last executing test programs: 6.00188009s ago: executing program 0 (id=963): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000060000000800020005000a00140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x84, 0x1, 0x9, 0x104, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x18}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_TUPLE={0x30, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x85}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1a}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x28000010}, 0x40000) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @empty}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @empty}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40040000) 5.542206461s ago: executing program 0 (id=966): r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109027d0002010080000904000001020d0000052406000105240000000d240f0103050000fd0000000406241aff072908241c0101090000142413099f33760bf14377323063f9c8a04d113905241510000905810300020800040904010000020d00000904010102020d0000090582020002e1ad00090503020002"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000c00)={0x20, 0x80, 0x1c, {0x7, 0x5, 0x0, 0x5, 0x8, 0x5, 0x9, 0x287, 0x6, 0x8c8, 0x8002, 0x6f8}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c0c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x7f, 0x60, 0x3, "", [{{0x9, 0x4, 0x0, 0x5, 0x1, 0x3, 0x1, 0x1, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0xc74}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x2, 0x1}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x111, 0x40, 0x80, 0x3, 0x20, 0x25}, 0xff, &(0x7f0000000180)={0x5, 0xf, 0xff, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x2, 0x2, 0x74, 0xff}, @ssp_cap={0x24, 0x10, 0xa, 0xe2, 0x6, 0xa3b0, 0xf000, 0x66b4, [0x3f00, 0xff30, 0xff0000, 0x2e, 0x3f3f, 0x30cf79914e55fd1e]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x1, 0x0, 0x2}, @generic={0xa2, 0x10, 0x2, "1b60c74568aa306167a2784c26dd30ce75db01866d9b4cdadb29ca4a7abdda3e432ee444fe2fd1a175c23f147a6d1d42e12c01526f62d82477f582e341acd4367cd3336918d7f94ac7e68ea310a4ea3deadb3d24c94642f7d4e46cad7b546f8621fc9fb38014f18f99cd17341b067be8ca0001cab19f23c546da64ab5a76128c5216b853021213e9a8e86bb186ef4c5afe559528837928fc035dc80931b834"}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "b40b11309ca2a8cf7a439050fe2bfa63"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x19, 0x0, 0x6, 0xdd7, 0x4}]}, 0x3, [{0x4, &(0x7f0000000280)=@lang_id={0x4}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x44e}}]}) 4.233765869s ago: executing program 2 (id=973): r0 = socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000440), 0xc0800) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000480)={0xef, 0xfa}, 0x2) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000280)={r1, r1, 0xc, 0x0, 0x0, 0x9, 0x5, 0x4f3, 0x81, 0x9, 0x9daf6532616ac8b5, 0x6, 'syz1\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) setreuid(r5, r5) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000100)={@any, 0x9, 0x400, 0xa1b, 0x401, 0x0, "8164252c175295d613ca76efd8f37729284010645ca1179f02a20dad64cd1a515b2e26e0b76b8e7da5150bc95177f99b32dcee74f5d9a410ee678d6912261754e898266641548ab3c379a633916f4af52939d8f358ee201c7d460de96c0caec9ff06c8c452b2a74974896cfc37a5b4fbe26deb40eb1bf2a951e22d3905736aa6"}) write(r0, &(0x7f00000000c0)="240000004e0025000307f4f900c504000a04f55f08000100020100020800038005000000", 0x24) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="f4000000290001000000000000000000fc020000000000000000000000000001fe8000000000000000000000000000200000000000020000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="be6b6e000000000050001100ac1414aa000000000000000000000000ffffffff0000000000000000fc020000000000000000000000000001ff0200000000000000000000000000013c040000080000000a000a0028001e"], 0xf4}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e20, @private=0xa010101}}, 0xe41, 0x400}, &(0x7f00000003c0)=0x90) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000400)={r7, 0x1}, 0x8) 3.641706771s ago: executing program 2 (id=976): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0xd8c, 0x14, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, "", [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0xc1, 0xaf}}}}}]}}]}}, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_int(r1, 0x1, 0x28, 0x0, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0x25, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="4023280000002806826313612b8526792c3cbd05cf918d0f060900000000000000e78881ce2a52973661d67a0c55"], 0x0, 0x0, 0x0, 0x0}, 0x0) 3.602811737s ago: executing program 1 (id=977): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x101401, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x80000008) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)=ANY=[@ANYBLOB="7c01000019000100fdffffffffdbdf2500000000000000000000ffffac1414bbac1414bb0000000000000000000000004e20000bf7ff00000a008000000000", @ANYBLOB], 0x17c}, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000010000000000000000000000a0030"], 0xb8}}, 0x4000) r5 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xd) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000300)) 3.47221898s ago: executing program 3 (id=978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000020000000900010073797a300083ff0064000000090a010400000000000000000200002008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c00018008000140000000043c0000000c0a01010000000000000000020000000900020073797a31000000000900010073797a3000000000100003800c0000800800034000000002fb"], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) 3.097292574s ago: executing program 3 (id=979): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) pread64(r1, &(0x7f0000000480)=""/61, 0x3d, 0x7fffffffffffffff) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) mmap$IORING_OFF_SQ_RING(0x0, 0x8, 0x3000001, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r2, 0x1f}, &(0x7f00000007c0)={'enc=', 'pkcs1', ' hash=', {'sha224\x00'}}, 0x0, 0x0) 3.09705224s ago: executing program 1 (id=980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000012000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704", @ANYRESDEC], 0xfdef) 2.954891064s ago: executing program 0 (id=981): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000004000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b"], 0xfdef) 2.681394978s ago: executing program 2 (id=982): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db6000000000001090224000100000000090400000103000000092100000001220700090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.989749263s ago: executing program 3 (id=983): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) (async) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2840, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000440)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xfd, 0x0, 0x30, 0x19}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x3, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x33358002, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x46}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x44, 0x9, 0xfa, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0xd, 0x6, 0x3, 0x7, 0x9, 0x85, 0x4a, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x4, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x2, 0x2, 0x4, 0x8, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x9}, {0xd000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0xb000, 0x42024, 0xa, 0x1, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x40000000000ff]}) (async) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000440)={{0x2000, 0x30000, 0x8, 0xd, 0x3, 0xe4, 0x40, 0xfd, 0x0, 0x30, 0x19}, {0x1, 0x4000, 0xe, 0x0, 0x40, 0x3, 0x7d, 0x9, 0x58, 0x3, 0x3, 0x1}, {0x33358002, 0xe000, 0xe, 0x5, 0x3, 0x7, 0xfe, 0x89, 0x1, 0xab, 0x5, 0x46}, {0x30000, 0x8000000, 0x3, 0x5d, 0x4, 0x44, 0x9, 0xfa, 0x80, 0x7, 0xd}, {0xa000, 0x9000, 0xd, 0x6, 0x3, 0x7, 0x9, 0x85, 0x4a, 0x83, 0xf7, 0x82}, {0x1000, 0x80a0000, 0x8, 0xa0, 0xb1, 0x4, 0x1, 0xd, 0x88, 0xfb, 0x1, 0xfd}, {0x2, 0x2, 0x4, 0x8, 0x7, 0xff, 0xb, 0x0, 0x5, 0x81, 0xff, 0x70}, {0xd000, 0xb000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x18, 0x5, 0x3, 0x7, 0x9}, {0xd000, 0x2d}, {0xf000, 0x7fff}, 0xc0040065, 0x0, 0xb000, 0x42024, 0xa, 0x1, 0x3000, [0x683ffffffffffffe, 0x3, 0x80000004, 0x40000000000ff]}) close_range(r0, 0xffffffffffffffff, 0x0) 1.7804235s ago: executing program 2 (id=984): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000005000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c309", @ANYRESDEC], 0xfdef) 1.63159549s ago: executing program 1 (id=985): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x4}) 1.401718961s ago: executing program 3 (id=986): syz_usb_connect$uac1(0x2, 0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000020f80600b040000102030109026c000301004080090425546c730100000a24010e00160002010204240206040404060400002f0904010000010200000904010101010200000905010900020cff980725010c040100090402000001020000090402010101020000090582091000b57c040725010c040000"], 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x1, 0x7, 0x8, 0x4}, 0x10) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000106, 0x0, 0xffffffffffffffff}]}) (async) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0xd) (async) r5 = syz_usb_connect(0x2, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000001300)=ANY=[@ANYBLOB="0015f700000004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x20, 0x0, 0x0, 0x800, 0xfffffffffffffffb, 0x2}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000009, 0x5}, 0x0, 0x0) (async) r7 = dup(r6) (async, rerun: 64) r8 = open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x2) (rerun: 64) openat(r8, &(0x7f0000000280)='\x00', 0x900, 0x102) (async) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x82, 0x3, 0x0, 0x717e387b, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) (async) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='./cgroup\x00', &(0x7f0000000040)='hfs\x00', 0x1200011, 0x0) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) io_setup(0x0, &(0x7f0000000180)) (async) ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000002c0)=0x15) (async) ioctl$TCSETS(r9, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400004, 0xc, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000000c0)=0xf9) (async) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r10, 0x6, 0x8, &(0x7f0000000000)=0x6, 0x4) (async) getsockopt$inet6_tcp_buf(r10, 0x6, 0x8, 0x0, &(0x7f0000001040)) ioctl$TIOCSTI(r9, 0x5412, &(0x7f0000000140)=0x10) (async) write$UHID_INPUT(r7, 0x0, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x3, 0x5) (async, rerun: 32) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000004) 1.401498491s ago: executing program 1 (id=987): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000001480)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="05000000000000000000010000000600060000030000c40c0880e400008024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b24000100000000000000001100000000000000000000000000000000000000000000000024000200fcbefe9641719404cc5c9ab2766dd4793e367b0ea55e65e2e3416ac9d4e68841240002001171ee8da334a5099295af229a5d237a7f4102f01f28b34347d6cbbe135d83ec24000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030000000000240002005da952055e5857d673cddd36909746c80efa3ff95c317de1063db32bc80a0b3e0003008024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0600050000000000d002098058000080060001000200000008000200ac1e00010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ffffffff05000300000000007c000080060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000dc000080060001000a0000001400020000000000000000000000ffffac1414aa05000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1e0001050003000000000094000080060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000200000008000200e00000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000200000008000200ffffffff050003000000000088000080060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff020000000000000000000000000001050003000000000064000080080003000000000008000a000100000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000200379aa288b2244a5b504ba04bea45625d328fb93b62e607a1b2e4da2f7f76a5499400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b3922080003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b1400040002000000000000000000000000000000d807008000030980f4000080060001000a00000014000200000000000000000000000000000000000500030000000000060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1e00010500030000000000060001000200000008000200e000000105000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000a00000014000200fc01000000000000000000000000000005000300000000004c000080060001000200000008000200ac1414bb0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414bb05000300000000000c010080060001000a00000014000200200100000000000000000000000000010500030000000000060001000200000008000200e000000205000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ffffffff0500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000940000800600010002000000080002000000000005000300000000000600010002000000080002000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200e00000020500030000000000060001000200000008000200ac1414000500030000000000060001000200000008000200ac14140005000300000000001c000080060001000200000008000200ffffffff0500030000000000080003000000000024000100f44da367a88ee6564f020211456727082f5cebee8b1bf5eb7337341b459b39221d0004000a0000000000000000000000000000000000ffffac1e0001000000001c04098094000080060001000a0000001400020000000000000000000000ffffac1414bb0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200ff0100000000000000000000000000010500030000000000060001000a00000014000200fe880000000000000000000000000001050003000000000064000080060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414bb0500030000000000060001000a0000001400020000000000000000000000ffffe00000020500030000000000ac000080060001000200000008000200000000000500030000000000060001000a00000014000200fe80000000000000000000000000000005000300000000000600010002000000080002007f0000010500030000000000060001000200000008000200ac1414bb0500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200e0000001050003000000000064000080060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000200000008000200ac1414000500030000000000f4000080060001000200000008000200000000000500030000000000060001000a00000014000200200100000000000000000000000000000500030000000000060001000a00000014000200fc0200000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac1414aa0500030000000000060001000200000008000200000000000500030000000000060001000200000008000200ac1414000500030000000000060001000a00000014000200200100000000000000000000000000020500030000000000a0000080060001000a00000014000200fc0000000000000000000000000000000500030000000000060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8800000000000000000000000000010500030000000000060001000a00000014000200fe8000000000000000000000000000aa0500030000000000060001000200000008000200ac14140005000300000000007c000080060001000200000008000200ac1414aa0500030000000000060001000a00000014000200fe8000000000000000000000000000000500030000000000060001000200000008000200e00000010500030000000000060001000a00000014000200fe8000000000000000000000000000bb050003000000000024000100d1732899f611cd8994034d7f413dc957630e5493c285aca40065cb6311be696b2400020055fbc2635cc801d67c589cc98f3cf65074dffe0886750dec83be49fbf628e1dc240002000f1b8b82264208ab1a2dce776c03b9f348f500ef8e7606466943f5ba2ae2881e0c0000800800030000000000060006000000000008000100", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast2, @remote}, &(0x7f0000000740)=0xc) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000008c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0x80, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x44) r5 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r5, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) 1.220946604s ago: executing program 0 (id=988): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x4718, 0x0, 0x0, 0x0, 0x0, 0x14, "339f020bbe82b398000000000000000040000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333795f045158d97405000000000000040000000100", [0xfffffffffeff7ffc, 0xffffffffffffffff]}}) 763.483627ms ago: executing program 0 (id=989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000002b00)=ANY=[@ANYBLOB="b01100001900010000000000fcdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200002000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000f50300000000000000020000000000000000000000000000000104000000000000000000000000000002000000000000000300000000200000000000000000000000000000000000000100000000000000440005007f000001000000000000000000000000000000042b0000000a000000fe8000000000000000000000000000aa0000000004000b000000000000000000000000000c100800081008"], 0x11b0}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000080)={0x8000008}, 0x10) setreuid(0x0, 0xee01) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r2, 0x8983, &(0x7f0000000280)={0x6, 'veth0_virt_wifi\x00', {0x7}, 0xe1}) write(r1, &(0x7f0000000040)="240000001e005f0214f6fffffffffff807000000000000000000a600080009000d000000", 0x24) 561.765008ms ago: executing program 1 (id=990): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000210000000b00033264756d6d793000000800400004021200180012000a00010064756d6d79"], 0x4c}], 0x1}, 0x0) 561.589853ms ago: executing program 2 (id=991): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1709000000000000000001000000050007000000000008000900feffffff14002000200100000000000000f5ffffff00000208000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x620b, 0x0, 0x1200}, 0x40000) 497.291838ms ago: executing program 