last executing test programs: 5.614201255s ago: executing program 0 (id=542): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x9, 0x91, 0x10000, 0x1, 0x0, 0x0, 0xbfca89d3}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@mark={{0x14}}], 0x18}}], 0x1, 0x40500f0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r2, 0x7ab, &(0x7f0000000240)={&(0x7f0000000700)={{@any, 0xd7}, {@host, 0x1}, 0x400, "bb81d97c4147997e2d01c0fc32a1c14d7c45b2dcdf4a43c9e1e28d1a570f608958f0a40c7f6658b1bb2779be7001313f8083369fbbf71e1d8ba589d80cf3fbb7cc0baf4e73febbfb55bc0e0850ba125c83b3a5ca4705934cb78553f3f308081e9d7702a94a6d232aa7cb7b67f64499ce35c3f4d75e70b6e683048d46820a9fce28710360bf4ce463690dc198c6f251d03f14b67702d13853c4e0fce52db2b139d402da784d8ff5fc14501828527ac865b6fbd2f0cbe3be98c2f94d4ab7147e9a73d600d2dd1e66abeca63b5893984748cd756eab304443cb95ca7bf20b439fa91af205180f4215f78492a3cef3dc47b4f1b74107bd2c145f2b6cc7fa2b89e541aab20fe3a825413eff9e644a2f61f620c9925b90bcdb6607c107339d92af3d20f16274c4e0a8387a09ae654aac8f9e776bc8a9e57867856b65ea22f6b9c2618e0f4e52fe05d18b2879a6390f30e63e3fdf64858a3b16c9096720255f679928300a2b21f3ee625f8f9ce3ddcbaa455b3064b23c7a075d269294e434cb1b9d2b2d5efd0a219866ba256a61b593520f95f8575aebcb114dab75861743fda87c5cfde8a37298bee68d0090260c62a99b7c67fe88469f4c934f53dc8ad8a4974cf39073beda010f3c7c36f927ffb60c281a9fbf1204033b97c60f72ae17bb626c0b0aaa9e8b4b1250a934bb45bafe29db6ee3609a22bd52ee1ada1cc16037bd3efdfc554a7f556ca435b2e3ab07f6416e7416292f53113e8f8b6781af27e64dba38811978ffdb4b168e40f83669867e9d6872b806616ef9d52313820eed98f9a38ce79e4fddf08401111889d037358204f3339560071aa322a942658ccff3cbf219fac1b8e1e7d2d594f60a271d580028e6a475bc08003d322c407129fd34db0aceb32108bfbbe15f0fe2b90ea3a5cc4cdcabb1949dc619b68346caf339c1874dc6610406a85ec9cc480032e31a006ab2b919df0032900d70bdf71e58f1cee9301a295368953871c523003b866d81c1acf64210c272c44f20fb2f1d3347deadb33c4a1f61168d1c4aa36d15b72ae8b1da1543e63b126f4d47eb2e2b34e9b2b285a3b3f8273b4a392a3df8ac30f6bf0abf09e7ed2901312fa53a770ebc01007e940206f7872430208fe2240b742875c91e468264bd1e71b10ecda7a629dde07541577e9ee0579a3d99613d8550cb63bfa503000000000000e561a8e1c9d7ff55c113e28c1d499ea338dd56fe3ec5af073e49d807ea81e9a975ac35efd774aac379813a7ccbee372266cb75cddc045c672ea297a5defcec040269a8c68da5c68991e47593d6b02157f3872ee0ebe30bd3805b1cfde0cf2962afc446c5e303cc1b7b39ee330252db53230d6c145e79275d8a2e9e2cea8d61f01ac09056a44e9cfc8d8311fa9582476131ef5a09b12400"}, 0x418, 0x825}) close(0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001400011504000000000000000a0000000400000014000900ff01140000000000000000000000000114000280bf"], 0x40}, 0x1, 0x0, 0x0, 0x20000804}, 0x8018) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket(0x14, 0x2, 0x4) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f00000004c0)) socket$inet6_mptcp(0xa, 0x1, 0x106) 5.42835582s ago: executing program 1 (id=544): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x14, 0x15, 0x1, 0x70bd26, 0x25dfdbff, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x2004c800}, 0x40014) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r4, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r4, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x48, r4, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @private=0xa010101}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0d030000006f9b0fe50013"], 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000800)={'wlan1\x00'}) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x29, 0x35, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r3, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x180000}, @TIPC_NLA_PUBL_UPPER={0xfffffffffffffeb6, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4044800}, 0x4000) r6 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1c8, r6, 0x800, 0x70bd29, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0xffffffffffffff8f}, {0xc, 0x90, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xcc7}, {0xc, 0x90, 0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x3759}, {0xc, 0x90, 0x64da}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x8f, 0x4}, {0xc, 0x90, 0x401}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc, 0x8f, 0x3}, {0xc, 0x90, 0xf612}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x7fffffff}, {0xc, 0x90, 0x9}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x40}, 0x44080) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000007c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, r4, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @empty}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004000}, 0x8084) 5.157010794s ago: executing program 1 (id=546): syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newtaction={0x58, 0x32, 0xc20bc6c7745b97d7, 0x70bd2d, 0x25dfdbfc, {}, [{0x44, 0x1, [@m_ipt={0x40, 0x1, 0x0, 0x0, {{0xffb0}, {0x4}, {0x15, 0x6, "3e9f7839102467b620a60b4345cd5e339d"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48080}, 0x200090c0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000040)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000038000000030a01040000000000000000010000010900030073797a32000000000c00024000000000000000010900010073797a30"], 0x7904}, 0x1, 0x0, 0x0, 0x4040}, 0x0) syz_usb_ep_write(r0, 0x81, 0x25, &(0x7f00000000c0)="00012c615bc22000b5ea7288f55962d79fccfec9e050926dc305a52b110cce4958b873275a") syz_open_dev$char_usb(0xc, 0xb4, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x193042, 0x26) ioctl$VIDIOC_G_EDID(r3, 0xc0285628, &(0x7f0000000280)={0x0, 0xd, 0xf, '\x00', &(0x7f0000000240)=0x8}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009003940422c021664da01020301090212"], 0x0) capset(&(0x7f0000000040)={0x20080522}, 0x0) syz_clone(0x80080000, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x3) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io(r5, 0x0, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0585611, &(0x7f0000000200)={0x2, 0xe, 0x0, "6e145c0ef63b736608314ceb833d278f8739057c56b9f38df459aa6db8a9f4d6", 0x31364d4e}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r8, 0x84, 0x17, &(0x7f00000001c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="051403f47cc3b3"], 0xb) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xffffffffffffffd5, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESHEX=r4, @ANYRES16=r7, @ANYBLOB="01002abd7000fbdbdf090000000008000300", @ANYRESOCT=r4, @ANYBLOB="0ce9980008003129e5b3eed4"], 0x28}, 0x1, 0x0, 0x0, 0x20000804}, 0x4) 4.872616197s ago: executing program 2 (id=548): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x44, r2, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0xe}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x17}, @IEEE802154_ATTR_SF_ORD={0x5, 0x18, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)={0x5c, r1, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x40, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "2b95ad41fe55a3d7f10ca9003a5d67e1"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x76ae27cf5b3624b1}, 0x20000000) 4.656777308s ago: executing program 2 (id=549): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x692a, 0x4) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0x835a, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r1 = accept(r0, &(0x7f0000000140)=@tipc, &(0x7f0000000280)=0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000080)={0x50, 0x0, r3, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001c80)={0x10, 0x0, 0xfffffffffffffff9}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) setsockopt$llc_int(r1, 0x10c, 0x3, &(0x7f00000002c0)=0xfff, 0x4) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x7f, 0x4) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) r6 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000300)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r6, 0xc06864ce, &(0x7f0000006940)={r8, 0x9, 0x8, 0x2, 0x3, [], [0x75a, 0xfffffffc, 0x4, 0x3], [0x9b7, 0x87f, 0x5c, 0x9], [0x8, 0x4, 0x3ff, 0x8000000000000000]}) r9 = syz_open_dev$dri(&(0x7f0000000100), 0x1, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3020, 0x1000004, 0x13, r9, 0x100000000) syz_usb_control_io$hid(r5, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00220f000000a3"], 0x0}, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) 4.499638345s ago: executing program 2 (id=550): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000130a010300000000000000000a00000828d80dc78ec9ea"], 0x14}, 0x1, 0x0, 0x0, 0x20040014}, 0x4004804) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r1, &(0x7f00000320c0)=""/102366, 0x18fde, 0x40000000000c2a) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3882fbe055d83e010000100001000000000000000000e0000002000000000000000000000000e00000010000ce2fed81bbfec432264d000000000000000000004e240000000000000a00000000000000", @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d433000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000db0000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000002000000000000000000000000000000000000000a00040000000000000000004800010073686132353600"/240], 0x138}}, 0x0) socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000130a010300000000000000000a00000828d80dc78ec9ea"], 0x14}, 0x1, 0x0, 0x0, 0x20040014}, 0x4004804) (async) syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') (async) pread64(r1, &(0x7f00000320c0)=""/102366, 0x18fde, 0x40000000000c2a) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) bind$bt_l2cap(r2, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) (async) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000140)=0x1, &(0x7f0000000180)=0x4) (async) getsockopt$WPAN_SECURITY(r1, 0x0, 0x1, &(0x7f00000001c0), &(0x7f0000000200)=0x4) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="3882fbe055d83e010000100001000000000000000000e0000002000000000000000000000000e00000010000ce2fed81bbfec432264d000000000000000000004e240000000000000a00000000000000", @ANYRES8=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d433000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000fdffffffffffffff0000000000000000db0000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000002000000000000000000000000000000000000000a00040000000000000000004800010073686132353600"/240], 0x138}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) (async) 4.498438172s ago: executing program 0 (id=551): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd29, 0xfffffffe, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x94e}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}]]}, 0x34}, 0x1, 0x0, 0x3000000, 0x4000000}, 0x20000040) 4.445061908s ago: executing program 3 (id=552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="0a00b3f0ffffffffffffaaaaaaaaaaaa8847"], 0xdd) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) fcntl$setpipe(r0, 0x407, 0xabd1) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x200000035}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) 4.378832475s ago: executing program 0 (id=553): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x64}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r4], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r5], &(0x7f0000000180), 0x0, 0x8000000000009}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) shmget$private(0x0, 0x1000, 0x78001810, &(0x7f0000ffe000/0x1000)=nil) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x4bfa, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@broadcast, @random="a0f96bdc9609", @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x0, 0x2b, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) socket(0x14, 0x2, 0x4) 3.829884466s ago: executing program 3 (id=554): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r3}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000100)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) sendmsg$can_j1939(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)='data', 0x4}}, 0x0) recvmsg$can_j1939(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)=""/4, 0x4}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000680)={0x48, r1, 0x1, 0xfffffffd, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0x2c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8}, @NL802154_DEVKEY_ATTR_ID={0x14, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000040) 3.437038077s ago: executing program 3 (id=555): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003, {}, 0xff}, 0x18) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r0) (async, rerun: 32) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x4004}, 0xd0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002002000000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.31056707s ago: executing program 1 (id=556): r0 = socket(0x2b, 0x80801, 0x1) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000100)=0x50db598a, 0x4) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) sendmsg$rds(r1, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') ppoll(&(0x7f0000000000)=[{r2, 0x4040}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f00000001c0)=ANY=[@ANYBLOB="71756f74612c0013cbcc7321467075edc919cb36a2072120a4d0d4dd0c88211b822984ec101d233397d3d910322882144c6ccc1cc0f762a6ad2e8aaec0500fa4e8e883cc50c8d37d80835d15fd835e921e9576a2b85f0bff5a6dc1ba8082e39677e5602b1b7ef9bc58d4b6a195916d2d9ce08dbbbe6731f27f1f"]) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 3.172760825s ago: executing program 3 (id=557): r0 = socket$alg(0x26, 0x5, 0x0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0xfffffffffffffffa) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) prctl$PR_GET_UNALIGN(0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) write(r1, &(0x7f0000000380)="95dd4836c4f45f6f09c96d7ac33aab52b51fac58fc26a03a968899eb11535e0ca729a8016fa9e04295e7efc5018e6aff35f6b1d194f597b775c1723dedf362ad2f851771445b67e0e3432f1e45eae4281b4ccabc90b4e4f4b7380704a7839ba1b96d86bdd3ce2fb76ec37c53fb899e1f35f924c0d097388d92b68e31c4e7bb3f48f5b8e38fdb449c4801484960a13a1cf8e6289b9eb1da62e8709a85459d18e59b57d32f07", 0xa5) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file2\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r2 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x1) r4 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r3, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x0, 0x0, r4}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000280)=0x0) io_submit(r7, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, 0x0}]) r8 = eventfd(0xfffffffa) io_cancel(r7, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x2, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0, 0x3, r8}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ab176e8851181ee91300000000000000000000dadb7cb5a95f7937be"], 0x14}, 0x1, 0x0, 0x0, 0x14044845}, 0x20000004) r9 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r10 = syz_open_dev$video(&(0x7f0000000000), 0x485, 0x40000) ioctl$VIDIOC_S_SELECTION(r10, 0xc040565f, &(0x7f0000000040)={0x9, 0x0, 0x6, {0x8, 0x5, 0xb7, 0x10000}}) write$RDMA_USER_CM_CMD_CREATE_ID(r9, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000340), 0x2, 0x2}}, 0x20) 3.053427387s ago: executing program 0 (id=558): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000040)={0x3, &(0x7f00000020c0)=[{0x3d, '\x00', @data=0x4, 0x8}, {0x26, '\x00', @data=0x5, 0xffff7fff}, {0x1a, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x1, @uvalue=0xb}, {0x3, @svalue=0x10001}, {0x2, @svalue=0x4}]}, 0xf9dc}]}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_VDPA_GET_GROUP_NUM(r1, 0x8004af81, &(0x7f0000000040)) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) listen(r2, 0x5) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000c00), r3) sendmsg$NFC_CMD_DEV_DOWN(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r4, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x48045}, 0x4000080) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) r6 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$SNDRV_PCM_IOCTL_LINK(r7, 0x40044160, &(0x7f00000000c0)=0x3) setsockopt$IP_VS_SO_SET_EDITDEST(r6, 0x0, 0x489, &(0x7f0000000380)={{0x2b, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x0, 0x60000000, 0xe}, {@empty, 0x4e26, 0x2000, 0x8, 0x48001, 0x1000000}}, 0x44) 2.666241772s ago: executing program 1 (id=559): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x77, &(0x7f0000000000)=':', 0x1) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e22, 0x1, @empty, 0x4}}, 0x42dd, 0x7, 0x40, 0x9, 0x0, 0x4, 0x2}, &(0x7f0000000240)=0x9c) setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000180), 0x4) 2.354328974s ago: executing program 0 (id=560): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fchown(r3, 0x0, 0xee01) statx(r3, &(0x7f0000000080)='./file0\x00', 0x4000, 0x400, &(0x7f00000001c0)) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) capset(&(0x7f0000000300)={0x20080522}, &(0x7f0000000340)) mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)={0x20, 0x15, 0x3, "ec6d7e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20010800000009"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.196995455s ago: executing program 1 (id=561): socket$packet(0x11, 0x2, 0x300) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) socketpair(0x28, 0x1, 0x28, &(0x7f0000001400)) r1 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r1, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000c40)=[{&(0x7f0000000240)="a905000000007464000100000001000000e5c0", 0x13}, {&(0x7f0000000000)="8299ed9cf57c", 0x6}], 0x2}}], 0x1, 0x24000800) r2 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r2, 0xffffffff80000601, 0x0, &(0x7f0000000300)={0x5, 0x2, 0x1, 0x1}) ioctl$VT_SETMODE(r2, 0x5602, &(0x7f0000000200)={0xc, 0x1, 0x10, 0x1, 0x5}) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000080)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000100)=""/139, 0x8b}, {&(0x7f0000000280)=""/124, 0x7c}, {&(0x7f0000000300)=""/219, 