last executing test programs: 20.217981954s ago: executing program 0 (id=1409): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x7c}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) close(0x3) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 19.250885241s ago: executing program 0 (id=1413): keyctl$KEYCTL_MOVE(0x4, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="c4030000cc2f755f9f619379fb1d029b259c5948962e78aa03588ece3fa1d1e5146ba2d3aac6021fd81f5d7654d8479bb646933d7ea09f9a1132e587c77b2a", @ANYRES16=r3, @ANYBLOB="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"], 0x3c4}}, 0x80) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002a3d7000ffdbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000014}, 0x4008004) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, 0x0, 0x1, &(0x7f0000000140)={0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002d80)=0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000002e00)={{0x1, 0x1, 0x18, r0, {0x57}}, './file0\x00'}) r7 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r7, 0xf) stat(&(0x7f0000003440)='./file0/file0\x00', &(0x7f0000003480)={0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2100) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000035c0)={0x0}, &(0x7f0000003600)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r12 = fcntl$getown(r1, 0x9) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003700)={{0x1, 0x1, 0x18, r0, {0xee00, 0xffffffffffffffff}}, './file0\x00'}) getgroups(0x1, &(0x7f0000003740)=[0xee00]) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000003780)={0x0, 0x0}) r16 = getuid() stat(&(0x7f0000003800)='./file0\x00', &(0x7f0000003840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000003940)={0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f00000012c0)={0x428, 0x24, 0x0, 0x70bd29, 0x25dfdbff, "", [@generic="34f0197e6b0a2af8a9d08f5a2ebd1690149d6e50cb2aff767e2e5182ccae1f4a87f9b416c07ed5466f3c00df0539add20344aa100b", @nested={0x127, 0x57, 0x0, 0x1, [@generic="6ef5809c3567c24c3be01bb8d6088d82a79c71e180086790f8d80f3adc659337ec0ea76cf09afe26c5d4c40ab78b73e24479dc1d5c2d1a18fae5f9566371292fdd29b8cbc421c5327760f91d16de59518ea14ee955fedadd24b5989c1ed9e1ed23f6259a7068c77e920ccd65b81e78f1a18ef56d525bc0a3d61c97e930217238ac398b2b0fbbf82661f4cd1749020114aad1f6864c1d337608ccea8c30370bef01cf2148abbb431350843a54a27c913b698fd686f7cf1cc8aaac1ab84570151a5e4f", @nested={0x4, 0x138}, @nested={0x4, 0xe}, @generic="34680868839c82f9cabd9b29e5e35e9f59f87fac115aa05aa0783aae9a7bd76067c858035af777c071e137b64f81006e104bbe8554caba67922206214913aa3b9d738ac9e4f112d0a6", @nested={0x4, 0x36}, @nested={0x4, 0x20}, @nested={0x4, 0x13e}, @nested={0x4, 0x15b}]}, @nested={0x8, 0x8c, 0x0, 0x1, [@nested={0x4, 0x14e}]}, @generic="09cfbb1ffe3e9ec0ca8211e0f70de453e2f61c792a5d14de31b4d22d13b777f686001d06bd692d5a66d516d75e49ac16cfa891a13b079f000f24ccd1139f49ebd0f9242fdfc453fdc94bb43678ebb872efe5cecd9e9994d78e2c2fcf8d", @generic="ae04a9868512e60072ba62afb3c4f34499f73f353717739166f9d50e038fd6f25a674d8f2ffec6cd088baa8acc25e1f0c276b74d03cc182246ed0870a73ea93ed599c4833825cb262e6878cffafad06544f3e8a8a389feab81118e104b41bd7acbf8a148e07405b03ef72d7fe569ea33e9a8", @nested={0xac, 0x7a, 0x0, 0x1, [@typed={0x8, 0x22, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0x9d}, @generic="5a2cc221a508eed6bfa78c03195376a390ed185d9b941cd816f4b66c44ab21b3362aac673673acdf1ed3b818ecaea7ed0da28dba4e1000482bb15cf0dc648f2fed465712319a389c91c10c0fecbe70fa8d95414ef97acbabf1c4ff836d18fe11cde7492263bc1dfdf67ec440559eec458f3b23ccfb7e8a9031d3b1099734caf9bdbe1f8b9dc91da8da26e811b14142364cc24587ed45f2417a97a3dd"]}, @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@empty}, @nested={0x8, 0x41, 0x0, 0x1, [@nested={0x4, 0x113}]}, @generic="1ebaa84804d627d4993ab1ed52977d47a38bf1e2d36024e4626ecf6dd92012624309432c6955d47b87aaaf142bb3673e61dfd5c2af7062dad5e33f61ed9049b3de40f314550f65a957c2bfe528c6510280fb45ff8de33867b661947ab2818788ddae19acde0cafa9577319b9ace9acaa9c7461bac29cfe7228186c7b26cfee0ebcb31b7f45fcfb4dfd8e502a99440ca44878228a7d03cdb676794f54626a00c6884ecece3f8d163cb08db1cc3444b42be24a60bb5ccfc94a596e6cd79f299142", @generic="b1279df234271724f4a175286754f0f590a3527c49d64cd26a54be59928b65689d02177749ee1cc9e1a386af518752664af9e3b7ce7315c4d4299d72d521e2975b021464478053f6d548b9263bb46353a087390d3e472ba1abc3"]}, 0x428}, {&(0x7f0000001700)={0x116c, 0x12, 0x20, 0x70bd26, 0x25dfdbfc, "", [@generic="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", @generic="b3540d9931bde20f648f0e22608f546cc1d956c04f694b7f1726ef43459cbd05491d0a660b4cdd6d9fd8494cf517daa65475092eadc7155adfb09993fc1854283f7eeb705320ce1a7b45b08abf9887a202e2a2b06c8d1683625227f4a29af8a9ad047235424c4e6ebd3d440b1b24388c1d5c56fd6aeffefd7cc20615d6d21e2cdb1b1e8ae3683717e12ceebe22d9dcb69c2ade7b52662000fc1fe44112f9c61d1370f32630f12ec64b2a45c60ced551a74cd37af2720bd011786e50c2dc8f59bf4280a64bcda1801e873bd9fe2bcd36823e424e23660ab660e67fa76385f1b837b08c2c30e6e693a", @generic="d01fb63360bb75835428937b773d6e65e994c80072f0a25df1be60c612b610b583c569d72dff698216963cd97b3f25b27fbeee43a3fc0ee0c6695c0c6570a55a776ec4106a9575d888b38672f6621aade2ab77926424e0580a6fe72980c9fe76f2a3b0a36c457f8ba49a3366c8d9befdf278"]}, 0x116c}, {&(0x7f0000002880)={0x4d0, 0x28, 0x300, 0x70bd2b, 0x25dfdbfd, "", [@generic="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", @nested={0x1d6, 0xc0, 0x0, 0x1, [@nested={0x4, 0x6a}, @nested={0x4, 0x2}, @generic="b18a434a23dd40b7cf6b85ad79427d9647baccb88b4e3e60b4ded6942993f105faaa87d3b84b318a3c67f57be230368ff798bb05c2b466727430faaad02333069ed47ecdf7ee3d12eee56a3e11499cdb99a88b71239b10df6cfdbb25f465582e31ae353d9e364a45d193c1149603f2665f216fe8665f4f9905c69cccbb96a0a55a356d0be945c2f75b9713f8b1398dc6b22a8722eb035da18df8d56feebc496686bba4476b39b39cf6925174d7c87a7fdef315f764dc3cb68e42c0afd8e7f15265069533ed028612bf8457a9d399c04369b0f83cf882f00b679e4cc4705db73253", @generic="eab1e6c773027a3e0b803eb21c4ac06d3ba07777e1408eedab8a33b140e2c5e5b19a8fb45a799ff04a1046ed864bbeaa12fc9b3ea9475f6c25b072edae817cf6ff979eaef197c45651b3c31fb4627c45c56e9453cea926f35e0e746783120e6c9490f759a7fcd2818ec6646b2919dce0c8fd33e9ff14bcaad906e0eb1a3bb0775d5c5b4b1b097da111882bc069", @nested={0x4, 0x87}, @typed={0x8, 0xbd, 0x0, 0x0, @pid}, @typed={0x8, 0x11d, 0x0, 0x0, @pid}, @generic="2ee78b35f8d86986459ea501e85934d213833d3d7ebf8c70a0da982fea063c46c7a33c43c9faaba668b6eda168cfe612d5a59477002dc89ef6045d8a16d4e7078aa3f98c98b51a1c"]}, @nested={0x1e7, 0xec, 0x0, 0x1, [@nested={0x4, 0xf8}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0x7fffffff}, @typed={0xc, 0xd9, 0x0, 0x0, @u64=0x2}, @nested={0x4, 0x9c}, @generic="4cffdf1635e5b6db83212b5bf1338b32a2f2aa5f24cb0da9f24458312711936cede4661101d19d5d8e32931fc6c9f795796ecace84ceb077f2efadf396e1ea0eed20d87ccb32e8092ea3a67a9dac3778b2b650dd01d33c6c563f1c9f21d989ca73ed7819e2a05c65a4794edcfa329b2a0a44c9f0209694e73228aae19bbbceba149b33bfbab0fc6043a813667ea91b82ddab30587c2776c271a7f88c89eef8faf884e0411c6f0a59923f77ddeb5593f71ae5163e63bac026b9b8c714bfaa22b327aae2eb89a33d64047f400e0f19eb8891480f5a0859a0baf8679b4ee733857a2aa2ee5700ac95bb1a0c1eb31a13902064cb35", @typed={0xc8, 0x9d, 0x0, 0x0, @binary="9f5eb89f91f0dfe38cb6ff18ccc1acc569914bbb86b1b842b37dc4be405562f8098667c951977cdf992de269ae44ce3dc7ef67d5ab7fe7b6c778f6b7d2bf043a0b37737e15d158e0e85e9954998df9db29bf2d4c197800ce4a17f4657562591b351187f0eb8f188bf4d94aa15a5e7bd43f119fa1c46fb05c53afa62b9d66af357f5932053aee8f9740cc988e26c9dc0208c8c9be84a3524a6dc2871d02ad818facea85bba464957a048303a89ed6d9c2f12d1dc2407d1c5c7c395d1f4f429dcb1340cb3d"}, @nested={0x4, 0x84}, @typed={0x4, 0x153}, @nested={0x4, 0x16}]}]}, 0x4d0}, {&(0x7f0000002dc0)={0x18, 0x2a, 0x800, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0xad, 0x0, 0x0, @pid=r5}]}, 0x18}, {&(0x7f0000002e40)={0x544, 0x2d, 0x4, 0x70bd28, 0x25dfdbfd, "", [@generic="5a2117eaaa2119d22b688eee5e31c7296fea55488c8b1ed6ec27289f4481ff2fdc526c434f57a8ed8cbe28bbe714b79cc17d39317bc86cf1e7c22377b0a2950d0dea8642c6f2675e44aeed230189099e0789307a8b2507b3ebef28a14689b68c5b78116801bbafe4f941623a63bc77a001d044a0a2ca775fa435dfa537a4e0da8201f687391981", @generic="5709bc5e521ff8039567c111962ba8a6481bdf3cfc6d2f858a7953561efba679d5f66884c2416ba5e1e36ff7c78da9d0469f34ba0908c2f5c2d461c75a5ae7d30aaea35cb804ad86757661611779d48c670ee2f75deae77f7e81eda77917a58891beb59032a170db48ebd594c3a98b4c3a196297cd9cfd4ffc626d5d79d51074adc0d68c3664ac90ee9c3a42e2dd718a202e7f4f11abb626ea6d154d38e33f7e73e425f63a42e359162a83a5b9a1f61225f10c7e919635ef60a3e0bf97a9b9d62af9232f8a4bd485e13d1585f6a1697c226c39d3e1", @typed={0xbf, 0x79, 0x0, 0x0, @binary="bf8a85d7736d76de6315cb1a0bc95326f2d50395da1ae5fa00454c9fb5d4806aa7543d2d31a822249fc8b65c21085d44aaede95fc59b248d8aed9934717007a0828e46dbf10ca87c00d8ada890ff909acc193c46efa8898145d0897fd6ed09dfb1d76685fb52e123a365256d289e486b2e6d89716a65ea51be50a926bdace95a53c59fcc4c6c56f6cdca15416a999959803966db5bbeb6c36a439a6b4a3fd7b45fff2f1f5ad2d866334d32faa8d9a6be1a1302215cdd9008906347"}, @nested={0x71, 0x35, 0x0, 0x1, [@generic="6a2f2defdafbbd26ac1d2433e0c4baa7b6db39221dbc1213c0c68679a8a20825b0a78b4306266728b6e46cec708c5e2f572209f76a809e00fd51d4dcadae0f32ef", @nested={0x4, 0x90}, @typed={0x14, 0x146, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x3e, 0x0, 0x0, @fd=r6}, @nested={0x4, 0x8e}, @typed={0x8, 0x33, 0x0, 0x0, @fd=r2}]}, @typed={0x14, 0x5a, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @nested={0x1d0, 0x69, 0x0, 0x1, [@nested={0x4, 0x56}, @generic="6fd98c2657c1f42456c6bfad14c9718f1661011d1bc2a50bbc3e2dad8af7ec6ab1e97392bd68c125e12f34a0c18d340504577d02761ec08896d33ef21f0a38d302ac63864617b90b2977f12946580fb8", @nested={0x4, 0x94}, @generic="514127733c7f53dfafbd1582dc15ff81fac01b3803ddb39d8c63745b89aace410cc9ad2a25e9cfafacb377bf4ac3fc47162f8b7ee96f5830fdd1c0ed6e3a62872847b4af34d32ff974c486e071ed554610ab0439bc50b4ad4a89e709f189f30b2d678987b77edec937d05a9614554169781b84a7d2cd761bdde65e2c6439", @generic="ffddb95ef254221501f527708a4b9a45442b93dfe6cc02feb98b109ea72cc35bde4e0423760494a8ad2b282b5fb2e9821e6ac0767a0fb59e9de631ff42bf85c271018ea6fbcd36580994b346bf727e1377c358bac9256923edbd78c252d705e7fb5da34dc3ab6fff902aee8125fc42c930f680ec07b74be5e40677806dbff45c9a7a51580610c455a378b623e2209c19bc8b664bf0df530fce18e85a42494cb4f469f5dec2f7c6a0aebf51ec913b3288a7662eb90e16a13c57a97c4118046677441e6579a696044d2104a1b129e219636169d16c46e7f0c0fa3e2f83791206ed9cef0b6024786b91b77657964fb84a2e365ef408557f"]}, @generic="248831768220ce09c8886482b52915e932c0c21a8041a46ac6cfe3b995d002bd1ff13ec85407581802e58164266dff7eb33329d0c128930f0ac44d881b3d6c5075f4f0c30c", @generic="07d11e9f5d8a413f626da457b27ccdf0f30d3a51659324fe9ab817f4d2d6407e688ab1c38c694004bcf75832e2c18ffdf381f9d58c97fc167d0de63b199fcf0c135e79400a3bcc362d828865ebb0db527522d36a605fb7e4d16d1889846e75daddad471535b0471cfa04d781b9f9c072e138168629449290"]}, 0x544}], 0x5, &(0x7f00000038c0)=[@cred={{0x1c, 0x1, 0x2, {r7, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x80, 0x4000051}, 0x20000000) syz_open_dev$amidi(&(0x7f0000000000), 0x2, 0x2c02) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="b4010000", @ANYRES16=r3, @ANYBLOB="000429bd7000fddbdf2539000000a0015a803c000080240001001b48033005123004240c4860050b4401040603016c0904156cdb6c0b60c00318140001000b05121204183c0c02600212a102000000000180140005000500040003000300060000800800020021000200304633311638051f230d133608434805451f0b3148033b370100463b1d000000050006000200000005000700020000000500070002000000140003000800060007000180010009000b000b00440001801c0001000b09244804300c030c09120660030201020448021b181d0b0500060002000000140005068235007102831d4a0001808100800006000000050007000100000020000280050007000200000005000700000000000a000100061218031b6c000094000080140005000700000800007f0000020101080000080600020005250000340002000a3b314514250a0c4e3d52310c2b2031363c15471c4e16072f211c054225151c0a510a2738203a052004354d371e55160500040002000000050006000100000005000600010000001400030081004b0000000600000009000500a60014000300040008db9e1491a2443b94a37655989c"], 0x1b4}, 0x1, 0x0, 0x0, 0x4}, 0x4) r18 = openat$binfmt_register(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) write$binfmt_register(r18, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x4000000000000c1, 0x3a, '\x00', 0x3a, ']\xff\xff\xff\x7f^{', 0x3a, './file0'}, 0x2f) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x5bd17f, 0x0) 18.615245557s ago: executing program 0 (id=1419): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4048841) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x801, 0x40000000, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x10}]}]}, 0x5c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)={0x6c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 18.02612933s ago: executing program 0 (id=1423): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e) mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x83, &(0x7f00000006c0)=ANY=[@ANYRESOCT], &(0x7f0000000640)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0x6, 0x6, 0x1, 0x40, 0x4}, 0x167, &(0x7f0000000880)={0x5, 0xf, 0x167, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0x8b, 0x5, 0x6a90, 0x0, 0xae, [0x3f0f, 0xff00f0, 0x1ac45e4c4a28dcf6, 0xff0000, 0x30]}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc0, 0x44, 0x9, 0x1}, @generic={0xa1, 0x10, 0x2, "10455ef8f05dbf8cafc3f4cb565478e2f5affe511d00f10c04194278c660798e80612269018a7f462434730267044e858a0bc14541f8dd77b005d74a5b8572f15793b758c259e20ac9a78afab55c922ceaeff63c84201232f73ae75cd0b3b00180aa911d3e5e9bcf249e23e89dc468c3dc2e39f462f52b19d1b5629b65b3cb6ab3c4efda810cbfd20ee027b98eabdaa089ade78b713f170d327b7f82d97b"}, @generic={0x96, 0x10, 0xa, "e185eb21fb189ca3439380a1d7198f7bcc0f837c91e3b4b16f4dd1df1a18c456c5065741b1438e03cc75340ae8e01f7f839d5371bd7081aea244442d9b8f0d2529a5f18d50656f4b746a7d3bd66bd906e43a1a9c10165b9f4c640f5253e0aca89cfb01ae39572c5eca5d8540477586f90267a2ef4afc7bd0ee75d0aa63a93c46a0089efd332e2747fe2f852079b145e7f1b0aa"}]}, 0x4, [{0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x403}}, {0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="0b03dd66435d694c56448c36c2cf3352d63e2deec895243ad6c1ed0cec298c4ab7295f79cbd18bb348e14074322380db00888e5e5274ae27318a4fc857fce474fe17a1a8c0f32c366341e54f5f6c0138edcd61ae2bc6576eed1457268201118b3b6fa40d2da0cc4cfdc8d6fd136add46a71e96554f1d4b70013caff16cbb3c86ba538064044e7db6cf608a562dcade22"]}, {0x2a, &(0x7f00000005c0)=@string={0x2a, 0x3, "c3b2a72de9e41ebc2f941fb40828e662624112728dd675659654419c01f06d7fa104320acb8e000a"}}, {0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="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"]}]}) chroot(&(0x7f0000000300)='./file0/../file0/file0\x00') mount(0x0, &(0x7f0000000240)='./file0/../file0/file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r2 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x8003) ioctl$LOOP_SET_DIRECT_IO(r2, 0x801070cf, 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000040)={0x9}) r4 = socket$inet_sctp(0x2, 0x1, 0x84) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r6 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCGUNIQ(r6, 0x80404508, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x181c82, 0x0) write$sequencer(r7, &(0x7f0000000180)=[@l, @e], 0x10) ioctl$IOC_PR_CLEAR(r1, 0x401070cd, &(0x7f00000001c0)={0x40f04951}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000140)={{@local, 0x3}, @local, 0x0, 0x1, 0x7, 0x6, 0xffffffffffffffff, 0x2}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x221, 0x203, 0x6e85, 0x6, 0x8, 0x69, 0x1}, 0x20) sendto$inet(r4, &(0x7f0000000100)="ab", 0xffe0, 0x2000c8d4, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) r8 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_qrtr_TIOCOUTQ(r8, 0x8919, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f00000000c0)=ANY=[]) 17.412670644s ago: executing program 0 (id=1429): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_clone(0x80030000, &(0x7f0000000040)="b24207e94591718847805b1c1f5ab0", 0xf, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)="58bff61b04d2b23eb6ffd80d41610df669aabaaf4b666b50cf24c4a92e7db3bda85d86ddf60bc40c957bac626148cf431b438d414a8f4f61ee2122df7e846e52f8e75adc56dc95257aeb7890ac46b5a939c891fe2668793bdb9c75fdf5480b0c24368f3ba03795f07f305794b979a7d3cb") sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000010c0)={0x1114, 0x12, 0x200, 0x0, 0x0, "", [@nested={0x4, 0x0, 0x0, 0x0}, @nested={0x8, 0x1d, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}, @generic="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", @nested={0xe1, 0x15a, 0x0, 0x1, [@generic="3efacd04092fe80c13c43809112a64180732447bbf8665392a19c0825ba5f588498657e22c5907aebce857cbd81032736656b8d50901239dacfd11b1eddbf2decdf1e31eed961a1f517a65bffd469064a0b78613a1d7b6b3c938cd8e8aa4771e098826c783", @typed={0x6, 0x142, 0x0, 0x0, @str='^\x00'}, @nested={0x5e, 0xfe, 0x0, 0x1, [@generic="3cae30142ea5aa02f6d1ee72b81c2ce44f17d3752fc5f1e4fca0ba02867d1b155264f168914b3a0c7b21c4fa305f75bcb2cf216b2811b4c30d6641a6acbe7455aca2643d8dfc774f18cbb918ee2d0b8bc5e5", @typed={0x7, 0x8b, 0x0, 0x0, @str='@}\x00'}]}, @typed={0x5, 0x106, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x13a, 0x0, 0x0, @fd=r1}]}, @typed={0xc, 0xa1, 0x0, 0x0, @u64=0xffffffffffffffff}, @typed={0x8, 0x144, 0x0, 0x0, @pid=r2}]}, 0x1114}], 0x1}, 0x0) 15.106560961s ago: executing program 0 (id=1437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r3, 0x1, 0xffffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x620b}, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xff2e) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000906030200000000000000000200ffff240007800c00018008000140e0000001140017006261746164765f736cb580655f0800000900020073797a3100000000050001"], 0x4c}}, 0x40c0080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="c6"}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1c, 0x1, 0x0, 0x2, {0xf}}, 0x14}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x1, 0xff, 0x1, 0x0, 0x3}, &(0x7f0000000040)=0x20) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180)=0x0) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000000400)={&(0x7f0000000280)='\x00', &(0x7f00000003c0)='volatile', 0x5}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20400, &(0x7f0000000300)={[{@userxattr}, {@volatile}, {@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@uid_lt={'uid<', 0xee01}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfshat={'smackfshat', 0x3d, '.)(),]'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}) 14.643793289s ago: executing program 32 (id=1437): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x123f41, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x64, r3, 0x1, 0xffffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x64}, 0x1, 0x620b}, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xff2e) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000000906030200000000000000000200ffff240007800c00018008000140e0000001140017006261746164765f736cb580655f0800000900020073797a3100000000050001"], 0x4c}}, 0x40c0080) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) prlimit64(0x0, 0xd, &(0x7f00000000c0)={0x200000000005, 0x8000000000200003}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000480)="c6"}) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x14, 0x1c, 0x1, 0x0, 0x2, {0xf}}, 0x14}}, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x2, 0x1, 0xff, 0x1, 0x0, 0x3}, &(0x7f0000000040)=0x20) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000180)=0x0) ioctl$OCFS2_IOC_REFLINK(r4, 0x40186f04, &(0x7f0000000400)={&(0x7f0000000280)='\x00', &(0x7f00000003c0)='volatile', 0x5}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x20400, &(0x7f0000000300)={[{@userxattr}, {@volatile}, {@index_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}}], [{@uid_lt={'uid<', 0xee01}}, {@fowner_eq={'fowner', 0x3d, r6}}, {@fsmagic={'fsmagic', 0x3d, 0x4}}, {@smackfshat={'smackfshat', 0x3d, '.)