0 (id=992): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000010c0)=ANY=[@ANYBLOB="12010000190000404f045db6000000000001090224000100000000090400000103000000092100000001220700090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 335.31407ms ago: executing program 1 (id=993): mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x4, &(0x7f0000ffe000/0x1000)=nil) (async) syz_usb_connect$uac2(0x3, 0x8b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000300000020532b2300400001020301090279000301fb4004080b02010103200109040000000101200009240108000c1900e508240a00040b060308240a0901030602090401000001022000090401010101022000090501090002080706082501800f070000090402000001022000090402010101022000090582"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 209.813959ms ago: executing program 3 (id=994): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000180)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x700000000000000, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 120.581588ms ago: executing program 2 (id=995): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00ffffbeda00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c55080000000c547d03d8a0f4bd00", [0x0, 0x6]}}) 0s ago: executing program 3 (id=996): openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79}) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000100)={0x4, 0x80}) r4 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xfb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x68, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0xf, 0x7, 0x1, {0x22, 0x9f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x8d, 0xf8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x5, 0x1}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x2, 0x6, 0xd, 0x10, 0x5}, 0xb3, &(0x7f0000000080)={0x5, 0xf, 0xb3, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xf9, "8590d3bb297947d2252ea4febd2c5c29"}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x9, 0x0, 0x8, [0x180ff, 0xc000, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "727e9b27429c96a0f446075857e8c3ca"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x6, 0x8, 0x9, 0x7f}, @generic={0x60, 0x10, 0x1, "ddfbc587b82f1ddbd2f0fd05351b41ae486e9ff1b50c0f9e30bb7fd8b031a2fd9c5844886794606f3d7f5edb3a87f5b6edd30e5861c80ea1284dc14919316c1ea099a1941c68b803711e82be6164d6573e3f8efd9dbbff340475ea9517"}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c01}}, {0xa2, &(0x7f0000000500)=@string={0xa2, 0x3, "e56dec7dddb3dfe3eaf8dcde665d68de0722a7ca109bfbe86fccbe04e049d0d3afd7dd23830781845ca9282f51cec061d92af7807a5d3ff46d962b4b21522f5493d12dcbd5d4081129d7cfbcda7339991d7f9e3a49197e1b1fac1827cd438747920bd50cc0acc08c3f7223bac9b0af2c750570e254af690e0576ecd996d161622d6421517eb4eb985ee0c3e027a71a7ab69830ddf9c57762b50cd899defb970a"}}, {0x97, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, {0x71, &(0x7f0000000300)=@string={0x71, 0x3, "8f0a03cd5b2cc0676b9f8b0de2e31778e780338aed5debf3b8be736d3d8d0268a297dd820d92a47c9c7f491266bcf6919763852dbbc4a04034aa21b7ea33d170dd47b99204006cd23d024e0a4cf6a7c047b016837e278ee780085f2070231de8e149a1bf1cbd65894e84f9eacb2c3c"}}]}) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="000110e7105e40095b829da6ef50d906ec9f2a40bcb6d2067bab092ca9e6b376a21c094e8d3ecedd0d4c628b70202fd74971ad4f3a7e78edd48200316c1b5191ec421dbcccef5e39d1b9b50ec843dbacec8483401d416c60e3d48cd24d2e037d54383ef227f2d419c3885525679c5f4209e6866a70f7ca94314339d825598b90f79893fe419faf2d44edacd15d7cc7014fbc0a51d7"], 0x0, 0x0, 0x0, 0x0}) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) getsockopt$inet6_int(r0, 0x29, 0x31, 0x0, &(0x7f0000000040)) (async) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) (async) socket$inet6(0xa, 0x2, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x11, &(0x7f0000000000)=0x8, 0x4) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000040)={0x79}) (async) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000100)={0x4, 0x80}) (async) syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x56a, 0xfb, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x20, 0x9, "", [{{0x9, 0x4, 0x0, 0x68, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0xf, 0x7, 0x1, {0x22, 0x9f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x8d, 0xf8}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x7, 0x5, 0x1}}]}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x2, 0x6, 0xd, 0x10, 0x5}, 0xb3, &(0x7f0000000080)={0x5, 0xf, 0xb3, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0xf9, "8590d3bb297947d2252ea4febd2c5c29"}, @ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0x9, 0x0, 0x8, [0x180ff, 0xc000, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "727e9b27429c96a0f446075857e8c3ca"}, @ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x8, 0x14, 0x6, 0x8, 0x9, 0x7f}, @generic={0x60, 0x10, 0x1, "ddfbc587b82f1ddbd2f0fd05351b41ae486e9ff1b50c0f9e30bb7fd8b031a2fd9c5844886794606f3d7f5edb3a87f5b6edd30e5861c80ea1284dc14919316c1ea099a1941c68b803711e82be6164d6573e3f8efd9dbbff340475ea9517"}]}, 0x4, [{0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x2c01}}, {0xa2, &(0x7f0000000500)=@string={0xa2, 0x3, "e56dec7dddb3dfe3eaf8dcde665d68de0722a7ca109bfbe86fccbe04e049d0d3afd7dd23830781845ca9282f51cec061d92af7807a5d3ff46d962b4b21522f5493d12dcbd5d4081129d7cfbcda7339991d7f9e3a49197e1b1fac1827cd438747920bd50cc0acc08c3f7223bac9b0af2c750570e254af690e0576ecd996d161622d6421517eb4eb985ee0c3e027a71a7ab69830ddf9c57762b50cd899defb970a"}}, {0x97, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, {0x71, &(0x7f0000000300)=@string={0x71, 0x3, "8f0a03cd5b2cc0676b9f8b0de2e31778e780338aed5debf3b8be736d3d8d0268a297dd820d92a47c9c7f491266bcf6919763852dbbc4a04034aa21b7ea33d170dd47b99204006cd23d024e0a4cf6a7c047b016837e278ee780085f2070231de8e149a1bf1cbd65894e84f9eacb2c3c"}}]}) (async) syz_usb_control_io$hid(r4, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000400)=ANY=[@ANYBLOB="000110e7105e40095b829da6ef50d906ec9f2a40bcb6d2067bab092ca9e6b376a21c094e8d3ecedd0d4c628b70202fd74971ad4f3a7e78edd48200316c1b5191ec421dbcccef5e39d1b9b50ec843dbacec8483401d416c60e3d48cd24d2e037d54383ef227f2d419c3885525679c5f4209e6866a70f7ca94314339d825598b90f79893fe419faf2d44edacd15d7cc7014fbc0a51d7"], 0x0, 0x0, 0x0, 0x0}) (async) kernel console output (not intermixed with test programs): 28 bytes leftover after parsing attributes in process `syz.3.253'. [ 143.810275][ T6517] loop4: detected capacity change from 0 to 524287964 [ 144.095369][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 144.164711][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 144.182938][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 144.317150][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 144.331214][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 144.332369][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.332397][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 144.332443][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 144.367077][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.367106][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.367124][ T9] usb 1-1: Product: syz [ 144.367138][ T9] usb 1-1: Manufacturer: syz [ 144.367151][ T9] usb 1-1: SerialNumber: syz [ 144.547911][ T6538] loop3: detected capacity change from 0 to 7 [ 144.564799][ T6538] Dev loop3: unable to read RDB block 7 [ 144.564831][ T6538] loop3: unable to read partition table [ 144.565011][ T6538] loop3: partition table beyond EOD, truncated [ 144.565046][ T6538] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 144.642533][ T6009] Flush: task=udevd[6009] dev=loop3 state=2 [ 144.712390][ T9] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 144.712436][ T9] cdc_ncm 1-1:1.0: bind() failure [ 144.755052][ T6009] Teardown: task=udevd[6009] dev=loop3 state=2 [ 144.764777][ T199] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 144.767914][ T9] usb 1-1: USB disconnect, device number 12 [ 144.914413][ T199] usb 4-1: Using ep0 maxpacket: 32 [ 144.917388][ T199] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 144.920663][ T199] usb 4-1: string descriptor 0 read error: -22 [ 144.920800][ T199] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 144.920828][ T199] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.019651][ T199] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 145.019706][ T199] usb 4-1: MIDIStreaming interface descriptor not found [ 145.261061][ T6529] netlink: 'syz.3.263': attribute type 23 has an invalid length. [ 145.621961][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 145.622055][ T6556] netlink: 4 bytes leftover after parsing attributes in process `syz.2.270'. [ 145.809278][ T199] usb 4-1: USB disconnect, device number 15 [ 146.954624][ T199] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 147.118200][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.119774][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.119815][ T199] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 147.119837][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.142063][ T199] usb 1-1: config 0 descriptor?? [ 147.290516][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 147.603052][ T199] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 147.603089][ T199] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 147.603114][ T199] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 147.603139][ T199] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 147.603163][ T199] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 147.603187][ T199] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 147.603211][ T199] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0 [ 147.614852][ T199] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 147.615108][ T199] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints? [ 147.790612][ C0] hid-thrustmaster 0003:044F:B65D.0006: Unknown packet type 0x0, unable to proceed further with wheel init [ 147.882256][ T6592] loop4: detected capacity change from 0 to 524287964 [ 148.003259][ T199] usb 1-1: USB disconnect, device number 13 [ 148.060423][ T6600] capability: warning: `syz.1.286' uses 32-bit capabilities (legacy support in use) [ 148.278348][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 148.359543][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 148.644520][ T37] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 148.777837][ T37] usb 3-1: device descriptor read/64, error -71 [ 148.976089][ T6626] netlink: 128 bytes leftover after parsing attributes in process `syz.3.294'. [ 148.976120][ T6626] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.025107][ T37] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 149.079865][ T6635] loop3: detected capacity change from 0 to 7 [ 149.083604][ T6635] Dev loop3: unable to read RDB block 7 [ 149.083643][ T6635] loop3: unable to read partition table [ 149.083984][ T6635] loop3: partition table beyond EOD, truncated [ 149.084021][ T6635] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 149.130044][ T6009] Flush: task=udevd[6009] dev=loop3 state=2 [ 149.174409][ T5695] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 149.176589][ T37] usb 3-1: device descriptor read/64, error -71 [ 149.224951][ T6009] Teardown: task=udevd[6009] dev=loop3 state=2 [ 149.285534][ T37] usb usb3-port1: attempt power cycle [ 149.330500][ T5695] usb 4-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 149.330530][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.330548][ T5695] usb 4-1: Product: syz [ 149.330563][ T5695] usb 4-1: Manufacturer: syz [ 149.330576][ T5695] usb 4-1: SerialNumber: syz [ 149.392569][ T5695] pl2303 4-1:1.0: pl2303 converter detected [ 149.404167][ T5695] usb 4-1: pl2303 converter now attached to ttyUSB0 [ 149.590534][ T6626] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.634632][ T37] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 149.655592][ T37] usb 3-1: device descriptor read/8, error -71 [ 149.874584][ T5695] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 149.904490][ T37] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 149.926855][ T37] usb 3-1: device descriptor read/8, error -71 [ 150.027367][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.027399][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.027435][ T5695] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 150.027457][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.038807][ T37] usb usb3-port1: unable to enumerate USB device [ 150.064634][ T5695] usb 1-1: config 0 descriptor?? [ 150.358962][ T6656] loop4: detected capacity change from 0 to 524287964 [ 150.360350][ T6655] Flush: task=syz.1.304[6655] dev=loop4 state=2 [ 150.436495][ T6655] Teardown: task=syz.1.304[6655] dev=loop4 state=2 [ 150.527383][ T5695] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 150.527418][ T5695] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 150.527443][ T5695] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0 [ 150.534147][ T5695] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 150.537238][ T5695] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints? [ 150.727603][ C1] hid-thrustmaster 0003:044F:B65D.0007: Unknown packet type 0x0, unable to proceed further with wheel init [ 150.856716][ T6663] FAULT_INJECTION: forcing a failure. [ 150.856716][ T6663] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 150.856757][ T6663] CPU: 0 UID: 0 PID: 6663 Comm: syz.1.307 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 150.856780][ T6663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.856799][ T6663] Call Trace: [ 150.856807][ T6663] [ 150.856816][ T6663] dump_stack_lvl+0xe8/0x150 [ 150.856846][ T6663] should_fail_ex+0x467/0x600 [ 150.856876][ T6663] prepare_alloc_pages+0x223/0x650 [ 150.856913][ T6663] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 150.856946][ T6663] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 150.856980][ T6663] ? __pfx_policy_nodemask+0x10/0x10 [ 150.856996][ T6663] ? filemap_get_entry+0x374/0x3f0 [ 150.857025][ T6663] ? __pfx_filemap_get_entry+0x10/0x10 [ 150.857054][ T6663] alloc_pages_mpol+0xd4/0x280 [ 150.857077][ T6663] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 150.857099][ T6663] shmem_get_folio_gfp+0x6ee/0x1c40 [ 150.857147][ T6663] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 150.857181][ T6663] shmem_fallocate+0x9a8/0xf10 [ 150.857215][ T6663] ? __pfx_shmem_fallocate+0x10/0x10 [ 150.857233][ T6663] ? __lock_acquire+0x6df/0x2e40 [ 150.857262][ T6663] ? lock_acquire+0x115/0x350 [ 150.857307][ T6663] vfs_fallocate+0x663/0x7f0 [ 150.857346][ T6663] ? __pfx_vfs_fallocate+0x10/0x10 [ 150.857371][ T6663] ? __fget_files+0x2a/0x420 [ 150.857400][ T6663] __x64_sys_fallocate+0xbf/0x110 [ 150.857427][ T6663] do_syscall_64+0x17b/0x530 [ 150.857448][ T6663] ? irqentry_exit+0x10f/0x8f0 [ 150.857466][ T6663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.857486][ T6663] ? clear_bhb_loop+0x40/0x90 [ 150.857511][ T6663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.857530][ T6663] RIP: 0033:0x7f9f354de0d9 [ 150.857556][ T6663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.857572][ T6663] RSP: 002b:00007f9f33736028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 150.857592][ T6663] RAX: ffffffffffffffda RBX: 00007f9f35765fa0 RCX: 00007f9f354de0d9 [ 150.857607][ T6663] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000004 [ 150.857618][ T6663] RBP: 00007f9f35575024 R08: 0000000000000000 R09: 0000000000000000 [ 150.857629][ T6663] R10: 0000000002000402 R11: 0000000000000246 R12: 0000000000000000 [ 150.857640][ T6663] R13: 00007f9f35766038 R14: 00007f9f35765fa0 R15: 00007ffff3cfb9d8 [ 150.857671][ T6663] [ 150.945557][ T37] usb 1-1: USB disconnect, device number 14 [ 151.124582][ T5695] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 151.296290][ T5695] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.296343][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 4 [ 151.296356][ T5695] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.296379][ T5695] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 151.296390][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.311889][ T5695] usb 2-1: config 0 descriptor?? [ 151.539776][ T6669] genirq: Flags mismatch irq 4. 