0xdb}, {&(0x7f0000000400)=""/234, 0xea}], 0x4, &(0x7f0000000540)=""/188, 0xbc}, 0x20) 1.470233113s ago: executing program 3 (id=562): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x4, 0x0) (async, rerun: 32) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/power/pm_test', 0x8a881, 0xbb) (rerun: 32) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0xfff, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350000000000000300", "32d8cc26f7305b74df2ce0fa7c19d1309abf30890997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f4cc50a1fcaed1e831fa79a00", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x8]}}) (async, rerun: 64) setresgid(0xee00, 0xee00, 0x0) (async, rerun: 64) r2 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) (async) r4 = syz_open_procfs(r2, &(0x7f0000000000)='timerslack_ns\x00') fchdir(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) 1.158132508s ago: executing program 2 (id=563): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) r1 = fsopen(&(0x7f00000002c0)='devpts\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)=0x2, 0x4) r3 = dup(r0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'bridge_slave_0\x00', @random="c9837dde00"}) 1.032206407s ago: executing program 1 (id=564): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0xc, &(0x7f0000000100)=0x3e60, 0x48) sendmsg$netlink(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)=ANY=[@ANYRESOCT, @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x40040}, 0x20040080) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) recvmsg(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x64}, 0x20) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105704da0700000000000109022400010000ba0009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\"'], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x163342) bind$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) epoll_create1(0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r6], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) setsockopt$inet_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x507, 0x4) sendmmsg$inet(r4, &(0x7f0000000840)=[{{&(0x7f0000000c00)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x20008044) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) 671.874797ms ago: executing program 2 (id=565): mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000001, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000455000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ad9000/0x1000)=nil) mremap(&(0x7f0000139000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000406000/0x2000)=nil) syz_emit_vhci(&(0x7f0000000000)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_req={{0x14, 0x8, 0xa}, {0x4, 0x9, 0xf001, 0x8d, 0x3}}}}, 0x17) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 132.886771ms ago: executing program 0 (id=566): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x5}]}], {0x14}}, 0x64}}, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000540)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[0x0], &(0x7f0000000280), 0x1, r4}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r4], &(0x7f00000003c0)=[0x2], &(0x7f0000000100)=[r5], &(0x7f0000000180), 0x0, 0x8000000000009}) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r0, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) ioctl$TIOCOUTQ(0xffffffffffffffff, 0x4bfa, &(0x7f0000000000)) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000100)={@val={0xa, 0x10}, @void, @eth={@broadcast, @random="a0f96bdc9609", @void, {@ipv6={0x86dd, @generic={0x9, 0x6, "ee0520", 0x0, 0x2b, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2}}}}}, 0x3a) socket(0x14, 0x2, 0x4) 29.401954ms ago: executing program 2 (id=567): r0 = syz_open_dev$swradio(&(0x7f0000000b80), 0x1, 0x2) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x40106) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0xeeef0000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000001ac0)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000000c0)) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000240)=0x1) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi4\x00', 0xa002, 0x0) ioctl$COMEDI_RANGEINFO(r4, 0x80106408, &(0x7f000011cc00)={0x7272, 0x0}) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYRES32=r2], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2422c004}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x6, 0x1, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24000014}, 0x4) sendmsg$kcm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x4000) poll(&(0x7f0000000040)=[{r0, 0x9081}], 0x1, 0xffffffff) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000006bc0), 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x7041, 0x0) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000001440)=@fd={0x2, 0xb, 0x4, 0x800, 0x7, {0x77359400}, {0xc, 0x8, 0x4, 0x80, 0x7, 0x2, '8NJJ'}, 0x9193, 0x4, {}, 0x8}) socket(0x10, 0x3, 0x0) r7 = fanotify_init(0x8, 0x400) write$binfmt_elf64(r7, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c462200001a"], 0x40) r8 = syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r8, 0xc0404807, &(0x7f0000000400)={0x8, "bb5f3ab7d8e32687a94d5cb8a7608a925d666a63eefac87d9ef71db02d9b5839426604c0609be78f98707d74e887fb83bee8cc03340b2d1de0721d065418c579"}) 0s ago: executing program 3 (id=568): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01a40000000000000a00fffe00000000ff"], 0x110) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x200480dc}, 0x4004) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES8=r0], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) kernel console output (not intermixed with test programs): with an inconsistent configuration, please check. [ 108.335743][ T6245] syzkaller0: entered promiscuous mode [ 108.335765][ T6245] syzkaller0: entered allmulticast mode [ 108.415905][ T5769] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 108.557758][ T5769] usb 3-1: device descriptor read/64, error -71 [ 108.737517][ T6248] netlink: 8 bytes leftover after parsing attributes in process `syz.1.147'. [ 108.796596][ T5769] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 108.874720][ T6252] netlink: 'syz.1.149': attribute type 64 has an invalid length. [ 108.874738][ T6252] netlink: 5 bytes leftover after parsing attributes in process `syz.1.149'. [ 108.927447][ T5769] usb 3-1: device descriptor read/64, error -71 [ 109.024372][ T6259] comedi comedi1: 8255: I/O port conflict (0x18000,4) [ 109.038624][ T5769] usb usb3-port1: attempt power cycle [ 109.375213][ T5769] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 109.396022][ T5769] usb 3-1: device descriptor read/8, error -71 [ 109.645294][ T5769] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 109.666096][ T5769] usb 3-1: device descriptor read/8, error -71 [ 109.706294][ T6254] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.779134][ T5769] usb usb3-port1: unable to enumerate USB device [ 110.106519][ T5769] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 110.255865][ T5769] usb 2-1: Using ep0 maxpacket: 8 [ 110.257992][ T5769] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.258013][ T5769] usb 2-1: config 0 has no interface number 0 [ 110.258054][ T5769] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 110.258088][ T5769] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 110.258109][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.278863][ T5769] usb 2-1: config 0 descriptor?? [ 110.288570][ T5769] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 110.514359][ T5769] usb 2-1: USB disconnect, device number 5 [ 111.327361][ T6280] kernel read not supported for file /file7 (pid: 6280 comm: syz.0.157) [ 111.332005][ T37] audit: type=1800 audit(1779652790.131:7): pid=6280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.157" name="file7" dev="mqueue" ino=9954 res=0 errno=0 [ 112.165246][ T5717] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 112.315211][ T5717] usb 1-1: Using ep0 maxpacket: 16 [ 112.329656][ T5717] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 112.329682][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.329699][ T5717] usb 1-1: Product: syz [ 112.329711][ T5717] usb 1-1: Manufacturer: syz [ 112.329724][ T5717] usb 1-1: SerialNumber: syz [ 112.346230][ T5717] usb 1-1: config 0 descriptor?? [ 112.384441][ T5717] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 112.713793][ T5717] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 112.790215][ T5717] usb 1-1: USB disconnect, device number 10 [ 113.335283][ T5717] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 113.507928][ T5717] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 113.507952][ T5717] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.507968][ T5717] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.507986][ T5717] usb 2-1: config 1 has no interface number 1 [ 113.508027][ T5717] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 113.508070][ T5717] usb 2-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.511493][ T5717] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 113.511517][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.511535][ T5717] usb 2-1: Product: syz [ 113.511548][ T5717] usb 2-1: Manufacturer: syz [ 113.511561][ T5717] usb 2-1: SerialNumber: syz [ 113.740141][ T6304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.740957][ T6304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.808051][ T6315] IPVS: length: 35 != 24 [ 113.809221][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.163'. [ 113.887763][ T5769] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 113.895404][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 114.025241][ T9] usb 1-1: device descriptor read/64, error -71 [ 114.037083][ T5769] usb 4-1: Using ep0 maxpacket: 16 [ 114.042017][ T5769] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 160, changing to 7 [ 114.063198][ T5769] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.063222][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.063235][ T5769] usb 4-1: Product: Ч [ 114.063242][ T5769] usb 4-1: Manufacturer: С [ 114.063249][ T5769] usb 4-1: SerialNumber: щ [ 114.110197][ T5717] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 114.110368][ T5717] usb 2-1: MIDIStreaming interface descriptor not found [ 114.265284][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 114.395265][ T9] usb 1-1: device descriptor read/64, error -71 [ 114.454190][ T5769] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 114.480165][ T5717] usb 2-1: USB disconnect, device number 6 [ 114.499678][ T5769] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 114.515065][ T9] usb usb1-port1: attempt power cycle [ 114.681984][ T5769] usb 4-1: USB disconnect, device number 13 [ 114.869855][ T9] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 114.901399][ T9] usb 1-1: device descriptor read/8, error -71 [ 115.147780][ T6325] netlink: 20 bytes leftover after parsing attributes in process `syz.1.169'. [ 115.175234][ T9] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 115.197041][ T9] usb 1-1: device descriptor read/8, error -71 [ 115.305466][ T9] usb usb1-port1: unable to enumerate USB device [ 115.450202][ T6336] overlayfs: failed lookup in lower (newroot/40, name='file0', err=-40): overlapping layers [ 115.487515][ T6336] syz.3.173 (6336) used greatest stack depth: 19200 bytes left [ 115.596678][ T5717] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 115.764207][ T5717] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 115.764234][ T5717] usb 2-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 115.764265][ T5717] usb 2-1: Product: syz [ 115.764277][ T5717] usb 2-1: Manufacturer: syz [ 115.764290][ T5717] usb 2-1: SerialNumber: syz [ 115.778283][ T5717] usb 2-1: config 0 descriptor?? [ 115.799361][ T5717] ch341 2-1:0.0: ch341-uart converter detected [ 116.199753][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.202730][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.205752][ T5769] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 116.224394][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.224842][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.387561][ T5769] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 116.387593][ T5769] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 116.387682][ T5769] usb 4-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.00 [ 116.387703][ T5769] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.410956][ T5769] usb 4-1: config 0 descriptor?? [ 116.421329][ T6349] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 116.627264][ T5769] usbhid 4-1:0.0: can't add hid device: -71 [ 116.627600][ T5769] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 116.680442][ T5769] usb 4-1: USB disconnect, device number 14 [ 116.805826][ T823] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 116.904239][ T6358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.904763][ T6358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.906180][ T6334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.906694][ T6334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.920061][ T5717] usb 2-1: ch341-uart converter now attached to ttyUSB0 [ 116.972633][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.972659][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.972679][ T823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 116.972715][ T823] usb 3-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00 [ 116.972735][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.998175][ T823] usb 3-1: config 0 descriptor?? [ 117.019678][ T5717] usb 2-1: USB disconnect, device number 7 [ 117.037387][ T5717] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 117.156250][ T5717] ch341 2-1:0.0: device disconnected [ 117.245287][ T5796] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 117.396929][ T5796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.396959][ T5796] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.396993][ T5796] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 117.397014][ T5796] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.401081][ T5796] usb 1-1: config 0 descriptor?? [ 117.476645][ T823] playstation 0003:054C:09CC.0002: hidraw0: USB HID vff.fd Device [HID 054c:09cc] on usb-dummy_hcd.2-1/input0 [ 117.548729][ T5698] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 117.614578][ T5717] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 117.654797][ T823] playstation 0003:054C:09CC.0002: Failed to retrieve feature with reportID 18: -71 [ 117.654820][ T823] playstation 0003:054C:09CC.0002: Failed to retrieve DualShock4 pairing info: -71 [ 117.654865][ T823] playstation 0003:054C:09CC.0002: Failed to get MAC address from DualShock4 [ 117.654879][ T823] playstation 0003:054C:09CC.0002: Failed to create dualshock4. [ 117.699553][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 117.702443][ T5698] usb 4-1: config 139 has an invalid interface number: 49 but max is 0 [ 117.702465][ T5698] usb 4-1: config 139 has no interface number 0 [ 117.702494][ T5698] usb 4-1: config 139 interface 49 has no altsetting 0 [ 117.735965][ T5698] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=72.75 [ 117.735990][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.736006][ T5698] usb 4-1: Product: syz [ 117.736018][ T5698] usb 4-1: Manufacturer: syz [ 117.736030][ T5698] usb 4-1: SerialNumber: syz [ 117.761024][ T823] playstation 0003:054C:09CC.0002: probe with driver playstation failed with error -71 [ 117.777199][ T823] usb 3-1: USB disconnect, device number 11 [ 117.805633][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 117.807657][ T5717] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 117.807678][ T5717] usb 2-1: config 0 has no interface number 0 [ 117.810061][ T5717] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 117.810083][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.810095][ T5717] usb 2-1: Product: syz [ 117.810101][ T5717] usb 2-1: Manufacturer: syz [ 117.810144][ T5717] usb 2-1: SerialNumber: syz [ 117.813000][ T5796] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 117.813117][ T5796] cm6533_jd 0003:0D8C:0022.0003: item fetching failed at offset 4/5 [ 117.813858][ T5796] cm6533_jd 0003:0D8C:0022.0003: parse failed [ 117.813952][ T5796] cm6533_jd 0003:0D8C:0022.0003: probe with driver cm6533_jd failed with error -22 [ 117.952201][ T5717] usb 2-1: config 0 descriptor?? [ 117.971436][ T5717] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 118.021404][ T5769] usb 1-1: USB disconnect, device number 15 [ 118.203697][ T6367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.219681][ T6367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.361638][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 143 [ 118.398603][ T5717] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 118.548483][ T5717] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 118.714065][ C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 118.736073][ T10] usb 2-1: USB disconnect, device number 8 [ 118.812148][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 118.838932][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 118.839801][ T10] quatech2 2-1:0.51: device disconnected [ 119.525252][ T5717] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 119.720726][ T5717] usb 3-1: too many configurations: 129, using maximum allowed: 8 [ 119.722181][ T5717] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 119.722203][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.722220][ T5717] usb 3-1: config 0 has no interface number 0 [ 119.725802][ T5717] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 119.725825][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.725840][ T5717] usb 3-1: config 0 has no interface number 0 [ 119.727732][ T5717] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 119.727752][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.727768][ T5717] usb 3-1: config 0 has no interface number 0 [ 119.757763][ T5717] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 119.757785][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.757801][ T5717] usb 3-1: config 0 has no interface number 0 [ 119.759487][ T5717] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 119.759507][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.759523][ T5717] usb 3-1: config 0 has no interface number 0 [ 119.763381][ T5717] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 119.763403][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.763419][ T5717] usb 3-1: config 0 has no interface number 0 [ 119.776844][ T5717] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 119.776865][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.776881][ T5717] usb 3-1: config 0 has no interface number 0 [ 119.781042][ T5717] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 119.781063][ T5717] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 119.781079][ T5717] usb 3-1: config 0 has no interface number 0 [ 119.781186][ T5717] usb 3-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 119.781207][ T5717] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.924656][ T5717] usb 3-1: config 0 descriptor?? [ 120.018956][ T5717] rndis_host 3-1:0.128: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 120.379738][ T9] usb 3-1: USB disconnect, device number 12 [ 121.021918][ T5698] radio-usb-si4713 4-1:139.49: Si4713 development board discovered: (10C4:8244) [ 121.030667][ T5698] radio-usb-si4713 4-1:139.49: probe with driver radio-usb-si4713 failed with error -71 [ 121.031131][ T5698] usbhid 4-1:139.49: couldn't find an input interrupt endpoint [ 121.073241][ T5698] usb 4-1: USB disconnect, device number 15 [ 121.106637][ T6393] netlink: 76 bytes leftover after parsing attributes in process `syz.2.189'. [ 121.220813][ T6397] Bluetooth: MGMT ver 1.23 [ 121.235789][ T5717] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 121.366902][ T5717] usb 1-1: device descriptor read/64, error -71 [ 121.616496][ T5717] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 121.765275][ T5717] usb 1-1: device descriptor read/64, error -71 [ 121.886680][ T5717] usb usb1-port1: attempt power cycle [ 122.135367][ T5769] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 122.205241][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 122.247389][ T5717] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 122.265711][ T5717] usb 1-1: device descriptor read/8, error -71 [ 122.286785][ T5769] usb 2-1: config 4 has an invalid interface number: 54 but max is 0 [ 122.286807][ T5769] usb 2-1: config 4 descriptor has 1 excess byte, ignoring [ 122.286824][ T5769] usb 2-1: config 4 has no interface number 0 [ 122.286845][ T5769] usb 2-1: too many endpoints for config 4 interface 54 altsetting 9: 52, using maximum allowed: 30 [ 122.286865][ T5769] usb 2-1: config 4 interface 54 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 52 [ 122.286877][ T5769] usb 2-1: config 4 interface 54 has no altsetting 0 [ 122.286894][ T5769] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 122.286905][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.363637][ T10] usb 3-1: device descriptor read/64, error -71 [ 122.536313][ T5717] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 122.561862][ T5717] usb 1-1: device descriptor read/8, error -71 [ 122.588104][ T5769] usb 2-1: string descriptor 0 read error: -71 [ 122.598069][ T5769] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 122.613008][ T10] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 122.675615][ T5717] usb usb1-port1: unable to enumerate USB device [ 122.745373][ T10] usb 3-1: device descriptor read/64, error -71 [ 122.858248][ T10] usb usb3-port1: attempt power cycle [ 123.035293][ T5717] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 123.187740][ T5717] usb 4-1: Using ep0 maxpacket: 16 [ 123.193846][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.193873][ T5717] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.193906][ T5717] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 123.193924][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.205192][ T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 123.220896][ T5717] usb 4-1: config 0 descriptor?? [ 123.231478][ T10] usb 3-1: device descriptor read/8, error -71 [ 123.466787][ T10] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 123.488218][ T10] usb 3-1: device descriptor read/8, error -71 [ 123.595742][ T10] usb usb3-port1: unable to enumerate USB device [ 123.614530][ T5769] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 123.614573][ T5769] stv0680 2-1:4.54: STV(e): camera ping failed!! [ 123.624994][ T5769] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 123.625011][ T5769] stv0680 2-1:4.54: last error: 0, command = 0x0 [ 123.637349][ T5769] usb 2-1: USB disconnect, device number 9 [ 123.654803][ T5717] usbhid 4-1:0.0: can't add hid device: -71 [ 123.654903][ T5717] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 123.679869][ T5717] usb 4-1: USB disconnect, device number 16 [ 123.965225][ T5769] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 124.092020][ T6459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 124.115686][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 124.122185][ T5769] usb 2-1: config 184 has an invalid interface number: 159 but max is 3 [ 124.122210][ T5769] usb 2-1: config 184 has an invalid interface number: 89 but max is 3 [ 124.122230][ T5769] usb 2-1: config 184 has an invalid interface number: 160 but max is 3 [ 124.122247][ T5769] usb 2-1: config 184 has an invalid interface number: 152 but max is 3 [ 124.122264][ T5769] usb 2-1: config 184 has no interface number 0 [ 124.122278][ T5769] usb 2-1: config 184 has no interface number 1 [ 124.122292][ T5769] usb 2-1: config 184 has no interface number 2 [ 124.122306][ T5769] usb 2-1: config 184 has no interface number 3 [ 124.122385][ T5769] usb 2-1: config 184 interface 159 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 124.122404][ T5769] usb 2-1: config 184 interface 159 altsetting 224 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 124.122428][ T5769] usb 2-1: config 184 interface 159 altsetting 224 bulk endpoint 0x6 has invalid maxpacket 16 [ 124.122448][ T5769] usb 2-1: config 184 interface 159 altsetting 224 bulk endpoint 0x4 has invalid maxpacket 8 [ 124.122468][ T5769] usb 2-1: config 184 interface 159 altsetting 224 endpoint 0x2 has invalid maxpacket 120, setting to 64 [ 124.122492][ T5769] usb 2-1: config 184 interface 159 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 124.122511][ T5769] usb 2-1: config 184 interface 159 altsetting 224 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 124.122534][ T5769] usb 2-1: config 184 interface 159 altsetting 224 endpoint 0xE has invalid maxpacket 30785, setting to 1024 [ 124.122557][ T5769] usb 2-1: config 184 interface 159 altsetting 224 bulk endpoint 0xE has invalid maxpacket 1024 [ 124.122578][ T5769] usb 2-1: config 184 interface 159 altsetting 224 has an invalid descriptor for endpoint zero, skipping [ 124.122596][ T5769] usb 2-1: config 184 interface 159 altsetting 224 has a duplicate endpoint with address 0xA, skipping [ 124.122616][ T5769] usb 2-1: config 184 interface 159 altsetting 224 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 124.122638][ T5769] usb 2-1: config 184 interface 159 altsetting 224 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 124.122659][ T5769] usb 2-1: config 184 interface 159 altsetting 224 has a duplicate endpoint with address 0x82, skipping [ 124.122677][ T5769] usb 2-1: config 184 interface 159 altsetting 224 has an endpoint descriptor with address 0x2B, changing to 0xB [ 124.122698][ T5769] usb 2-1: config 184 interface 159 altsetting 224 endpoint 0xB has invalid maxpacket 12616, setting to 1024 [ 124.122719][ T5769] usb 2-1: config 184 interface 159 altsetting 224 bulk endpoint 0xB has invalid maxpacket 1024 [ 124.122740][ T5769] usb 2-1: config 184 interface 159 altsetting 224 has 18 endpoint descriptors, different from the interface descriptor's value: 16 [ 124.122775][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has a duplicate endpoint with address 0x6, skipping [ 124.122793][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 124.122811][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 124.122827][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 124.122844][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has a duplicate endpoint with address 0xA, skipping [ 124.122863][ T5769] usb 2-1: config 184 interface 89 altsetting 9 endpoint 0x8 has an invalid bInterval 51, changing to 9 [ 124.122885][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has a duplicate endpoint with address 0xE, skipping [ 124.122903][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has a duplicate endpoint with address 0x2, skipping [ 124.122927][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has an endpoint descriptor with address 0x5D, changing to 0xD [ 124.122949][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has a duplicate endpoint with address 0xD, skipping [ 124.122966][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 124.122984][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has a duplicate endpoint with address 0x7, skipping [ 124.123003][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has a duplicate endpoint with address 0x3, skipping [ 124.123022][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has a duplicate endpoint with address 0x4, skipping [ 124.123041][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 124.123058][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 124.123080][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has a duplicate endpoint with address 0x88, skipping [ 124.123098][ T5769] usb 2-1: config 184 interface 89 altsetting 9 has 15 endpoint descriptors, different from the interface descriptor's value: 13 [ 124.123133][ T5769] usb 2-1: config 184 interface 160 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 124.123150][ T5769] usb 2-1: config 184 interface 160 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 124.123177][ T5769] usb 2-1: config 184 interface 152 altsetting 5 has a duplicate endpoint with address 0xB, skipping [ 124.123198][ T5769] usb 2-1: config 184 interface 152 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 124.123217][ T5769] usb 2-1: config 184 interface 152 altsetting 5 has a duplicate endpoint with address 0xC, skipping [ 124.123235][ T5769] usb 2-1: config 184 interface 152 altsetting 5 has a duplicate endpoint with address 0x9, skipping [ 124.123254][ T5769] usb 2-1: config 184 interface 159 has no altsetting 0 [ 124.123268][ T5769] usb 2-1: config 184 interface 89 has no altsetting 0 [ 124.123283][ T5769] usb 2-1: config 184 interface 160 has no altsetting 0 [ 124.123297][ T5769] usb 2-1: config 184 interface 152 has no altsetting 0 [ 124.137440][ T5769] usb 2-1: New USB device found, idVendor=413c, idProduct=8115, bcdDevice=fb.31 [ 124.137464][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.137482][ T5769] usb 2-1: Product: 脻┣࿵ٮ귣䈾哻寘，⿔✡ [ 124.137495][ T5769] usb 2-1: Manufacturer: ⴋ溟蚣拓宰ⶋﻀ紸땆￘痤ⅅ⹖叟䪐쓅臘ꗋ搤ꡛ⺒趴쑫첺돖뉻뫣꘍爅韵씝콂ྮ䩑䯏鷂㔄ش⡐ꆢह쵧佖ϻ㯤﮹餡髋硊ڕ恿잰䓴搙쐪忩鶝끈୰翬횺餐倎䤗ⰷ뺨쳮Ꙏ軤 [ 124.137517][ T5769] usb 2-1: SerialNumber: 틊폗融뾧踇㰤鿋ﻮ茩꥝髱徼傦᝼ᾊ߆‫퉰ᄆ矂㖘匒㡷颬ᣅㅑ㤛臉鑤뿊␪鿵ᝃᗙ찳犯栠ᓙ᏶㨫퐩謯앴柯೫鑈⺠쪧職ᩥᅎ蓎딍䆷犷緳㫚ҭ켟罴Ä㳫쯹ᑝ銞︅脕销汽䭐ㄖ鬂ᘍゎ禐㽨곝 [ 124.148336][ T6449] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 124.148493][ T6449] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 124.165511][ T6449] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 124.167307][ T6449] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 124.836089][ T5769] option 2-1:184.159: GSM modem (1-port) converter detected [ 124.923369][ T5769] option 2-1:184.89: GSM modem (1-port) converter detected [ 124.948861][ T5769] option 2-1:184.160: GSM modem (1-port) converter detected [ 124.977238][ T5769] option 2-1:184.152: GSM modem (1-port) converter detected [ 125.065236][ T5698] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 125.117174][ T5769] usb 2-1: USB disconnect, device number 10 [ 125.203008][ T5769] option 2-1:184.159: device disconnected [ 125.228888][ T5769] option 2-1:184.89: device disconnected [ 125.240532][ T5769] option 2-1:184.160: device disconnected [ 125.253636][ T5769] option 2-1:184.152: device disconnected [ 125.256600][ T5698] usb 4-1: Using ep0 maxpacket: 32 [ 125.274881][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.274907][ T5698] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.274938][ T5698] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 125.274957][ T5698] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.343379][ T5698] usb 4-1: config 0 descriptor?? [ 125.715347][ T5717] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 125.785717][ T5698] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 125.785749][ T5698] ft260 0003:0403:6030.0004: unknown main item tag 0x0 [ 125.913662][ T5717] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x82 has invalid maxpacket 72, setting to 64 [ 125.913693][ T5717] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 125.913768][ T5717] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 125.913792][ T5717] usb 3-1: config 1 interface 0 has no altsetting 0 [ 125.917454][ T5717] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.917478][ T5717] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.917495][ T5717] usb 3-1: Product: ࠬ [ 125.917507][ T5717] usb 3-1: Manufacturer: ఉ [ 125.917519][ T5717] usb 3-1: SerialNumber: syz [ 126.021326][ T6469] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 126.021506][ T6469] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 126.025304][ T5698] ft260 0003:0403:6030.0004: chip code: 0000 0000 [ 126.216511][ T5698] ft260 0003:0403:6030.0004: failed to retrieve system status [ 126.232083][ T5698] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -5 [ 126.361512][ T5717] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 126.409259][ T5717] usb 3-1: USB disconnect, device number 17 [ 126.442085][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.453913][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.495885][ T32] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 126.635422][ T32] usb 2-1: device descriptor read/64, error -71 [ 126.656896][ T6465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.657360][ T6465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.885313][ T32] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 127.015308][ T32] usb 2-1: device descriptor read/64, error -71 [ 127.126548][ T32] usb usb2-port1: attempt power cycle [ 127.217099][ T6493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.217786][ T6493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.485291][ T32] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 127.505713][ T32] usb 2-1: device descriptor read/8, error -71 [ 127.755480][ T32] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 127.775977][ T32] usb 2-1: device descriptor read/8, error -71 [ 127.885622][ T32] usb usb2-port1: unable to enumerate USB device [ 128.247509][ T32] usb 4-1: USB disconnect, device number 17 [ 129.463615][ T6523] netlink: 56 bytes leftover after parsing attributes in process `syz.2.222'. [ 129.985276][ T5698] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 130.137881][ T5698] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 130.137924][ T5698] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 130.137948][ T5698] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 130.141502][ T5698] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.141526][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.141539][ T5698] usb 3-1: Product: syz [ 130.141545][ T5698] usb 3-1: Manufacturer: syz [ 130.141552][ T5698] usb 3-1: SerialNumber: syz [ 130.381284][ T6527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.381392][ T6527] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 130.427649][ T6536] CIFS: bad ip= option (%RHe'ˠ/1C~1WexEAeSb{~R) [ 130.468057][ T5717] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.625696][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 130.631995][ T5717] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 130.632017][ T5717] usb 2-1: config 0 has no interface number 0 [ 130.632060][ T5717] usb 2-1: config 0 interface 12 has no altsetting 0 [ 130.634255][ T5717] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 130.634278][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.634293][ T5717] usb 2-1: Product: syz [ 130.634300][ T5717] usb 2-1: Manufacturer: syz [ 130.634342][ T5717] usb 2-1: SerialNumber: syz [ 130.646643][ T5717] usb 2-1: config 0 descriptor?? [ 130.657050][ T5698] cdc_ncm 3-1:1.0: bind() failure [ 130.754930][ T5698] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 130.754957][ T5698] cdc_ncm 3-1:1.1: bind() failure [ 130.755830][ T32] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 130.804282][ T5698] usb 3-1: USB disconnect, device number 18 [ 130.918949][ T32] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 130.918966][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.918976][ T32] usb 1-1: Product: syz [ 130.918982][ T32] usb 1-1: Manufacturer: syz [ 130.918989][ T32] usb 1-1: SerialNumber: syz [ 130.923799][ T32] usb 1-1: config 0 descriptor?? [ 131.177343][ T5698] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 131.325237][ T5698] usb 3-1: device descriptor read/64, error -71 [ 131.595284][ T5698] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 131.745233][ T5698] usb 3-1: device descriptor read/64, error -71 [ 131.870572][ T5698] usb usb3-port1: attempt power cycle [ 131.934936][ T32] usb 1-1: Firmware version (0.0) predates our first public release. [ 131.934950][ T32] usb 1-1: Please update to version 0.2 or newer [ 132.136129][ T32] usb 1-1: Firmware: build [ 132.235283][ T5698] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 132.257915][ T5698] usb 3-1: device descriptor read/8, error -71 [ 132.266589][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 132.414808][ T32] usb 1-1: USB disconnect, device number 20 [ 132.425617][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 132.433623][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.452335][ T9] usb 4-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice= 0.00 [ 132.452358][ T9] usb 4-1: New USB device strings: Mfr=0, Product=234, SerialNumber=34 [ 132.452376][ T9] usb 4-1: Product: syz [ 132.452388][ T9] usb 4-1: SerialNumber: syz [ 132.494819][ T9] usb 4-1: config 0 descriptor?? [ 132.515330][ T5698] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 132.518350][ T9] usb 4-1: selecting invalid altsetting 1 [ 132.518367][ T9] usb 4-1: Can not set alternate setting to 1, error: -22 [ 132.518406][ T9] synaptics_usb 4-1:0.0: probe with driver synaptics_usb failed with error -22 [ 132.536103][ T5698] usb 3-1: device descriptor read/8, error -71 [ 132.646596][ T5698] usb usb3-port1: unable to enumerate USB device [ 132.751334][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.751394][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.893507][ T5717] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 132.893551][ T5717] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 132.893566][ T5717] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 132.893638][ T5717] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 132.949796][ T5717] usb 2-1: USB disconnect, device number 15 [ 132.962296][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803beef400: rx timeout, send abort [ 133.110974][ T6551] cgroup: release_agent respecified [ 133.462371][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802991cc00: rx timeout, send abort [ 133.463064][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88803beef400: abort rx timeout. Force session deactivation [ 133.476744][ T5717] usb 4-1: USB disconnect, device number 18 [ 133.783754][ T37] audit: type=1800 audit(1779652812.581:8): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.232" name="file0" dev="overlay" ino=366 res=0 errno=0 [ 133.909625][ T6555] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 133.910774][ T6555] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.233'. [ 133.910805][ T6555] openvswitch: netlink: Key 9 has unexpected len 21752 expected 4 [ 133.920024][ T6555] binder: 6554:6555 ioctl 4008700c 6ff returned -22 [ 133.962435][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802991cc00: abort rx timeout. Force session deactivation [ 134.328103][ T37] audit: type=1107 audit(1779652813.131:9): pid=6564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='"hh`1V2+_ N/<mM G^H$Q1p)Ye-, priority 10 [ 134.836108][ T6476] usb 1-1: Using ep0 maxpacket: 16 [ 134.838943][ T6476] usb 1-1: config 0 has no interfaces? [ 134.841278][ T6476] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 134.841301][ T6476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.841318][ T6476] usb 1-1: Product: syz [ 134.841330][ T6476] usb 1-1: Manufacturer: syz [ 134.841343][ T6476] usb 1-1: SerialNumber: syz [ 134.844253][ T6476] usb 1-1: config 0 descriptor?? [ 135.050970][ T6476] usb 1-1: USB disconnect, device number 21 [ 135.775625][ T6476] tipc: Node number set to 4269801488 [ 136.126664][ T5796] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 136.215378][ T6600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.251'. [ 136.289998][ T5796] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 136.290113][ T5796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.290131][ T5796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 136.290149][ T5796] usb 2-1: config 1 has no interface number 0 [ 136.290178][ T5796] usb 2-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 136.290212][ T5796] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 136.292516][ T5796] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 136.292540][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.292558][ T5796] usb 2-1: Product: syz [ 136.292570][ T5796] usb 2-1: Manufacturer: syz [ 136.292582][ T5796] usb 2-1: SerialNumber: syz [ 136.669783][ T32] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 136.771685][ T6612] netlink: 508 bytes leftover after parsing attributes in process `syz.1.250'. [ 136.829849][ T32] usb 3-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 136.829874][ T32] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 136.829892][ T32] usb 3-1: Product: syz [ 136.829904][ T32] usb 3-1: Manufacturer: syz [ 136.829917][ T32] usb 3-1: SerialNumber: syz [ 136.834738][ T32] usb 3-1: config 0 descriptor?? [ 137.088556][ T32] peak_usb 3-1:0.0: PEAK-System PCAN-Chip USB v0 fw v0.0.0 (1 channels) [ 137.289677][ T32] peak_usb 3-1:0.0 can0: sending command failure: -8 [ 137.289761][ T32] peak_usb 3-1:0.0 can0: sending command failure: -8 [ 137.289837][ T32] peak_usb 3-1:0.0 can0: sending command failure: -8 [ 137.385842][ T32] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -8 [ 137.500115][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.2.252'. [ 137.574806][ T32] usb 3-1: USB disconnect, device number 23 [ 138.585190][ T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 138.735225][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 138.739442][ T10] usb 3-1: config 0 has no interfaces? [ 138.741693][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 138.741716][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.741730][ T10] usb 3-1: Product: syz [ 138.741736][ T10] usb 3-1: Manufacturer: syz [ 138.741779][ T10] usb 3-1: SerialNumber: syz [ 138.786913][ T10] usb 3-1: config 0 descriptor?? [ 138.850737][ T6594] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 138.912277][ T5796] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 138.952796][ T5796] usb 2-1: USB disconnect, device number 16 [ 139.027352][ T32] usb 3-1: USB disconnect, device number 24 [ 139.032826][ T6621] netlink: 48 bytes leftover after parsing attributes in process `syz.0.256'. [ 139.464009][ T6634] virt_wifi0 speed is unknown, defaulting to 1000 [ 139.473409][ T6634] virt_wifi0 speed is unknown, defaulting to 1000 [ 139.490714][ T6634] virt_wifi0 speed is unknown, defaulting to 1000 [ 139.510937][ T6634] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 139.510967][ T6634] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 139.511001][ T6634] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 139.560554][ T32] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 139.572443][ T6634] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 139.627481][ T6634] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 139.733819][ T32] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 139.733895][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.733913][ T32] usb 1-1: Product: syz [ 139.733925][ T32] usb 1-1: Manufacturer: syz [ 139.733937][ T32] usb 1-1: SerialNumber: syz [ 139.773960][ T32] usb 1-1: config 0 descriptor?? [ 139.895778][ T6634] virt_wifi0 speed is unknown, defaulting to 1000 [ 139.905987][ T6634] virt_wifi0 speed is unknown, defaulting to 1000 [ 139.913412][ T6634] virt_wifi0 speed is unknown, defaulting to 1000 [ 139.919061][ T6634] virt_wifi0 speed is unknown, defaulting to 1000 [ 140.083469][ T6649] netlink: 40 bytes leftover after parsing attributes in process `syz.1.264'. [ 140.715400][ T5717] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 140.836583][ T32] usb 1-1: Firmware version (0.0) predates our first public release. [ 140.836605][ T32] usb 1-1: Please update to version 0.2 or newer [ 140.877462][ T5717] usb 4-1: Using ep0 maxpacket: 32 [ 140.889695][ T5717] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.889723][ T5717] usb 4-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 140.889747][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 140.889777][ T5717] usb 4-1: New USB device found, idVendor=046d, idProduct=0a07, bcdDevice= 0.00 [ 140.889796][ T5717] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.928097][ T6672] tmpfs: Bad value for 'mpol' [ 140.982075][ T5717] usb 4-1: config 0 descriptor?? [ 141.141243][ T32] usb 1-1: USB disconnect, device number 22 [ 141.163252][ T6676] netlink: 20 bytes leftover after parsing attributes in process `syz.1.272'. [ 141.262751][ T6676] fuse: fd is not a fuse device [ 141.264041][ T6676] fuse: Unknown parameter ')}>$ [ 141.264041][ T6676] ɉ -mi/)+ hЯ%fy9:wQ' [ 141.266532][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.267250][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.301061][ T6476] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 141.488754][ T6476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.488776][ T6476] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.488786][ T6476] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 141.488846][ T6476] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 141.488858][ T6476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.565088][ T6476] usb 3-1: config 0 descriptor?? [ 141.590499][ T6682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.273'. [ 141.787248][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.787822][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.107779][ T6476] plantronics 0003:047F:FFFF.0005: report_id 16563 is invalid [ 142.107801][ T6476] plantronics 0003:047F:FFFF.0005: item 0 2 1 8 parsing failed [ 142.108736][ T6476] plantronics 0003:047F:FFFF.0005: parse failed [ 142.108887][ T6476] plantronics 0003:047F:FFFF.0005: probe with driver plantronics failed with error -22 [ 142.230105][ T6674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.244179][ T6674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.363126][ T6697] pim6reg: entered allmulticast mode [ 142.367691][ T6697] pim6reg: left allmulticast mode [ 142.525483][ T9] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 142.679869][ T9] usb 1-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 142.679896][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.679914][ T9] usb 1-1: Product: syz [ 142.679925][ T9] usb 1-1: Manufacturer: syz [ 142.679938][ T9] usb 1-1: SerialNumber: syz [ 143.091429][ T6703] netlink: 169404 bytes leftover after parsing attributes in process `syz.0.279'. [ 143.091451][ T6703] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 143.249742][ T5717] usbhid 4-1:0.0: can't add hid device: -71 [ 143.249852][ T5717] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 143.290211][ T5717] usb 4-1: USB disconnect, device number 19 [ 143.817786][ T9] rtl8150 1-1:1.0: couldn't reset the device [ 143.818146][ T9] rtl8150 1-1:1.0: probe with driver rtl8150 failed with error -5 [ 143.852828][ T6712] process 'syz.1.283' launched '/dev/fd/3' with NULL argv: empty string added [ 143.885351][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 144.060542][ T32] usb 3-1: USB disconnect, device number 25 [ 144.063029][ T10] usb 4-1: config 22 has an invalid interface number: 210 but max is 0 [ 144.063051][ T10] usb 4-1: config 22 has no interface number 0 [ 144.063080][ T10] usb 4-1: config 22 interface 210 has no altsetting 0 [ 144.092576][ T10] usb 4-1: New USB device found, idVendor=1d2a, idProduct=0801, bcdDevice=3c.54 [ 144.092600][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.092617][ T10] usb 4-1: Product: syz [ 144.092629][ T10] usb 4-1: Manufacturer: syz [ 144.092642][ T10] usb 4-1: SerialNumber: syz [ 144.466412][ T6721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.286'. [ 144.511518][ T10] asix 4-1:22.210: probe with driver asix failed with error -22 [ 144.530237][ T10] usb 4-1: USB disconnect, device number 20 [ 144.726565][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 144.865253][ T9] usb 3-1: device descriptor read/64, error -71 [ 145.105245][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 145.235275][ T9] usb 3-1: device descriptor read/64, error -71 [ 145.346340][ T9] usb usb3-port1: attempt power cycle [ 145.366703][ T6476] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 145.527409][ T6476] usb 4-1: Using ep0 maxpacket: 16 [ 145.550434][ T6476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.550461][ T6476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.550480][ T6476] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 145.550517][ T6476] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 145.550536][ T6476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.569725][ T6476] usb 4-1: config 0 descriptor?? [ 145.605366][ T5634] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 145.685967][ T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 145.706822][ T9] usb 3-1: device descriptor read/8, error -71 [ 145.945242][ T9] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 145.966556][ T9] usb 3-1: device descriptor read/8, error -71 [ 145.985882][ T6476] hid (null): unknown global tag 0xe [ 146.040709][ T6476] shield 0003:0955:7214.0006: unknown global tag 0xe [ 146.040731][ T6476] shield 0003:0955:7214.0006: item 0 1 1 14 parsing failed [ 146.041382][ T6476] shield 0003:0955:7214.0006: Parse failed [ 146.041445][ T6476] shield 0003:0955:7214.0006: probe with driver shield failed with error -22 [ 146.079200][ T9] usb usb3-port1: unable to enumerate USB device [ 146.194707][ T6725] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 146.268514][ T5821] usb 4-1: USB disconnect, device number 21 [ 146.325444][ T5796] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 146.477005][ T5796] usb 2-1: config index 0 descriptor too short (expected 39, got 27) [ 146.477058][ T5796] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 201, changing to 11 [ 146.477089][ T5796] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 18371, setting to 1024 [ 146.477113][ T5796] usb 2-1: config 0 interface 0 has no altsetting 0 [ 146.480000][ T5796] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 146.480022][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 146.480032][ T5796] usb 2-1: Product: syz [ 146.480039][ T5796] usb 2-1: Manufacturer: syz [ 146.480045][ T5796] usb 2-1: SerialNumber: syz [ 146.522597][ T32] usb 1-1: USB disconnect, device number 23 [ 146.564847][ T5796] usb 2-1: config 0 descriptor?? [ 146.566984][ T6745] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 146.620774][ T5796] hub 2-1:0.0: bad descriptor, ignoring hub [ 146.620807][ T5796] hub 2-1:0.0: probe with driver hub failed with error -5 [ 146.650781][ T5796] usb 2-1: selecting invalid altsetting 0 [ 147.435599][ T10] usb 2-1: USB disconnect, device number 17 [ 147.442504][ T6772] netlink: 32 bytes leftover after parsing attributes in process `syz.0.295'. [ 147.885265][ T10] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 148.043077][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 148.043107][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 148.053002][ T10] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 148.053028][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.053045][ T10] usb 1-1: Product: syz [ 148.053057][ T10] usb 1-1: Manufacturer: syz [ 148.053070][ T10] usb 1-1: SerialNumber: syz [ 148.120216][ T10] usb 1-1: config 0 descriptor?? [ 148.138698][ T10] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -12 [ 148.272345][ T37] audit: type=1326 audit(1779652827.071:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6793 comm="syz.3.303" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbfbaa6ce59 code=0x0 [ 148.377146][ T6799] netlink: 96 bytes leftover after parsing attributes in process `syz.1.302'. [ 148.394264][ T5821] usb 1-1: USB disconnect, device number 24 [ 149.097049][ T824] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 149.248590][ T824] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 149.248640][ T824] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 149.248664][ T824] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 65535, setting to 64 [ 149.248686][ T824] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 149.255295][ T824] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 149.255319][ T824] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 149.255337][ T824] usb 2-1: Product: syz [ 149.255348][ T824] usb 2-1: Manufacturer: syz [ 149.255361][ T824] usb 2-1: SerialNumber: syz [ 149.340319][ T824] usb 2-1: config 0 descriptor?? [ 149.341655][ T6809] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.545744][ T824] radio-si470x 2-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 149.545766][ T824] radio-si470x 2-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 149.612903][ T6827] bridge0: port 3(syz_tun) entered blocking state [ 149.613249][ T6827] bridge0: port 3(syz_tun) entered disabled state [ 149.613573][ T6827] syz_tun: entered allmulticast mode [ 149.620256][ T6827] syz_tun: entered promiscuous mode [ 149.621300][ T6827] bridge0: port 3(syz_tun) entered blocking state [ 149.621445][ T6827] bridge0: port 3(syz_tun) entered forwarding state [ 149.730382][ T6829] cgroup: Name too long [ 149.749171][ T824] radio-si470x 2-1:0.0: software version 0, hardware version 0 [ 149.749190][ T824] radio-si470x 2-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 149.749200][ T824] radio-si470x 2-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 