(),]'}}, {@fsmagic={'fsmagic', 0x3d, 0x2}}]}) 5.761505485s ago: executing program 3 (id=1476): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, 0x0) 5.191642362s ago: executing program 3 (id=1477): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) syz_io_uring_setup(0x24f2, &(0x7f0000000b80)={0x0, 0x0, 0x10100, 0x0, 0x33a}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r2 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r1, @in={{0x2, 0x4e23, @remote}}}, &(0x7f0000000040)=0x84) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r5 = getpid() ptrace$setopts(0x4206, r5, 0x0, 0x200004) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) read$nci(r7, &(0x7f0000000100)=""/107, 0x6b) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f00000030c0)={0x18, {"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", 0x1000}}, 0x1006) write$nci(r7, &(0x7f0000000100)=ANY=[], 0x4) write$nci(r7, &(0x7f00000001c0)=@NCI_OP_CORE_CONN_CREDITS_NTF={0x0, 0x1, 0x3, 0x6, 0x69, {0x5, [{0x4, 0x7}, {0x3, 0x4}, {0x2, 0x7}, {0x0, 0x89}, {0x3, 0xff}]}}, 0xe) sendmsg$NFT_MSG_GETSETELEM(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0000800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.842027229s ago: executing program 3 (id=1479): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES16=r2, @ANYRES8=0x0], 0x6c}}, 0x40050) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x30, r5, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x4f6b, 0x69}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004}, 0x40001) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x40100001, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x11, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r6, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000240)={0x0, 0x0, r8, r9, 0x400, 0x1, 0x3, 0x1, {0xac7c, 0x3, 0x7, 0x69, 0xf4e, 0x2, 0x2, 0x45, 0x492f, 0xe154, 0x20, 0x7, 0xb2bf, 0x3, "fe1d00003413000000000000000caa000000090000000000000004b427180010"}}) sendmsg$netlink(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="1401000020000101000000000000000002"], 0x114}], 0x1}, 0x0) 3.516718067s ago: executing program 1 (id=1481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000906010200000000000000000500000205000100070000002c0007800c00148008000140e00000020c0001800800014064010100060004404e20000005000700880000000900020073797a31"], 0x54}, 0x1, 0x800000000000000, 0x0, 0x4000}, 0x4800) socket$nl_netfilter(0x10, 0x3, 0xc) 3.446908091s ago: executing program 1 (id=1482): sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x18}, 0x1, 0x0, 0x0, 0x24000010}, 0x20040800) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0x6a0, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x89, 0x77, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x6, 0x3, 0x6, 0x9, 0x5, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x3, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x8, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x557, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0x3962, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x106, 0x10000, 0x2, 0x5, 0x1], [0xa772, 0x2, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0xb, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x102, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x800, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0x32) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresuid(0x0, r5, 0x0) add_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000380)='i', 0x1, 0xfffffffffffffffe) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @ioapic={0x1000, 0x100, 0x1000, 0x991, 0x0, [{0x5, 0x6, 0xa, '\x00', 0x7}, {0x9, 0x6, 0xc8, '\x00', 0x6}, {0x4, 0x9, 0x8, '\x00', 0x45}, {0x0, 0x2, 0x4, '\x00', 0x5}, {0x7, 0x5, 0x1, '\x00', 0x80}, {0x5, 0xa5, 0x2, '\x00', 0x36}, {0x0, 0x4, 0x1}, {0x2, 0xa0, 0x9, '\x00', 0x8f}, {0xfb, 0x8, 0x77, '\x00', 0x7f}, {0xc0, 0x4, 0xff, '\x00', 0x3f}, {0x9, 0x2e, 0x2, '\x00', 0x5}, {0x8, 0x5, 0x8, '\x00', 0x9}, {0x2, 0x3, 0x9, '\x00', 0x5}, {0x7, 0x9, 0x6, '\x00', 0xf}, {0x5, 0x1, 0x6, '\x00', 0x1}, {0x0, 0x27, 0x0, '\x00', 0x17}, {0x4, 0x7, 0x7, '\x00', 0x2f}, {0x1, 0x1, 0x0, '\x00', 0xc4}, {0x70, 0x9, 0x3f, '\x00', 0x6}, {0x1, 0x6, 0x0, '\x00', 0x9}, {0x2, 0x6, 0x80, '\x00', 0x40}, {0x80, 0xa7, 0x6}, {0xf7, 0x5, 0xb3, '\x00', 0x8}, {0x9, 0x9, 0x3, '\x00', 0x80}]}}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r7 = socket$key(0xf, 0x3, 0x2) write$binfmt_register(0xffffffffffffffff, &(0x7f00000001c0)={0x3a, 'syz1', 0x3a, 'E', 0x3a, 0x1, 0x3a, 'syz', 0x3a, '', 0x3a, './file0', 0x3a, [0x4f]}, 0x2b) sendmsg$key(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="020d0000180000000000000000000000050006000000000002"], 0xc0}}, 0x0) r8 = dup(r6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedreceive(r9, &(0x7f0000000180)=""/173, 0xad, 0x1b, &(0x7f0000000240)) r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 3.306772702s ago: executing program 3 (id=1483): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000040)=0xeeef0000) 3.172724178s ago: executing program 3 (id=1484): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4048aecb, 0x0) 3.120435899s ago: executing program 2 (id=1485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x4048aecb, &(0x7f0000000080)) (fail_nth: 1) 2.901421602s ago: executing program 3 (id=1486): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000006c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="34141a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.516064712s ago: executing program 2 (id=1487): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, 0x0, &(0x7f0000000000)=0xffffffffffffff4f) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x3214, 0x20200) syz_usb_disconnect(r1) syz_usb_connect(0x6, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=r1], 0x0) ioctl$EVIOCRMFF(r1, 0x40045506, 0x0) 2.270776856s ago: executing program 1 (id=1488): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg(r0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=[{0x10, 0x11a, 0x6}], 0x10}, 0x80) r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0), &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x0, r2}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000500)={0xdd, 0x0, r2}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x2, 0x3, 0x2, 0x7}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r1, 0xc01064ab, &(0x7f0000000280)={0x4, 0x0, r4}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={&(0x7f0000000300)=[0x0], &(0x7f0000000040), 0x1, r5, 0xcccccccc}) 2.172123885s ago: executing program 1 (id=1489): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x7}, 0x8) sendmmsg$inet6(r0, &(0x7f0000002a40)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)="89", 0x1}], 0x1}}], 0x1, 0x20000000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB='\a'], 0x8) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x2}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x401}, &(0x7f0000000300)=0x8) r4 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fsetxattr$security_evm(r4, &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x5, 0x1, 0x14, 0x7, 0xed, "da9d54966a94989f96443c76d84f52d5517615c65ef5a227d96cade33e781cf70b099df4b3db985d339aa838568745387cbbedbec05fac709cee5397b5c9126ade0371839809bafed27f1101bbf60b8aa128e5b00a4b59c174ffb051cc09dedb972b89ad3b4dfa088f7b393066aaa95ec20f46e0f9746dc88078d1c24265a4b9f029115a36ed2e5972c2ed8732b54b4ced1438b357415f535817e82c3c4a0dcb8f4b05bd6855123b6f212ed7ad9470e39820a427b2c78fa4bc6f9f9069ad4a064b489e54ee8a06a25e0c8702c45e84953726d77d66b39faa4bf35086173e8a1d7cdd122e775921e9137f5bb491"}, 0xf6, 0x2) ioctl$VIDIOC_G_CROP(r4, 0xc014563b, &(0x7f0000000040)={0xe, {0x40003, 0x0, 0x0, 0x80}}) 1.467778662s ago: executing program 2 (id=1490): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0x700}}], 0x40000cf, 0x0) 1.372553251s ago: executing program 1 (id=1491): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r0, 0x4008ae48, &(0x7f0000000040)=0xeeef0000) 1.364833862s ago: executing program 2 (id=1492): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100f5ffffff000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003"], 0x64}}, 0x0) 1.258824059s ago: executing program 1 (id=1493): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8b, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902790002010000400904000001020d00000b2406000100000000000005240009800d240f0102000000000000000006241a00000007240a7302b3ff08241c020005090008241cfeff09e70009058103fe010b02"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x7, 0x10, 0x10, 0x10, 0x10, 0x10, 0x8010, 0x10, 0x10, 0xec5}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1.055733492s ago: executing program 2 (id=1494): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xc}, 0x1c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x2, &(0x7f0000000140)=[{0x7c}, {0x6, 0x0, 0x0, 0x7ffffffb}]}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff004) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) close(0x3) mkdir(&(0x7f0000000040)='./file1\x00', 0x7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000300)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 0s ago: executing program 2 (id=1495): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0xe, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4000) waitid(0x2, 0x0, &(0x7f0000000d40), 0x20000000, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000070a010400000000000000000a000003090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) (async) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0xe, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x4000) (async) waitid(0x2, 0x0, &(0x7f0000000d40), 0x20000000, 0x0) (async) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000070a010400000000000000000a000003090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x4004) (async) kernel console output (not intermixed with test programs): T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.827296][ T5896] usb 2-1: Product: syz [ 317.827311][ T5896] usb 2-1: Manufacturer: syz [ 317.827326][ T5896] usb 2-1: SerialNumber: syz [ 317.833003][ T5896] usb 2-1: config 0 descriptor?? [ 318.455310][ T9147] batadv_slave_0: entered promiscuous mode [ 318.513685][ T9147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.519209][ T9147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.816798][ T5896] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 318.966061][ T5896] usb 3-1: Using ep0 maxpacket: 8 [ 318.968581][ T5896] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 318.968817][ T5896] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 318.968846][ T5896] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 318.968868][ T5896] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.968913][ T5896] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 318.968935][ T5896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.110992][ T9146] batadv_slave_0: left promiscuous mode [ 319.181919][ T5896] usb 3-1: GET_CAPABILITIES returned 0 [ 319.181953][ T5896] usbtmc 3-1:16.0: can't read capabilities [ 319.383851][ T9150] FAULT_INJECTION: forcing a failure. [ 319.383851][ T9150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.383877][ T9150] CPU: 1 UID: 0 PID: 9150 Comm: syz.2.1053 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 319.383892][ T9150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 319.383901][ T9150] Call Trace: [ 319.383906][ T9150] [ 319.383911][ T9150] dump_stack_lvl+0xe8/0x150 [ 319.383931][ T9150] should_fail_ex+0x46b/0x600 [ 319.383953][ T9150] _copy_from_user+0x2d/0xb0 [ 319.383967][ T9150] usbtmc_ioctl_generic_write+0xb1/0x190 [ 319.383984][ T9150] ? __pfx_usbtmc_ioctl_generic_write+0x10/0x10 [ 319.383999][ T9150] ? lockdep_hardirqs_on+0x7a/0x110 [ 319.384017][ T9150] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 319.384034][ T9150] ? mutex_lock_nested+0x152/0x1d0 [ 319.384046][ T9150] ? usbtmc_ioctl+0x7d/0x720 [ 319.384060][ T9150] usbtmc_ioctl+0x2f8/0x720 [ 319.384073][ T9150] ? __pfx_usbtmc_ioctl+0x10/0x10 [ 319.384085][ T9150] __se_sys_ioctl+0xff/0x170 [ 319.384105][ T9150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.384119][ T9150] do_syscall_64+0x15f/0xf80 [ 319.384134][ T9150] ? trace_irq_disable+0x3b/0x140 [ 319.384149][ T9150] ? clear_bhb_loop+0x40/0x90 [ 319.384165][ T9150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.384178][ T9150] RIP: 0033:0x7fc60f7dcdd9 [ 319.384190][ T9150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.384201][ T9150] RSP: 002b:00007fc60da36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.384215][ T9150] RAX: ffffffffffffffda RBX: 00007fc60fa55fa0 RCX: 00007fc60f7dcdd9 [ 319.384225][ T9150] RDX: 0000200000000040 RSI: 00000000c0145b0d RDI: 0000000000000004 [ 319.384233][ T9150] RBP: 00007fc60da36090 R08: 0000000000000000 R09: 0000000000000000 [ 319.384241][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.384249][ T9150] R13: 00007fc60fa56038 R14: 00007fc60fa55fa0 R15: 00007ffe3c53a6f8 [ 319.384267][ T9150] [ 319.385567][ T5952] usb 3-1: USB disconnect, device number 64 [ 319.698437][ T9160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.699131][ T9160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.103704][ T5896] usb 2-1: USB disconnect, device number 72 [ 320.336835][ T5952] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 320.354041][ T5843] usb 4-1: USB disconnect, device number 67 [ 320.523873][ T5952] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 320.523907][ T5952] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.523927][ T5952] usb 3-1: config 0 has no interfaces? [ 320.529466][ T5952] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 320.529498][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=95 [ 320.529518][ T5952] usb 3-1: Product: syz [ 320.529532][ T5952] usb 3-1: Manufacturer: syz [ 320.529545][ T5952] usb 3-1: SerialNumber: syz [ 320.537380][ T5952] usb 3-1: config 0 descriptor?? [ 320.546154][ T5954] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 320.706120][ T5954] usb 2-1: Using ep0 maxpacket: 32 [ 320.719267][ T5954] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 320.719297][ T5954] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 320.719321][ T5954] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.754881][ T5954] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 320.754916][ T5954] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.754931][ T5954] usb 2-1: Product: syz [ 320.754940][ T5954] usb 2-1: Manufacturer: syz [ 320.754949][ T5954] usb 2-1: SerialNumber: syz [ 320.765132][ T5954] usb 2-1: config 0 descriptor?? [ 321.313065][ T5954] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 321.490127][ T9195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.492240][ T9195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.525937][ T5843] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 321.676209][ T5843] usb 4-1: Using ep0 maxpacket: 8 [ 321.695257][ T5843] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.702605][ T5843] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 321.702644][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.702664][ T5843] usb 4-1: Product: syz [ 321.702678][ T5843] usb 4-1: Manufacturer: syz [ 321.702744][ T5843] usb 4-1: SerialNumber: syz [ 321.712906][ T5843] usb 4-1: config 0 descriptor?? [ 321.957567][ T5954] usb 2-1: USB disconnect, device number 73 [ 322.217027][ T9201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.217800][ T9201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.816828][ T5954] usb 2-1: new full-speed USB device number 74 using dummy_hcd [ 322.969389][ T5954] usb 2-1: config index 0 descriptor too short (expected 29682, got 45) [ 322.969423][ T5954] usb 2-1: config 143 has too many interfaces: 87, using maximum allowed: 32 [ 322.969445][ T5954] usb 2-1: config 143 has an invalid descriptor of length 179, skipping remainder of the config [ 322.969465][ T5954] usb 2-1: config 143 has 0 interfaces, different from the descriptor's value: 87 [ 322.969503][ T5954] usb 2-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 322.969528][ T5954] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.130954][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.132294][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.182795][ T5952] usb 3-1: USB disconnect, device number 65 [ 323.283632][ T5954] usb 2-1: string descriptor 0 read error: -71 [ 323.291182][ T5954] usb 2-1: USB disconnect, device number 74 [ 324.021361][ T5954] usb 4-1: USB disconnect, device number 68 [ 324.206602][ T5896] usb 2-1: new full-speed USB device number 75 using dummy_hcd [ 324.390040][ T5896] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 324.390076][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.390100][ T5896] usb 2-1: Product: syz [ 324.390115][ T5896] usb 2-1: Manufacturer: syz [ 324.390131][ T5896] usb 2-1: SerialNumber: syz [ 324.394618][ T5896] usb 2-1: config 0 descriptor?? [ 324.408050][ T5954] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 324.444783][ T5896] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 324.535955][ T5952] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 324.586619][ T5954] usb 4-1: Using ep0 maxpacket: 8 [ 324.608029][ T5954] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 324.608064][ T5954] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 324.608087][ T5954] usb 4-1: Product: syz [ 324.608102][ T5954] usb 4-1: Manufacturer: syz [ 324.608117][ T5954] usb 4-1: SerialNumber: syz [ 324.627717][ T5954] usb 4-1: config 0 descriptor?? [ 324.687791][ T5954] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 324.690042][ T5952] usb 3-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 324.690140][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 324.690165][ T5952] usb 3-1: Product: syz [ 324.734148][ T5952] usb 3-1: config 0 descriptor?? [ 324.819757][ T5952] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 324.872658][ T5952] usb 3-1: Detected FT232H [ 324.887601][ T9244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.889839][ T9244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.956052][ T5952] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 