00202000 (aio_iiro_16) vs. 00202080 (ttyS0) [ 151.618856][ T5695] ath6kl: Failed to submit usb control message: -71 [ 151.618906][ T5695] ath6kl: unable to send the bmi data to the device: -71 [ 151.618919][ T5695] ath6kl: Unable to send get target info: -71 [ 151.647691][ T5695] ath6kl: Failed to init ath6kl core: -71 [ 151.668556][ T5695] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 151.689465][ T5695] usb 2-1: USB disconnect, device number 13 [ 151.776513][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.776526][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.776640][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.776649][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.776779][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.776787][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.776877][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.776885][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.776971][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.776979][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.777060][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.777067][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.777151][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.777158][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.777245][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.777253][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.777354][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.777362][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.777442][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.777449][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.777528][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.777536][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.777620][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.777627][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.777716][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.777723][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.777807][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.777814][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.777896][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.777903][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.777985][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.777992][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.778080][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.778088][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.778173][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.778180][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.778265][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.778272][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.778359][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.778367][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.778455][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.778462][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.778544][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.778550][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.778636][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.778644][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.778879][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.778887][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.778985][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.778993][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.779081][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.779088][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.779177][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.779185][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.779281][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.779288][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.779383][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.779391][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.779503][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.779511][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.779594][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.779601][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.779688][ T6677] binder: BINDER_SET_CONTEXT_MGR already set [ 151.779696][ T6677] binder: 6676:6677 ioctl 4018620d 200000004a80 returned -16 [ 151.874055][ T32] usb 4-1: USB disconnect, device number 16 [ 152.008952][ T32] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 152.009843][ T32] pl2303 4-1:1.0: device disconnected [ 152.301222][ T6689] loop4: detected capacity change from 0 to 524287964 [ 152.302088][ T6688] Flush: task=syz.2.316[6688] dev=loop4 state=2 [ 152.385006][ T6688] Teardown: task=syz.2.316[6688] dev=loop4 state=2 [ 152.486765][ T32] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 152.636870][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 152.659939][ T32] usb 4-1: config 0 has an invalid interface number: 151 but max is 1 [ 152.659962][ T32] usb 4-1: config 0 has no interface number 1 [ 152.659992][ T32] usb 4-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 152.660003][ T32] usb 4-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 152.660016][ T32] usb 4-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024 [ 152.660029][ T32] usb 4-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 152.660041][ T32] usb 4-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 152.660060][ T32] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89 [ 152.660073][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 152.660083][ T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 152.670000][ T32] usb 4-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 152.670027][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.670045][ T32] usb 4-1: Product: syz [ 152.670058][ T32] usb 4-1: Manufacturer: syz [ 152.670071][ T32] usb 4-1: SerialNumber: syz [ 152.699661][ T32] usb 4-1: config 0 descriptor?? [ 152.708892][ T6686] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 152.715699][ T32] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.728856][ T32] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 152.824687][ T5695] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 152.875163][ T32] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -12 [ 152.981274][ T6686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.982774][ T6686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.996589][ T32] usb 4-1: USB disconnect, device number 17 [ 153.026622][ T5695] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 153.026662][ T5695] usb 3-1: config 4 interface 0 has no altsetting 0 [ 153.026693][ T5695] usb 3-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 153.026713][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.074389][ T199] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 153.110354][ T5695] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 153.241474][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.241506][ T199] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.241541][ T199] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 153.241571][ T199] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.304958][ T199] usb 1-1: config 0 descriptor?? [ 153.722249][ T199] hid_parser_main: 4 callbacks suppressed [ 153.722272][ T199] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 153.722316][ T199] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 153.722339][ T199] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 153.722363][ T199] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 153.722387][ T199] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 153.722413][ T199] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 153.722438][ T199] hid-thrustmaster 0003:044F:B65D.0008: unknown main item tag 0x0 [ 153.846598][ T199] hid-thrustmaster 0003:044F:B65D.0008: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 153.846850][ T199] hid-thrustmaster 0003:044F:B65D.0008: Wrong number of endpoints? [ 153.920651][ C0] hid-thrustmaster 0003:044F:B65D.0008: Unknown packet type 0x0, unable to proceed further with wheel init [ 153.934369][ T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 154.076475][ T6718] IPVS: set_ctl: invalid protocol: 43 0.0.0.5:20004 [ 154.091161][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 154.100165][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.102386][ T9] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 154.102409][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.102419][ T9] usb 4-1: Product: syz [ 154.102426][ T9] usb 4-1: Manufacturer: syz [ 154.102433][ T9] usb 4-1: SerialNumber: syz [ 154.122457][ T32] usb 1-1: USB disconnect, device number 15 [ 154.125461][ T5695] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32 [ 154.125478][ T5695] stv0680 3-1:4.0: STV(e): camera ping failed!! [ 154.161074][ T5695] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 154.161095][ T5695] stv0680 3-1:4.0: last error: 0, command = 0x0 [ 154.179161][ T5695] usb 3-1: USB disconnect, device number 22 [ 154.203938][ T9] usb 4-1: config 0 descriptor?? [ 154.217990][ T9] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 154.324763][ T5668] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 154.474387][ T5668] usb 2-1: Using ep0 maxpacket: 32 [ 154.476360][ T5668] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 154.476386][ T5668] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 154.476408][ T5668] usb 2-1: config 0 interface 0 has no altsetting 0 [ 154.478732][ T5668] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 154.478756][ T5668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.478774][ T5668] usb 2-1: Product: syz [ 154.478788][ T5668] usb 2-1: Manufacturer: syz [ 154.478801][ T5668] usb 2-1: SerialNumber: syz [ 154.485735][ T5668] usb 2-1: config 0 descriptor?? [ 154.936395][ T5668] gs_usb 2-1:0.0: Couldn't get device config: (err=-71) [ 154.936435][ T5668] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71 [ 154.977031][ T5668] usb 2-1: USB disconnect, device number 14 [ 155.027061][ T9] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 155.027117][ T9] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 155.087636][ T9] usb 4-1: USB disconnect, device number 18 [ 155.705316][ T6740] loop4: detected capacity change from 0 to 524287964 [ 155.972635][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 156.064442][ T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 156.075031][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 156.076173][ T6749] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.338'. [ 156.088935][ T6748] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.338'. [ 156.166118][ T5772] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 156.219395][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.219423][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.219444][ T9] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 156.219455][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.222946][ T9] usb 1-1: config 0 descriptor?? [ 156.346780][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.346890][ T5772] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.346914][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.388067][ T5772] usb 4-1: config 0 descriptor?? [ 156.594777][ T5772] usbhid 4-1:0.0: can't add hid device: -71 [ 156.595114][ T5772] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 156.618683][ T5772] usb 4-1: USB disconnect, device number 19 [ 156.676539][ T9] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 156.676563][ T9] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 156.676578][ T9] hid-thrustmaster 0003:044F:B65D.0009: unknown main item tag 0x0 [ 156.678880][ T9] hid-thrustmaster 0003:044F:B65D.0009: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 156.679136][ T9] hid-thrustmaster 0003:044F:B65D.0009: Wrong number of endpoints? [ 156.714374][ T5668] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 156.870883][ C0] hid-thrustmaster 0003:044F:B65D.0009: Unknown packet type 0x0, unable to proceed further with wheel init [ 156.884384][ T5668] usb 2-1: Using ep0 maxpacket: 32 [ 156.893519][ T5668] usb 2-1: config 2 has an invalid interface number: 51 but max is 0 [ 156.893544][ T5668] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 156.893561][ T5668] usb 2-1: config 2 has no interface number 0 [ 156.893600][ T5668] usb 2-1: config 2 interface 51 altsetting 255 endpoint 0x9 has invalid wMaxPacketSize 0 [ 156.893613][ T5668] usb 2-1: config 2 interface 51 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 156.893624][ T5668] usb 2-1: config 2 interface 51 altsetting 255 has 4 endpoint descriptors, different from the interface descriptor's value: 14 [ 156.893637][ T5668] usb 2-1: config 2 interface 51 has no altsetting 0 [ 156.906359][ T5668] usb 2-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice=35.09 [ 156.906387][ T5668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.906406][ T5668] usb 2-1: Product: syz [ 156.906418][ T5668] usb 2-1: Manufacturer: syz [ 156.906431][ T5668] usb 2-1: SerialNumber: syz [ 157.072252][ T5695] usb 1-1: USB disconnect, device number 16 [ 157.171885][ T5668] keyspan_pda 2-1:2.51: required endpoints missing [ 157.183574][ T5668] usb 2-1: USB disconnect, device number 15 [ 157.204861][ T5772] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 157.356385][ T5772] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.356420][ T5772] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 157.356432][ T5772] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.363131][ T5772] usb 4-1: config 0 descriptor?? [ 157.728429][ T6761] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 157.869075][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.899012][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.956663][ T6767] loop4: detected capacity change from 0 to 524287964 [ 157.957448][ T6766] Flush: task=syz.2.346[6766] dev=loop4 state=2 [ 158.000760][ T6765] netlink: 32 bytes leftover after parsing attributes in process `syz.0.344'. [ 158.077271][ T6766] Teardown: task=syz.2.346[6766] dev=loop4 state=2 [ 158.306666][ T5772] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 158.348407][ T5772] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 158.556113][ T6778] batadv_slave_1: entered promiscuous mode [ 158.699004][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.336'. [ 158.913445][ T6792] netlink: 'syz.0.349': attribute type 4 has an invalid length. [ 159.183749][ T6771] batadv_slave_1: left promiscuous mode [ 160.091934][ T6818] loop4: detected capacity change from 0 to 524287964 [ 160.097194][ T4956] Flush: task=udevd[4956] dev=loop4 state=2 [ 160.184973][ T4956] Teardown: task=udevd[4956] dev=loop4 state=2 [ 160.863838][ T6842] loop3: detected capacity change from 0 to 7 [ 160.895911][ T6842] Dev loop3: unable to read RDB block 7 [ 160.895952][ T6842] loop3: unable to read partition table [ 160.896227][ T6842] loop3: partition table beyond EOD, truncated [ 160.897887][ T6842] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 160.925154][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 161.097305][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 161.209951][ T6847] random: crng reseeded on system resumption [ 161.741609][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 161.741689][ T6865] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 162.301600][ T6880] loop4: detected capacity change from 0 to 524287964 [ 162.302392][ T6879] Flush: task=syz.2.379[6879] dev=loop4 state=2 [ 162.385921][ T6879] Teardown: task=syz.2.379[6879] dev=loop4 state=2 [ 162.424416][ T5772] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 162.584570][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.584895][ T5772] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.584989][ T5772] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 162.585012][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.645671][ T5772] usb 2-1: config 0 descriptor?? [ 163.149725][ T5772] hid_parser_main: 4 callbacks suppressed [ 163.149803][ T5772] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 163.149835][ T5772] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 163.149860][ T5772] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 163.149885][ T5772] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 163.194432][ T5772] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 163.194476][ T5772] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 163.194549][ T5772] hid-thrustmaster 0003:044F:B65D.000A: unknown main item tag 0x0 [ 163.292697][ T6898] netlink: 'syz.2.385': attribute type 4 has an invalid length. [ 163.326947][ T5772] hid-thrustmaster 0003:044F:B65D.000A: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 163.327368][ T5772] hid-thrustmaster 0003:044F:B65D.000A: Wrong number of endpoints? [ 163.327985][ C0] hid-thrustmaster 0003:044F:B65D.000A: Unknown packet type 0x0, unable to proceed further with wheel init [ 163.654446][ T5772] usb 2-1: USB disconnect, device number 16 [ 163.870389][ T6911] nfs4: Unknown parameter '”%à' [ 164.080695][ T6913] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.081244][ T6913] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.152517][ T5668] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 164.297000][ T5668] usb 1-1: device descriptor read/64, error -71 [ 164.544361][ T5668] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 164.551903][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.392'. [ 164.676225][ T5668] usb 1-1: device descriptor read/64, error -71 [ 164.733471][ T6935] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 164.733495][ T6935] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 164.788830][ T6935] vhci_hcd vhci_hcd.0: Device attached [ 164.796136][ T5668] usb usb1-port1: attempt power cycle [ 164.820348][ T6936] vhci_hcd: connection closed [ 164.868132][ T4244] vhci_hcd vhci_hcd.2: stop threads [ 164.870042][ T4244] vhci_hcd vhci_hcd.2: release socket [ 164.870127][ T4244] vhci_hcd vhci_hcd.2: disconnect device [ 165.155105][ T5668] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 165.175579][ T5668] usb 1-1: device descriptor read/8, error -71 [ 165.416701][ T5668] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 165.442323][ T5668] usb 1-1: device descriptor read/8, error -71 [ 165.555820][ T5668] usb usb1-port1: unable to enumerate USB device [ 165.588165][ T6949] loop3: detected capacity change from 0 to 7 [ 165.602981][ T6949] Dev loop3: unable to read RDB block 7 [ 165.603028][ T6949] loop3: unable to read partition table [ 165.603332][ T6949] loop3: partition table beyond EOD, truncated [ 165.603362][ T6949] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 165.649475][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 165.735231][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 165.878060][ T6957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 