last executing test programs: 7.537843411s ago: executing program 3 (id=731): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) process_vm_writev(0x0, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, 0x0, 0x0, 0x0) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) 7.175426673s ago: executing program 3 (id=732): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xd8, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x80, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x6c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x44, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x38, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendto(r0, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {0x0}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) 6.569209627s ago: executing program 3 (id=735): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f00000000c0)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000440)='p', 0x1, 0x24008810, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000300)="ab", 0x34000, 0x1000000, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) 6.331035735s ago: executing program 3 (id=737): r0 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r0, 0xc0205647, &(0x7f00000000c0)={0xf010000, 0x0, "bf5dff0f251ed700f61765c214525a2572ce1ced49e8981e103268fadc1433ae", 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r1) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="94010000", @ANYRES16=r2, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) 6.214871831s ago: executing program 3 (id=740): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r3, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x400, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xfffffff5, 0x1e}}}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x240400c0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x100) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x26) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x1e) r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r7, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="4e0e03"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r7, 0x0, 0x0) 5.034955521s ago: executing program 0 (id=746): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0xfffffffd) r1 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) sendmsg$key(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES8], 0x27}}, 0x4000080) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) 4.340089037s ago: executing program 0 (id=750): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/158, 0x9e) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80000) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000400)) sendmmsg$sock(r2, &(0x7f0000001780)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'bond_slave_1\x00'}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="e5e80a5f17bdac9defa84f5af17c84daa7c0a1751651e732bc3e960a8ad777c410f9fd3b3b894d5ba7894b5cffdc6039900ac4a2d147dead0666d38db7799ab150b46c9801918cb1f5c331171eea4dfb291e3f008319635c8d54a03aea3d114bc314a474e800493431e7531d1e794584051461349e00dbad08d9f2863d3f8b0113f962878792441b7ceda7e9d963e7465167cfae758573f363d67124230bcd3fb9fdbc55339c520967f3d18a16c3dca1c8f46d63d353a0c69dcfcc65d7185149f9d0e2ede570", 0xc6}], 0x1}}, {{&(0x7f0000000340)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="dedeb5319e4c0d554170b28c679ad6e985b97b8471409898d1cc1348068d902d2bfe0d50e85f00259758c70199a44f0347d1538db9e7b7f553cdc24451d1", 0x3e}, {&(0x7f00000014c0)="c6bd34a128a6366ebd97683b9d13d76a1c13bb9bc36cddd9734c10f6203b137bfe35f22d4806bc0f8cf09006a53baaae2a72502fbab2160e53c92ed0151cd6c8bc46f072024bfcc09357a96d875c791fc4537cd68a06d07c379d676dededa9fd6e226375636ae6d48796f643f43dbb1e8b1d1d64d5331ba9156420e8fd29010c894eceb4c1e4c2ce", 0x88}], 0x3, &(0x7f00000015c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}], 0x30}}, {{&(0x7f0000001600)=@hci={0x1f, 0x1}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001680)="dc4e1cb7823ad08d81d9d5f793164403d05e37a55e08fa9089a577334b7b4c83059a7fa7a65f4170064e4a860db0", 0x2e}], 0x1, &(0x7f0000001700)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}}], 0x3, 0x80) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x71) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040100010300000009210000800122f80409058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 4.078646147s ago: executing program 1 (id=751): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0xffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x10120, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x10001}, @hyper, 0x600, 0x3, 0x5e}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) 3.898315793s ago: executing program 1 (id=753): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e1208000f0000000406a80016c00800094013000000035c0461c1d67f6f94007134cf6efb8007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791433a5ee4ce1b14d6d930dfe1d9d33dfe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad909d5e1cace81ed0bffece0b42a9eca0200e6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a9410000", 0xd8}], 0x1}, 0x8084) (fail_nth: 3) 3.802472828s ago: executing program 1 (id=755): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x60000, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYRES32=r0, @ANYRESHEX=r1], 0xb2) 3.696898852s ago: executing program 1 (id=756): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0xffbffffe, @mcast1, 0x9}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x14, &(0x7f0000000040), 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r1, &(0x7f0000000140)={@val={0x3, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000ff000040720501cb6526010203010902120001000000000904"], 0x0) 3.472208654s ago: executing program 0 (id=757): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x40000}, 0x1800) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x11, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000001c0)=0x2110, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000480), 0x4090c1, 0x0) ioctl$SOUND_PCM_READ_BITS(r2, 0x80045005, &(0x7f00000004c0)) sendmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000000640)=@ieee802154={0x24, @long={0x3, 0x2, {0x300}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d4", 0x1}], 0x1}}], 0x1, 0x4000000) mlockall(0x0) recvmmsg(r1, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x4}], 0x2, 0x2002, 0x0) syz_usb_control_io$lan78xx(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0x22, 0x50, {0x50, 0xf, "c3d96a0384becac3e89d6d4d5b5aa00d2897404753fdad9c7d9a544e471534f5f273024593f9b5752382582637ad72a7528baf9953cd898c26dde2179938d8864ba097d8538500273ff7edc067f4"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40e}}}, &(0x7f0000000440)={0x34, &(0x7f0000000280)={0x20, 0x15, 0x79, "0ba576463393574154cb9cd65a65c289d65ebe2f3dd8b09f832623f1bb1c9769f733973c56107382e365e6ac1377259544341e6625a80dc5aac45d26ec21043be0477970b7c9903012720f83bb43428c8f936b840bbbaa8071d42717dfd6162bd060a96780e2e69274a32069361a27820074c4322352cdddc2"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1c}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0x9}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x1}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "013119fad8bf55f8c77bbb1afe29a84016014f1c8c74c944e11b37fbd09f906604393d39578265cc0121d0ae02e758"}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001b", @ANYBLOB='-/'], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20040804) setsockopt$IP_VS_SO_SET_TIMEOUT(r3, 0x0, 0x48a, &(0x7f0000000040)={0x5ec1f0fe, 0xe, 0x9}, 0xc) syz_usb_control_io$printer(r0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwritev2(r5, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x43) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r5, 0x0, 0xa, &(0x7f0000000200)=0x8, 0x4) 3.226620723s ago: executing program 2 (id=758): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x68, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x410c}, {0x4c, 0x14, {0xffffffee, @link='syz1\x00'}}}}, 0x68}}, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$VIDIOC_G_SELECTION(r3, 0xc040565e, &(0x7f0000000000)={0xc, 0x2, 0x7, {0x6, 0x9, 0xe202, 0x10}}) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000040)) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x1, &(0x7f00000017c0)=""/218, &(0x7f00000018c0)=0xda) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/55, 0x37}, {0x0}], 0x2, 0x3, 0x4000041) 3.076864448s ago: executing program 3 (id=759): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x36f740, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1024) add_key$user(&(0x7f0000000400), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000480)='\x00', 0x1, 0xffffffffffffffff) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000006c0)="f40fc24077021c9b084c60ffc26f26db12b9e78d629870bb26edb4a5e1cc0942ed8c58ca4fe84b94a0e31ea64089ee9ca1efb52945ffebbfea11dd3d0df936a10285eccab940ab5c96cb5d81dac1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddabce530b63fab525337057438cf64a506d54d5c83e3e593d1d53ad0e6a44168fe8cfc6ad98b653d80636e4ddc1f2ab58762b3494250b9557f5b606a43e50874c90143034142cd5f7bd9b4dd876b97b7feb75b9138dbf818a3c6b96dd80", 0xc0, 0xfffffffffffffffb) r1 = userfaultfd(0x80801) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r3, 0x80184132, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00006e4000/0x4000)=nil, 0x4000}, 0x7}) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}}) 2.872193595s ago: executing program 0 (id=760): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="071101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000080)={{{@in=@remote, @in=@rand_addr=0x64010101, 0x4e24, 0x1, 0x4e20, 0xfffa, 0x2, 0x20, 0x0, 0x16}, {0x9, 0x7, 0x9, 0xffffffff, 0x1, 0x3, 0x1, 0x200}, {0x1, 0x4, 0x3, 0x81}, 0x1c4a, 0x0, 0x2, 0x1, 0x3, 0x1}, {{@in6=@rand_addr=' \x01\x00', 0x4d2, 0x6c}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3503, 0x7, 0x1, 0x4, 0x5e, 0x4, 0x6}}, 0xe8) syz_usb_control_io$uac1(r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x20, 0x5, 0x77, {0x77, 0x7, "9fc18c1104fd74b2ff26c6117344607e005cb9879e17b96f687cd355629a0bd0fb39bf9cc9703f36b3e54d94d5e5b7372041f6fcd690ceeb81131d415fdece52533a795e5bea6037aaf437897293beca83ad4bf8a510c1461c0cb5c76b3e3ea8df12f50c74ae6a0ba9d71fe14647eb59d605c53ad6"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x280a}}}, &(0x7f00000004c0)={0x44, &(0x7f00000001c0)={0x40, 0x18, 0xb5, "044fc8ba3cfd7ec204d5e6a555213a60fb2dda402c1e0a4e344a0c056c63d501b02532fef51f06e3bdbc78c910261b03bc8ae42e1e5807c4e494fc4c0adf1fb64ea3aa3c527facfca93c44dd87ce4e1144241f95b3731d58a8b2023e8b5592bcbcd1ea8242cb4cde9677d48a3bc04bdc401f921e4e462f674628fec9006d5dcec1c29bc7549d404f3e6c58746406227d7f31a0777c0f0a9dc0412da5ad8836bbc50ba68f23cfd6c3f26864ae92e6b16f81d237b863"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000380)={0x20, 0x81, 0x1, '0'}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "d0"}, &(0x7f0000000400)={0x20, 0x83, 0x1, "b0"}, &(0x7f0000000440)={0x20, 0x84, 0x4, "da5ff977"}, &(0x7f0000000480)={0x20, 0x85, 0x3, 'D#w'}}) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="280000002e0003050000ddffffff0000180000800c0000000d00fcdba9ccdb21243fe1"], 0x28}], 0x1}, 0x14008010) 2.738872551s ago: executing program 2 (id=761): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) ftruncate(0xffffffffffffffff, 0xffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x2710, @local}, 0x10) recvfrom(r0, 0x0, 0x0, 0x10120, 0x0, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x7) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x10001}, @hyper, 0x600, 0x3, 0x5e}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffffb]}, 0x8, 0x0) readv(r1, &(0x7f0000000580)=[{&(0x7f00000003c0)=""/234, 0xea}], 0x1) 2.124439742s ago: executing program 0 (id=762): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x80) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffff1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000640)={0x1c, &(0x7f0000000240)=ANY=[@ANYBLOB="001401"], 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) splice(r5, 0x0, r4, &(0x7f0000000140)=0x8008, 0x9, 0x7) getsockopt$inet_buf(r4, 0x0, 0x2f, &(0x7f0000000840)=""/4096, &(0x7f0000001840)=0x1000) r6 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x80000) syz_usb_control_io$uac1(r0, &(0x7f0000000380)={0x14, &(0x7f0000000080)={0x40, 0x7, 0x58, {0x58, 0x1, "bc8cbd1a223a5acac5891ca09af3e765ad496c07b25f0ab2f7066fd7649ab930695b90d4a5fad9b923286aa64b6252913871242f9db69fcfeddc16a656047473730447d8835aaea072424aaa7d91f9d2cad0e6c8f6e3"}}, &(0x7f0000000280)={0x0, 0x3, 0xb9, @string={0xb9, 0x3, "b88814029634de589a7a7811aab8818c916f1a649b6bec8b71f7522eaacb292fbf4e7b2fbdb9c29d0bae094f5a30042805ef0104e4048e2a124f15af70a891394b74aebe79c1e3ca6c2a4a01fc7fc88374156e965d5243396bf6d4077fcf53767c0a77b26d6d40279a40a6bb78c2701f11318e92ef9061d0f3866167b8a0c0553b2f83ef8a2e97c843640bdbe1ff58cf9f352320669e4ce2a181986c3750a07df331c079a55edbd75275fe43e81cb6b9de1e90550b73d2"}}}, &(0x7f00000007c0)={0x44, &(0x7f0000000440)={0x20, 0x31, 0x86, "f6553b3af91125a3a15e7df924a23dc16aa3a601af469566cdc468579b1305c048db5d62fabc021de3dbd6868761fb36cfd18200d71a329d84110c8814663e4300d3c4f930cc184f3db813c204a09467772180edfae839bf52b69b02d346cbea45200676665f7263c4e7c3a07f1d1687f00e7d9071d6e9dd480061c1dbbe26067164d0c0f558"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000600)={0x20, 0x81, 0x1, "c2"}, &(0x7f0000000680)={0x20, 0x82, 0x1, "99"}, &(0x7f00000006c0)={0x20, 0x83, 0x1, "1d"}, &(0x7f0000000700)=ANY=[@ANYBLOB="208b04000000b764b2cb"], &(0x7f0000000780)={0x20, 0x85, 0x3, "7e5ff9"}}) ioctl$BLKCLOSEZONE(r6, 0x40101287, &(0x7f0000000340)={0x5, 0x1}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000740)={0x2c, &(0x7f0000000540)={0x40, 0x5, 0x33, "9a31d2afe80f4c7a8b2be6b03128feabc873c9695ff34f39601a7a93419931f3d70645ffae91a3a9f39c1271368584f5721e96"}, 0x0, 0x0, 0x0, 0x0}) 2.060462864s ago: executing program 1 (id=763): syz_open_dev$hidraw(0x0, 0x9, 0x39c7db82c701209b) r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000000100)={0x98f904, 0x260, "1864a6c62c39171591aa5c57f1ffae423f14c23b4d76cd333fd2903725c6207d", 0x7f, 0xc5, 0x3, 0x1, 0xc0000000}) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b"], 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r3, 0x0, 0x200000c8) chdir(0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_UNIMAP(r4, 0x4b66, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000000)={0x2, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r7 = socket$kcm(0x10, 0x5, 0x0) sendmsg$inet(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000900), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4a046) syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022220000009601000601008e000000002ac2048538b3"], 0x0}, 0x0) syz_open_dev$evdev(0x0, 0xa, 0x903d01) syz_open_dev$evdev(0x0, 0x2, 0x8000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="f40000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c0002800500010000000000240001800c000280050001000000000008000200e0000002640002802c00018014000300ff02000000000000000000000000000114000400fe8000000000000000000000000000bb2c000180140003000000000000000000000000000000000014000400fe80000000000000000000000000001c06000340000400001c00188008000240000000ff08000140000000710800034000000081"], 0xf4}}, 0x0) write$char_usb(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000001640)=ANY=[], 0x0) syz_usb_disconnect(r1) 1.873229939s ago: executing program 2 (id=764): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/meminfo\x00', 0x0, 0x0) pipe2(&(0x7f0000000000), 0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x420403, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000080), &(0x7f0000000200), &(0x7f00000001c0), 0x101000000000000, 0x1}) 1.827154168s ago: executing program 2 (id=765): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000040)=""/158, 0x9e) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000140)=0x10, 0x80000) ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000000400)) sendmmsg$sock(r2, &(0x7f0000001780)=[{{&(0x7f0000000180)=@pppoe={0x18, 0x0, {0x1, @broadcast, 'bond_slave_1\x00'}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)="e5e80a5f17bdac9defa84f5af17c84daa7c0a1751651e732bc3e960a8ad777c410f9fd3b3b894d5ba7894b5cffdc6039900ac4a2d147dead0666d38db7799ab150b46c9801918cb1f5c331171eea4dfb291e3f008319635c8d54a03aea3d114bc314a474e800493431e7531d1e794584051461349e00dbad08d9f2863d3f8b0113f962878792441b7ceda7e9d963e7465167cfae758573f363d67124230bcd3fb9fdbc55339c520967f3d18a16c3dca1c8f46d63d353a0c69dcfcc65d7185149f9d0e2ede570", 0xc6}], 0x1}}, {{&(0x7f0000000340)=@in={0x2, 0x4e22, @remote}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000480)="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", 0x1000}, {&(0x7f0000001480)="dedeb5319e4c0d554170b28c679ad6e985b97b8471409898d1cc1348068d902d2bfe0d50e85f00259758c70199a44f0347d1538db9e7b7f553cdc24451d1", 0x3e}, {&(0x7f00000014c0)="c6bd34a128a6366ebd97683b9d13d76a1c13bb9bc36cddd9734c10f6203b137bfe35f22d4806bc0f8cf09006a53baaae2a72502fbab2160e53c92ed0151cd6c8bc46f072024bfcc09357a96d875c791fc4537cd68a06d07c379d676dededa9fd6e226375636ae6d48796f643f43dbb1e8b1d1d64d5331ba9156420e8fd29010c894eceb4c1e4c2ce", 0x88}], 0x3, &(0x7f00000015c0)=[@txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x10001}}], 0x30}}, {{&(0x7f0000001600)=@hci={0x1f, 0x1}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001680)="dc4e1cb7823ad08d81d9d5f793164403d05e37a55e08fa9089a577334b7b4c83059a7fa7a65f4170064e4a860db0", 0x2e}], 0x1, &(0x7f0000001700)=[@mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}], 0x78}}], 0x3, 