.527037][T24452] rlock(&set->update_nr_hwq_lock); [ 1184.527079][T24452] [ 1184.527079][T24452] *** DEADLOCK *** [ 1184.527079][T24452] [ 1184.527093][T24452] 1 lock held by syz.0.6594/24452: [ 1184.527136][T24452] #0: ffffffff8e958b58 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 1184.527288][T24452] [ 1184.527288][T24452] stack backtrace: [ 1184.527332][T24452] CPU: 1 UID: 0 PID: 24452 Comm: syz.0.6594 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1184.527411][T24452] Tainted: [L]=SOFTLOCKUP [ 1184.527432][T24452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1184.527475][T24452] Call Trace: [ 1184.527506][T24452] [ 1184.527528][T24452] dump_stack_lvl+0xe8/0x150 [ 1184.527604][T24452] print_circular_bug+0x2e1/0x300 [ 1184.527690][T24452] check_noncircular+0x12e/0x150 [ 1184.527787][T24452] __lock_acquire+0x15a5/0x2d10 [ 1184.527862][T24452] ? number+0xb1/0xf80 [ 1184.527996][T24452] ? __pfx_number+0x10/0x10 [ 1184.528109][T24452] ? add_disk_fwnode+0xe7/0x480 [ 1184.528165][T24452] lock_acquire+0x106/0x350 [ 1184.528235][T24452] ? add_disk_fwnode+0xe7/0x480 [ 1184.528333][T24452] down_read+0x97/0x200 [ 1184.528368][T24452] ? add_disk_fwnode+0xe7/0x480 [ 1184.528430][T24452] ? __pfx_down_read+0x10/0x10 [ 1184.528476][T24452] ? alloc_object+0xbf/0x300 [ 1184.528543][T24452] ? __pfx_sprintf+0x10/0x10 [ 1184.528570][T24452] add_disk_fwnode+0xe7/0x480 [ 1184.528593][T24452] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1184.528684][T24452] loop_add+0x86e/0xb50 [ 1184.528770][T24452] ? __pfx_loop_add+0x10/0x10 [ 1184.528867][T24452] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1184.528954][T24452] ? lockdep_hardirqs_on+0x7a/0x110 [ 1184.529039][T24452] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1184.529125][T24452] ? mutex_lock_nested+0x152/0x1d0 [ 1184.529175][T24452] ? blk_request_module+0x35/0x2a0 [ 1184.529237][T24452] ? __pfx_loop_probe+0x10/0x10 [ 1184.529371][T24452] blk_request_module+0x27d/0x2a0 [ 1184.529445][T24452] blkdev_get_no_open+0x3f/0xe0 [ 1184.529533][T24452] blkdev_open+0x1f5/0x620 [ 1184.529596][T24452] ? __pfx_blkdev_open+0x10/0x10 [ 1184.529644][T24452] do_dentry_open+0x83d/0x13e0 [ 1184.529719][T24452] vfs_open+0x3b/0x350 [ 1184.529782][T24452] ? path_openat+0x2ed3/0x3960 [ 1184.529866][T24452] path_openat+0x2eea/0x3960 [ 1184.529983][T24452] ? __pfx_path_openat+0x10/0x10 [ 1184.530067][T24452] ? kasan_save_track+0x4f/0x80 [ 1184.530140][T24452] ? kasan_save_track+0x3e/0x80 [ 1184.530204][T24452] ? __kasan_slab_alloc+0x6c/0x80 [ 1184.530287][T24452] ? do_raw_spin_lock+0x12b/0x2f0 [ 1184.530354][T24452] do_file_open+0x23e/0x4a0 [ 1184.530430][T24452] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1184.530524][T24452] ? __pfx_do_file_open+0x10/0x10 [ 1184.530598][T24452] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 1184.530700][T24452] ? alloc_fd+0x679/0x6f0 [ 1184.530798][T24452] do_sys_openat2+0x115/0x200 [ 1184.530862][T24452] ? __se_sys_futex+0x3a8/0x450 [ 1184.530935][T24452] ? __pfx_do_sys_openat2+0x10/0x10 [ 1184.531011][T24452] ? rcu_is_watching+0x15/0xb0 [ 1184.531065][T24452] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.531089][T24452] __x64_sys_creat+0x8f/0xc0 [ 1184.531126][T24452] do_syscall_64+0x174/0x580 [ 1184.531161][T24452] ? trace_irq_disable+0x3b/0x140 [ 1184.531186][T24452] ? clear_bhb_loop+0x40/0x90 [ 1184.531213][T24452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.531234][T24452] RIP: 0033:0x7f409b5bce59 [ 1184.531252][T24452] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1184.531272][T24452] RSP: 002b:00007f40997ed028 EFLAGS: 00000246 ORIG_RAX: 0000000000000055 [ 1184.531295][T24452] RAX: ffffffffffffffda RBX: 00007f409b836090 RCX: 00007f409b5bce59 [ 1184.531312][T24452] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00002000000000c0 [ 1184.531328][T24452] RBP: 00007f409b652d6f R08: 0000000000000000 R09: 0000000000000000 [ 1184.531344][T24452] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1184.531358][T24452] R13: 00007f409b836128 R14: 00007f409b836090 R15: 00007ffcc94e0ce8 [ 1184.531384][T24452] [ 1184.641204][T24452] block device autoloading is deprecated and will be removed. [ 1184.711314][ T823] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1184.711345][ T823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1184.711386][ T823] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1184.711430][ T823] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1184.711457][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1185.012026][ T823] hub 2-1:1.0: bad descriptor, ignoring hub [ 1185.131527][ T823] hub 2-1:1.0: probe with driver hub failed with error -5 [ 1185.132110][ T823] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1185.232585][T24442] netlink: 80 bytes leftover after parsing attributes in process `syz.1.6590'. [ 1185.239435][T24442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1185.243998][T24442] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1185.581862][ T823] usb 2-1: USB disconnect, device number 51