165.878766][ T6957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.024460][ T199] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 166.187838][ T199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.187870][ T199] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.187962][ T199] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 166.187985][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.242845][ T199] usb 2-1: config 0 descriptor?? [ 166.671510][ T199] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 166.671548][ T199] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 166.671574][ T199] hid-thrustmaster 0003:044F:B65D.000B: unknown main item tag 0x0 [ 166.709438][ T199] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.1-1/input0 [ 166.709806][ T199] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints? [ 166.861500][ C0] hid-thrustmaster 0003:044F:B65D.000B: Unknown packet type 0x0, unable to proceed further with wheel init [ 166.998100][ T6969] netlink: 42496 bytes leftover after parsing attributes in process `syz.2.407'. [ 167.076207][ T5668] usb 2-1: USB disconnect, device number 17 [ 167.193061][ T6974] netlink: 5792 bytes leftover after parsing attributes in process `syz.0.408'. [ 167.375425][ T199] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 167.534694][ T199] usb 3-1: Using ep0 maxpacket: 32 [ 167.538442][ T199] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 167.538471][ T199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.614402][ T199] usb 3-1: config 0 descriptor?? [ 167.831374][ T199] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 167.876672][ T199] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 167.878236][ T199] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 167.878352][ T199] usb 3-1: media controller created [ 168.011238][ T199] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 168.056515][ T5668] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 168.194655][ T199] az6027: usb out operation failed. (-71) [ 168.198202][ T199] az6027: usb out operation failed. (-71) [ 168.198219][ T199] stb0899_attach: Driver disabled by Kconfig [ 168.198229][ T199] az6027: no front-end attached [ 168.198229][ T199] [ 168.200965][ T199] az6027: usb out operation failed. (-71) [ 168.200981][ T199] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 168.230326][ T5668] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.230375][ T5668] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 168.230396][ T5668] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 168.230421][ T5668] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 168.265139][ T5668] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 168.265168][ T5668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.265196][ T5668] usb 2-1: Product: syz [ 168.265209][ T5668] usb 2-1: Manufacturer: syz [ 168.265222][ T5668] usb 2-1: SerialNumber: syz [ 168.352097][ T5668] usb 2-1: config 0 descriptor?? [ 168.363166][ T5668] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected [ 168.386436][ T5668] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 168.397845][ T5668] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 168.459068][ T199] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 168.535531][ T199] dvb-usb: schedule remote query interval to 400 msecs. [ 168.535552][ T199] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 168.566482][ T199] usb 3-1: USB disconnect, device number 23 [ 169.188547][ T7021] netlink: 'syz.2.414': attribute type 4 has an invalid length. [ 169.393816][ T7009] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 169.699693][ T199] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 169.857552][ T7033] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 170.102345][ T5695] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 170.268776][ T199] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 170.275066][ T5695] usb 1-1: Using ep0 maxpacket: 8 [ 170.288292][ T5695] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 170.288344][ T5695] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 170.288365][ T5695] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 170.288388][ T5695] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 170.288410][ T5695] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 170.288451][ T5695] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 170.288472][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.391797][ T7039] raw_sendmsg: syz.3.421 forgot to set AF_INET. Fix it! [ 170.432326][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.432357][ T199] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.432449][ T199] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 170.432471][ T199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.587288][ T5695] usb 1-1: usb_control_msg returned -32 [ 170.587331][ T5695] usbtmc 1-1:16.0: can't read capabilities [ 170.625229][ T199] usb 3-1: config 0 descriptor?? [ 170.931868][ T5695] usb 1-1: USB disconnect, device number 21 [ 171.088575][ T199] usbhid 3-1:0.0: can't add hid device: -71 [ 171.088749][ T199] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 171.148017][ T5668] usb 2-1: USB disconnect, device number 18 [ 171.201464][ T199] usb 3-1: USB disconnect, device number 24 [ 171.213427][ T5668] garmin_gps 2-1:0.0: device disconnected [ 171.380263][ T7051] loop3: detected capacity change from 0 to 7 [ 171.402598][ T7051] Dev loop3: unable to read RDB block 7 [ 171.402637][ T7051] loop3: unable to read partition table [ 171.403112][ T7051] loop3: partition table beyond EOD, truncated [ 171.403130][ T7051] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.403970][ T7050] Flush: task=syz.0.425[7050] dev=loop3 state=2 [ 171.534870][ T7050] Teardown: task=syz.0.425[7050] dev=loop3 state=2 [ 172.430905][ T7076] loop4: detected capacity change from 0 to 524287964 [ 172.431599][ T7075] Flush: task=syz.0.432[7075] dev=loop4 state=2 [ 172.566598][ T7075] Teardown: task=syz.0.432[7075] dev=loop4 state=2 [ 172.903300][ T7090] ieee802154 phy0 wpan0: encryption failed: -22 [ 173.059750][ T5695] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 173.209105][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.209137][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 173.209173][ T5695] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 173.209195][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.266847][ T5695] usb 2-1: config 0 descriptor?? [ 173.473616][ T5668] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 173.615135][ T5668] usb 1-1: device descriptor read/64, error -71 [ 173.693863][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 173.708098][ T5695] usbhid 2-1:0.0: can't add hid device: -71 [ 173.708204][ T5695] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 173.757199][ T5695] usb 2-1: USB disconnect, device number 19 [ 173.874409][ T5668] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 174.024599][ T5668] usb 1-1: device descriptor read/64, error -71 [ 174.134874][ T5668] usb usb1-port1: attempt power cycle [ 174.475109][ T5668] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 174.509138][ T5668] usb 1-1: device descriptor read/8, error -71 [ 174.746025][ T5668] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 174.765493][ T5668] usb 1-1: device descriptor read/8, error -71 [ 174.900952][ T5668] usb usb1-port1: unable to enumerate USB device [ 175.207676][ T7139] netlink: 32 bytes leftover after parsing attributes in process `syz.1.453'. [ 175.242484][ T7138] netlink: 'syz.2.452': attribute type 4 has an invalid length. [ 175.439044][ T7144] loop4: detected capacity change from 0 to 524287964 [ 175.439887][ T7143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.454'. [ 175.474727][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 175.630070][ T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 175.630098][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.669293][ T9] usb 2-1: config 0 descriptor?? [ 175.745972][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 175.782294][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 175.854454][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 175.864429][ T5668] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 175.942229][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 175.942595][ T9] gspca_cpia1: usb_control_msg 01, error -71 [ 175.942603][ T9] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 175.956000][ T9] usb 2-1: USB disconnect, device number 20 [ 176.028657][ T5668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.028689][ T5668] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.028724][ T5668] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 176.028746][ T5668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.072627][ T5668] usb 3-1: config 0 descriptor?? [ 176.538937][ C1] raw-gadget.3 gadget.2: ignoring, device is not running [ 176.550010][ T5668] usbhid 3-1:0.0: can't add hid device: -71 [ 176.550123][ T5668] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 176.574422][ T5668] usb 3-1: USB disconnect, device number 25 [ 177.254433][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 177.361241][ T7175] loop3: detected capacity change from 0 to 7 [ 177.394907][ T7175] Dev loop3: unable to read RDB block 7 [ 177.394950][ T7175] loop3: unable to read partition table [ 177.395211][ T7175] loop3: partition table beyond EOD, truncated [ 177.404441][ T7175] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 177.432468][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 177.462712][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 177.462751][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.489057][ T9] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 177.489083][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.489100][ T9] usb 1-1: Product: syz [ 177.489482][ T9] usb 1-1: Manufacturer: syz [ 177.489497][ T9] usb 1-1: SerialNumber: syz [ 177.536520][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 177.546551][ T199] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 177.739664][ T199] usb 3-1: unable to get BOS descriptor or descriptor too short [ 177.781575][ T199] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config [ 177.781600][ T199] usb 3-1: config 66 has 0 interfaces, different from the descriptor's value: 2 [ 177.805672][ T199] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95 [ 177.805912][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.805931][ T199] usb 3-1: Product: syz [ 177.805942][ T199] usb 3-1: Manufacturer: syz [ 177.805955][ T199] usb 3-1: SerialNumber: syz [ 177.945570][ T9] usb 1-1: 0:1 : does not exist [ 177.956732][ T9] usb 1-1: cannot request logical cluster ID: 65535 (err: -71) [ 177.978504][ T9] usb 1-1: unit 80 not found! [ 178.049742][ T7187] loop4: detected capacity change from 0 to 524287964 [ 178.050538][ T7186] Flush: task=syz.3.473[7186] dev=loop4 state=2 [ 178.094873][ T5668] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 178.153919][ T7186] Teardown: task=syz.3.473[7186] dev=loop4 state=2 [ 178.251677][ T7173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.266859][ T7173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.286187][ T5668] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 178.288671][ T5668] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0043, bcdDevice= 1.01 [ 178.288697][ T5668] usb 2-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 178.288715][ T5668] usb 2-1: Product: syz [ 178.288728][ T5668] usb 2-1: Manufacturer: syz [ 178.288741][ T5668] usb 2-1: SerialNumber: syz [ 178.373235][ T5668] em28xx 2-1:1.0: New device syz syz @ 480 Mbps (0ccd:0043, interface 0, class 0) [ 178.373273][ T5668] em28xx 2-1:1.0: DVB interface 0 found: bulk [ 178.718320][ T9] usb 1-1: USB disconnect, device number 26 [ 179.009053][ T5668] em28xx 2-1:1.0: unknown em28xx chip ID (0) [ 179.224649][ T4905] block nbd0: Receive control failed (result -107) [ 179.477630][ T6012] udevd[6012]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 179.916811][ T6704] block nbd0: shutting down sockets [ 180.372001][ T199] usb 3-1: USB disconnect, device number 26 [ 180.538761][ T7185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.555474][ T7185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.572619][ T7225] sg_write: data in/out 443357/450 bytes for SCSI command 0x0-- guessing data in; [ 180.572619][ T7225] program syz.2.482 not setting count and/or reply_len properly [ 180.857303][ T5668] em28xx 2-1:1.0: failed to get i2c transfer status from bridge register (error=-5) [ 180.857350][ T5668] em28xx 2-1:1.0: board has no eeprom [ 180.914512][ T5668] em28xx 2-1:1.0: Identified as Terratec Cinergy T XS (MT2060) (card=44) [ 180.914541][ T5668] em28xx 2-1:1.0: dvb set to bulk mode. [ 180.914865][ T5695] em28xx 2-1:1.0: Binding DVB extension [ 180.976036][ T199] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 180.995250][ T5668] usb 2-1: USB disconnect, device number 21 [ 181.036730][ T5695] em28xx 2-1:1.0: writing to i2c device at 0x1e failed (error=-19) [ 181.036756][ T5695] zl10353_read_register: readreg error (reg=127, ret==-19) [ 181.036827][ T5695] em28xx 2-1:1.0: frontend initialization failed [ 181.042572][ T5695] em28xx 2-1:1.0: Remote control support is not available for this card. [ 181.047987][ T5668] em28xx 2-1:1.0: Disconnecting em28xx [ 181.048119][ T5668] em28xx 2-1:1.0: Closing input extension [ 181.058350][ T7237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.072221][ T7237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.166858][ T199] usb 3-1: Using ep0 maxpacket: 16 [ 181.211195][ T5668] em28xx: Freeing device [ 181.221529][ T199] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 181.221563][ T199] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.221635][ T199] usb 3-1: Product: syz [ 181.221656][ T199] usb 3-1: Manufacturer: syz [ 181.221669][ T199] usb 3-1: SerialNumber: syz [ 181.275035][ T199] usb 3-1: config 0 descriptor?? [ 181.301879][ T199] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 181.699896][ T199] usb 3-1: clie_3_5_startup: get interface number failed: -71 [ 181.700172][ T199] visor 3-1:0.0: probe with driver visor failed with error -71 [ 181.763141][ T199] usb 3-1: USB disconnect, device number 27 [ 182.283851][ T7262] netlink: 'syz.3.494': attribute type 4 has an invalid length. [ 182.348280][ T7271] netlink: 8 bytes leftover after parsing attributes in process `syz.1.496'. [ 182.634458][ T5668] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 182.796595][ T7276] loop4: detected capacity change from 0 to 524287964 [ 182.800599][ T5668] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 182.800627][ T5668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.800646][ T5668] usb 3-1: Product: syz [ 182.800660][ T5668] usb 3-1: Manufacturer: syz [ 182.800673][ T5668] usb 3-1: SerialNumber: syz [ 182.803278][ T7275] Flush: task=syz.1.498[7275] dev=loop4 state=2 [ 182.854700][ T5668] usb 3-1: config 0 descriptor?? [ 182.872159][ T5668] hub 3-1:0.0: bad descriptor, ignoring hub [ 182.872194][ T5668] hub 3-1:0.0: probe with driver hub failed with error -5 [ 182.877075][ T5668] f81232 3-1:0.0: f81534a converter detected [ 182.904377][ T7275] Teardown: task=syz.1.498[7275] dev=loop4 state=2 [ 183.079262][ T5668] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 183.079288][ T5668] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 183.107949][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.499'. [ 183.107989][ T7279] netlink: 32 bytes leftover after parsing attributes in process `syz.0.499'. [ 183.137533][ T5668] usb 3-1: USB disconnect, device number 28 [ 183.143898][ T5668] f81232 3-1:0.0: device disconnected [ 183.404021][ T7290] netlink: 64 bytes leftover after parsing attributes in process `syz.1.503'. [ 184.462903][ T7301] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 184.824692][ T7307] loop3: detected capacity change from 0 to 7 [ 184.825769][ T7307] Dev loop3: unable to read RDB block 7 [ 184.825808][ T7307] loop3: unable to read partition table [ 184.863405][ T7307] loop3: partition table beyond EOD, truncated [ 184.863453][ T7307] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.945988][ T6012] Flush: task=udevd[6012] dev=loop3 state=2 [ 184.955937][ T5668] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 185.035403][ T6012] Teardown: task=udevd[6012] dev=loop3 state=2 [ 185.122248][ T5668] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 185.122273][ T5668] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 185.157633][ T5668] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 185.157660][ T5668] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.157678][ T5668] usb 1-1: Product: syz [ 185.157691][ T5668] usb 1-1: Manufacturer: syz [ 185.157704][ T5668] usb 1-1: SerialNumber: syz [ 185.221615][ T5695] libceph: connect (1)[c::]:6789 error -101 [ 185.268582][ T5695] libceph: mon0 (1)[c::]:6789 connect error [ 185.310255][ T5695] libceph: connect (1)[c::]:6789 error -101 [ 185.323898][ T5695] libceph: mon0 (1)[c::]:6789 connect error [ 185.550622][ T5668] usb 1-1: 0:1 : does not exist [ 185.550708][ T5668] usb 1-1: BAAD GENERIC IO: no channels? [ 185.664347][ T5695] libceph: connect (1)[c::]:6789 error -101 [ 185.664536][ T5695] libceph: mon0 (1)[c::]:6789 connect error [ 185.757983][ T5668] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 185.770481][ T5668] usb 1-1: USB disconnect, device number 27 [ 185.829512][ T7310] ceph: No mds server is up or the cluster is laggy [ 