0x80) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x71) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001b80)=ANY=[@ANYBLOB="12010000000000106161154d00000000000109022400010000000009040100010300000009210000800122f80409058103"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) 1.079268556s ago: executing program 2 (id=766): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r5, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2, 0x0, r0}, &(0x7f0000000d40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x31c, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x1, 0x2000008, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x1, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3a0b, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0xfdef, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r4, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 415.402235ms ago: executing program 0 (id=767): r0 = userfaultfd(0x801) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048c8) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', r2, &(0x7f00000003c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x17c}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000000)={0x3, 0x1, 0x2, 0x14, 0x4}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) r6 = socket$inet6_udp(0xa, 0x2, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0xc4000, 0x78) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000005f00)={'wlan0\x00', 0x0}) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03214e000000000001ffca1b1f0000000024c00e72f750375ed08a56", 0x2d}], 0x1}, 0x4000000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000006000)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd0600ffdbdb252100000008000300", @ANYRES32=r8, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008009e"], 0x44}}, 0x28000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r3, 0x40146f2c, &(0x7f0000000040)={0x9, 0x0, 0x3, 0x3}) r9 = openat$cgroup(r1, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r9, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000140)={{&(0x7f000097b000/0x4000)=nil, 0x4000}}) 95.284467ms ago: executing program 2 (id=768): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) bind$packet(r3, &(0x7f0000000000)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r3, &(0x7f0000000580)="02043c0001000000010e0200c52cf7c20675e005b02f0800eb2b2ff0dadb897c6b112002faffffff3066090cb600c5471d130aaf14c85443b705ca7952ad90e59066321a54e7", 0x46, 0x40001, 0x0, 0x0) r6 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) write$tun(r0, &(0x7f0000000140)=ANY=[], 0xfdef) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x2) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r8, r8) setpgid(0x0, r8) fchdir(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r9, &(0x7f0000000ec0)=[{{0x0, 0x6e, 0x0}}, {{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x2, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x208001, 0x0) 0s ago: executing program 1 (id=769): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000000)={{{@in6=@private2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@private}}, &(0x7f0000000100)=0xe8) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) (async) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0), 0x4a41, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000200)=0x4, 0x4) (async) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000200)=0x4, 0x4) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000240), &(0x7f0000000280)=0x4) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f00000002c0)=0x2, 0x4) ioctl$sock_inet_sctp_SIOCINQ(r5, 0x541b, &(0x7f0000000300)) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x851}, 0x800) (async) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6d}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x851}, 0x800) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000500)={'geneve1\x00', {0x2, 0x0, @broadcast}}) setregid(r3, r3) (async) setregid(r3, r3) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000000540), &(0x7f0000000580)=0x4) r8 = add_key(&(0x7f00000005c0)='cifs.idmap\x00', &(0x7f0000000600)={'syz', 0x1}, &(0x7f0000000640)="7b5d79a3c427ddef37c370f8530b5994709965dd2374cfd3f37a417e07d9222c746e95f1a366e17f1d8e3bfd0234f2fea2869af94289d8dd2b293354ca1c547eac19339e0321d35071957c88b108a13a9c56ca668e8191b12a3d3c62636c5b63a36733aead32d2f8535e045e1b76a6b57b1372d90df300444168902c39f030bb1bff83129d80e59b6a862f4371d919348b28fb19b5804232e3c35c4292106905224b", 0xa2, 0xfffffffffffffffd) keyctl$setperm(0x5, r8, 0x20000000) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000700)={0xf, 0x5, {0x7b247cce, @struct={0x8b, 0x597}, 0x0, 0x0, 0x6, 0x400, 0x4536, 0x0, 0x69, @struct={0x2, 0x10}, 0x6, 0xfffffffd, [0x443e, 0x10, 0x5, 0xf63, 0x0, 0x9]}, {0x2, @struct={0xe, 0x80000001}, 0x0, 0x8, 0x5, 0x101, 0x2, 0x3, 0x0, @usage=0x40, 0x6, 0x3, [0x100000001, 0x3, 0x4, 0x9, 0x7, 0x2]}, {0x6e40, @usage=0x3, 0x0, 0xa4, 0x0, 0x5, 0x1, 0x9, 0x80, @usage=0xffffffffffff0001, 0xffffff00, 0x2, [0xffffffffffffffff, 0x8, 0x9, 0xffffffffffff02fe, 0x6, 0x5]}, {0x0, 0x3, 0x8}}) (async) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000700)={0xf, 0x5, {0x7b247cce, @struct={0x8b, 0x597}, 0x0, 0x0, 0x6, 0x400, 0x4536, 0x0, 0x69, @struct={0x2, 0x10}, 0x6, 0xfffffffd, [0x443e, 0x10, 0x5, 0xf63, 0x0, 0x9]}, {0x2, @struct={0xe, 0x80000001}, 0x0, 0x8, 0x5, 0x101, 0x2, 0x3, 0x0, @usage=0x40, 0x6, 0x3, [0x100000001, 0x3, 0x4, 0x9, 0x7, 0x2]}, {0x6e40, @usage=0x3, 0x0, 0xa4, 0x0, 0x5, 0x1, 0x9, 0x80, @usage=0xffffffffffff0001, 0xffffff00, 0x2, [0xffffffffffffffff, 0x8, 0x9, 0xffffffffffff02fe, 0x6, 0x5]}, {0x0, 0x3, 0x8}}) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000b00)={{r0}, {@val={r9}, @actul_num={@void, 0x3, 0x45}}}) (async) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, &(0x7f0000000b00)={{r0}, {@val={r9}, @actul_num={@void, 0x3, 0x45}}}) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000b40)=0x8, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000b80)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000b80)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000bc0)={0x1d, r10, 0x0, {0x0, 0xf0}, 0xff}, 0x18) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000c00), 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r11, 0x0, 0x2, &(0x7f0000000c40)={0x309, [0x0, 0x1], 0x9}, 0x10) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000c80)=0x100, 0x4) mount$9p_fd(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x1000, &(0x7f0000000d40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@mmap}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, r3}}], [{@obj_type={'obj_type', 0x3d, 'cifs.idmap\x00'}}, {@dont_appraise}]}}) (async) mount$9p_fd(0x0, &(0x7f0000000cc0)='./file0\x00', &(0x7f0000000d00), 0x1000, &(0x7f0000000d40)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@loose}, {@mmap}, {@nodevmap}, {@dfltgid={'dfltgid', 0x3d, r3}}], [{@obj_type={'obj_type', 0x3d, 'cifs.idmap\x00'}}, {@dont_appraise}]}}) ioctl$XFS_IOC_AG_GEOMETRY(r5, 0xc080583d, &(0x7f0000000e00)={0x9, 0x6, 0x4f0, 0x6, 0x7, 0xfffffff1, 0x8, 0x698b}) ustat(0x1000, &(0x7f0000000e80)) kernel console output (not intermixed with test programs): /0x480 [ 141.954919][ T6473] csi_J+0x6c4/0xe50 [ 141.954948][ T6473] do_con_write+0x4175/0x54b0 [ 141.955030][ T6473] ? __pfx_do_con_write+0x10/0x10 [ 141.955060][ T6473] ? do_raw_spin_lock+0x12b/0x2f0 [ 141.955118][ T6473] ? lockdep_hardirqs_on+0x7a/0x110 [ 141.955148][ T6473] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 141.955180][ T6473] con_write+0x31/0x2e0 [ 141.955205][ T6473] n_tty_write+0xd55/0x1220 [ 141.955260][ T6473] ? __pfx_n_tty_write+0x10/0x10 [ 141.955287][ T6473] ? __pfx_woken_wake_function+0x10/0x10 [ 141.955316][ T6473] ? file_tty_write+0x43f/0xa10 [ 141.955333][ T6473] ? mutex_lock_interruptible_nested+0x168/0x1d0 [ 141.955358][ T6473] ? __pfx_n_tty_write+0x10/0x10 [ 141.955386][ T6473] file_tty_write+0x561/0xa10 [ 141.955418][ T6473] vfs_write+0x629/0xba0 [ 141.955455][ T6473] ? __pfx_vfs_write+0x10/0x10 [ 141.955493][ T6473] ? __fget_files+0x2a/0x420 [ 141.955526][ T6473] ksys_write+0x156/0x270 [ 141.955556][ T6473] ? __pfx_ksys_write+0x10/0x10 [ 141.955591][ T6473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.955613][ T6473] do_syscall_64+0x174/0x580 [ 141.955639][ T6473] ? trace_irq_disable+0x3b/0x140 [ 141.955661][ T6473] ? clear_bhb_loop+0x40/0x90 [ 141.955685][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.955704][ T6473] RIP: 0033:0x7f8a4452ce59 [ 141.955723][ T6473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.955738][ T6473] RSP: 002b:00007f8a42786028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 141.955757][ T6473] RAX: ffffffffffffffda RBX: 00007f8a447a5fa0 RCX: 00007f8a4452ce59 [ 141.955771][ T6473] RDX: 0000000000001006 RSI: 0000200000000000 RDI: 0000000000000003 [ 141.955782][ T6473] RBP: 00007f8a42786090 R08: 0000000000000000 R09: 0000000000000000 [ 141.955793][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.955804][ T6473] R13: 00007f8a447a6038 R14: 00007f8a447a5fa0 R15: 00007fff83dc89b8 [ 141.955838][ T6473] [ 142.257776][ T32] gspca_vc032x: reg_w err -110 [ 142.257794][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257803][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257812][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257821][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257831][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257839][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257847][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257855][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257863][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257870][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257879][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257886][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257894][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257901][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257909][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257918][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257924][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257932][ T32] gspca_vc032x: I2c Bus Busy Wait 00 [ 142.257940][ T32] gspca_vc032x: Unknown sensor... [ 142.258017][ T32] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 142.386066][ T5623] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 142.502934][ T5807] usb 4-1: USB disconnect, device number 17 [ 142.539748][ T5623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 142.539781][ T5623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 142.547569][ T5623] usb 2-1: New USB device found, idVendor=413c, idProduct=8186, bcdDevice=a0.a2 [ 142.547596][ T5623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.547615][ T5623] usb 2-1: Product: syz [ 142.547627][ T5623] usb 2-1: Manufacturer: syz [ 142.547640][ T5623] usb 2-1: SerialNumber: syz [ 142.582942][ T5623] usb 2-1: config 0 descriptor?? [ 142.806212][ T5347] usb 2-1: USB disconnect, device number 25 [ 142.898603][ T6487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.901594][ T6487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.187497][ T5623] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 143.318069][ T5623] usb 1-1: device descriptor read/64, error -71 [ 143.557572][ T5623] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 143.623515][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.624054][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.625910][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.626486][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.630369][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.630909][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.681488][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.681789][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.737839][ T5623] usb 1-1: device descriptor read/64, error -71 [ 143.807493][ T32] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 143.847866][ T5623] usb usb1-port1: attempt power cycle [ 143.884310][ T6503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.885158][ T6503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.937783][ T32] usb 2-1: device descriptor read/64, error -71 [ 144.027561][ T5347] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 144.177573][ T32] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 144.187552][ T5347] usb 4-1: Using ep0 maxpacket: 16 [ 144.187991][ T5623] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 144.208552][ T5623] usb 1-1: device descriptor read/8, error -71 [ 144.210488][ T5347] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 144.210513][ T5347] usb 4-1: config 0 has no interface number 0 [ 144.210547][ T5347] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.210560][ T5347] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.210580][ T5347] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 144.210592][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.213417][ T5347] usb 4-1: config 0 descriptor?? [ 144.307859][ T32] usb 2-1: device descriptor read/64, error -71 [ 144.417725][ T32] usb usb2-port1: attempt power cycle [ 144.447522][ T5623] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 144.471068][ T5623] usb 1-1: device descriptor read/8, error -71 [ 144.577893][ T5623] usb usb1-port1: unable to enumerate USB device [ 144.628013][ T5347] hid (null): unknown global tag 0xc [ 144.631584][ T5347] hid (null): unknown global tag 0xc [ 144.631603][ T5347] hid (null): report_id 22254 is invalid [ 144.631655][ T5347] hid (null): unknown global tag 0xd [ 144.650923][ T6511] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 9 out of range (51000000..2150000000) [ 144.757596][ T32] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 144.778064][ T32] usb 2-1: device descriptor read/8, error -71 [ 145.019365][ T32] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 145.022541][ T6524] syzkaller1: entered promiscuous mode [ 145.022555][ T6524] syzkaller1: entered allmulticast mode [ 145.041632][ T6519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.044186][ T6519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.052862][ T32] usb 2-1: device descriptor read/8, error -71 [ 145.157848][ T32] usb usb2-port1: unable to enumerate USB device [ 145.286142][ T6526] netlink: 180 bytes leftover after parsing attributes in process `syz.2.252'. [ 145.663793][ T6532] FAULT_INJECTION: forcing a failure. [ 145.663793][ T6532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.663815][ T6532] CPU: 0 UID: 0 PID: 6532 Comm: syz.2.255 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 145.663827][ T6532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.663834][ T6532] Call Trace: [ 145.663838][ T6532] [ 145.663843][ T6532] dump_stack_lvl+0xe8/0x150 [ 145.663860][ T6532] should_fail_ex+0x46b/0x600 [ 145.663879][ T6532] __kvm_read_guest_page+0x18d/0x240 [ 145.663907][ T6532] kvm_fetch_guest_virt+0x12b/0x170 [ 145.663934][ T6532] ? __pfx_kvm_fetch_guest_virt+0x10/0x10 [ 145.663957][ T6532] __do_insn_fetch_bytes+0x31c/0x6d0 [ 145.663991][ T6532] ? __pfx___do_insn_fetch_bytes+0x10/0x10 [ 145.664013][ T6532] ? vmx_cache_reg+0x250/0x650 [ 145.664026][ T6532] ? x86_decode_insn+0x122f/0x5e00 [ 145.664043][ T6532] x86_decode_insn+0x38e/0x5e00 [ 145.664058][ T6532] ? __lock_acquire+0x6b5/0x2d10 [ 145.664085][ T6532] ? __pfx_x86_decode_insn+0x10/0x10 [ 145.664098][ T6532] ? is_bpf_text_address+0x26/0x2b0 [ 145.664116][ T6532] ? vmx_read_guest_seg_ar+0x3e9/0x640 [ 145.664132][ T6532] ? __asan_memset+0x22/0x50 [ 145.664142][ T6532] ? init_decode_cache+0xf3/0x160 [ 145.664157][ T6532] ? init_emulate_ctxt+0x533/0x6e0 [ 145.664180][ T6532] ? __pfx_init_emulate_ctxt+0x10/0x10 [ 145.664193][ T6532] ? kvm_multiple_exception+0x2b0/0x950 [ 145.664212][ T6532] x86_emulate_instruction+0x315/0x2030 [ 145.664229][ T6532] ? __lock_acquire+0x6b5/0x2d10 [ 145.664244][ T6532] ? vmx_read_guest_seg_ar+0x3e9/0x640 [ 145.664259][ T6532] ? __pfx_x86_emulate_instruction+0x10/0x10 [ 145.664279][ T6532] ? __vmx_set_segment+0x56c/0xab0 [ 145.664295][ T6532] ? vmx_handle_exit_irqoff+0xff/0xac0 [ 145.664307][ T6532] ? vmx_set_segment+0x77/0x170 [ 145.664325][ T6532] handle_ud+0x19e/0x680 [ 145.664338][ T6532] ? __lock_acquire+0x6b5/0x2d10 [ 145.664355][ T6532] ? __pfx_handle_ud+0x10/0x10 [ 145.664373][ T6532] ? clear_bhb_loop+0x40/0x90 [ 145.664386][ T6532] ? rcu_is_watching+0x15/0xb0 [ 145.664402][ T6532] ? handle_exception_nmi+0x2df/0x1330 [ 145.664417][ T6532] ? __pfx_handle_exception_nmi+0x10/0x10 [ 145.664430][ T6532] vmx_handle_exit+0x1081/0x17e0 [ 145.664454][ T6532] vcpu_run+0x5c5b/0x7830 [ 145.664473][ T6532] ? vcpu_run+0x4982/0x7830 [ 145.664509][ T6532] ? __pfx_vcpu_run+0x10/0x10 [ 145.664519][ T6532] ? __asan_memcpy+0x40/0x70 [ 145.664529][ T6532] ? complete_emulated_mmio+0x53e/0x900 [ 145.664550][ T6532] kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0 [ 145.664567][ T6532] ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0 [ 145.664578][ T6532] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 145.664606][ T6532] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 145.664626][ T6532] ? lockdep_hardirqs_on+0x7a/0x110 [ 145.664644][ T6532] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 145.664658][ T6532] ? _mutex_lock_killable+0x152/0x1d0 [ 145.664673][ T6532] ? kvm_vcpu_ioctl+0x283/0xfe0 [ 145.664689][ T6532] kvm_vcpu_ioctl+0xa65/0xfe0 [ 145.664706][ T6532] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 145.664730][ T6532] ? __fget_files+0x2a/0x420 [ 145.664744][ T6532] ? __fget_files+0x2a/0x420 [ 145.664755][ T6532] ? __fget_files+0x3a6/0x420 [ 145.664765][ T6532] ? __fget_files+0x2a/0x420 [ 145.664778][ T6532] ? bpf_lsm_file_ioctl+0x9/0x20 [ 145.664793][ T6532] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 145.664807][ T6532] __se_sys_ioctl+0xff/0x170 [ 145.664821][ T6532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.664832][ T6532] do_syscall_64+0x174/0x580 [ 145.664847][ T6532] ? clear_bhb_loop+0x40/0x90 [ 145.664860][ T6532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.664870][ T6532] RIP: 0033:0x7f098906ce59 [ 145.664880][ T6532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.664889][ T6532] RSP: 002b:00007f09872be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.664900][ T6532] RAX: ffffffffffffffda RBX: 00007f09892e5fa0 RCX: 00007f098906ce59 [ 145.664907][ T6532] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 145.664913][ T6532] RBP: 00007f09872be090 R08: 0000000000000000 R09: 0000000000000000 [ 145.664919][ T6532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.664925][ T6532] R13: 00007f09892e6038 R14: 00007f09892e5fa0 R15: 00007ffc3595e938 [ 145.664941][ T6532] [ 146.450898][ T5807] usb 4-1: USB disconnect, device number 18 [ 146.751873][ T6547] netlink: 48 bytes leftover after parsing attributes in process `syz.2.259'. [ 147.697529][ T5811] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 147.852423][ T5811] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.852454][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.852473][ T5811] usb 4-1: Product: syz [ 147.852487][ T5811] usb 4-1: Manufacturer: syz [ 147.852498][ T5811] usb 4-1: SerialNumber: syz [ 147.861077][ T5811] usb 4-1: config 0 descriptor?? [ 148.105034][ T5811] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 148.518801][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.519486][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.018384][ T5807] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 149.179944][ T5807] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 149.179975][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.222235][ T5807] usb 2-1: config 0 descriptor?? [ 149.253532][ T5807] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 149.340658][ T6562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.372452][ T6562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.507600][ T32] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 149.603019][ T5811] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 149.616731][ T5811] usb 4-1: USB disconnect, device number 19 [ 149.658598][ T5807] gspca_cpia1: usb_control_msg 03, error -71 [ 149.661078][ T5807] gspca_cpia1: usb_control_msg 01, error -71 [ 149.661097][ T5807] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 149.669937][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 149.691988][ T32] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 149.692015][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.692033][ T32] usb 1-1: config 0 has no interface number 0 [ 149.711230][ T32] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 149.711260][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.711280][ T32] usb 1-1: Product: syz [ 149.711293][ T32] usb 1-1: Manufacturer: syz [ 149.711307][ T32] usb 1-1: SerialNumber: syz [ 149.736961][ T32] usb 1-1: config 0 descriptor?? [ 149.742769][ T32] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22 [ 149.783408][ T5807] usb 2-1: USB disconnect, device number 30 [ 149.948817][ T6605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.949940][ T6605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.976217][ T5811] usb 1-1: USB disconnect, device number 26 [ 150.304763][ T5620] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 151.550405][ T6647] loop5: detected capacity change from 0 to 7 [ 151.638967][ T6647] Dev loop5: unable to read RDB block 7 [ 151.639010][ T6647] loop5: unable to read partition table [ 151.639837][ T6647] loop5: partition table beyond EOD, truncated [ 151.639933][ T6647] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 151.734368][ T6655] FAULT_INJECTION: forcing a failure. [ 151.734368][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 151.734398][ T6655] CPU: 0 UID: 0 PID: 6655 Comm: syz.0.286 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 151.734430][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 151.734440][ T6655] Call Trace: [ 151.734447][ T6655] [ 151.734454][ T6655] dump_stack_lvl+0xe8/0x150 [ 151.734481][ T6655] should_fail_ex+0x46b/0x600 [ 151.734510][ T6655] should_failslab+0xa8/0x100 [ 151.734533][ T6655] __kmalloc_cache_noprof+0x84/0x690 [ 151.734554][ T6655] ? qnx4_fill_super+0x7e/0x770 [ 151.734579][ T6655] ? set_blocksize+0x1c8/0x3d0 [ 151.734608][ T6655] qnx4_fill_super+0x7e/0x770 [ 151.734632][ T6655] ? sb_set_blocksize+0x11b/0x210 [ 151.734659][ T6655] ? setup_bdev_super+0x4c1/0x5b0 [ 151.734687][ T6655] get_tree_bdev_flags+0x431/0x4f0 [ 151.734714][ T6655] ? __pfx_qnx4_fill_super+0x10/0x10 [ 151.734740][ T6655] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 151.734778][ T6655] vfs_get_tree+0x92/0x2a0 [ 151.734806][ T6655] do_new_mount+0x341/0xd30 [ 151.734825][ T6655] ? apparmor_capable+0x126/0x170 [ 151.734853][ T6655] ? __pfx_do_new_mount+0x10/0x10 [ 151.734873][ T6655] ? ns_capable+0x89/0xe0 [ 151.734901][ T6655] ? user_path_at+0xd4/0x160 [ 151.734927][ T6655] ? user_path_at+0xd4/0x160 [ 151.734951][ T6655] __se_sys_mount+0x31d/0x420 [ 151.734977][ T6655] ? __pfx___se_sys_mount+0x10/0x10 [ 151.735003][ T6655] ? __x64_sys_mount+0x20/0xc0 [ 151.735023][ T6655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.735044][ T6655] do_syscall_64+0x174/0x580 [ 151.735071][ T6655] ? trace_irq_disable+0x3b/0x140 [ 151.735092][ T6655] ? clear_bhb_loop+0x40/0x90 [ 151.735115][ T6655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.735134][ T6655] RIP: 0033:0x7f8a4452ce59 [ 151.735152][ T6655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.735167][ T6655] RSP: 002b:00007f8a42786028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 151.735186][ T6655] RAX: ffffffffffffffda RBX: 00007f8a447a5fa0 RCX: 00007f8a4452ce59 [ 151.735199][ T6655] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 0000200000000080 [ 151.735210][ T6655] RBP: 00007f8a42786090 R08: 0000000000000000 R09: 0000000000000000 [ 151.735221][ T6655] R10: 0000000000208000 R11: 0000000000000246 R12: 0000000000000002 [ 151.735232][ T6655] R13: 00007f8a447a6038 R14: 00007f8a447a5fa0 R15: 00007fff83dc89b8 [ 151.735260][ T6655] [ 152.284904][ T5807] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 152.354471][ T6665] input: syz0 as /devices/virtual/input/input9 [ 152.462141][ T5807] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 152.462172][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.462190][ T5807] usb 2-1: Product: syz [ 152.462204][ T5807] usb 2-1: Manufacturer: syz [ 152.462217][ T5807] usb 2-1: SerialNumber: syz [ 152.465617][ T6667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.512367][ T6667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.528922][ T5807] usb 2-1: config 0 descriptor?? [ 152.546480][ T5807] ch341 2-1:0.0: ch341-uart converter detected [ 152.795652][ T6659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 152.796011][ T6672] input: syz0 as /devices/virtual/input/input10 [ 152.835132][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.288'. [ 152.841062][ T5807] usb 2-1: failed to receive control message: -32 [ 152.841119][ T5807] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -32 [ 152.952719][ T6676] warning: `syz.3.294' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 153.330390][ T6686] FAULT_INJECTION: forcing a failure. [ 153.330390][ T6686] name failslab, interval 1, probability 0, space 0, times 0 [ 153.330424][ T6686] CPU: 1 UID: 0 PID: 6686 Comm: syz.0.296 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 153.330446][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 153.330457][ T6686] Call Trace: [ 153.330464][ T6686] [ 153.330472][ T6686] dump_stack_lvl+0xe8/0x150 [ 153.330501][ T6686] should_fail_ex+0x46b/0x600 [ 153.330535][ T6686] should_failslab+0xa8/0x100 [ 153.330561][ T6686] kmem_cache_alloc_noprof+0x87/0x680 [ 153.330585][ T6686] ? dst_alloc+0x105/0x170 [ 153.330604][ T6686] ? fib_lookup+0x76/0x440 [ 153.330630][ T6686] dst_alloc+0x105/0x170 [ 153.330654][ T6686] ip_route_output_key_hash_rcu+0x14d0/0x25e0 [ 153.330696][ T6686] ? ip_route_output_key_hash+0xd8/0x2a0 [ 153.330722][ T6686] ip_route_output_key_hash+0x18d/0x2a0 [ 153.330747][ T6686] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 153.330772][ T6686] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 153.330793][ T6686] ? reacquire_held_locks+0x104/0x190 [ 153.330819][ T6686] ? rt_spin_lock+0x1e0/0x400 [ 153.330848][ T6686] ip_route_output_flow+0x2a/0x150 [ 153.330874][ T6686] sctp_v4_get_dst+0x3f8/0x12b0 [ 153.330900][ T6686] ? rt_spin_unlock+0x160/0x200 [ 153.330925][ T6686] ? crng_make_state+0x318/0x5d0 [ 153.330958][ T6686] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 153.330983][ T6686] ? _get_random_bytes+0x1e7/0x260 [ 153.331028][ T6686] ? dst_release+0x7f/0x1b0 [ 153.331051][ T6686] sctp_transport_route+0x118/0x2f0 [ 153.331079][ T6686] sctp_assoc_add_peer+0x650/0x13b0 [ 153.331114][ T6686] sctp_connect_new_asoc+0x329/0x6b0 [ 153.331136][ T6686] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 153.331157][ T6686] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 153.331176][ T6686] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 153.331193][ T6686] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 153.331213][ T6686] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 153.331238][ T6686] ? security_sctp_bind_connect+0x7e/0x2c0 [ 153.331269][ T6686] sctp_sendmsg+0x14f2/0x29b0 [ 153.331295][ T6686] ? do_syscall_64+0x174/0x580 [ 153.331337][ T6686] ? __pfx_sctp_sendmsg+0x10/0x10 [ 153.331376][ T6686] ? aa_sk_perm+0x703/0x950 [ 153.331404][ T6686] ? __pfx_aa_sk_perm+0x10/0x10 [ 153.331420][ T6686] ? sock_rps_record_flow+0x19/0x350 [ 153.331447][ T6686] ? inet_sendmsg+0x2f4/0x370 [ 153.331469][ T6686] ? aa_sock_msg_perm+0x122/0x200 [ 153.331491][ T6686] ? __pfx_inet_sendmsg+0x10/0x10 [ 153.331514][ T6686] sock_sendmsg_nosec+0x10e/0x180 [ 153.331552][ T6686] ____sys_sendmsg+0x55c/0x870 [ 153.331587][ T6686] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.331630][ T6686] ? import_iovec+0x73/0xa0 [ 153.331655][ T6686] ___sys_sendmsg+0x2a5/0x360 [ 153.331688][ T6686] ? __lock_acquire+0x6b5/0x2d10 [ 153.331715][ T6686] ? __pfx____sys_sendmsg+0x10/0x10 [ 153.331778][ T6686] ? __fget_files+0x2a/0x420 [ 153.331800][ T6686] ? __fget_files+0x3a6/0x420 [ 153.331832][ T6686] __x64_sys_sendmsg+0x1c3/0x2a0 [ 153.331863][ T6686] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 153.331900][ T6686] ? __pfx_ksys_write+0x10/0x10 [ 153.331935][ T6686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.331956][ T6686] do_syscall_64+0x174/0x580 [ 153.331982][ T6686] ? trace_irq_disable+0x3b/0x140 [ 153.332003][ T6686] ? clear_bhb_loop+0x40/0x90 [ 153.332026][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.332044][ T6686] RIP: 0033:0x7f8a4452ce59 [ 153.332062][ T6686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.332078][ T6686] RSP: 002b:00007f8a42786028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.332099][ T6686] RAX: ffffffffffffffda RBX: 00007f8a447a5fa0 RCX: 00007f8a4452ce59 [ 153.332112][ T6686] RDX: 0000000000000000 RSI: 0000200000000700 RDI: 0000000000000003 [ 153.332124][ T6686] RBP: 00007f8a42786090 R08: 0000000000000000 R09: 0000000000000000 [ 153.332137][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 153.332148][ T6686] R13: 00007f8a447a6038 R14: 00007f8a447a5fa0 R15: 00007fff83dc89b8 [ 153.332179][ T6686] [ 153.689127][ T6690] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.689728][ T6690] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.911390][ T6696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.911699][ T6696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.068285][ T32] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 154.219512][ T32] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 154.219542][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.224037][ T32] usb 1-1: config 0 descriptor?? [ 154.252944][ T32] cp210x 1-1:0.0: cp210x converter detected [ 154.354666][ T5620] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 154.354830][ T5620] Bluetooth: hci2: Injecting HCI hardware error event [ 154.367386][ T4928] Bluetooth: hci2: hardware error 0x00 [ 154.532713][ T6708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.533380][ T6708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.718708][ T32] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 154.718738][ T32] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 154.741007][ T32] usb 1-1: cp210x converter now attached to ttyUSB1 [ 154.750609][ T32] usb 1-1: USB disconnect, device number 27 [ 154.849725][ T32] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 154.850700][ T32] cp210x 1-1:0.0: device disconnected [ 155.244417][ T1708] usb 2-1: USB disconnect, device number 31 [ 155.319013][ T1708] ch341 2-1:0.0: device disconnected [ 155.357984][ T6727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.358596][ T6727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.037759][ T32] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 156.054798][ T6747] netlink: 168 bytes leftover after parsing attributes in process `syz.0.319'. [ 156.127518][ T1708] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 156.189800][ T32] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 156.189831][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.202509][ T32] usb 4-1: config 0 descriptor?? [ 156.229792][ T32] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 156.270155][ T6756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.316163][ T1708] usb 2-1: Using ep0 maxpacket: 32 [ 156.330610][ T1708] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 156.330641][ T1708] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.360120][ T1708] usb 2-1: config 0 descriptor?? [ 156.380239][ T1708] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 156.427509][ T4928] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 157.142726][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.144886][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.179213][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.181555][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.304025][ T32] usb 4-1: USB disconnect, device number 20 [ 157.898313][ T32] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 158.052418][ T32] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 158.052451][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 158.052476][ T32] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 158.059520][ T32] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 158.059548][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.059567][ T32] usb 1-1: Product: syz [ 158.059581][ T32] usb 1-1: Manufacturer: syz [ 158.059595][ T32] usb 1-1: SerialNumber: syz [ 158.092046][ T32] usb 1-1: config 0 descriptor?? [ 158.093070][ T6769] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 158.093317][ T6769] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 158.130496][ T32] usb 1-1: ucan: probing device on interface #0 [ 158.147794][ T1708] gspca_vc032x: reg_w err -110 [ 158.147811][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147821][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147830][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147838][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147847][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147855][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147864][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147872][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147881][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147890][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147898][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147907][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147916][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147925][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147933][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147942][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147950][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147958][ T1708] gspca_vc032x: I2c Bus Busy Wait 00 [ 158.147967][ T1708] gspca_vc032x: Unknown sensor... [ 158.148045][ T1708] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 158.167830][ T6781] overlayfs: unescaped trailing colons in lowerdir mount option. [ 158.481226][ T6786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.481776][ T6786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.526706][ T5809] usb 2-1: USB disconnect, device number 32 [ 158.773001][ T32] ucan 1-1:0.0 can0: registered device [ 158.924457][ T32] ucan 1-1:0.0 can0: firmware string: unknown [ 158.933586][ T32] usb 1-1: USB disconnect, device number 28 [ 158.981255][ T5809] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 159.139263][ T1708] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 159.161648][ T5809] usb 2-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 159.161680][ T5809] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 159.161700][ T5809] usb 2-1: Product: syz [ 159.161713][ T5809] usb 2-1: Manufacturer: syz [ 159.161727][ T5809] usb 2-1: SerialNumber: syz [ 159.172544][ T5809] usb 2-1: config 0 descriptor?? [ 159.297931][ T1708] usb 4-1: Using ep0 