325.081991][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.082321][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.082638][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.084758][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.085142][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.094082][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.094600][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.095403][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.096922][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.097734][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.098233][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.101173][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.110845][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.111484][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.111992][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.144584][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.150820][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.151079][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.151301][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.151545][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.151746][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.152037][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.152233][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.152559][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.152851][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.153041][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.153259][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.153543][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.153826][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.154018][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.154217][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.154836][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.155107][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.155310][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.155568][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.162729][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.163029][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.163307][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.163519][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.163842][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.164325][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.164608][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.183598][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.183940][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.184249][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.184740][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.184959][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.185238][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.185455][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.196196][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.196450][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.196738][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.196960][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.197423][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.197713][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.197924][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.198211][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.209165][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.209488][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.209783][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.210021][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.210359][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.210647][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.211003][ T9246] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 325.262235][ T5954] gspca_zc3xx: reg_w_i err -71 [ 325.262389][ T5954] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 325.271492][ T5954] usb 4-1: USB disconnect, device number 69 [ 325.622566][ T5952] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 325.643561][ T5952] usb 3-1: USB disconnect, device number 66 [ 325.851814][ T5952] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 325.857219][ T5952] ftdi_sio 3-1:0.0: device disconnected [ 326.289279][ T9253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.289952][ T9253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.501410][ T9257] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 326.501438][ T9257] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 326.505170][ T9257] vhci_hcd vhci_hcd.0: Device attached [ 326.512174][ T9258] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 326.540231][ T13] vhci_hcd vhci_hcd.3: stop threads [ 326.540263][ T13] vhci_hcd vhci_hcd.3: release socket [ 326.540304][ T13] vhci_hcd vhci_hcd.3: disconnect device [ 326.658187][ T5896] gspca_stk1135: reg_w 0x2ff err -71 [ 326.659264][ T5896] gspca_stk1135: serial bus timeout: status=0x00 [ 326.659280][ T5896] gspca_stk1135: Sensor write failed [ 326.659309][ T5896] gspca_stk1135: serial bus timeout: status=0x00 [ 326.659319][ T5896] gspca_stk1135: Sensor write failed [ 326.659347][ T5896] gspca_stk1135: serial bus timeout: status=0x00 [ 326.659358][ T5896] gspca_stk1135: Sensor read failed [ 326.659398][ T5896] gspca_stk1135: serial bus timeout: status=0x00 [ 326.659410][ T5896] gspca_stk1135: Sensor read failed [ 326.659417][ T5896] gspca_stk1135: Detected sensor type unknown (0x0) [ 326.659451][ T5896] gspca_stk1135: serial bus timeout: status=0x00 [ 326.659462][ T5896] gspca_stk1135: Sensor read failed [ 326.659490][ T5896] gspca_stk1135: serial bus timeout: status=0x00 [ 326.659501][ T5896] gspca_stk1135: Sensor read failed [ 326.659531][ T5896] gspca_stk1135: serial bus timeout: status=0x00 [ 326.659542][ T5896] gspca_stk1135: Sensor write failed [ 326.659569][ T5896] gspca_stk1135: serial bus timeout: status=0x00 [ 326.659580][ T5896] gspca_stk1135: Sensor write failed [ 326.666261][ T5952] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 326.757290][ T5896] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 326.794764][ T5896] usb 2-1: USB disconnect, device number 75 [ 326.846173][ T5952] usb 3-1: Using ep0 maxpacket: 8 [ 326.848733][ T5952] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 326.857921][ T5952] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 326.857952][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.857973][ T5952] usb 3-1: Product: syz [ 326.857988][ T5952] usb 3-1: Manufacturer: syz [ 326.858002][ T5952] usb 3-1: SerialNumber: syz [ 326.885921][ T5952] usb 3-1: config 0 descriptor?? [ 327.002552][ T9264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1094'. [ 327.073841][ T9268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.074557][ T9268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.387944][ T5952] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 327.469225][ T9275] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1099'. [ 327.535964][ T5952] usb 4-1: Using ep0 maxpacket: 8 [ 327.541556][ T5952] usb 4-1: unable to get BOS descriptor or descriptor too short [ 327.542888][ T5952] usb 4-1: config 86 has an invalid interface number: 78 but max is 0 [ 327.542918][ T5952] usb 4-1: config 86 has no interface number 0 [ 327.542974][ T5952] usb 4-1: config 86 interface 78 altsetting 128 bulk endpoint 0x88 has invalid maxpacket 1024 [ 327.542991][ T5952] usb 4-1: config 86 interface 78 altsetting 128 bulk endpoint 0x5 has invalid maxpacket 1023 [ 327.543007][ T5952] usb 4-1: config 86 interface 78 has no altsetting 0 [ 327.545329][ T5952] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0121, bcdDevice=a4.7d [ 327.545358][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.545379][ T5952] usb 4-1: Product: syz [ 327.545393][ T5952] usb 4-1: Manufacturer: syz [ 327.545402][ T5952] usb 4-1: SerialNumber: syz [ 327.558575][ T9270] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 327.558713][ T9270] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 327.706417][ T10] usb 2-1: new full-speed USB device number 76 using dummy_hcd [ 327.834159][ T5952] kvaser_usb 4-1:86.78: error -EPROTO: Cannot get software info [ 327.834364][ T5952] kvaser_usb 4-1:86.78: probe with driver kvaser_usb failed with error -71 [ 327.852814][ T10] usb 2-1: device descriptor read/64, error -71 [ 327.866353][ T5952] usb 4-1: USB disconnect, device number 70 [ 328.086057][ T10] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 328.216096][ T10] usb 2-1: device descriptor read/64, error -71 [ 328.326861][ T10] usb usb2-port1: attempt power cycle [ 328.525088][ T9288] Invalid logical block size (2) [ 328.666084][ T10] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 328.689187][ T10] usb 2-1: device descriptor read/8, error -71 [ 328.875970][ T5952] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 328.925938][ T10] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 328.946541][ T10] usb 2-1: device descriptor read/8, error -71 [ 329.039619][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 64 [ 329.039664][ T5952] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 329.042445][ T5952] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 329.042478][ T5952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.042494][ T5952] usb 4-1: Product: syz [ 329.042504][ T5952] usb 4-1: Manufacturer: syz [ 329.042513][ T5952] usb 4-1: SerialNumber: syz [ 329.049246][ T5952] usb 4-1: config 0 descriptor?? [ 329.054906][ T9290] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 329.055042][ T9290] raw-gadget.4 gadget.3: fail, usb_ep_enable returned -22 [ 329.058381][ T10] usb usb2-port1: unable to enumerate USB device [ 329.090598][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 329.126954][ C0] port100 4-1:0.0: NFC: Urb failure (status -71) [ 329.133031][ T5952] port100 4-1:0.0: NFC: Could not get supported command types [ 329.251237][ T5896] usb 3-1: USB disconnect, device number 67 [ 329.307194][ T37] usb 4-1: USB disconnect, device number 71 [ 329.330532][ T9295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.331333][ T9295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.555538][ T9296] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 329.555640][ T9296] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 329.620540][ T9299] comedi: valid board names for 8255 driver are: [ 329.620562][ T9299] 8255 [ 329.620570][ T9299] comedi: valid board names for vmk80xx driver are: [ 329.620581][ T9299] vmk80xx [ 329.620613][ T9299] comedi: valid board names for usbduxsigma driver are: [ 329.620625][ T9299] usbduxsigma [ 329.620633][ T9299] comedi: valid board names for usbduxfast driver are: [ 329.620644][ T9299] usbduxfast [ 329.620652][ T9299] comedi: valid board names for usbdux driver are: [ 329.620663][ T9299] usbdux [ 329.620672][ T9299] comedi: valid board names for ni6501 driver are: [ 329.620683][ T9299] ni6501 [ 329.620691][ T9299] comedi: valid board names for dt9812 driver are: [ 329.620701][ T9299] dt9812 [ 329.620710][ T9299] comedi: valid board names for ni_labpc_cs driver are: [ 329.620721][ T9299] ni_labpc_cs [ 329.620730][ T9299] comedi: valid board names for ni_daq_700 driver are: [ 329.620741][ T9299] ni_daq_700 [ 329.620750][ T9299] comedi: valid board names for labpc_pci driver are: [ 329.620760][ T9299] labpc_pci [ 329.620769][ T9299] comedi: valid board names for adl_pci9118 driver are: [ 329.620780][ T9299] pci9118dg [ 329.620788][ T9299] pci9118hg [ 329.620795][ T9299] pci9118hr [ 329.620803][ T9299] comedi: valid board names for 8255_pci driver are: [ 329.620814][ T9299] 8255_pci [ 329.620822][ T9299] comedi: valid board names for s526 driver are: [ 329.620832][ T9299] s526 [ 329.620840][ T9299] comedi: valid board names for multiq3 driver are: [ 329.620851][ T9299] multiq3 [ 329.620859][ T9299] comedi: valid board names for pcmuio driver are: [ 329.620870][ T9299] pcmuio48 [ 329.620878][ T9299] pcmuio96 [ 329.620886][ T9299] comedi: valid board names for pcmmio driver are: [ 329.620897][ T9299] pcmmio [ 329.620905][ T9299] comedi: valid board names for pcmda12 driver are: [ 329.620915][ T9299] pcmda12 [ 329.620923][ T9299] comedi: valid board names for pcmad driver are: [ 329.620934][ T9299] pcmad12 [ 329.620942][ T9299] pcmad16 [ 329.620950][ T9299] comedi: valid board names for ni_labpc driver are: [ 329.620961][ T9299] lab-pc-1200 [ 329.620969][ T9299] lab-pc-1200ai [ 329.620977][ T9299] lab-pc+ [ 329.620985][ T9299] comedi: valid board names for atmio16 driver are: [ 329.620996][ T9299] atmio16 [ 329.621004][ T9299] atmio16d [ 329.621013][ T9299] comedi: valid board names for ni_at_ao driver are: [ 329.621023][ T9299] at-ao-6 [ 329.621031][ T9299] at-ao-10 [ 329.621040][ T9299] comedi: valid board names for ni_at_a2150 driver are: [ 329.621051][ T9299] ni_at_a2150 [ 329.621059][ T9299] comedi: valid board names for adq12b driver are: [ 329.621069][ T9299] adq12b [ 329.621077][ T9299] comedi: valid board names for mpc624 driver are: [ 329.621088][ T9299] mpc624 [ 329.621096][ T9299] comedi: valid board names for c6xdigio driver are: [ 329.621106][ T9299] c6xdigio [ 329.621114][ T9299] comedi: valid board names for aio_iiro_16 driver are: [ 329.621125][ T9299] aio_iiro_16 [ 329.621133][ T9299] comedi: valid board names for aio_aio12_8 driver are: [ 329.621143][ T9299] aio_aio12_8 [ 329.621150][ T9299] aio_ai12_8 [ 329.621156][ T9299] aio_ao12_4 [ 329.621163][ T9299] comedi: valid board names for fl512 driver are: [ 329.621172][ T9299] fl512 [ 329.621180][ T9299] comedi: valid board names for dmm32at driver are: [ 329.621189][ T9299] dmm32at [ 329.621196][ T9299] comedi: valid board names for dt282x driver are: [ 329.621205][ T9299] dt2821 [ 329.621213][ T9299] dt2821-f [ 329.621220][ T9299] dt2821-g [ 329.621227][ T9299] dt2823 [ 329.621234][ T9299] dt2824-pgh [ 329.621242][ T9299] dt2824-pgl [ 329.621250][ T9299] dt2825 [ 329.621257][ T9299] dt2827 [ 329.621264][ T9299] dt2828 [ 329.621272][ T9299] dt2829 [ 329.621280][ T9299] dt21-ez [ 329.621288][ T9299] dt23-ez [ 329.621295][ T9299] dt24-ez [ 329.621303][ T9299] dt24-ez-pgl [ 329.621311][ T9299] comedi: valid board names for dt2817 driver are: [ 329.621321][ T9299] dt2817 [ 329.621329][ T9299] comedi: valid board names for dt2815 driver are: [ 329.621340][ T9299] dt2815 [ 329.621347][ T9299] comedi: valid board names for dt2814 driver are: [ 329.621357][ T9299] dt2814 [ 329.621364][ T9299] comedi: valid board names for dt2811 driver are: [ 329.621374][ T9299] dt2811-pgh [ 329.621380][ T9299] dt2811-pgl [ 329.621389][ T9299] comedi: valid board names for dt2801 driver are: [ 329.621399][ T9299] dt2801 [ 329.621407][ T9299] comedi: valid board names for das6402 driver are: [ 329.621418][ T9299] das6402-12 [ 329.621426][ T9299] das6402-16 [ 329.621434][ T9299] comedi: valid board names for das1800 driver are: [ 329.621445][ T9299] das-1701st [ 329.621453][ T9299] das-1701st-da [ 329.621461][ T9299] das-1702st [ 329.621470][ T9299] das-1702st-da [ 329.621478][ T9299] das-1702hr [ 329.621486][ T9299] das-1702hr-da [ 329.621495][ T9299] das-1701ao [ 329.621503][ T9299] das-1702ao [ 329.621511][ T9299] das-1801st [ 329.621518][ T9299] das-1801st-da [ 329.621527][ T9299] das-1802st [ 329.621535][ T9299] das-1802st-da [ 329.621543][ T9299] das-1802hr [ 329.621551][ T9299] das-1802hr-da [ 329.621559][ T9299] das-1801hc [ 329.621567][ T9299] das-1802hc [ 329.621576][ T9299] das-1801ao [ 329.621583][ T9299] das-1802ao [ 329.621600][ T9299] comedi: valid board names for das800 driver are: [ 329.621610][ T9299] das-800 [ 329.621618][ T9299] cio-das800 [ 329.621626][ T9299] das-801 [ 329.621634][ T9299] cio-das801 [ 329.621642][ T9299] das-802 [ 329.621650][ T9299] cio-das802 [ 329.621658][ T9299] cio-das802/16 [ 329.621666][ T9299] comedi: valid board names for isa-das08 driver are: [ 329.621677][ T9299] isa-das08 [ 329.621685][ T9299] das08-pgm [ 329.621692][ T9299] das08-pgh [ 329.621700][ T9299] das08-pgl [ 329.621708][ T9299] das08-aoh [ 329.621716][ T9299] das08-aol [ 329.621724][ T9299] das08-aom [ 329.621732][ T9299] das08/jr-ao [ 329.621740][ T9299] das08jr-16-ao [ 329.621748][ T9299] pc104-das08 [ 329.621756][ T9299] das08jr/16 [ 329.621763][ T9299] comedi: valid board names for das16m1 driver are: [ 329.621774][ T9299] das16m1 [ 329.621782][ T9299] comedi: valid board names for dac02 driver are: [ 329.621792][ T9299] dac02 [ 329.621800][ T9299] comedi: valid board names for rti802 driver are: [ 329.621810][ T9299] rti802 [ 329.621819][ T9299] comedi: valid board names for rti800 driver are: [ 329.621829][ T9299] rti800 [ 329.621837][ T9299] rti815 [ 329.621845][ T9299] comedi: valid board names for pcm3724 driver are: [ 329.621856][ T9299] pcm3724 [ 329.621863][ T9299] comedi: valid board names for pcl818 driver are: [ 329.621874][ T9299] pcl818l [ 329.621881][ T9299] pcl818h [ 329.621889][ T9299] pcl818hd [ 329.621897][ T9299] pcl818hg [ 329.621909][ T9299] pcl818 [ 329.622000][ T9299] pcl718 [ 329.622008][ T9299] pcm3718 [ 329.622016][ T9299] comedi: valid board names for pcl816 driver are: [ 329.622025][ T9299] pcl816 [ 329.622032][ T9299] pcl814b [ 329.622040][ T9299] comedi: valid board names for pcl812 driver are: [ 329.622049][ T9299] pcl812 [ 329.622057][ T9299] pcl812pg [ 329.622064][ T9299] acl8112pg [ 329.622071][ T9299] acl8112dg [ 329.622077][ T9299] acl8112hg [ 329.622085][ T9299] a821pgl [ 329.622092][ T9299] a821pglnda [ 329.622100][ T9299] a821pgh [ 329.622107][ T9299] a822pgl [ 329.622114][ T9299] a822pgh [ 329.622121][ T9299] a823pgl [ 329.622128][ T9299] a823pgh [ 329.622134][ T9299] pcl813 [ 329.622140][ T9299] pcl813b [ 329.622147][ T9299] acl8113 [ 329.622154][ T9299] iso813 [ 329.622162][ T9299] acl8216 [ 329.622168][ T9299] a826pg [ 329.622176][ T9299] comedi: valid board names for pcl730 driver are: [ 329.622185][ T9299] pcl730 [ 329.622193][ T9299] iso730 [ 329.622200][ T9299] acl7130 [ 329.622207][ T9299] pcm3730 [ 329.622214][ T9299] pcl725 [ 329.622220][ T9299] p8r8dio [ 329.622228][ T9299] acl7225b [ 329.622234][ T9299] p16r16dio [ 329.622241][ T9299] pcl733 [ 329.622249][ T9299] pcl734 [ 329.622256][ T9299] opmm-1616-xt [ 329.622264][ T9299] pearl-mm-p [ 329.622271][ T9299] ir104-pbf [ 329.622278][ T9299] comedi: valid board names for pcl726 driver are: [ 329.622288][ T9299] pcl726 [ 329.622294][ T9299] pcl727 [ 329.622301][ T9299] pcl728 [ 329.622308][ T9299] acl6126 [ 329.622315][ T9299] acl6128 [ 329.622322][ T9299] comedi: valid board names for pcl724 driver are: [ 329.622332][ T9299] pcl724 [ 329.622338][ T9299] pcl722 [ 329.622344][ T9299] pcl731 [ 329.622351][ T9299] acl7122 [ 329.622358][ T9299] acl7124 [ 329.622366][ T9299] pet48dio [ 329.622372][ T9299] pcmio48 [ 329.622379][ T9299] onyx-mm-dio [ 329.622386][ T9299] comedi: valid board names for pcl711 driver are: [ 329.622396][ T9299] pcl711 [ 329.622403][ T9299] pcl711b [ 329.622410][ T9299] acl8112hg [ 329.622417][ T9299] acl8112dg [ 329.622425][ T9299] comedi: valid board names for amplc_pc263 driver are: [ 329.622435][ T9299] pc263 [ 329.622443][ T9299] comedi: valid board names for amplc_pc236 driver are: [ 329.622453][ T9299] pc36at [ 329.622460][ T9299] comedi: valid board names for amplc_dio200 driver are: [ 329.622470][ T9299] pc212e [ 329.622477][ T9299] pc214e [ 329.622484][ T9299] pc215e [ 329.622492][ T9299] pc218e [ 329.622499][ T9299] pc272e [ 329.622507][ T9299] comedi: valid board names for comedi_parport driver are: [ 329.622517][ T9299] comedi_parport [ 329.622525][ T9299] comedi: valid board names for comedi_test driver are: [ 329.622534][ T9299] comedi_test [ 329.622541][ T9299] comedi: valid board names for comedi_bond driver are: [ 329.622551][ T9299] comedi_bond [ 330.418915][ T9296] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 330.419399][ T9296] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 331.317765][ T5895] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 331.499727][ T5895] usb 4-1: Using ep0 maxpacket: 16 [ 331.504022][ T5895] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 331.504055][ T5895] usb 4-1: config 0 has no interface number 0 [ 331.504104][ T5895] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 331.504133][ T5895] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 331.535977][ T5895] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 331.536015][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.536038][ T5895] usb 4-1: Product: syz [ 331.536054][ T5895] usb 4-1: Manufacturer: syz [ 331.536071][ T5895] usb 4-1: SerialNumber: syz [ 331.574562][ T5895] usb 4-1: config 0 descriptor?? [ 331.585090][ T9302] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.585373][ T9302] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.648105][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 331.818058][ T9302] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 331.818883][ T9302] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 332.024081][ T9300] syz.2.1107 (9300): drop_caches: 2 [ 332.055941][ T5895] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 332.253236][ T5895] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 332.253272][ T5895] asix 4-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 332.253558][ T5895] asix 4-1:0.34: probe with driver asix failed with error -61 [ 332.476201][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 332.552639][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.555139][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.845996][ T5895] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 333.002927][ T5895] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 333.002964][ T5895] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.002986][ T5895] usb 3-1: Product: syz [ 333.003002][ T5895] usb 3-1: Manufacturer: syz [ 333.003018][ T5895] usb 3-1: SerialNumber: syz [ 333.044147][ T5895] usb 3-1: config 0 descriptor?? [ 333.063380][ T5895] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 333.105878][ T5843] usb 2-1: new low-speed USB device number 80 using dummy_hcd [ 333.223947][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.224603][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.229768][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.236020][ T5843] usb 2-1: device descriptor read/64, error -71 [ 333.236859][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.238705][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.239290][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.241022][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.241621][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.447277][ T9329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.448136][ T9329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.475992][ T5843] usb 2-1: new low-speed USB device number 81 using dummy_hcd [ 333.506464][ T5917] usb 4-1: USB disconnect, device number 72 [ 333.605964][ T5843] usb 2-1: device descriptor read/64, error -71 [ 333.716309][ T5843] usb usb2-port1: attempt power cycle [ 333.755936][ T5835] Bluetooth: hci2: command 0x0406 tx timeout [ 334.006571][ T5917] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 334.055965][ T5843] usb 2-1: new low-speed USB device number 82 using dummy_hcd [ 334.105277][ T5843] usb 2-1: device descriptor read/8, error -71 [ 334.165906][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 334.173356][ T5917] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 334.173387][ T5917] usb 4-1: config 0 has no interface number 0 [ 334.173439][ T5917] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 334.173470][ T5917] usb 4-1: config 0 interface 85 has no altsetting 0 [ 334.180109][ T5917] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 334.180144][ T5917] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.180166][ T5917] usb 4-1: Product: syz [ 334.180180][ T5917] usb 4-1: Manufacturer: syz [ 334.180195][ T5917] usb 4-1: SerialNumber: syz [ 334.191696][ T5917] usb 4-1: config 0 descriptor?? [ 334.356539][ T5843] usb 2-1: new low-speed USB device number 83 using dummy_hcd [ 334.380984][ T5843] usb 2-1: device descriptor read/8, error -71 [ 334.490904][ T5843] usb usb2-port1: unable to enumerate USB device [ 334.556118][ T5835] Bluetooth: hci3: command 0x0406 tx timeout [ 334.608351][ T9333] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 334.745476][ T5917] appletouch 4-1:0.85: Geyser mode initialized. [ 334.750281][ T5917] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input26 [ 334.935869][ T9346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.944652][ T9346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.364344][ T5895] gspca_stk1135: reg_w 0x2ff err -71 [ 335.375348][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 335.375370][ T5895] gspca_stk1135: Sensor write failed [ 335.375411][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 335.375422][ T5895] gspca_stk1135: Sensor write failed [ 335.375455][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 335.375466][ T5895] gspca_stk1135: Sensor read failed [ 335.375498][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 335.375509][ T5895] gspca_stk1135: Sensor read failed [ 335.375517][ T5895] gspca_stk1135: Detected sensor type unknown (0x0) [ 335.375554][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 335.375566][ T5895] gspca_stk1135: Sensor read failed [ 335.375598][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 335.375609][ T5895] gspca_stk1135: Sensor read failed [ 335.375639][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 335.375650][ T5895] gspca_stk1135: Sensor write failed [ 335.375679][ T5895] gspca_stk1135: serial bus timeout: status=0x00 [ 335.375690][ T5895] gspca_stk1135: Sensor write failed [ 335.481616][ T5895] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 335.509549][ T5895] usb 3-1: USB disconnect, device number 68 [ 335.728148][ T5896] usb 4-1: USB disconnect, device number 73 [ 335.843307][ T5896] appletouch 4-1:0.85: input: appletouch disconnected [ 336.205992][ T5917] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 336.358053][ T5917] usb 3-1: Using ep0 maxpacket: 32 [ 336.360306][ T5917] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 336.360338][ T5917] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 336.360363][ T5917] usb 3-1: config 0 interface 0 has no altsetting 0 [ 336.362601][ T5917] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 336.362633][ T5917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.362646][ T5917] usb 3-1: Product: syz [ 336.362655][ T5917] usb 3-1: Manufacturer: syz [ 336.362664][ T5917] usb 3-1: SerialNumber: syz [ 336.373431][ T5917] usb 3-1: config 0 descriptor?? [ 336.586851][ T5843] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 336.667270][ T9373] FAULT_INJECTION: forcing a failure. [ 336.667270][ T9373] name failslab, interval 1, probability 0, space 0, times 0 [ 336.667307][ T9373] CPU: 1 UID: 0 PID: 9373 Comm: syz.1.1131 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 336.667333][ T9373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 336.667356][ T9373] Call Trace: [ 336.667365][ T9373] [ 336.667375][ T9373] dump_stack_lvl+0xe8/0x150 [ 336.667404][ T9373] should_fail_ex+0x46b/0x600 [ 336.667427][ T9373] should_failslab+0xa8/0x100 [ 336.667453][ T9373] kmem_cache_alloc_noprof+0x87/0x680 [ 336.667485][ T9373] ? skb_clone+0x212/0x3a0 [ 336.667522][ T9373] skb_clone+0x212/0x3a0 [ 336.667557][ T9373] __netlink_deliver_tap+0x424/0x8b0 [ 336.667586][ T9373] ? netlink_deliver_tap+0x2e/0x1b0 [ 336.667609][ T9373] netlink_deliver_tap+0x19c/0x1b0 [ 336.667638][ T9373] netlink_unicast+0x754/0x920 [ 336.667678][ T9373] netlink_sendmsg+0x813/0xb40 [ 336.667717][ T9373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.667746][ T9373] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 336.667771][ T9373] ? aa_sock_msg_perm+0x122/0x200 [ 336.667791][ T9373] ? __pfx_netlink_sendmsg+0x10/0x10 [ 336.667820][ T9373] sock_sendmsg_nosec+0x112/0x150 [ 336.667849][ T9373] ____sys_sendmsg+0x55c/0x870 [ 336.667886][ T9373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 336.667920][ T9373] ? import_iovec+0x73/0xa0 [ 336.667936][ T9373] ___sys_sendmsg+0x2a5/0x360 [ 336.667954][ T9373] ? __lock_acquire+0x6b5/0x2cf0 [ 336.667984][ T9373] ? __pfx____sys_sendmsg+0x10/0x10 [ 336.668054][ T9373] ? __fget_files+0x2a/0x420 [ 336.668080][ T9373] ? __fget_files+0x3a6/0x420 [ 336.668105][ T9373] __x64_sys_sendmsg+0x1c3/0x2a0 [ 336.668125][ T9373] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 336.668162][ T9373] ? __pfx_ksys_write+0x10/0x10 [ 336.668204][ T9373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.668228][ T9373] do_syscall_64+0x15f/0xf80 [ 336.668256][ T9373] ? trace_irq_disable+0x3b/0x140 [ 336.668272][ T9373] ? clear_bhb_loop+0x40/0x90 [ 336.668288][ T9373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.668301][ T9373] RIP: 0033:0x7f9323f7cdd9 [ 336.668321][ T9373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.668350][ T9373] RSP: 002b:00007f93221ce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 336.668376][ T9373] RAX: ffffffffffffffda RBX: 00007f93241f5fa0 RCX: 00007f9323f7cdd9 [ 336.668392][ T9373] RDX: 0000000020000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 336.668406][ T9373] RBP: 00007f93221ce090 R08: 0000000000000000 R09: 0000000000000000 [ 336.668420][ T9373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.668432][ T9373] R13: 00007f93241f6038 R14: 00007f93241f5fa0 R15: 00007ffc7c4743a8 [ 336.668452][ T9373] [ 336.716047][ T5843] usb 4-1: device descriptor read/64, error -71 [ 336.850295][ T5917] gs_usb 3-1:0.0: Configuring for 161 interfaces [ 336.965405][ T5843] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 337.043547][ T9377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.044715][ T9377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.050288][ T6027] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 337.128119][ T5843] usb 4-1: device descriptor read/64, error -71 [ 337.215860][ T6027] usb 2-1: Using ep0 maxpacket: 16 [ 337.217913][ T6027] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.217998][ T6027] usb 2-1: config 0 interface 0 has no altsetting 0 [ 337.221499][ T6027] usb 2-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 337.221522][ T6027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.221576][ T6027] usb 2-1: Product: syz [ 337.221586][ T6027] usb 2-1: Manufacturer: syz [ 337.221595][ T6027] usb 2-1: SerialNumber: syz [ 337.231009][ T6027] usb 2-1: config 0 descriptor?? [ 337.237722][ T5843] usb usb4-port1: attempt power cycle [ 337.465311][ T9362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.467796][ T9362] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.472096][ T5917] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EREMOTEIO) [ 337.487425][ T5917] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 337.495100][ T9375] iso9660: Unknown parameter '^' [ 337.576100][ T5843] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 337.597244][ T5843] usb 4-1: device descriptor read/8, error -71 [ 337.654934][ T9379] tipc: Started in network mode [ 337.654956][ T9379] tipc: Node identity ac14140f, cluster identity 4711 [ 337.740749][ T5917] usb 3-1: USB disconnect, device number 69 [ 337.742279][ T9379] tipc: Enabling of bearer rejected, failed to enable media [ 337.798802][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 337.862835][ T5843] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 337.884067][ T5843] usb 4-1: device descriptor read/8, error -71 [ 337.903346][ T6027] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 337.988119][ T5843] usb usb4-port1: unable to enumerate USB device [ 338.007796][ T6027] imon:send_packet: packet tx failed (-71) [ 338.027989][ T6027] imon 2-1:0.0: panel buttons/knobs setup failed [ 338.116793][ T6027] rc_core: IR keymap rc-imon-pad not found [ 338.116812][ T6027] Registered IR keymap rc-empty [ 338.116874][ T6027] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 338.116887][ T6027] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 338.119484][ T6027] imon:send_packet: packet tx failed (-71) [ 338.136006][ T6027] imon 2-1:0.0: remote input dev register failed [ 338.136205][ T6027] imon 2-1:0.0: imon_init_intf0: rc device setup failed [ 338.298034][ T9387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.298793][ T9387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.408269][ T9389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.600559][ T6027] imon 2-1:0.0: unable to initialize intf0, err 0 [ 338.600586][ T6027] imon:imon_probe: failed to initialize context! [ 338.600601][ T6027] imon 2-1:0.0: unable to register, err -19 [ 338.614909][ T6027] usb 2-1: USB disconnect, device number 84 [ 338.724561][ T9401] comedi comedi4: comedi_config --init_data is deprecated [ 338.778584][ T9403] binder: 9402:9403 ioctl 4018620d 0 returned -22 [ 338.920464][ T6027] usb 2-1: new full-speed USB device number 85 using dummy_hcd [ 339.105381][ T6027] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 339.105419][ T6027] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.148701][ T6027] usb 2-1: config 0 descriptor?? [ 339.212962][ T6027] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 339.365995][ T6027] gp8psk: usb in 128 operation failed. [ 339.544983][ T5835] Bluetooth: hci3: unexpected event for opcode 0x0c1b [ 339.623239][ T9397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.627490][ T9397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.682004][ T6027] gp8psk: usb in 146 operation failed. [ 339.682021][ T6027] gp8psk: failed to get FW version [ 339.750162][ T5917] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 339.931553][ T5917] usb 4-1: device descriptor read/64, error -71 [ 340.052579][ T6027] gp8psk: FPGA Version = 32 [ 340.168412][ T5917] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 340.306846][ T5917] usb 4-1: device descriptor read/64, error -71 [ 340.357200][ T9442] pim6reg1: entered promiscuous mode [ 340.357232][ T9442] pim6reg1: entered allmulticast mode [ 340.418484][ T5917] usb usb4-port1: attempt power cycle [ 340.685910][ T5894] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 340.788187][ T5917] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 340.808910][ T5917] usb 4-1: device descriptor read/8, error -71 [ 340.835908][ T5894] usb 3-1: Using ep0 maxpacket: 8 [ 340.841880][ T5894] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 340.841916][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.842044][ T5894] usb 3-1: Product: syz [ 340.842064][ T5894] usb 3-1: Manufacturer: syz [ 340.842080][ T5894] usb 3-1: SerialNumber: syz [ 340.890388][ T5894] usb 3-1: config 0 descriptor?? [ 340.935479][ T9453] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1154'. [ 341.046034][ T5917] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 341.070509][ T5917] usb 4-1: device descriptor read/8, error -71 [ 341.099794][ T5894] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 341.177874][ T5917] usb usb4-port1: unable to enumerate USB device [ 341.521317][ T5894] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 341.553568][ T5894] usb 3-1: USB disconnect, device number 70 [ 342.274965][ T9480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1157'. [ 342.383227][ T6027] gp8psk: usb out operation failed. [ 342.383249][ T6027] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 342.383296][ T6027] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 342.545534][ T6027] usb 2-1: USB disconnect, device number 85 [ 342.765574][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 342.765596][ T9489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1161'. [ 342.902497][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1163'. [ 342.965911][ T5843] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 342.985975][ T5833] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 343.116080][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 343.120322][ T5843] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 343.120354][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.126677][ T5843] usb 4-1: config 0 descriptor?? [ 343.143415][ T5843] gspca_main: sunplus-2.14.0 probing 041e:400b [ 343.177351][ T9501] netlink: 'syz.0.1165': attribute type 10 has an invalid length. [ 343.178842][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.178864][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.178888][ T5833] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 343.178903][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.185398][ T5833] usb 3-1: config 0 descriptor?? [ 343.445053][ T9501] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.463279][ T9501] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 343.463702][ T9501] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 343.514583][ T9501] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 343.759560][ T5833] hid-led 0003:1D34:000A.0005: item fetching failed at offset 0/3 [ 343.767845][ T5835] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 343.770378][ T9506] netlink: 'syz.0.1167': attribute type 13 has an invalid length. [ 343.793175][ T5833] hid-led 0003:1D34:000A.0005: probe with driver hid-led failed with error -22 [ 343.876472][ T5894] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 343.897405][ T9494] netlink: 408 bytes leftover after parsing attributes in process `syz.2.1162'. [ 343.913816][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.914452][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.940372][ T37] usb 3-1: USB disconnect, device number 71 [ 344.042219][ T5894] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 344.042257][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.050320][ T5894] usb 2-1: config 0 descriptor?? [ 344.089950][ T5894] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 344.466172][ T5843] gspca_sunplus: reg_w_riv err -110 [ 344.466282][ T5843] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 344.485222][ T5894] gp8psk: usb out operation failed. [ 344.485241][ T5894] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 344.485296][ T5894] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 344.530799][ T5894] usb 2-1: USB disconnect, device number 86 [ 344.770802][ T5894] usb 4-1: USB disconnect, device number 82 [ 344.915997][ T5843] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 345.068791][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 345.072371][ T5843] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 345.072405][ T5843] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 345.072431][ T5843] usb 3-1: config 0 interface 0 has no altsetting 0 [ 345.074846][ T5843] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 345.074880][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.074903][ T5843] usb 3-1: Product: syz [ 345.074919][ T5843] usb 3-1: Manufacturer: syz [ 345.074935][ T5843] usb 3-1: SerialNumber: syz [ 345.146726][ T5843] usb 3-1: config 0 descriptor?? [ 345.540108][ T9525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.542216][ T9525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.562779][ T9529] Scaler: ================= START STATUS ================= [ 345.562799][ T9529] Scaler: ================== END STATUS ================== [ 345.563423][ T5843] gs_usb 3-1:0.0: Configuring for 161 interfaces [ 345.875916][ T5894] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 346.005906][ T5894] usb 2-1: device descriptor read/64, error -71 [ 346.168614][ T9517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.169310][ T9517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.189503][ T5843] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 346.189723][ T5843] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 346.228961][ T5843] usb 3-1: USB disconnect, device number 72 [ 346.245914][ T5894] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 346.387809][ T5894] usb 2-1: device descriptor read/64, error -71 [ 346.496304][ T5894] usb usb2-port1: attempt power cycle [ 346.806585][ T5896] usb 4-1: new low-speed USB device number 83 using dummy_hcd [ 346.811439][ T9556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.828791][ T9556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.846069][ T5894] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 346.880706][ T5894] usb 2-1: device descriptor read/8, error -71 [ 346.935911][ T5896] usb 4-1: device descriptor read/64, error -71 [ 347.135943][ T5894] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 347.166939][ T5894] usb 2-1: device descriptor read/8, error -71 [ 347.175952][ T5896] usb 4-1: new low-speed USB device number 84 using dummy_hcd [ 347.293648][ T5894] usb usb2-port1: unable to enumerate USB device [ 347.315941][ T5896] usb 4-1: device descriptor read/64, error -71 [ 347.437604][ T5896] usb usb4-port1: attempt power cycle [ 347.815982][ T5896] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 347.836725][ T5896] usb 4-1: device descriptor read/8, error -71 [ 347.846061][ T37] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 347.995876][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 348.000942][ T37] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 348.000970][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.000983][ T37] usb 3-1: Product: syz [ 348.000992][ T37] usb 3-1: Manufacturer: syz [ 348.001001][ T37] usb 3-1: SerialNumber: syz [ 348.005390][ T37] usb 3-1: config 0 descriptor?? [ 348.086280][ T5896] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 348.106679][ T5896] usb 4-1: device descriptor read/8, error -71 [ 348.226655][ T5896] usb usb4-port1: unable to enumerate USB device [ 348.250918][ T37] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 348.839882][ T9579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.844408][ T9579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.870424][ T9574] kvm: pic: level sensitive irq not supported [ 348.870509][ T9574] kvm: pic: non byte read [ 348.884375][ T37] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 348.930064][ T37] usb 3-1: USB disconnect, device number 73 [ 349.429042][ T5843] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 349.555929][ T5843] usb 2-1: device descriptor read/64, error -71 [ 349.741267][ T9598] binder: 9597:9598 unknown command 0 [ 349.741295][ T9598] binder: 9597:9598 ioctl c0306201 200000000080 returned -22 [ 349.769974][ T9600] netlink: 'syz.2.1201': attribute type 58 has an invalid length. [ 349.795892][ T5843] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 349.897796][ T9600] erspan0: left promiscuous mode [ 349.925887][ T5843] usb 2-1: device descriptor read/64, error -71 [ 350.036592][ T5843] usb usb2-port1: attempt power cycle [ 350.098318][ T9600] netlink: 'syz.2.1201': attribute type 58 has an invalid length. [ 350.279352][ T9611] FAULT_INJECTION: forcing a failure. [ 350.279352][ T9611] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.279403][ T9611] CPU: 0 UID: 0 PID: 9611 Comm: syz.2.1206 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 350.279422][ T9611] Tainted: [L]=SOFTLOCKUP [ 350.279427][ T9611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 350.279436][ T9611] Call Trace: [ 350.279441][ T9611] [ 350.279447][ T9611] dump_stack_lvl+0xe8/0x150 [ 350.279467][ T9611] should_fail_ex+0x46b/0x600 [ 350.279489][ T9611] _copy_from_user+0x2d/0xb0 [ 350.279508][ T9611] memdup_user+0x5e/0xd0 [ 350.279536][ T9611] vmci_host_unlocked_ioctl+0x12b8/0x2850 [ 350.279570][ T9611] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 350.279616][ T9611] ? kasan_quarantine_put+0xbb/0x1f0 [ 350.279651][ T9611] ? tomoyo_path_number_perm+0x219/0x630 [ 350.279683][ T9611] ? tomoyo_path_number_perm+0x219/0x630 [ 350.279715][ T9611] ? do_vfs_ioctl+0x117b/0x1540 [ 350.279750][ T9611] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 350.279814][ T9611] ? __fget_files+0x2a/0x420 [ 350.279844][ T9611] ? __fget_files+0x2a/0x420 [ 350.279870][ T9611] ? __fget_files+0x2a/0x420 [ 350.279889][ T9611] ? bpf_lsm_file_ioctl+0x9/0x20 [ 350.279905][ T9611] ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10 [ 350.279920][ T9611] __se_sys_ioctl+0xff/0x170 [ 350.279939][ T9611] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.279954][ T9611] do_syscall_64+0x15f/0xf80 [ 350.279973][ T9611] ? clear_bhb_loop+0x40/0x90 [ 350.279989][ T9611] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.280002][ T9611] RIP: 0033:0x7fc60f7dcdd9 [ 350.280016][ T9611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 350.280027][ T9611] RSP: 002b:00007fc60da36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 350.280042][ T9611] RAX: ffffffffffffffda RBX: 00007fc60fa55fa0 RCX: 00007fc60f7dcdd9 [ 350.280052][ T9611] RDX: 0000200000000080 RSI: 00000000000007ab RDI: 0000000000000003 [ 350.280060][ T9611] RBP: 00007fc60da36090 R08: 0000000000000000 R09: 0000000000000000 [ 350.280068][ T9611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.280076][ T9611] R13: 00007fc60fa56038 R14: 00007fc60fa55fa0 R15: 00007ffe3c53a6f8 [ 350.280095][ T9611] [ 350.325990][ T5833] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 350.484601][ T5843] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 350.507798][ T5843] usb 2-1: device descriptor read/8, error -71 [ 350.525890][ T5833] usb 4-1: Using ep0 maxpacket: 32 [ 350.554577][ T5833] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 350.554608][ T5833] usb 4-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 350.554627][ T5833] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.583562][ T5833] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 350.583586][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.583599][ T5833] usb 4-1: Product: syz [ 350.583609][ T5833] usb 4-1: Manufacturer: syz [ 350.583618][ T5833] usb 4-1: SerialNumber: syz [ 350.620242][ T5833] usb 4-1: config 0 descriptor?? [ 350.745908][ T5843] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 350.766561][ T5843] usb 2-1: device descriptor read/8, error -71 [ 350.875894][ T37] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 350.877341][ T5843] usb usb2-port1: unable to enumerate USB device [ 351.007536][ T9622] sg_write: data in/out 447452/210 bytes for SCSI command 0x0-- guessing data in; [ 351.007536][ T9622] program syz.0.1210 not setting count and/or reply_len properly [ 351.029211][ T5833] gs_usb 4-1:0.0: Configuring for 161 interfaces [ 351.045924][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 351.051655][ T37] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 351.051690][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.051713][ T37] usb 3-1: Product: syz [ 351.051729][ T37] usb 3-1: Manufacturer: syz [ 351.051743][ T37] usb 3-1: SerialNumber: syz [ 351.101828][ T37] usb 3-1: config 0 descriptor?? [ 351.176473][ T9624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.182806][ T9624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.306514][ T37] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 351.647309][ T5833] gs_usb 4-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 351.647667][ T5833] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71 [ 351.660298][ T5833] usb 4-1: USB disconnect, device number 87 [ 351.964763][ T5835] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 352.148425][ T37] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 352.184575][ T37] usb 3-1: USB disconnect, device number 74 [ 352.343141][ T9632] netlink: 'syz.1.1215': attribute type 4 has an invalid length. [ 352.343167][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 352.475466][ T9640] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1219'. [ 352.501097][ T9640] tipc: Enabling of bearer rejected, media not registered [ 352.511025][ T9640] nfs: Bad value for 'source' [ 352.523408][ T9642] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1219'. [ 352.634862][ T9649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.635538][ T9649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.175968][ T5895] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 353.196051][ T37] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 353.196774][ T9656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.197433][ T9656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.336021][ T37] usb 3-1: device descriptor read/64, error -71 [ 353.337507][ T5895] usb 4-1: device descriptor read/64, error -71 [ 353.645925][ T5895] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 353.646100][ T37] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 353.780476][ T9670] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1229'. [ 353.788119][ T37] usb 3-1: device descriptor read/64, error -71 [ 353.803641][ T5895] usb 4-1: device descriptor read/64, error -71 [ 353.900272][ T37] usb usb3-port1: attempt power cycle [ 353.906448][ T5895] usb usb4-port1: attempt power cycle [ 354.048837][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 354.049483][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 354.236037][ T5896] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 354.246258][ T37] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 354.246496][ T5895] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 354.269355][ T37] usb 3-1: device descriptor read/8, error -71 [ 354.269436][ T5895] usb 4-1: device descriptor read/8, error -71 [ 354.399469][ T5896] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 354.399505][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.399523][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 354.399555][ T5896] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.401566][ T5896] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 354.401596][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 354.401617][ T5896] usb 2-1: Product: syz [ 354.401627][ T5896] usb 2-1: Manufacturer: syz [ 354.425814][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 354.425837][ T5896] cdc_wdm 2-1:1.0: skipping garbage [ 354.454783][ T5896] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 354.454807][ T5896] cdc_wdm 2-1:1.0: Unknown control protocol [ 354.516487][ T37] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 354.516649][ T5895] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 354.538263][ T5895] usb 4-1: device descriptor read/8, error -71 [ 354.538343][ T37] usb 3-1: device descriptor read/8, error -71 [ 354.649436][ T5895] usb usb4-port1: unable to enumerate USB device [ 354.649592][ T37] usb usb3-port1: unable to enumerate USB device [ 354.914309][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 3 bytes [ 354.914384][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 354.986669][ T5843] usb 2-1: USB disconnect, device number 95 [ 355.609097][ T9687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.618294][ T9687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.783885][ T5835] Bluetooth: hci2: unexpected subevent 0x0e length: 25 > 15 [ 355.783942][ T5835] Bluetooth: hci2: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 356.165963][ T37] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 356.286659][ T9698] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.290612][ T9698] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.326007][ T5843] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 356.335965][ T37] usb 3-1: device descriptor read/64, error -71 [ 356.495874][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 356.503346][ T5843] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 356.503377][ T5843] usb 4-1: config 0 has no interface number 0 [ 356.503422][ T5843] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 356.521664][ T5843] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 356.521698][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.521719][ T5843] usb 4-1: Product: syz [ 356.521734][ T5843] usb 4-1: Manufacturer: syz [ 356.521749][ T5843] usb 4-1: SerialNumber: syz [ 356.542655][ T5843] usb 4-1: config 0 descriptor?? [ 356.546937][ T9693] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 356.595912][ T37] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 356.727664][ T37] usb 3-1: device descriptor read/64, error -71 [ 356.751331][ T9693] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 356.836334][ T37] usb usb3-port1: attempt power cycle [ 356.954854][ T5843] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 356.955058][ T5843] asix 4-1:0.188: probe with driver asix failed with error -61 [ 357.118246][ T9704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.118962][ T9704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.175988][ T37] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 357.197599][ T37] usb 3-1: device descriptor read/8, error -71 [ 357.456170][ T37] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 357.479222][ T37] usb 3-1: device descriptor read/8, error -71 [ 357.586478][ T37] usb usb3-port1: unable to enumerate USB device [ 357.624934][ T9709] binder: 9708:9709 ioctl c0306201 200000000080 returned -14 [ 357.634852][ T9709] binder: 9708:9709 ioctl c0306201 2000000003c0 returned -14 [ 357.634993][ T9709] binder: 9708:9709 unknown command 0 [ 357.635004][ T9709] binder: 9708:9709 ioctl c0306201 200000000000 returned -22 [ 357.715331][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.720161][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.898545][ T5843] usb 4-1: USB disconnect, device number 92 [ 358.286587][ T5896] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 358.476355][ T5896] usb 2-1: Using ep0 maxpacket: 32 [ 358.491107][ T5896] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 358.491157][ T5896] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 358.491196][ T5896] usb 2-1: config 0 interface 0 has no altsetting 0 [ 358.536326][ T5896] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 358.536362][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.536387][ T5896] usb 2-1: Product: syz [ 358.536403][ T5896] usb 2-1: Manufacturer: syz [ 358.536431][ T5896] usb 2-1: SerialNumber: syz [ 358.594916][ T5896] usb 2-1: config 0 descriptor?? [ 359.030645][ T5896] gs_usb 2-1:0.0: Configuring for 161 interfaces [ 359.067747][ T9734] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1252'. [ 359.464829][ T5896] gs_usb 2-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 359.465345][ T5896] gs_usb 2-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 359.465689][ T5896] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 359.518225][ T5896] usb 2-1: USB disconnect, device number 96 [ 359.705983][ T5843] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 359.775954][ T6027] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 359.857973][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 359.858013][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.858039][ T5843] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 359.858072][ T5843] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 359.858086][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.867443][ T5843] usb 4-1: config 0 descriptor?? [ 359.926377][ T6027] usb 3-1: Using ep0 maxpacket: 8 [ 359.989083][ T6027] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 359.989854][ T6027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.989882][ T6027] usb 3-1: Product: syz [ 359.989899][ T6027] usb 3-1: Manufacturer: syz [ 359.989916][ T6027] usb 3-1: SerialNumber: syz [ 360.160395][ T6027] usb 3-1: config 0 descriptor?? [ 360.373681][ T6027] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 360.447063][ T9770] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.449932][ T9770] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 360.573873][ T9772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1259'. [ 360.573890][ T9772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1259'. [ 360.573950][ T9772] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1259'. [ 360.985949][ T9776] FAULT_INJECTION: forcing a failure. [ 360.985949][ T9776] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.985991][ T9776] CPU: 1 UID: 0 PID: 9776 Comm: syz.1.1260 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 360.986023][ T9776] Tainted: [L]=SOFTLOCKUP [ 360.986032][ T9776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.986046][ T9776] Call Trace: [ 360.986054][ T9776] [ 360.986064][ T9776] dump_stack_lvl+0xe8/0x150 [ 360.986093][ T9776] should_fail_ex+0x46b/0x600 [ 360.986121][ T9776] _copy_from_user+0x2d/0xb0 [ 360.986135][ T9776] input_event_from_user+0xb1/0x290 [ 360.986166][ T9776] ? __pfx_input_event_from_user+0x10/0x10 [ 360.986205][ T9776] ? rt_spin_unlock+0x160/0x200 [ 360.986232][ T9776] evdev_write+0x2ca/0x4c0 [ 360.986259][ T9776] ? __lock_acquire+0x6b5/0x2cf0 [ 360.986286][ T9776] ? __pfx_evdev_write+0x10/0x10 [ 360.986306][ T9776] ? rw_verify_area+0x25b/0x4e0 [ 360.986333][ T9776] ? __pfx_evdev_write+0x10/0x10 [ 360.986364][ T9776] vfs_write+0x2a3/0xba0 [ 360.986405][ T9776] ? __pfx_vfs_write+0x10/0x10 [ 360.986436][ T9776] ? __fget_files+0x2a/0x420 [ 360.986460][ T9776] ? __fget_files+0x2a/0x420 [ 360.986474][ T9776] ? __fget_files+0x3a6/0x420 [ 360.986490][ T9776] ? __fget_files+0x2a/0x420 [ 360.986524][ T9776] ksys_write+0x156/0x270 [ 360.986559][ T9776] ? __pfx_ksys_write+0x10/0x10 [ 360.986604][ T9776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.986627][ T9776] do_syscall_64+0x15f/0xf80 [ 360.986644][ T9776] ? trace_irq_disable+0x3b/0x140 [ 360.986659][ T9776] ? clear_bhb_loop+0x40/0x90 [ 360.986694][ T9776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.986717][ T9776] RIP: 0033:0x7f9323f7cdd9 [ 360.986739][ T9776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.986758][ T9776] RSP: 002b:00007f93221ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 360.986782][ T9776] RAX: ffffffffffffffda RBX: 00007f93241f5fa0 RCX: 00007f9323f7cdd9 [ 360.986798][ T9776] RDX: 000000000000ff0f RSI: 0000200000000040 RDI: 0000000000000004 [ 360.986808][ T9776] RBP: 00007f93221ce090 R08: 0000000000000000 R09: 0000000000000000 [ 360.986817][ T9776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.986825][ T9776] R13: 00007f93241f6038 R14: 00007f93241f5fa0 R15: 00007ffc7c4743a8 [ 360.986851][ T9776] [ 361.122888][ T6027] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 361.138232][ T6027] usb 3-1: USB disconnect, device number 83 [ 361.649197][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1263'. [ 361.649226][ T9790] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1263'. [ 361.649247][ T9790] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1263'. [ 361.866977][ T5896] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 362.028829][ T5896] usb 2-1: unable to get BOS descriptor or descriptor too short [ 362.033445][ T5896] usb 2-1: New USB device found, idVendor=04fa, idProduct=4201, bcdDevice= 0.40 [ 362.033481][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.033503][ T5896] usb 2-1: Product: syz [ 362.033518][ T5896] usb 2-1: Manufacturer: syz [ 362.033533][ T5896] usb 2-1: SerialNumber: syz [ 362.262214][ T5843] usbhid 4-1:0.0: can't add hid device: -71 [ 362.262366][ T5843] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 362.276452][ T5843] usb 4-1: USB disconnect, device number 93 [ 362.330028][ T5896] usb 2-1: 1:1 : no UAC_FORMAT_TYPE desc [ 362.371903][ T5896] usb 2-1: unit 2 not found! [ 362.371929][ T5896] usb 2-1: unit 0 not found! [ 362.499681][ T5896] usb 2-1: USB disconnect, device number 97 [ 362.615069][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 363.429110][ T6027] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 363.575888][ T6027] usb 4-1: Using ep0 maxpacket: 8 [ 363.579268][ T6027] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 363.579324][ T6027] usb 4-1: config 6 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 363.612984][ T6027] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 363.613018][ T6027] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.613031][ T6027] usb 4-1: Product: syz [ 363.613055][ T6027] usb 4-1: Manufacturer: syz [ 363.613064][ T6027] usb 4-1: SerialNumber: syz [ 363.653540][ T6027] hso 4-1:6.0: Can't find BULK endpoints [ 363.849494][ T5896] usb 4-1: USB disconnect, device number 94 [ 365.069718][ T9845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.070374][ T9845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.202819][ T9820] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 366.225953][ T6027] usb 4-1: new full-speed USB device number 95 using dummy_hcd [ 366.355888][ T6027] usb 4-1: device descriptor read/64, error -71 [ 366.415942][ T9857] can0: slcan on pty24. [ 366.596433][ T9856] can0 (unregistered): slcan off pty24. [ 366.638856][ T6027] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 366.753855][ T9865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1288'. [ 366.805829][ T6027] usb 4-1: device descriptor read/64, error -71 [ 366.916462][ T6027] usb usb4-port1: attempt power cycle [ 367.256415][ T6027] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 367.276943][ T6027] usb 4-1: device descriptor read/8, error -71 [ 367.386862][ T5896] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 367.426240][ T9888] binder: 9887:9888 unknown command 1335297187 [ 367.426257][ T9888] binder: 9887:9888 ioctl c0306201 200000000080 returned -22 [ 367.480370][ T9890] binder: 9887:9890 ioctl 80489439 200000009a00 returned -22 [ 367.480572][ T9890] binder: BINDER_SET_CONTEXT_MGR already set [ 367.480583][ T9890] binder: 9887:9890 ioctl 4018620d 200000000040 returned -16 [ 367.516209][ T6027] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 367.536788][ T6027] usb 4-1: device descriptor read/8, error -71 [ 367.565893][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 367.573246][ T5896] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 367.573278][ T5896] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 367.573294][ T5896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 367.576979][ T5896] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 367.577009][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.577030][ T5896] usb 3-1: Product: syz [ 367.577044][ T5896] usb 3-1: Manufacturer: syz [ 367.577059][ T5896] usb 3-1: SerialNumber: syz [ 367.585570][ T5896] usb 3-1: config 0 descriptor?? [ 367.646451][ T6027] usb usb4-port1: unable to enumerate USB device [ 368.033649][ T5896] gs_usb 3-1:0.0: Configuring for 161 interfaces [ 368.234625][ T5896] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 368.234717][ T5896] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 368.248063][ T5896] usb 3-1: USB disconnect, device number 84 [ 368.469548][ T38] audit: type=1326 audit(1777064139.953:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9907 comm="syz.0.1304" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5ff76fcdd9 code=0x0 [ 368.526144][ T5833] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 368.675878][ T5833] usb 2-1: Using ep0 maxpacket: 32 [ 368.678015][ T5833] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 368.678045][ T5833] usb 2-1: config 0 has no interface number 0 [ 368.680431][ T5833] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 368.680452][ T5833] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.680465][ T5833] usb 2-1: Product: syz [ 368.680474][ T5833] usb 2-1: Manufacturer: syz [ 368.680483][ T5833] usb 2-1: SerialNumber: syz [ 368.685180][ T5833] usb 2-1: config 0 descriptor?? [ 368.700133][ T5833] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 368.979022][ T5833] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 369.028857][ T5833] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 369.120968][ T5896] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 369.265907][ T5896] usb 3-1: Using ep0 maxpacket: 32 [ 369.268670][ T5896] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 369.268703][ T5896] usb 3-1: config 0 has no interface number 0 [ 369.268780][ T5896] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 369.268813][ T5896] usb 3-1: config 0 interface 85 has no altsetting 0 [ 369.316638][ T5896] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 369.316675][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.316699][ T5896] usb 3-1: Product: syz [ 369.316716][ T5896] usb 3-1: Manufacturer: syz [ 369.316733][ T5896] usb 3-1: SerialNumber: syz [ 369.323277][ T5896] usb 3-1: config 0 descriptor?? [ 369.486125][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1307'. [ 369.552811][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 369.554039][ T5894] usb 2-1: USB disconnect, device number 98 [ 369.716744][ T5894] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 369.761197][ T5896] appletouch 3-1:0.85: Geyser mode initialized. [ 369.780351][ T5896] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input29 [ 369.782068][ T5894] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 369.783060][ T5894] quatech2 2-1:0.51: device disconnected [ 369.961136][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -1 [ 370.160832][ T9923] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.163972][ T9923] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.164137][ T9911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.164788][ T9911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.213338][ T5833] usb 3-1: USB disconnect, device number 85 [ 370.213385][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 370.310863][ T5833] appletouch 3-1:0.85: input: appletouch disconnected [ 370.325915][ T5894] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 370.515910][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 370.522758][ T5894] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 370.522791][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.522811][ T5894] usb 4-1: Product: syz [ 370.522826][ T5894] usb 4-1: Manufacturer: syz [ 370.522841][ T5894] usb 4-1: SerialNumber: syz [ 370.539770][ T5894] usb 4-1: config 0 descriptor?? [ 370.749773][ T5894] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 370.876053][ T5833] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 371.005938][ T5833] usb 2-1: device descriptor read/64, error -71 [ 371.119746][ T9934] netlink: 'syz.0.1314': attribute type 25 has an invalid length. [ 371.120679][ T9934] netlink: 'syz.0.1314': attribute type 1 has an invalid length. [ 371.245912][ T5833] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 371.262724][ T9934] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.359853][ T5894] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 371.375992][ T5833] usb 2-1: device descriptor read/64, error -71 [ 371.392948][ T5894] usb 4-1: USB disconnect, device number 99 [ 371.465965][ T6027] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 371.486350][ T5833] usb usb2-port1: attempt power cycle [ 371.623805][ T6027] usb 3-1: unable to get BOS descriptor or descriptor too short [ 371.624745][ T6027] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 371.624770][ T6027] usb 3-1: can't read configurations, error -71 [ 371.718505][ T9959] mac80211_hwsim hwsim5 4: renamed from wlan1 (while UP) [ 371.829971][ T5833] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 371.847394][ T5833] usb 2-1: device descriptor read/8, error -71 [ 371.912150][ T9965] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 371.912167][ T9965] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1324'. [ 371.944080][ T9965] netlink: 'syz.0.1324': attribute type 10 has an invalid length. [ 371.944105][ T9965] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1324'. [ 372.086179][ T5833] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 372.111033][ T5833] usb 2-1: device descriptor read/8, error -71 [ 372.216246][ T5833] usb usb2-port1: unable to enumerate USB device [ 372.240011][ T9982] tc_dump_action: action bad kind [ 372.349047][ T9985] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1329'. [ 372.532414][ T9993] IPv6: NLM_F_CREATE should be specified when creating new route [ 372.533038][ T9993] IPv6: NLM_F_REPLACE set, but no existing node found! [ 372.972252][T10008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1336'. [ 372.972281][T10008] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1336'. [ 373.011281][T10008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.011975][T10008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.116017][ T5833] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 373.265872][ T5833] usb 3-1: Using ep0 maxpacket: 32 [ 373.267964][ T5833] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 373.267996][ T5833] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 373.268022][ T5833] usb 3-1: config 0 interface 0 has no altsetting 0 [ 373.270351][ T5833] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 373.270381][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.270403][ T5833] usb 3-1: Product: syz [ 373.270419][ T5833] usb 3-1: Manufacturer: syz [ 373.270433][ T5833] usb 3-1: SerialNumber: syz [ 373.355610][ T5833] usb 3-1: config 0 descriptor?? [ 373.577789][T10013] netlink: 'syz.3.1338': attribute type 4 has an invalid length. [ 373.782744][ T5833] gs_usb 3-1:0.0: Configuring for 203 interfaces [ 373.985181][ T5833] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 373.985273][ T5833] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 374.019499][ T5833] usb 3-1: USB disconnect, device number 88 [ 374.110739][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.111454][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.137823][T10030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.138531][T10030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.339089][T10038] vhci_hcd vhci_hcd.0: port 0 already used [ 374.975639][T10052] 9pnet_fd: Insufficient options for proto=fd [ 374.975914][ T5833] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 375.139834][ T5833] usb 3-1: Using ep0 maxpacket: 8 [ 375.158119][ T5833] usb 3-1: unable to get BOS descriptor or descriptor too short [ 375.159456][ T5833] usb 3-1: config 47 has an invalid interface number: 47 but max is 0 [ 375.159485][ T5833] usb 3-1: config 47 has no interface number 0 [ 375.159521][ T5833] usb 3-1: config 47 interface 47 has no altsetting 0 [ 375.197236][ T5833] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0038, bcdDevice=e0.a0 [ 375.197258][ T5833] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.197271][ T5833] usb 3-1: Product: syz [ 375.197284][ T5833] usb 3-1: Manufacturer: syz [ 375.197299][ T5833] usb 3-1: SerialNumber: syz [ 375.276118][ T37] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 375.365350][T10056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.380066][T10056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.428153][ T37] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.428165][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803353fc00: rx timeout, send abort [ 375.428418][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803353fc00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 375.438782][ T37] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 375.438816][ T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 375.438839][ T37] usb 2-1: SerialNumber: syz [ 375.501268][ T37] usb 2-1: config 0 descriptor?? [ 375.546468][ T5833] dvb-usb: found a 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' in warm state. [ 375.547153][ T5833] dvb-usb: bulk message failed: -22 (2/0) [ 375.547179][ T5833] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 375.547986][ T5833] dvbdev: DVB: registering new adapter (TerraTec/qanu USB2.0 Highspeed DVB-T Receiver) [ 375.549705][ T5833] usb 3-1: media controller created [ 375.619385][T10058] netlink: 'syz.3.1355': attribute type 3 has an invalid length. [ 375.631970][ T5833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 375.708021][ T5833] dvb-usb: bulk message failed: -22 (1/0) [ 375.708110][ T5833] dvb-usb: no frontend was attached by 'TerraTec/qanu USB2.0 Highspeed DVB-T Receiver' [ 375.712411][ T5833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 375.751999][ T37] usb 2-1: USB disconnect, device number 103 [ 375.752300][ T5833] dvb-usb: schedule remote query interval to 50 msecs. [ 375.752346][ T5833] dvb-usb: bulk message failed: -22 (2/0) [ 375.752364][ T5833] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Receiver successfully initialized and connected. [ 375.797216][ T5833] usb 3-1: USB disconnect, device number 89 [ 375.830400][ T5843] dvb-usb: bulk message failed: -22 (1/0) [ 375.830453][ T5843] dvb-usb: error while querying for an remote control event. [ 375.893900][T10060] FAULT_INJECTION: forcing a failure. [ 375.893900][T10060] name failslab, interval 1, probability 0, space 0, times 0 [ 375.893942][T10060] CPU: 0 UID: 0 PID: 10060 Comm: syz.3.1356 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 375.893974][T10060] Tainted: [L]=SOFTLOCKUP [ 375.893982][T10060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.893996][T10060] Call Trace: [ 375.894005][T10060] [ 375.894015][T10060] dump_stack_lvl+0xe8/0x150 [ 375.894047][T10060] should_fail_ex+0x46b/0x600 [ 375.894085][T10060] should_failslab+0xa8/0x100 [ 375.894121][T10060] kmem_cache_alloc_noprof+0x87/0x680 [ 375.894154][T10060] ? do_getname+0x2e/0x250 [ 375.894182][T10060] do_getname+0x2e/0x250 [ 375.894204][T10060] ? user_path_at+0x1e/0x160 [ 375.894237][T10060] user_path_at+0x2a/0x160 [ 375.894269][T10060] __se_sys_mount+0x2dc/0x420 [ 375.894304][T10060] ? __pfx___se_sys_mount+0x10/0x10 [ 375.894337][T10060] ? __x64_sys_mount+0x20/0xc0 [ 375.894362][T10060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.894388][T10060] do_syscall_64+0x15f/0xf80 [ 375.894417][T10060] ? trace_irq_disable+0x3b/0x140 [ 375.894443][T10060] ? clear_bhb_loop+0x40/0x90 [ 375.894470][T10060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.894500][T10060] RIP: 0033:0x7fefd1a0cdd9 [ 375.894522][T10060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 375.894543][T10060] RSP: 002b:00007fefcfc66028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 375.894569][T10060] RAX: ffffffffffffffda RBX: 00007fefd1c85fa0 RCX: 00007fefd1a0cdd9 [ 375.894586][T10060] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 00002000000000c0 [ 375.894611][T10060] RBP: 00007fefcfc66090 R08: 0000000000000000 R09: 0000000000000000 [ 375.894626][T10060] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 375.894640][T10060] R13: 00007fefd1c86038 R14: 00007fefd1c85fa0 R15: 00007ffd23fc2b48 [ 375.894674][T10060] [ 376.258916][ T5833] dvb-usb: TerraTec/qanu USB2.0 Highspeed DVB-T Re successfully deinitialized and disconnected. [ 376.696467][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.698692][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.811422][T10083] overlayfs: missing 'lowerdir' [ 376.876112][ T6027] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 377.025877][ T6027] usb 3-1: Using ep0 maxpacket: 32 [ 377.028212][ T6027] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 377.028241][ T6027] usb 3-1: config 0 has no interface number 0 [ 377.031033][ T6027] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 377.031063][ T6027] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.031084][ T6027] usb 3-1: Product: syz [ 377.031099][ T6027] usb 3-1: Manufacturer: syz [ 377.031113][ T6027] usb 3-1: SerialNumber: syz [ 377.040265][ T6027] usb 3-1: config 0 descriptor?? [ 377.045675][ T6027] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 377.254122][T10079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.260175][T10079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.265927][ T5833] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 377.418122][ T5833] usb 4-1: config index 0 descriptor too short (expected 65230, got 72) [ 377.422026][ T5833] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 377.422049][ T5833] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.422062][ T5833] usb 4-1: Product: syz [ 377.422071][ T5833] usb 4-1: Manufacturer: syz [ 377.422080][ T5833] usb 4-1: SerialNumber: syz [ 377.471147][ T5833] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 377.575823][ T37] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 377.672537][ T10] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 377.745896][ T37] usb 2-1: Using ep0 maxpacket: 32 [ 377.755267][ T37] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 377.755303][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.755326][ T37] usb 2-1: Product: syz [ 377.755350][ T37] usb 2-1: Manufacturer: syz [ 377.755368][ T37] usb 2-1: SerialNumber: syz [ 377.814184][ T37] empeg 2-1:1.0: empeg converter detected [ 377.883639][ C0] usb 4-1: ath: unknown panic pattern! [ 377.905065][T10108] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1370'. [ 378.037716][ T37] usb 2-1: empeg converter now attached to ttyUSB0 [ 378.281201][ T37] usb 2-1: USB disconnect, device number 104 [ 378.311212][ T37] empeg ttyUSB0: empeg converter now disconnected from ttyUSB0 [ 378.312064][ T37] empeg 2-1:1.0: device disconnected [ 378.715920][ T10] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 378.716471][ T10] ath9k_htc: Failed to initialize the device [ 378.784923][ T10] usb 4-1: ath9k_htc: USB layer deinitialized [ 379.066075][ T1340] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.066262][ T1340] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.433913][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.438204][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.652918][T10127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.672230][T10127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.683445][ T6027] usb 3-1: qt2_attach - failed to power on unit: -71 [ 379.683738][ T6027] quatech2 3-1:0.51: probe with driver quatech2 failed with error -71 [ 379.714384][ T6027] usb 3-1: USB disconnect, device number 90 [ 379.729808][T10131] tmpfs: Bad value for 'mpol' [ 380.113010][T10140] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1380'. [ 380.184584][T10137] FAULT_INJECTION: forcing a failure. [ 380.184584][T10137] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.184626][T10137] CPU: 0 UID: 0 PID: 10137 Comm: syz.1.1379 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.184659][T10137] Tainted: [L]=SOFTLOCKUP [ 380.184668][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 380.184681][T10137] Call Trace: [ 380.184690][T10137] [ 380.184700][T10137] dump_stack_lvl+0xe8/0x150 [ 380.184735][T10137] should_fail_ex+0x46b/0x600 [ 380.184775][T10137] _copy_to_user+0x31/0xb0 [ 380.184801][T10137] simple_read_from_buffer+0xe1/0x170 [ 380.184835][T10137] proc_fail_nth_read+0x1be/0x230 [ 380.184867][T10137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.184900][T10137] ? rw_verify_area+0x2ac/0x4e0 [ 380.184929][T10137] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 380.184958][T10137] vfs_read+0x212/0xa80 [ 380.184996][T10137] ? __pfx_vfs_read+0x10/0x10 [ 380.185031][T10137] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 380.185062][T10137] ? lockdep_hardirqs_on+0x7a/0x110 [ 380.185091][T10137] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 380.185121][T10137] ? mutex_lock_nested+0x152/0x1d0 [ 380.185144][T10137] ? fdget_pos+0x252/0x320 [ 380.185180][T10137] ksys_read+0x156/0x270 [ 380.185213][T10137] ? __pfx_ksys_read+0x10/0x10 [ 380.185254][T10137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.185280][T10137] do_syscall_64+0x15f/0xf80 [ 380.185308][T10137] ? trace_irq_disable+0x3b/0x140 [ 380.185332][T10137] ? clear_bhb_loop+0x40/0x90 [ 380.185360][T10137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.185383][T10137] RIP: 0033:0x7f9323f3d60e [ 380.185405][T10137] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 380.185425][T10137] RSP: 002b:00007f93221cdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 380.185451][T10137] RAX: ffffffffffffffda RBX: 00007f93221ce6c0 RCX: 00007f9323f3d60e [ 380.185468][T10137] RDX: 000000000000000f RSI: 00007f93221ce0a0 RDI: 0000000000000005 [ 380.185483][T10137] RBP: 00007f93221ce090 R08: 0000000000000000 R09: 0000000000000000 [ 380.185497][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.185511][T10137] R13: 00007f93241f6038 R14: 00007f93241f5fa0 R15: 00007ffc7c4743a8 [ 380.185547][T10137] [ 380.234399][ T6027] usb 4-1: USB disconnect, device number 100 [ 380.816040][ T6027] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 380.817935][T10158] cgroup: Name too long [ 380.968717][ T6027] usb 2-1: Using ep0 maxpacket: 32 [ 380.970948][ T6027] usb 2-1: config 7 has an invalid interface number: 124 but max is 0 [ 380.970979][ T6027] usb 2-1: config 7 has no interface number 0 [ 380.971012][ T6027] usb 2-1: config 7 interface 124 has no altsetting 0 [ 380.973268][ T6027] usb 2-1: New USB device found, idVendor=04bb, idProduct=094b, bcdDevice=13.1a [ 380.973298][ T6027] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.973320][ T6027] usb 2-1: Product: syz [ 380.973333][ T6027] usb 2-1: Manufacturer: syz [ 380.973342][ T6027] usb 2-1: SerialNumber: syz [ 381.059313][T10162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1386'. [ 381.375871][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 381.458886][T10169] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1389'. [ 381.472599][ T6027] usb-storage 2-1:7.124: USB Mass Storage device detected [ 381.549259][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 381.552016][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.552094][ T10] usb 3-1: config 1 interface 1 has no altsetting 1 [ 381.555289][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 381.555323][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.555346][ T10] usb 3-1: Product: syz [ 381.555372][ T10] usb 3-1: Manufacturer: syz [ 381.555390][ T10] usb 3-1: SerialNumber: syz [ 383.631227][T10191] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1393'. [ 384.152715][ T6027] usb 2-1: USB disconnect, device number 105 [ 384.508003][T10191] gretap0: left allmulticast mode [ 384.532061][ T10] usb 3-1: selecting invalid altsetting 1 [ 384.532571][ T10] cdc_ncm 3-1:1.0: bind() failure [ 384.617749][ T10] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 384.617805][ T10] cdc_ncm 3-1:1.1: bind() failure [ 384.654613][ T10] usb 3-1: USB disconnect, device number 91 [ 384.787087][T10206] netlink: 'syz.0.1398': attribute type 4 has an invalid length. [ 384.946234][ T37] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 385.016098][ T5894] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 385.046492][ T5835] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 385.115873][ T37] usb 4-1: Using ep0 maxpacket: 16 [ 385.118847][ T37] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.118887][ T37] usb 4-1: config 0 interface 0 has no altsetting 0 [ 385.118917][ T37] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 385.118932][ T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.125491][ T37] usb 4-1: config 0 descriptor?? [ 385.179880][ T5894] usb 2-1: too many configurations: 174, using maximum allowed: 8 [ 385.199619][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 385.199665][ T5894] usb 2-1: can't read configurations, error -61 [ 385.232543][T10213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.235489][T10213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.335907][ T5894] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 385.513542][ T5894] usb 2-1: too many configurations: 174, using maximum allowed: 8 [ 385.520126][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 385.520417][ T5894] usb 2-1: can't read configurations, error -61 [ 385.521454][ T5894] usb usb2-port1: attempt power cycle [ 385.626700][ T37] nzxt-smart2 0003:1E71:2009.0006: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 385.866193][ T5894] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 385.900105][ T5894] usb 2-1: too many configurations: 174, using maximum allowed: 8 [ 385.902079][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 385.902121][ T5894] usb 2-1: can't read configurations, error -61 [ 386.086049][ T5894] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 386.108104][ T5894] usb 2-1: too many configurations: 174, using maximum allowed: 8 [ 386.110163][ T5894] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 386.110204][ T5894] usb 2-1: can't read configurations, error -61 [ 386.111711][ T5894] usb usb2-port1: unable to enumerate USB device [ 386.432760][ T10] usb 4-1: USB disconnect, device number 101 [ 386.512190][ T5894] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 386.658353][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 386.661056][ T5894] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 386.661090][ T5894] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 386.661118][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 386.702813][ T5894] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 386.702837][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.702850][ T5894] usb 3-1: Product: syz [ 386.702859][ T5894] usb 3-1: Manufacturer: syz [ 386.702868][ T5894] usb 3-1: SerialNumber: syz [ 386.716104][ T5894] usb 3-1: config 0 descriptor?? [ 387.176421][ T5894] gs_usb 3-1:0.0: Configuring for 161 interfaces [ 387.579843][ T5894] gs_usb 3-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 387.580446][ T5894] gs_usb 3-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 387.580808][ T5894] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 387.617599][ T5894] usb 3-1: USB disconnect, device number 92 [ 387.760863][T10236] overlayfs: statfs failed on './file0' [ 388.229532][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 388.229561][T10250] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 388.812298][ T10] IPVS: starting estimator thread 0... [ 388.906060][T10265] IPVS: using max 8 ests per chain, 19200 per kthread [ 389.108888][T10273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.109580][T10273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.118073][T10273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.118704][T10273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.205881][ T10] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 389.358193][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 389.367735][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.367765][ T10] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.396447][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 389.396483][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.396504][ T10] usb 2-1: Product: syz [ 389.396520][ T10] usb 2-1: Manufacturer: syz [ 389.396536][ T10] usb 2-1: SerialNumber: syz [ 389.471669][ T10] usb 2-1: 0:2 : does not exist [ 389.561890][T10284] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1426'. [ 389.753308][ T10] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 389.828430][ T10] usb 2-1: USB disconnect, device number 110 [ 389.955243][ T5830] udevd[5830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.130063][T10291] netlink: 'syz.2.1430': attribute type 39 has an invalid length. [ 390.265957][T10291] hsr_slave_0 (unregistering): left promiscuous mode [ 390.795907][ T5895] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 390.948380][ T5895] usb 4-1: config 2 has an invalid interface number: 39 but max is 0 [ 390.948417][ T5895] usb 4-1: config 2 has no interface number 0 [ 390.948459][ T5895] usb 4-1: config 2 interface 39 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 390.948489][ T5895] usb 4-1: config 2 interface 39 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 390.948516][ T5895] usb 4-1: config 2 interface 39 has no altsetting 0 [ 390.953753][ T5895] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0119, bcdDevice=e4.9a [ 390.953788][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.953804][ T5895] usb 4-1: Product: syz [ 390.953814][ T5895] usb 4-1: Manufacturer: syz [ 390.953824][ T5895] usb 4-1: SerialNumber: syz [ 391.036133][T10298] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 391.036256][T10298] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 391.155910][ T5896] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 391.316173][ T5896] usb 2-1: Using ep0 maxpacket: 8 [ 391.334744][ T5896] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 391.334829][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.334844][ T5896] usb 2-1: Product: syz [ 391.334854][ T5896] usb 2-1: Manufacturer: syz [ 391.334863][ T5896] usb 2-1: SerialNumber: syz [ 391.501878][ T5896] usb 2-1: config 0 descriptor?? [ 391.748721][ T5895] kvaser_usb 4-1:2.39: error -ENODEV: Cannot get usb endpoint(s) [ 391.754105][ T5896] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 391.770354][T10300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.771157][T10300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.813959][ T5895] usb 4-1: USB disconnect, device number 102 [ 391.961568][ T10] usb 1-1: USB disconnect, device number 23 [ 392.561783][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 392.561811][T10317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1441'. [ 393.388277][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.467992][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 393.487430][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 393.537471][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 393.554160][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.029357][ T5896] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 394.092813][ T1184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.248214][T10300] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1434'. [ 394.378198][ T5843] usb 2-1: USB disconnect, device number 111 [ 394.868296][ T1184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.043030][T10343] FAULT_INJECTION: forcing a failure. [ 395.043030][T10343] name failslab, interval 1, probability 0, space 0, times 0 [ 395.043074][T10343] CPU: 0 UID: 0 PID: 10343 Comm: syz.3.1448 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 395.043108][T10343] Tainted: [L]=SOFTLOCKUP [ 395.043116][T10343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 395.043130][T10343] Call Trace: [ 395.043140][T10343] [ 395.043150][T10343] dump_stack_lvl+0xe8/0x150 [ 395.043183][T10343] should_fail_ex+0x46b/0x600 [ 395.043223][T10343] should_failslab+0xa8/0x100 [ 395.043259][T10343] __kmalloc_noprof+0xdf/0x7b0 [ 395.043290][T10343] ? kfree+0x4d/0x6c0 [ 395.043318][T10343] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 395.043360][T10343] tomoyo_realpath_from_path+0xe3/0x5d0 [ 395.043412][T10343] ? tomoyo_domain+0xd7/0x130 [ 395.043440][T10343] ? tomoyo_path_number_perm+0x219/0x630 [ 395.043471][T10343] tomoyo_path_number_perm+0x246/0x630 [ 395.043504][T10343] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 395.043533][T10343] ? __lock_acquire+0x6b5/0x2cf0 [ 395.043568][T10343] ? do_raw_spin_lock+0x12b/0x2f0 [ 395.043629][T10343] ? __fget_files+0x2a/0x420 [ 395.043661][T10343] ? __fget_files+0x2a/0x420 [ 395.043687][T10343] ? __fget_files+0x3a6/0x420 [ 395.043713][T10343] ? __fget_files+0x2a/0x420 [ 395.043746][T10343] security_file_ioctl+0xc3/0x2a0 [ 395.043777][T10343] __se_sys_ioctl+0x47/0x170 [ 395.043812][T10343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.043838][T10343] do_syscall_64+0x15f/0xf80 [ 395.043869][T10343] ? trace_irq_disable+0x3b/0x140 [ 395.043895][T10343] ? clear_bhb_loop+0x40/0x90 [ 395.043924][T10343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.043947][T10343] RIP: 0033:0x7fefd1a0cdd9 [ 395.043971][T10343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.043992][T10343] RSP: 002b:00007fefcfc45028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 395.044017][T10343] RAX: ffffffffffffffda RBX: 00007fefd1c86090 RCX: 00007fefd1a0cdd9 [ 395.044035][T10343] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 395.044049][T10343] RBP: 00007fefcfc45090 R08: 0000000000000000 R09: 0000000000000000 [ 395.044064][T10343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.044079][T10343] R13: 00007fefd1c86128 R14: 00007fefd1c86090 R15: 00007ffd23fc2b48 [ 395.044116][T10343] [ 395.048183][T10343] ERROR: Out of memory at tomoyo_realpath_from_path. [ 395.260304][ T10] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 395.407157][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 395.410538][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 395.410571][ T10] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 395.410609][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 395.413357][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 395.413389][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.413412][ T10] usb 3-1: Product: syz [ 395.413428][ T10] usb 3-1: Manufacturer: syz [ 395.413445][ T10] usb 3-1: SerialNumber: syz [ 395.427831][ T10] usb 3-1: config 0 descriptor?? [ 395.678701][ T5836] Bluetooth: hci3: command tx timeout [ 395.791165][ T1184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.847784][T10325] lo speed is unknown, defaulting to 1000 [ 395.858688][ T10] gs_usb 3-1:0.0: Configuring for 203 interfaces [ 395.869824][ T5896] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 395.995951][ T5896] usb 2-1: device descriptor read/64, error -71 [ 396.065133][ T10] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 396.065191][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 396.117924][ T10] usb 3-1: USB disconnect, device number 93 [ 396.275949][ T5896] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 396.296526][ T1184] bond0: (slave netdevsim0): Releasing backup interface [ 396.353168][ T1184] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 396.353228][ T1184] netdevsim netdevsim0 netdevsim0 (unregistering): left allmulticast mode [ 396.371951][ T1184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.446047][ T5896] usb 2-1: device descriptor read/64, error -71 [ 396.566484][ T5896] usb usb2-port1: attempt power cycle [ 396.863192][T10363] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1456'. [ 396.967143][ T5896] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 396.967303][ T5895] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 396.997104][ T5896] usb 2-1: device descriptor read/8, error -71 [ 397.015995][T10363] unsupported nlmsg_type 40 [ 397.077222][T10364] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1456'. [ 397.085633][T10325] chnl_net:caif_netlink_parms(): no params data found [ 397.161602][ T5895] usb 4-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55 [ 397.161636][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.161656][ T5895] usb 4-1: Product: syz [ 397.161671][ T5895] usb 4-1: Manufacturer: syz [ 397.161684][ T5895] usb 4-1: SerialNumber: syz [ 397.236594][ T5895] usb 4-1: config 0 descriptor?? [ 397.265866][ T5896] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 397.289280][ T5895] gspca_main: sonixb-2.14.0 probing 0c45:6005 [ 397.310366][ T5896] usb 2-1: device descriptor read/8, error -71 [ 397.440342][ T5896] usb usb2-port1: unable to enumerate USB device [ 397.664259][ T5895] input: sonixb as /devices/platform/dummy_hcd.3/usb4/4-1/input/input32 [ 397.756023][ T5836] Bluetooth: hci3: command tx timeout [ 397.911576][T10358] netlink: 'syz.3.1455': attribute type 15 has an invalid length. [ 