185.876193][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.037576][ T7328] loop4: detected capacity change from 0 to 524287964 [ 186.198663][ T5668] libceph: connect (1)[c::]:6789 error -101 [ 186.198844][ T5668] libceph: mon0 (1)[c::]:6789 connect error [ 186.492039][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 186.604733][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 186.625171][ T5668] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 186.784749][ T5668] usb 1-1: Using ep0 maxpacket: 8 [ 186.793754][ T5668] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 186.793800][ T5668] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 186.793822][ T5668] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.847227][ T5668] usb 1-1: config 0 descriptor?? [ 187.249554][ T5668] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 187.590128][ T7347] netlink: 'syz.2.521': attribute type 10 has an invalid length. [ 187.618179][ T7347] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 187.618204][ T7347] bond0: (slave ipvlan1): The slave device specified does not support setting the MAC address [ 187.618423][ T7347] bond0: (slave ipvlan1): Error -95 calling set_mac_address [ 189.463396][ T5668] usb 1-1: USB disconnect, device number 28 [ 189.732732][ T7396] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.761249][ T7396] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.408383][ T7400] netlink: 'syz.0.536': attribute type 4 has an invalid length. [ 190.425840][ T7404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.537'. [ 190.430242][ T7403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.538'. [ 190.489495][ T7405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.491245][ T7405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.657605][ T7409] loop4: detected capacity change from 0 to 524287964 [ 191.063419][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 191.169482][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 191.505022][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.505994][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.523665][ T7431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.551700][ T7431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.994452][ T5668] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 192.056060][ T7442] loop3: detected capacity change from 0 to 7 [ 192.071050][ T7442] Dev loop3: unable to read RDB block 7 [ 192.071091][ T7442] loop3: unable to read partition table [ 192.071283][ T7442] loop3: partition table beyond EOD, truncated [ 192.071312][ T7442] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 192.110177][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 192.125329][ T5668] usb 2-1: device descriptor read/64, error -71 [ 192.185311][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 192.205024][ T32] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 192.345206][ T32] usb 3-1: device descriptor read/64, error -71 [ 192.372041][ T7450] loop4: detected capacity change from 0 to 524287964 [ 192.385918][ T5668] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 192.527041][ T5668] usb 2-1: device descriptor read/64, error -71 [ 192.586764][ T32] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 192.629025][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 192.635315][ T5668] usb usb2-port1: attempt power cycle [ 192.705646][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 192.714770][ T32] usb 3-1: device descriptor read/64, error -71 [ 192.838710][ T32] usb usb3-port1: attempt power cycle [ 192.984483][ T5668] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 193.006330][ T5668] usb 2-1: device descriptor read/8, error -71 [ 193.229065][ T32] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 193.249591][ T32] usb 3-1: device descriptor read/8, error -71 [ 193.269743][ T5668] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 193.307652][ T5668] usb 2-1: device descriptor read/8, error -71 [ 193.416308][ T5668] usb usb2-port1: unable to enumerate USB device [ 193.494632][ T32] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 193.516155][ T32] usb 3-1: device descriptor read/8, error -71 [ 193.625345][ T32] usb usb3-port1: unable to enumerate USB device [ 193.801033][ T7469] binder: 7468:7469 ioctl c0306201 200000000080 returned -14 [ 193.834436][ T7470] binder: BINDER_SET_CONTEXT_MGR already set [ 193.834451][ T7470] binder: 7468:7470 ioctl 4018620d 200000000040 returned -16 [ 193.834641][ T7469] binder: 7468:7469 ioctl c0306201 2000000003c0 returned -22 [ 194.234177][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.234403][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.324434][ T5594] Bluetooth: hci2: command 0x0405 tx timeout [ 195.410085][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz.2.576'. [ 195.699528][ T7511] netlink: 'syz.1.577': attribute type 4 has an invalid length. [ 195.820351][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.0.582'. [ 195.836825][ T7517] loop4: detected capacity change from 0 to 524287964 [ 195.839001][ T7514] Flush: task=syz.2.579[7514] dev=loop4 state=2 [ 195.875769][ T7521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.906020][ T7521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.314785][ T7514] Teardown: task=syz.2.579[7514] dev=loop4 state=2 [ 197.456958][ T7551] loop3: detected capacity change from 0 to 7 [ 197.482354][ T7551] Dev loop3: unable to read RDB block 7 [ 197.482397][ T7551] loop3: unable to read partition table [ 197.482594][ T7551] loop3: partition table beyond EOD, truncated [ 197.482634][ T7551] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 197.536661][ T199] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 197.551899][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 197.684373][ T199] usb 1-1: Using ep0 maxpacket: 8 [ 197.706946][ T199] usb 1-1: config 53 has an invalid interface number: 101 but max is 0 [ 197.706976][ T199] usb 1-1: config 53 has an invalid descriptor of length 0, skipping remainder of the config [ 197.706993][ T199] usb 1-1: config 53 has no interface number 0 [ 197.707090][ T199] usb 1-1: config 53 interface 101 altsetting 0 has an endpoint descriptor with address 0xC2, changing to 0x82 [ 197.707123][ T199] usb 1-1: config 53 interface 101 altsetting 0 endpoint 0x82 has invalid maxpacket 33307, setting to 1024 [ 197.707149][ T199] usb 1-1: config 53 interface 101 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 197.707224][ T199] usb 1-1: config 53 interface 101 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 197.707246][ T199] usb 1-1: config 53 interface 101 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 197.713762][ T199] usb 1-1: New USB device found, idVendor=0bfd, idProduct=011b, bcdDevice=33.a1 [ 197.713788][ T199] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.713860][ T199] usb 1-1: Product: syz [ 197.713875][ T199] usb 1-1: Manufacturer: syz [ 197.713888][ T199] usb 1-1: SerialNumber: syz [ 197.725302][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 197.973760][ T7549] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.164398][ T32] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 198.237291][ T7561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.238093][ T7561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.314961][ T32] usb 2-1: device descriptor read/64, error -71 [ 198.436291][ T7565] netlink: 60 bytes leftover after parsing attributes in process `syz.2.595'. [ 198.440179][ T7565] netlink: 60 bytes leftover after parsing attributes in process `syz.2.595'. [ 198.463319][ T7566] netlink: 60 bytes leftover after parsing attributes in process `syz.2.595'. [ 198.510286][ T7563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.589'. [ 198.510309][ T7563] netlink: 40 bytes leftover after parsing attributes in process `syz.0.589'. [ 198.574985][ T32] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 198.714431][ T32] usb 2-1: device descriptor read/64, error -71 [ 198.887268][ T32] usb usb2-port1: attempt power cycle [ 198.925135][ T7569] loop4: detected capacity change from 0 to 524287964 [ 199.244404][ T32] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 199.269629][ T32] usb 2-1: device descriptor read/8, error -71 [ 199.507596][ T32] usb 2-1: new low-speed USB device number 29 using dummy_hcd [ 199.542124][ T32] usb 2-1: device descriptor read/8, error -71 [ 199.571197][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 199.644765][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 199.707975][ T32] usb usb2-port1: unable to enumerate USB device [ 199.734388][ T5695] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 199.868966][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.881851][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.908267][ T5695] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 199.908299][ T5695] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 199.908323][ T5695] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 199.908363][ T5695] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 199.908384][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.960210][ T7574] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 200.611057][ T199] kvaser_usb 1-1:53.101: CMD_MAP_CHANNEL_REQ failed for CAN0 [ 200.611080][ T199] kvaser_usb 1-1:53.101: error -EMSGSIZE: Failed to initialize card [ 200.666082][ T199] kvaser_usb 1-1:53.101: probe with driver kvaser_usb failed with error -90 [ 200.722483][ T199] usb 1-1: USB disconnect, device number 29 [ 201.843116][ T7595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.854913][ T7595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.374521][ T5772] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 202.544395][ T5772] usb 1-1: Using ep0 maxpacket: 32 [ 202.570889][ T5772] usb 1-1: unable to get BOS descriptor or descriptor too short [ 202.572969][ T5772] usb 1-1: config 4 has an invalid interface number: 17 but max is 0 [ 202.572992][ T5772] usb 1-1: config 4 has no interface number 0 [ 202.573022][ T5772] usb 1-1: config 4 interface 17 has no altsetting 0 [ 202.609878][ T5772] usb 1-1: New USB device found, idVendor=0c45, idProduct=8008, bcdDevice=7d.2a [ 202.609907][ T5772] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.610460][ T5772] usb 1-1: Product: syz [ 202.610476][ T5772] usb 1-1: Manufacturer: syz [ 202.610490][ T5772] usb 1-1: SerialNumber: syz [ 202.919333][ T7597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.920674][ T7597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.954989][ T7597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.957892][ T7597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.869862][ T5772] gspca_main: sn9c2028-2.14.0 probing 0c45:8008 [ 203.878474][ T5772] gspca_sn9c2028: read1 error -71 [ 203.880222][ T5772] gspca_sn9c2028: read1 error -71 [ 203.882916][ T5772] gspca_sn9c2028: read1 error -71 [ 203.883216][ T5772] sn9c2028 1-1:4.17: probe with driver sn9c2028 failed with error -71 [ 203.911792][ T7618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.615'. [ 203.952167][ T5772] usb 1-1: USB disconnect, device number 30 [ 204.273182][ T7626] futex_wake_op: syz.0.617 tries to shift op by 144; fix this program [ 204.273237][ T7626] futex_wake_op: syz.0.617 tries to shift op by 144; fix this program [ 204.273263][ T7626] futex_wake_op: syz.0.617 tries to shift op by 144; fix this program [ 204.286309][ T7626] futex_wake_op: syz.0.617 tries to shift op by 144; fix this program [ 204.286340][ T7626] futex_wake_op: syz.0.617 tries to shift op by 144; fix this program [ 204.317047][ T7626] futex_wake_op: syz.0.617 tries to shift op by 144; fix this program [ 204.317085][ T7626] futex_wake_op: syz.0.617 tries to shift op by 144; fix this program [ 204.321979][ T7626] futex_wake_op: syz.0.617 tries to shift op by 144; fix this program [ 204.356705][ T7626] futex_wake_op: syz.0.617 tries to shift op by 144; fix this program [ 204.356736][ T7626] futex_wake_op: syz.0.617 tries to shift op by 144; fix this program [ 204.765682][ T5695] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 204.835712][ T5695] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input10 [ 205.395767][ T7632] loop4: detected capacity change from 0 to 524287964 [ 205.402499][ T7631] Flush: task=syz.3.620[7631] dev=loop4 state=2 [ 205.502520][ T5695] usb 3-1: USB disconnect, device number 33 [ 205.502610][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 205.512123][ T7631] Teardown: task=syz.3.620[7631] dev=loop4 state=2 [ 205.746102][ T7636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.746657][ T7636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.985030][ T32] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 206.156738][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 206.168788][ T32] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 206.168817][ T32] usb 1-1: config 0 has no interface number 0 [ 206.168859][ T32] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 206.187010][ T32] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 206.187039][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.187058][ T32] usb 1-1: Product: syz [ 206.187071][ T32] usb 1-1: Manufacturer: syz [ 206.187084][ T32] usb 1-1: SerialNumber: syz [ 206.209457][ T7648] netlink: 'syz.3.623': attribute type 4 has an invalid length. [ 206.233738][ T32] usb 1-1: config 0 descriptor?? [ 206.446708][ T7635] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 206.684817][ T5594] Bluetooth: hci3: command 0x0406 tx timeout [ 206.684852][ T5594] Bluetooth: hci0: command 0x0406 tx timeout [ 206.736174][ T32] asix 1-1:0.188: probe with driver asix failed with error -71 [ 206.780858][ T7651] Bluetooth: hci1: command 0x0406 tx timeout [ 206.805073][ T32] usb 1-1: USB disconnect, device number 31 [ 207.132135][ T5695] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 207.274412][ T5695] usb 3-1: device descriptor read/64, error -71 [ 207.535422][ T5695] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 207.664978][ T5695] usb 3-1: device descriptor read/64, error -71 [ 207.672563][ T7661] loop3: detected capacity change from 0 to 7 [ 207.682920][ T7661] Dev loop3: unable to read RDB block 7 [ 207.682961][ T7661] loop3: unable to read partition table [ 207.685579][ T7661] loop3: partition table beyond EOD, truncated [ 207.685614][ T7661] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 207.742367][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 207.803526][ T5695] usb usb3-port1: attempt power cycle [ 207.833874][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.844875][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 207.847377][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.164347][ T5695] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 208.177346][ T5695] usb 3-1: device descriptor read/8, error -71 [ 208.426186][ T5695] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 208.445344][ T5695] usb 3-1: device descriptor read/8, error -71 [ 208.555320][ T5695] usb usb3-port1: unable to enumerate USB device [ 208.613397][ T7672] loop4: detected capacity change from 0 to 524287964 [ 208.618325][ T7669] Flush: task=syz.1.634[7669] dev=loop4 state=2 [ 208.793365][ T7669] Teardown: task=syz.1.634[7669] dev=loop4 state=2 [ 209.024449][ T9] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 209.179458][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 209.179487][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 209.179580][ T9] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 209.179604][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.198926][ T9] usb 1-1: config 0 descriptor?? [ 210.018114][ T9] ath6kl: Failed to submit usb control message: -71 [ 210.018165][ T9] ath6kl: unable to send the bmi data to the device: -71 [ 210.018179][ T9] ath6kl: Unable to send get target info: -71 [ 210.090170][ T9] ath6kl: Failed to init ath6kl core: -71 [ 210.092348][ T9] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 210.136575][ T9] usb 1-1: USB disconnect, device number 32 [ 210.636214][ T7718] netlink: 'syz.1.646': attribute type 9 has an invalid length. [ 210.654366][ T5695] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 210.786610][ T5695] usb 3-1: device descriptor read/64, error -71 [ 210.874441][ T9] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 211.027775][ T9] usb 2-1: config 0 has an invalid descriptor of length 99, skipping remainder of the config [ 211.027814][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 68: 63, using maximum allowed: 30 [ 211.027910][ T9] usb 2-1: config 0 interface 0 altsetting 68 has 0 endpoint descriptors, different from the interface descriptor's value: 63 [ 211.027938][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 211.029234][ T5695] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 211.047442][ T9] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 211.047469][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.047488][ T9] usb 2-1: Product: syz [ 211.047549][ T9] usb 2-1: Manufacturer: syz [ 211.047563][ T9] usb 2-1: SerialNumber: syz [ 211.085213][ T9] usb 2-1: config 0 descriptor?? [ 211.174496][ T5695] usb 3-1: device descriptor read/64, error -71 [ 211.286626][ T5695] usb usb3-port1: attempt power cycle [ 211.319507][ T7717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.321619][ T7717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.393111][ T9] usb 2-1: USB disconnect, device number 30 [ 211.644586][ T5695] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 211.664953][ T5695] usb 3-1: device descriptor read/8, error -71 [ 211.793455][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 