last executing test programs: 28.787507232s ago: executing program 3 (id=1513): bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001d0083a60000000000000000070000001c"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (fail_nth: 4) 28.540120364s ago: executing program 3 (id=1516): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x800000000401, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000002580)={0x0, 0x1, 0x400300a, 0xffffffffffffffff, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$uac1(0x0, 0xed, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xdb, 0x3, 0x1, 0x3, 0x20, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x1d}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x4, 0x6, 0x3, 0x5}, @processing_unit={0xa, 0x24, 0x7, 0x2, 0x1, 0x6, "99ce67"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x2, 0x6, 0x4, "4d0332"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x1, 0xc0, 0xa, "b14225d4e74704"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xd, 0x2, 0x6, 0xb, "ef09a1b12e33a9061d"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x2, 0x8, 0xf8}, @as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x1002}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x0, 0x10, "", 'R'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0xc, 0x10, {0x7, 0x25, 0x1, 0xc, 0x96, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x8c, 0x7, "cc7a3c", 'R'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0x4, '1,m'}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, "389c93", "8adbf8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x0, 0x3, {0x7, 0x25, 0x1, 0xc, 0x3, 0x4}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0xff, 0x8, 0xf4, 0x8, 0x81}, 0x34, &(0x7f00000003c0)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x401, 0xf0f, 0x0, [0xc0ff, 0xff0000, 0xff3f3f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "975cef330a1f5c56dea22dfc674a2a4b"}]}, 0x3, [{0x44, &(0x7f0000000480)=@string={0x44, 0x3, "61f47c1d04902ac47f05bb769e3c640dd91d7b5bd13773eaa0a23a0a8c71849b8e4a67c3766b80b50153f811ec60be419e4b98ae26b0380665cf65370254857e5ab6"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x6800}}]}) 25.665360885s ago: executing program 3 (id=1535): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a000400110000000a600e41b0000900ac00060411000000160012000a00037c0248035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000008af26c8b7b551d77f9565b777f41282e", 0xd8}], 0x1}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) mkdir(&(0x7f0000000000)='./tracefs\x00', 0x196) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f00000001c0)=0x5) r2 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000640)={0x2020}, 0x2020) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r4, 0xfffffffc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) socket(0x2d, 0x2, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="070000000000000000000200000014800180060001000204000000000300ac1414aa"], 0x28}}, 0x0) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r9, 0x29, 0x3, 0x0, &(0x7f00000001c0)) r10 = openat$cgroup_pressure(r8, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r11, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="140000"], 0x18}, 0xc800) setsockopt$sock_int(r12, 0x1, 0x2a, &(0x7f0000000000), 0x4) recvmmsg(r12, &(0x7f0000002140)=[{{0x0, 0x0, 0x0}, 0xf043}], 0x1, 0x2000, 0x0) write$cgroup_pressure(r10, &(0x7f0000000140)={'full', 0x20, 0x39, 0x20, 0xffffffff}, 0x2f) 23.995250558s ago: executing program 3 (id=1550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000180001000000005955ee0e662d"], 0x24}}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x400000000000235, 0x0) r2 = openat$adsp1(0xffffff9c, &(0x7f0000000000), 0x400, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0xa1001) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x1, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000080)) syz_open_dev$sg(&(0x7f0000000480), 0x100000000, 0x18201) r4 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000086a05ed1000e9ffffff0109022400010000900c0904000d040300000009210400ff012228000905810340004000de"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r4, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)={0x27ed4f847164e2a, 0xd, 0x29, {0x29, 0xb, "663e91b2f0187ff0478fa22a61ac06299c374800000000000080000000000000000000000000fd"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) mmap$dsp(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000000, 0x11, r2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r11, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x70, r6, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x58}]}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0xf0}]}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0xc004040) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d001c00020400bf050005001201", 0x2e}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) 20.492811864s ago: executing program 3 (id=1560): pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES32=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14"]) 20.297804545s ago: executing program 3 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) (fail_nth: 4) 19.622315611s ago: executing program 1 (id=1563): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(0x0, r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0xfffffffffffffe12, &(0x7f0000000000)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xad8fb6f080c19dde}, 0x8000) 19.078630934s ago: executing program 1 (id=1564): r0 = socket$inet_sctp(0x2, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000400)={0x0, 0x600, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r2], 0x20, 0x6044}, 0x6) 18.001161975s ago: executing program 1 (id=1565): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002f00090027bd700000000000040000000c00180002ac0f"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) (fail_nth: 4) 17.941345677s ago: executing program 1 (id=1566): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01012000000000000000010000000900010073797a30000000000900030073797a300000000090000000060a010400000000000000000100000308000b40800b000100657874686472000024000280080001400000000c08000340000000020500020007000000080004400000002f3000018008000100636d7000240002801000038009000100910d000000000000080001400000001108000240000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0x104}, 0x1, 0x0, 0x0, 0x180}, 0x0) 17.900040264s ago: executing program 1 (id=1567): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e20, @local}, 0x80, 0x0, 0x0, &(0x7f0000000080)=[@txtime={{0x18, 0x1, 0x3d, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0xc4a}}, @mark={{0x14, 0x1, 0x24, 0x8}}], 0x48}, 0x0) 17.851088409s ago: executing program 1 (id=1568): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x2f, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) 5.65693163s ago: executing program 2 (id=1604): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x802) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socket(0x2a, 0x4, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x7, 0x8, 0x13, 0xa0, &(0x7f0000000140)="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"}) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x1a, '\x00', 0x0, 0xfffffffffffffff8}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x5000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0xff, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4d, 0x54}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xd, '\x00', 0x8}, {0xd7, 0x6, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x8, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x5, 0x5, '\x00', 0x8}, {0x7, 0x1, 0x8}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x5, 0x6, 0x4, '\x00', 0x8}]}}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r12 = openat(r11, &(0x7f0000001000)='nfsd.fh/channel\x00', 0x2, 0x0) read$FUSE(r12, &(0x7f0000002500)={0x2020}, 0x2020) r13 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 5.304047334s ago: executing program 2 (id=1605): syz_usb_connect$uac1(0x0, 0xe3, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd1, 0x3, 0x1, 0x3, 0x20, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x13}, [@output_terminal={0x9, 0x24, 0x3, 0x5, 0x4, 0x6, 0x3, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x2, 0x6, 0x4, "4d0332"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x1, 0xc0, 0xa, "b14225d4e74704"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xd, 0x2, 0x6, 0xb, "ef09a1b12e33a9061d"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x2, 0x8, 0xf8}, @as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x1002}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x0, 0x10, "", 'R'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0xc, 0x10, {0x7, 0x25, 0x1, 0xc, 0x96, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x8c, 0x7, "cc7a3c", 'R'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0x4, '1,m'}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, "389c93", "8adbf8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x0, 0x3, {0x7, 0x25, 0x1, 0xc, 0x3, 0x4}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0xff, 0x8, 0xf4, 0x8, 0x81}, 0x34, &(0x7f00000003c0)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x401, 0xf0f, 0x0, [0xc0ff, 0xff0000, 0xff3f3f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "975cef330a1f5c56dea22dfc674a2a4b"}]}, 0x3, [{0x44, &(0x7f0000000480)=@string={0x44, 0x3, "61f47c1d04902ac47f05bb769e3c640dd91d7b5bd13773eaa0a23a0a8c71849b8e4a67c3766b80b50153f811ec60be419e4b98ae26b0380665cf65370254857e5ab6"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x6800}}]}) 4.982947797s ago: executing program 32 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) (fail_nth: 4) 3.871215725s ago: executing program 2 (id=1608): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, 0x0, 0x57) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x3, 0x1}, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0xa, 0xa, 0x5, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4000) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(r5, 0xc008aeb0, &(0x7f00000000c0)) 3.864589437s ago: executing program 0 (id=1609): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xad8fb6f080c19dde}, 0x8000) 3.672936848s ago: executing program 0 (id=1610): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x103c00, 0x0) fchdir(r0) (async, rerun: 64) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272}) (rerun: 64) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) (async) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902600042010000000904000001020900000524060001052400009021240f"], 0x0) 3.430010854s ago: executing program 2 (id=1611): getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f00000000c0)={0x6, 0x8000, 0x401, 0x2}, &(0x7f0000000180)=0x10) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x81) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/control/extensions/xu1/baSourceID\x00', 0x1, 0x192) write$tcp_congestion(r1, &(0x7f0000000040)='lp\x00', 0x3) 3.330875614s ago: executing program 2 (id=1612): syz_clone3(&(0x7f0000000340)={0x801400, &(0x7f0000000040), 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0xd, @remote}, {0xa, 0x4e22, 0x0, @mcast1}, 0x0, {[0x7b6, 0xc, 0xd, 0x4, 0x10000, 0x0, 0x4, 0x4]}}, 0x5c) r1 = syz_open_dev$sndpcmc(0x0, 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r1, 0x4140, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/sctp/udp_port\x00', 0x1, 0x0) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000180)={0x4}) r4 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1abe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000300)) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.201649314s ago: executing program 33 (id=1568): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000640)={0x0, 0x2f, &(0x7f00000000c0)={&(0x7f0000000680)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfe, {0x6}}, 0x14}}, 0x400c884) 2.093447656s ago: executing program 0 (id=1614): r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000040)="24000000180003041dfffd946f6105000a0100000005fe060c10880008001e00ff", 0x21}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe000019"], 0xfe33) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000006c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000580)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000000)="114353012008babe000037510800", 0xe, 0x4008015, &(0x7f00000000c0)={0x11, 0x18, r4, 0x1, 0x7}, 0x14) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000540)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x5c, r5, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x10}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x2c, 0x25, 0x0, 0x1, [@NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x72}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x6}, @NL80211_TXQ_ATTR_AIFS={0x5, 0x5, 0x57}, @NL80211_TXQ_ATTR_CWMIN={0x6, 0x3, 0x1ff}, @NL80211_TXQ_ATTR_QUEUE={0x5, 0x1, 0x4}]}, @NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5, 0x59, 0xff}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x6}]}, 0x5c}, 0x1, 0x0, 0x0, 0xe2540e33203cd75c}, 0x20000000) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x4, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) setsockopt$inet_opts(r0, 0x0, 0x1, &(0x7f0000000940)="4ba9538ab1", 0x5) 814.08606ms ago: executing program 0 (id=1615): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x9, 0x802) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000140)) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f00000003c0)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) socket(0x2a, 0x4, 0x4) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r9, 0xae60) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x7, 0x8, 0x13, 0xa0, &(0x7f0000000140)="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"}) ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x1a, '\x00', 0x0, 0xfffffffffffffff8}) ioctl$KVM_SET_IRQCHIP(r9, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x5000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0xff, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4d, 0x54}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xd, '\x00', 0x8}, {0xd7, 0x6, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x8, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x5, 0x5, '\x00', 0x8}, {0x7, 0x1, 0x8}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x5, 0x6, 0x4, '\x00', 0x8}]}}) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x4, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x8, 0x2000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0xfffffffd, 0x30b, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r12 = openat(r11, &(0x7f0000001000)='nfsd.fh/channel\x00', 0x2, 0x0) read$FUSE(r12, &(0x7f0000002500)={0x2020}, 0x2020) r13 = syz_open_procfs(0x0, &(0x7f0000000300)='clear_refs\x00') writev(r13, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) 428.211085ms ago: executing program 2 (id=1616): syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000280)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x763, 0x2003, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc8, 0x3, 0x1, 0x3, 0x20, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0xc, 0x2, 0x6, 0x4, "4d0332"}, @format_type_i_discrete={0xf, 0x24, 0x2, 0x1, 0x9, 0x1, 0xc0, 0xa, "b14225d4e74704"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0xd, 0x2, 0x6, 0xb, "ef09a1b12e33a9061d"}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xff, 0x2, 0x8, 0xf8}, @as_header={0x7, 0x24, 0x1, 0x5, 0x0, 0x1002}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x0, 0x10, "", 'R'}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x4, 0xc, 0x10, {0x7, 0x25, 0x1, 0xc, 0x96, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x2, 0x3, 0x8c, 0x7, "cc7a3c", 'R'}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x1, 0x0, 0x4, '1,m'}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1, "389c93", "8adbf8"}]}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x0, 0x3, {0x7, 0x25, 0x1, 0xc, 0x3, 0x4}}}}}}}}]}}, &(0x7f00000005c0)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x300, 0xff, 0x8, 0xf4, 0x8, 0x81}, 0x34, &(0x7f00000003c0)={0x5, 0xf, 0x34, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x5, 0x3, 0x401, 0xf0f, 0x0, [0xc0ff, 0xff0000, 0xff3f3f]}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "975cef330a1f5c56dea22dfc674a2a4b"}]}, 0x3, [{0x44, &(0x7f0000000480)=@string={0x44, 0x3, "61f47c1d04902ac47f05bb769e3c640dd91d7b5bd13773eaa0a23a0a8c71849b8e4a67c3766b80b50153f811ec60be419e4b98ae26b0380665cf65370254857e5ab6"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x44e}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x6800}}]}) 136.817831ms ago: executing program 0 (id=1617): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xad8fb6f080c19dde}, 0x8000) 0s ago: executing program 0 (id=1618): r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x8a180, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f0000000240)='.\x00', 0x60000526) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) r2 = socket$inet6_sctp(0xa, 0xb20a23afe4b4fa52, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000010900010073797a310000000028000000000a05000000000000000000010000080900010073797a310000000008000240000000012c000000030a01040000000000000000010000000900030073797a31000000000900010073797a3100000000140000001100010000000000000000000000000a"], 0x9c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) r4 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r4, &(0x7f0000001c80)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010102}, 0x10, &(0x7f00000002c0)=[{&(0x7f00000034c0)="b3", 0x1}], 0x1}}], 0x1, 0x20000014) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000080)={0x0, 0x7ff, 0x2, 0x1, 0x401, 0x7, 0x9, 0x779, r6}, 0x20) r7 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) ioctl$SG_SET_COMMAND_Q(r7, 0x2271, &(0x7f0000000000)=0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000080)={0x0, 0x8002, 0xed, 0x1, r6}, &(0x7f00000000c0)=0x10) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0x4000000, 0x92, 0x0, 0x0, 0x80000000}) kernel console output (not intermixed with test programs): 57993, setting to 1024 [ 344.493512][ T5694] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 344.493535][ T5694] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.493558][ T5694] usb 3-1: config 14 interface 57 has no altsetting 0 [ 344.493566][ T5694] usb 3-1: config 14 interface 228 has no altsetting 0 [ 344.495666][ T5694] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 344.495692][ T5694] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.495711][ T5694] usb 3-1: Product: syz [ 344.495723][ T5694] usb 3-1: Manufacturer: syz [ 344.495733][ T5694] usb 3-1: SerialNumber: syz [ 344.599706][ T5664] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 344.729554][ T5664] usb 1-1: device descriptor read/64, error -71 [ 344.840627][ T5664] usb usb1-port1: attempt power cycle [ 344.950948][ T5694] legousbtower 3-1:14.57: interrupt endpoints not found [ 345.185791][ T5664] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 345.202016][ T5664] usb 1-1: device descriptor read/8, error -71 [ 345.368686][ T5694] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 345.398430][ T5694] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 345.439891][ T5664] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 345.460370][ T5664] usb 1-1: device descriptor read/8, error -71 [ 345.569831][ T5664] usb usb1-port1: unable to enumerate USB device [ 345.982180][ T9880] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.982666][ T9880] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.350329][ C1] usb 3-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 346.396589][ T9] usb 3-1: USB disconnect, device number 77 [ 346.422601][ T9] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected [ 346.719660][ T9901] overlayfs: failed to clone upperpath [ 347.808111][ T9907] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1246'. [ 348.652963][ T9943] jffs2: notice: (9943) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 348.677601][ T9943] FAULT_INJECTION: forcing a failure. [ 348.677601][ T9943] name failslab, interval 1, probability 0, space 0, times 0 [ 348.677625][ T9943] CPU: 0 UID: 0 PID: 9943 Comm: syz.3.1260 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 348.677639][ T9943] Tainted: [L]=SOFTLOCKUP [ 348.677642][ T9943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 348.677649][ T9943] Call Trace: [ 348.677736][ T9943] [ 348.677796][ T9943] dump_stack_lvl+0xe8/0x150 [ 348.677859][ T9943] should_fail_ex+0x467/0x600 [ 348.677875][ T9943] should_failslab+0xa8/0x100 [ 348.677885][ T9943] ? do_getname+0x2e/0x250 [ 348.677931][ T9943] kmem_cache_alloc_noprof+0x9e/0x680 [ 348.677945][ T9943] ? do_getname+0x2e/0x250 [ 348.677961][ T9943] do_getname+0x2e/0x250 [ 348.677974][ T9943] ? getname_flags+0x11/0x20 [ 348.677989][ T9943] do_sys_openat2+0xcc/0x200 [ 348.678006][ T9943] ? __pfx_do_sys_openat2+0x10/0x10 [ 348.678022][ T9943] ? ksys_write+0x248/0x270 [ 348.678034][ T9943] ? __pfx_ksys_write+0x10/0x10 [ 348.678046][ T9943] __x64_sys_openat+0x138/0x170 [ 348.678063][ T9943] do_syscall_64+0x17b/0x530 [ 348.678075][ T9943] ? irqentry_exit+0x10f/0x8f0 [ 348.678084][ T9943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.678094][ T9943] ? clear_bhb_loop+0x40/0x90 [ 348.678106][ T9943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.678116][ T9943] RIP: 0033:0x7f7f331ee0d9 [ 348.678160][ T9943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.678204][ T9943] RSP: 002b:00007f7f31446028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 348.678261][ T9943] RAX: ffffffffffffffda RBX: 00007f7f33475fa0 RCX: 00007f7f331ee0d9 [ 348.678274][ T9943] RDX: 0000000000000042 RSI: 0000200000000600 RDI: ffffffffffffff9c [ 348.678286][ T9943] RBP: 00007f7f31446090 R08: 0000000000000000 R09: 0000000000000000 [ 348.678295][ T9943] R10: 00000000000001ff R11: 0000000000000246 R12: 0000000000000001 [ 348.678301][ T9943] R13: 00007f7f33476038 R14: 00007f7f33475fa0 R15: 00007ffc4eb83c48 [ 348.678317][ T9943] [ 348.859549][ T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 348.889571][ T5664] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 349.009564][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 349.013845][ T9] usb 1-1: config 1 has too many interfaces: 228, using maximum allowed: 32 [ 349.013873][ T9] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 349.013892][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 228 [ 349.013953][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 240, changing to 7 [ 349.013978][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 49824, setting to 1024 [ 349.014003][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 349.017781][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 349.017809][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.017828][ T9] usb 1-1: Product: syz [ 349.017841][ T9] usb 1-1: Manufacturer: syz [ 349.017854][ T9] usb 1-1: SerialNumber: syz [ 349.081604][ T5664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 349.081652][ T5664] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 349.081673][ T5664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.095195][ T5664] usb 3-1: config 0 descriptor?? [ 349.096380][ T9940] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 349.431269][ T9] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 349.431788][ T9] usb 1-1: 0:2 : does not exist [ 349.473878][ T9948] skbuff: bad partial csum: csum=65535/2 headroom=4 headlen=65543 [ 349.521479][ T9] usb 1-1: USB disconnect, device number 94 [ 349.640730][ T5664] usbhid 3-1:0.0: can't add hid device: -71 [ 349.640847][ T5664] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 349.650416][ T5664] usb 3-1: USB disconnect, device number 78 [ 349.698288][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.957529][ T9954] jffs2: notice: (9954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 349.980251][ T9954] jffs2: notice: (9954) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 350.179667][ T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 350.331037][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 350.350133][ T9] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 350.350156][ T9] usb 1-1: config 0 has no interface number 0 [ 350.354788][ T9] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 350.354817][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.354835][ T9] usb 1-1: Product: syz [ 350.354848][ T9] usb 1-1: Manufacturer: syz [ 350.354862][ T9] usb 1-1: SerialNumber: syz [ 350.416699][ T9] usb 1-1: config 0 descriptor?? [ 350.445965][ T9] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 350.703558][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 350.772273][ T9] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 350.870633][ T5694] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 350.931451][ T9956] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1265'. [ 350.980066][ T5664] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 351.041920][ T5694] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.044348][ T5694] usb 4-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 351.044377][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.044396][ T5694] usb 4-1: Product: syz [ 351.044408][ T5694] usb 4-1: Manufacturer: syz [ 351.044421][ T5694] usb 4-1: SerialNumber: syz [ 351.108195][ T5694] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 351.129560][ T5664] usb 3-1: Using ep0 maxpacket: 8 [ 351.230513][ T5664] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.230560][ T5664] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.230654][ T5664] usb 3-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 351.230677][ T5664] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.247805][ T5664] usb 3-1: config 0 descriptor?? [ 351.520499][ T5694] gspca_mr97310a: reg read [21] error -71 [ 351.520694][ T5694] mr97310a 4-1:1.0: probe with driver mr97310a failed with error -71 [ 351.534369][ T5694] usb 4-1: USB disconnect, device number 86 [ 351.754378][ T5664] hid_parser_main: 408 callbacks suppressed [ 351.754437][ T5664] logitech 0003:046D:C50C.000C: unknown main item tag 0x0 [ 351.754473][ T5664] logitech 0003:046D:C50C.000C: unknown main item tag 0x0 [ 351.754499][ T5664] logitech 0003:046D:C50C.000C: unknown main item tag 0x0 [ 351.754522][ T5664] logitech 0003:046D:C50C.000C: unknown main item tag 0x0 [ 351.754546][ T5664] logitech 0003:046D:C50C.000C: unknown main item tag 0x0 [ 351.754570][ T5664] logitech 0003:046D:C50C.000C: unknown main item tag 0x0 [ 351.754603][ T5664] logitech 0003:046D:C50C.000C: unknown main item tag 0x0 [ 351.754629][ T5664] logitech 0003:046D:C50C.000C: unknown main item tag 0x0 [ 351.754653][ T5664] logitech 0003:046D:C50C.000C: unknown main item tag 0x0 [ 351.754677][ T5664] logitech 0003:046D:C50C.000C: unknown main item tag 0x0 [ 351.780011][ T9974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.780532][ T9974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.864405][ T5664] logitech 0003:046D:C50C.000C: hidraw0: USB HID v0.81 Device [HID 046d:c50c] on usb-dummy_hcd.2-1/input0 [ 351.893009][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 351.895437][ T5664] usb 1-1: USB disconnect, device number 95 [ 351.907238][ T5664] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 351.939058][ T5664] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 351.942439][ T5664] quatech2 1-1:0.51: device disconnected [ 352.145015][ T5322] usb 3-1: USB disconnect, device number 79 [ 352.173280][ T5694] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 352.347178][ T9985] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'. [ 352.379572][ T5694] usb 4-1: Using ep0 maxpacket: 16 [ 352.381252][ T5694] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 352.381278][ T5694] usb 4-1: config 0 has no interface number 0 [ 352.383562][ T5694] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 352.383590][ T5694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.383602][ T5694] usb 4-1: Product: syz [ 352.383609][ T5694] usb 4-1: Manufacturer: syz [ 352.383616][ T5694] usb 4-1: SerialNumber: syz [ 352.386538][ T5694] usb 4-1: config 0 descriptor?? [ 352.397327][ T5694] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 352.608920][ T9974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.623653][ T9974] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.626796][ T5694] gspca_spca1528: reg_w err -71 [ 352.640249][ T5694] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71 [ 352.648954][ T5694] usb 4-1: USB disconnect, device number 87 [ 352.693031][ T9991] No control pipe specified [ 352.939583][ T32] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 353.093424][ T32] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 353.093453][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.093471][ T32] usb 1-1: Product: syz [ 353.093484][ T32] usb 1-1: Manufacturer: syz [ 353.093496][ T32] usb 1-1: SerialNumber: syz [ 353.098251][ T32] usb 1-1: config 0 descriptor?? [ 353.230222][ T32] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 353.826840][ T9991] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1276'. [ 353.930996][ T32] gspca_sunplus: reg_w_riv err -71 [ 353.931121][ T32] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 353.949647][ T32] usb 1-1: USB disconnect, device number 96 [ 354.249574][ T5664] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 354.379621][ T5664] usb 4-1: device descriptor read/64, error -71 [ 354.409551][ T32] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 354.579925][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 354.585198][ T32] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 354.585227][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.585245][ T32] usb 3-1: Product: 栀 [ 354.585256][ T32] usb 3-1: Manufacturer: ю [ 354.585264][ T32] usb 3-1: SerialNumber: syz [ 354.629638][ T5664] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 354.792005][ T5664] usb 4-1: device descriptor read/64, error -71 [ 354.848774][ T32] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 354.848816][ T32] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 354.862924][ T32] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 354.863545][ T32] usb 3-1: unit 3 not found! [ 354.912322][ T5664] usb usb4-port1: attempt power cycle [ 354.950032][ T32] usb 3-1: USB disconnect, device number 80 [ 354.993887][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 355.259591][ T5664] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 355.281387][ T5664] usb 4-1: device descriptor read/8, error -71 [ 355.559665][ T5664] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 355.580601][ T5664] usb 4-1: device descriptor read/8, error -71 [ 355.692066][ T5664] usb usb4-port1: unable to enumerate USB device [ 355.909603][ T32] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 356.061349][ T32] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 356.061380][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.064286][ T32] usb 1-1: config 0 descriptor?? [ 356.070914][ T32] cp210x 1-1:0.0: cp210x converter detected [ 356.169541][ T9] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 356.299544][ T9] usb 3-1: device descriptor read/64, error -71 [ 356.549566][ T9] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 356.601865][T10048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.602365][T10048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.618878][ T32] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 356.709540][ T9] usb 3-1: device descriptor read/64, error -71 [ 356.831354][ T9] usb usb3-port1: attempt power cycle [ 357.175300][ T9] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 357.190340][ T9] usb 3-1: device descriptor read/8, error -71 [ 357.264377][ T32] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 357.264405][ T32] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 357.291217][ T32] usb 1-1: cp210x converter now attached to ttyUSB0 [ 357.365053][ T32] usb 1-1: USB disconnect, device number 97 [ 357.373834][ T32] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 357.375476][ T32] cp210x 1-1:0.0: device disconnected [ 357.449541][ T9] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 357.471557][ T9] usb 3-1: device descriptor read/8, error -71 [ 357.590992][T10067] netlink: 'syz.0.1304': attribute type 1 has an invalid length. [ 357.601301][ T9] usb usb3-port1: unable to enumerate USB device [ 358.459588][ T32] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 358.622052][ T32] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 358.622085][ T32] usb 1-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 358.622097][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.624981][ T32] usb 1-1: config 0 descriptor?? [ 358.625727][T10091] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 358.879661][ T5664] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 359.106035][ T32] hid_parser_main: 30 callbacks suppressed [ 359.106052][ T32] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 359.106071][ T32] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 359.106086][ T32] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 359.106100][ T32] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 359.106117][ T32] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 359.106132][ T32] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 359.106145][ T32] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 359.106159][ T32] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 359.106173][ T32] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 359.106186][ T32] asus 0003:0B05:1ABE.000D: unknown main item tag 0x0 [ 359.179552][ T5664] usb 4-1: Using ep0 maxpacket: 32 [ 359.181456][ T5664] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.183647][ T5664] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 359.183677][ T5664] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.183688][ T5664] usb 4-1: Product: syz [ 359.183695][ T5664] usb 4-1: Manufacturer: syz [ 359.183702][ T5664] usb 4-1: SerialNumber: syz [ 359.232480][ T5664] usb 4-1: config 0 descriptor?? [ 359.250247][ T32] asus 0003:0B05:1ABE.000D: unexpected long global item [ 359.250662][ T32] asus 0003:0B05:1ABE.000D: Asus hid parse failed: -22 [ 359.250721][ T32] asus 0003:0B05:1ABE.000D: probe with driver asus failed with error -22 [ 359.298859][ T5664] cdc_ether 4-1:0.0: missing cdc header descriptor [ 359.311123][ T5664] usb 4-1: unsupported MDLM descriptors [ 359.387892][ T32] usb 1-1: USB disconnect, device number 98 [ 359.445916][ T37] audit: type=1326 audit(1786086632.113:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10101 comm="syz.3.1315" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f331ee0d9 code=0x7ffc0000 [ 359.446161][ T37] audit: type=1326 audit(1786086632.113:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10101 comm="syz.3.1315" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f331ee0d9 code=0x7ffc0000 [ 359.446296][ T37] audit: type=1326 audit(1786086632.113:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10101 comm="syz.3.1315" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7f331ee0d9 code=0x7ffc0000 [ 359.446408][ T37] audit: type=1326 audit(1786086632.113:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10101 comm=BA exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f331ee0d9 code=0x7ffc0000 [ 359.446539][ T37] audit: type=1326 audit(1786086632.113:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10101 comm=BA exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f331ee0d9 code=0x7ffc0000 [ 359.446771][ T37] audit: type=1326 audit(1786086632.113:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10101 comm=BA exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7f331ee0d9 code=0x7ffc0000 [ 359.447017][ T37] audit: type=1326 audit(1786086632.113:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10101 comm=BA exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f331ee0d9 code=0x7ffc0000 [ 359.447148][ T37] audit: type=1326 audit(1786086632.113:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10101 comm=BA exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f331ee0d9 code=0x7ffc0000 [ 359.447268][ T37] audit: type=1326 audit(1786086632.113:15): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10101 comm=BA exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f7f331ee0d9 code=0x7ffc0000 [ 359.447753][ T37] audit: type=1326 audit(1786086632.113:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10101 comm=BA exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f331ee0d9 code=0x7ffc0000 [ 359.458464][ T5322] usb 4-1: USB disconnect, device number 92 [ 359.460275][ T9] usb 3-1: new full-speed USB device number 85 using dummy_hcd [ 359.589679][ T9] usb 3-1: device descriptor read/64, error -71 [ 359.829652][ T9] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 359.959604][ T9] usb 3-1: device descriptor read/64, error -71 [ 360.069910][ T9] usb usb3-port1: attempt power cycle [ 360.173222][T10116] batadv_slave_0: entered promiscuous mode [ 360.173749][T10116] team0: entered promiscuous mode [ 360.173765][T10116] team_slave_0: entered promiscuous mode [ 360.173923][T10116] team_slave_1: entered promiscuous mode [ 360.410473][ T9] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 360.434175][ T9] usb 3-1: device descriptor read/8, error -71 [ 360.460079][ T32] usb 1-1: new full-speed USB device number 99 using dummy_hcd [ 360.467114][T10122] netlink: 97 bytes leftover after parsing attributes in process `syz.3.1323'. [ 360.622216][ T32] usb 1-1: unable to get BOS descriptor or descriptor too short [ 360.622715][ T32] usb 1-1: not running at top speed; connect to a high speed hub [ 360.623735][ T32] usb 1-1: config 17 has an invalid interface number: 8 but max is 1 [ 360.623760][ T32] usb 1-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 360.623779][ T32] usb 1-1: config 17 has no interface number 0 [ 360.623829][ T32] usb 1-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 360.623841][ T32] usb 1-1: config 17 interface 8 has no altsetting 0 [ 360.625901][ T32] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 360.625929][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.625947][ T32] usb 1-1: Product: syz [ 360.625960][ T32] usb 1-1: Manufacturer: syz [ 360.625967][ T32] usb 1-1: SerialNumber: syz [ 360.678266][ T9] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 360.720133][ T9] usb 3-1: device descriptor read/8, error -71 [ 360.837845][ T9] usb usb3-port1: unable to enumerate USB device [ 360.959896][T10115] team0: left promiscuous mode [ 360.959915][T10115] team_slave_0: left promiscuous mode [ 361.020066][T10128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1325'. [ 361.020092][T10128] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1325'. [ 361.060390][ T32] usb 1-1: selecting invalid altsetting 0 [ 361.068472][T10115] team_slave_1: left promiscuous mode [ 361.194978][ T32] usb 1-1: USB disconnect, device number 99 [ 361.215354][T10115] batadv_slave_0: left promiscuous mode [ 361.271242][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 361.388252][T10136] netlink: 368 bytes leftover after parsing attributes in process `syz.1.1327'. [ 361.501908][T10138] /dev/nullb0: Can't lookup blockdev [ 361.519678][ T60] Bluetooth: hci1: command 0x2016 tx timeout [ 362.904366][ T32] usb 4-1: new low-speed USB device number 93 using dummy_hcd [ 363.123648][ T32] usb 4-1: Invalid ep0 maxpacket: 64 [ 363.299546][ T32] usb 4-1: new low-speed USB device number 94 using dummy_hcd [ 363.467530][T10186] binder: 10185:10186 unknown command 1078485782 [ 363.467552][T10186] binder: 10185:10186 ioctl c0306201 2000000002c0 returned -22 [ 363.483506][ T32] usb 4-1: Invalid ep0 maxpacket: 64 [ 363.484119][ T32] usb usb4-port1: attempt power cycle [ 363.799754][ T5686] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 363.844413][ T32] usb 4-1: new low-speed USB device number 95 using dummy_hcd [ 363.860206][ T32] usb 4-1: Invalid ep0 maxpacket: 64 [ 363.959549][ T5686] usb 3-1: Using ep0 maxpacket: 8 [ 363.967260][ T5686] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 363.967289][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.967307][ T5686] usb 3-1: Product: 栀 [ 363.967321][ T5686] usb 3-1: Manufacturer: ю [ 363.967334][ T5686] usb 3-1: SerialNumber: syz [ 364.044400][ T32] usb 4-1: new low-speed USB device number 96 using dummy_hcd [ 364.060469][ T32] usb 4-1: Invalid ep0 maxpacket: 64 [ 364.061071][ T32] usb usb4-port1: unable to enumerate USB device [ 364.278258][T10198] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1348'. [ 364.285064][T10198] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1348'. [ 364.351305][ T5686] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 364.351336][ T5686] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 364.399869][ T5686] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 364.400382][ T5686] usb 3-1: unit 3 not found! [ 364.436454][T10202] netlink: 'syz.0.1348': attribute type 29 has an invalid length. [ 364.438064][T10202] netlink: 'syz.0.1348': attribute type 29 has an invalid length. [ 364.605447][ T5686] usb 3-1: USB disconnect, device number 89 [ 364.700940][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.672885][ T5686] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 366.458192][ T5686] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 366.458220][ T5686] usb 3-1: config 0 has no interface number 0 [ 366.458261][ T5686] usb 3-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 366.458285][ T5686] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 366.458309][ T5686] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 366.458345][ T5686] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 366.458367][ T5686] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.632993][ T5686] usb 3-1: config 0 descriptor?? [ 366.680162][ T5686] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input27 [ 367.582423][ T5664] usb 3-1: USB disconnect, device number 90 [ 367.609603][ T32] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 367.778531][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.778603][ T32] usb 4-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 367.802670][ T5686] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 367.813545][ T32] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 367.813574][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.813593][ T32] usb 4-1: Product: syz [ 367.813606][ T32] usb 4-1: Manufacturer: syz [ 367.813619][ T32] usb 4-1: SerialNumber: syz [ 367.852505][ T32] usb-storage 4-1:1.0: USB Mass Storage device detected [ 367.910080][ T32] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 367.911375][ T32] scsi host1: usb-storage 4-1:1.0 [ 367.929564][ T5686] usb 1-1: device descriptor read/64, error -71 [ 368.239876][ T5686] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 368.374282][ T5686] usb 1-1: device descriptor read/64, error -71 [ 368.377962][ T32] usb 4-1: USB disconnect, device number 97 [ 368.484649][ T5686] usb usb1-port1: attempt power cycle [ 368.729693][ T10] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 368.881652][ T5686] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 368.900884][ T5686] usb 1-1: device descriptor read/8, error -71 [ 369.039638][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 369.045688][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 369.045729][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 369.045752][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.058793][ T10] usb 3-1: config 0 descriptor?? [ 369.150255][ T5686] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 369.170473][ T5686] usb 1-1: device descriptor read/8, error -71 [ 369.279970][ T5686] usb usb1-port1: unable to enumerate USB device [ 369.334774][T10249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1360'. [ 369.404440][T10249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1360'. [ 369.405979][T10249] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1360'. [ 369.518207][ T10] hid_parser_main: 407 callbacks suppressed [ 369.518232][ T10] hid-rmi 0003:06CB:81A7.000E: unknown main item tag 0x2 [ 369.518314][ T10] hid-rmi 0003:06CB:81A7.000E: ignoring exceeding usage max [ 369.632884][ T10] hid-rmi 0003:06CB:81A7.000E: hidraw0: USB HID v0.81 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 369.683212][T10245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.685043][T10245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.700025][ T10] usb 3-1: USB disconnect, device number 91 [ 369.835332][T10255] fido_id[10255]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 370.030150][ T5322] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 370.247592][ T5322] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 370.247620][ T5322] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.248921][ T5322] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 370.248947][ T5322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.248965][ T5322] usb 4-1: SerialNumber: syz [ 370.563811][ T5322] usb 4-1: 0:2 : does not exist [ 370.857263][ T5322] usb 4-1: USB disconnect, device number 98 [ 370.890450][T10264] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1366'. [ 370.890470][T10264] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1366'. [ 371.006134][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.064404][T10273] binder: 10272:10273 ioctl 6609 0 returned -22 [ 371.462582][ T5322] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 371.505861][T10281] dvmrp8: entered allmulticast mode [ 371.631975][ T5322] usb 4-1: Using ep0 maxpacket: 8 [ 371.637238][ T5322] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 371.637266][ T5322] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.637282][ T5322] usb 4-1: Product: 栀 [ 371.637294][ T5322] usb 4-1: Manufacturer: ю [ 371.637305][ T5322] usb 4-1: SerialNumber: syz [ 371.988834][ T5322] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 371.988866][ T5322] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 372.088792][ T5322] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 372.089241][ T5322] usb 4-1: unit 3 not found! [ 372.399214][ T5322] usb 4-1: USB disconnect, device number 99 [ 372.437693][T10302] fuse: fd is not a fuse device [ 372.781692][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 373.102150][ T32] usb 1-1: new low-speed USB device number 104 using dummy_hcd [ 373.119793][ T5322] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 373.262818][ T32] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 373.262846][ T32] usb 1-1: config 179 has no interface number 0 [ 373.262875][ T32] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 373.262888][ T32] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 373.262900][ T32] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 373.262913][ T32] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 12336, setting to 8 [ 373.262925][ T32] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 373.262949][ T32] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 373.262961][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.365771][T10312] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 373.404462][ T5322] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 373.404508][ T5322] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 373.404527][ T5322] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.439475][ T5322] usb 4-1: config 0 descriptor?? [ 373.452331][T10306] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 373.736475][ T32] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 373.802483][ T32] xpad 1-1:179.65: probe with driver xpad failed with error -90 [ 373.809369][ T32] usb 1-1: USB disconnect, device number 104 [ 373.900794][ T5322] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 373.900831][ T5322] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 373.900857][ T5322] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 373.900881][ T5322] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 373.900904][ T5322] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 373.900928][ T5322] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 373.900951][ T5322] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 373.900974][ T5322] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 373.900997][ T5322] asus 0003:0B05:1ABE.000F: unknown main item tag 0x0 [ 373.905110][ T5322] asus 0003:0B05:1ABE.000F: unexpected long global item [ 373.905544][ T5322] asus 0003:0B05:1ABE.000F: Asus hid parse failed: -22 [ 373.905604][ T5322] asus 0003:0B05:1ABE.000F: probe with driver asus failed with error -22 [ 374.090580][ T5679] usb 4-1: USB disconnect, device number 100 [ 374.173508][T10326] comedi comedi0: comedi_config --init_data is deprecated [ 374.279677][ T32] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 374.450282][ T5664] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 374.450472][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 374.454084][ T32] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 374.454112][ T32] usb 3-1: config 0 has no interface number 0 [ 374.456334][ T32] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 374.456362][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.456380][ T32] usb 3-1: Product: syz [ 374.456393][ T32] usb 3-1: Manufacturer: syz [ 374.456400][ T32] usb 3-1: SerialNumber: syz [ 374.459316][ T32] usb 3-1: config 0 descriptor?? [ 374.619567][ T5664] usb 1-1: Using ep0 maxpacket: 8 [ 374.626067][ T5664] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 374.626090][ T5664] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.626100][ T5664] usb 1-1: Product: 栀 [ 374.626107][ T5664] usb 1-1: Manufacturer: ю [ 374.626147][ T5664] usb 1-1: SerialNumber: syz [ 374.967177][ T32] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 374.967208][ T32] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 374.995030][ T5664] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 374.995263][ T5664] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 374.996729][ T5664] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 374.997773][ T5664] usb 1-1: unit 3 not found! [ 375.167152][ T5664] usb 1-1: USB disconnect, device number 105 [ 375.540612][T10343] overlayfs: failed to resolve './file0:/': -2 [ 375.671788][ T32] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 375.672000][ T32] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 375.710959][ T32] usb 3-1: USB disconnect, device number 92 [ 376.320533][ T32] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 376.449543][ T32] usb 1-1: device descriptor read/64, error -71 [ 376.690075][ T32] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 376.819621][ T32] usb 1-1: device descriptor read/64, error -71 [ 376.882134][ T5322] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 376.930321][ T32] usb usb1-port1: attempt power cycle [ 377.039672][ T5322] usb 3-1: Using ep0 maxpacket: 8 [ 377.056914][ T5322] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 377.056944][ T5322] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.056962][ T5322] usb 3-1: Product: 栀 [ 377.056975][ T5322] usb 3-1: Manufacturer: ю [ 377.056989][ T5322] usb 3-1: SerialNumber: syz [ 377.269626][ T32] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 377.290332][ T32] usb 1-1: device descriptor read/8, error -71 [ 377.311608][ T5322] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 377.311627][ T5322] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 377.312180][ T5322] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 377.312489][ T5322] usb 3-1: unit 3 not found! [ 377.373986][ T5322] usb 3-1: USB disconnect, device number 93 [ 377.423481][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.549552][ T32] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 377.570462][ T32] usb 1-1: device descriptor read/8, error -71 [ 377.680017][ T32] usb usb1-port1: unable to enumerate USB device [ 378.209518][ T9] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 378.363082][ T9] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 378.363112][ T9] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 378.363130][ T9] usb 3-1: Product: syz [ 378.363142][ T9] usb 3-1: SerialNumber: syz [ 378.366747][ T9] usb 3-1: config 0 descriptor?? [ 378.571934][ T9] hso 3-1:0.0: Failed to find BULK eps [ 378.730390][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.730492][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.773570][ T5664] usb 3-1: USB disconnect, device number 94 [ 379.237451][T10403] overlayfs: unescaped trailing colons in lowerdir mount option. [ 379.749656][ T32] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 379.790708][ T9] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 379.854346][T10418] MTD: Couldn't look up 'mtd0/file0': -2 [ 379.901317][ T32] usb 1-1: Using ep0 maxpacket: 8 [ 379.907113][ T32] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 379.907142][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.907160][ T32] usb 1-1: Product: 栀 [ 379.907173][ T32] usb 1-1: Manufacturer: ю [ 379.907186][ T32] usb 1-1: SerialNumber: syz [ 379.969475][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 379.971741][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 379.971780][ T9] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 379.971800][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.058822][ T9] usb 3-1: config 0 descriptor?? [ 380.230624][ T32] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 380.230654][ T32] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 380.231520][ T32] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 380.231986][ T32] usb 1-1: unit 3 not found! [ 380.418267][ T32] usb 1-1: USB disconnect, device number 110 [ 380.548008][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.559165][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 380.622230][ T9] hid_parser_main: 413 callbacks suppressed [ 380.622255][ T9] hid-rmi 0003:06CB:81A7.0010: unknown main item tag 0x2 [ 380.622347][ T9] hid-rmi 0003:06CB:81A7.0010: ignoring exceeding usage max [ 380.632014][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.700285][ T9] hid-rmi 0003:06CB:81A7.0010: hidraw0: USB HID v0.81 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0 [ 381.017687][ T37] kauditd_printk_skb: 13 callbacks suppressed [ 381.017799][ T37] audit: type=1326 audit(1786086653.683:30): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10430 comm="syz.0.1423" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9971be0d9 code=0x7ffc0000 [ 381.017840][ T37] audit: type=1326 audit(1786086653.683:32): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10430 comm="syz.0.1423" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff9971be0d9 code=0x7ffc0000 [ 381.018081][ T37] audit: type=1326 audit(1786086653.683:31): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10430 comm="syz.0.1423" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9971be0d9 code=0x7ffc0000 [ 381.038839][ T37] audit: type=1326 audit(1786086653.703:33): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=10430 comm="syz.0.1423" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff9971be0d9 code=0x7ffc0000 [ 381.449605][ T9] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 381.599548][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 381.603510][ T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 381.603544][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.603562][ T9] usb 1-1: Product: syz [ 381.603574][ T9] usb 1-1: Manufacturer: syz [ 381.603581][ T9] usb 1-1: SerialNumber: syz [ 381.608034][ T9] usb 1-1: config 0 descriptor?? [ 381.616006][ T9] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 381.618525][ T9] usb 1-1: Detected FT-X [ 381.818570][T10440] random: crng reseeded on system resumption [ 382.111657][ T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 382.112706][ T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 382.113314][ T9] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 382.116433][ T9] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 382.123588][ T9] usb 1-1: USB disconnect, device number 111 [ 382.132376][ T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 382.133057][ T9] ftdi_sio 1-1:0.0: device disconnected [ 382.474967][ T9] usb 3-1: USB disconnect, device number 95 [ 382.550785][ T5664] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 382.703083][ T5664] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 382.703130][ T5664] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 382.703151][ T5664] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.760095][ T5664] usb 4-1: config 0 descriptor?? [ 382.761657][T10449] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 382.789174][T10460] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 382.851700][T10463] Invalid option length (129) for dns_resolver key [ 383.203236][ T5664] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 383.203370][ T5664] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 383.203394][ T5664] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 383.203416][ T5664] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 383.203436][ T5664] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 383.203458][ T5664] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 383.203479][ T5664] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 383.203499][ T5664] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 383.203519][ T5664] asus 0003:0B05:1ABE.0011: unknown main item tag 0x0 [ 383.207651][ T5664] asus 0003:0B05:1ABE.0011: unexpected long global item [ 383.208252][ T5664] asus 0003:0B05:1ABE.0011: Asus hid parse failed: -22 [ 383.208335][ T5664] asus 0003:0B05:1ABE.0011: probe with driver asus failed with error -22 [ 383.387933][ T9] usb 4-1: USB disconnect, device number 101 [ 383.780764][T10476] tmpfs: Bad value for 'mpol' [ 384.038167][T10479] FAULT_INJECTION: forcing a failure. [ 384.038167][T10479] name failslab, interval 1, probability 0, space 0, times 0 [ 384.038220][T10479] CPU: 1 UID: 0 PID: 10479 Comm: syz.2.1439 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 384.038243][T10479] Tainted: [L]=SOFTLOCKUP [ 384.038249][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.038262][T10479] Call Trace: [ 384.038268][T10479] [ 384.038275][T10479] dump_stack_lvl+0xe8/0x150 [ 384.038299][T10479] should_fail_ex+0x467/0x600 [ 384.038322][T10479] should_failslab+0xa8/0x100 [ 384.038338][T10479] kmem_cache_alloc_node_noprof+0xac/0x660 [ 384.038358][T10479] ? __alloc_skb+0x1d7/0x7a0 [ 384.038376][T10479] ? __alloc_skb+0x1d7/0x7a0 [ 384.038397][T10479] __alloc_skb+0x1d7/0x7a0 [ 384.038419][T10479] hci_mgmt_cmd+0x1c1/0xfc0 [ 384.038438][T10479] ? do_machine_check+0x323/0x700 [ 384.038460][T10479] ? mutex_lock_nested+0x152/0x1d0 [ 384.038482][T10479] hci_sock_sendmsg+0x6e1/0xf50 [ 384.038504][T10479] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 384.038530][T10479] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 384.038546][T10479] sock_sendmsg_nosec+0x13a/0x180 [ 384.038565][T10479] sock_write_iter+0x2e4/0x3f0 [ 384.038584][T10479] ? __pfx_sock_write_iter+0x10/0x10 [ 384.038607][T10479] ? bpf_lsm_file_permission+0x9/0x20 [ 384.038631][T10479] ? security_file_permission+0x68/0x220 [ 384.038675][T10479] vfs_write+0x61e/0xbb0 [ 384.038705][T10479] ? __pfx_vfs_write+0x10/0x10 [ 384.038732][T10479] ? __fget_files+0x2a/0x420 [ 384.038760][T10479] ksys_write+0x156/0x270 [ 384.038782][T10479] ? __pfx_ksys_write+0x10/0x10 [ 384.038815][T10479] do_syscall_64+0x17b/0x530 [ 384.038834][T10479] ? irqentry_exit+0x10f/0x8f0 [ 384.038851][T10479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.038869][T10479] ? clear_bhb_loop+0x40/0x90 [ 384.038889][T10479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.038913][T10479] RIP: 0033:0x7fe019c6e0d9 [ 384.038931][T10479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.038946][T10479] RSP: 002b:00007fe017ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.038963][T10479] RAX: ffffffffffffffda RBX: 00007fe019ef5fa0 RCX: 00007fe019c6e0d9 [ 384.038974][T10479] RDX: 0000000000000006 RSI: 00002000000000c0 RDI: 0000000000000004 [ 384.038984][T10479] RBP: 00007fe017ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 384.038994][T10479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.039005][T10479] R13: 00007fe019ef6038 R14: 00007fe019ef5fa0 R15: 00007ffff5e38438 [ 384.039031][T10479] [ 384.039132][T10479] Bluetooth: MGMT ver 1.23 [ 384.753094][T10500] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1444'. [ 384.809573][ T32] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 384.847069][T10502] Bluetooth: MGMT ver 1.23 [ 384.862712][T10502] FAULT_INJECTION: forcing a failure. [ 384.862712][T10502] name failslab, interval 1, probability 0, space 0, times 0 [ 384.862748][T10502] CPU: 1 UID: 0 PID: 10502 Comm: syz.0.1446 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 384.862774][T10502] Tainted: [L]=SOFTLOCKUP [ 384.862780][T10502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 384.862791][T10502] Call Trace: [ 384.862798][T10502] [ 384.862815][T10502] dump_stack_lvl+0xe8/0x150 [ 384.862845][T10502] should_fail_ex+0x467/0x600 [ 384.862875][T10502] should_failslab+0xa8/0x100 [ 384.862895][T10502] __kmalloc_cache_noprof+0xa1/0x670 [ 384.862923][T10502] ? mgmt_pending_new+0x65/0x1e0 [ 384.862945][T10502] ? mgmt_pending_new+0x65/0x1e0 [ 384.862974][T10502] mgmt_pending_new+0x65/0x1e0 [ 384.862996][T10502] ? set_dev_class+0x82/0x5d0 [ 384.863027][T10502] set_dev_class+0x37d/0x5d0 [ 384.863061][T10502] hci_mgmt_cmd+0xa2c/0xfc0 [ 384.863089][T10502] ? mutex_lock_nested+0x152/0x1d0 [ 384.863117][T10502] hci_sock_sendmsg+0x6e1/0xf50 [ 384.863147][T10502] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 384.863181][T10502] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 384.863203][T10502] sock_sendmsg_nosec+0x13a/0x180 [ 384.863228][T10502] sock_write_iter+0x2e4/0x3f0 [ 384.863249][T10502] ? __pfx_sock_write_iter+0x10/0x10 [ 384.863275][T10502] ? bpf_lsm_file_permission+0x9/0x20 [ 384.863302][T10502] ? security_file_permission+0x68/0x220 [ 384.863330][T10502] vfs_write+0x61e/0xbb0 [ 384.863360][T10502] ? __pfx_vfs_write+0x10/0x10 [ 384.863392][T10502] ? __fget_files+0x2a/0x420 [ 384.863419][T10502] ksys_write+0x156/0x270 [ 384.863443][T10502] ? __pfx_ksys_write+0x10/0x10 [ 384.863474][T10502] do_syscall_64+0x17b/0x530 [ 384.863492][T10502] ? irqentry_exit+0x10f/0x8f0 [ 384.863509][T10502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.863528][T10502] ? clear_bhb_loop+0x40/0x90 [ 384.863550][T10502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.863569][T10502] RIP: 0033:0x7ff9971be0d9 [ 384.863587][T10502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.863602][T10502] RSP: 002b:00007ff995416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 384.863621][T10502] RAX: ffffffffffffffda RBX: 00007ff997445fa0 RCX: 00007ff9971be0d9 [ 384.863635][T10502] RDX: 0000000000000008 RSI: 0000200000000000 RDI: 0000000000000005 [ 384.863646][T10502] RBP: 00007ff995416090 R08: 0000000000000000 R09: 0000000000000000 [ 384.863658][T10502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.863669][T10502] R13: 00007ff997446038 R14: 00007ff997445fa0 R15: 00007fffa7866658 [ 384.863699][T10502] [ 384.992880][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 384.998571][ T32] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 384.998598][ T32] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 384.998617][ T32] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 384.998636][ T32] usb 4-1: config 1 has no interface number 0 [ 384.998676][ T32] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 384.998701][ T32] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 384.998738][ T32] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 384.998758][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.110168][ T32] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 385.672616][ T32] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 385.870890][T10509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.031674][ T9] usb 4-1: USB disconnect, device number 102 [ 386.048099][ T9] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 386.579687][T10515] FAULT_INJECTION: forcing a failure. [ 386.579687][T10515] name failslab, interval 1, probability 0, space 0, times 0 [ 386.579722][T10515] CPU: 1 UID: 0 PID: 10515 Comm: syz.0.1457 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 386.579747][T10515] Tainted: [L]=SOFTLOCKUP [ 386.579754][T10515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 386.579764][T10515] Call Trace: [ 386.579771][T10515] [ 386.579779][T10515] dump_stack_lvl+0xe8/0x150 [ 386.579804][T10515] should_fail_ex+0x467/0x600 [ 386.579830][T10515] should_failslab+0xa8/0x100 [ 386.579848][T10515] ? skb_clone+0x212/0x3a0 [ 386.579875][T10515] kmem_cache_alloc_noprof+0x9e/0x680 [ 386.579901][T10515] ? skb_clone+0x212/0x3a0 [ 386.579935][T10515] skb_clone+0x212/0x3a0 [ 386.579967][T10515] __netlink_deliver_tap+0x410/0x880 [ 386.580005][T10515] ? netlink_deliver_tap+0x2e/0x1b0 [ 386.580033][T10515] netlink_deliver_tap+0x19c/0x1b0 [ 386.580063][T10515] netlink_unicast+0x7b8/0x990 [ 386.580099][T10515] netlink_sendmsg+0x813/0xb40 [ 386.580124][T10515] ? lock_acquire+0x115/0x350 [ 386.580159][T10515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.580188][T10515] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 386.580219][T10515] ? __fget_files+0x3a8/0x420 [ 386.580237][T10515] ? __fget_files+0x2a/0x420 [ 386.580257][T10515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.580285][T10515] sock_sendmsg_nosec+0x13a/0x180 [ 386.580308][T10515] __sys_sendto+0x41e/0x5d0 [ 386.580337][T10515] ? __pfx___sys_sendto+0x10/0x10 [ 386.580385][T10515] ? __pfx_ksys_write+0x10/0x10 [ 386.580410][T10515] __x64_sys_sendto+0xde/0x100 [ 386.580439][T10515] do_syscall_64+0x17b/0x530 [ 386.580458][T10515] ? irqentry_exit+0x10f/0x8f0 [ 386.580476][T10515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.580495][T10515] ? clear_bhb_loop+0x40/0x90 [ 386.580518][T10515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.580537][T10515] RIP: 0033:0x7ff9971be0d9 [ 386.580555][T10515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 386.580570][T10515] RSP: 002b:00007ff995416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 386.580591][T10515] RAX: ffffffffffffffda RBX: 00007ff997445fa0 RCX: 00007ff9971be0d9 [ 386.580605][T10515] RDX: 0000000000000068 RSI: 0000200000000000 RDI: 0000000000000003 [ 386.580617][T10515] RBP: 00007ff995416090 R08: 0000000000000000 R09: 0000000000000000 [ 386.580629][T10515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.580641][T10515] R13: 00007ff997446038 R14: 00007ff997445fa0 R15: 00007fffa7866658 [ 386.580671][T10515] [ 387.115543][T10533] FAULT_INJECTION: forcing a failure. [ 387.115543][T10533] name failslab, interval 1, probability 0, space 0, times 0 [ 387.115578][T10533] CPU: 1 UID: 0 PID: 10533 Comm: syz.3.1455 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 387.115604][T10533] Tainted: [L]=SOFTLOCKUP [ 387.115610][T10533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 387.115622][T10533] Call Trace: [ 387.115629][T10533] [ 387.115637][T10533] dump_stack_lvl+0xe8/0x150 [ 387.115667][T10533] should_fail_ex+0x467/0x600 [ 387.115696][T10533] should_failslab+0xa8/0x100 [ 387.115717][T10533] __kmalloc_noprof+0xfb/0x790 [ 387.115743][T10533] ? ip_options_get+0x51/0x570 [ 387.115764][T10533] ? ip_options_get+0x51/0x570 [ 387.115791][T10533] ip_options_get+0x51/0x570 [ 387.115821][T10533] ip_cmsg_send+0x591/0xa70 [ 387.115858][T10533] raw_sendmsg+0x5cd/0x1a20 [ 387.115884][T10533] ? tomoyo_check_inet_address+0x6b5/0x930 [ 387.115917][T10533] ? tomoyo_check_inet_address+0x27f/0x930 [ 387.115943][T10533] ? __pfx_raw_sendmsg+0x10/0x10 [ 387.115963][T10533] ? __lock_acquire+0x6df/0x2e40 [ 387.116018][T10533] ? sock_rps_record_flow+0x19/0x350 [ 387.116043][T10533] ? inet_sendmsg+0x298/0x320 [ 387.116067][T10533] ? __pfx_inet_sendmsg+0x10/0x10 [ 387.116088][T10533] sock_sendmsg_nosec+0x10e/0x180 [ 387.116113][T10533] ____sys_sendmsg+0x565/0x870 [ 387.116149][T10533] ? __pfx_____sys_sendmsg+0x10/0x10 [ 387.116185][T10533] ? import_iovec+0x73/0xa0 [ 387.116217][T10533] ___sys_sendmsg+0x2a5/0x360 [ 387.116243][T10533] ? __lock_acquire+0x6df/0x2e40 [ 387.116265][T10533] ? __pfx____sys_sendmsg+0x10/0x10 [ 387.116324][T10533] ? __fget_files+0x2a/0x420 [ 387.116345][T10533] ? __fget_files+0x3a8/0x420 [ 387.116370][T10533] __x64_sys_sendmsg+0x1b7/0x290 [ 387.116399][T10533] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 387.116444][T10533] do_syscall_64+0x17b/0x530 [ 387.116464][T10533] ? irqentry_exit+0x10f/0x8f0 [ 387.116482][T10533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.116502][T10533] ? clear_bhb_loop+0x40/0x90 [ 387.116525][T10533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.116543][T10533] RIP: 0033:0x7f7f331ee0d9 [ 387.116560][T10533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 387.116577][T10533] RSP: 002b:00007f7f31446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 387.116598][T10533] RAX: ffffffffffffffda RBX: 00007f7f33475fa0 RCX: 00007f7f331ee0d9 [ 387.116612][T10533] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000003 [ 387.116624][T10533] RBP: 00007f7f31446090 R08: 0000000000000000 R09: 0000000000000000 [ 387.116637][T10533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 387.116648][T10533] R13: 00007f7f33476038 R14: 00007f7f33475fa0 R15: 00007ffc4eb83c48 [ 387.116678][T10533] [ 387.249563][ T32] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 387.263023][T10535] input: syz1 as /devices/virtual/input/input28 [ 387.407448][T10538] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.1460'. [ 387.423185][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 387.423231][ T32] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 387.423253][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.451983][ T32] usb 3-1: config 0 descriptor?? [ 387.504236][T10524] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 388.030045][ T32] hid_parser_main: 409 callbacks suppressed [ 388.030071][ T32] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 388.030125][ T32] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 388.030151][ T32] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 388.030177][ T32] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 388.030202][ T32] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 388.030227][ T32] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 388.030251][ T32] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 388.030276][ T32] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 388.030301][ T32] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 388.030325][ T32] asus 0003:0B05:1ABE.0012: unknown main item tag 0x0 [ 388.034850][ T32] asus 0003:0B05:1ABE.0012: unexpected long global item [ 388.035639][ T32] asus 0003:0B05:1ABE.0012: Asus hid parse failed: -22 [ 388.035744][ T32] asus 0003:0B05:1ABE.0012: probe with driver asus failed with error -22 [ 388.171087][T10557] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1466'. [ 388.180725][T10556] syz.0.1461 (10556) used obsolete PPPIOCDETACH ioctl [ 388.191115][T10557] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.226063][ T5322] usb 3-1: USB disconnect, device number 96 [ 388.334139][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1467'. [ 388.605378][T10569] FAULT_INJECTION: forcing a failure. [ 388.605378][T10569] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.605411][T10569] CPU: 1 UID: 0 PID: 10569 Comm: syz.0.1470 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.605430][T10569] Tainted: [L]=SOFTLOCKUP [ 388.605434][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.605443][T10569] Call Trace: [ 388.605449][T10569] [ 388.605455][T10569] dump_stack_lvl+0xe8/0x150 [ 388.605478][T10569] should_fail_ex+0x467/0x600 [ 388.605500][T10569] _copy_from_iter+0x1d3/0x1660 [ 388.605523][T10569] ? trace_kmem_cache_alloc+0x29/0xe0 [ 388.605545][T10569] ? __pfx__copy_from_iter+0x10/0x10 [ 388.605563][T10569] ? __alloc_skb+0x276/0x7a0 [ 388.605579][T10569] ? __alloc_skb+0x276/0x7a0 [ 388.605599][T10569] ? netlink_sendmsg+0x650/0xb40 [ 388.605618][T10569] ? skb_put+0x112/0x210 [ 388.605637][T10569] netlink_sendmsg+0x6c0/0xb40 [ 388.605663][T10569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.605684][T10569] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 388.605707][T10569] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 388.605727][T10569] ? arch_stack_walk+0xfb/0x150 [ 388.605748][T10569] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.605767][T10569] sock_sendmsg_nosec+0x13a/0x180 [ 388.605785][T10569] ____sys_sendmsg+0x565/0x870 [ 388.605811][T10569] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.605837][T10569] ? import_iovec+0x73/0xa0 [ 388.605859][T10569] ___sys_sendmsg+0x2a5/0x360 [ 388.605878][T10569] ? __lock_acquire+0x6df/0x2e40 [ 388.605894][T10569] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.605937][T10569] ? __fget_files+0x2a/0x420 [ 388.605950][T10569] ? __fget_files+0x3a8/0x420 [ 388.605971][T10569] __x64_sys_sendmsg+0x1b7/0x290 [ 388.605993][T10569] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.606026][T10569] do_syscall_64+0x17b/0x530 [ 388.606050][T10569] ? irqentry_exit+0x10f/0x8f0 [ 388.606063][T10569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.606078][T10569] ? clear_bhb_loop+0x40/0x90 [ 388.606096][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.606110][T10569] RIP: 0033:0x7ff9971be0d9 [ 388.606125][T10569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.606138][T10569] RSP: 002b:00007ff995416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.606154][T10569] RAX: ffffffffffffffda RBX: 00007ff997445fa0 RCX: 00007ff9971be0d9 [ 388.606165][T10569] RDX: 0000000000004814 RSI: 0000200000001080 RDI: 0000000000000003 [ 388.606175][T10569] RBP: 00007ff995416090 R08: 0000000000000000 R09: 0000000000000000 [ 388.606183][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.606191][T10569] R13: 00007ff997446038 R14: 00007ff997445fa0 R15: 00007fffa7866658 [ 388.606213][T10569] [ 388.775935][T10572] FAULT_INJECTION: forcing a failure. [ 388.775935][T10572] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 388.775971][T10572] CPU: 1 UID: 0 PID: 10572 Comm: syz.0.1472 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.775998][T10572] Tainted: [L]=SOFTLOCKUP [ 388.776004][T10572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.776015][T10572] Call Trace: [ 388.776030][T10572] [ 388.776038][T10572] dump_stack_lvl+0xe8/0x150 [ 388.776069][T10572] should_fail_ex+0x467/0x600 [ 388.776097][T10572] _copy_to_user+0x31/0xb0 [ 388.776116][T10572] simple_read_from_buffer+0xe1/0x170 [ 388.776140][T10572] proc_fail_nth_read+0x1be/0x230 [ 388.776163][T10572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.776186][T10572] ? rw_verify_area+0x250/0x4d0 [ 388.776209][T10572] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 388.776227][T10572] vfs_read+0x219/0xa90 [ 388.776255][T10572] ? __pfx_vfs_read+0x10/0x10 [ 388.776277][T10572] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 388.776297][T10572] ? lockdep_hardirqs_on+0x7a/0x110 [ 388.776314][T10572] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 388.776332][T10572] ? mutex_lock_nested+0x152/0x1d0 [ 388.776354][T10572] ? fdget_pos+0x252/0x320 [ 388.776380][T10572] ksys_read+0x156/0x270 [ 388.776403][T10572] ? __pfx_ksys_read+0x10/0x10 [ 388.776435][T10572] do_syscall_64+0x17b/0x530 [ 388.776453][T10572] ? irqentry_exit+0x10f/0x8f0 [ 388.776470][T10572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.776489][T10572] ? clear_bhb_loop+0x40/0x90 [ 388.776511][T10572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.776529][T10572] RIP: 0033:0x7ff99717e90e [ 388.776545][T10572] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 388.776560][T10572] RSP: 002b:00007ff995415fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 388.776581][T10572] RAX: ffffffffffffffda RBX: 00007ff9954166c0 RCX: 00007ff99717e90e [ 388.776595][T10572] RDX: 000000000000000f RSI: 00007ff9954160a0 RDI: 0000000000000003 [ 388.776607][T10572] RBP: 00007ff995416090 R08: 0000000000000000 R09: 0000000000000000 [ 388.776618][T10572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.776629][T10572] R13: 00007ff997446038 R14: 00007ff997445fa0 R15: 00007fffa7866658 [ 388.776657][T10572] [ 388.844555][ T9] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 389.107232][T10575] pim6reg1: entered promiscuous mode [ 389.107256][T10575] pim6reg1: entered allmulticast mode [ 389.129506][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 389.167675][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 389.167715][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 389.167738][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.240594][ T9] usb 4-1: config 0 descriptor?? [ 389.665783][ T9] logitech 0003:046D:C295.0013: ignoring exceeding usage max [ 389.806350][ T9] logitech 0003:046D:C295.0013: hidraw0: USB HID v0.81 Device [HID 046d:c295] on usb-dummy_hcd.3-1/input0 [ 389.806402][ T9] logitech 0003:046D:C295.0013: no inputs found [ 389.880944][T10587] FAULT_INJECTION: forcing a failure. [ 389.880944][T10587] name failslab, interval 1, probability 0, space 0, times 0 [ 389.880973][T10587] CPU: 0 UID: 0 PID: 10587 Comm: syz.2.1477 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 389.880992][T10587] Tainted: [L]=SOFTLOCKUP [ 389.880997][T10587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.881005][T10587] Call Trace: [ 389.881011][T10587] [ 389.881017][T10587] dump_stack_lvl+0xe8/0x150 [ 389.881038][T10587] should_fail_ex+0x467/0x600 [ 389.881059][T10587] should_failslab+0xa8/0x100 [ 389.881072][T10587] ? skb_clone+0x212/0x3a0 [ 389.881092][T10587] kmem_cache_alloc_noprof+0x9e/0x680 [ 389.881111][T10587] ? skb_clone+0x212/0x3a0 [ 389.881134][T10587] skb_clone+0x212/0x3a0 [ 389.881156][T10587] __netlink_deliver_tap+0x410/0x880 [ 389.881183][T10587] ? netlink_deliver_tap+0x2e/0x1b0 [ 389.881203][T10587] netlink_deliver_tap+0x19c/0x1b0 [ 389.881224][T10587] netlink_unicast+0x7b8/0x990 [ 389.881249][T10587] netlink_sendmsg+0x813/0xb40 [ 389.881275][T10587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.881296][T10587] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 389.881318][T10587] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 389.881338][T10587] ? arch_stack_walk+0xfb/0x150 [ 389.881360][T10587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 389.881379][T10587] sock_sendmsg_nosec+0x13a/0x180 [ 389.881397][T10587] ____sys_sendmsg+0x565/0x870 [ 389.881423][T10587] ? __pfx_____sys_sendmsg+0x10/0x10 [ 389.881449][T10587] ? import_iovec+0x73/0xa0 [ 389.881471][T10587] ___sys_sendmsg+0x2a5/0x360 [ 389.881489][T10587] ? __lock_acquire+0x6df/0x2e40 [ 389.881506][T10587] ? __pfx____sys_sendmsg+0x10/0x10 [ 389.881553][T10587] ? __fget_files+0x2a/0x420 [ 389.881566][T10587] ? __fget_files+0x3a8/0x420 [ 389.881586][T10587] __x64_sys_sendmsg+0x1b7/0x290 [ 389.881607][T10587] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 389.881640][T10587] do_syscall_64+0x17b/0x530 [ 389.881655][T10587] ? irqentry_exit+0x10f/0x8f0 [ 389.881667][T10587] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.881681][T10587] ? clear_bhb_loop+0x40/0x90 [ 389.881698][T10587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.881711][T10587] RIP: 0033:0x7fe019c6e0d9 [ 389.881725][T10587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.881738][T10587] RSP: 002b:00007fe017ec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 389.881752][T10587] RAX: ffffffffffffffda RBX: 00007fe019ef5fa0 RCX: 00007fe019c6e0d9 [ 389.881762][T10587] RDX: 0000000020008000 RSI: 0000200000000200 RDI: 0000000000000003 [ 389.881771][T10587] RBP: 00007fe017ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 389.881779][T10587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.881787][T10587] R13: 00007fe019ef6038 R14: 00007fe019ef5fa0 R15: 00007ffff5e38438 [ 389.881809][T10587] [ 389.882216][T10587] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1477'. [ 390.221117][ T9] usb 4-1: USB disconnect, device number 103 [ 390.461859][T10588] fido_id[10588]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 391.069540][ T5694] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 391.258220][ T5694] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 391.258268][ T5694] usb 4-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 391.258291][ T5694] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.268597][ T5694] usb 4-1: config 0 descriptor?? [ 391.280863][T10600] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 391.426025][T10619] FAULT_INJECTION: forcing a failure. [ 391.426025][T10619] name failslab, interval 1, probability 0, space 0, times 0 [ 391.426059][T10619] CPU: 0 UID: 0 PID: 10619 Comm: syz.2.1488 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 391.426085][T10619] Tainted: [L]=SOFTLOCKUP [ 391.426091][T10619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.426103][T10619] Call Trace: [ 391.426110][T10619] [ 391.426118][T10619] dump_stack_lvl+0xe8/0x150 [ 391.426145][T10619] should_fail_ex+0x467/0x600 [ 391.426183][T10619] should_failslab+0xa8/0x100 [ 391.426201][T10619] ? skb_clone+0x212/0x3a0 [ 391.426229][T10619] kmem_cache_alloc_noprof+0x9e/0x680 [ 391.426256][T10619] ? skb_clone+0x212/0x3a0 [ 391.426289][T10619] skb_clone+0x212/0x3a0 [ 391.426321][T10619] __netlink_deliver_tap+0x410/0x880 [ 391.426359][T10619] ? netlink_deliver_tap+0x2e/0x1b0 [ 391.426389][T10619] netlink_deliver_tap+0x19c/0x1b0 [ 391.426418][T10619] netlink_unicast+0x7b8/0x990 [ 391.426473][T10619] netlink_sendmsg+0x813/0xb40 [ 391.426508][T10619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.426548][T10619] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 391.426628][T10619] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 391.426656][T10619] ? arch_stack_walk+0xfb/0x150 [ 391.426687][T10619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.426714][T10619] sock_sendmsg_nosec+0x13a/0x180 [ 391.426745][T10619] ____sys_sendmsg+0x565/0x870 [ 391.426788][T10619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.426828][T10619] ? import_iovec+0x73/0xa0 [ 391.426867][T10619] ___sys_sendmsg+0x2a5/0x360 [ 391.426894][T10619] ? __lock_acquire+0x6df/0x2e40 [ 391.426916][T10619] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.426980][T10619] ? __fget_files+0x2a/0x420 [ 391.427000][T10619] ? __fget_files+0x3a8/0x420 [ 391.427029][T10619] __x64_sys_sendmsg+0x1b7/0x290 [ 391.427060][T10619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.427105][T10619] do_syscall_64+0x17b/0x530 [ 391.427125][T10619] ? irqentry_exit+0x10f/0x8f0 [ 391.427143][T10619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.427170][T10619] ? clear_bhb_loop+0x40/0x90 [ 391.427193][T10619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.427212][T10619] RIP: 0033:0x7fe019c6e0d9 [ 391.427248][T10619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.427264][T10619] RSP: 002b:00007fe017ec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.427284][T10619] RAX: ffffffffffffffda RBX: 00007fe019ef5fa0 RCX: 00007fe019c6e0d9 [ 391.427298][T10619] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 391.427310][T10619] RBP: 00007fe017ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 391.427322][T10619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.427333][T10619] R13: 00007fe019ef6038 R14: 00007fe019ef5fa0 R15: 00007ffff5e38438 [ 391.427363][T10619] [ 391.892378][ T5694] asus 0003:0B05:1ABE.0014: unexpected long global item [ 391.892994][ T5694] asus 0003:0B05:1ABE.0014: Asus hid parse failed: -22 [ 391.893091][ T5694] asus 0003:0B05:1ABE.0014: probe with driver asus failed with error -22 [ 392.045597][ T5694] usb 4-1: USB disconnect, device number 104 [ 392.195935][T10631] FAULT_INJECTION: forcing a failure. [ 392.195935][T10631] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 392.195965][T10631] CPU: 0 UID: 0 PID: 10631 Comm: syz.0.1492 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 392.195984][T10631] Tainted: [L]=SOFTLOCKUP [ 392.195989][T10631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.195997][T10631] Call Trace: [ 392.196003][T10631] [ 392.196009][T10631] dump_stack_lvl+0xe8/0x150 [ 392.196032][T10631] should_fail_ex+0x467/0x600 [ 392.196055][T10631] _copy_from_iter+0x1d3/0x1660 [ 392.196079][T10631] ? trace_kmem_cache_alloc+0x29/0xe0 [ 392.196104][T10631] ? __pfx__copy_from_iter+0x10/0x10 [ 392.196122][T10631] ? __alloc_skb+0x276/0x7a0 [ 392.196138][T10631] ? __alloc_skb+0x276/0x7a0 [ 392.196158][T10631] ? netlink_sendmsg+0x650/0xb40 [ 392.196179][T10631] ? skb_put+0x112/0x210 [ 392.196199][T10631] netlink_sendmsg+0x6c0/0xb40 [ 392.196226][T10631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.196257][T10631] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 392.196282][T10631] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 392.196302][T10631] ? arch_stack_walk+0xfb/0x150 [ 392.196324][T10631] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.196344][T10631] sock_sendmsg_nosec+0x13a/0x180 [ 392.196362][T10631] ____sys_sendmsg+0x565/0x870 [ 392.196389][T10631] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.196415][T10631] ? import_iovec+0x73/0xa0 [ 392.196437][T10631] ___sys_sendmsg+0x2a5/0x360 [ 392.196456][T10631] ? __lock_acquire+0x6df/0x2e40 [ 392.196473][T10631] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.196517][T10631] ? __fget_files+0x2a/0x420 [ 392.196531][T10631] ? __fget_files+0x3a8/0x420 [ 392.196552][T10631] __x64_sys_sendmsg+0x1b7/0x290 [ 392.196574][T10631] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 392.196607][T10631] do_syscall_64+0x17b/0x530 [ 392.196622][T10631] ? irqentry_exit+0x10f/0x8f0 [ 392.196635][T10631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.196649][T10631] ? clear_bhb_loop+0x40/0x90 [ 392.196666][T10631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.196680][T10631] RIP: 0033:0x7ff9971be0d9 [ 392.196694][T10631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.196706][T10631] RSP: 002b:00007ff9953f5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.196722][T10631] RAX: ffffffffffffffda RBX: 00007ff997446090 RCX: 00007ff9971be0d9 [ 392.196733][T10631] RDX: 0000000004008014 RSI: 0000200000000240 RDI: 0000000000000003 [ 392.196742][T10631] RBP: 00007ff9953f5090 R08: 0000000000000000 R09: 0000000000000000 [ 392.196752][T10631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.196761][T10631] R13: 00007ff997446128 R14: 00007ff997446090 R15: 00007fffa7866658 [ 