149.949776][ T824] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 149.950054][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 149.950269][ C0] radio-si470x 2-1:0.0: non-zero urb status (-71) [ 149.950328][ T824] radio-si470x 2-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 149.951255][ T824] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -22 [ 149.965806][ T824] usb 2-1: USB disconnect, device number 18 [ 150.682644][ T6842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.319'. [ 150.875057][ T6847] trusted_key: syz.0.321 sent an empty control message without MSG_MORE. [ 150.915584][ T824] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 150.955266][ T10] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 151.070273][ T824] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 151.070301][ T824] usb 2-1: Duplicate descriptor for config 0 interface 0 altsetting 0, skipping [ 151.070333][ T824] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 151.070353][ T824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.116063][ T10] usb 4-1: device descriptor read/64, error -71 [ 151.116423][ T824] usb 2-1: config 0 descriptor?? [ 151.122935][ T824] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 151.316228][ T5821] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 151.319613][ T32] usb 2-1: USB disconnect, device number 19 [ 151.355335][ T10] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 151.465426][ T5821] usb 1-1: Using ep0 maxpacket: 16 [ 151.471866][ T5821] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.473920][ T5821] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 151.473942][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.473952][ T5821] usb 1-1: Product: syz [ 151.473959][ T5821] usb 1-1: Manufacturer: syz [ 151.473966][ T5821] usb 1-1: SerialNumber: syz [ 151.485247][ T10] usb 4-1: device descriptor read/64, error -71 [ 151.524525][ T5821] usb 1-1: config 0 descriptor?? [ 151.596502][ T10] usb usb4-port1: attempt power cycle [ 151.735268][ T824] usb 1-1: USB disconnect, device number 25 [ 151.892683][ T6857] netlink: 16 bytes leftover after parsing attributes in process `syz.1.325'. [ 151.936631][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 151.957742][ T10] usb 4-1: device descriptor read/8, error -71 [ 151.959982][ T6859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.326'. [ 152.195223][ T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 152.215791][ T10] usb 4-1: device descriptor read/8, error -71 [ 152.245355][ T824] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 152.325997][ T10] usb usb4-port1: unable to enumerate USB device [ 152.385262][ T824] usb 2-1: device descriptor read/64, error -71 [ 152.635218][ T824] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 152.685217][ T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 152.765272][ T824] usb 2-1: device descriptor read/64, error -71 [ 152.835221][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 152.836822][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.836847][ T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 152.836859][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 152.836871][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 152.836882][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.838904][ T10] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 152.838928][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.838938][ T10] usb 1-1: Product: syz [ 152.838945][ T10] usb 1-1: Manufacturer: syz [ 152.838952][ T10] usb 1-1: SerialNumber: syz [ 152.842374][ T10] usb 1-1: config 0 descriptor?? [ 152.875765][ T824] usb usb2-port1: attempt power cycle [ 153.096370][ T6865] netlink: 16 bytes leftover after parsing attributes in process `syz.0.329'. [ 153.158005][ T10] iowarrior 1-1:0.0: IOWarrior product=0x1505, serial= interface=0 now attached to iowarrior0 [ 153.164549][ T10] usb 1-1: USB disconnect, device number 26 [ 153.215258][ T824] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 153.235819][ T824] usb 2-1: device descriptor read/8, error -71 [ 153.475276][ T824] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 153.496557][ T824] usb 2-1: device descriptor read/8, error -71 [ 153.606882][ T824] usb usb2-port1: unable to enumerate USB device [ 153.899611][ T6870] comedi: valid board names for 8255 driver are: [ 153.899621][ T6870] 8255 [ 153.899625][ T6870] comedi: valid board names for vmk80xx driver are: [ 153.899629][ T6870] vmk80xx [ 153.899632][ T6870] comedi: valid board names for usbduxsigma driver are: [ 153.899636][ T6870] usbduxsigma [ 153.899639][ T6870] comedi: valid board names for usbduxfast driver are: [ 153.899643][ T6870] usbduxfast [ 153.899646][ T6870] comedi: valid board names for usbdux driver are: [ 153.899650][ T6870] usbdux [ 153.899653][ T6870] comedi: valid board names for ni6501 driver are: [ 153.899656][ T6870] ni6501 [ 153.899659][ T6870] comedi: valid board names for dt9812 driver are: [ 153.899663][ T6870] dt9812 [ 153.899666][ T6870] comedi: valid board names for ni_labpc_cs driver are: [ 153.899670][ T6870] ni_labpc_cs [ 153.899673][ T6870] comedi: valid board names for ni_daq_700 driver are: [ 153.899677][ T6870] ni_daq_700 [ 153.899679][ T6870] comedi: valid board names for labpc_pci driver are: [ 153.899683][ T6870] labpc_pci [ 153.899686][ T6870] comedi: valid board names for adl_pci9118 driver are: [ 153.899690][ T6870] pci9118dg [ 153.899693][ T6870] pci9118hg [ 153.899696][ T6870] pci9118hr [ 153.899698][ T6870] comedi: valid board names for 8255_pci driver are: [ 153.899702][ T6870] 8255_pci [ 153.899705][ T6870] comedi: valid board names for s526 driver are: [ 153.899709][ T6870] s526 [ 153.899711][ T6870] comedi: valid board names for multiq3 driver are: [ 153.899715][ T6870] multiq3 [ 153.899718][ T6870] comedi: valid board names for pcmuio driver are: [ 153.899722][ T6870] pcmuio48 [ 153.899725][ T6870] pcmuio96 [ 153.899728][ T6870] comedi: valid board names for pcmmio driver are: [ 153.899732][ T6870] pcmmio [ 153.899735][ T6870] comedi: valid board names for pcmda12 driver are: [ 153.899739][ T6870] pcmda12 [ 153.899741][ T6870] comedi: valid board names for pcmad driver are: [ 153.899745][ T6870] pcmad12 [ 153.899748][ T6870] pcmad16 [ 153.899751][ T6870] comedi: valid board names for ni_labpc driver are: [ 153.899755][ T6870] lab-pc-1200 [ 153.899758][ T6870] lab-pc-1200ai [ 153.899761][ T6870] lab-pc+ [ 153.899764][ T6870] comedi: valid board names for atmio16 driver are: [ 153.899768][ T6870] atmio16 [ 153.899770][ T6870] atmio16d [ 153.899773][ T6870] comedi: valid board names for ni_at_ao driver are: [ 153.899777][ T6870] at-ao-6 [ 153.899780][ T6870] at-ao-10 [ 153.899783][ T6870] comedi: valid board names for ni_at_a2150 driver are: [ 153.899787][ T6870] ni_at_a2150 [ 153.899790][ T6870] comedi: valid board names for adq12b driver are: [ 153.899794][ T6870] adq12b [ 153.899797][ T6870] comedi: valid board names for mpc624 driver are: [ 153.899801][ T6870] mpc624 [ 153.899803][ T6870] comedi: valid board names for c6xdigio driver are: [ 153.899807][ T6870] c6xdigio [ 153.899810][ T6870] comedi: valid board names for aio_iiro_16 driver are: [ 153.899814][ T6870] aio_iiro_16 [ 153.899817][ T6870] comedi: valid board names for aio_aio12_8 driver are: [ 153.899820][ T6870] aio_aio12_8 [ 153.899823][ T6870] aio_ai12_8 [ 153.899826][ T6870] aio_ao12_4 [ 153.899829][ T6870] comedi: valid board names for fl512 driver are: [ 153.899833][ T6870] fl512 [ 153.899835][ T6870] comedi: valid board names for dmm32at driver are: [ 153.899839][ T6870] dmm32at [ 153.899842][ T6870] comedi: valid board names for dt282x driver are: [ 153.899846][ T6870] dt2821 [ 153.899849][ T6870] dt2821-f [ 153.899851][ T6870] dt2821-g [ 153.899854][ T6870] dt2823 [ 153.899857][ T6870] dt2824-pgh [ 153.899860][ T6870] dt2824-pgl [ 153.899862][ T6870] dt2825 [ 153.899865][ T6870] dt2827 [ 153.899868][ T6870] dt2828 [ 153.899870][ T6870] dt2829 [ 153.899873][ T6870] dt21-ez [ 153.899876][ T6870] dt23-ez [ 153.899879][ T6870] dt24-ez [ 153.899881][ T6870] dt24-ez-pgl [ 153.899884][ T6870] comedi: valid board names for dt2817 driver are: [ 153.899888][ T6870] dt2817 [ 153.899891][ T6870] comedi: valid board names for dt2815 driver are: [ 153.899894][ T6870] dt2815 [ 153.899897][ T6870] comedi: valid board names for dt2814 driver are: [ 153.899901][ T6870] dt2814 [ 153.899903][ T6870] comedi: valid board names for dt2811 driver are: [ 153.899907][ T6870] dt2811-pgh [ 153.899910][ T6870] dt2811-pgl [ 153.899913][ T6870] comedi: valid board names for dt2801 driver are: [ 153.899917][ T6870] dt2801 [ 153.899919][ T6870] comedi: valid board names for das6402 driver are: [ 153.899923][ T6870] das6402-12 [ 153.899926][ T6870] das6402-16 [ 153.899929][ T6870] comedi: valid board names for das1800 driver are: [ 153.899932][ T6870] das-1701st [ 153.899935][ T6870] das-1701st-da [ 153.899938][ T6870] das-1702st [ 153.899941][ T6870] das-1702st-da [ 153.899943][ T6870] das-1702hr [ 153.899946][ T6870] das-1702hr-da [ 153.899949][ T6870] das-1701ao [ 153.899952][ T6870] das-1702ao [ 153.899955][ T6870] das-1801st [ 153.899957][ T6870] das-1801st-da [ 153.899960][ T6870] das-1802st [ 153.899963][ T6870] das-1802st-da [ 153.899966][ T6870] das-1802hr [ 153.899969][ T6870] das-1802hr-da [ 153.899972][ T6870] das-1801hc [ 153.899974][ T6870] das-1802hc [ 153.899977][ T6870] das-1801ao [ 153.899980][ T6870] das-1802ao [ 153.899983][ T6870] comedi: valid board names for das800 driver are: [ 153.899986][ T6870] das-800 [ 153.899989][ T6870] cio-das800 [ 153.899992][ T6870] das-801 [ 153.899995][ T6870] cio-das801 [ 153.899997][ T6870] das-802 [ 153.900000][ T6870] cio-das802 [ 153.900003][ T6870] cio-das802/16 [ 153.900006][ T6870] comedi: valid board names for isa-das08 driver are: [ 153.900010][ T6870] isa-das08 [ 153.900012][ T6870] das08-pgm [ 153.900015][ T6870] das08-pgh [ 153.900018][ T6870] das08-pgl [ 153.900021][ T6870] das08-aoh [ 153.900023][ T6870] das08-aol [ 153.900026][ T6870] das08-aom [ 153.900029][ T6870] das08/jr-ao [ 153.900032][ T6870] das08jr-16-ao [ 153.900034][ T6870] pc104-das08 [ 153.900037][ T6870] das08jr/16 [ 153.900040][ T6870] comedi: valid board names for das16m1 driver are: [ 153.900044][ T6870] das16m1 [ 153.900048][ T6870] comedi: valid board names for dac02 driver are: [ 153.900053][ T6870] dac02 [ 153.900056][ T6870] comedi: valid board names for rti802 driver are: [ 153.900059][ T6870] rti802 [ 153.900062][ T6870] comedi: valid board names for rti800 driver are: [ 153.900066][ T6870] rti800 [ 153.900069][ T6870] rti815 [ 153.900071][ T6870] comedi: valid board names for pcm3724 driver are: [ 153.900075][ T6870] pcm3724 [ 153.900078][ T6870] comedi: valid board names for pcl818 driver are: [ 153.900082][ T6870] pcl818l [ 153.900084][ T6870] pcl818h [ 153.900087][ T6870] pcl818hd [ 153.900090][ T6870] pcl818hg [ 153.900093][ T6870] pcl818 [ 153.900095][ T6870] pcl718 [ 153.900098][ T6870] pcm3718 [ 153.900101][ T6870] comedi: valid board names for pcl816 driver are: [ 153.900105][ T6870] pcl816 [ 153.900107][ T6870] pcl814b [ 153.900110][ T6870] comedi: valid board names for pcl812 driver are: [ 153.900114][ T6870] pcl812 [ 153.900117][ T6870] pcl812pg [ 153.900119][ T6870] acl8112pg [ 153.900122][ T6870] acl8112dg [ 153.900125][ T6870] acl8112hg [ 153.900128][ T6870] a821pgl [ 153.900130][ T6870] a821pglnda [ 153.900133][ T6870] a821pgh [ 153.900136][ T6870] a822pgl [ 153.900139][ T6870] a822pgh [ 153.900141][ T6870] a823pgl [ 153.900144][ T6870] a823pgh [ 153.900147][ T6870] pcl813 [ 153.900149][ T6870] pcl813b [ 153.900152][ T6870] acl8113 [ 153.900155][ T6870] iso813 [ 153.900157][ T6870] acl8216 [ 153.900160][ T6870] a826pg [ 153.900163][ T6870] comedi: valid board names for pcl730 driver are: [ 153.900167][ T6870] pcl730 [ 153.900169][ T6870] iso730 [ 153.900172][ T6870] acl7130 [ 153.900175][ T6870] pcm3730 [ 153.900177][ T6870] pcl725 [ 153.900180][ T6870] p8r8dio [ 153.900183][ T6870] acl7225b [ 153.900185][ T6870] p16r16dio [ 153.900188][ T6870] pcl733 [ 153.900191][ T6870] pcl734 [ 153.900194][ T6870] opmm-1616-xt [ 153.900197][ T6870] pearl-mm-p [ 153.900199][ T6870] ir104-pbf [ 153.900202][ T6870] comedi: valid board names for pcl726 driver are: [ 153.900206][ T6870] pcl726 [ 153.900209][ T6870] pcl727 [ 153.900211][ T6870] pcl728 [ 153.900214][ T6870] acl6126 [ 153.900217][ T6870] acl6128 [ 153.900220][ T6870] comedi: valid board names for pcl724 driver are: [ 153.900223][ T6870] pcl724 [ 153.900226][ T6870] pcl722 [ 153.900229][ T6870] pcl731 [ 153.900231][ T6870] acl7122 [ 153.900234][ T6870] acl7124 [ 153.900237][ T6870] pet48dio [ 153.900240][ T6870] pcmio48 [ 153.900242][ T6870] onyx-mm-dio [ 153.900245][ T6870] comedi: valid board names for pcl711 driver are: [ 153.900249][ T6870] pcl711 [ 153.900252][ T6870] pcl711b [ 153.900254][ T6870] acl8112hg [ 153.900257][ T6870] acl8112dg [ 153.900260][ T6870] comedi: valid board names for amplc_pc263 driver are: [ 153.900264][ T6870] pc263 [ 153.900266][ T6870] comedi: valid board names for amplc_pc236 driver are: [ 153.900270][ T6870] pc36at [ 153.900273][ T6870] comedi: valid board names for amplc_dio200 driver are: [ 153.900277][ T6870] pc212e [ 153.900280][ T6870] pc214e [ 153.900282][ T6870] pc215e [ 153.900418][ T6870] pc218e [ 153.900423][ T6870] pc272e [ 153.900425][ T6870] comedi: valid board names for comedi_parport driver are: [ 153.900430][ T6870] comedi_parport [ 153.900433][ T6870] comedi: valid board names for comedi_test driver are: [ 153.900438][ T6870] comedi_test [ 153.900440][ T6870] comedi: valid board names for comedi_bond driver are: [ 153.900445][ T6870] comedi_bond [ 153.995237][ T824] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 154.146793][ T824] usb 1-1: Using ep0 maxpacket: 16 [ 154.148730][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.148755][ T824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 154.148787][ T824] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 154.148805][ T824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.166458][ T824] usb 1-1: config 0 descriptor?? [ 154.188683][ T6879] netlink: 'syz.3.333': attribute type 2 has an invalid length. [ 154.188698][ T6879] netlink: 'syz.3.333': attribute type 1 has an invalid length. [ 154.589561][ T6868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.590460][ T6868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.654934][ T824] corsair 0003:1B1C:1B02.0007: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.0-1/input0 [ 155.168631][ T10] usb 1-1: USB disconnect, device number 27 [ 155.290720][ T6893] Context (ID=0x0) not attached to queue pair (handle=0x4d5:0x10) [ 155.652346][ T6902] IPVS: sed: FWM 3 0x00000003 - no destination available [ 155.660226][ T10] IPVS: starting estimator thread 0... [ 155.745556][ T6903] IPVS: using max 9 ests per chain, 21600 per kthread [ 155.835299][ T5821] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 155.985249][ T5821] usb 4-1: Using ep0 maxpacket: 32 [ 156.008710][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.008738][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.008772][ T5821] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 156.008792][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.013527][ T5821] usb 4-1: config 0 descriptor?? [ 156.075302][ T5796] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 156.225380][ T5796] usb 1-1: Using ep0 maxpacket: 8 [ 156.241097][ T5796] usb 1-1: unable to get BOS descriptor or descriptor too short [ 156.242597][ T5796] usb 1-1: config 64 has an invalid interface number: 8 but max is 0 [ 156.242620][ T5796] usb 1-1: config 64 has no interface number 0 [ 156.247377][ T5796] usb 1-1: New USB device found, idVendor=0b57, idProduct=3dcd, bcdDevice=1e.db [ 156.247401][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.247419][ T5796] usb 1-1: Product: syz [ 156.247430][ T5796] usb 1-1: Manufacturer: syz [ 156.247442][ T5796] usb 1-1: SerialNumber: syz [ 156.530988][ T5821] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 157.134154][ T32] usb 4-1: USB disconnect, device number 26 [ 157.155248][ T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 157.285410][ T6476] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 157.336912][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 157.364840][ T10] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 157.364874][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.364935][ T10] usb 3-1: Product: syz [ 157.364947][ T10] usb 3-1: Manufacturer: syz [ 157.364960][ T10] usb 3-1: SerialNumber: syz [ 157.446051][ T6476] usb 2-1: Using ep0 maxpacket: 16 [ 157.449012][ T10] usb 3-1: config 0 descriptor?? [ 157.466756][ T6476] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.466798][ T6476] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 157.469210][ T6476] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 157.469234][ T6476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.469253][ T6476] usb 2-1: Product: syz [ 157.469266][ T6476] usb 2-1: Manufacturer: syz [ 157.469279][ T6476] usb 2-1: SerialNumber: syz [ 157.586094][ T6476] usb 2-1: config 0 descriptor?? [ 157.793311][ T9] usb 2-1: USB disconnect, device number 24 [ 157.876161][ T10] airspy 3-1:0.0: Board ID: 00 [ 157.876174][ T10] airspy 3-1:0.0: Firmware version: [ 158.515374][ T5821] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 158.667827][ T5821] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 20 [ 158.667867][ T5821] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 158.667903][ T5821] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 158.667926][ T5821] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 158.667964][ T5821] usb 