211.904437][ T5695] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 211.925071][ T5695] usb 3-1: device descriptor read/8, error -71 [ 212.034671][ T5695] usb usb3-port1: unable to enumerate USB device [ 212.053281][ T37] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 212.141957][ T7752] loop4: detected capacity change from 0 to 524287964 [ 212.143863][ T7751] Flush: task=syz.1.659[7751] dev=loop4 state=2 [ 212.206470][ T37] usb 1-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 212.206499][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.211107][ T37] usb 1-1: config 0 descriptor?? [ 212.242185][ T37] pwc: Creative Labs Webcam 5 detected. [ 212.262694][ T7751] Teardown: task=syz.1.659[7751] dev=loop4 state=2 [ 212.713049][ T7760] netlink: 'syz.1.662': attribute type 4 has an invalid length. [ 212.840496][ T37] pwc: recv_control_msg error -32 req 02 val 2b00 [ 212.843204][ T37] pwc: recv_control_msg error -32 req 02 val 2700 [ 213.047122][ T37] pwc: recv_control_msg error -32 req 02 val 2c00 [ 213.229452][ T7771] loop3: detected capacity change from 0 to 7 [ 213.237299][ T7771] Dev loop3: unable to read RDB block 7 [ 213.237392][ T7771] loop3: unable to read partition table [ 213.237678][ T7771] loop3: partition table beyond EOD, truncated [ 213.239583][ T7771] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.338724][ T4905] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 213.339306][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 213.414602][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 213.568410][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.570153][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.731879][ T37] pwc: recv_control_msg error -71 req 04 val 1400 [ 213.732417][ T37] pwc: recv_control_msg error -71 req 02 val 2000 [ 213.732949][ T37] pwc: recv_control_msg error -71 req 02 val 2100 [ 213.734058][ T37] pwc: recv_control_msg error -71 req 06 val 0600 [ 213.761166][ T37] pwc: recv_control_msg error -71 req 04 val 1500 [ 213.761664][ T37] pwc: recv_control_msg error -71 req 02 val 2500 [ 213.762136][ T37] pwc: recv_control_msg error -71 req 02 val 2400 [ 213.762586][ T37] pwc: recv_control_msg error -71 req 02 val 2600 [ 213.763060][ T37] pwc: recv_control_msg error -71 req 02 val 2900 [ 213.763528][ T37] pwc: recv_control_msg error -71 req 02 val 2800 [ 213.776516][ T37] pwc: recv_control_msg error -71 req 04 val 1100 [ 213.813041][ T37] pwc: recv_control_msg error -71 req 04 val 1200 [ 213.817565][ T37] pwc: Failed to power off camera (-71) [ 213.872403][ T37] pwc: Registered as video103. [ 213.885600][ T37] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 213.917206][ T37] usb 1-1: USB disconnect, device number 33 [ 214.360183][ T7793] loop4: detected capacity change from 0 to 524287964 [ 214.360953][ T7792] Flush: task=syz.0.672[7792] dev=loop4 state=2 [ 214.483089][ T7792] Teardown: task=syz.0.672[7792] dev=loop4 state=2 [ 214.924459][ T37] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 214.973028][ T7814] netlink: 376 bytes leftover after parsing attributes in process `syz.1.677'. [ 215.076906][ T37] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 215.076931][ T37] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.076965][ T37] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 215.076988][ T37] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.110521][ T37] usb 1-1: config 0 descriptor?? [ 216.364502][ T5772] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 216.369974][ T7853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.370629][ T7853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.524453][ T5772] usb 2-1: Using ep0 maxpacket: 16 [ 216.536890][ T5772] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 216.537969][ T5772] usb 2-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 216.537993][ T5772] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 216.565168][ T5772] usb 2-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 216.565194][ T5772] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 216.568988][ T5772] usb 2-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 216.569012][ T5772] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 216.608619][ T5772] usb 2-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 216.608644][ T5772] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 216.609841][ T5772] usb 2-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 216.609863][ T5772] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 216.611097][ T5772] usb 2-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 216.611119][ T5772] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 216.613431][ T5772] usb 2-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 216.613453][ T5772] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 216.643743][ T5772] usb 2-1: config 28 has too many interfaces: 40, using maximum allowed: 32 [ 216.643769][ T5772] usb 2-1: config 28 has 0 interfaces, different from the descriptor's value: 40 [ 216.776491][ T5772] usb 2-1: string descriptor 0 read error: -71 [ 216.776608][ T5772] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 216.776621][ T5772] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.786853][ T7855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.693'. [ 216.811541][ T5772] r8152-cfgselector 2-1: Unknown version 0x0000 [ 216.811566][ T5772] r8152-cfgselector 2-1: rejected 8 configurations due to insufficient available bus power [ 216.811585][ T5772] r8152-cfgselector 2-1: no configuration chosen from 8 choices [ 216.823011][ T5772] r8152-cfgselector 2-1: USB disconnect, device number 31 [ 217.118624][ T7863] loop4: detected capacity change from 0 to 524287964 [ 217.392578][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 217.465401][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 217.543005][ T7870] input: syz0 as /devices/virtual/input/input12 [ 217.693117][ T37] usb 1-1: USB disconnect, device number 34 [ 218.237570][ T7878] netlink: 'syz.0.702': attribute type 4 has an invalid length. [ 218.329339][ T7886] loop3: detected capacity change from 0 to 7 [ 218.343258][ T7886] Dev loop3: unable to read RDB block 7 [ 218.343354][ T7886] loop3: unable to read partition table [ 218.343686][ T7886] loop3: partition table beyond EOD, truncated [ 218.343703][ T7886] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 218.388319][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 218.414419][ T37] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 218.465108][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 218.474783][ T5772] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 218.578225][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.580354][ T37] usb 2-1: not running at top speed; connect to a high speed hub [ 218.580417][ T37] usb 2-1: too many configurations: 22, using maximum allowed: 8 [ 218.583531][ T37] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 218.583563][ T37] usb 2-1: can't read configurations, error -61 [ 218.625439][ T5772] usb 3-1: Using ep0 maxpacket: 8 [ 218.627411][ T5772] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 218.627442][ T5772] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.627456][ T5772] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 218.627469][ T5772] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 218.637862][ T5772] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 218.637889][ T5772] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.637957][ T5772] usb 3-1: Product: syz [ 218.637971][ T5772] usb 3-1: Manufacturer: syz [ 218.637985][ T5772] usb 3-1: SerialNumber: syz [ 218.716662][ T5772] usb 3-1: config 0 descriptor?? [ 218.722675][ T7883] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 218.775735][ T37] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 218.941560][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 218.943539][ T37] usb 2-1: not running at top speed; connect to a high speed hub [ 218.943603][ T37] usb 2-1: too many configurations: 22, using maximum allowed: 8 [ 218.977768][ T37] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 218.977804][ T37] usb 2-1: can't read configurations, error -61 [ 218.978172][ T37] usb usb2-port1: attempt power cycle [ 219.365471][ T37] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 219.389205][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 219.391893][ T37] usb 2-1: not running at top speed; connect to a high speed hub [ 219.391954][ T37] usb 2-1: too many configurations: 22, using maximum allowed: 8 [ 219.398112][ T37] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 219.398146][ T37] usb 2-1: can't read configurations, error -61 [ 219.562179][ T5772] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 219.574746][ T5695] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 219.577091][ T37] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 219.638596][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 219.655160][ T37] usb 2-1: not running at top speed; connect to a high speed hub [ 219.655228][ T37] usb 2-1: too many configurations: 22, using maximum allowed: 8 [ 219.671076][ T5772] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input13 [ 219.680679][ T37] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 219.680715][ T37] usb 2-1: can't read configurations, error -61 [ 219.686128][ T37] usb usb2-port1: unable to enumerate USB device [ 219.741871][ T7911] loop4: detected capacity change from 0 to 524287964 [ 219.777332][ T5695] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.777358][ T5695] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 219.777393][ T5695] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 219.777416][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.842031][ T5695] usb 1-1: config 0 descriptor?? [ 219.980736][ C0] powermate: config urb returned -71 [ 219.985422][ C0] powermate: config urb returned -71 [ 219.985607][ C0] powermate: config urb returned -71 [ 219.985841][ C0] powermate: config urb returned -71 [ 220.138116][ T5772] usb 3-1: USB disconnect, device number 42 [ 220.138200][ C0] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 220.246946][ T6009] Flush: task=udevd[6009] dev=loop4 state=2 [ 220.324588][ T6009] Teardown: task=udevd[6009] dev=loop4 state=2 [ 221.272357][ T7926] netlink: 'syz.2.717': attribute type 4 has an invalid length. [ 221.272406][ T7926] netlink: 17 bytes leftover after parsing attributes in process `syz.2.717'. [ 221.491050][ T7925] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14 [ 222.359674][ T5772] usb 1-1: USB disconnect, device number 35 [ 222.584508][ T5695] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 222.747483][ T7955] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.748505][ T7955] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.756471][ T5695] usb 3-1: config 0 has an invalid interface number: 120 but max is 0 [ 222.756497][ T5695] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.756516][ T5695] usb 3-1: config 0 has no interface number 0 [ 222.756553][ T5695] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 222.756565][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.861541][ T5695] usb 3-1: config 0 descriptor?? [ 223.071404][ T7939] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.071969][ T7939] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.126713][ T5695] usb 3-1: USB disconnect, device number 43 [ 223.392009][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.393026][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.431667][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.1.729'. [ 223.606754][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 223.851161][ T7976] loop4: detected capacity change from 0 to 524287964 [ 224.216769][ T5695] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 224.252089][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 224.339958][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 224.364734][ T5695] usb 3-1: Using ep0 maxpacket: 32 [ 224.365556][ T5695] usb 3-1: too many configurations: 26, using maximum allowed: 8 [ 224.368002][ T5695] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 224.368024][ T5695] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.381126][ T5695] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 224.381150][ T5695] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.383741][ T5695] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 224.383763][ T5695] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.384978][ T5695] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 224.385000][ T5695] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.392729][ T5695] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 224.392751][ T5695] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.393944][ T5695] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 224.393966][ T5695] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.395638][ T5695] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 224.395659][ T5695] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.409217][ T5695] usb 3-1: config 0 has an invalid descriptor of length 118, skipping remainder of the config [ 224.409242][ T5695] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 224.409277][ T5695] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 224.409298][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.437979][ T5695] usb 3-1: config 0 descriptor?? [ 224.501316][ T7992] loop3: detected capacity change from 0 to 7 [ 224.509468][ T7992] Dev loop3: unable to read RDB block 7 [ 224.509508][ T7992] loop3: unable to read partition table [ 224.509706][ T7992] loop3: partition table beyond EOD, truncated [ 224.509724][ T7992] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 224.513144][ T7991] Flush: task=syz.3.741[7991] dev=loop3 state=2 [ 224.628901][ T7991] Teardown: task=syz.3.741[7991] dev=loop3 state=2 [ 224.918197][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.923435][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.013030][ T8002] netlink: 'syz.1.743': attribute type 4 has an invalid length. [ 225.514425][ T5668] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 225.666352][ T5668] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 225.666379][ T5668] usb 2-1: config 0 has no interface number 0 [ 225.668781][ T5668] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 225.668808][ T5668] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.668828][ T5668] usb 2-1: Product: syz [ 225.668841][ T5668] usb 2-1: Manufacturer: syz [ 225.668854][ T5668] usb 2-1: SerialNumber: syz [ 225.680059][ T5668] usb 2-1: config 0 descriptor?? [ 225.714351][ T5695] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 225.934719][ T5668] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 225.978594][ T5695] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 225.978644][ T5695] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 225.978687][ T5695] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 225.978719][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.991034][ T5668] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 225.991441][ T5668] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 225.991498][ T5668] usb 2-1: media controller created [ 225.993442][ T5695] usb 1-1: config 0 descriptor?? [ 226.017965][ T5695] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 226.066005][ T5668] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 226.188014][ T8018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.188827][ T8018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.244159][ T8018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.257595][ T5668] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 226.276987][ T8018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.322637][ T5668] usb 2-1: USB disconnect, device number 36 [ 226.510947][ T8022] loop4: detected capacity change from 0 to 524287964 [ 226.592697][ T8024] netlink: 'syz.1.752': attribute type 29 has an invalid length. [ 226.592719][ T8024] netlink: 'syz.1.752': attribute type 3 has an invalid length. [ 226.592732][ T8024] netlink: 76 bytes leftover after parsing attributes in process `syz.1.752'. [ 226.909648][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 227.032885][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 227.045263][ T8034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.046344][ T8034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.083040][ T5772] usb 3-1: USB disconnect, device number 44 [ 227.421399][ T8042] ima: policy update failed [ 227.421673][ T38] audit: type=1802 audit(1786236048.404:2): pid=8042 uid=0 auid=4294967295 ses=4294967295 op=policy_update cause=failed comm="syz.1.758" res=0 errno=0 [ 227.951313][ T4905] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 227.951340][ T4905] CPU: 1 UID: 0 PID: 4905 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 227.951368][ T4905] Tainted: [L]=SOFTLOCKUP [ 227.951375][ T4905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 227.951386][ T4905] Workqueue: hci1 hci_rx_work [ 227.951421][ T4905] Call Trace: [ 227.951429][ T4905] [ 227.951438][ T4905] dump_stack_lvl+0xe8/0x150 [ 227.951466][ T4905] sysfs_create_dir_ns+0x271/0x2a0 [ 227.951489][ T4905] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 227.951514][ T4905] ? rt_spin_unlock+0x163/0x200 [ 227.951544][ T4905] kobject_add_internal+0x62c/0xce0 [ 227.951580][ T4905] kobject_add+0x163/0x240 [ 227.951603][ T4905] ? rt_spin_unlock+0x157/0x200 [ 227.951634][ T4905] ? __pfx_kobject_add+0x10/0x10 [ 227.951661][ T4905] ? get_device_parent+0x370/0x3a0 [ 227.951687][ T4905] device_add+0x3fa/0xb80 [ 227.951710][ T4905] hci_conn_add_sysfs+0xd5/0x210 [ 227.951743][ T4905] le_conn_complete_evt+0xfef/0x1580 [ 227.951776][ T4905] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 227.951800][ T4905] ? lockdep_hardirqs_on+0x7a/0x110 [ 227.951822][ T4905] ? rt_mutex_slowunlock+0x219/0x460 [ 227.951849][ T4905] ? skb_pull_data+0xf0/0x200 [ 227.951873][ T4905] hci_le_enh_conn_complete_evt+0x189/0x490 [ 227.951899][ T4905] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 227.951929][ T4905] hci_event_packet+0x67a/0xf10 [ 227.951960][ T4905] ? reacquire_held_locks+0x117/0x1a0 [ 227.951986][ T4905] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 227.952004][ T4905] ? __pfx_hci_event_packet+0x10/0x10 [ 227.952032][ T4905] ? rt_spin_unlock+0x157/0x200 [ 227.952067][ T4905] ? hci_send_to_monitor+0xe2/0x590 [ 227.952094][ T4905] hci_rx_work+0x3ee/0x1020 [ 227.952132][ T4905] ? process_one_work+0x7fd/0x1480 [ 227.952153][ T4905] process_one_work+0xaaf/0x1480 [ 227.952193][ T4905] ? __pfx_process_one_work+0x10/0x10 [ 227.952211][ T4905] ? do_raw_spin_lock+0x12b/0x2f0 [ 227.952255][ T4905] ? assign_work+0x3cf/0x5d0 [ 227.952281][ T4905] worker_thread+0xb05/0x10d0 [ 227.952310][ T4905] ? __kthread_parkme+0x71/0x1f0 [ 227.952339][ T4905] kthread+0x388/0x470 [ 227.952363][ T4905] ? __pfx_worker_thread+0x10/0x10 [ 227.952381][ T4905] ? __pfx_kthread+0x10/0x10 [ 227.952408][ T4905] ret_from_fork+0x514/0xb70 [ 227.952439][ T4905] ? __pfx_ret_from_fork+0x10/0x10 [ 227.952465][ T4905] ? __switch_to+0xc89/0x1420 [ 227.952492][ T4905] ? __pfx_kthread+0x10/0x10 [ 227.952519][ T4905] ret_from_fork_asm+0x1a/0x30 [ 227.952562][ T4905] [ 227.952694][ T4905] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 227.952734][ T4905] Bluetooth: hci1: failed to register connection device [ 228.118733][ T8057] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.123238][ T8059] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 228.499943][ T5668] usb 1-1: USB disconnect, device number 36 [ 228.707058][ T8066] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 228.823124][ T8074] loop4: detected capacity change from 0 to 524287964 [ 228.925524][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.771'. [ 228.980838][ T8080] ieee802154 phy0 wpan0: encryption failed: -90 [ 229.272434][ T8084] warning: `syz.1.773' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 229.370130][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 229.438768][ T8073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.464669][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 229.580367][ T60] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 229.852570][ T8100] loop3: detected capacity change from 0 to 7 [ 229.853541][ T8100] Dev loop3: unable to read RDB block 7 [ 229.853580][ T8100] loop3: unable to read partition table [ 229.853770][ T8100] loop3: partition table beyond EOD, truncated [ 229.853786][ T8100] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 229.864403][ T5668] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 229.912382][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 229.994514][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 230.026649][ T5668] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.026699][ T5668] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 230.026740][ T5668] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 230.026763][ T5668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.089025][ T5668] usb 3-1: config 0 descriptor?? [ 230.117818][ T5668] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 230.222081][ T8111] netlink: 'syz.1.781': attribute type 4 has an invalid length. [ 231.238963][ T8133] loop4: detected capacity change from 0 to 524287964 [ 231.239879][ T8132] Flush: task=syz.1.788[8132] dev=loop4 state=2 [ 231.325004][ T8132] Teardown: task=syz.1.788[8132] dev=loop4 state=2 [ 231.674427][ T5668] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 231.834385][ T5668] usb 2-1: Using ep0 maxpacket: 8 [ 231.838002][ T5668] usb 2-1: config 6 has an invalid interface number: 213 but max is 1 [ 231.838030][ T5668] usb 2-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 231.838049][ T5668] usb 2-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 231.838069][ T5668] usb 2-1: config 6 has no interface number 0 [ 231.838110][ T5668] usb 2-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 231.838132][ T5668] usb 2-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 231.838157][ T5668] usb 2-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 231.838181][ T5668] usb 2-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 231.839948][ T5668] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 231.839973][ T5668] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 231.839992][ T5668] usb 2-1: Manufacturer: syz [ 231.840006][ T5668] usb 2-1: SerialNumber: syz [ 232.140486][ T5668] em28xx 2-1:6.213: New device syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 232.140520][ T5668] em28xx 2-1:6.213: Audio interface 213 found (Vendor Class) [ 232.204942][ T5668] em28xx 2-1:6.213: unknown em28xx chip ID (0) [ 232.205913][ T5668] em28xx 2-1:6.213: Config register raw data: 0xfffffffb [ 232.206319][ T5668] em28xx 2-1:6.213: AC97 chip type couldn't be determined [ 232.206335][ T5668] em28xx 2-1:6.213: No AC97 audio processor [ 232.249005][ T5668] usb 2-1: USB disconnect, device number 37 [ 232.253224][ T5668] em28xx 2-1:6.213: Disconnecting em28xx [ 232.325103][ T5668] em28xx: Freeing device [ 232.654200][ T5668] usb 3-1: USB disconnect, device number 45 [ 232.879856][ T8144] 9p: Bad value for 'rfdno' [ 233.474423][ T8161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.477116][ T8161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.714405][ T5695] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 233.913529][ T5695] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.913583][ T5695] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.913606][ T5695] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 233.913628][ T5695] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.917141][ T5695] usb 1-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 233.917168][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.917194][ T5695] usb 1-1: Product: syz [ 233.917208][ T5695] usb 1-1: Manufacturer: syz [ 233.917221][ T5695] usb 1-1: SerialNumber: syz [ 234.103503][ T5695] usbserial_generic 1-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 234.103527][ T5695] usbserial_generic 1-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 234.103567][ T5695] usbserial_generic 1-1:1.0: generic converter detected [ 234.222333][ T5695] usb 1-1: generic converter now attached to ttyUSB0 [ 234.272106][ T8159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.272578][ T8159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.352936][ T5695] usb 1-1: USB disconnect, device number 37 [ 234.496899][ T5695] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 234.497665][ T5695] usbserial_generic 1-1:1.0: device disconnected [ 234.560808][ T8178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.562196][ T8178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.689834][ T8182] loop4: detected capacity change from 0 to 524287964 [ 234.745925][ T5668] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 234.837246][ T8185] netlink: 8 bytes leftover after parsing attributes in process `syz.3.809'. [ 234.897146][ T5668] usb 3-1: unable to get BOS descriptor or descriptor too short [ 234.898480][ T5668] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 234.898531][ T5668] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32 [ 234.901392][ T5668] usb 3-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 234.901419][ T5668] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.901438][ T5668] usb 3-1: Product: syz [ 234.901451][ T5668] usb 3-1: Manufacturer: syz [ 234.901465][ T5668] usb 3-1: SerialNumber: syz [ 234.969176][ T8177] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 235.202509][ T5668] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.311130][ T5668] usb 3-1: USB disconnect, device number 46 [ 235.525201][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 235.640043][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.664396][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 236.057089][ T60] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 236.125049][ T5668] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 236.276877][ T8201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.277438][ T8201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.287249][ T5668] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 236.287299][ T5668] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 236.287339][ T5668] usb 3-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 236.287361][ T5668] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.383182][ T5668] usb 3-1: config 0 descriptor?? [ 236.420589][ T5668] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 236.455026][ T8204] loop3: detected capacity change from 0 to 7 [ 236.462084][ T8204] Dev loop3: unable to read RDB block 7 [ 236.462126][ T8204] loop3: unable to read partition table [ 236.465804][ T8204] loop3: partition table beyond EOD, truncated [ 236.469051][ T8204] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.511546][ T6009] Flush: task=udevd[6009] dev=loop3 state=2 [ 236.520506][ T5695] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 236.585607][ T6009] Teardown: task=udevd[6009] dev=loop3 state=2 [ 236.664350][ T5695] usb 1-1: Using ep0 maxpacket: 16 [ 236.666874][ T5695] usb 1-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 236.666926][ T5695] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 236.666953][ T5695] usb 1-1: config 0 interface 0 has no altsetting 0 [ 236.666985][ T5695] usb 1-1: New USB device found, idVendor=046d, idProduct=c227, bcdDevice= 0.00 [ 236.667007][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.727942][ T5695] usb 1-1: config 0 descriptor?? [ 236.781884][ T8206] netlink: 'syz.1.817': attribute type 4 has an invalid length. [ 236.952158][ T5695] usbhid 1-1:0.0: can't add hid device: -71 [ 236.952275][ T5695] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 236.976652][ T5695] usb 1-1: USB disconnect, device number 38 [ 237.849839][ T8235] loop4: detected capacity change from 0 to 524287964 [ 238.015118][ T5695] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 238.024036][ T8239] atomic_op ffff888038e58218 conn xmit_atomic 0000000000000000 [ 238.212491][ T5695] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 238.212518][ T5695] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 238.212533][ T5695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.212551][ T5695] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 238.212570][ T5695] usb 2-1: config 1 has no interface number 1 [ 238.212613][ T5695] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 238.217908][ T5695] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.217936][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.217955][ T5695] usb 2-1: Product: syz [ 238.217968][ T5695] usb 2-1: Manufacturer: syz [ 238.217981][ T5695] usb 2-1: SerialNumber: syz [ 238.306948][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 238.360282][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.830'. [ 238.435212][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 238.780496][ T5695] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 238.780547][ T5695] usb 2-1: MIDIStreaming interface descriptor not found [ 238.895900][ T5695] usb 2-1: USB disconnect, device number 38 [ 239.045142][ T199] usb 3-1: USB disconnect, device number 47 [ 239.248517][ T6007] udevd[6007]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 240.595255][ T8295] netlink: 8 bytes leftover after parsing attributes in process `syz.1.843'. [ 240.599023][ T8295] openvswitch: netlink: Tunnel attr 3 has unexpected len 0 expected 1 [ 240.657696][ T8296] loop4: detected capacity change from 0 to 524287964 [ 240.664460][ T5695] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 240.824078][ T5695] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.824130][ T5695] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.824170][ T5695] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 240.824189][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.876277][ T5695] usb 1-1: config 0 descriptor?? [ 240.904092][ T5695] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 241.056648][ T8305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.847'. [ 241.105134][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 241.215290][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 241.361413][ T8313] loop3: detected capacity change from 0 to 7 [ 241.372145][ T8313] Dev loop3: unable to read RDB block 7 [ 241.372188][ T8313] loop3: unable to read partition table [ 241.372398][ T8313] loop3: partition table beyond EOD, truncated [ 241.372423][ T8313] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 241.425070][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 241.505088][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 241.804604][ T199] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 241.850897][ T8321] netlink: 'syz.3.854': attribute type 4 has an invalid length. [ 241.967519][ T199] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.967571][ T199] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 241.967649][ T199] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.003679][ T199] usb 3-1: config 0 descriptor?? [ 242.029091][ T8324] sg_write: data in/out 414172/80 bytes for SCSI command 0x0-- guessing data in; [ 242.029091][ T8324] program syz.3.855 not setting count and/or reply_len properly [ 242.031212][ T199] keyspan 3-1:0.0: Keyspan 2 port adapter converter detected [ 242.032246][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 87 [ 242.032549][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 7 [ 242.051125][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 81 [ 242.051425][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 82 [ 242.051504][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 1 [ 242.052048][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 2 [ 242.052148][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 85 [ 242.052891][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 5 [ 242.091332][ T199] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 242.123981][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 83 [ 242.125251][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 84 [ 242.126364][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 3 [ 242.127445][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 4 [ 242.127939][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 86 [ 242.137727][ T199] keyspan 3-1:0.0: found no endpoint descriptor for endpoint 6 [ 242.155904][ T8308] ima: policy update failed [ 242.170470][ T38] audit: type=1802 audit(1786236063.144:3): pid=8308 uid=0 auid=4294967295 ses=4294967295 op=policy_update cause=failed comm="syz.1.849" res=0 errno=0 [ 242.235454][ T199] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 242.319887][ T199] usb 3-1: USB disconnect, device number 48 [ 242.437316][ T199] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 242.529448][ T199] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 242.594079][ T199] keyspan 3-1:0.0: device disconnected [ 242.685172][ T8332] sctp: [Deprecated]: syz.3.858 (pid 8332) Use of int in max_burst socket option. [ 242.685172][ T8332] Use struct sctp_assoc_value instead [ 242.740743][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.743145][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 243.030017][ T8342] loop4: detected capacity change from 0 to 524287964 [ 243.420867][ T6009] Flush: task=udevd[6009] dev=loop4 state=2 [ 243.441793][ T5772] usb 1-1: USB disconnect, device number 39 [ 243.496530][ T6009] Teardown: task=udevd[6009] dev=loop4 state=2 [ 243.825805][ T38] audit: type=1326 audit(1786236064.774:4): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8363 comm="syz.0.870" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7840fce0d9 code=0x7ffc0000 [ 243.826731][ T38] audit: type=1326 audit(1786236064.814:5): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8363 comm="syz.0.870" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7840fce0d9 code=0x7ffc0000 [ 243.864450][ T5695] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 243.902418][ T38] audit: type=1326 audit(1786236064.884:6): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8363 comm="syz.0.870" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7840fce0d9 code=0x7ffc0000 [ 244.006123][ T38] audit: type=1326 audit(1786236064.994:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8363 comm="syz.0.870" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7840fce0d9 code=0x7ffc0000 [ 244.006176][ T38] audit: type=1326 audit(1786236064.994:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=8363 comm="syz.0.870" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7840fce0d9 code=0x7ffc0000 [ 244.046875][ T5695] usb 3-1: config 1 has an invalid descriptor of length 151, skipping remainder of the config [ 244.046900][ T5695] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.048311][ T5695] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 244.048337][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 244.048355][ T5695] usb 3-1: SerialNumber: syz [ 