maxpacket: 32 [ 159.316432][ T1708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.316463][ T1708] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 159.316498][ T1708] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.316519][ T1708] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.317312][ T6799] netlink: 32 bytes leftover after parsing attributes in process `syz.2.339'. [ 159.318542][ T6799] netlink: 24 bytes leftover after parsing attributes in process `syz.2.339'. [ 159.383243][ T1708] usb 4-1: config 0 descriptor?? [ 159.403759][ T1708] hub 4-1:0.0: USB hub found [ 159.447856][ T5809] peak_usb 2-1:0.0: PEAK-System PCAN-Chip USB v136 fw v233.0.0 (1 channels) [ 159.593656][ T1708] hub 4-1:0.0: 1 port detected [ 159.652265][ T5809] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 159.652318][ T5809] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 159.652394][ T5809] peak_usb 2-1:0.0 can0: sending command failure: -8 [ 160.242926][ T5347] hub 4-1:0.0: activate --> -90 [ 160.244149][ T5809] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -8 [ 160.316430][ T5809] usb 2-1: USB disconnect, device number 33 [ 160.656679][ T5807] usb 4-1: USB disconnect, device number 21 [ 160.685518][ T6811] netlink: 14 bytes leftover after parsing attributes in process `syz.2.342'. [ 160.968378][ T6813] netlink: 'syz.1.343': attribute type 12 has an invalid length. [ 161.127536][ T5347] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 161.287792][ T5347] usb 1-1: Using ep0 maxpacket: 32 [ 161.290648][ T5347] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 161.290680][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.325800][ T5347] usb 1-1: config 0 descriptor?? [ 161.352436][ T5347] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 161.517484][ T32] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 161.667826][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 161.670486][ T32] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.670513][ T32] usb 4-1: config 0 has no interface number 0 [ 161.670557][ T32] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.670583][ T32] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.670621][ T32] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 161.670645][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.751680][ T32] usb 4-1: config 0 descriptor?? [ 161.964520][ T6828] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.977034][ T6828] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.171993][ T32] hid (null): unknown global tag 0xc [ 162.178811][ T32] hid (null): unknown global tag 0xc [ 162.178831][ T32] hid (null): report_id 22254 is invalid [ 162.178887][ T32] hid (null): unknown global tag 0xd [ 162.438194][ T5811] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 162.597134][ T5811] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 162.597167][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 162.597193][ T5811] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 162.624401][ T6836] netlink: 256 bytes leftover after parsing attributes in process `syz.2.351'. [ 162.630565][ T5811] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 162.630593][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.630613][ T5811] usb 2-1: Product: syz [ 162.630626][ T5811] usb 2-1: Manufacturer: syz [ 162.630641][ T5811] usb 2-1: SerialNumber: syz [ 162.638776][ T5811] usb 2-1: config 0 descriptor?? [ 162.639758][ T6830] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 162.640088][ T6830] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 162.652010][ T5811] usb 2-1: ucan: probing device on interface #0 [ 163.077792][ T5347] gspca_vc032x: reg_w err -110 [ 163.077810][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077828][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077837][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077845][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077853][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077861][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077869][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077878][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077886][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077896][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077904][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077914][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.077922][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.078630][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.078642][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.078651][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.078660][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.078668][ T5347] gspca_vc032x: I2c Bus Busy Wait 00 [ 163.078677][ T5347] gspca_vc032x: Unknown sensor... [ 163.078766][ T5347] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 163.281196][ T5811] ucan 2-1:0.0 can0: registered device [ 163.311342][ T32] usb 1-1: USB disconnect, device number 29 [ 163.463692][ T6844] trusted_key: syz.2.355 sent an empty control message without MSG_MORE. [ 163.479813][ T5811] ucan 2-1:0.0 can0: firmware string: unknown [ 163.503050][ T5811] usb 2-1: USB disconnect, device number 34 [ 163.590192][ T6848] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.590932][ T6848] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.731033][ T32] usb 4-1: USB disconnect, device number 22 [ 164.309149][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.0.358'. [ 164.654534][ T6859] tmpfs: Bad value for 'mpol' [ 165.258254][ T5347] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 165.288382][ T6875] overlayfs: conflicting lowerdir path [ 165.427501][ T5807] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 165.433272][ T5347] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 165.433303][ T5347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.433323][ T5347] usb 4-1: Product: syz [ 165.433337][ T5347] usb 4-1: Manufacturer: syz [ 165.433347][ T5347] usb 4-1: SerialNumber: syz [ 165.489871][ T5347] usb 4-1: config 0 descriptor?? [ 165.577517][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 165.587004][ T5807] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 165.587034][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.617233][ T5807] usb 2-1: config 0 descriptor?? [ 165.632378][ T5807] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 166.259901][ T5347] usb 4-1: Firmware version (0.0) predates our first public release. [ 166.259970][ T5347] usb 4-1: Please update to version 0.2 or newer [ 166.445331][ T5347] usb 4-1: USB disconnect, device number 23 [ 166.618359][ T5811] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 166.826959][ T5811] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 166.826990][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.827012][ T5811] usb 1-1: Product: syz [ 166.827027][ T5811] usb 1-1: Manufacturer: syz [ 166.827042][ T5811] usb 1-1: SerialNumber: syz [ 166.875836][ T5811] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 167.239735][ T6898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.275298][ T6898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 167.343295][ T5713] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 167.357696][ T5807] gspca_vc032x: reg_w err -110 [ 167.357714][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357725][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357734][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357743][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357751][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357760][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357768][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357777][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357786][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357795][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357803][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357811][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357820][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357828][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357837][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357846][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357856][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357863][ T5807] gspca_vc032x: I2c Bus Busy Wait 00 [ 167.357871][ T5807] gspca_vc032x: Unknown sensor... [ 167.357944][ T5807] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 167.643804][ T32] usb 2-1: USB disconnect, device number 35 [ 167.836109][ T6907] input: syz1 as /devices/virtual/input/input12 [ 168.447840][ T6919] FAULT_INJECTION: forcing a failure. [ 168.447840][ T6919] name failslab, interval 1, probability 0, space 0, times 0 [ 168.447941][ T6919] CPU: 1 UID: 0 PID: 6919 Comm: syz.2.381 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 168.447962][ T6919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 168.447973][ T6919] Call Trace: [ 168.447980][ T6919] [ 168.447989][ T6919] dump_stack_lvl+0xe8/0x150 [ 168.448017][ T6919] should_fail_ex+0x46b/0x600 [ 168.448064][ T6919] should_failslab+0xa8/0x100 [ 168.448089][ T6919] kmem_cache_alloc_noprof+0x87/0x680 [ 168.448111][ T6919] ? lockdep_hardirqs_on+0x7a/0x110 [ 168.448137][ T6919] ? do_getname+0x2e/0x250 [ 168.448159][ T6919] do_getname+0x2e/0x250 [ 168.448176][ T6919] ? getname_flags+0x11/0x20 [ 168.448198][ T6919] do_sys_openat2+0xcc/0x200 [ 168.448223][ T6919] ? __pfx_do_sys_openat2+0x10/0x10 [ 168.448245][ T6919] ? ksys_write+0x248/0x270 [ 168.448272][ T6919] ? __pfx_ksys_write+0x10/0x10 [ 168.448300][ T6919] __x64_sys_openat+0x138/0x170 [ 168.448325][ T6919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.448344][ T6919] do_syscall_64+0x174/0x580 [ 168.448371][ T6919] ? trace_irq_disable+0x3b/0x140 [ 168.448400][ T6919] ? clear_bhb_loop+0x40/0x90 [ 168.448423][ T6919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.448442][ T6919] RIP: 0033:0x7f098906ce59 [ 168.448459][ T6919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 168.448476][ T6919] RSP: 002b:00007f09872be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 168.448497][ T6919] RAX: ffffffffffffffda RBX: 00007f09892e5fa0 RCX: 00007f098906ce59 [ 168.448511][ T6919] RDX: 0000000000101042 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 168.448524][ T6919] RBP: 00007f09872be090 R08: 0000000000000000 R09: 0000000000000000 [ 168.448537][ T6919] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 168.448549][ T6919] R13: 00007f09892e6038 R14: 00007f09892e5fa0 R15: 00007ffc3595e938 [ 168.448579][ T6919] [ 168.614652][ T5347] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 168.675614][ T5713] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 168.777488][ T5347] usb 4-1: Using ep0 maxpacket: 16 [ 168.787113][ T5347] usb 4-1: config 0 interface 0 has no altsetting 0 [ 168.787152][ T5347] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 168.787177][ T5347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.809897][ T5811] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 168.833654][ T5347] usb 4-1: config 0 descriptor?? [ 168.838348][ T5713] ath9k_htc: Failed to initialize the device [ 168.971752][ T5811] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 168.971779][ T5811] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 168.971799][ T5811] usb 2-1: config 220 has no interface number 2 [ 168.971863][ T5811] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 168.971891][ T5811] usb 2-1: config 220 interface 0 has no altsetting 0 [ 168.971909][ T5811] usb 2-1: config 220 interface 76 has no altsetting 0 [ 168.971925][ T5811] usb 2-1: config 220 interface 1 has no altsetting 0 [ 168.974576][ T5811] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 168.974603][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.974624][ T5811] usb 2-1: Product: syz [ 168.974638][ T5811] usb 2-1: Manufacturer: syz [ 168.974652][ T5811] usb 2-1: SerialNumber: syz [ 169.095338][ T5713] usb 1-1: ath9k_htc: USB layer deinitialized [ 169.275394][ T6921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.287077][ T6921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.419848][ T5347] hid_parser_main: 457 callbacks suppressed [ 169.419870][ T5347] glorious 0003:22D4:1503.0006: unknown main item tag 0x0 [ 169.419898][ T5347] glorious 0003:22D4:1503.0006: unknown main item tag 0x4 [ 169.419921][ T5347] glorious 0003:22D4:1503.0006: unexpected long global item [ 169.420555][ T5347] glorious 0003:22D4:1503.0006: probe with driver glorious failed with error -22 [ 169.452254][ T5811] usb 2-1: selecting invalid altsetting 0 [ 169.452741][ T5811] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 169.452772][ T5811] uvcvideo 2-1:220.0: No valid video chain found. [ 169.554043][ T6915] wireguard: wg2: Could not create IPv4 socket [ 169.575744][ T6928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.584413][ T6928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.609725][ T5811] usb 2-1: selecting invalid altsetting 0 [ 169.609820][ T5811] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 169.663126][ T5811] usb 2-1: USB disconnect, device number 36 [ 169.688631][ T5809] usb 4-1: USB disconnect, device number 24 [ 169.703762][ T32] usb 1-1: USB disconnect, device number 30 [ 170.334257][ T6946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.334863][ T6946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.335788][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 170.443543][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.0.393'. [ 170.459563][ T6946] netlink: 4 bytes leftover after parsing attributes in process `syz.2.392'. [ 171.248830][ T5762] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 171.398369][ T5762] usb 2-1: Using ep0 maxpacket: 32 [ 171.400379][ T5762] usb 2-1: config 4 has an invalid interface number: 174 but max is 0 [ 171.400403][ T5762] usb 2-1: config 4 has no interface number 0 [ 171.400440][ T5762] usb 2-1: config 4 interface 174 altsetting 1 endpoint 0xE has invalid maxpacket 5854, setting to 64 [ 171.400465][ T5762] usb 2-1: config 4 interface 174 has no altsetting 0 [ 171.407200][ T5762] usb 2-1: Dual-Role OTG device on HNP port [ 171.407577][ T5762] usb 2-1: New USB device found, idVendor=0b05, idProduct=1779, bcdDevice=45.8a [ 171.407604][ T5762] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.407624][ T5762] usb 2-1: Product: syz [ 171.407637][ T5762] usb 2-1: Manufacturer: syz [ 171.407651][ T5762] usb 2-1: SerialNumber: syz [ 172.073818][ T5762] usb 2-1: USB disconnect, device number 37 [ 172.361767][ T6999] netlink: 'syz.0.409': attribute type 21 has an invalid length. [ 172.361788][ T6999] netlink: 128 bytes leftover after parsing attributes in process `syz.0.409'. [ 172.361887][ T6999] netlink: 'syz.0.409': attribute type 4 has an invalid length. [ 172.361899][ T6999] netlink: 'syz.0.409': attribute type 5 has an invalid length. [ 172.361910][ T6999] netlink: 3 bytes leftover after parsing attributes in process `syz.0.409'. [ 172.743813][ T7014] netlink: 256 bytes leftover after parsing attributes in process `syz.2.412'. [ 172.989651][ T7018] syzkaller1: entered promiscuous mode [ 172.989673][ T7018] syzkaller1: entered allmulticast mode [ 173.155197][ T7018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.414'. [ 173.436526][ T7029] netlink: 40 bytes leftover after parsing attributes in process `syz.2.418'. [ 173.547762][ T5807] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 173.547793][ T5807] hid-generic 0006:0008:0008.0007: unknown main item tag 0x0 [ 173.644749][ T7034] FAULT_INJECTION: forcing a failure. [ 173.644749][ T7034] name failslab, interval 1, probability 0, space 0, times 0 [ 173.644771][ T7034] CPU: 0 UID: 0 PID: 7034 Comm: syz.3.420 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 173.644784][ T7034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.644791][ T7034] Call Trace: [ 173.644795][ T7034] [ 173.644800][ T7034] dump_stack_lvl+0xe8/0x150 [ 173.644819][ T7034] should_fail_ex+0x46b/0x600 [ 173.644838][ T7034] should_failslab+0xa8/0x100 [ 173.644853][ T7034] __kmalloc_cache_noprof+0x84/0x690 [ 173.644866][ T7034] ? drm_atomic_helper_setup_commit+0x623/0x1a90 [ 173.644883][ T7034] drm_atomic_helper_setup_commit+0x623/0x1a90 [ 173.644906][ T7034] drm_atomic_helper_commit+0x6a/0xb10 [ 173.644922][ T7034] ? __pfx_drm_atomic_helper_commit+0x10/0x10 [ 173.644934][ T7034] drm_atomic_commit+0x246/0x2b0 [ 173.644950][ T7034] ? __pfx_drm_atomic_commit+0x10/0x10 [ 173.644964][ T7034] ? __pfx___drm_printfn_info+0x10/0x10 [ 173.644981][ T7034] ? drm_client_rotation+0x47c/0x5b0 [ 173.645004][ T7034] drm_client_modeset_commit_atomic+0x660/0x7e0 [ 173.645043][ T7034] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 173.645089][ T7034] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 173.645115][ T7034] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.645141][ T7034] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 173.645156][ T7034] ? mutex_lock_nested+0x152/0x1d0 [ 173.645167][ T7034] ? drm_client_modeset_commit_locked+0x4c/0x4d0 [ 173.645185][ T7034] drm_client_modeset_commit_locked+0xce/0x4d0 [ 173.645203][ T7034] drm_fb_helper_pan_display+0x3ea/0xbe0 [ 173.645225][ T7034] fb_pan_display+0x39e/0x680 [ 173.645242][ T7034] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 173.645258][ T7034] bit_update_start+0x4c/0x1e0 [ 173.645275][ T7034] fbcon_modechanged+0xae3/0x1110 [ 173.645296][ T7034] fb_set_var_from_user+0x99/0xc0 [ 173.645310][ T7034] do_fb_ioctl+0x5d9/0x750 [ 173.645322][ T7034] ? __pfx_do_fb_ioctl+0x10/0x10 [ 173.645354][ T7034] ? __fget_files+0x2a/0x420 [ 173.645370][ T7034] ? __fget_files+0x3a6/0x420 [ 173.645381][ T7034] ? __fget_files+0x2a/0x420 [ 173.645395][ T7034] ? bpf_lsm_file_ioctl+0x9/0x20 [ 173.645410][ T7034] ? __pfx_fb_ioctl+0x10/0x10 [ 173.645420][ T7034] __se_sys_ioctl+0xff/0x170 [ 173.645435][ T7034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.645446][ T7034] do_syscall_64+0x174/0x580 [ 173.645461][ T7034] ? trace_irq_disable+0x3b/0x140 [ 173.645473][ T7034] ? clear_bhb_loop+0x40/0x90 [ 173.645486][ T7034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.645496][ T7034] RIP: 0033:0x7f4e7983ce59 [ 173.645507][ T7034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 173.645516][ T7034] RSP: 002b:00007f4e77a8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 173.645528][ T7034] RAX: ffffffffffffffda RBX: 00007f4e79ab5fa0 RCX: 00007f4e7983ce59 [ 173.645535][ T7034] RDX: 0000200000000100 RSI: 0000000000004601 RDI: 0000000000000003 [ 173.645542][ T7034] RBP: 00007f4e77a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 173.645549][ T7034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 173.645555][ T7034] R13: 00007f4e79ab6038 R14: 00007f4e79ab5fa0 R15: 00007fff0cc8c108 [ 173.645573][ T7034] [ 173.792834][ T7035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.793392][ T7035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.795541][ T5807] hid-generic 0006:0008:0008.0007: hidraw0: VIRTUAL HID v0.02 Device [syz0] on syz1 [ 174.241189][ T7041] overlayfs: missing 'lowerdir' [ 174.255903][ T7043] fido_id[7043]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 175.137785][ T5811] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 175.334480][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.334504][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.334527][ T5811] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 175.334538][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.395868][ T5811] usb 2-1: config 0 descriptor?? [ 175.461608][ T7060] overlayfs: overlapping lowerdir path [ 175.788205][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 176.013821][ T5811] usbhid 2-1:0.0: can't add hid device: -71 [ 176.013906][ T5811] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 176.016333][ T5811] usb 2-1: USB disconnect, device number 38 [ 176.687459][ T5809] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 176.820763][ T5809] usb 1-1: device descriptor read/64, error -71 [ 176.854749][ T7080] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 177.069511][ T5809] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 177.197720][ T5809] usb 1-1: device descriptor read/64, error -71 [ 177.212184][ T7070] syz.3.433 (7070) used greatest stack depth: 18688 bytes left [ 177.307941][ T5809] usb usb1-port1: attempt power cycle [ 177.648255][ T5809] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 177.686726][ T7095] tipc: Started in network mode [ 177.686748][ T7095] tipc: Node identity 4, cluster identity 4711 [ 177.686761][ T7095] tipc: Node number set to 4 [ 177.706446][ T5809] usb 1-1: device descriptor read/8, error -71 [ 177.757739][ T7098] 9p: Bad value for 'wfdno' [ 177.937486][ T5809] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 177.958995][ T5809] usb 1-1: device descriptor read/8, error -71 [ 178.067838][ T5809] usb usb1-port1: unable to enumerate USB device [ 178.337505][ T5809] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 178.507602][ T5809] usb 2-1: Using ep0 maxpacket: 32 [ 178.510013][ T5809] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 178.510040][ T5809] usb 2-1: config 0 has no interface number 0 [ 178.510094][ T5809] usb 2-1: config 0 interface 184 has no altsetting 0 [ 178.512184][ T5809] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 178.512211][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.512231][ T5809] usb 2-1: Product: syz [ 178.512242][ T5809] usb 2-1: Manufacturer: syz [ 178.512249][ T5809] usb 2-1: SerialNumber: syz [ 178.515748][ T5809] usb 2-1: config 0 descriptor?? [ 178.701922][ T7106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.703075][ T7106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.203289][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 179.221449][ T5809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 179.221481][ T5809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 179.560763][ T5809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 179.560797][ T5809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 179.560817][ T5809] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 179.561111][ T5809] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 179.792111][ T7140] netlink: 12 bytes leftover after parsing attributes in process `syz.2.449'. [ 180.033405][ T7145] fuse: Bad value for 'fd' [ 180.470178][ T5811] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 180.695896][ T5811] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 180.695929][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.695948][ T5811] usb 1-1: Product: syz [ 180.695963][ T5811] usb 1-1: Manufacturer: syz [ 180.695977][ T5811] usb 1-1: SerialNumber: syz [ 181.027574][ T5807] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 181.142421][ T7147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.146628][ T7147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.171895][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 181.171979][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 181.195337][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 181.201384][ T5807] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 181.201426][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 181.203669][ T5807] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 181.203696][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.203716][ T5807] usb 4-1: Product: syz [ 181.203730][ T5807] usb 4-1: Manufacturer: syz [ 181.203745][ T5807] usb 4-1: SerialNumber: syz [ 181.267721][ T5807] usb 4-1: config 0 descriptor?? [ 181.284476][ T5807] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 181.284514][ T5807] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 181.503252][ T7157] x_tables: ip6_tables: TEE.1 target: invalid size 40 (kernel) != (user) 48 [ 181.679976][ T7159] FAULT_INJECTION: forcing a failure. [ 181.679976][ T7159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.680027][ T7159] CPU: 0 UID: 0 PID: 7159 Comm: syz.2.457 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 181.680050][ T7159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 181.680060][ T7159] Call Trace: [ 181.680065][ T7159] [ 181.680069][ T7159] dump_stack_lvl+0xe8/0x150 [ 181.680087][ T7159] should_fail_ex+0x46b/0x600 [ 181.680106][ T7159] _copy_from_user+0x2d/0xb0 [ 181.680129][ T7159] __sys_sendto+0x296/0x590 [ 181.680161][ T7159] ? __pfx___sys_sendto+0x10/0x10 [ 181.680210][ T7159] ? ksys_write+0x248/0x270 [ 181.680237][ T7159] ? __pfx_ksys_write+0x10/0x10 [ 181.680263][ T7159] __x64_sys_sendto+0xde/0x100 [ 181.680290][ T7159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.680310][ T7159] do_syscall_64+0x174/0x580 [ 181.680337][ T7159] ? trace_irq_disable+0x3b/0x140 [ 181.680359][ T7159] ? clear_bhb_loop+0x40/0x90 [ 181.680382][ T7159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.680398][ T7159] RIP: 0033:0x7f098906ce59 [ 181.680409][ T7159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 181.680418][ T7159] RSP: 002b:00007f09872be028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 181.680438][ T7159] RAX: ffffffffffffffda RBX: 00007f09892e5fa0 RCX: 00007f098906ce59 [ 181.680452][ T7159] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 181.680464][ T7159] RBP: 00007f09872be090 R08: 0000200000000140 R09: 0000000000000014 [ 181.680477][ T7159] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 181.680488][ T7159] R13: 00007f09892e6038 R14: 00007f09892e5fa0 R15: 00007ffc3595e938 [ 181.680519][ T7159] [ 181.776155][ T7147] netlink: 'syz.0.452': attribute type 27 has an invalid length. [ 181.792558][ T7161] capability: warning: `syz.2.458' uses 32-bit capabilities (legacy support in use) [ 181.875177][ T5807] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 181.876689][ T5807] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 182.012846][ T5347] usb 2-1: USB disconnect, device number 39 [ 182.146805][ T7163] netlink: 'syz.2.459': attribute type 23 has an invalid length. [ 182.249766][ T7166] FAULT_INJECTION: forcing a failure. [ 182.249766][ T7166] name failslab, interval 1, probability 0, space 0, times 0 [ 182.249798][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.2.461 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 182.249822][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 182.249831][ T7166] Call Trace: [ 182.249836][ T7166] [ 182.249843][ T7166] dump_stack_lvl+0xe8/0x150 [ 182.249864][ T7166] should_fail_ex+0x46b/0x600 [ 182.249889][ T7166] should_failslab+0xa8/0x100 [ 182.249909][ T7166] __kmalloc_noprof+0xdf/0x7b0 [ 182.249926][ T7166] ? tomoyo_encode+0x28b/0x550 [ 182.249945][ T7166] tomoyo_encode+0x28b/0x550 [ 182.249965][ T7166] tomoyo_realpath_from_path+0x58d/0x5d0 [ 182.249989][ T7166] ? tomoyo_path_number_perm+0x219/0x630 [ 182.250012][ T7166] tomoyo_path_number_perm+0x246/0x630 [ 182.250036][ T7166] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.250057][ T7166] ? __lock_acquire+0x6b5/0x2d10 [ 182.250079][ T7166] ? do_raw_spin_lock+0x12b/0x2f0 [ 182.250118][ T7166] ? __fget_files+0x2a/0x420 [ 182.250138][ T7166] ? __fget_files+0x2a/0x420 [ 182.250166][ T7166] ? __fget_files+0x3a6/0x420 [ 182.250183][ T7166] ? __fget_files+0x2a/0x420 [ 182.250204][ T7166] security_file_ioctl+0xc3/0x2a0 [ 182.250227][ T7166] __se_sys_ioctl+0x47/0x170 [ 182.250248][ T7166] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.250265][ T7166] do_syscall_64+0x174/0x580 [ 182.250290][ T7166] ? clear_bhb_loop+0x40/0x90 [ 182.250309][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.250325][ T7166] RIP: 0033:0x7f098906ce59 [ 182.250341][ T7166] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 182.250356][ T7166] RSP: 002b:00007f09872be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.250374][ T7166] RAX: ffffffffffffffda RBX: 00007f09892e5fa0 RCX: 00007f098906ce59 [ 182.250384][ T7166] RDX: 0000200000000300 RSI: 000000008028640c RDI: 0000000000000003 [ 182.250393][ T7166] RBP: 00007f09872be090 R08: 0000000000000000 R09: 0000000000000000 [ 182.250401][ T7166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.250409][ T7166] R13: 00007f09892e6038 R14: 00007f09892e5fa0 R15: 00007ffc3595e938 [ 182.250432][ T7166] [ 182.250521][ T7166] ERROR: Out of memory at tomoyo_realpath_from_path. [ 182.397540][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 182.431042][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 182.487456][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 182.487528][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 182.537471][ T5807] em28xx 4-1:0.0: AC97 command still being executed: not handled properly! [ 182.537495][ T5807] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 182.589937][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 182.621984][ T5811] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 182.645477][ T5811] usb 1-1: USB disconnect, device number 35 [ 182.721275][ T5807] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 182.931195][ T7150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.933673][ T7150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.976793][ T5807] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 182.978171][ T5807] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 182.978700][ T5807] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 182.979087][ T5807] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 182.996383][ T5807] usb 4-1: USB disconnect, device number 25 [ 183.147526][ T5811] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 183.298509][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 183.310002][ T5811] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 183.310027][ T5811] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 183.310074][ T5811] usb 2-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 183.310111][ T5811] usb 2-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 183.310151][ T5811] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 183.310172][ T5811] usb 2-1: config 1 interface 1 has no altsetting 0 [ 183.377147][ T5811] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 183.377173][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.377184][ T5811] usb 2-1: Product: syz [ 183.377192][ T5811] usb 2-1: Manufacturer: syz [ 183.377200][ T5811] usb 2-1: SerialNumber: syz [ 183.511842][ T7192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.512551][ T7192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.721604][ T5811] usb 2-1: selecting invalid altsetting 0 [ 183.722106][ T5811] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 183.722603][ T5811] usb 2-1: 1:1: cannot set freq 44100 (v2/v3): err -71 [ 183.891293][ T5811] usb 2-1: USB disconnect, device number 40 [ 183.982014][ T5627] udevd[5627]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.049217][ T32] usb 4-1: new low-speed USB device number 26 using dummy_hcd [ 184.164487][ T37] audit: type=1326 audit(1780340297.296:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7203 comm="syz.2.473" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f098906ce59 code=0x0 [ 184.209558][ T32] usb 4-1: Invalid ep0 maxpacket: 64 [ 184.351164][ T32] usb 4-1: new low-speed USB device number 27 using dummy_hcd [ 184.499486][ T32] usb 4-1: Invalid ep0 maxpacket: 64 [ 184.499807][ T32] usb usb4-port1: attempt power cycle [ 184.837594][ T32] usb 4-1: new low-speed USB device number 28 using dummy_hcd [ 184.858762][ T32] usb 4-1: Invalid ep0 maxpacket: 64 [ 184.991616][ T32] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 185.010751][ T32] usb 4-1: Invalid ep0 maxpacket: 64 [ 185.011158][ T32] usb usb4-port1: unable to enumerate USB device [ 185.070228][ T7219] netlink: 260 bytes leftover after parsing attributes in process `syz.2.479'. [ 185.162877][ T7225] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.163448][ T7225] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.460494][ T7231] netlink: 132732 bytes leftover after parsing attributes in process `syz.1.483'. [ 185.757526][ T32] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 185.909516][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 185.910570][ T32] usb 2-1: config 2 has an invalid interface number: 2 but max is 0 [ 185.910594][ T32] usb 2-1: config 2 has no interface number 0 [ 185.910625][ T32] usb 2-1: config 2 interface 2 has no altsetting 0 [ 185.912748][ T32] usb 2-1: New USB device found, idVendor=1608, idProduct=021e, bcdDevice=d6.6c [ 185.912775][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.912795][ T32] usb 2-1: Product: syz [ 185.912807][ T32] usb 2-1: Manufacturer: syz [ 185.912814][ T32] usb 2-1: SerialNumber: syz [ 186.219344][ T32] io_ti 2-1:2.2: required endpoints missing [ 186.232272][ T32] usb 2-1: USB disconnect, device number 41 [ 186.328728][ T5347] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 186.376519][ T7247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.377020][ T7247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.451858][ T5620] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 186.452363][ T5620] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 186.452619][ T5620] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 186.490893][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.490926][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.490962][ T5347] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 186.490984][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.544181][ T5620] Bluetooth: hci0: ACL packet for unknown connection handle 255 [ 186.546479][ T5347] usb 1-1: config 0 descriptor?? [ 186.797526][ T5809] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 186.947422][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 186.949733][ T5809] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 186.949759][ T5809] usb 2-1: config 0 has no interface number 0 [ 186.949790][ T5809] usb 2-1: config 0 interface 251 has no altsetting 0 [ 186.991478][ T5809] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=43.2d [ 186.991510][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.991529][ T5809] usb 2-1: Product: syz [ 186.991543][ T5809] usb 2-1: Manufacturer: syz [ 186.991557][ T5809] usb 2-1: SerialNumber: syz [ 186.997214][ T5809] usb 2-1: config 0 descriptor?? [ 187.054902][ T5347] hid-led 0003:27B8:01ED.0008: unknown main item tag 0x0 [ 187.054940][ T5347] hid-led 0003:27B8:01ED.0008: unknown main item tag 0x0 [ 187.054969][ T5347] hid-led 0003:27B8:01ED.0008: unknown main item tag 0x0 [ 187.054995][ T5347] hid-led 0003:27B8:01ED.0008: unknown main item tag 0x0 [ 187.055023][ T5347] hid-led 0003:27B8:01ED.0008: unknown main item tag 0x0 [ 187.264254][ T5809] usb_ehset_test 2-1:0.251: probe with driver usb_ehset_test failed with error -32 [ 187.301964][ T5809] usb 2-1: USB disconnect, device number 42 [ 187.441463][ T5347] hid-led 0003:27B8:01ED.0008: probe with driver hid-led failed with error -71 [ 187.490735][ T5347] usb 1-1: USB disconnect, device number 36 [ 187.947545][ T5347] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 188.100157][ T5347] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 188.100191][ T5347] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 