392.196783][T10631] [ 392.949668][ T9] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 393.099788][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 393.118211][ T9] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 393.118247][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.118265][ T9] usb 1-1: Product: 栀 [ 393.118278][ T9] usb 1-1: Manufacturer: ю [ 393.118291][ T9] usb 1-1: SerialNumber: syz [ 393.199268][T10648] netlink: 'syz.2.1498': attribute type 21 has an invalid length. [ 393.199282][T10648] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1498'. [ 393.311541][T10653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 393.389833][T10648] netlink: 'syz.2.1498': attribute type 4 has an invalid length. [ 393.389854][T10648] netlink: 'syz.2.1498': attribute type 5 has an invalid length. [ 393.389867][T10648] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1498'. [ 393.392895][ T9] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 393.392923][ T9] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 393.394070][ T9] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 393.394981][ T9] usb 1-1: unit 3 not found! [ 393.470928][T10657] FAULT_INJECTION: forcing a failure. [ 393.470928][T10657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.470963][T10657] CPU: 1 UID: 0 PID: 10657 Comm: syz.3.1501 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 393.470989][T10657] Tainted: [L]=SOFTLOCKUP [ 393.470996][T10657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.471006][T10657] Call Trace: [ 393.471014][T10657] [ 393.471022][T10657] dump_stack_lvl+0xe8/0x150 [ 393.471050][T10657] should_fail_ex+0x467/0x600 [ 393.471080][T10657] _copy_from_iter+0x1d3/0x1660 [ 393.471112][T10657] ? trace_kmem_cache_alloc+0x29/0xe0 [ 393.471141][T10657] ? __pfx__copy_from_iter+0x10/0x10 [ 393.471165][T10657] ? __alloc_skb+0x276/0x7a0 [ 393.471188][T10657] ? __alloc_skb+0x276/0x7a0 [ 393.471217][T10657] ? netlink_sendmsg+0x650/0xb40 [ 393.471245][T10657] ? skb_put+0x112/0x210 [ 393.471271][T10657] netlink_sendmsg+0x6c0/0xb40 [ 393.471307][T10657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.471337][T10657] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 393.471368][T10657] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 393.471395][T10657] ? arch_stack_walk+0xfb/0x150 [ 393.471427][T10657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 393.471453][T10657] sock_sendmsg_nosec+0x13a/0x180 [ 393.471477][T10657] ____sys_sendmsg+0x565/0x870 [ 393.471520][T10657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 393.471556][T10657] ? import_iovec+0x73/0xa0 [ 393.471587][T10657] ___sys_sendmsg+0x2a5/0x360 [ 393.471613][T10657] ? __lock_acquire+0x6df/0x2e40 [ 393.471635][T10657] ? __pfx____sys_sendmsg+0x10/0x10 [ 393.471693][T10657] ? __fget_files+0x2a/0x420 [ 393.471712][T10657] ? __fget_files+0x3a8/0x420 [ 393.471740][T10657] __x64_sys_sendmsg+0x1b7/0x290 [ 393.471768][T10657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 393.471814][T10657] do_syscall_64+0x17b/0x530 [ 393.471833][T10657] ? irqentry_exit+0x10f/0x8f0 [ 393.471850][T10657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.471869][T10657] ? clear_bhb_loop+0x40/0x90 [ 393.471892][T10657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.471910][T10657] RIP: 0033:0x7f7f331ee0d9 [ 393.471927][T10657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.471943][T10657] RSP: 002b:00007f7f31446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 393.471963][T10657] RAX: ffffffffffffffda RBX: 00007f7f33475fa0 RCX: 00007f7f331ee0d9 [ 393.471977][T10657] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 393.471988][T10657] RBP: 00007f7f31446090 R08: 0000000000000000 R09: 0000000000000000 [ 393.472000][T10657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.472011][T10657] R13: 00007f7f33476038 R14: 00007f7f33475fa0 R15: 00007ffc4eb83c48 [ 393.472040][T10657] [ 393.809246][ T9] usb 1-1: USB disconnect, device number 113 [ 393.844651][T10665] FAULT_INJECTION: forcing a failure. [ 393.844651][T10665] name failslab, interval 1, probability 0, space 0, times 0 [ 393.844686][T10665] CPU: 1 UID: 0 PID: 10665 Comm: syz.2.1505 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 393.844712][T10665] Tainted: [L]=SOFTLOCKUP [ 393.844718][T10665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.844728][T10665] Call Trace: [ 393.844735][T10665] [ 393.844744][T10665] dump_stack_lvl+0xe8/0x150 [ 393.844776][T10665] should_fail_ex+0x467/0x600 [ 393.844806][T10665] should_failslab+0xa8/0x100 [ 393.844825][T10665] __kmalloc_noprof+0xfb/0x790 [ 393.844849][T10665] ? __lock_acquire+0x6df/0x2e40 [ 393.844866][T10665] ? ioctl_standard_iw_point+0x542/0xdc0 [ 393.844891][T10665] ? ioctl_standard_iw_point+0x542/0xdc0 [ 393.844920][T10665] ioctl_standard_iw_point+0x542/0xdc0 [ 393.844957][T10665] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 393.844979][T10665] ? __pfx_ioctl_standard_iw_point+0x10/0x10 [ 393.845011][T10665] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 393.845029][T10665] ? lockdep_hardirqs_on+0x7a/0x110 [ 393.845049][T10665] ioctl_standard_call+0xa6/0x160 [ 393.845072][T10665] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 393.845093][T10665] ? __pfx_ioctl_standard_call+0x10/0x10 [ 393.845119][T10665] ? __pfx_cfg80211_wext_siwencodeext+0x10/0x10 [ 393.845140][T10665] wext_ioctl_dispatch+0xee/0x410 [ 393.845163][T10665] ? __pfx_ioctl_standard_call+0x10/0x10 [ 393.845191][T10665] wext_handle_ioctl+0x110/0x1d0 [ 393.845217][T10665] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 393.845255][T10665] sock_ioctl+0x15c/0x7f0 [ 393.845277][T10665] ? __pfx_sock_ioctl+0x10/0x10 [ 393.845299][T10665] ? __fget_files+0x3a8/0x420 [ 393.845318][T10665] ? __fget_files+0x2a/0x420 [ 393.845339][T10665] ? bpf_lsm_file_ioctl+0x9/0x20 [ 393.845367][T10665] ? __pfx_sock_ioctl+0x10/0x10 [ 393.845386][T10665] __se_sys_ioctl+0xff/0x170 [ 393.845413][T10665] do_syscall_64+0x17b/0x530 [ 393.845432][T10665] ? irqentry_exit+0x10f/0x8f0 [ 393.845449][T10665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.845476][T10665] ? clear_bhb_loop+0x40/0x90 [ 393.845499][T10665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.845517][T10665] RIP: 0033:0x7fe019c6e0d9 [ 393.845536][T10665] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.845551][T10665] RSP: 002b:00007fe017ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.845572][T10665] RAX: ffffffffffffffda RBX: 00007fe019ef5fa0 RCX: 00007fe019c6e0d9 [ 393.845587][T10665] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000003 [ 393.845599][T10665] RBP: 00007fe017ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.845610][T10665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.845621][T10665] R13: 00007fe019ef6038 R14: 00007fe019ef5fa0 R15: 00007ffff5e38438 [ 393.845651][T10665] [ 393.982217][ T32] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 394.149524][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 394.171699][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 394.175051][ T32] usb 4-1: config 1 has an invalid interface number: 242 but max is 2 [ 394.175080][ T32] usb 4-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 394.175100][ T32] usb 4-1: config 1 has no interface number 3 [ 394.175184][ T32] usb 4-1: config 1 interface 1 has no altsetting 0 [ 394.182926][ T32] usb 4-1: New USB device found, idVendor=0499, idProduct=1509, bcdDevice= 0.40 [ 394.182954][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.182972][ T32] usb 4-1: Product: syz [ 394.182985][ T32] usb 4-1: Manufacturer: syz [ 394.182997][ T32] usb 4-1: SerialNumber: syz [ 394.370572][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.466329][T10663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.467298][T10663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.090229][ T9] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 395.101648][ T32] usb 4-1: 1:1 : unsupported format bits 0x2004 [ 395.101715][ T32] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 395.105335][ T32] usb 4-1: selecting invalid altsetting 0 [ 395.141739][ T32] usb 4-1: selecting invalid altsetting 0 [ 395.141767][ T32] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 395.219616][ T9] usb 3-1: device descriptor read/64, error -71 [ 395.241708][T10700] FAULT_INJECTION: forcing a failure. [ 395.241708][T10700] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.241743][T10700] CPU: 1 UID: 0 PID: 10700 Comm: syz.3.1513 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 395.241769][T10700] Tainted: [L]=SOFTLOCKUP [ 395.241776][T10700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.241787][T10700] Call Trace: [ 395.241794][T10700] [ 395.241803][T10700] dump_stack_lvl+0xe8/0x150 [ 395.241832][T10700] should_fail_ex+0x467/0x600 [ 395.241862][T10700] _copy_from_iter+0x1d3/0x1660 [ 395.241900][T10700] ? trace_kmem_cache_alloc+0x29/0xe0 [ 395.241928][T10700] ? __pfx__copy_from_iter+0x10/0x10 [ 395.241952][T10700] ? __alloc_skb+0x276/0x7a0 [ 395.241974][T10700] ? __alloc_skb+0x276/0x7a0 [ 395.242003][T10700] ? netlink_sendmsg+0x650/0xb40 [ 395.242044][T10700] ? skb_put+0x112/0x210 [ 395.242071][T10700] netlink_sendmsg+0x6c0/0xb40 [ 395.242109][T10700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.242139][T10700] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 395.242171][T10700] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 395.242200][T10700] ? arch_stack_walk+0xfb/0x150 [ 395.242231][T10700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.242258][T10700] sock_sendmsg_nosec+0x13a/0x180 [ 395.242282][T10700] ____sys_sendmsg+0x565/0x870 [ 395.242318][T10700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.242357][T10700] ? import_iovec+0x73/0xa0 [ 395.242389][T10700] ___sys_sendmsg+0x2a5/0x360 [ 395.242415][T10700] ? __lock_acquire+0x6df/0x2e40 [ 395.242436][T10700] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.242497][T10700] ? __fget_files+0x2a/0x420 [ 395.242522][T10700] ? __fget_files+0x3a8/0x420 [ 395.242550][T10700] __x64_sys_sendmsg+0x1b7/0x290 [ 395.242581][T10700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.242626][T10700] do_syscall_64+0x17b/0x530 [ 395.242646][T10700] ? irqentry_exit+0x10f/0x8f0 [ 395.242663][T10700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.242688][T10700] ? clear_bhb_loop+0x40/0x90 [ 395.242711][T10700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.242729][T10700] RIP: 0033:0x7f7f331ee0d9 [ 395.242747][T10700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.242763][T10700] RSP: 002b:00007f7f31446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.242784][T10700] RAX: ffffffffffffffda RBX: 00007f7f33475fa0 RCX: 00007f7f331ee0d9 [ 395.242798][T10700] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 395.242809][T10700] RBP: 00007f7f31446090 R08: 0000000000000000 R09: 0000000000000000 [ 395.242821][T10700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.242833][T10700] R13: 00007f7f33476038 R14: 00007f7f33475fa0 R15: 00007ffc4eb83c48 [ 395.242862][T10700] [ 395.549553][ T9] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 395.592944][T10710] FAULT_INJECTION: forcing a failure. [ 395.592944][T10710] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.592969][T10710] CPU: 1 UID: 0 PID: 10710 Comm: syz.0.1518 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 395.592983][T10710] Tainted: [L]=SOFTLOCKUP [ 395.592987][T10710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.592994][T10710] Call Trace: [ 395.592998][T10710] [ 395.593002][T10710] dump_stack_lvl+0xe8/0x150 [ 395.593020][T10710] should_fail_ex+0x467/0x600 [ 395.593036][T10710] _copy_from_iter+0x1d3/0x1660 [ 395.593053][T10710] ? trace_kmem_cache_alloc+0x29/0xe0 [ 395.593069][T10710] ? __pfx__copy_from_iter+0x10/0x10 [ 395.593082][T10710] ? __alloc_skb+0x276/0x7a0 [ 395.593094][T10710] ? __alloc_skb+0x276/0x7a0 [ 395.593109][T10710] ? netlink_sendmsg+0x650/0xb40 [ 395.593124][T10710] ? skb_put+0x112/0x210 [ 395.593137][T10710] netlink_sendmsg+0x6c0/0xb40 [ 395.593155][T10710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.593171][T10710] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 395.593188][T10710] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 395.593203][T10710] ? arch_stack_walk+0xfb/0x150 [ 395.593219][T10710] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.593233][T10710] sock_sendmsg_nosec+0x13a/0x180 [ 395.593245][T10710] ____sys_sendmsg+0x565/0x870 [ 395.593263][T10710] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.593281][T10710] ? import_iovec+0x73/0xa0 [ 395.593297][T10710] ___sys_sendmsg+0x2a5/0x360 [ 395.593310][T10710] ? __lock_acquire+0x6df/0x2e40 [ 395.593321][T10710] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.593355][T10710] ? __fget_files+0x2a/0x420 [ 395.593365][T10710] ? __fget_files+0x3a8/0x420 [ 395.593379][T10710] __x64_sys_sendmsg+0x1b7/0x290 [ 395.593394][T10710] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 395.593417][T10710] do_syscall_64+0x17b/0x530 [ 395.593427][T10710] ? irqentry_exit+0x10f/0x8f0 [ 395.593436][T10710] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.593446][T10710] ? clear_bhb_loop+0x40/0x90 [ 395.593458][T10710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.593467][T10710] RIP: 0033:0x7ff9971be0d9 [ 395.593477][T10710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.593486][T10710] RSP: 002b:00007ff995416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.593497][T10710] RAX: ffffffffffffffda RBX: 00007ff997445fa0 RCX: 00007ff9971be0d9 [ 395.593504][T10710] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 395.593510][T10710] RBP: 00007ff995416090 R08: 0000000000000000 R09: 0000000000000000 [ 395.593516][T10710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.593522][T10710] R13: 00007ff997446038 R14: 00007ff997445fa0 R15: 00007fffa7866658 [ 395.593536][T10710] [ 395.709526][ T9] usb 3-1: device descriptor read/64, error -71 [ 395.830334][T10716] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.1519'. [ 395.830361][T10716] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.1519'. [ 395.839970][ T9] usb usb3-port1: attempt power cycle [ 396.155102][T10723] netlink: 80 bytes leftover after parsing attributes in process `syz.1.1521'. [ 396.200627][ T9] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 396.221530][ T9] usb 3-1: device descriptor read/8, error -71 [ 396.308761][T10729] tipc: Enabling of bearer rejected, failed to enable media [ 396.479784][ T9] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 396.503208][ T9] usb 3-1: device descriptor read/8, error -71 [ 396.570306][ T32] usb 4-1: USB disconnect, device number 105 [ 396.610087][ T9] usb usb3-port1: unable to enumerate USB device [ 396.851479][ T6407] udevd[6407]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.031431][T10751] FAULT_INJECTION: forcing a failure. [ 397.031431][T10751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.031454][T10751] CPU: 0 UID: 0 PID: 10751 Comm: syz.0.1528 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 397.031468][T10751] Tainted: [L]=SOFTLOCKUP [ 397.031472][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.031478][T10751] Call Trace: [ 397.031482][T10751] [ 397.031487][T10751] dump_stack_lvl+0xe8/0x150 [ 397.031502][T10751] should_fail_ex+0x467/0x600 [ 397.031518][T10751] _copy_from_iter+0x1d3/0x1660 [ 397.031535][T10751] ? trace_kmem_cache_alloc+0x29/0xe0 [ 397.031551][T10751] ? __pfx__copy_from_iter+0x10/0x10 [ 397.031563][T10751] ? __alloc_skb+0x276/0x7a0 [ 397.031575][T10751] ? __alloc_skb+0x276/0x7a0 [ 397.031589][T10751] ? netlink_sendmsg+0x650/0xb40 [ 397.031603][T10751] ? skb_put+0x112/0x210 [ 397.031617][T10751] netlink_sendmsg+0x6c0/0xb40 [ 397.031635][T10751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.031651][T10751] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 397.031668][T10751] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 397.031683][T10751] ? arch_stack_walk+0xfb/0x150 [ 397.031699][T10751] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.031713][T10751] sock_sendmsg_nosec+0x13a/0x180 [ 397.031725][T10751] ____sys_sendmsg+0x565/0x870 [ 397.031742][T10751] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.031760][T10751] ? import_iovec+0x73/0xa0 [ 397.031776][T10751] ___sys_sendmsg+0x2a5/0x360 [ 397.031789][T10751] ? __lock_acquire+0x6df/0x2e40 [ 397.031801][T10751] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.031830][T10751] ? __fget_files+0x2a/0x420 [ 397.031840][T10751] ? __fget_files+0x3a8/0x420 [ 397.031854][T10751] __x64_sys_sendmsg+0x1b7/0x290 [ 397.031869][T10751] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.031892][T10751] do_syscall_64+0x17b/0x530 [ 397.031902][T10751] ? irqentry_exit+0x10f/0x8f0 [ 397.031911][T10751] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.031921][T10751] ? clear_bhb_loop+0x40/0x90 [ 397.031936][T10751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.031946][T10751] RIP: 0033:0x7ff9971be0d9 [ 397.031956][T10751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.031965][T10751] RSP: 002b:00007ff995416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.031976][T10751] RAX: ffffffffffffffda RBX: 00007ff997445fa0 RCX: 00007ff9971be0d9 [ 397.031983][T10751] RDX: 0000000020008894 RSI: 0000200000000000 RDI: 0000000000000003 [ 397.031990][T10751] RBP: 00007ff995416090 R08: 0000000000000000 R09: 0000000000000000 [ 397.031995][T10751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.032001][T10751] R13: 00007ff997446038 R14: 00007ff997445fa0 R15: 00007fffa7866658 [ 397.032016][T10751] [ 397.119665][ T32] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 397.269482][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 397.275160][ T32] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 397.275189][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.275206][ T32] usb 4-1: Product: 栀 [ 397.275219][ T32] usb 4-1: Manufacturer: ю [ 397.275232][ T32] usb 4-1: SerialNumber: syz [ 397.523049][ T32] usb 4-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 397.523080][ T32] usb 4-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 397.523936][ T32] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 397.532666][ T32] usb 4-1: unit 3 not found! [ 397.667903][ T32] usb 4-1: USB disconnect, device number 106 [ 397.918798][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 398.277151][T10769] netlink: 'syz.3.1535': attribute type 4 has an invalid length. [ 398.389346][T10772] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1535'. [ 398.721619][T10784] overlayfs: overlapping lowerdir path [ 398.766810][T10785] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1540'. [ 398.898596][T10796] FAULT_INJECTION: forcing a failure. [ 398.898596][T10796] name failslab, interval 1, probability 0, space 0, times 0 [ 398.898627][T10796] CPU: 1 UID: 0 PID: 10796 Comm: syz.2.1543 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 398.898651][T10796] Tainted: [L]=SOFTLOCKUP [ 398.898657][T10796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.898668][T10796] Call Trace: [ 398.898674][T10796] [ 398.898681][T10796] dump_stack_lvl+0xe8/0x150 [ 398.898712][T10796] should_fail_ex+0x467/0x600 [ 398.898739][T10796] should_failslab+0xa8/0x100 [ 398.898756][T10796] ? dst_alloc+0x105/0x170 [ 398.898774][T10796] kmem_cache_alloc_noprof+0x9e/0x680 [ 398.898798][T10796] ? dst_alloc+0x105/0x170 [ 398.898819][T10796] dst_alloc+0x105/0x170 [ 398.898838][T10796] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 398.898870][T10796] ? ip_route_output_key_hash+0xd8/0x2a0 [ 398.898894][T10796] ip_route_output_key_hash+0x18d/0x2a0 [ 398.898921][T10796] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 398.898945][T10796] ? lock_acquire+0x115/0x350 [ 398.898979][T10796] ip_route_output_flow+0x2a/0x150 [ 398.898997][T10796] ? security_sk_classify_flow+0x60/0x130 [ 398.899020][T10796] udp_sendmsg+0x144a/0x2140 [ 398.899056][T10796] ? __pfx_udp_sendmsg+0x10/0x10 [ 398.899085][T10796] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 398.899129][T10796] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 398.899157][T10796] ? lockdep_hardirqs_on+0x7a/0x110 [ 398.899181][T10796] ? inet_sendmsg+0x23e/0x320 [ 398.899207][T10796] ? __pfx_inet_sendmsg+0x10/0x10 [ 398.899228][T10796] sock_sendmsg_nosec+0x10e/0x180 [ 398.899252][T10796] ____sys_sendmsg+0x565/0x870 [ 398.899286][T10796] ? __pfx_____sys_sendmsg+0x10/0x10 [ 398.899319][T10796] ? import_iovec+0x73/0xa0 [ 398.899350][T10796] ___sys_sendmsg+0x2a5/0x360 [ 398.899373][T10796] ? __lock_acquire+0x6df/0x2e40 [ 398.899391][T10796] ? __pfx____sys_sendmsg+0x10/0x10 [ 398.899443][T10796] ? __fget_files+0x2a/0x420 [ 398.899461][T10796] ? __fget_files+0x3a8/0x420 [ 398.899497][T10796] __x64_sys_sendmsg+0x1b7/0x290 [ 398.899524][T10796] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 398.899564][T10796] do_syscall_64+0x17b/0x530 [ 398.899581][T10796] ? irqentry_exit+0x10f/0x8f0 [ 398.899598][T10796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.899615][T10796] ? clear_bhb_loop+0x40/0x90 [ 398.899635][T10796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.899647][T10796] RIP: 0033:0x7fe019c6e0d9 [ 398.899660][T10796] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.899669][T10796] RSP: 002b:00007fe017ec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 398.899680][T10796] RAX: ffffffffffffffda RBX: 00007fe019ef5fa0 RCX: 00007fe019c6e0d9 [ 398.899688][T10796] RDX: 0000000020000890 RSI: 0000200000000380 RDI: 0000000000000003 [ 398.899694][T10796] RBP: 00007fe017ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 398.899700][T10796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 398.899706][T10796] R13: 00007fe019ef6038 R14: 00007fe019ef5fa0 R15: 00007ffff5e38438 [ 398.899721][T10796] [ 399.128740][ T5679] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 399.324069][ T5679] usb 1-1: Using ep0 maxpacket: 8 [ 399.331229][ T5679] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 399.331265][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.331283][ T5679] usb 1-1: Product: 栀 [ 399.331296][ T5679] usb 1-1: Manufacturer: ю [ 399.331309][ T5679] usb 1-1: SerialNumber: syz [ 399.527946][T10804] tipc: Started in network mode [ 399.527991][T10804] tipc: Node identity c2b03906f91, cluster identity 4711 [ 399.528303][T10804] tipc: Enabled bearer , priority 0 [ 399.529702][T10800] syzkaller0: entered promiscuous mode [ 399.529724][T10800] syzkaller0: entered allmulticast mode [ 399.648776][T10801] syzkaller0: mtu less than device minimum [ 399.657193][ T5679] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 399.657239][ T5679] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 399.658935][ T5679] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 399.660012][ T5679] usb 1-1: unit 3 not found! [ 399.770728][T10799] tipc: Resetting bearer [ 399.808971][ T5679] usb 1-1: USB disconnect, device number 114 [ 399.938098][T10799] tipc: Disabling bearer [ 399.997536][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 400.104252][T10816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1550'. [ 400.259571][ T32] usb 4-1: new low-speed USB device number 107 using dummy_hcd [ 400.413491][ T32] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 400.413524][ T32] usb 4-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 400.413550][ T32] usb 4-1: config 0 interface 0 has no altsetting 0 [ 400.912005][T10831] tipc: Enabled bearer , priority 0 [ 400.913559][T10830] syzkaller0: entered promiscuous mode [ 400.913592][T10830] syzkaller0: entered allmulticast mode [ 401.057413][T10831] tipc: Resetting bearer [ 401.219811][T10826] tipc: Resetting bearer [ 401.385049][T10826] tipc: Disabling bearer [ 402.106820][T10838] FAULT_INJECTION: forcing a failure. [ 402.106820][T10838] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.106857][T10838] CPU: 1 UID: 0 PID: 10838 Comm: syz.0.1558 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 402.106886][T10838] Tainted: [L]=SOFTLOCKUP [ 402.106892][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 402.106903][T10838] Call Trace: [ 402.106909][T10838] [ 402.106916][T10838] dump_stack_lvl+0xe8/0x150 [ 402.106941][T10838] should_fail_ex+0x467/0x600 [ 402.106968][T10838] _copy_from_iter+0x1d3/0x1660 [ 402.106996][T10838] ? trace_kmem_cache_alloc+0x29/0xe0 [ 402.107025][T10838] ? __pfx__copy_from_iter+0x10/0x10 [ 402.107048][T10838] ? __alloc_skb+0x276/0x7a0 [ 402.107069][T10838] ? __alloc_skb+0x276/0x7a0 [ 402.107097][T10838] ? netlink_sendmsg+0x650/0xb40 [ 402.107121][T10838] ? skb_put+0x112/0x210 [ 402.107147][T10838] netlink_sendmsg+0x6c0/0xb40 [ 402.107180][T10838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.107208][T10838] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 402.107241][T10838] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 402.107270][T10838] ? arch_stack_walk+0xfb/0x150 [ 402.107301][T10838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 402.107329][T10838] sock_sendmsg_nosec+0x13a/0x180 [ 402.107353][T10838] ____sys_sendmsg+0x565/0x870 [ 402.107389][T10838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 402.107426][T10838] ? import_iovec+0x73/0xa0 [ 402.107457][T10838] ___sys_sendmsg+0x2a5/0x360 [ 402.107483][T10838] ? __lock_acquire+0x6df/0x2e40 [ 402.107505][T10838] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.107566][T10838] ? __fget_files+0x2a/0x420 [ 402.107584][T10838] ? __fget_files+0x3a8/0x420 [ 402.107622][T10838] __x64_sys_sendmsg+0x1b7/0x290 [ 402.107652][T10838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 402.107698][T10838] do_syscall_64+0x17b/0x530 [ 402.107718][T10838] ? irqentry_exit+0x10f/0x8f0 [ 402.107736][T10838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.107755][T10838] ? clear_bhb_loop+0x40/0x90 [ 402.107778][T10838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.107797][T10838] RIP: 0033:0x7ff9971be0d9 [ 402.107814][T10838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 402.107830][T10838] RSP: 002b:00007ff995416028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 402.107850][T10838] RAX: ffffffffffffffda RBX: 00007ff997445fa0 RCX: 00007ff9971be0d9 [ 402.107864][T10838] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 402.107876][T10838] RBP: 00007ff995416090 R08: 0000000000000000 R09: 0000000000000000 [ 402.107888][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.107900][T10838] R13: 00007ff997446038 R14: 00007ff997445fa0 R15: 00007fffa7866658 [ 402.107929][T10838] [ 403.213459][ T32] usb 4-1: New USB device found, idVendor=056a, idProduct=10ed, bcdDevice=e9.00 [ 403.213479][ T32] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=255 [ 403.232697][ T32] usb 4-1: config 0 descriptor?? [ 403.387532][ T32] usb 4-1: can't set config #0, error -71 [ 403.405474][ T32] usb 4-1: USB disconnect, device number 107 [ 403.464045][T10845] 9p: Bad value for 'rfdno' [ 403.631494][T10847] FAULT_INJECTION: forcing a failure. [ 403.631494][T10847] name failslab, interval 1, probability 0, space 0, times 0 [ 403.631528][T10847] CPU: 0 UID: 0 PID: 10847 Comm: syz.3.1561 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 403.631554][T10847] Tainted: [L]=SOFTLOCKUP [ 403.631560][T10847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.631572][T10847] Call Trace: [ 403.631579][T10847] [ 403.631587][T10847] dump_stack_lvl+0xe8/0x150 [ 403.631614][T10847] should_fail_ex+0x467/0x600 [ 403.631642][T10847] should_failslab+0xa8/0x100 [ 403.631661][T10847] ? skb_clone+0x212/0x3a0 [ 403.631689][T10847] kmem_cache_alloc_noprof+0x9e/0x680 [ 403.631717][T10847] ? skb_clone+0x212/0x3a0 [ 403.631753][T10847] skb_clone+0x212/0x3a0 [ 403.631784][T10847] __netlink_deliver_tap+0x410/0x880 [ 403.631822][T10847] ? netlink_deliver_tap+0x2e/0x1b0 [ 403.631852][T10847] netlink_deliver_tap+0x19c/0x1b0 [ 403.631881][T10847] netlink_unicast+0x7b8/0x990 [ 403.631917][T10847] netlink_sendmsg+0x813/0xb40 [ 403.631948][T10847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.631978][T10847] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 403.632006][T10847] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 403.632033][T10847] ? arch_stack_walk+0xfb/0x150 [ 403.632064][T10847] ? __pfx_netlink_sendmsg+0x10/0x10 [ 403.632092][T10847] sock_sendmsg_nosec+0x13a/0x180 [ 403.632114][T10847] ____sys_sendmsg+0x565/0x870 [ 403.632148][T10847] ? __pfx_____sys_sendmsg+0x10/0x10 [ 403.632183][T10847] ? import_iovec+0x73/0xa0 [ 403.632214][T10847] ___sys_sendmsg+0x2a5/0x360 [ 403.632241][T10847] ? __lock_acquire+0x6df/0x2e40 [ 403.632263][T10847] ? __pfx____sys_sendmsg+0x10/0x10 [ 403.632320][T10847] ? __fget_files+0x2a/0x420 [ 403.632339][T10847] ? __fget_files+0x3a8/0x420 [ 403.632366][T10847] __x64_sys_sendmsg+0x1b7/0x290 [ 403.632397][T10847] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 403.632467][T10847] do_syscall_64+0x17b/0x530 [ 403.632486][T10847] ? irqentry_exit+0x10f/0x8f0 [ 403.632503][T10847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.632522][T10847] ? clear_bhb_loop+0x40/0x90 [ 403.632546][T10847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.632564][T10847] RIP: 0033:0x7f7f331ee0d9 [ 403.632580][T10847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.632596][T10847] RSP: 002b:00007f7f31446028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 403.632616][T10847] RAX: ffffffffffffffda RBX: 00007f7f33475fa0 RCX: 00007f7f331ee0d9 [ 403.632630][T10847] RDX: 000000000400c884 RSI: 0000200000000640 RDI: 0000000000000003 [ 403.632642][T10847] RBP: 00007f7f31446090 R08: 0000000000000000 R09: 0000000000000000 [ 403.632654][T10847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 403.632665][T10847] R13: 00007f7f33476038 R14: 00007f7f33475fa0 R15: 00007ffc4eb83c48 [ 403.632695][T10847] [ 405.933026][T10860] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1566'. [ 407.707489][T10870] netlink: 'syz.2.1570': attribute type 1 has an invalid length. [ 407.707515][T10870] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1570'. [ 409.288022][T10897] FAULT_INJECTION: forcing a failure. [ 409.288022][T10897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.288057][T10897] CPU: 0 UID: 0 PID: 10897 Comm: syz.2.1578 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 409.288083][T10897] Tainted: [L]=SOFTLOCKUP [ 409.288090][T10897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 409.288101][T10897] Call Trace: [ 409.288108][T10897] [ 409.288125][T10897] dump_stack_lvl+0xe8/0x150 [ 409.288154][T10897] should_fail_ex+0x467/0x600 [ 409.288183][T10897] _copy_from_iter+0x1d3/0x1660 [ 409.288212][T10897] ? trace_kmem_cache_alloc+0x29/0xe0 [ 409.288240][T10897] ? __pfx__copy_from_iter+0x10/0x10 [ 409.288266][T10897] ? __alloc_skb+0x276/0x7a0 [ 409.288290][T10897] ? __alloc_skb+0x276/0x7a0 [ 409.288318][T10897] ? netlink_sendmsg+0x650/0xb40 [ 409.288343][T10897] ? skb_put+0x112/0x210 [ 409.288369][T10897] netlink_sendmsg+0x6c0/0xb40 [ 409.288406][T10897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.288433][T10897] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 409.288462][T10897] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 409.288488][T10897] ? arch_stack_walk+0xfb/0x150 [ 409.288516][T10897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 409.288540][T10897] sock_sendmsg_nosec+0x13a/0x180 [ 409.288562][T10897] ____sys_sendmsg+0x565/0x870 [ 409.288593][T10897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 409.288624][T10897] ? import_iovec+0x73/0xa0 [ 409.288651][T10897] ___sys_sendmsg+0x2a5/0x360 [ 409.288673][T10897] ? __lock_acquire+0x6df/0x2e40 [ 409.288691][T10897] ? __pfx____sys_sendmsg+0x10/0x10 [ 409.288740][T10897] ? __fget_files+0x2a/0x420 [ 409.288756][T10897] ? __fget_files+0x3a8/0x420 [ 409.288783][T10897] __x64_sys_sendmsg+0x1b7/0x290 [ 409.288812][T10897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 409.288854][T10897] do_syscall_64+0x17b/0x530 [ 409.288873][T10897] ? irqentry_exit+0x10f/0x8f0 [ 409.288890][T10897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.288909][T10897] ? clear_bhb_loop+0x40/0x90 [ 409.288944][T10897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.288963][T10897] RIP: 0033:0x7fe019c6e0d9 [ 409.288980][T10897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 409.288994][T10897] RSP: 002b:00007fe017ec6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 409.289013][T10897] RAX: ffffffffffffffda RBX: 00007fe019ef5fa0 RCX: 00007fe019c6e0d9 [ 409.289027][T10897] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 409.289038][T10897] RBP: 00007fe017ec6090 R08: 0000000000000000 R09: 0000000000000000 [ 409.289049][T10897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.289059][T10897] R13: 00007fe019ef6038 R14: 00007fe019ef5fa0 R15: 00007ffff5e38438 [ 409.289090][T10897] [ 410.057408][T10909] No control pipe specified [ 410.284108][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 410.284167][T10914] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1584'. [ 410.432955][ T60] Bluetooth: hci3: SCO packet too small [ 411.519605][ T5686] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 411.682411][ T5686] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.682428][ T5686] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 411.685392][ T5686] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 411.685420][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.685438][ T5686] usb 3-1: Product: syz [ 411.685446][ T5686] usb 3-1: Manufacturer: syz [ 411.685453][ T5686] usb 3-1: SerialNumber: syz [ 411.995142][T10933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.996339][T10933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.089509][ T5679] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 412.239687][ T5679] usb 1-1: Using ep0 maxpacket: 16 [ 412.241569][ T5679] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 412.241595][ T5679] usb 1-1: config 0 has no interface number 0 [ 412.241637][ T5679] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 412.241661][ T5679] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 412.243968][ T5679] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 412.244013][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.244039][ T5679] usb 1-1: Product: syz [ 412.244052][ T5679] usb 1-1: Manufacturer: syz [ 412.244065][ T5679] usb 1-1: SerialNumber: syz [ 412.248872][ T5679] usb 1-1: config 0 descriptor?? [ 412.251003][T10932] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 412.252381][T10932] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 412.458896][T10932] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 412.459042][T10932] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 412.663624][T10932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.664423][T10932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.665777][ T5679] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 412.866932][ T5679] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 412.866962][ T5679] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 412.867221][ T5679] asix 1-1:0.34: probe with driver asix failed with error -61 [ 414.133850][T10936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.134521][T10936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.248650][ T5686] usb 3-1: 0:1 : does not exist [ 414.255958][ T5686] usb 3-1: cannot request logical cluster ID: 65535 (err: -71) [ 414.257665][ T5686] usb 3-1: unit 80 not found! [ 414.298231][T10938] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1590'. [ 414.336285][ T5686] usb 3-1: USB disconnect, device number 101 [ 414.388951][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.198824][ T5679] usb 1-1: USB disconnect, device number 115 [ 415.354895][T10948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.119653][ T5686] usb 3-1: new full-speed USB device number 102 using dummy_hcd [ 416.273236][ T5686] usb 3-1: not running at top speed; connect to a high speed hub [ 416.274432][ T5686] usb 3-1: config 45 has an invalid interface number: 2 but max is 0 [ 416.274458][ T5686] usb 3-1: config 45 has no interface number 0 [ 416.274487][ T5686] usb 3-1: config 45 interface 2 has no altsetting 0 [ 416.276834][ T5686] usb 3-1: New USB device found, idVendor=2040, idProduct=9301, bcdDevice=30.eb [ 416.276860][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.276878][ T5686] usb 3-1: Product: syz [ 416.276891][ T5686] usb 3-1: Manufacturer: syz [ 416.276904][ T5686] usb 3-1: SerialNumber: syz [ 416.753875][ T10] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 416.890976][ T10] usb 1-1: device descriptor read/64, error -71 [ 416.944972][ T5686] dvb-usb: found a 'Hauppauge WinTV-NOVA-T usb2' in warm state. [ 416.945945][ T5686] dvb-usb: bulk message failed: -22 (3/0) [ 416.949313][ T5686] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 416.950893][ T5686] dvbdev: DVB: registering new adapter (Hauppauge WinTV-NOVA-T usb2) [ 416.951026][ T5686] usb 3-1: media controller created [ 416.951124][ T5686] dvb-usb: bulk message failed: -22 (5/0) [ 416.951188][ T5686] dvb-usb: MAC address reading failed. [ 416.954706][ T5686] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 417.033020][ T5686] dvb-usb: bulk message failed: -22 (6/0) [ 417.033223][ T5686] dvb-usb: bulk message failed: -22 (6/0) [ 417.033277][ T5686] dvb-usb: no frontend was attached by 'Hauppauge WinTV-NOVA-T usb2' [ 417.036165][ T5686] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 417.037968][ T5686] dvb-usb: schedule remote query interval to 100 msecs. [ 417.037984][ T5686] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully initialized and connected. [ 417.045977][ T5686] usb 3-1: USB disconnect, device number 102 [ 417.144385][ T10] usb 1-1: new full-speed USB device number 117 using dummy_hcd [ 417.154007][ T5686] dvb-usb: Hauppauge WinTV-NOVA-T usb2 successfully deinitialized and disconnected. [ 417.279716][ T10] usb 1-1: device descriptor read/64, error -71 [ 417.390689][ T10] usb usb1-port1: attempt power cycle [ 417.730461][ T10] usb 1-1: new full-speed USB device number 118 using dummy_hcd [ 417.750386][ T10] usb 1-1: device descriptor read/8, error -71 [ 417.989627][ T10] usb 1-1: new full-speed USB device number 119 using dummy_hcd [ 418.010984][ T10] usb 1-1: device descriptor read/8, error -71 [ 418.120123][ T10] usb usb1-port1: unable to enumerate USB device [ 418.859630][ T5679] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 419.029136][ T5679] usb 3-1: Using ep0 maxpacket: 8 [ 419.047819][ T5679] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 419.047849][ T5679] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.047868][ T5679] usb 3-1: Product: 栀 [ 419.047881][ T5679] usb 3-1: Manufacturer: ю [ 419.047893][ T5679] usb 3-1: SerialNumber: syz [ 419.359450][T10576] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 419.422545][T10576] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 419.438072][ T5679] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 419.438102][ T5679] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 419.438966][ T5679] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 419.440395][ T5679] usb 3-1: unit 3 not found! [ 419.514144][ T5679] usb 3-1: USB disconnect, device number 103 [ 419.531420][T10576] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 419.589138][T10576] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 419.594918][T10576] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 419.946744][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 420.540198][ T5679] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 420.716630][ T5679] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 420.716660][ T5679] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.716670][ T5679] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 420.716698][ T5679] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 420.724213][ T5679] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 420.724242][ T5679] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 420.724260][ T5679] usb 1-1: Product: syz [ 420.724273][ T5679] usb 1-1: Manufacturer: syz [ 420.764674][ T5679] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 420.869723][T10979] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.869938][T10979] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.870102][T10979] bridge_slave_0: entered allmulticast mode [ 420.871867][T10979] bridge_slave_0: entered promiscuous mode [ 420.874232][T10979] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.874449][T10979] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.874600][T10979] bridge_slave_1: entered allmulticast mode [ 420.886861][T10979] bridge_slave_1: entered promiscuous mode [ 420.946655][ T10] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 420.965105][T10979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.970040][ T5686] usb 1-1: USB disconnect, device number 120 [ 421.010926][T10979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.093974][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 421.094023][ T10] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 421.094043][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.096758][ T10] usb 3-1: config 0 descriptor?? [ 421.098980][T11004] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 421.225928][T10979] team0: Port device team_slave_0 added [ 421.237170][T10979] team0: Port device team_slave_1 added [ 421.413665][T10979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.413682][T10979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.413706][T10979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.416792][T10979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.416809][T10979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.416835][T10979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.522551][ T10] hid_parser_main: 827 callbacks suppressed [ 421.522573][ T10] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 421.522598][ T10] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 421.522621][ T10] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 421.522641][ T10] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 421.522663][ T10] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 421.522686][ T10] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 421.522716][ T10] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 421.522741][ T10] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 421.522765][ T10] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 421.522788][ T10] asus 0003:0B05:1ABE.0015: unknown main item tag 0x0 [ 421.528436][ T10] asus 0003:0B05:1ABE.0015: item fetching failed at offset 458/483 [ 421.529192][ T10] asus 0003:0B05:1ABE.0015: Asus hid parse failed: -22 [ 421.529328][ T10] asus 0003:0B05:1ABE.0015: probe with driver asus failed with error -22 [ 421.747765][ T5679] usb 3-1: USB disconnect, device number 104 [ 421.830014][T11012] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.1614'. [ 421.909840][T11013] overlayfs: unescaped trailing colons in lowerdir mount option. [ 422.004141][T10576] Bluetooth: hci4: command tx timeout [ 422.238310][ T60] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 422.284645][ T60] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 422.316262][ T60] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 422.329262][T10979] hsr_slave_0: entered promiscuous mode [ 422.331461][T10979] hsr_slave_1: entered promiscuous mode [ 422.332833][T10979] debugfs: 'hsr0' already exists in 'hsr' [ 422.332854][T10979] Cannot create hsr debugfs directory [ 422.368079][ T60] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 422.368764][ T60] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 423.781857][ T5686] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 423.913053][T11036] [ 423.913062][T11036] ============================================ [ 423.913065][T11036] WARNING: possible recursive locking detected [ 423.913113][T11036] syzkaller #0 Tainted: G L [ 423.913143][T11036] -------------------------------------------- [ 423.913168][T11036] syz.0.1618/11036 is trying to acquire lock: [ 423.913179][T11036] ffff888031c9d128 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_do_insn+0x38/0x3c0 [ 423.913214][T11036] [ 423.913214][T11036] but task is already holding lock: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 423.913218][T11036] ffff888031c9f128 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x216/0x1af0 [ 423.913244][T11036] [ 423.913244][T11036] other info that might help us debug this: [ 423.913247][T11036] Possible unsafe locking scenario: [ 423.913247][T11036] [ 423.913251][T11036] CPU0 [ 423.913279][T11036] ---- [ 423.913306][T11036] lock(&dev->mutex#4); [ 423.913320][T11036] lock(&dev->mutex#4); [ 423.913329][T11036] [ 423.913329][T11036] *** DEADLOCK *** [ 423.913329][T11036] [ 423.913332][T11036] May be due to missing lock nesting notation [ 423.913332][T11036] [ 423.913360][T11036] locks held by syz.0.1618/11036: 1, last CPU#1: [ 423.913421][T11036] #0: ffff888031c9f128 (&dev->mutex#4){+.+.}-{4:4}, at: comedi_unlocked_ioctl+0x216/0x1af0 [ 423.913449][T11036] [ 423.913449][T11036] stack backtrace: [ 423.913457][T11036] CPU: 1 UID: 0 PID: 11036 Comm: syz.0.1618 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 423.913471][T11036] Tainted: [L]=SOFTLOCKUP [ 423.913475][T11036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 423.913482][T11036] Call Trace: [ 423.913486][T11036] [ 423.913499][T11036] dump_stack_lvl+0xe8/0x150 [ 423.913513][T11036] print_deadlock_bug+0x27a/0x290 [ 423.913526][T11036] __lock_acquire+0x261c/0x2e40 [ 423.913540][T11036] lock_acquire+0x115/0x350 [ 423.913554][T11036] ? comedi_do_insn+0x38/0x3c0 [ 423.913565][T11036] ? comedi_do_insn+0x38/0x3c0 [ 423.913574][T11036] ? comedi_do_insn+0x38/0x3c0 [ 423.913582][T11036] mutex_lock_nested+0x5a/0x1d0 [ 423.913595][T11036] ? comedi_do_insn+0x38/0x3c0 [ 423.913605][T11036] comedi_do_insn+0x38/0x3c0 [ 423.913649][T11036] comedi_dio_bitfield2+0x2fb/0x3d0 [ 423.913662][T11036] ? __pfx_comedi_dio_bitfield2+0x10/0x10 [ 423.913676][T11036] bonding_dio_insn_bits+0x2cc/0x5e0 [ 423.913689][T11036] ? __pfx_bonding_dio_insn_bits+0x10/0x10 [ 423.913700][T11036] ? kasan_save_track+0x4f/0x80 [ 423.913714][T11036] ? __kasan_kmalloc+0x93/0xb0 [ 423.913726][T11036] ? __kmalloc_noprof+0x415/0x790 [ 423.913740][T11036] ? do_insn_ioctl+0x100/0x5b0 [ 423.913752][T11036] insn_rw_emulate_bits+0x367/0x620 [ 423.913768][T11036] ? __pfx_insn_rw_emulate_bits+0x10/0x10 [ 423.913783][T11036] ? comedi_check_chanlist+0x299/0x330 [ 423.913798][T11036] parse_insn+0xa3b/0x1b20 [ 423.913812][T11036] ? __pfx_parse_insn+0x10/0x10 [ 423.913823][T11036] ? __kmalloc_noprof+0x436/0x790 [ 423.913836][T11036] ? do_insn_ioctl+0x100/0x5b0 [ 423.913846][T11036] ? do_insn_ioctl+0x100/0x5b0 [ 423.913858][T11036] do_insn_ioctl+0x17c/0x5b0 [ 423.913871][T11036] comedi_unlocked_ioctl+0xe0a/0x1af0 [ 423.913885][T11036] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 423.913896][T11036] ? kasan_quarantine_put+0xbb/0x1f0 [ 423.913910][T11036] ? tomoyo_path_number_perm+0x219/0x5f0 [ 423.913922][T11036] ? do_vfs_ioctl+0x1184/0x1550 [ 423.913935][T11036] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 423.913950][T11036] ? do_futex+0x3e7/0x4e0 [ 423.913966][T11036] ? __fget_files+0x2a/0x420 [ 423.913977][T11036] ? __fget_files+0x3a8/0x420 [ 423.913986][T11036] ? __fget_files+0x2a/0x420 [ 423.913999][T11036] ? bpf_lsm_file_ioctl+0x9/0x20 [ 423.914014][T11036] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 423.914025][T11036] __se_sys_ioctl+0xff/0x170 [ 423.914038][T11036] do_syscall_64+0x17b/0x530 [ 423.914047][T11036] ? irqentry_exit+0x10f/0x8f0 [ 423.914057][T11036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.914067][T11036] ? clear_bhb_loop+0x40/0x90 [ 423.914078][T11036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.914087][T11036] RIP: 0033:0x7ff9971be0d9 [ 423.914098][T11036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.914107][T11036] RSP: 002b:00007ff995416028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.914118][T11036] RAX: ffffffffffffffda RBX: 00007ff997445fa0 RCX: 00007ff9971be0d9 [ 423.914127][T11036] RDX: 0000200000000000 RSI: 000000008028640c RDI: 0000000000000003 [ 423.914134][T11036] RBP: 00007ff997255024 R08: 0000000000000000 R09: 0000000000000000 [ 423.914141][T11036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.914147][T11036] R13: 00007ff997446038 R14: 00007ff997445fa0 R15: 00007fffa7866658 [ 423.914159][T11036] [ 423.931943][ T5686] usb 3-1: Using ep0 maxpacket: 8 [ 423.935932][ T5686] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 423.935961][ T5686] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.935980][ T5686] usb 3-1: Product: 栀 [ 423.936001][ T5686] usb 3-1: Manufacturer: ю [ 423.936014][ T5686] usb 3-1: SerialNumber: syz [ 424.079454][T10576] Bluetooth: hci4: command tx timeout [ 425.056669][T10576] Bluetooth: hci5: command tx timeout [ 425.299581][ T5686] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 425.299612][ T5686] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 425.300210][ T5686] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 425.353992][ T5686] usb 3-1: USB disconnect, device number 105 [ 426.599642][ T7558] bridge_slave_1: left allmulticast mode [ 426.599668][ T7558] bridge_slave_1: left promiscuous mode [ 426.599856][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.779916][ T7558] bridge_slave_0: left allmulticast mode [ 426.779936][ T7558] bridge_slave_0: left promiscuous mode [ 426.780060][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.179990][ T7558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.300190][ T7558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.360509][ T7558] bond0 (unregistering): Released all slaves [ 427.381516][ T5251] 8021q: adding VLAN 0 to HW filter on device eth1 [ 427.820518][ T7558] hsr_slave_0: left promiscuous mode [ 427.860937][ T7558] hsr_slave_1: left promiscuous mode [ 427.862233][ T7558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.901461][ T7558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.320884][ T7558] team0 (unregistering): Port device team_slave_1 removed [ 428.360101][ T7558] team0 (unregistering): Port device team_slave_0 removed [ 428.431275][ T5251] 8021q: adding VLAN 0 to HW filter on device eth2 [ 429.072342][ T5251] 8021q: adding VLAN 0 to HW filter on device eth3 [ 429.293782][ T5251] 8021q: adding VLAN 0 to HW filter on device eth4 [ 429.661030][ T7558] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.900794][ T7558] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.120509][ T7558] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.370435][ T7558] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 430.749838][ T7558] bridge_slave_1: left allmulticast mode [ 430.749865][ T7558] bridge_slave_1: left promiscuous mode [ 430.750062][ T7558] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.909867][ T7558] bridge_slave_0: left allmulticast mode [ 430.909886][ T7558] bridge_slave_0: left promiscuous mode [ 430.910006][ T7558] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.510077][ T7558] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.590011][ T7558] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.610663][ T7558] bond0 (unregistering): Released all slaves [ 431.650871][ T5251] 8021q: adding VLAN 0 to HW filter on device eth5 [ 431.809699][ T7558] tipc: Left network mode [ 432.028887][ T5251] 8021q: adding VLAN 0 to HW filter on device eth6 [ 432.331237][ T5251] 8021q: adding VLAN 0 to HW filter on device eth7 [ 432.751167][ T5251] 8021q: adding VLAN 0 to HW filter on device eth8 [ 432.999576][ T7558] hsr_slave_0: left promiscuous mode [ 433.039773][ T7558] hsr_slave_1: left promiscuous mode [ 433.040649][ T7558] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 433.040665][ T7558] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.060388][ T7558] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 433.060411][ T7558] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.139903][ T7558] veth1_macvtap: left promiscuous mode [ 433.140133][ T7558] veth0_vlan: left promiscuous mode [ 433.710150][ T7558] team0 (unregistering): Port device team_slave_1 removed [ 433.749981][ T7558] team0 (unregistering): Port device team_slave_0 removed