244.151311][ T5772] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 244.285183][ T5772] usb 1-1: device descriptor read/64, error -71 [ 244.577391][ T5772] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 244.708012][ T5772] usb 1-1: device descriptor read/64, error -71 [ 244.815078][ T5772] usb usb1-port1: attempt power cycle [ 244.949019][ T8385] gfs2: not a GFS2 filesystem [ 245.174467][ T5772] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 245.231140][ T5772] usb 1-1: device descriptor read/8, error -71 [ 245.314658][ T199] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 245.464770][ T5772] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 245.485457][ T5772] usb 1-1: device descriptor read/8, error -71 [ 245.493855][ T199] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 245.494050][ T199] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 245.494140][ T199] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 245.494163][ T199] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.521490][ T199] usb 2-1: config 0 descriptor?? [ 245.615833][ T199] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 245.643012][ T5772] usb usb1-port1: unable to enumerate USB device [ 245.956852][ T8398] loop4: detected capacity change from 0 to 524287964 [ 246.181793][ T8401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.882'. [ 246.336412][ T6009] Flush: task=udevd[6009] dev=loop4 state=2 [ 246.380977][ T8403] overlayfs: overlapping lowerdir path [ 246.425492][ T6009] Teardown: task=udevd[6009] dev=loop4 state=2 [ 246.453096][ T5695] usb 3-1: 0:2 : does not exist [ 246.453180][ T5695] usb 3-1: unit 5 not found! [ 246.496354][ T8404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.518663][ T8404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.610370][ T5695] usb 3-1: USB disconnect, device number 49 [ 246.682061][ T5745] udevd[5745]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 247.006449][ T8416] loop3: detected capacity change from 0 to 7 [ 247.027941][ T8416] Dev loop3: unable to read RDB block 7 [ 247.027988][ T8416] loop3: unable to read partition table [ 247.028215][ T8416] loop3: partition table beyond EOD, truncated [ 247.029738][ T8416] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 247.064299][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 247.158634][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 247.228803][ T5772] kernel write not supported for file task/685/attr/prev (pid: 5772 comm: kworker/0:5) [ 247.331664][ T60] Bluetooth: Wrong link type (-71) [ 247.547199][ T8425] netlink: 'syz.3.890': attribute type 4 has an invalid length. [ 248.019535][ T8438] netlink: 'syz.3.895': attribute type 21 has an invalid length. [ 248.019614][ T8438] netlink: 388 bytes leftover after parsing attributes in process `syz.3.895'. [ 248.158462][ T8440] loop4: detected capacity change from 0 to 524287964 [ 248.168829][ T5695] usb 2-1: USB disconnect, device number 39 [ 248.766552][ T8453] netlink: 'syz.2.901': attribute type 58 has an invalid length. [ 248.768840][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 248.878745][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 249.534421][ T5772] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 249.696847][ T5772] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.696945][ T5772] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 249.696969][ T5772] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.778077][ T5772] usb 2-1: config 0 descriptor?? [ 249.795567][ T5772] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 250.742412][ T8496] loop4: detected capacity change from 0 to 524287964 [ 250.930985][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.918'. [ 251.153484][ T6009] Flush: task=udevd[6009] dev=loop4 state=2 [ 251.225221][ T6009] Teardown: task=udevd[6009] dev=loop4 state=2 [ 251.291853][ T8511] loop3: detected capacity change from 0 to 7 [ 251.301541][ T8511] Dev loop3: unable to read RDB block 7 [ 251.301642][ T8511] loop3: unable to read partition table [ 251.301949][ T8511] loop3: partition table beyond EOD, truncated [ 251.301966][ T8511] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.303061][ T8510] Flush: task=syz.3.922[8510] dev=loop3 state=2 [ 251.414991][ T8510] Teardown: task=syz.3.922[8510] dev=loop3 state=2 [ 251.754392][ T5696] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 251.916651][ T5696] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 251.916678][ T5696] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.918891][ T5696] usb 1-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 251.918918][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.918931][ T5696] usb 1-1: Product: syz [ 251.918980][ T5696] usb 1-1: Manufacturer: syz [ 251.918988][ T5696] usb 1-1: SerialNumber: syz [ 251.975086][ T5696] usb 1-1: config 0 descriptor?? [ 251.995223][ T8522] netlink: 'syz.2.927': attribute type 4 has an invalid length. [ 251.999014][ T5696] ims_pcu 1-1:0.0: Missing CDC union descriptor [ 251.999049][ T5696] ims_pcu 1-1:0.0: probe with driver ims_pcu failed with error -22 [ 252.271368][ T8530] loop4: detected capacity change from 0 to 524287964 [ 252.276184][ T8515] MTRR 1 not used [ 252.381379][ T5696] usb 2-1: USB disconnect, device number 40 [ 252.645095][ T5745] Flush: task=udevd[5745] dev=loop4 state=2 [ 252.734476][ T5745] Teardown: task=udevd[5745] dev=loop4 state=2 [ 252.850657][ T8544] IPVS: set_ctl: invalid protocol: 137 10.1.1.2:20008 [ 253.814416][ T5695] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 253.889258][ T8572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.893399][ T8572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.966737][ T5695] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 253.966783][ T5695] usb 2-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 253.966806][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.974180][ T5695] usb 2-1: config 0 descriptor?? [ 253.987902][ T5695] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 254.696248][ T37] usb 1-1: USB disconnect, device number 44 [ 254.864464][ T5695] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 255.042627][ T8591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 255.043265][ T8591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.044371][ T5695] usb 3-1: Using ep0 maxpacket: 16 [ 255.047034][ T5695] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 255.047057][ T5695] usb 3-1: config 0 has no interface number 0 [ 255.047133][ T5695] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9 [ 255.047158][ T5695] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024 [ 255.055134][ T5695] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 255.055159][ T5695] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 255.055178][ T5695] usb 3-1: Product: syz [ 255.055191][ T5695] usb 3-1: SerialNumber: syz [ 255.060336][ T5695] usb 3-1: config 0 descriptor?? [ 255.066288][ T5695] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 255.069935][ T5695] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input16 [ 255.236373][ T8593] loop4: detected capacity change from 0 to 524287964 [ 255.237529][ T8592] Flush: task=syz.0.952[8592] dev=loop4 state=2 [ 255.304622][ T8592] Teardown: task=syz.0.952[8592] dev=loop4 state=2 [ 255.671755][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.672293][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.760689][ T8597] netlink: 8 bytes leftover after parsing attributes in process `syz.0.953'. [ 256.345937][ T8609] IPv6: A: Disabled Multicast RS [ 256.493978][ T8612] loop3: detected capacity change from 0 to 7 [ 256.518993][ T8612] Dev loop3: unable to read RDB block 7 [ 256.519141][ T8612] loop3: unable to read partition table [ 256.519597][ T8612] loop3: partition table beyond EOD, truncated [ 256.519629][ T8612] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 256.681379][ T5695] usb 2-1: USB disconnect, device number 41 [ 256.709300][ T5745] Flush: task=udevd[5745] dev=loop3 state=2 [ 256.865637][ T5745] Teardown: task=udevd[5745] dev=loop3 state=2 [ 257.100281][ T8618] netlink: 'syz.1.962': attribute type 4 has an invalid length. [ 257.291798][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 257.542052][ T8631] loop4: detected capacity change from 0 to 524287964 [ 257.555474][ T8630] Flush: task=syz.3.965[8630] dev=loop4 state=2 [ 257.689647][ T8630] Teardown: task=syz.3.965[8630] dev=loop4 state=2 [ 257.889617][ T5696] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 258.051849][ T5696] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.051880][ T5696] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.051960][ T5696] usb 1-1: Product: syz [ 258.051974][ T5696] usb 1-1: Manufacturer: syz [ 258.051987][ T5696] usb 1-1: SerialNumber: syz [ 258.460846][ T8649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.463081][ T8649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.949122][ T8655] netlink: 'syz.2.973': attribute type 30 has an invalid length. [ 258.949135][ T8655] netlink: 56 bytes leftover after parsing attributes in process `syz.2.973'. [ 258.985265][ T8654] netlink: 'syz.2.973': attribute type 3 has an invalid length. [ 259.116755][ T5696] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 259.117009][ T5696] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 259.117029][ T5696] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 259.320632][ T8635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.323079][ T8635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.575980][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.585429][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.773446][ T5696] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 259.812569][ T5696] usb 1-1: USB disconnect, device number 45 [ 259.822922][ T5696] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 260.580553][ T8686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.593961][ T8686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.741688][ T8700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.742974][ T8700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.868331][ T8704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.870330][ T8704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.941564][ T8708] loop4: detected capacity change from 0 to 524287964 [ 261.959600][ T8706] Flush: task=syz.0.988[8706] dev=loop4 state=2 [ 262.066221][ T8706] Teardown: task=syz.0.988[8706] dev=loop4 state=2 [ 262.363030][ T8711] netlink: 168 bytes leftover after parsing attributes in process `syz.0.989'. [ 262.600483][ T8713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.990'. [ 262.945593][ T37] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 263.004120][ T8724] loop3: detected capacity change from 0 to 7 [ 263.015900][ T8724] Dev loop3: unable to read RDB block 7 [ 263.016003][ T8724] loop3: unable to read partition table [ 263.016315][ T8724] loop3: partition table beyond EOD, truncated [ 263.016345][ T8724] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 263.078426][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 263.078478][ C1] ------------[ cut here ]------------ [ 263.078486][ C1] URB ffff8880362a9d00 submitted while active [ 263.078509][ C1] WARNING: drivers/usb/core/urb.c:379 at usb_submit_urb+0x79/0x18b0, CPU#1: ktimers/1/30 [ 263.078547][ C1] Modules linked in: [ 263.078574][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 263.078605][ C1] Tainted: [L]=SOFTLOCKUP [ 263.078613][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.078627][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 263.078656][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f9 92 4d fb 49 83 3e 00 74 40 e8 0e 3c e1 fa 48 8d 3d 87 f1 f8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 f3 3b e1 fa eb 05 e8 ec 3b [ 263.078677][ C1] RSP: 0018:ffffc90000a4f7b8 EFLAGS: 00010287 [ 263.078697][ C1] RAX: ffffffff86e467a2 RBX: ffff8880362a9d00 RCX: 0000000000040000 [ 263.078714][ C1] RDX: ffffc900032f7000 RSI: ffff8880362a9d00 RDI: ffffffff8fdd5930 [ 263.078733][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 263.078749][ C1] R10: 0000000000000000 R11: ffffffff8e3c3880 R12: ffff888026964aa2 [ 263.078765][ C1] R13: ffff888070115bc4 R14: ffff8880362a9d08 R15: 0000000000000820 [ 263.078781][ C1] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 263.078800][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.078815][ C1] CR2: 00007f9dc9f88000 CR3: 0000000040194000 CR4: 00000000003526f0 [ 263.078834][ C1] Call Trace: [ 263.078842][ C1] [ 263.078851][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.078877][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 263.078901][ C1] ? ___ratelimit+0x584/0x8e0 [ 263.078944][ C1] cm109_urb_irq_callback+0x6f1/0xc90 [ 263.078979][ C1] ? kcov_remote_start+0x545/0x710 [ 263.079017][ C1] __usb_hcd_giveback_urb+0x3b8/0x5f0 [ 263.079057][ C1] dummy_timer+0xab9/0x4b30 [ 263.079103][ C1] ? __lock_acquire+0x6df/0x2e40 [ 263.079162][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 263.079208][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 263.079247][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 263.079272][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 263.079309][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 263.079365][ C1] hrtimer_run_softirq+0x18f/0x260 [ 263.079406][ C1] handle_softirqs+0x1d9/0x6c0 [ 263.079443][ C1] run_ktimerd+0x69/0x100 [ 263.079471][ C1] smpboot_thread_fn+0x57c/0xa80 [ 263.079503][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 263.079540][ C1] kthread+0x388/0x470 [ 263.079574][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 263.079602][ C1] ? __pfx_kthread+0x10/0x10 [ 263.079635][ C1] ret_from_fork+0x514/0xb70 [ 263.079669][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 263.079718][ C1] ? __switch_to+0xc89/0x1420 [ 263.079749][ C1] ? __pfx_kthread+0x10/0x10 [ 263.079784][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.079836][ C1] [ 263.079848][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 263.079867][ C1] CPU: 1 UID: 0 PID: 30 Comm: ktimers/1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 263.079900][ C1] Tainted: [L]=SOFTLOCKUP [ 263.079909][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 263.079923][ C1] Call Trace: [ 263.079932][ C1] [ 263.079941][ C1] vpanic+0x56c/0xa60 [ 263.079974][ C1] ? __pfx__printk+0x10/0x10 [ 263.080004][ C1] ? __pfx_vpanic+0x10/0x10 [ 263.080025][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 263.080054][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 263.080091][ C1] panic+0xc5/0xd0 [ 263.080113][ C1] ? __pfx_panic+0x10/0x10 [ 263.080146][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 263.080186][ C1] __warn+0x315/0x4c0 [ 263.080208][ C1] ? usb_submit_urb+0x79/0x18b0 [ 263.080236][ C1] ? usb_submit_urb+0x79/0x18b0 [ 263.080260][ C1] __report_bug+0x276/0x570 [ 263.080289][ C1] ? usb_submit_urb+0x79/0x18b0 [ 263.080317][ C1] ? __pfx___report_bug+0x10/0x10 [ 263.080353][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 263.080394][ C1] report_bug_entry+0x19a/0x290 [ 263.080420][ C1] ? usb_submit_urb+0x7c/0x18b0 [ 263.080441][ C1] ? usb_submit_urb+0x81/0x18b0 [ 263.080463][ C1] handle_bug+0xce/0x200 [ 263.080493][ C1] exc_invalid_op+0x1a/0x50 [ 263.080520][ C1] asm_exc_invalid_op+0x1a/0x20 [ 263.080544][ C1] RIP: 0010:usb_submit_urb+0x7c/0x18b0 [ 263.080569][ C1] Code: 4c 89 f0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 f7 e8 f9 92 4d fb 49 83 3e 00 74 40 e8 0e 3c e1 fa 48 8d 3d 87 f1 f8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 f3 3b e1 fa eb 05 e8 ec 3b [ 263.080590][ C1] RSP: 0018:ffffc90000a4f7b8 EFLAGS: 00010287 [ 263.080610][ C1] RAX: ffffffff86e467a2 RBX: ffff8880362a9d00 RCX: 0000000000040000 [ 263.080630][ C1] RDX: ffffc900032f7000 RSI: ffff8880362a9d00 RDI: ffffffff8fdd5930 [ 263.080649][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000100 [ 263.080666][ C1] R10: 0000000000000000 R11: ffffffff8e3c3880 R12: ffff888026964aa2 [ 263.080683][ C1] R13: ffff888070115bc4 R14: ffff8880362a9d08 R15: 0000000000000820 [ 263.080710][ C1] ? usb_submit_urb+0x72/0x18b0 [ 263.080743][ C1] ? usb_submit_urb+0x72/0x18b0 [ 263.080765][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 263.080789][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 263.080813][ C1] ? ___ratelimit+0x584/0x8e0 [ 263.080857][ C1] cm109_urb_irq_callback+0x6f1/0xc90 [ 263.080884][ C1] ? kcov_remote_start+0x545/0x710 [ 263.080925][ C1] __usb_hcd_giveback_urb+0x3b8/0x5f0 [ 263.080972][ C1] dummy_timer+0xab9/0x4b30 [ 263.081018][ C1] ? __lock_acquire+0x6df/0x2e40 [ 263.081078][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 263.081124][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 263.081163][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 263.081190][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 263.081227][ C1] __hrtimer_run_queues+0x3eb/0xaf0 [ 263.081283][ C1] hrtimer_run_softirq+0x18f/0x260 [ 263.081323][ C1] handle_softirqs+0x1d9/0x6c0 [ 263.081361][ C1] run_ktimerd+0x69/0x100 [ 263.081391][ C1] smpboot_thread_fn+0x57c/0xa80 [ 263.081423][ C1] ? smpboot_thread_fn+0x4e/0xa80 [ 263.081460][ C1] kthread+0x388/0x470 [ 263.081493][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 263.081521][ C1] ? __pfx_kthread+0x10/0x10 [ 263.081555][ C1] ret_from_fork+0x514/0xb70 [ 263.081593][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 263.081627][ C1] ? __switch_to+0xc89/0x1420 [ 263.081659][ C1] ? __pfx_kthread+0x10/0x10 [ 263.081693][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.081747][ C1] [ 263.082017][ C1] Kernel Offset: disabled