397.911624][T10358] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1455'. [ 398.103194][ T5896] usb 4-1: USB disconnect, device number 103 [ 398.195943][ T10] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 398.345933][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 398.347888][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.347914][ T10] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 398.347930][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 398.350152][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 398.350182][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.350195][ T10] usb 3-1: Product: syz [ 398.350205][ T10] usb 3-1: Manufacturer: syz [ 398.350214][ T10] usb 3-1: SerialNumber: syz [ 398.354332][ T10] usb 3-1: config 0 descriptor?? [ 398.401500][ T1184] bridge_slave_1: left allmulticast mode [ 398.401752][ T1184] bridge_slave_1: left promiscuous mode [ 398.429498][ T1184] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.578236][ T1184] bridge_slave_0: left allmulticast mode [ 398.578280][ T1184] bridge_slave_0: left promiscuous mode [ 398.579074][ T1184] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.764963][ T10] gs_usb 3-1:0.0: Configuring for 203 interfaces [ 398.969522][ T10] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 398.969624][ T10] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 399.021482][ T10] usb 3-1: USB disconnect, device number 94 [ 399.847185][ T5836] Bluetooth: hci3: command tx timeout [ 400.212064][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880259ec000: rx timeout, send abort [ 400.259417][ T1184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 400.307508][ T1184] bond_slave_0: left promiscuous mode [ 400.307666][ T1184] bond_slave_0: left allmulticast mode [ 400.328858][ T1184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 400.366433][ T1184] bond_slave_1: left promiscuous mode [ 400.366659][ T1184] bond_slave_1: left allmulticast mode [ 400.385092][ T1184] bond0 (unregistering): Released all slaves [ 400.499118][T10325] bridge0: port 1(bridge_slave_0) entered blocking state [ 400.499407][T10325] bridge0: port 1(bridge_slave_0) entered disabled state [ 400.499789][T10325] bridge_slave_0: entered allmulticast mode [ 400.530861][T10325] bridge_slave_0: entered promiscuous mode [ 400.561411][T10325] bridge0: port 2(bridge_slave_1) entered blocking state [ 400.561792][T10325] bridge0: port 2(bridge_slave_1) entered disabled state [ 400.562139][T10325] bridge_slave_1: entered allmulticast mode [ 400.588912][T10325] bridge_slave_1: entered promiscuous mode [ 400.663903][T10410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 400.712166][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880259ec000: abort rx timeout. Force session deactivation [ 400.856566][T10410] : renamed from veth0_vlan (while UP) [ 401.304720][ T1184] tipc: Left network mode [ 401.334549][T10325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.474711][T10325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.698340][ T5832] hid-generic 0006:0008:0004.0007: unknown main item tag 0x0 [ 401.698399][ T5832] hid-generic 0006:0008:0004.0007: unknown main item tag 0x0 [ 401.698425][ T5832] hid-generic 0006:0008:0004.0007: unknown main item tag 0x0 [ 401.698451][ T5832] hid-generic 0006:0008:0004.0007: unknown main item tag 0x0 [ 401.698477][ T5832] hid-generic 0006:0008:0004.0007: unknown main item tag 0x0 [ 401.698502][ T5832] hid-generic 0006:0008:0004.0007: unknown main item tag 0x0 [ 401.698527][ T5832] hid-generic 0006:0008:0004.0007: unknown main item tag 0x0 [ 401.698553][ T5832] hid-generic 0006:0008:0004.0007: unknown main item tag 0x0 [ 401.698577][ T5832] hid-generic 0006:0008:0004.0007: unknown main item tag 0x0 [ 401.698602][ T5832] hid-generic 0006:0008:0004.0007: unknown main item tag 0x0 [ 401.915967][ T5836] Bluetooth: hci3: command tx timeout [ 402.189097][T10325] team0: Port device team_slave_0 added [ 402.265609][T10325] team0: Port device team_slave_1 added [ 402.430245][ T5832] hid-generic 0006:0008:0004.0007: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz1 [ 402.557972][T10428] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1478'. [ 402.801858][T10325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.801876][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.801903][T10325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.805641][T10325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 402.805659][T10325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.818685][T10325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 404.265126][T10465] FAULT_INJECTION: forcing a failure. [ 404.265126][T10465] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.265169][T10465] CPU: 1 UID: 0 PID: 10465 Comm: syz.2.1485 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 404.265202][T10465] Tainted: [L]=SOFTLOCKUP [ 404.265210][T10465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 404.265222][T10465] Call Trace: [ 404.265231][T10465] [ 404.265241][T10465] dump_stack_lvl+0xe8/0x150 [ 404.265273][T10465] should_fail_ex+0x46b/0x600 [ 404.265312][T10465] _copy_to_user+0x31/0xb0 [ 404.265339][T10465] simple_read_from_buffer+0xe1/0x170 [ 404.265370][T10465] proc_fail_nth_read+0x1be/0x230 [ 404.265404][T10465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.265435][T10465] ? rw_verify_area+0x2ac/0x4e0 [ 404.265468][T10465] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.265498][T10465] vfs_read+0x212/0xa80 [ 404.265540][T10465] ? __pfx_vfs_read+0x10/0x10 [ 404.265575][T10465] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 404.265607][T10465] ? lockdep_hardirqs_on+0x7a/0x110 [ 404.265638][T10465] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 404.265682][T10465] ? mutex_lock_nested+0x152/0x1d0 [ 404.265704][T10465] ? fdget_pos+0x252/0x320 [ 404.265739][T10465] ksys_read+0x156/0x270 [ 404.265772][T10465] ? __pfx_ksys_read+0x10/0x10 [ 404.265810][T10465] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.265834][T10465] do_syscall_64+0x15f/0xf80 [ 404.265862][T10465] ? trace_irq_disable+0x3b/0x140 [ 404.265886][T10465] ? clear_bhb_loop+0x40/0x90 [ 404.265913][T10465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.265936][T10465] RIP: 0033:0x7fc60f79d60e [ 404.265957][T10465] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 404.265978][T10465] RSP: 002b:00007fc60da14fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.266001][T10465] RAX: ffffffffffffffda RBX: 00007fc60da156c0 RCX: 00007fc60f79d60e [ 404.266015][T10465] RDX: 000000000000000f RSI: 00007fc60da150a0 RDI: 0000000000000009 [ 404.266027][T10465] RBP: 00007fc60da15090 R08: 0000000000000000 R09: 0000000000000000 [ 404.266039][T10465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.266050][T10465] R13: 00007fc60fa56128 R14: 00007fc60fa56090 R15: 00007ffe3c53a6f8 [ 404.266078][T10465] [ 404.579282][ T6027] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 404.729246][ T6027] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 404.729280][ T6027] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 404.729297][ T6027] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 404.775213][ T6027] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 404.775251][ T6027] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.775273][ T6027] usb 4-1: Product: syz [ 404.775288][ T6027] usb 4-1: Manufacturer: syz [ 404.775303][ T6027] usb 4-1: SerialNumber: syz [ 404.788382][ T6027] usb 4-1: config 0 descriptor?? [ 404.789232][T10466] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 404.789366][T10466] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 404.795400][ T6027] usb 4-1: ucan: probing device on interface #0 [ 405.006673][ T6027] usb 4-1: ucan: could not read protocol version, ret=0 [ 405.006726][ T6027] usb 4-1: ucan: probe failed; try to update the device firmware [ 405.482278][ T5493] 8021q: adding VLAN 0 to HW filter on device eth1 [ 405.557067][T10325] hsr_slave_0: entered promiscuous mode [ 405.569264][T10325] hsr_slave_1: entered promiscuous mode [ 405.572768][T10325] debugfs: 'hsr0' already exists in 'hsr' [ 405.572796][T10325] Cannot create hsr debugfs directory [ 406.208655][ T5896] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 406.411867][ T5896] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.411900][ T5896] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 406.440824][ T5896] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 406.440860][ T5896] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.440884][ T5896] usb 2-1: Product: syz [ 406.440900][ T5896] usb 2-1: Manufacturer: syz [ 406.440916][ T5896] usb 2-1: SerialNumber: syz [ 406.507535][ T5896] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 406.507600][ T5896] cdc_ncm 2-1:1.0: bind() failure [ 407.201823][ T39] INFO: task kworker/1:0:32 blocked for more than 143 seconds. [ 407.201856][ T39] Tainted: G L syzkaller #0 [ 407.201870][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 407.201882][ T39] task:kworker/1:0 state:D stack:22080 pid:32 tgid:32 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 407.201944][ T39] Workqueue: usb_hub_wq hub_event [ 407.201970][ T39] Call Trace: [ 407.201978][ T39] [ 407.201992][ T39] __schedule+0x169e/0x54f0 [ 407.202038][ T39] ? __lock_acquire+0x6b5/0x2cf0 [ 407.202068][ T39] ? __pfx_sched_clock_cpu+0x10/0x10 [ 407.202101][ T39] ? arch_scale_cpu_capacity+0x18/0xb0 [ 407.202142][ T39] ? __pfx___schedule+0x10/0x10 [ 407.202165][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 407.202205][ T39] rt_mutex_schedule+0x76/0xf0 [ 407.202243][ T39] rt_mutex_slowlock_block+0x508/0x680 [ 407.202283][ T39] ? rt_mutex_slowlock_block+0x2e9/0x680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 407.202310][ T39] rt_mutex_slowlock+0x2dc/0x780 [ 407.202346][ T39] ? rt_mutex_slowlock+0x1fd/0x780 [ 407.202371][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 407.202409][ T39] ? hub_event+0x21e0/0x4f60 [ 407.202435][ T39] ? hub_event+0x21e0/0x4f60 [ 407.202461][ T39] ? hub_event+0x21e0/0x4f60 [ 407.202479][ T39] mutex_lock_nested+0x168/0x1d0 [ 407.202503][ T39] ? hub_event+0x21b0/0x4f60 [ 407.202529][ T39] hub_even[ 407.202529][ T39] hub_event+0x21e0/0x4f60 [ 407.202600][ T39] ? __pfx_hub_event+0x10/0x10 [ 407.202622][ T39] ? process_one_work+0x8b7/0x1710 [ 407.202659][ T39] ? process_one_work+0x8b7/0x1710 [ 407.202681][ T39] process_one_work+0x9a3/0x1710 [ 407.202727][ T39] ? __pfx_process_one_work+0x10/0x10 [ 407.202748][ T39] ? do_raw_spin_lock+0x12b/0x2f0 [ 407.202792][ T39] worker_thread+0xba8/0x11e0 [ 407.202844][ T39] kthread+0x388/0x470 [ 407.202874][ T39] ? __pfx_worker_thread+0x10/0x10 [ 407.202897][ T39] ? __pfx_kthread+0x10/0x10 [ 407.202928][ T39] ret_from_fork+0x514/0xb70 [ 407.202958][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 407.202984][ T39] ? __switch_to+0xc79/0x1410 [ 407.203022][ T39] ? __pfx_kthread+0x10/0x10 [ 407.203054][ T39] ret_from_fork_asm+0x1a/0x30 [ 407.203102][ T39] [ 407.203282][ T39] [ 407.203282][ T39] Showing all locks held in the system: [ 407.203296][ T39] 5 locks held by kworker/1:0/32: [ 407.203310][ T39] #0: ffff88801b379538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 407.203390][ T39] #1: ffffc90000a6fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 407.203445][ T39] #2: ffff88802bfc4210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 407.203497][ T39] #3: ffff88802bf84658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 407.203550][ T39] #4: ffff88802b0ca058 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 407.203601][ T39] 1 lock held by khungtaskd/39: [ 407.203614][ T39] #0: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 407.203681][ T39] 5 locks held by kworker/0:2/822: [ 407.203694][ T39] #0: ffff88801b379538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 407.203748][ T39] #1: ffffc90005457c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 407.203801][ T39] #2: ffff88802bf20210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 407.203851][ T39] #3: ffff88802bf61658 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 407.203901][ T39] #4: ffff88802b0ca058 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 407.203955][ T39] 5 locks held by kworker/u8:9/1043: [ 407.203969][ T39] #0: ffff888033eef938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 407.204022][ T39] #1: ffffc900056b7c40 ((work_completion)(&(&bat_priv->dat.work)->work)){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 407.204078][ T39] #2: ffffffff8e25f340 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 407.204132][ T39] #3: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 407.204186][ T39] #4: ffff88805839f558 (&hash->list_locks[i]){+...}-{3:3}, at: __batadv_dat_purge+0x131/0x400 [ 407.204246][ T39] 4 locks held by kworker/u8:11/1184: [ 407.204260][ T39] #0: ffff88801be86138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x890/0x1710 [ 407.204310][ T39] #1: ffffc90005ecfc40 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8b7/0x1710 [ 407.204372][ T39] #2: ffffffff8f795000 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 407.204431][ T39] #3: ffffffff8e3ce3b0 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x580 [ 407.204499][ T39] 1 lock held by dhcpcd/5493: [ 407.204512][ T39] #0: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 407.204572][ T39] 2 locks held by getty/5583: [ 407.204584][ T39] #0: ffff8880380f50a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 407.204635][ T39] #1: ffffc90003cae2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 407.204707][ T39] 4 locks held by syz-executor/10325: [ 407.204720][ T39] #0: ffffffff8eef59c8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 407.204788][ T39] #1: ffffffff8f7a44b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x883/0x1bb0 [ 407.204848][ T39] #2: ffff8880b8746510 ((&pcs->lock)){+.+.}-{3:3}, at: kmem_cache_alloc_node_noprof+0x304/0x6e0 [ 407.204912][ T39] #3: ffffffff8e3c81c0 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 407.204968][ T39] [ 407.204975][ T39] ============================================= [ 407.204975][ T39] [ 407.204985][ T39] NMI backtrace for cpu 1 [ 407.205005][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 407.205034][ T39] Tainted: [L]=SOFTLOCKUP [ 407.205043][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.205056][ T39] Call Trace: [ 407.205066][ T39] [ 407.205076][ T39] dump_stack_lvl+0xe8/0x150 [ 407.205102][ T39] nmi_cpu_backtrace+0x274/0x2d0 [ 407.205123][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 407.205149][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 407.205177][ T39] sys_info+0x135/0x170 [ 407.205209][ T39] watchdog+0xfd3/0x1030 [ 407.205243][ T39] ? watchdog+0x1c9/0x1030 [ 407.205274][ T39] kthread+0x388/0x470 [ 407.205304][ T39] ? __pfx_watchdog+0x10/0x10 [ 407.205327][ T39] ? __pfx_kthread+0x10/0x10 [ 407.205367][ T39] ret_from_fork+0x514/0xb70 [ 407.205395][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 407.205420][ T39] ? __switch_to+0xc79/0x1410 [ 407.205455][ T39] ? __pfx_kthread+0x10/0x10 [ 407.205484][ T39] ret_from_fork_asm+0x1a/0x30 [ 407.205528][ T39] [ 407.205538][ T39] Sending NMI from CPU 1 to CPUs 0: [ 407.205566][ C0] NMI backtrace for cpu 0 [ 407.205584][ C0] CPU: 0 UID: 0 PID: 1043 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 407.205615][ C0] Tainted: [L]=SOFTLOCKUP [ 407.205622][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.205634][ C0] Workqueue: bat_events batadv_dat_purge [ 407.205654][ C0] RIP: 0010:rcu_is_watching+0x3a/0xb0 [ 407.205686][ C0] Code: e8 0b 10 99 09 89 c3 83 f8 08 73 65 49 bf 00 00 00 00 00 fc ff df 4c 8d 34 dd 90 b7 c4 8d 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 <74> 08 4c 89 f7 e8 7c 7d 84 00 48 c7 c3 98 8e bd 92 49 03 1e 48 89 [ 407.205704][ C0] RSP: 0018:ffffc900056b7a48 EFLAGS: 00000046 [ 407.205720][ C0] RAX: 1ffffffff1b896f2 RBX: 0000000000000000 RCX: 0000000080000001 [ 407.205733][ C0] RDX: 0000000000000000 RSI: ffffffff8bca7040 RDI: ffffffff8bca7000 [ 407.205745][ C0] RBP: 0000000000000400 R08: ffffffff8fcf67f7 R09: 1ffffffff1f9ecfe [ 407.205757][ C0] R10: dffffc0000000000 R11: fffffbfff1f9ecff R12: 0000000000000282 [ 407.205770][ C0] R13: dffffc0000000000 R14: ffffffff8dc4b790 R15: dffffc0000000000 [ 407.205783][ C0] FS: 0000000000000000(0000) GS:ffff888125a5b000(0000) knlGS:0000000000000000 [ 407.205798][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.205810][ C0] CR2: 00007f337f3e1e9c CR3: 00000000378b6000 CR4: 00000000003526f0 [ 407.205828][ C0] Call Trace: [ 407.205834][ C0] [ 407.205843][ C0] trace_irq_disable+0x3b/0x140 [ 407.205864][ C0] __local_bh_enable_ip+0xaa/0x2b0 [ 407.205881][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 407.205900][ C0] ? process_one_work+0x8b7/0x1710 [ 407.205916][ C0] __batadv_dat_purge+0x344/0x400 [ 407.205934][ C0] ? __batadv_dat_purge+0xae/0x400 [ 407.205951][ C0] ? __pfx_batadv_dat_to_purge+0x10/0x10 [ 407.205970][ C0] ? process_one_work+0x8b7/0x1710 [ 407.205986][ C0] batadv_dat_purge+0x20/0x70 [ 407.206002][ C0] process_one_work+0x9a3/0x1710 [ 407.206028][ C0] ? __pfx_process_one_work+0x10/0x10 [ 407.206043][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 407.206069][ C0] worker_thread+0xba8/0x11e0 [ 407.206090][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 407.206113][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 407.206132][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 407.206153][ C0] kthread+0x388/0x470 [ 407.206174][ C0] ? __pfx_worker_thread+0x10/0x10 [ 407.206190][ C0] ? __pfx_kthread+0x10/0x10 [ 407.206212][ C0] ret_from_fork+0x514/0xb70 [ 407.206231][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 407.206248][ C0] ? __switch_to+0xc79/0x1410 [ 407.206272][ C0] ? __pfx_kthread+0x10/0x10 [ 407.206294][ C0] ret_from_fork_asm+0x1a/0x30 [ 407.206320][ C0] [ 407.340976][ T5843] usb 4-1: USB disconnect, device number 104 [ 407.348125][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 407.348150][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 407.348179][ T39] Tainted: [L]=SOFTLOCKUP [ 407.348188][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 407.348200][ T39] Call Trace: [ 407.348210][ T39] [ 407.348218][ T39] vpanic+0x56c/0xa60 [ 407.348249][ T39] ? __pfx___schedule+0x10/0x10 [ 407.348280][ T39] ? __pfx_vpanic+0x10/0x10 [ 407.348313][ T39] panic+0xc5/0xd0 [ 407.348348][ T39] ? __pfx_panic+0x10/0x10 [ 407.348374][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 407.348407][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 407.348433][ T39] watchdog+0x102c/0x1030 [ 407.348462][ T39] ? watchdog+0x1c9/0x1030 [ 407.348490][ T39] kthread+0x388/0x470 [ 407.348517][ T39] ? __pfx_watchdog+0x10/0x10 [ 407.348537][ T39] ? __pfx_kthread+0x10/0x10 [ 407.348565][ T39] ret_from_fork+0x514/0xb70 [ 407.348589][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 407.348611][ T39] ? __switch_to+0xc79/0x1410 [ 407.348642][ T39] ? __pfx_kthread+0x10/0x10 [ 407.348669][ T39] ret_from_fork_asm+0x1a/0x30 [ 407.348706][ T39] [ 407.349123][ T39] Kernel Offset: disabled