188.100208][ T5347] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 188.102805][ T5347] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 188.102833][ T5347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.102852][ T5347] usb 4-1: Product: syz [ 188.102866][ T5347] usb 4-1: Manufacturer: syz [ 188.102879][ T5347] usb 4-1: SerialNumber: syz [ 188.130528][ T5347] usb 4-1: config 0 descriptor?? [ 188.132198][ T7260] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 188.132314][ T7260] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 188.205358][ T5347] usb 4-1: ucan: probing device on interface #0 [ 188.317518][ T5807] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 188.481628][ T5807] usb 1-1: unable to get BOS descriptor or descriptor too short [ 188.482184][ T5807] usb 1-1: not running at top speed; connect to a high speed hub [ 188.485852][ T5807] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 188.485888][ T5807] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 188.485909][ T5807] usb 1-1: config 14 has no interface number 0 [ 188.502972][ T5807] usb 1-1: config 14 has no interface number 1 [ 188.503050][ T5807] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 188.521316][ T5807] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 188.521348][ T5807] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 62089, setting to 64 [ 188.521378][ T5807] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.521411][ T5807] usb 1-1: config 14 interface 57 has no altsetting 0 [ 188.536606][ T5807] usb 1-1: config 14 interface 228 has no altsetting 0 [ 188.599557][ T5807] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 188.599587][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.599608][ T5807] usb 1-1: Product: syz [ 188.599623][ T5807] usb 1-1: Manufacturer: syz [ 188.599638][ T5807] usb 1-1: SerialNumber: syz [ 188.813810][ T5347] ucan 4-1:0.0 can0: registered device [ 188.870247][ T5809] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 188.948254][ T5347] ucan 4-1:0.0 can0: firmware string: V%r(D`ANR Eоטa [ 189.058371][ T5807] legousbtower 1-1:14.57: interrupt endpoints not found [ 189.078241][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 189.081266][ T5809] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.081291][ T5809] usb 2-1: config 0 has no interface number 0 [ 189.081334][ T5809] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.081359][ T5809] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.081396][ T5809] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 189.081419][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.095547][ T5809] usb 2-1: config 0 descriptor?? [ 189.100024][ T37] audit: type=1326 audit(1780340302.226:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7277 comm="syz.2.500" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f098906ce59 code=0x0 [ 189.155795][ T5811] usb 4-1: USB disconnect, device number 30 [ 189.462790][ T5807] legousbtower 1-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 189.519348][ T5807] legousbtower 1-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 189.527207][ T5809] hid (null): unknown global tag 0xc [ 189.542900][ T5809] hid (null): unknown global tag 0xc [ 189.542914][ T5809] hid (null): report_id 22254 is invalid [ 189.542952][ T5809] hid (null): unknown global tag 0xd [ 189.862959][ T5809] usb 2-1: USB disconnect, device number 43 [ 190.087189][ T7297] usb 1-1: LEGO USB Tower reset control request failed [ 190.090304][ T5811] usb 1-1: USB disconnect, device number 37 [ 190.143580][ T5811] legousbtower 1-1:14.228: LEGO USB Tower #-160 now disconnected [ 190.630464][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 190.632369][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 190.632666][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 190.632938][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 190.634737][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 190.634994][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 190.635251][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 190.635520][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 190.635784][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 190.722327][ T7314] netlink: 80 bytes leftover after parsing attributes in process `syz.2.504'. [ 190.777470][ T5347] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 190.928440][ T5347] usb 4-1: Using ep0 maxpacket: 16 [ 190.931776][ T5347] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 190.931802][ T5347] usb 4-1: config 0 has no interface number 0 [ 190.931843][ T5347] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid maxpacket 12592, setting to 1024 [ 190.931869][ T5347] usb 4-1: config 0 interface 107 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 1024 [ 191.006498][ T5347] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 191.006528][ T5347] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 191.006547][ T5347] usb 4-1: Product: syz [ 191.006561][ T5347] usb 4-1: Manufacturer: syz [ 191.006575][ T5347] usb 4-1: SerialNumber: syz [ 191.050905][ T5347] usb 4-1: config 0 descriptor?? [ 191.052896][ T7308] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 191.267199][ T7308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.271811][ T7308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.290883][ T5347] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 191.291455][ T5347] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 191.319331][ T5347] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 191.349199][ T5347] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 191.354098][ T5347] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 191.387837][ T5347] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 191.395753][ T5347] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 191.438480][ T5347] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 191.441212][ T5347] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 191.445805][ T5347] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 191.479500][ T5347] usb 4-1: USB disconnect, device number 31 [ 191.486401][ T5347] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 191.523982][ T5347] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 191.544731][ T5347] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 191.613866][ T5347] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 191.616619][ T5347] keyspan 4-1:0.107: device disconnected [ 191.698190][ T7346] syzkaller1: entered promiscuous mode [ 191.698215][ T7346] syzkaller1: entered allmulticast mode [ 191.812920][ T7348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.813453][ T7348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.867182][ T7350] FAULT_INJECTION: forcing a failure. [ 191.867182][ T7350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.867213][ T7350] CPU: 1 UID: 0 PID: 7350 Comm: syz.3.514 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 191.867236][ T7350] Tainted: [L]=SOFTLOCKUP [ 191.867241][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 191.867250][ T7350] Call Trace: [ 191.867256][ T7350] [ 191.867264][ T7350] dump_stack_lvl+0xe8/0x150 [ 191.867292][ T7350] should_fail_ex+0x46b/0x600 [ 191.867326][ T7350] _copy_from_user+0x2d/0xb0 [ 191.867345][ T7350] ? __pfx_drm_mode_getfb2_ioctl+0x10/0x10 [ 191.867360][ T7350] drm_ioctl+0x5d0/0xb80 [ 191.867383][ T7350] ? __pfx_drm_mode_getfb2_ioctl+0x10/0x10 [ 191.867400][ T7350] ? __pfx_drm_ioctl+0x10/0x10 [ 191.867427][ T7350] ? __fget_files+0x2a/0x420 [ 191.867447][ T7350] ? bpf_lsm_file_ioctl+0x9/0x20 [ 191.867471][ T7350] ? __pfx_drm_ioctl+0x10/0x10 [ 191.867488][ T7350] __se_sys_ioctl+0xff/0x170 [ 191.867510][ T7350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.867528][ T7350] do_syscall_64+0x174/0x580 [ 191.867552][ T7350] ? trace_irq_disable+0x3b/0x140 [ 191.867572][ T7350] ? clear_bhb_loop+0x40/0x90 [ 191.867593][ T7350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.867611][ T7350] RIP: 0033:0x7f4e7983ce59 [ 191.867625][ T7350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.867637][ T7350] RSP: 002b:00007f4e77a8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 191.867652][ T7350] RAX: ffffffffffffffda RBX: 00007f4e79ab5fa0 RCX: 00007f4e7983ce59 [ 191.867662][ T7350] RDX: 0000200000000440 RSI: 00000000c06864ce RDI: 0000000000000004 [ 191.867671][ T7350] RBP: 00007f4e77a8e090 R08: 0000000000000000 R09: 0000000000000000 [ 191.867679][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.867688][ T7350] R13: 00007f4e79ab6038 R14: 00007f4e79ab5fa0 R15: 00007fff0cc8c108 [ 191.867709][ T7350] [ 192.166700][ T7354] netlink: 'syz.0.516': attribute type 2 has an invalid length. [ 192.298111][ T5811] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 192.447498][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 192.450232][ T5811] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 192.450257][ T5811] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 192.450277][ T5811] usb 4-1: config 0 has no interface number 0 [ 192.450307][ T5811] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 192.450336][ T5811] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 192.450360][ T5811] usb 4-1: config 0 interface 48 has no altsetting 0 [ 192.452529][ T5811] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 192.452556][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.452576][ T5811] usb 4-1: Product: syz [ 192.452590][ T5811] usb 4-1: Manufacturer: syz [ 192.452603][ T5811] usb 4-1: SerialNumber: syz [ 192.456167][ T5811] usb 4-1: config 0 descriptor?? [ 192.507471][ T5347] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 192.557666][ T32] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 192.633152][ T7362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.633741][ T7362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.687454][ T5347] usb 1-1: Using ep0 maxpacket: 16 [ 192.696438][ T5347] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 192.696471][ T5347] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 192.707491][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 192.735072][ T5347] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 192.735101][ T5347] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.735120][ T5347] usb 1-1: Product: syz [ 192.735134][ T5347] usb 1-1: Manufacturer: syz [ 192.735148][ T5347] usb 1-1: SerialNumber: syz [ 192.737173][ T32] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.737197][ T32] usb 2-1: config 0 has no interface number 0 [ 192.786322][ T32] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 192.786352][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.786468][ T32] usb 2-1: Product: syz [ 192.786483][ T32] usb 2-1: Manufacturer: syz [ 192.786497][ T32] usb 2-1: SerialNumber: syz [ 192.820977][ T5347] usb 1-1: config 0 descriptor?? [ 192.846531][ T5347] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 192.846565][ T5347] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 192.865588][ T32] usb 2-1: config 0 descriptor?? [ 192.887683][ T7364] ieee802154 phy0 wpan0: encryption failed: -90 [ 192.903755][ T32] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 192.903829][ T32] usb 2-1: selecting invalid altsetting 1 [ 192.903839][ T32] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 193.077813][ T32] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 193.079489][ T32] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 193.079641][ T32] usb 2-1: media controller created [ 193.095080][ T7360] usb 2-1: dvb_usb_ce6230: I2C read not implemented [ 193.336646][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.461074][ T5347] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 193.461879][ T5347] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 193.462809][ T5347] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 193.462825][ T5347] em28xx 1-1:0.0: No AC97 audio processor [ 193.804758][ T32] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 193.804794][ T32] zl10353_read_register: readreg error (reg=127, ret==-71) [ 193.805922][ T32] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 193.940275][ T5811] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 193.941774][ T5811] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 193.941862][ T5811] gspca_pac7302 4-1:0.48: probe with driver gspca_pac7302 failed with error -71 [ 193.953989][ T5811] usb 4-1: USB disconnect, device number 32 [ 194.027203][ T32] usb 2-1: USB disconnect, device number 44 [ 194.276332][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.276389][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.397577][ T32] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 194.552732][ T32] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 194.552759][ T32] usb 2-1: config 0 has no interface number 0 [ 194.552789][ T32] usb 2-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 194.552829][ T32] usb 2-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 194.552856][ T32] usb 2-1: config 0 interface 48 has no altsetting 0 [ 194.552888][ T32] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 194.552911][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.576941][ T32] usb 2-1: config 0 descriptor?? [ 194.694867][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.695505][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.702845][ T7384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.725389][ T7384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.784121][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 194.784400][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 194.784959][ T32] usb 2-1: string descriptor 0 read error: -71 [ 194.791166][ T32] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 194.803118][ T32] gspca_cpia1: usb_control_msg 05, error -71 [ 194.803665][ T32] gspca_cpia1: usb_control_msg 01, error -71 [ 194.803678][ T32] cpia1 2-1:0.48: only firmware version 1 is supported (got: 0) [ 194.817649][ T32] usb 2-1: USB disconnect, device number 45 [ 194.917528][ T5811] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 195.067469][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 195.069952][ T5811] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.069976][ T5811] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.071022][ T5811] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 195.071048][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 195.071068][ T5811] usb 4-1: SerialNumber: syz [ 195.091733][ T5811] usb 4-1: 0:2 : does not exist [ 195.320307][ T7387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.321885][ T7387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.617558][ T5762] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 195.691454][ T5811] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 195.695407][ T5811] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 195.722140][ T5811] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 195.753802][ T5811] usb 4-1: USB disconnect, device number 33 [ 195.777486][ T5762] usb 2-1: Using ep0 maxpacket: 32 [ 195.788494][ T5762] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 195.788524][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.818054][ T5762] usb 2-1: config 0 descriptor?? [ 195.842941][ T5762] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 196.314930][ T7394] comedi comedi4: comedi_config --init_data is deprecated [ 196.359071][ T5807] usb 1-1: USB disconnect, device number 38 [ 196.372529][ T5807] em28xx 1-1:0.0: Disconnecting em28xx [ 196.477469][ T5811] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 196.598406][ T5807] em28xx 1-1:0.0: Freeing device [ 196.639742][ T5811] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 196.639772][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.670056][ T5811] usb 4-1: config 0 descriptor?? [ 196.686404][ T5811] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 196.907799][ T5807] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 197.070339][ T5807] usb 1-1: Using ep0 maxpacket: 16 [ 197.075856][ T5807] usb 1-1: config 0 interface 0 has no altsetting 0 [ 197.075895][ T5807] usb 1-1: New USB device found, idVendor=046d, idProduct=c51b, bcdDevice= 0.00 [ 197.076479][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.137591][ T5807] usb 1-1: config 0 descriptor?? [ 197.191646][ T5811] gp8psk: usb in 128 operation failed. [ 197.434604][ T5811] gp8psk: FW Version = 59.85.246 (0x3b55f6) Build 2017/249/58 [ 197.437124][ T5762] gspca_vc032x: reg_w err -71 [ 197.437139][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437149][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437157][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437694][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437708][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437717][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437725][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437734][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437742][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437750][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437758][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437775][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437784][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.437792][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.438011][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.438020][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.438029][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.438038][ T5762] gspca_vc032x: I2c Bus Busy Wait 00 [ 197.438047][ T5762] gspca_vc032x: Unknown sensor... [ 197.438346][ T5762] vc032x 2-1:0.0: probe with driver vc032x failed with error -22 [ 197.452809][ T5762] usb 2-1: USB disconnect, device number 46 [ 197.586631][ T5807] logitech-djreceiver 0003:046D:C51B.000A: collection stack underflow [ 197.586666][ T5807] logitech-djreceiver 0003:046D:C51B.000A: item 0 2 0 12 parsing failed [ 197.591611][ T5807] logitech-djreceiver 0003:046D:C51B.000A: logi_dj_probe: parse failed [ 197.591693][ T5807] logitech-djreceiver 0003:046D:C51B.000A: probe with driver logitech-djreceiver failed with error -22 [ 197.640504][ T5811] gp8psk: FPGA Version = 154 [ 197.716933][ T7404] __nla_validate_parse: 1 callbacks suppressed [ 197.716948][ T7404] netlink: 20 bytes leftover after parsing attributes in process `syz.2.532'. [ 197.789950][ T5762] usb 1-1: USB disconnect, device number 39 [ 197.992860][ T7404] netlink: 188 bytes leftover after parsing attributes in process `syz.2.532'. [ 198.096291][ T5811] gp8psk: usb in 138 operation failed. [ 198.096326][ T5811] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 198.096366][ T5811] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 198.138844][ T5811] usb 4-1: USB disconnect, device number 34 [ 199.457457][ T5811] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 199.639442][ T5811] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 199.639473][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.639494][ T5811] usb 1-1: Product: syz [ 199.639507][ T5811] usb 1-1: Manufacturer: syz [ 199.639521][ T5811] usb 1-1: SerialNumber: syz [ 200.114794][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 200.114856][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 200.275534][ T5807] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 200.448998][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 200.452878][ T7442] No source specified [ 200.455450][ T5807] usb 2-1: unable to get BOS descriptor or descriptor too short [ 200.456955][ T5807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.456979][ T5807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.475295][ T5807] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.475323][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.475343][ T5807] usb 2-1: Product: ч [ 200.475356][ T5807] usb 2-1: Manufacturer: 萦鞒瀞䣊缨㨪繁ﵪᔷ퇗촜꘱죴ᒠ᯹췦㨮롷賌紹遦ꉀ៮⎛ਖ਼螂ᬒ睟腄綕‹㕥푝塥텊Â߲ꗴᥛ쐯늲냖ṽ赮렧솘逨슲〈㺳䢭ᓌ婊쉥邀㜑蟾ⳬ븕쥙驞齌❀䳟鍪㵎礤䩂쨼⢨񴨬 [ 201.055701][ T5807] usb 2-1: 0:2 : does not exist [ 201.275799][ T5807] usb 2-1: USB disconnect, device number 47 [ 201.472705][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.693589][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 201.694245][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 201.700043][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 201.700097][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 201.735911][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 201.773906][ T5811] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 201.863641][ T5811] usb 1-1: USB disconnect, device number 40 [ 202.088562][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.090215][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.087566][ T5809] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 203.238930][ T5809] usb 2-1: Using ep0 maxpacket: 16 [ 203.247228][ T5809] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.247254][ T5809] usb 2-1: config 0 has no interface number 0 [ 203.268957][ T5809] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 203.268989][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.269016][ T5809] usb 2-1: Product: syz [ 203.269030][ T5809] usb 2-1: Manufacturer: syz [ 203.269043][ T5809] usb 2-1: SerialNumber: syz [ 203.289297][ T5809] usb 2-1: config 0 descriptor?? [ 203.344590][ T5809] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 204.238629][ T7484] netlink: 72 bytes leftover after parsing attributes in process `syz.1.560'. [ 204.302962][ T7516] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.306635][ T7516] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.850938][ T5809] gspca_spca1528: reg_w err -71 [ 204.851046][ T5809] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71 [ 204.872033][ T5809] usb 2-1: USB disconnect, device number 48 [ 205.187506][ T5347] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 205.337554][ T5347] usb 1-1: device descriptor read/64, error -71 [ 205.514131][ T7528] netlink: 'syz.1.578': attribute type 1 has an invalid length. [ 205.514152][ T7528] netlink: 16098 bytes leftover after parsing attributes in process `syz.1.578'. [ 205.597616][ T5347] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 205.737502][ T5347] usb 1-1: device descriptor read/64, error -71 [ 205.848948][ T5347] usb usb1-port1: attempt power cycle [ 206.161432][ T7538] netlink: 204 bytes leftover after parsing attributes in process `syz.2.583'. [ 206.161967][ T7538] netlink: 84 bytes leftover after parsing attributes in process `syz.2.583'. [ 206.199738][ T5347] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 206.221110][ T5347] usb 1-1: device descriptor read/8, error -71 [ 206.467536][ T5347] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 206.505172][ T5347] usb 1-1: device descriptor read/8, error -71 [ 206.576050][ T7558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.578297][ T7558] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.623017][ T5347] usb usb1-port1: unable to enumerate USB device [ 207.857575][ T32] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 208.007594][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 208.015620][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.015676][ T32] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 208.015689][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.029703][ T32] usb 1-1: config 0 descriptor?? [ 208.147569][ T5762] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 208.319262][ T5762] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 208.319295][ T5762] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 208.319320][ T5762] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 208.321641][ T5762] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 208.321668][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.321686][ T5762] usb 4-1: Product: syz [ 208.321693][ T5762] usb 4-1: Manufacturer: syz [ 208.321700][ T5762] usb 4-1: SerialNumber: syz [ 208.326118][ T5762] usb 4-1: config 0 descriptor?? [ 208.332131][ T7577] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.350562][ T7577] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.418140][ T7585] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 208.418289][ T7585] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 208.419844][ T5762] usb 4-1: ucan: probing device on interface #0 [ 209.015203][ T7604] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 209.032814][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.033368][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.131788][ T5762] ucan 4-1:0.0 can0: registered device [ 209.233930][ T5762] ucan 4-1:0.0 can0: firmware string: V% [ 209.262172][ T32] usb 1-1: USB disconnect, device number 45 [ 209.310288][ T7604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.328272][ T7604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.439631][ T5809] usb 4-1: USB disconnect, device number 35 [ 210.081173][ T7634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.084006][ T7634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.817523][ T5347] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 211.871107][ T7677] netlink: 'syz.2.624': attribute type 10 has an invalid length. [ 211.909193][ T7677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.909727][ T7677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.989429][ T5347] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 211.989456][ T5347] usb 1-1: config 0 has no interface number 0 [ 211.990060][ T5347] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2 [ 211.990077][ T5347] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 10 [ 211.990091][ T5347] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid maxpacket 5706, setting to 64 [ 211.991791][ T5347] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 211.991818][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 211.991838][ T5347] usb 1-1: Product: syz [ 211.991851][ T5347] usb 1-1: SerialNumber: syz [ 211.995526][ T5347] usb 1-1: config 0 descriptor?? [ 211.996710][ T7673] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 212.056163][ T5347] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 212.229965][ T32] usb 1-1: USB disconnect, device number 46 [ 212.481623][ T5620] Bluetooth: hci3: unexpected event for opcode 0x0c5b [ 212.516862][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.517737][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.597718][ T5762] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 212.667481][ T32] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 212.765956][ T5762] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 212.765986][ T5762] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 212.766008][ T5762] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.766050][ T5762] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 212.766073][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.815287][ T5762] usbtmc 2-1:16.0: bulk endpoints not found [ 212.837536][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 212.846905][ T32] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 48, changing to 7 [ 212.867292][ T32] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 212.867539][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.867560][ T32] usb 4-1: Product: syz [ 212.867574][ T32] usb 4-1: Manufacturer: syz [ 212.867587][ T32] usb 4-1: SerialNumber: syz [ 213.124387][ T32] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 213.144680][ T32] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 213.337823][ T32] usb 4-1: USB disconnect, device number 36 [ 213.818623][ T5347] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 213.823870][ T7712] (syz.3.637,7712,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 213.823893][ T7712] (syz.3.637,7712,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 213.823905][ T7712] (syz.3.637,7712,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 213.823915][ T7712] (syz.3.637,7712,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 213.977515][ T5347] usb 1-1: Using ep0 maxpacket: 32 [ 213.980552][ T5347] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 213.980588][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.983999][ T5347] usb 1-1: config 0 descriptor?? [ 214.196095][ T5347] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 214.235168][ T5347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 214.236612][ T5347] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 214.236666][ T5347] usb 1-1: media controller created [ 214.293251][ T5347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.682511][ T5347] az6027: usb out operation failed. (-71) [ 214.682531][ T5347] stb0899_attach: Driver disabled by Kconfig [ 214.682541][ T5347] az6027: no front-end attached [ 214.682541][ T5347] [ 214.683723][ T5347] az6027: usb out operation failed. (-71) [ 214.683754][ T5347] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 214.724026][ T5347] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 214.727308][ T5347] dvb-usb: schedule remote query interval to 400 msecs. [ 214.745949][ T5347] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 214.782359][ T5347] usb 1-1: USB disconnect, device number 47 [ 214.845026][ T7721] Invalid source name [ 214.845043][ T7721] UBIFS error (pid: 7721): cannot open "/dev/sg0", error -22 [ 214.977174][ T5347] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 215.107565][ T5811] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 215.152641][ T7723] comedi comedi0: dt2814: I/O base address not correctly aligned [ 215.156459][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.160143][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.257573][ T5811] usb 4-1: Using ep0 maxpacket: 16 [ 215.260880][ T5811] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 215.260897][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 215.260908][ T5811] usb 4-1: Product: syz [ 215.260915][ T5811] usb 4-1: Manufacturer: syz [ 215.260923][ T5811] usb 4-1: SerialNumber: syz [ 215.265362][ T5811] usb 4-1: config 0 descriptor?? [ 215.312402][ T5811] ums-onetouch 4-1:0.0: USB Mass Storage device detected [ 215.366489][ T7723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.367042][ T7723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.482835][ T5347] usb 4-1: USB disconnect, device number 37 [ 215.509906][ T1708] usb 2-1: USB disconnect, device number 49 [ 215.623128][ T7733] veth0_to_batadv: entered promiscuous mode [ 215.623144][ T7733] veth0_to_batadv: entered allmulticast mode [ 216.097597][ T1708] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 216.213437][ T5347] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 216.259192][ T1708] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 216.259221][ T1708] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 216.259235][ T1708] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 216.261331][ T1708] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 216.261361][ T1708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.261380][ T1708] usb 2-1: Product: syz [ 216.261394][ T1708] usb 2-1: Manufacturer: syz [ 216.261404][ T1708] usb 2-1: SerialNumber: syz [ 216.265770][ T1708] usb 2-1: config 0 descriptor?? [ 216.267895][ T7735] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 216.268004][ T7735] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 216.272169][ T1708] usb 2-1: ucan: probing device on interface #0 [ 216.362054][ T5347] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 216.362071][ T5347] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.374203][ T5347] usb 1-1: config 0 descriptor?? [ 216.405272][ T5347] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 216.437588][ T5807] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 216.643134][ T5807] usb 4-1: Using ep0 maxpacket: 32 [ 216.647482][ T5807] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.647514][ T5807] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.671530][ T5807] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 216.671560][ T5807] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 216.671581][ T5807] usb 4-1: Product: syz [ 216.671595][ T5807] usb 4-1: Manufacturer: syz [ 216.773090][ T5807] hub 4-1:4.0: USB hub found [ 216.918588][ T5347] gp8psk: usb in 128 operation failed. [ 216.944487][ T5807] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 217.036627][ T37] audit: type=1326 audit(5341020937.697:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7755 comm="syz.2.653" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f098906ce59 code=0x0 [ 217.176793][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.188135][ T1708] ucan 2-1:0.0 can0: registered device [ 217.189342][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.193511][ T1708] ucan 2-1:0.0 can0: firmware string: V% [ 217.204739][ T5347] gp8psk: FW Version = 210.49.154 (0xd2319a) Build 2015/232/175 [ 217.227201][ T7744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.231538][ T7744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.389201][ T1708] usb 4-1: USB disconnect, device number 38 [ 217.402853][ T32] usb 2-1: USB disconnect, device number 50 [ 218.029561][ T5347] gp8psk: usb in 149 operation failed. [ 218.029582][ T5347] gp8psk: failed to get FPGA version [ 218.054992][ T5347] gp8psk: usb in 138 operation failed. [ 218.055012][ T5347] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 218.055049][ T5347] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 218.062239][ T5347] usb 1-1: USB disconnect, device number 48 [ 218.240387][ T32] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 218.390719][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 218.413193][ T32] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 218.413223][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.413243][ T32] usb 2-1: Product: syz [ 218.413257][ T32] usb 2-1: Manufacturer: syz [ 218.413270][ T32] usb 2-1: SerialNumber: syz [ 218.454511][ T32] usb 2-1: config 0 descriptor?? [ 218.466085][ T32] usb 2-1: ucan: probing device on interface #0 [ 218.466110][ T32] usb 2-1: ucan: invalid EP count (0) [ 218.466135][ T32] usb 2-1: ucan: probe failed; try to update the device firmware [ 218.666057][ T7775] netlink: 256 bytes leftover after parsing attributes in process `syz.1.656'. [ 218.666080][ T7775] netlink: 72 bytes leftover after parsing attributes in process `syz.1.656'. [ 218.694420][ T7775] netlink: 'syz.1.656': attribute type 10 has an invalid length. [ 218.771378][ T5809] usb 2-1: USB disconnect, device number 51 [ 218.893997][ T7804] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 219.497502][ T5807] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 219.649101][ T5807] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 219.649132][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.652789][ T5807] usb 4-1: config 0 descriptor?? [ 219.660825][ T5807] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 219.764279][ T7826] raw_sendmsg: syz.0.671 forgot to set AF_INET. Fix it! [ 220.211928][ T5807] gp8psk: usb in 128 operation failed. [ 220.420352][ T5807] gp8psk: FW Version = 210.49.154 (0xd2319a) Build 2015/232/175 [ 220.677450][ T32] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 220.840223][ T32] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 220.840250][ T32] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 220.840293][ T32] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 220.840316][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.845392][ T32] usb 1-1: config 0 descriptor?? [ 221.027509][ T32] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 221.038202][ T5807] gp8psk: usb in 149 operation failed. [ 221.038221][ T5807] gp8psk: failed to get FPGA version [ 221.038599][ T5807] gp8psk: usb in 138 operation failed. [ 221.038613][ T5807] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 221.038653][ T5807] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 221.043161][ T5807] usb 4-1: USB disconnect, device number 39 [ 221.200934][ T32] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 221.200963][ T32] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 221.200983][ T32] usb 2-1: config 220 has no interface number 2 [ 221.201046][ T32] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 221.201061][ T32] usb 2-1: config 220 interface 0 has no altsetting 0 [ 221.201071][ T32] usb 2-1: config 220 interface 76 has no altsetting 0 [ 221.201080][ T32] usb 2-1: config 220 interface 1 has no altsetting 0 [ 221.203234][ T32] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 221.203262][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.203280][ T32] usb 2-1: Product: syz [ 221.203294][ T32] usb 2-1: Manufacturer: syz [ 221.203308][ T32] usb 2-1: SerialNumber: syz [ 221.458049][ T32] usb 2-1: selecting invalid altsetting 0 [ 221.480727][ T32] usb 2-1: selecting invalid altsetting 0 [ 221.481187][ T32] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 221.481216][ T32] uvcvideo 2-1:220.0: No valid video chain found. [ 221.491971][ T32] usb 2-1: selecting invalid altsetting 0 [ 221.492004][ T32] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 221.498966][ T32] usb 2-1: USB disconnect, device number 52 [ 221.740099][ T7871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.740673][ T7871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.800952][ T7872] netlink: 'syz.0.684': attribute type 10 has an invalid length. [ 221.800972][ T7872] netlink: 40 bytes leftover after parsing attributes in process `syz.0.684'. [ 221.832639][ T7872] team0: Port device geneve1 added [ 221.837552][ T5713] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 221.992251][ T5713] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 221.992270][ T5713] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.992280][ T5713] usb 4-1: Product: syz [ 221.992288][ T5713] usb 4-1: Manufacturer: syz [ 221.992295][ T5713] usb 4-1: SerialNumber: syz [ 222.001320][ T5713] usb 4-1: config 0 descriptor?? [ 222.035069][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.035944][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.205652][ T5713] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 222.427116][ T5713] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 222.441027][ T5713] usb 4-1: USB disconnect, device number 40 [ 223.137578][ T7900] netlink: 144 bytes leftover after parsing attributes in process `syz.1.694'. [ 223.214094][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.214615][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.229774][ T7903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.231876][ T7903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.788296][ T7913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.788810][ T7913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.311245][ T7924] netlink: 244 bytes leftover after parsing attributes in process `syz.3.704'. [ 224.540198][ T7930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.540794][ T7930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.624182][ T7932] netlink: 20 bytes leftover after parsing attributes in process `syz.1.707'. [ 224.624196][ T7932] netlink: 24 bytes leftover after parsing attributes in process `syz.1.707'. [ 225.206371][ T7947] syzkaller1: entered promiscuous mode [ 225.206398][ T7947] syzkaller1: entered allmulticast mode [ 225.534464][ T7949] netlink: 28 bytes leftover after parsing attributes in process `syz.2.714'. [ 225.760772][ T5620] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 225.946518][ T7960] Bluetooth: MGMT ver 1.23 [ 226.288476][ T7968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.290276][ T7968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.432757][ T7979] netlink: 'syz.0.720': attribute type 10 has an invalid length. [ 226.432779][ T7979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.720'. [ 227.243021][ T7997] fuse: Bad value for 'fd' [ 227.399825][ T32] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 227.555526][ T32] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 227.555553][ T32] usb 4-1: config 0 has no interface number 0 [ 227.555591][ T32] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 227.555617][ T32] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 227.555639][ T32] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 227.555665][ T32] usb 4-1: config 0 interface 1 has no altsetting 0 [ 227.555695][ T32] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 227.555717][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.572630][ T32] usb 4-1: config 0 descriptor?? [ 228.254598][ T8016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.273980][ T8009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.274565][ T8009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.474706][ T32] uclogic 0003:145F:0212.000B: failed retrieving string descriptor #100: -71 [ 228.474761][ T32] uclogic 0003:145F:0212.000B: failed retrieving pen parameters: -71 [ 228.474790][ T32] uclogic 0003:145F:0212.000B: pen probing failed: -71 [ 228.474806][ T32] uclogic 0003:145F:0212.000B: failed probing parameters: -71 [ 228.474918][ T32] uclogic 0003:145F:0212.000B: probe with driver uclogic failed with error -71 [ 228.488277][ T37] audit: type=1326 audit(5341020949.147:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8021 comm="syz.2.730" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f098906ce59 code=0x0 [ 228.523801][ T32] usb 4-1: USB disconnect, device number 41 [ 228.565462][ T8027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.588058][ T8027] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.947226][ T8020] wlan1: authenticate with 50:50:50:50:50:50 (local address=08:02:11:00:00:01) [ 228.947273][ T8020] wlan1: send auth to 50:50:50:50:50:50 (try 1/3) [ 229.002354][ T5833] wlan1: send auth to 50:50:50:50:50:50 (try 2/3) [ 229.030744][ T5833] wlan1: send auth to 50:50:50:50:50:50 (try 3/3) [ 229.055754][ T5833] wlan1: authentication with 50:50:50:50:50:50 timed out [ 229.184490][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.185082][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.744392][ T8051] netlink: 68 bytes leftover after parsing attributes in process `syz.1.739'. [ 229.978782][ T8059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.979341][ T8059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.127541][ T32] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 230.277505][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 230.312199][ T32] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 230.312229][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.312248][ T32] usb 4-1: Product: syz [ 230.312256][ T32] usb 4-1: Manufacturer: syz [ 230.312263][ T32] usb 4-1: SerialNumber: syz [ 230.320833][ T32] usb 4-1: config 0 descriptor?? [ 230.343813][ T32] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 230.540119][ T32] ssu100 4-1:0.0: probe with driver ssu100 failed with error -5 [ 231.107009][ T8072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.108264][ T8072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.477704][ T8076] netlink: 156 bytes leftover after parsing attributes in process `syz.2.748'. [ 231.557489][ T8078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.559306][ T8078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 231.740475][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 231.742735][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.210685][ T8090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.211708][ T8090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.232220][ T8089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.232924][ T8089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.340805][ T8095] sock: sock_set_timeout: `syz.1.756' (pid 8095) tries to set negative timeout [ 232.358389][ T8095] syzkaller1: entered promiscuous mode [ 232.358416][ T8095] syzkaller1: entered allmulticast mode [ 232.577730][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.578351][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.617602][ T5347] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 232.847516][ T5347] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 232.847547][ T5347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.847567][ T5347] usb 2-1: Product: syz [ 232.847581][ T5347] usb 2-1: Manufacturer: syz [ 232.847596][ T5347] usb 2-1: SerialNumber: syz [ 232.853777][ T5347] usb 2-1: config 0 descriptor?? [ 232.895761][ T32] usb 4-1: USB disconnect, device number 42 [ 233.058146][ T5347] cx82310_eth 2-1:0.0: probe with driver cx82310_eth failed with error -22 [ 233.064708][ T5347] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19! [ 233.084004][ T5347] usb 2-1: USB disconnect, device number 53 [ 233.210388][ T8103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.210828][ T8103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.357550][ T32] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 233.379922][ T8103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 233.509335][ T32] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 233.509362][ T32] usb 4-1: config 0 has no interfaces? [ 233.509393][ T32] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 233.509416][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.514974][ T32] usb 4-1: config 0 descriptor?? [ 233.923369][ T8108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.923948][ T8108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.244035][ T32] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 234.246465][ T8119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.247135][ T8119] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.388316][ T32] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 234.389388][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.389413][ T32] usb 2-1: config 0 has no interfaces? [ 234.390442][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.390464][ T32] usb 2-1: config 0 has no interfaces? [ 234.391500][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.391521][ T32] usb 2-1: config 0 has no interfaces? [ 234.392672][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.392693][ T32] usb 2-1: config 0 has no interfaces? [ 234.393747][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.393768][ T32] usb 2-1: config 0 has no interfaces? [ 234.394905][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.394925][ T32] usb 2-1: config 0 has no interfaces? [ 234.396080][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.396101][ T32] usb 2-1: config 0 has no interfaces? [ 234.397119][ T32] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.397141][ T32] usb 2-1: config 0 has no interfaces? [ 234.431095][ T32] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 234.431126][ T32] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 234.431147][ T32] usb 2-1: Product: syz [ 234.431162][ T32] usb 2-1: Manufacturer: syz [ 234.431176][ T32] usb 2-1: SerialNumber: syz [ 234.569226][ T32] usb 2-1: config 0 descriptor?? [ 234.781687][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.782240][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.786221][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 234.786260][ T8110] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 234.823093][ T8110] netlink: 128 bytes leftover after parsing attributes in process `syz.1.763'. [ 234.823110][ T8110] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 234.824533][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.825240][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.832731][ T8110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.833317][ T8110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.885938][ T32] usb 2-1: USB disconnect, device number 54 [ 236.219742][ T1708] usb 4-1: USB disconnect, device number 43 [ 236.418347][ T1708] ================================================================== [ 236.418370][ T1708] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 236.418408][ T1708] Read of size 8 at addr ffffc90004deb008 by task kworker/0:2/1708 [ 236.418423][ T1708] [ 236.418443][ T1708] CPU: 0 UID: 0 PID: 1708 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 236.418470][ T1708] Tainted: [L]=SOFTLOCKUP [ 236.418477][ T1708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.418490][ T1708] Workqueue: usb_hub_wq hub_event [ 236.418511][ T1708] Call Trace: [ 236.418518][ T1708] [ 236.418526][ T1708] dump_stack_lvl+0xe8/0x150 [ 236.418551][ T1708] print_address_description+0x55/0x1e0 [ 236.418576][ T1708] ? __list_add_valid_or_report+0x4e/0x130 [ 236.418603][ T1708] print_report+0x58/0x70 [ 236.418625][ T1708] kasan_report+0x117/0x150 [ 236.418650][ T1708] ? __list_add_valid_or_report+0x4e/0x130 [ 236.418681][ T1708] __list_add_valid_or_report+0x4e/0x130 [ 236.418711][ T1708] kcov_remote_stop+0x457/0x680 [ 236.418733][ T1708] hub_event+0x49d8/0x4f60 [ 236.418763][ T1708] ? kasan_quarantine_put+0xbb/0x1f0 [ 236.418789][ T1708] ? __pfx_hub_event+0x10/0x10 [ 236.418808][ T1708] ? process_one_work+0x8be/0x1630 [ 236.418839][ T1708] ? process_one_work+0x8be/0x1630 [ 236.418862][ T1708] process_one_work+0x98b/0x1630 [ 236.418894][ T1708] ? __pfx_process_one_work+0x10/0x10 [ 236.418918][ T1708] ? do_raw_spin_lock+0x12b/0x2f0 [ 236.418943][ T1708] worker_thread+0xb49/0x1140 [ 236.418972][ T1708] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 236.419004][ T1708] kthread+0x388/0x470 [ 236.419023][ T1708] ? __pfx_worker_thread+0x10/0x10 [ 236.419048][ T1708] ? __pfx_kthread+0x10/0x10 [ 236.419068][ T1708] ret_from_fork+0x514/0xb70 [ 236.419089][ T1708] ? __pfx_ret_from_fork+0x10/0x10 [ 236.419110][ T1708] ? __switch_to+0xc79/0x1410 [ 236.419128][ T1708] ? __pfx_kthread+0x10/0x10 [ 236.419148][ T1708] ret_from_fork_asm+0x1a/0x30 [ 236.419175][ T1708] [ 236.419182][ T1708] [ 236.419186][ T1708] The buggy address belongs to a vmalloc virtual mapping [ 236.419200][ T1708] Memory state around the buggy address: [ 236.419210][ T1708] ffffc90004deaf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 236.419221][ T1708] ffffc90004deaf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 236.419233][ T1708] >ffffc90004deb000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 236.419240][ T1708] ^ [ 236.419248][ T1708] ffffc90004deb080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 236.419258][ T1708] ffffc90004deb100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 236.419266][ T1708] ================================================================== [ 236.419285][ T1708] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 236.419299][ T1708] CPU: 0 UID: 0 PID: 1708 Comm: kworker/0:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 236.419323][ T1708] Tainted: [L]=SOFTLOCKUP [ 236.419330][ T1708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 236.419343][ T1708] Workqueue: usb_hub_wq hub_event [ 236.419367][ T1708] Call Trace: [ 236.419373][ T1708] [ 236.419379][ T1708] vpanic+0x56c/0xa60 [ 236.419403][ T1708] ? __pfx_vpanic+0x10/0x10 [ 236.419424][ T1708] panic+0xc5/0xd0 [ 236.419447][ T1708] ? __pfx_panic+0x10/0x10 [ 236.419467][ T1708] ? __list_add_valid_or_report+0x4e/0x130 [ 236.419493][ T1708] ? rcu_is_watching+0x15/0xb0 [ 236.419519][ T1708] ? __list_add_valid_or_report+0x4e/0x130 [ 236.419546][ T1708] check_panic_on_warn+0x89/0xb0 [ 236.419568][ T1708] ? __list_add_valid_or_report+0x4e/0x130 [ 236.419605][ T1708] end_report+0x73/0x170 [ 236.419631][ T1708] ? __list_add_valid_or_report+0x4e/0x130 [ 236.419657][ T1708] kasan_report+0x128/0x150 [ 236.419680][ T1708] ? __list_add_valid_or_report+0x4e/0x130 [ 236.419711][ T1708] __list_add_valid_or_report+0x4e/0x130 [ 236.419740][ T1708] kcov_remote_stop+0x457/0x680 [ 236.419762][ T1708] hub_event+0x49d8/0x4f60 [ 236.419791][ T1708] ? kasan_quarantine_put+0xbb/0x1f0 [ 236.419817][ T1708] ? __pfx_hub_event+0x10/0x10 [ 236.419831][ T1708] ? process_one_work+0x8be/0x1630 [ 236.419856][ T1708] ? process_one_work+0x8be/0x1630 [ 236.419879][ T1708] process_one_work+0x98b/0x1630 [ 236.419906][ T1708] ? __pfx_process_one_work+0x10/0x10 [ 236.419927][ T1708] ? do_raw_spin_lock+0x12b/0x2f0 [ 236.419950][ T1708] worker_thread+0xb49/0x1140 [ 236.419974][ T1708] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 236.420003][ T1708] kthread+0x388/0x470 [ 236.420022][ T1708] ? __pfx_worker_thread+0x10/0x10 [ 236.420047][ T1708] ? __pfx_kthread+0x10/0x10 [ 236.420072][ T1708] ret_from_fork+0x514/0xb70 [ 236.420092][ T1708] ? __pfx_ret_from_fork+0x10/0x10 [ 236.420112][ T1708] ? __switch_to+0xc79/0x1410 [ 236.420130][ T1708] ? __pfx_kthread+0x10/0x10 [ 236.420149][ T1708] ret_from_fork_asm+0x1a/0x30 [ 236.420177][ T1708] [ 236.420446][ T1708] Kernel Offset: disabled