4-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 158.667984][ T5821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.672877][ T5821] usb 4-1: config 0 descriptor?? [ 158.674404][ T6926] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 158.761903][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.763938][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.776026][ T10] airspy 3-1:0.0: usb_control_msg() failed -71 request 0f [ 158.981911][ T10] airspy 3-1:0.0: Registered as swradio24 [ 158.981931][ T10] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 159.086605][ T10] usb 3-1: USB disconnect, device number 30 [ 159.161037][ T5821] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 159.161071][ T5821] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 159.161111][ T5821] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 159.161136][ T5821] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 159.161159][ T5821] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 159.161182][ T5821] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 159.161206][ T5821] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 159.161231][ T5821] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 159.161256][ T5821] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 159.161279][ T5821] dragonrise 0003:0079:0011.0009: unknown main item tag 0x0 [ 159.290972][ T5821] dragonrise 0003:0079:0011.0009: hidraw0: USB HID v0.01 Device [HID 0079:0011] on usb-dummy_hcd.3-1/input0 [ 159.549451][ T5796] usbhid 1-1:64.8: couldn't find an input interrupt endpoint [ 159.580463][ T5796] usb 1-1: USB disconnect, device number 28 [ 160.008529][ T6945] Bluetooth: MGMT ver 1.23 [ 160.275348][ T10] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 160.430151][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 160.431937][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.431984][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.434185][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 160.434210][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.434227][ T10] usb 3-1: Product: syz [ 160.434296][ T10] usb 3-1: Manufacturer: syz [ 160.434310][ T10] usb 3-1: SerialNumber: syz [ 160.440775][ T10] usb 3-1: config 0 descriptor?? [ 160.680035][ T6476] usb 3-1: USB disconnect, device number 31 [ 161.325298][ T9] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 161.331176][ T32] usb 4-1: USB disconnect, device number 27 [ 161.444549][ T6973] QAT: Device 2 not found [ 161.475272][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 161.478252][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 161.478273][ T9] usb 1-1: config 0 has no interface number 0 [ 161.478313][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.478352][ T9] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 161.478371][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.493580][ T9] usb 1-1: config 0 descriptor?? [ 161.575265][ T5796] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 161.639240][ T9] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 161.706136][ T5796] usb 2-1: device descriptor read/64, error -71 [ 161.747266][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.748722][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.759189][ T9] usb 1-1: USB disconnect, device number 29 [ 161.865221][ T5821] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 161.945249][ T5796] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 162.019409][ T5821] usb 3-1: unable to get BOS descriptor or descriptor too short [ 162.020552][ T5821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 162.020632][ T5821] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.020656][ T5821] usb 3-1: config 1 interface 1 has no altsetting 0 [ 162.022764][ T5821] usb 3-1: New USB device found, idVendor=2a6b, idProduct=0101, bcdDevice= 0.40 [ 162.022787][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.022804][ T5821] usb 3-1: Product: syz [ 162.022816][ T5821] usb 3-1: Manufacturer: 剦㼋뻮嗐늿膄䫀㧽汄끓揕抃皔똎䦛㬽ᡦ꼭ཊɇ䭙 [ 162.022829][ T5821] usb 3-1: SerialNumber: syz [ 162.075319][ T5796] usb 2-1: device descriptor read/64, error -71 [ 162.186859][ T5796] usb usb2-port1: attempt power cycle [ 162.324799][ T5821] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 162.324823][ T5821] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 162.325013][ T5821] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 162.325030][ T5821] usb 3-1: found format II with max.bitrate = 2418, frame size=7 [ 162.359847][ T6982] fuse: Bad value for 'fd' [ 162.517111][ T6980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.517677][ T6980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.525883][ T5796] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 162.549614][ T5796] usb 2-1: device descriptor read/8, error -71 [ 162.655595][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 162.788330][ T5796] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 162.795025][ T5821] usb 3-1: USB disconnect, device number 32 [ 162.809023][ T5796] usb 2-1: device descriptor read/8, error -71 [ 162.889262][ T6992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.372'. [ 162.897836][ T6992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.372'. [ 162.916532][ T5796] usb usb2-port1: unable to enumerate USB device [ 162.919760][ T6134] udevd[6134]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 163.128600][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 163.130328][ T9] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 163.130361][ T9] usb 4-1: can't read configurations, error -71 [ 163.493066][ T6998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.374'. [ 163.555353][ T5821] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 163.676928][ T7003] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.706059][ T5821] usb 3-1: Using ep0 maxpacket: 16 [ 163.708783][ T5821] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 163.710874][ T5821] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 163.710896][ T5821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.710905][ T5821] usb 3-1: Product: syz [ 163.710912][ T5821] usb 3-1: Manufacturer: syz [ 163.710919][ T5821] usb 3-1: SerialNumber: syz [ 163.764300][ T5821] usb 3-1: config 0 descriptor?? [ 163.824772][ T37] audit: type=1800 audit(1779652842.621:11): pid=7005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.377" name="/fuse" dev="devtmpfs" ino=99 res=0 errno=0 [ 163.906501][ T6476] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 163.975517][ T5821] usb 3-1: USB disconnect, device number 33 [ 164.033920][ T7016] syzkaller0: entered promiscuous mode [ 164.033934][ T7016] syzkaller0: entered allmulticast mode [ 164.055242][ T6476] usb 1-1: Using ep0 maxpacket: 8 [ 164.058945][ T6476] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.058991][ T6476] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 164.059012][ T6476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 164.059029][ T6476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 164.059039][ T6476] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 164.154934][ T6476] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 164.154949][ T6476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 164.154959][ T6476] usb 1-1: Product: syz [ 164.154966][ T6476] usb 1-1: Manufacturer: syz [ 164.154972][ T6476] usb 1-1: SerialNumber: syz [ 164.188454][ T6476] usb 1-1: config 0 descriptor?? [ 164.397261][ T7001] netlink: 'syz.0.375': attribute type 2 has an invalid length. [ 164.401958][ T6476] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 164.401972][ T6476] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 164.637286][ T6476] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 164.637309][ T6476] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 164.637584][ T6476] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 164.679196][ T6476] usb 1-1: USB disconnect, device number 30 [ 164.936503][ T5796] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 165.097544][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 165.097569][ T5796] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.097590][ T5796] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 165.097601][ T5796] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.102524][ T5796] usb 3-1: config 0 descriptor?? [ 165.318993][ T7030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.319499][ T7030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.456735][ T7044] sg_write: data in/out 1252404699/178 bytes for SCSI command 0xff-- guessing data in; [ 165.456735][ T7044] program syz.0.388 not setting count and/or reply_len properly [ 165.743885][ T7030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.754371][ T7030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.755029][ T7052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.789827][ T7052] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 165.840048][ T5796] hid-led 0003:27B8:01ED.000A: probe with driver hid-led failed with error -71 [ 165.857815][ T5796] usb 3-1: USB disconnect, device number 34 [ 165.976712][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 166.125227][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 166.127189][ T9] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 166.127211][ T9] usb 2-1: config 0 has no interface number 0 [ 166.127248][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 166.127262][ T9] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 166.129320][ T9] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 166.129343][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.129354][ T9] usb 2-1: Product: syz [ 166.129361][ T9] usb 2-1: Manufacturer: syz [ 166.129368][ T9] usb 2-1: SerialNumber: syz [ 166.132266][ T9] usb 2-1: config 0 descriptor?? [ 166.132881][ T7049] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 166.132989][ T7049] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 166.218463][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 166.337037][ T7049] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 166.337144][ T7049] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 166.365248][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 166.367549][ T10] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 166.367570][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.367587][ T10] usb 1-1: config 0 has no interface number 0 [ 166.367618][ T10] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.371572][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 166.371594][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.371604][ T10] usb 1-1: Product: syz [ 166.371611][ T10] usb 1-1: Manufacturer: syz [ 166.371618][ T10] usb 1-1: SerialNumber: syz [ 166.386212][ T10] usb 1-1: config 0 descriptor?? [ 166.493556][ T10] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 166.493692][ T10] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 166.538417][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 166.638788][ T10] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 166.639248][ T10] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 166.672158][ T7073] netlink: 'syz.3.397': attribute type 16 has an invalid length. [ 166.672175][ T7073] netlink: 2 bytes leftover after parsing attributes in process `syz.3.397'. [ 166.912709][ T7075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.918426][ T7075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.920027][ T7059] netlink: 'syz.0.393': attribute type 3 has an invalid length. [ 166.924683][ T5796] usb 1-1: USB disconnect, device number 31 [ 167.442179][ T7088] FAULT_INJECTION: forcing a failure. [ 167.442179][ T7088] name failslab, interval 1, probability 0, space 0, times 1 [ 167.442223][ T7088] CPU: 0 UID: 0 PID: 7088 Comm: syz.3.402 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 167.442251][ T7088] Tainted: [L]=SOFTLOCKUP [ 167.442258][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 167.442271][ T7088] Call Trace: [ 167.442281][ T7088] [ 167.442290][ T7088] dump_stack_lvl+0xe8/0x150 [ 167.442317][ T7088] should_fail_ex+0x46b/0x600 [ 167.442346][ T7088] should_failslab+0xa8/0x100 [ 167.442368][ T7088] __kmalloc_noprof+0xdf/0x7b0 [ 167.442387][ T7088] ? tomoyo_encode+0x28b/0x550 [ 167.442411][ T7088] tomoyo_encode+0x28b/0x550 [ 167.442434][ T7088] tomoyo_realpath_from_path+0x58d/0x5d0 [ 167.442462][ T7088] ? tomoyo_path_number_perm+0x219/0x630 [ 167.442487][ T7088] tomoyo_path_number_perm+0x246/0x630 [ 167.442513][ T7088] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 167.442536][ T7088] ? __lock_acquire+0x6b5/0x2d10 [ 167.442559][ T7088] ? do_raw_spin_lock+0x12b/0x2f0 [ 167.442605][ T7088] ? __fget_files+0x2a/0x420 [ 167.442625][ T7088] ? __fget_files+0x2a/0x420 [ 167.442641][ T7088] ? __fget_files+0x3a6/0x420 [ 167.442656][ T7088] ? __fget_files+0x2a/0x420 [ 167.442677][ T7088] security_file_ioctl+0xc3/0x2a0 [ 167.442701][ T7088] __se_sys_ioctl+0x47/0x170 [ 167.442722][ T7088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.442741][ T7088] do_syscall_64+0x15f/0x560 [ 167.442766][ T7088] ? clear_bhb_loop+0x40/0x90 [ 167.442786][ T7088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.442803][ T7088] RIP: 0033:0x7fbfbaa6ce59 [ 167.442825][ T7088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 167.442839][ T7088] RSP: 002b:00007fbfb8cbe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 167.442861][ T7088] RAX: ffffffffffffffda RBX: 00007fbfbace5fa0 RCX: 00007fbfbaa6ce59 [ 167.442874][ T7088] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003 [ 167.442885][ T7088] RBP: 00007fbfb8cbe090 R08: 0000000000000000 R09: 0000000000000000 [ 167.442896][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.442907][ T7088] R13: 00007fbfbace6038 R14: 00007fbfbace5fa0 R15: 00007ffdc7592418 [ 167.442936][ T7088] [ 167.443020][ T7088] ERROR: Out of memory at tomoyo_realpath_from_path. [ 168.265311][ T6476] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 168.287904][ T5821] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 168.425303][ T6476] usb 1-1: Using ep0 maxpacket: 32 [ 168.428286][ T6476] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 168.428309][ T6476] usb 1-1: config 0 has no interface number 0 [ 168.428352][ T6476] usb 1-1: config 0 interface 184 has no altsetting 0 [ 168.430758][ T6476] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 168.430782][ T6476] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.430800][ T6476] usb 1-1: Product: syz [ 168.430812][ T6476] usb 1-1: Manufacturer: syz [ 168.430825][ T6476] usb 1-1: SerialNumber: syz [ 168.436664][ T6476] usb 1-1: config 0 descriptor?? [ 168.448505][ T5821] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.448526][ T5821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 168.448568][ T5821] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 168.448811][ T5821] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 168.448833][ T5821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.481872][ T7104] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 168.507014][ T5821] hub 3-1:1.0: bad descriptor, ignoring hub [ 168.507046][ T5821] hub 3-1:1.0: probe with driver hub failed with error -5 [ 168.510161][ T5821] cdc_wdm 3-1:1.0: skipping garbage [ 168.510175][ T5821] cdc_wdm 3-1:1.0: skipping garbage [ 168.663835][ T5821] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 168.663866][ T5821] cdc_wdm 3-1:1.0: Unknown control protocol [ 168.738232][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 168.738327][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 168.738542][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 168.738561][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 168.738794][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 168.738811][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 168.739036][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 168.739053][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 168.739280][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 168.739298][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 168.740053][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 168.740072][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 168.740286][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 168.740304][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 168.740518][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 168.740534][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 168.740757][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 168.740776][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 168.740990][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 168.741006][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 168.912317][ T6476] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 168.912346][ T6476] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 168.912364][ T6476] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 168.913020][ T6476] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 169.008818][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 169.008846][ T9] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to write Medium Mode mode to 0x0306: ffffffb9 [ 169.009123][ T9] asix 2-1:0.34: probe with driver asix failed with error -71 [ 169.064861][ T9] usb 2-1: USB disconnect, device number 29 [ 169.348241][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.2.412'. [ 169.351647][ T7117] unsupported nlmsg_type 40 [ 169.375223][ T5796] usb 3-1: USB disconnect, device number 35 [ 169.540296][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.540599][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.551325][ T7122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.560193][ T7122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.560987][ T7123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.569399][ T7123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.753762][ T7125] tmpfs: Bad value for 'mpol' [ 169.862314][ T7138] netlink: 'syz.3.417': attribute type 21 has an invalid length. [ 169.862333][ T7138] netlink: 164 bytes leftover after parsing attributes in process `syz.3.417'. [ 170.041127][ T7133] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 170.935995][ T5821] usb 1-1: USB disconnect, device number 32 [ 171.232123][ T7168] overlayfs: failed to resolve './file0': -2 [ 171.537753][ T5821] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 171.717158][ T5821] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 171.717189][ T5821] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 171.717212][ T5821] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 171.717231][ T5821] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 0 [ 171.719580][ T5821] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 171.719604][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.719615][ T5821] usb 1-1: Product: syz [ 171.719622][ T5821] usb 1-1: Manufacturer: syz [ 171.719629][ T5821] usb 1-1: SerialNumber: syz [ 171.729284][ T5821] usb 1-1: config 0 descriptor?? [ 171.775320][ T7168] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 171.779963][ T5821] usb 1-1: ucan: probing device on interface #0 [ 171.779995][ T5821] usb 1-1: ucan: invalid in_ep MaxPacketSize [ 171.780008][ T5821] usb 1-1: ucan: probe failed; try to update the device firmware [ 172.010266][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.433'. [ 172.235738][ T7202] netlink: 28 bytes leftover after parsing attributes in process `syz.3.435'. [ 172.309888][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.437'. [ 172.468442][ T7211] netlink: 76 bytes leftover after parsing attributes in process `syz.1.438'. [ 172.541626][ T7214] capability: warning: `syz.2.440' uses deprecated v2 capabilities in a way that may be insecure [ 173.146836][ T7232] netlink: 'syz.3.446': attribute type 11 has an invalid length. [ 174.319897][ T6476] usb 1-1: USB disconnect, device number 33 [ 174.835250][ T6476] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 174.985258][ T6476] usb 1-1: Using ep0 maxpacket: 8 [ 174.990534][ T6476] usb 1-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice=52.ec [ 174.990559][ T6476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.002281][ T6476] usb 1-1: config 0 descriptor?? [ 175.039848][ T6476] snd_usb_podhd 1-1:0.0: Line 6 POD X3 LIVE found [ 175.039869][ T6476] usb 1-1: selecting invalid altsetting 1 [ 175.039887][ T6476] snd_usb_podhd 1-1:0.0: set_interface failed [ 175.040150][ T6476] snd_usb_podhd 1-1:0.0: Line 6 POD X3 LIVE now disconnected [ 175.040346][ T6476] snd_usb_podhd 1-1:0.0: probe with driver snd_usb_podhd failed with error -22 [ 175.165212][ T5823] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 175.246296][ T7281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.457'. [ 175.328144][ T5823] usb 2-1: Using ep0 maxpacket: 16 [ 175.332094][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 175.334925][ T5823] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 175.334949][ T5823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.334967][ T5823] usb 2-1: Product: syz [ 175.334979][ T5823] usb 2-1: Manufacturer: syz [ 175.335001][ T5823] usb 2-1: SerialNumber: syz [ 175.391776][ T32] usb 1-1: USB disconnect, device number 34 [ 175.442352][ T5823] usb 2-1: config 0 descriptor?? [ 175.478004][ T5823] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 175.478022][ T5823] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 175.736091][ T5823] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 175.815597][ T5823] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 175.815625][ T5823] em28xx 2-1:0.0: board has no eeprom [ 175.875202][ T5823] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 175.875226][ T5823] em28xx 2-1:0.0: dvb set to bulk mode. [ 175.875275][ T6476] em28xx 2-1:0.0: Binding DVB extension [ 175.941439][ T5823] usb 2-1: USB disconnect, device number 30 [ 175.967830][ T5823] em28xx 2-1:0.0: Disconnecting em28xx [ 176.101342][ T6476] em28xx 2-1:0.0: Registering input extension [ 176.101560][ T5823] em28xx 2-1:0.0: Closing input extension [ 176.160414][ T5823] em28xx 2-1:0.0: Freeing device [ 176.806461][ T5823] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 176.890485][ T7344] netlink: 64 bytes leftover after parsing attributes in process `syz.3.473'. [ 176.894041][ T7346] netlink: 14 bytes leftover after parsing attributes in process `syz.2.474'. [ 176.926493][ T7339] pim6reg: entered allmulticast mode [ 176.962088][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 176.962106][ T5823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 16, setting to 8 [ 176.962118][ T5823] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 176.962139][ T5823] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 176.962151][ T5823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.968040][ T5823] usb 2-1: config 0 descriptor?? [ 176.969823][ T7334] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.108674][ T7346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 177.175334][ T6476] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 177.206473][ T7346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 177.249451][ T7346] bond0 (unregistering): Released all slaves [ 177.315381][ T7347] pim6reg: left allmulticast mode [ 177.378395][ T5823] hid (null): unknown global tag 0xa3 [ 177.379550][ T6476] usb 4-1: Using ep0 maxpacket: 16 [ 177.383349][ T6476] usb 4-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 177.383375][ T6476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.383392][ T6476] usb 4-1: Product: syz [ 177.383404][ T6476] usb 4-1: Manufacturer: syz [ 177.383416][ T6476] usb 4-1: SerialNumber: syz [ 177.432682][ T5823] asus 0003:0B05:17E0.000B: unexpected long global item [ 177.433075][ T5823] asus 0003:0B05:17E0.000B: Asus hid parse failed: -22 [ 177.433148][ T5823] asus 0003:0B05:17E0.000B: probe with driver asus failed with error -22 [ 177.467303][ T6476] usb 4-1: config 0 descriptor?? [ 177.494803][ T6476] usb-storage 4-1:0.0: USB Mass Storage device detected [ 177.532824][ T6476] usb-storage 4-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 177.532848][ T6476] usb-storage 4-1:0.0: This device (054c,002e,0500 S 04 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 177.532848][ T6476] Please send a copy of this message to and [ 177.719060][ T5796] usb 4-1: USB disconnect, device number 30 [ 177.815302][ T9] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 177.908877][ T10] usb 2-1: USB disconnect, device number 31 [ 177.965224][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 177.966803][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 177.966817][ T9] usb 3-1: config 0 has no interface number 0 [ 177.966852][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 177.966864][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 177.966884][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 177.966895][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.970345][ T9] usb 3-1: config 0 descriptor?? [ 178.165227][ T6476] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 178.165363][ T5796] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 178.315248][ T5796] usb 4-1: Using ep0 maxpacket: 16 [ 178.321319][ T5796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.321404][ T5796] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 178.321425][ T5796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.322354][ T6476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.322381][ T6476] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.322400][ T6476] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 178.322438][ T6476] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 178.322458][ T6476] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.413083][ T6476] usb 1-1: config 0 descriptor?? [ 178.440794][ T5796] usb 4-1: config 0 descriptor?? [ 178.598663][ T9] usbhid 3-1:0.1: can't add hid device: -71 [ 178.598826][ T9] usbhid 3-1:0.1: probe with driver usbhid failed with error -71 [ 178.702185][ T9] usb 3-1: USB disconnect, device number 36 [ 178.831968][ T7368] FAULT_INJECTION: forcing a failure. [ 178.831968][ T7368] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 178.832061][ T7368] CPU: 1 UID: 0 PID: 7368 Comm: syz.1.480 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 178.832077][ T7368] Tainted: [L]=SOFTLOCKUP [ 178.832081][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 178.832087][ T7368] Call Trace: [ 178.832091][ T7368] [ 178.832096][ T7368] dump_stack_lvl+0xe8/0x150 [ 178.832118][ T7368] should_fail_ex+0x46b/0x600 [ 178.832146][ T7368] _copy_to_user+0x31/0xb0 [ 178.832171][ T7368] simple_read_from_buffer+0xe1/0x170 [ 178.832202][ T7368] proc_fail_nth_read+0x1be/0x230 [ 178.832224][ T7368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.832237][ T7368] ? rw_verify_area+0x2ac/0x4e0 [ 178.832249][ T7368] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 178.832260][ T7368] vfs_read+0x212/0xa80 [ 178.832277][ T7368] ? __pfx_vfs_read+0x10/0x10 [ 178.832298][ T7368] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 178.832322][ T7368] ? lockdep_hardirqs_on+0x7a/0x110 [ 178.832344][ T7368] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 178.832366][ T7368] ? mutex_lock_nested+0x152/0x1d0 [ 178.832383][ T7368] ? fdget_pos+0x252/0x320 [ 178.832400][ T7368] ksys_read+0x156/0x270 [ 178.832413][ T7368] ? __pfx_ksys_read+0x10/0x10 [ 178.832428][ T7368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.832438][ T7368] do_syscall_64+0x15f/0x560 [ 178.832458][ T7368] ? trace_irq_disable+0x3b/0x140 [ 178.832477][ T7368] ? clear_bhb_loop+0x40/0x90 [ 178.832498][ T7368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.832515][ T7368] RIP: 0033:0x7fb2d058d68e [ 178.832532][ T7368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 178.832546][ T7368] RSP: 002b:00007fb2ce81dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 178.832561][ T7368] RAX: ffffffffffffffda RBX: 00007fb2ce81e6c0 RCX: 00007fb2d058d68e [ 178.832568][ T7368] RDX: 000000000000000f RSI: 00007fb2ce81e0a0 RDI: 0000000000000003 [ 178.832575][ T7368] RBP: 00007fb2ce81e090 R08: 0000000000000000 R09: 0000000000000000 [ 178.832581][ T7368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.832586][ T7368] R13: 00007fb2d0846038 R14: 00007fb2d0845fa0 R15: 00007ffe8ae125b8 [ 178.832602][ T7368] [ 179.045043][ T5796] corsair 0003:1B1C:1B02.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 179.241659][ T6476] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 179.587689][ T6476] usb 4-1: USB disconnect, device number 31 [ 180.618308][ T7415] tipc: Started in network mode [ 180.618323][ T7415] tipc: Node identity _, cluster identity 4711 [ 180.618361][ T7415] tipc: Enabling of bearer rejected, failed to enable media [ 180.705399][ T5796] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 180.867122][ T5796] usb 3-1: config 15 has an invalid interface number: 68 but max is 0 [ 180.867151][ T5796] usb 3-1: config 15 has no interface number 0 [ 180.869340][ T5796] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=b2.8e [ 180.869365][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.869383][ T5796] usb 3-1: Product: syz [ 180.869396][ T5796] usb 3-1: Manufacturer: syz [ 180.869408][ T5796] usb 3-1: SerialNumber: syz [ 181.101088][ T7409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.102415][ T7409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.129824][ T5796] gspca_main: jl2005bcd-2.14.0 probing 0979:0227 [ 181.129909][ T5796] command write [95] error -22 [ 181.154280][ T5796] usb 3-1: USB disconnect, device number 37 [ 181.154587][ T5823] usb 1-1: USB disconnect, device number 35 [ 181.672657][ T7436] sg_write: data in/out 679936/136 bytes for SCSI command 0x0-- guessing data in; [ 181.672657][ T7436] program syz.0.500 not setting count and/or reply_len properly [ 181.733558][ T7440] netlink: 24 bytes leftover after parsing attributes in process `syz.2.501'. [ 182.316078][ T5796] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 182.467707][ T5796] usb 3-1: Using ep0 maxpacket: 8 [ 182.477871][ T5796] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 182.477904][ T5796] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x82 has invalid maxpacket 1024 [ 182.477926][ T5796] usb 3-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 182.477950][ T5796] usb 3-1: config 1 interface 0 has no altsetting 0 [ 182.951347][ T7484] netlink: 'syz.0.510': attribute type 4 has an invalid length. [ 182.951369][ T7484] netlink: 132 bytes leftover after parsing attributes in process `syz.0.510'. [ 183.013306][ T7481] netlink: 60 bytes leftover after parsing attributes in process `syz.0.510'. [ 183.013328][ T7481] tc_dump_action: action bad kind [ 183.257689][ T7489] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 183.257689][ T7489] program syz.0.511 not setting count and/or reply_len properly [ 183.405878][ T7494] macsec0: entered promiscuous mode [ 183.411730][ T7494] macsec0: entered allmulticast mode [ 183.411746][ T7494] veth1_macvtap: entered allmulticast mode [ 183.878836][ T32] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 183.955367][ T7508] netlink: 168 bytes leftover after parsing attributes in process `syz.0.514'. [ 183.970042][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.514'. [ 184.043108][ T32] usb 4-1: unable to get BOS descriptor or descriptor too short [ 184.044412][ T32] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 184.057343][ T32] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 184.057375][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.057393][ T32] usb 4-1: Product: syz [ 184.057406][ T32] usb 4-1: Manufacturer: syz [ 184.057418][ T32] usb 4-1: SerialNumber: syz [ 184.360888][ T32] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 184.372412][ T32] usb 4-1: 2:1 : bogus bTerminalLink 2 [ 184.452788][ T32] usb 4-1: USB disconnect, device number 32 [ 184.538601][ T6321] udevd[6321]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.611163][ T7504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 184.611295][ T7504] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 184.754953][ T7504] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 184.822710][ T7504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 184.822884][ T7504] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 184.902368][ T5635] Bluetooth: hci1: unexpected event for opcode 0x0c1b [ 184.906735][ T7504] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 185.007318][ T7504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 185.007486][ T7504] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.098667][ T5796] usb 3-1: string descriptor 0 read error: -71 [ 185.098810][ T5796] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.098831][ T5796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.134913][ T5796] usb 3-1: can't set config #1, error -71 [ 185.287285][ T7504] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 185.350842][ T5796] usb 3-1: USB disconnect, device number 38 [ 185.675281][ T5821] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 185.746478][ T5796] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 185.828143][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 185.828173][ T5821] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 185.828193][ T5821] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 185.828228][ T5821] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 185.828248][ T5821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.845348][ T5634] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 185.900859][ T5821] usb 2-1: config 0 descriptor?? [ 185.937036][ T5796] usb 3-1: device descriptor read/64, error -71 [ 186.175798][ T5796] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 186.305918][ T5796] usb 3-1: device descriptor read/64, error -71 [ 186.416419][ T5796] usb usb3-port1: attempt power cycle [ 186.825738][ T5796] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 186.847584][ T5796] usb 3-1: device descriptor read/8, error -71 [ 186.888752][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 187.049474][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 187.105265][ T5796] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 187.136479][ T5796] usb 3-1: device descriptor read/8, error -71 [ 187.254158][ T5796] usb usb3-port1: unable to enumerate USB device [ 187.765030][ T7576] tipc: Enabling of bearer rejected, failed to enable media [ 187.766118][ T5796] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 187.927149][ T5796] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.929375][ T5796] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 187.929401][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.929419][ T5796] usb 1-1: Product: syz [ 187.929432][ T5796] usb 1-1: Manufacturer: syz [ 187.929445][ T5796] usb 1-1: SerialNumber: syz [ 187.935926][ T5796] usb 1-1: config 0 descriptor?? [ 187.985529][ T5796] CoreChips 1-1:0.0: probe with driver CoreChips failed with error -22 [ 188.005432][ T5821] usbhid 2-1:0.0: can't add hid device: -71 [ 188.005535][ T5821] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 188.031403][ T5821] usb 2-1: USB disconnect, device number 32 [ 188.187060][ T5796] usb 1-1: USB disconnect, device number 36 [ 188.335968][ T5823] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 188.452412][ T7585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.452973][ T7585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.487355][ T5823] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.487374][ T5823] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.487385][ T5823] usb 4-1: config 2 interface 0 has no altsetting 0 [ 188.487402][ T5823] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 188.487414][ T5823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.705398][ T5821] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 188.835288][ T5821] usb 3-1: device descriptor read/64, error -71 [ 188.921408][ T5823] elo 0003:04E7:0009.000E: hidraw0: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.3-1/input0 [ 188.965724][ T5634] Bluetooth: hci3: command 0x0c1a tx timeout [ 189.075244][ T5821] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 189.104423][ T7578] binder: BC_ATTEMPT_ACQUIRE not supported [ 189.104438][ T7578] binder: 7577:7578 ioctl c0306201 200000000ac0 returned -22 [ 189.123253][ T5796] usb 4-1: USB disconnect, device number 33 [ 189.125761][ T5634] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.138755][ T7598] netlink: 'syz.1.532': attribute type 10 has an invalid length. [ 189.173707][ T7598] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.174592][ T7598] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.216213][ T5821] usb 3-1: device descriptor read/64, error -71 [ 189.336835][ T5821] usb usb3-port1: attempt power cycle [ 189.358524][ T7598] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.366334][ T7598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.366739][ T7598] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.366915][ T7598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.373751][ T7598] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 189.685485][ T5821] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 189.695302][ T5796] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 189.707045][ T5821] usb 3-1: device descriptor read/8, error -71 [ 189.840796][ T57] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x3 [ 189.975373][ T5821] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 190.006946][ T5821] usb 3-1: device descriptor read/8, error -71 [ 190.115701][ T5821] usb usb3-port1: unable to enumerate USB device [ 190.290225][ T5796] usb 2-1: unable to get BOS descriptor or descriptor too short [ 190.291204][ T5796] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 190.291237][ T5796] usb 2-1: can't read configurations, error -71 [ 190.641751][ T7622] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2443626669 (4887253338 ns) > initial count (411670074 ns). Using initial count to start timer. [ 190.674530][ T7608] syz.3.534 (7608) used greatest stack depth: 18840 bytes left [ 191.046124][ T4939] Bluetooth: hci3: command 0x0c1a tx timeout [ 191.095270][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 191.205296][ T4939] Bluetooth: hci2: command 0x0c1a tx timeout [ 191.245829][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 191.252092][ T10] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 191.252115][ T10] usb 4-1: config 0 has no interface number 0 [ 191.255913][ T10] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 191.255938][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.255957][ T10] usb 4-1: Product: syz [ 191.255969][ T10] usb 4-1: Manufacturer: syz [ 191.255982][ T10] usb 4-1: SerialNumber: syz [ 191.306822][ T10] usb 4-1: config 0 descriptor?? [ 191.314193][ T10] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 191.557459][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 191.599375][ T10] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 191.721375][ T7644] netlink: 36 bytes leftover after parsing attributes in process `syz.1.544'. [ 191.920527][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 191.928450][ T5823] usb 4-1: USB disconnect, device number 34 [ 191.942804][ T5823] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 191.957019][ T5823] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 191.959324][ T5823] quatech2 4-1:0.51: device disconnected [ 192.045034][ T7650] FAULT_INJECTION: forcing a failure. [ 192.045034][ T7650] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 192.045068][ T7650] CPU: 1 UID: 0 PID: 7650 Comm: syz.2.547 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 192.045092][ T7650] Tainted: [L]=SOFTLOCKUP [ 192.045102][ T7650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 192.045112][ T7650] Call Trace: [ 192.045119][ T7650] [ 192.045127][ T7650] dump_stack_lvl+0xe8/0x150 [ 192.045153][ T7650] should_fail_ex+0x46b/0x600 [ 192.045180][ T7650] _copy_from_user+0x2d/0xb0 [ 192.045200][ T7650] video_usercopy+0x36f/0x1450 [ 192.045228][ T7650] ? __pfx___video_do_ioctl+0x10/0x10 [ 192.045250][ T7650] ? __pfx_video_usercopy+0x10/0x10 [ 192.045279][ T7650] ? __fget_files+0x2a/0x420 [ 192.045298][ T7650] ? __fget_files+0x2a/0x420 [ 192.045313][ T7650] ? __fget_files+0x3a6/0x420 [ 192.045332][ T7650] v4l2_ioctl+0x190/0x1e0 [ 192.045353][ T7650] ? __pfx_v4l2_ioctl+0x10/0x10 [ 192.045372][ T7650] __se_sys_ioctl+0xff/0x170 [ 192.045393][ T7650] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.045412][ T7650] do_syscall_64+0x15f/0x560 [ 192.045434][ T7650] ? trace_irq_disable+0x3b/0x140 [ 192.045453][ T7650] ? clear_bhb_loop+0x40/0x90 [ 192.045481][ T7650] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.045498][ T7650] RIP: 0033:0x7f96b9b6ce59 [ 192.045515][ T7650] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.045530][ T7650] RSP: 002b:00007f96b7dc6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 192.045549][ T7650] RAX: ffffffffffffffda RBX: 00007f96b9de5fa0 RCX: 00007f96b9b6ce59 [ 192.045562][ T7650] RDX: 0000200000000040 RSI: 00000000c0405602 RDI: 0000000000000003 [ 192.045573][ T7650] RBP: 00007f96b7dc6090 R08: 0000000000000000 R09: 0000000000000000 [ 192.045584][ T7650] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.045595][ T7650] R13: 00007f96b9de6038 R14: 00007f96b9de5fa0 R15: 00007fffe5816848 [ 192.045624][ T7650] [ 192.046389][ T5637] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 192.350328][ T5637] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 192.350363][ T5637] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 192.350380][ T5637] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 192.350425][ T5637] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 192.350447][ T5637] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 192.367418][ T5637] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 192.367445][ T5637] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 192.367463][ T5637] usb 2-1: Product: syz [ 192.367476][ T5637] usb 2-1: Manufacturer: syz [ 192.449746][ T5637] cdc_wdm 2-1:1.0: skipping garbage [ 192.449764][ T5637] cdc_wdm 2-1:1.0: skipping garbage [ 192.482879][ T5637] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 192.482897][ T5637] cdc_wdm 2-1:1.0: Unknown control protocol [ 192.647139][ T7646] netlink: 60 bytes leftover after parsing attributes in process `syz.1.546'. [ 192.647158][ T7646] tc_dump_action: action bad kind [ 192.911433][ T7646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.915418][ T5823] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 192.919860][ T7646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.968210][ T7646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.972862][ T7646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.046496][ T5823] usb 3-1: device descriptor read/64, error -71 [ 193.315319][ T5823] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 193.455424][ T5823] usb 3-1: device descriptor read/64, error -71 [ 193.565890][ T5823] usb usb3-port1: attempt power cycle [ 193.908601][ T5823] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 193.930504][ T5823] usb 3-1: device descriptor read/8, error -71 [ 193.976093][ T7686] tmpfs: Cannot enable quota on remount [ 194.180616][ T7690] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 194.186112][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.191699][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.195963][ T5823] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 194.221401][ T5823] usb 3-1: device descriptor read/8, error -71 [ 194.282021][ T7683] overlayfs: missing 'lowerdir' [ 194.336995][ T5823] usb usb3-port1: unable to enumerate USB device [ 194.945330][ T5821] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 195.100110][ T5821] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 195.100139][ T5821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.100376][ T5821] usb 1-1: Product: syz [ 195.100389][ T5821] usb 1-1: Manufacturer: syz [ 195.100402][ T5821] usb 1-1: SerialNumber: syz [ 195.117669][ T5821] usb 1-1: config 0 descriptor?? [ 195.641426][ T5821] usb 1-1: Firmware: major: 236, minor: 109, hardware type: UNKNOWN (126) [ 195.844957][ T5821] usb 1-1: failed to fetch extended address, random address set [ 195.845035][ T5821] usb 1-1: atusb_probe: initialization failed, error = -524 [ 195.847624][ T5821] atusb 1-1:0.0: probe with driver atusb failed with error -524 [ 195.949891][ T5821] usb 1-1: USB disconnect, device number 37 [ 196.129845][ T7704] loop4: detected capacity change from 0 to 7 [ 196.237290][ T7712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.237863][ T7712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.532214][ T7704] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 196.532250][ T7704] loop4: partition table partially beyond EOD, truncated [ 196.730661][ T32] usb 2-1: USB disconnect, device number 35 [ 196.757501][ T7704] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 196.966202][ T5787] [ 196.966213][ T5787] ====================================================== [ 196.966221][ T5787] WARNING: possible circular locking dependency detected [ 196.966236][ T5787] syzkaller #0 Tainted: G L [ 196.966244][ T5787] ------------------------------------------------------ [ 196.966252][ T5787] udevd/5787 is trying to acquire lock: [ 196.966261][ T5787] ffff888033d13138 ((wq_completion)loop4){+.+.}-{0:0}, at: touch_wq_lockdep_map+0xb5/0x180 [ 196.966305][ T5787] [ 196.966305][ T5787] but task is already holding lock: [ 196.966311][ T5787] ffff8880267444c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 196.966351][ T5787] [ 196.966351][ T5787] which lock already depends on the new lock. [ 196.966351][ T5787] [ 196.966357][ T5787] [ 196.966357][ T5787] the existing dependency chain (in reverse order) is: [ 196.966364][ T5787] [ 196.966364][ T5787] -> #5 (&disk->open_mutex){+.+.}-{4:4}: [ 196.966387][ T5787] mutex_lock_nested+0x5a/0x1d0 [ 196.966405][ T5787] bdev_open+0xe0/0xcc0 [ 196.966423][ T5787] bdev_file_open_by_dev+0x1be/0x240 [ 196.966443][ T5787] swsusp_check+0x56/0x490 [ 196.966460][ T5787] software_resume+0x51/0x4c0 [ 196.966482][ T5787] resume_store+0x333/0x4f0 [ 196.966494][ T5787] kernfs_fop_write_iter+0x3b0/0x540 [ 196.966515][ T5787] vfs_write+0x629/0xba0 [ 196.966532][ T5787] ksys_write+0x156/0x270 [ 196.966548][ T5787] do_syscall_64+0x15f/0x560 [ 196.966568][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.966584][ T5787] [ 196.966584][ T5787] -> #4 (system_transition_mutex){+.+.}-{4:4}: [ 196.966608][ T5787] mutex_lock_nested+0x5a/0x1d0 [ 196.966623][ T5787] lock_system_sleep+0x49/0x70 [ 196.966638][ T5787] resume_store+0x2ff/0x4f0 [ 196.966651][ T5787] kernfs_fop_write_iter+0x3b0/0x540 [ 196.966670][ T5787] vfs_write+0x629/0xba0 [ 196.966686][ T5787] ksys_write+0x156/0x270 [ 196.966701][ T5787] do_syscall_64+0x15f/0x560 [ 196.966720][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.966736][ T5787] [ 196.966736][ T5787] -> #3 (&of->mutex){+.+.}-{4:4}: [ 196.966758][ T5787] mutex_lock_nested+0x5a/0x1d0 [ 196.966773][ T5787] kernfs_seq_start+0x5c/0x420 [ 196.966792][ T5787] traverse+0x164/0x580 [ 196.966811][ T5787] seq_read_iter+0xd09/0xe20 [ 196.966829][ T5787] lo_rw_aio+0xc80/0xf00 [ 196.966850][ T5787] loop_process_work+0x92a/0x11b0 [ 196.966868][ T5787] process_one_work+0x98b/0x1630 [ 196.966888][ T5787] worker_thread+0xb49/0x1140 [ 196.966908][ T5787] kthread+0x388/0x470 [ 196.966922][ T5787] ret_from_fork+0x514/0xb70 [ 196.966939][ T5787] ret_from_fork_asm+0x1a/0x30 [ 196.966959][ T5787] [ 196.966959][ T5787] -> #2 (&p->lock){+.+.}-{4:4}: [ 196.966980][ T5787] mutex_lock_nested+0x5a/0x1d0 [ 196.966995][ T5787] seq_read_iter+0xb8/0xe20 [ 196.967012][ T5787] lo_rw_aio+0xc80/0xf00 [ 196.967028][ T5787] loop_process_work+0x92a/0x11b0 [ 196.967045][ T5787] process_one_work+0x98b/0x1630 [ 196.967064][ T5787] worker_thread+0xb49/0x1140 [ 196.967085][ T5787] kthread+0x388/0x470 [ 196.967100][ T5787] ret_from_fork+0x514/0xb70 [ 196.967117][ T5787] ret_from_fork_asm+0x1a/0x30 [ 196.967136][ T5787] [ 196.967136][ T5787] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 196.967160][ T5787] process_one_work+0x8d7/0x1630 [ 196.967186][ T5787] worker_thread+0xb49/0x1140 [ 196.967206][ T5787] kthread+0x388/0x470 [ 196.967221][ T5787] ret_from_fork+0x514/0xb70 [ 196.967237][ T5787] ret_from_fork_asm+0x1a/0x30 [ 196.967255][ T5787] [ 196.967255][ T5787] -> #0 ((wq_completion)loop4){+.+.}-{0:0}: [ 196.967278][ T5787] __lock_acquire+0x15a5/0x2d10 [ 196.967295][ T5787] lock_acquire+0x106/0x350 [ 196.967311][ T5787] touch_wq_lockdep_map+0xcb/0x180 [ 196.967325][ T5787] __flush_workqueue+0x14b/0x14f0 [ 196.967339][ T5787] drain_workqueue+0xd3/0x390 [ 196.967354][ T5787] lo_release+0x287/0x8f0 [ 196.967371][ T5787] bdev_release+0x541/0x660 [ 196.967391][ T5787] blkdev_release+0x15/0x20 [ 196.967410][ T5787] __fput+0x461/0xa70 [ 196.967423][ T5787] fput_close_sync+0x11f/0x240 [ 196.967437][ T5787] __x64_sys_close+0x7e/0x110 [ 196.967451][ T5787] do_syscall_64+0x15f/0x560 [ 196.967471][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.967487][ T5787] [ 196.967487][ T5787] other info that might help us debug this: [ 196.967487][ T5787] [ 196.967492][ T5787] Chain exists of: [ 196.967492][ T5787] (wq_completion)loop4 --> system_transition_mutex --> &disk->open_mutex [ 196.967492][ T5787] [ 196.967521][ T5787] Possible unsafe locking scenario: [ 196.967521][ T5787] [ 196.967526][ T5787] CPU0 CPU1 [ 196.967531][ T5787] ---- ---- [ 196.967537][ T5787] lock(&disk->open_mutex); [ 196.967548][ T5787] lock(system_transition_mutex); [ 196.967561][ T5787] lock(&disk->open_mutex); [ 196.967574][ T5787] lock((wq_completion)loop4); [ 196.967585][ T5787] [ 196.967585][ T5787] *** DEADLOCK *** [ 196.967585][ T5787] [ 196.967591][ T5787] 1 lock held by udevd/5787: [ 196.967601][ T5787] #0: ffff8880267444c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x1af/0x660 [ 196.967645][ T5787] [ 196.967645][ T5787] stack backtrace: [ 196.967658][ T5787] CPU: 1 UID: 0 PID: 5787 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 196.967682][ T5787] Tainted: [L]=SOFTLOCKUP [ 196.967689][ T5787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 196.967699][ T5787] Call Trace: [ 196.967705][ T5787] [ 196.967713][ T5787] dump_stack_lvl+0xe8/0x150 [ 196.967732][ T5787] print_circular_bug+0x2e1/0x300 [ 196.967755][ T5787] check_noncircular+0x12e/0x150 [ 196.967780][ T5787] __lock_acquire+0x15a5/0x2d10 [ 196.967804][ T5787] ? __bfs+0x153/0x290 [ 196.967821][ T5787] ? __pfx_hlock_conflict+0x10/0x10 [ 196.967845][ T5787] ? touch_wq_lockdep_map+0xb5/0x180 [ 196.967860][ T5787] lock_acquire+0x106/0x350 [ 196.967877][ T5787] ? touch_wq_lockdep_map+0xb5/0x180 [ 196.967898][ T5787] ? touch_wq_lockdep_map+0xb5/0x180 [ 196.967914][ T5787] touch_wq_lockdep_map+0xcb/0x180 [ 196.967929][ T5787] ? touch_wq_lockdep_map+0xb5/0x180 [ 196.967945][ T5787] __flush_workqueue+0x14b/0x14f0 [ 196.967962][ T5787] ? do_raw_spin_lock+0x12b/0x2f0 [ 196.967982][ T5787] ? __pfx___flush_workqueue+0x10/0x10 [ 196.968006][ T5787] drain_workqueue+0xd3/0x390 [ 196.968025][ T5787] lo_release+0x287/0x8f0 [ 196.968044][ T5787] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 196.968066][ T5787] ? __pfx_lo_release+0x10/0x10 [ 196.968084][ T5787] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 196.968100][ T5787] ? reacquire_held_locks+0x104/0x190 [ 196.968121][ T5787] ? rt_spin_lock+0x1e0/0x400 [ 196.968136][ T5787] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 196.968153][ T5787] ? rt_spin_unlock+0x14f/0x200 [ 196.968175][ T5787] ? rt_spin_unlock+0x160/0x200 [ 196.968194][ T5787] ? __pfx_lo_release+0x10/0x10 [ 196.968212][ T5787] bdev_release+0x541/0x660 [ 196.968235][ T5787] ? __pfx_blkdev_release+0x10/0x10 [ 196.968255][ T5787] blkdev_release+0x15/0x20 [ 196.968276][ T5787] __fput+0x461/0xa70 [ 196.968295][ T5787] fput_close_sync+0x11f/0x240 [ 196.968311][ T5787] ? __pfx_fput_close_sync+0x10/0x10 [ 196.968327][ T5787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.968345][ T5787] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.968362][ T5787] __x64_sys_close+0x7e/0x110 [ 196.968377][ T5787] do_syscall_64+0x15f/0x560 [ 196.968398][ T5787] ? clear_bhb_loop+0x40/0x90 [ 196.968416][ T5787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.968432][ T5787] RIP: 0033:0x7fa6cff7d407 [ 196.968447][ T5787] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 196.968462][ T5787] RSP: 002b:00007ffefd0cb350 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 196.968480][ T5787] RAX: ffffffffffffffda RBX: 00007fa6cfe8f880 RCX: 00007fa6cff7d407 [ 196.968493][ T5787] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 196.968504][ T5787] RBP: 00007fa6cfe8f6e8 R08: 0000000000000000 R09: 0000000000000000 [ 196.968515][ T5787] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 196.968525][ T5787] R13: 000055ccf6631190 R14: 0000000000000008 R15: 000055ccf6638830 [ 196.968542][ T5787] [ 197.139914][ T6321] udevd[6321]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory