last executing test programs: 3m5.520692847s ago: executing program 2 (id=1281): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x36, 0x57, 0x1a, 0x20, 0xccd, 0x80, 0x67fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x76, 0xe3}}]}}]}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r4, 0xd8}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4}, 0x8) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="0000085aff78bf891c7d295ccb587cd18e000000ebaa3b8000000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000a00)={{0x12, 0x1, 0x0, 0x36, 0x57, 0x1a, 0x20, 0xccd, 0x80, 0x67fe, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xcd, 0x76, 0xe3}}]}}]}}, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r4, 0xd8}, 0x8) (async) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={r4}, 0x8) (async) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="0000085aff78bf891c7d295ccb587cd18e000000ebaa3b8000000000"], 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 3m4.562552892s ago: executing program 2 (id=1284): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (fail_nth: 2) 3m4.452669822s ago: executing program 2 (id=1285): ioctl$FS_IOC_GETFSSYSFSPATH(0xffffffffffffffff, 0x80811501, &(0x7f0000000000)={0x80}) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[], 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000f00)='/sys/power/pm_trace', 0x40000, 0x130) read(r0, &(0x7f0000002000)=""/245, 0xf5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_GET_TSC_KHZ_cpu(r3, 0xaea3) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000300)='wg2\x00', 0x4) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) getsockopt$inet6_tcp_int(r4, 0x6, 0x2, 0x0, &(0x7f0000000480)) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000740)={0x0, 0x6, 0x0, &(0x7f00000000c0)=[{}, {}, {}, {}, {0x80000000}, {}], 0x9, 0x0, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, &(0x7f0000000680), 0x2, 0x0, &(0x7f00000006c0)=[{}, {}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r0, 0xc1007c01, &(0x7f00000007c0)={r5}) ioctl$DRM_IOCTL_ADD_MAP(r0, 0xc0286415, &(0x7f00000008c0)={&(0x7f0000fff000/0x1000)=nil, 0x7, 0x0, 0x14}) 3m1.46086534s ago: executing program 2 (id=1300): openat$kvm(0xffffffffffffff9c, 0x0, 0x12442, 0x0) (async, rerun: 64) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'veth1_to_bridge\x00', 0x0}) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@loopback, 0x0, r1}) (async) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006491e0089", 0xd, 0x0, 0x0, 0x0) (async, rerun: 32) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") (rerun: 32) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$getregset(0x4205, r4, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70}) (async) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x111090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) (async, rerun: 64) openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0/file0\x00', 0x141000, 0x5e) (async, rerun: 64) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2925099, 0x0) umount2(&(0x7f0000000340)='./file0/file0\x00', 0x8) (async) prctl$PR_MCE_KILL(0x21, 0x0, 0x1) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={@mcast2, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0022}) (async) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000240)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote, @dev={0xfe, 0x80, '\x00', 0x42}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1}) (async, rerun: 64) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x8840}, 0x24040815) (async, rerun: 32) ioctl$sock_inet6_SIOCADDRT(r7, 0x890b, &(0x7f0000000540)={@private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, r6}) (async, rerun: 32) socket$inet6_mptcp(0xa, 0x1, 0x106) 3m1.252708361s ago: executing program 2 (id=1301): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000000)={0x40, 0x15, 0xc, "008000010a01000000000080"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x20, 0x14, 0x28, "49623dd9cefe5d03cefd08e0b09f220da32925406c48cd016a86569d5565829b1476c14a98e9390d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000001c0)={0x0, 0x17, 0xc, "7e27e356bb0dc5657d886888"}, 0x0, 0x0, 0x0, 0x0}) 3m0.891204445s ago: executing program 2 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (fail_nth: 4) 3m0.614995809s ago: executing program 32 (id=1302): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) (fail_nth: 4) 6.232894483s ago: executing program 3 (id=1971): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad956", 0xa2}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) 6.148106297s ago: executing program 3 (id=1972): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r0, 0x0, 0x0, 0x800) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000100)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}]}) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mkdirat(r1, &(0x7f0000000180)='./file0/file0\x00', 0x14) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@nfs_export_on}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r2 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203060902120001000000000904"], 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0xb1, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200, 0x10) sendmsg$802154_raw(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)="e188d493ce633186f71e", 0xa}, 0x1, 0x0, 0x0, 0x20004005}, 0x8094) recvmmsg(r3, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2042, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chdir(&(0x7f00000003c0)='./bus\x00') mkdir(&(0x7f0000000400)='./file1\x00', 0x0) 5.71241202s ago: executing program 0 (id=1975): socket(0x1d, 0x2, 0x6) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x44, 0x19, 0x96, 0x10, 0x6b9, 0x4061, 0x188, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7f, 0xbe, 0xfb}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000200)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3409}}}, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003f7a7e40720c12009622010203010902120001000000000904"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@expire={0x104, 0x18, 0x1, 0x70bd29, 0x25df5bfe, {{{@in=@rand_addr=0x64010101, @in6=@loopback, 0x4e23, 0x8d67, 0x4e20, 0x4, 0x2, 0x80, 0xa0, 0x87, 0x0, 0xee00}, {@in=@empty, 0x4d6, 0x32}, @in=@loopback, {0xafa9, 0xb13, 0x3, 0x0, 0x5, 0x0, 0xb, 0x8}, {0x120000, 0xffffffffffffffff, 0x6c, 0x4}, {0x5, 0xe, 0x7fffffff}, 0x70bd29, 0x3500, 0x2, 0x1, 0x1, 0x30}, 0x3}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffb}}]}, 0x104}, 0x1, 0x0, 0x0, 0x24000014}, 0x0) socket(0x1d, 0x2, 0x6) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x27) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000040)={0x10003, 0x3, 0x2000, 0x1000, &(0x7f0000fff000/0x1000)=nil}) 4.987647615s ago: executing program 4 (id=1976): r0 = socket(0x10, 0x3, 0x0) recvfrom$x25(r0, &(0x7f0000000100)=""/14, 0xe, 0x10000, &(0x7f0000000140)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x7d}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000083, 0x0, 0x1}]}) r4 = syz_open_dev$loop(&(0x7f0000000680), 0x9, 0x103480) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x5, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a01000000000b0000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f"}}) ioctl$LOOP_SET_DIRECT_IO(r4, 0x4c08, 0x6e) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001600010a000000000c0000000c00008008"], 0x20}}, 0x40816) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x40, 0x3fc, 0x0, 0x3e}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f00000020c0)={{r1}, 0x0, 0x1c, @unused=[0x765c09bc, 0x7fff, 0x5, 0x9], @subvolid}) sendmmsg$inet6(r6, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000004c0)="437f49649862e7d1b6a20f36ae359361e9d7a568cd16f02ed329704291940e9ce90b90575e72607ddde86a6df8d78be4aeda0c326e326cce9c069e8668223162f466400730b964fb517bafa46b26b63ce930509f2e0afef786e0", 0x5a}, {&(0x7f00000006c0)="330bc6fe0d99e2eef52d677bc589efb174eb9b8fe283d27d18ef588dfd4857086e024361deb6970c068af2c9273ab2fc3fc724e7d35273d6fde756eb605e16a4abaf96aac08baa1bb7ce1febeb1d807332fc6d7b138797316a2f5e83641ff66b5375a2ddb414f25804b565370120ded71742c77e5f5134e61d11ff07", 0x7c}, {&(0x7f0000001080)="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", 0xa47}, {0x0}], 0x4, &(0x7f0000002080)=[@tclass={{0x14, 0x29, 0x43, 0x1}}], 0x18}}], 0x1, 0x4048884) socket$nl_netfilter(0x10, 0x3, 0xc) 4.786769546s ago: executing program 4 (id=1977): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x400, 0x2, 0x4, 0x6}, {0x9, 0x5, 0x6, 0x2, 0x3ff, 0x81, 0xfa, 0x4}, {0x9, 0x5, 0xb, 0x3, 0x3ff, 0x1, 0x3, 0xc}}}}}}]}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)={{0x108, 0x0, 0x7, 0x21b, 0x333, 0x2, 0x3ce, 0x8}}, 0x20) read$FUSE(r1, 0x0, 0x0) 4.482807184s ago: executing program 1 (id=1981): syz_usb_connect(0x5, 0x24, &(0x7f00000014c0)=ANY=[@ANYBLOB="120101113ab8ba20b4043168a65a0102030109021200010700008a855607"], &(0x7f0000001b00)={0x0, 0x0, 0x5, &(0x7f00000019c0)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x44d}}]}) socket$unix(0x1, 0x2, 0x0) 4.260616535s ago: executing program 3 (id=1982): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x11, &(0x7f0000000040)=0x2, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000000)={0x1, 0x4, {0xffffffffffffffff}, {0xffffffffffffffff}, 0x8, 0x6}) write$cgroup_pid(r0, &(0x7f0000000080)=r2, 0x12) 4.24305119s ago: executing program 3 (id=1983): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000480)=[{0x9, 0xa200, 0x0, 0x0}, {0xfffe, 0x800, 0x0, 0x0}], 0x2}) 3.957159299s ago: executing program 0 (id=1984): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000480)=[{0x9, 0xa200, 0x0, 0x0}, {0xfffe, 0x800, 0x0, 0x0}], 0x2}) r1 = syz_open_dev$vcsn(&(0x7f0000000ac0), 0x1, 0xa002) write$UHID_INPUT(r1, &(0x7f0000002940)={0x8, {"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", 0xfffffe91}}, 0x1006) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000}, 0x4c004) 3.140235981s ago: executing program 1 (id=1985): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000280)={'wlan1\x00'}) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000380)={0x1, @pix={0x1, 0x2, 0x36315247, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0x3, 0x0, 0x1, 0x7}}) unshare(0x62040200) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000180)=0x4000000) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x8) r6 = socket$inet(0xa, 0x801, 0x84) getsockopt$IPT_SO_GET_INFO(r6, 0x0, 0x40, &(0x7f00000000c0)={'security\x00', 0x0, [0x908, 0xfffffffb, 0x4, 0x4, 0x9]}, &(0x7f0000000000)=0x54) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYRES16=r0, @ANYRES32=r2, @ANYBLOB="0c0099000000000000000000050053000100000014000400776c616e310000000000000000000000140006"], 0x60}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_change_link_key_complete={{0x9, 0x3}, {0x0, 0xc9}}}, 0x6) r7 = getuid() quotactl_fd$Q_GETINFO(r0, 0xffffffff80000501, r7, &(0x7f0000000080)) 3.063163402s ago: executing program 4 (id=1986): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x20004800) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2.560985462s ago: executing program 1 (id=1987): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) getpeername(r1, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0x4, 0x0, 0x0}) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f00000000c0)={0x2}) ioctl$IOMMU_IOAS_COPY(r0, 0x3b83, &(0x7f0000000100)={0x28, 0x4, 0x0, r2, 0xfffffffffffffffd, 0x3f, 0x4}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000040)={0xf, {"686cad21e0fd02661b37090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f360068090890e0878f0efcc5e7049b3b612c416b23240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d07720936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b4a5f3090000000000000075271b060029d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c554336909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f33491237c08822dec110911e893d0a8c4f6777478bc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5dc29a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f6435f7590000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146784078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34a1c92f76cc4c24eeb8bc4e9ac2aed9a53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9b05000bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48ca2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02da93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a35595f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e205ef4a7c43b42aae501b20f7694a035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd6700800000082ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39dd2ea9762639ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d0300000000000000b378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d678746383074c6bc1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359deea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b3c7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e150600d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b2c2fc5d5f0da42c0456ec015f08e5247d33ae2d35623ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e938ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a893664ac70297dc8d62700000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x1000}}, 0x1006) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000000500040000000000050005000a00000014000780050015000000000008001240"], 0x60}}, 0x0) 2.458167775s ago: executing program 3 (id=1988): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "010096dc"}]}}, 0x0}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x34f) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 2.353331341s ago: executing program 0 (id=1989): r0 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '#! '}, {0x20, '.'}, {0x20, '}'}, {0x20, 'cpuset.ef\x95\"\"\x1e\xb3\xd7\xe6\x9ecpus\x00'}, {0x20, ')(@*'}]}, 0x38) write$UHID_INPUT(r1, &(0x7f0000003340)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "9001001c781265406c7f306003d8a0f4bd0000000300000000002f59911800"}}) 2.353156706s ago: executing program 1 (id=1990): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f00000000c0)={'geneve1\x00', @multicast}) r1 = openat$cgroup_subtree(r0, &(0x7f0000000000), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'freezer'}, {0x2b, 'net_prio'}, {0x2b, 'net_prio'}, {0x2d, 'hugetlb'}, {0x2d, 'devices'}, {0x2d, 'freezer'}, {0x2d, 'io'}]}, 0x3c) 2.220172714s ago: executing program 1 (id=1991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000240), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) setsockopt$sock_int(r0, 0x1, 0xa, &(0x7f0000000180)=0x288fa1cf, 0x4) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)="95", 0x1}], 0x1) sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x208}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) sendto$inet6(r0, &(0x7f0000000400)="092c97eab8425bf01d61eec2b863f057a73b766c5c1effe52656010c1a1270562896f909b52c003b71eabb4037409316d5ee6a0ad3c91b2a8dcdf245b422a8e2a35be7bfde5164b1bbd1e392b0b7e8096d2c7d2c83efd40b9cbc1a9f2c0b92b9af47f1d667c21d59bc455b45908910e8477021189db777194c32e881a8765983b278a5c4eef843044e79e3d54edd8a96be9980996e37039e5a8da85091b5186395e68575bc5074a04083dc63511b7e9d5f88008608123e76c245790a65ced9183c01ccc8c073c97b6fa4124406744f298fcc76642217ec58170b453e", 0xdc, 0x811, &(0x7f0000000100)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x200, 0x40, 0x40000c, 0x8, 0x3}) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0, 0x34}, {0x0}], 0x3, 0x0, 0x0, 0x41}, 0x0) readv(r6, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x1c}], 0x4) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'syzkaller1\x00', {0x4}, 0x1}) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) setsockopt$inet_mtu(r4, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4) sendto$inet(r4, &(0x7f0000000040)="f957", 0x2, 0x0, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) 2.196712348s ago: executing program 0 (id=1992): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000340)={0x18, 0x0, &(0x7f0000000280)=[@decrefs, @request_death], 0x0, 0x0, 0x0}) 2.094678613s ago: executing program 4 (id=1993): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0xfd21, 0x5, 0x2}) fsmount(r0, 0x1, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) r1 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}}, 0x0) sendfile(r1, r1, 0x0, 0x7f03) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/ipc\x00') sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f0000002a80)={0x14, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8010) recvfrom(r3, 0x0, 0x0, 0x10000, &(0x7f0000003180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x2, 0x3}}, 0x80) 2.036919237s ago: executing program 0 (id=1994): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_usb_connect$sierra_net(0x3, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x400, 0x2, 0x4, 0x6}, {0x9, 0x5, 0x6, 0x2, 0x3ff, 0x81, 0xfa, 0x4}, {0x9, 0x5, 0xb, 0x3, 0x3ff, 0x1, 0x3, 0xc}}}}}}]}}, 0x0) write$binfmt_aout(r1, &(0x7f0000000140)={{0x108, 0x0, 0x7, 0x21b, 0x333, 0x2, 0x3ce, 0x8}}, 0x20) read$FUSE(r1, 0x0, 0x0) 1.944656s ago: executing program 4 (id=1995): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2e, &(0x7f0000000040)=0xffffffdd, 0x4) setsockopt$inet6_int(r1, 0x29, 0x1, &(0x7f0000000080)=0x3, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1.888494126s ago: executing program 4 (id=1996): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f00000009c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000340)='connect aa:aa:aa:aa:aa:11 1', 0x1b) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200029010203010902120001000080000904"], 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r2, 0xc01864ba, &(0x7f0000000100)={0x8000000000000000, 0xe, r4, 0xeeeeeeee}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$FS_IOC_RESVSP(r5, 0xc0189436, &(0x7f0000000740)={0x0, 0x3, 0x0, 0x2, 0x3}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x0, 0x0, 0x0) 348.635948ms ago: executing program 3 (id=1997): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x16}) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f0000000480)=[{0x1900, 0xa200, 0x0, 0x0}, {0xfffe, 0x800, 0x0, 0x0}], 0x2}) 374.544µs ago: executing program 0 (id=1998): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000800), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000040)={0x4c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @empty}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:apt_var_log_t:s0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000801}, 0x448c0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1d, [0x5, 0xc95a, 0xfffffff3, 0x6, 0x9, 0x2, 0x1, 0x7f, 0x6, 0x4d, 0xfffffff2, 0x5f, 0xa, 0x4, 0xffff2d33, 0x8, 0x6, 0x7, 0x0, 0x80000001, 0xca, 0x7, 0x7, 0x3c5b, 0x6, 0x24, 0xffffffff, 0xfffffffe, 0x1f461e2c, 0x2, 0xe661, 0x4, 0x3, 0x3, 0x107fef, 0x4c74, 0x9, 0x0, 0xb, 0xa, 0x0, 0x71, 0x7, 0x2000007, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x6, 0x3, 0x4, 0x4, 0x8, 0x0, 0x7f, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0xffff, 0x12f, 0x8000, 0x10, 0x8, 0x129432e6, 0xcb, 0xf9, 0xd, 0x9a2, 0x6c9, 0x9, 0xfffffffe, 0x8, 0x0, 0x7, 0x7, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0xe, 0x4, 0x0, 0x8000, 0x9, 0x400, 0x1, 0x6, 0xfffffffd, 0xff, 0x1005, 0x801, 0x8, 0x4, 0x0, 0x106, 0x2, 0x8, 0x3, 0x9, 0x8, 0x9, 0xfffffffe, 0x5, 0x0, 0x2, 0x8000, 0xffff, 0x2, 0x2000083, 0x9, 0x5, 0x10003, 0x4, 0x1, 0x7, 0xd, 0x9, 0x48c93690, 0x2, 0xff], [0x7, 0x7, 0x0, 0x652, 0xfffffdfe, 0x0, 0x8ce, 0x9, 0x387d, 0x7fff, 0x0, 0x8, 0xb, 0x4, 0x5, 0x5, 0x80000000, 0x1ef, 0x5, 0x5, 0x86, 0x3, 0x10000009, 0x3e7, 0xb, 0x1, 0x2000002, 0x2, 0xf, 0x8, 0x4, 0x6d01, 0x5, 0x3b, 0x3, 0x200, 0x80000000, 0x3, 0x4, 0x7, 0x0, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0x54fe12d5, 0xbf, 0x200, 0x3, 0x400002, 0xfffffff9, 0x0, 0x3ff, 0x5, 0x1, 0x6, 0xfffffffb, 0x4, 0x3, 0x8, 0x9, 0x8, 0x3], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce5, 0x1fd, 0x6, 0x5, 0x5, 0x40000003, 0x101, 0x10000, 0x6, 0x7fff, 0x8ffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x7, 0x60a7, 0x6, 0x5, 0xffffffff, 0x7ffffffb, 0x5, 0x8, 0xc8, 0x3, 0x4, 0x82ffff, 0x200003, 0x105, 0x7ffffffd, 0x9602, 0xa, 0x2, 0x4, 0xffffffff, 0x1, 0x10000, 0x5, 0x8, 0x2b91, 0x9, 0x8, 0x9, 0x1, 0x6c1b, 0x3, 0x4, 0x5, 0xb1c, 0x1, 0x99f5, 0xffff3441, 0xfff]}, 0x45c) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_int(r5, 0x0, 0x13, &(0x7f0000000080), 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x29, 0x6f, 0xb6, 0x8, 0x9022, 0xd484, 0xff88, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x0, 0x81, [{{0x9, 0x4, 0x1e, 0x80, 0x0, 0x56, 0xa7, 0xf6, 0x2}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x7, [{0x15, &(0x7f0000000880)=@string={0x15, 0x3, "f18a26751b1cd89d3e736eb78cdf3c9235f25a"}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x438}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x437}}, {0xa2, &(0x7f0000000940)=@string={0xa2, 0x3, "420673b7e773df066d9c26e3fb8daf2294be8edd2ff0db5eaad6842123ee758577583f5762735b8c461dbd6f33ed8e9a94fbc062bd92ed1bbb841ac424960aa68754890b435bf7aa0aab8a901edf41de537b166952deff0364ee3e66b21fc0f3bc2d872880e9d83928d93f77b532ebd0acb819aea0b17a8838870da67caaec2362bec7c729b0cc4af6a60fc94e48199fde1d01fcea8f58a91582403d7e9774dc"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x44f}}, {0xc5, &(0x7f0000000a40)=ANY=[@ANYBLOB="77031c51a1111221fc425691a82f6c24e8aa6be04e1bb089f60a8feb470cbc7eebf20d9096828a23746076e238b0d9fcb7f87b034ff3a67bed01eba8eed5ba8c632f93cc1bd28f6a2701d51693da68ab162acd62694b2a26d2ca7f3a6d67f793e2f95d53d756590847"]}, {0x43, &(0x7f0000000ac0)=@string={0x43, 0x3, "f1ceaab4a773e892b95c87594df598586f54b592b1c3a57b054ce9f947f9b1a9578ad1d991a197bfa19b63b0b4c2373d029751eeb5504b2bec77ee1952da1d7bba"}}]}) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x5543, 0x3, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x2, 0x7, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x3f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6, 0x40, 0x3}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x79, 0x81, 0x1, 0x40, 0x2}, 0xf, &(0x7f0000000140)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x2, 0xd5, 0x668d}]}, 0x9, [{0x24, &(0x7f0000000180)=@string={0x24, 0x3, "53118eb049e208af669edc36307bcc330e05a0415426b5dfae0a04c7a11a6cabab85"}}, {0xcf, &(0x7f00000001c0)=ANY=[@ANYBLOB="cf034eaea5e5548c84a4a16bc60fbd26c781e13cad698a7ac5ad483142e23856cd1454fc1153ded0e9c9f64198325e6a358e0ac5b8425892754515e8a636487fa74d95236fdde6d8a6ef9c7e3f2f4a4c466905547cb21d649b43845840a808a989d94bd3cb1b7a18eefb538bbcf8ab56efdddcd47cca4df880f1041a20c76d89bdb351e69f0e8724509d9a1ff2a54fae5d4f73a1e9c73465f118518939f2eaaf896ff5eb4579ac3e02477df79a5cf9a39966b3ee5edcdeb3a827cee0011b1188d664064573f60eeb7041e0d4920f10"]}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x425}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x100c}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x81a}}, {0x8, &(0x7f0000000380)=@string={0x8, 0x3, "2818433c87c9"}}, {0x88, &(0x7f00000003c0)=@string={0x88, 0x3, "602b710bcab1902a33fe96765a9d8d294869f40be5fd785467faf38a4a90cf3358d005c6c93a32e2f10b577ea6b9cd49ae2fcf841d2702d0fe23f2efb6b1735e7b985ce19326efc2decf56fd9d6370956d11d3d69d58010ce059066ba6e70bd25e5b5fb3fef14799f8e4bed51c7cfa7d0559092c6dad32be3c5943aba4c09bce98ac3aff5e07"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x4001}}, {0x68, &(0x7f0000000bc0)=ANY=[@ANYBLOB="68039ffdfed0fe16765d768627b3464104708be27be4e66572b8cfebfe7fbfb325b26be287745568937faffaef3af003b0d83146bb5c30e217e7b0bcda876875387ec5190b0a7b61dcee18946857cd4c9dafc0d50092c3beb3d81e7b91190e0c0000000000000001de6a236ca9aa1d0905ee14994bd8da0e0cada730090d5619f112db48cbe7c4b449b8311160f899838d6d7dbfc1734853377273895b979a3baa438e7683f451c46519845bf8e273f96ce3b60e3a4473c01b44af37aad0ff9ecc782e379291e0893a532041612c5260aed0b3ce8c8a40a012e336f71855ad08f94be22232a1f5b371af78e3e479102fa920e926d800"/256]}]}) syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2003) 0s ago: executing program 1 (id=1999): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x5902}) ioctl$TUNSETVNETHDRSZ(r0, 0x800454e0, &(0x7f0000000140)=0xffffffff) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x204243, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000180)=0x19) ioctl$TIOCVHANGUP(r1, 0x5437, 0x200000000000000) mount(0x0, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='vfat\x00', 0x800041, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xc3, 0x96, 0xc5, 0x20, 0x8ca, 0x103, 0x32dd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x6, 0x0, 0xd, [{{0x9, 0x4, 0x3d, 0x52, 0x0, 0x6c, 0x2, 0xe9, 0x9}}]}}]}}, 0x0) kernel console output (not intermixed with test programs): _new_node+0xdc/0x880 [ 429.640921][T11752] ? __pfx___kernfs_new_node+0x10/0x10 [ 429.640938][T11752] ? kernfs_root+0x1c/0x230 [ 429.640969][T11752] ? kernfs_root+0x1c/0x230 [ 429.640992][T11752] ? kernfs_root+0x1c/0x230 [ 429.641012][T11752] ? kernfs_root+0x1c/0x230 [ 429.641039][T11752] kernfs_new_node+0x102/0x210 [ 429.641062][T11752] __kernfs_create_file+0x4b/0x2e0 [ 429.641085][T11752] sysfs_add_file_mode_ns+0x238/0x300 [ 429.641116][T11752] internal_create_group+0x667/0x1170 [ 429.641156][T11752] ? __pfx_internal_create_group+0x10/0x10 [ 429.641181][T11752] ? kernfs_add_one+0x46f/0x5c0 [ 429.641206][T11752] sysfs_create_groups+0x59/0x120 [ 429.641233][T11752] device_add_attrs+0x13f/0x5a0 [ 429.641253][T11752] ? kernfs_put+0x40e/0x470 [ 429.641271][T11752] ? __pfx_device_add_attrs+0x10/0x10 [ 429.641286][T11752] ? kobject_put+0x52a/0x570 [ 429.641309][T11752] ? device_add_class_symlinks+0x21f/0x240 [ 429.641330][T11752] device_add+0x496/0xb80 [ 429.641353][T11752] input_register_device+0x9d3/0x1170 [ 429.641378][T11752] ? input_ff_create+0x235/0x300 [ 429.641399][T11752] uinput_create_device+0x422/0x670 [ 429.641432][T11752] uinput_ioctl_handler+0x3f0/0x1570 [ 429.641453][T11752] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 429.641485][T11752] ? __fget_files+0x2a/0x420 [ 429.641507][T11752] ? bpf_lsm_file_ioctl+0x9/0x20 [ 429.641524][T11752] ? __pfx_uinput_ioctl+0x10/0x10 [ 429.641540][T11752] __se_sys_ioctl+0xfc/0x170 [ 429.641564][T11752] do_syscall_64+0xfa/0xf80 [ 429.641587][T11752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.641604][T11752] ? clear_bhb_loop+0x60/0xb0 [ 429.641626][T11752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.641642][T11752] RIP: 0033:0x7fded0b8f749 [ 429.641658][T11752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 429.641674][T11752] RSP: 002b:00007fded1af0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 429.641693][T11752] RAX: ffffffffffffffda RBX: 00007fded0de5fa0 RCX: 00007fded0b8f749 [ 429.641706][T11752] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 429.641716][T11752] RBP: 00007fded1af0090 R08: 0000000000000000 R09: 0000000000000000 [ 429.641727][T11752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 429.641735][T11752] R13: 00007fded0de6038 R14: 00007fded0de5fa0 R15: 00007ffeb8b613a8 [ 429.641766][T11752] [ 430.037092][T11758] binder: BINDER_SET_CONTEXT_MGR already set [ 430.044024][T11758] binder: 11757:11758 ioctl 4018620d 200000004a80 returned -16 [ 430.246818][ T5832] Bluetooth: hci3: ISO packet too small [ 430.384509][ T6301] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 430.391008][ T6301] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 430.613193][T11793] FAULT_INJECTION: forcing a failure. [ 430.613193][T11793] name failslab, interval 1, probability 0, space 0, times 0 [ 430.630712][T11793] CPU: 0 UID: 0 PID: 11793 Comm: syz.0.1790 Tainted: G L syzkaller #0 PREEMPT(full) [ 430.630738][T11793] Tainted: [L]=SOFTLOCKUP [ 430.630745][T11793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 430.630755][T11793] Call Trace: [ 430.630762][T11793] [ 430.630770][T11793] dump_stack_lvl+0x189/0x250 [ 430.630789][T11793] ? __pfx____ratelimit+0x10/0x10 [ 430.630812][T11793] ? __pfx_dump_stack_lvl+0x10/0x10 [ 430.630828][T11793] ? __pfx__printk+0x10/0x10 [ 430.630858][T11793] ? __pfx___might_resched+0x10/0x10 [ 430.630887][T11793] should_fail_ex+0x414/0x560 [ 430.630915][T11793] should_failslab+0xa8/0x100 [ 430.630931][T11793] kmem_cache_alloc_noprof+0x88/0x710 [ 430.630948][T11793] ? __kernfs_new_node+0xdc/0x880 [ 430.630965][T11793] __kernfs_new_node+0xdc/0x880 [ 430.630982][T11793] ? __pfx___kernfs_new_node+0x10/0x10 [ 430.630996][T11793] ? kernfs_root+0x1c/0x230 [ 430.631019][T11793] ? kernfs_root+0x1c/0x230 [ 430.631036][T11793] ? kernfs_root+0x1c/0x230 [ 430.631052][T11793] ? kernfs_root+0x1c/0x230 [ 430.631073][T11793] kernfs_new_node+0x102/0x210 [ 430.631090][T11793] __kernfs_create_file+0x4b/0x2e0 [ 430.631114][T11793] sysfs_add_file_mode_ns+0x238/0x300 [ 430.631137][T11793] internal_create_group+0x667/0x1170 [ 430.631168][T11793] ? __pfx_internal_create_group+0x10/0x10 [ 430.631188][T11793] ? kernfs_add_one+0x46f/0x5c0 [ 430.631206][T11793] sysfs_create_groups+0x59/0x120 [ 430.631226][T11793] device_add_attrs+0x13f/0x5a0 [ 430.631241][T11793] ? kernfs_put+0x40e/0x470 [ 430.631255][T11793] ? __pfx_device_add_attrs+0x10/0x10 [ 430.631266][T11793] ? kobject_put+0x52a/0x570 [ 430.631284][T11793] ? device_add_class_symlinks+0x21f/0x240 [ 430.631300][T11793] device_add+0x496/0xb80 [ 430.631317][T11793] input_register_device+0x9d3/0x1170 [ 430.631336][T11793] ? input_ff_create+0x235/0x300 [ 430.631353][T11793] uinput_create_device+0x422/0x670 [ 430.631374][T11793] uinput_ioctl_handler+0x3f0/0x1570 [ 430.631389][T11793] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 430.631415][T11793] ? __fget_files+0x2a/0x420 [ 430.631432][T11793] ? bpf_lsm_file_ioctl+0x9/0x20 [ 430.631445][T11793] ? __pfx_uinput_ioctl+0x10/0x10 [ 430.631457][T11793] __se_sys_ioctl+0xfc/0x170 [ 430.631477][T11793] do_syscall_64+0xfa/0xf80 [ 430.631496][T11793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.631509][T11793] ? clear_bhb_loop+0x60/0xb0 [ 430.631525][T11793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.631539][T11793] RIP: 0033:0x7f262398f749 [ 430.631555][T11793] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.631567][T11793] RSP: 002b:00007f2624870038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.631582][T11793] RAX: ffffffffffffffda RBX: 00007f2623be5fa0 RCX: 00007f262398f749 [ 430.631592][T11793] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 430.631601][T11793] RBP: 00007f2624870090 R08: 0000000000000000 R09: 0000000000000000 [ 430.631609][T11793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 430.631617][T11793] R13: 00007f2623be6038 R14: 00007f2623be5fa0 R15: 00007ffdcf509508 [ 430.631641][T11793] [ 431.504823][ T5858] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 431.562419][ T5914] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 431.665787][ T5858] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 431.675138][ T5858] usb 2-1: config 1 has no interface number 0 [ 431.681310][ T5858] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 431.691672][ T5858] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 431.705150][ T5858] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 431.714837][ T5858] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.723091][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 431.728742][ T5858] usb 2-1: Product: syz [ 431.733868][ T5858] usb 2-1: Manufacturer: syz [ 431.739325][ T5858] usb 2-1: SerialNumber: syz [ 431.739564][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.757515][ T5914] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.770426][T11815] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 431.781164][T11815] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 431.790633][ T5914] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 431.805388][ T5858] usb 2-1: Expected 3 endpoints, found: 2 [ 431.831495][ T5914] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 431.840943][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.850941][ T5914] usb 5-1: config 0 descriptor?? [ 432.008103][ T5858] usb 2-1: USB disconnect, device number 115 [ 432.064969][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.075831][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.289333][ T5914] usbhid 5-1:0.0: can't add hid device: -71 [ 432.295808][ T5914] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 432.307979][ T5914] usb 5-1: USB disconnect, device number 29 [ 432.542410][ T6301] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 432.548561][ T6301] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 432.552494][ T5832] Bluetooth: hci2: command 0x0406 tx timeout [ 432.821160][T11850] tmpfs: Unknown parameter 'usrquotÿaJ0ÄE·' [ 432.936058][T11855] FAULT_INJECTION: forcing a failure. [ 432.936058][T11855] name failslab, interval 1, probability 0, space 0, times 0 [ 432.960377][T11855] CPU: 0 UID: 0 PID: 11855 Comm: syz.4.1799 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.960403][T11855] Tainted: [L]=SOFTLOCKUP [ 432.960409][T11855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 432.960419][T11855] Call Trace: [ 432.960427][T11855] [ 432.960434][T11855] dump_stack_lvl+0x189/0x250 [ 432.960455][T11855] ? __pfx____ratelimit+0x10/0x10 [ 432.960477][T11855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.960493][T11855] ? __pfx__printk+0x10/0x10 [ 432.960521][T11855] ? __pfx___might_resched+0x10/0x10 [ 432.960548][T11855] should_fail_ex+0x414/0x560 [ 432.960577][T11855] should_failslab+0xa8/0x100 [ 432.960597][T11855] kmem_cache_alloc_noprof+0x88/0x710 [ 432.960621][T11855] ? __kernfs_new_node+0xdc/0x880 [ 432.960642][T11855] __kernfs_new_node+0xdc/0x880 [ 432.960666][T11855] ? __pfx___kernfs_new_node+0x10/0x10 [ 432.960683][T11855] ? kernfs_root+0x1c/0x230 [ 432.960713][T11855] ? kernfs_root+0x1c/0x230 [ 432.960735][T11855] ? kernfs_root+0x1c/0x230 [ 432.960755][T11855] ? kernfs_root+0x1c/0x230 [ 432.960784][T11855] kernfs_new_node+0x102/0x210 [ 432.960806][T11855] kernfs_create_dir_ns+0x44/0x130 [ 432.960827][T11855] internal_create_group+0x419/0x1170 [ 432.960868][T11855] ? __pfx_internal_create_group+0x10/0x10 [ 432.960893][T11855] ? kernfs_add_one+0x46f/0x5c0 [ 432.960915][T11855] sysfs_create_groups+0x59/0x120 [ 432.960942][T11855] device_add_attrs+0x13f/0x5a0 [ 432.960961][T11855] ? kernfs_put+0x40e/0x470 [ 432.960989][T11855] ? __pfx_device_add_attrs+0x10/0x10 [ 432.961004][T11855] ? kobject_put+0x52a/0x570 [ 432.961025][T11855] ? device_add_class_symlinks+0x21f/0x240 [ 432.961046][T11855] device_add+0x496/0xb80 [ 432.961068][T11855] input_register_device+0x9d3/0x1170 [ 432.961092][T11855] ? input_ff_create+0x235/0x300 [ 432.961106][T11855] uinput_create_device+0x422/0x670 [ 432.961120][T11855] uinput_ioctl_handler+0x3f0/0x1570 [ 432.961132][T11855] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 432.961150][T11855] ? __fget_files+0x2a/0x420 [ 432.961162][T11855] ? bpf_lsm_file_ioctl+0x9/0x20 [ 432.961172][T11855] ? __pfx_uinput_ioctl+0x10/0x10 [ 432.961181][T11855] __se_sys_ioctl+0xfc/0x170 [ 432.961196][T11855] do_syscall_64+0xfa/0xf80 [ 432.961216][T11855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.961231][T11855] ? clear_bhb_loop+0x60/0xb0 [ 432.961251][T11855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.961267][T11855] RIP: 0033:0x7f568678f749 [ 432.961282][T11855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.961298][T11855] RSP: 002b:00007f56876fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.961316][T11855] RAX: ffffffffffffffda RBX: 00007f56869e5fa0 RCX: 00007f568678f749 [ 432.961328][T11855] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 432.961339][T11855] RBP: 00007f56876fd090 R08: 0000000000000000 R09: 0000000000000000 [ 432.961347][T11855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.961355][T11855] R13: 00007f56869e6038 R14: 00007f56869e5fa0 R15: 00007ffcae119a78 [ 432.961372][T11855] [ 433.566906][T11866] 9p: Bad value for 'wfdno' [ 433.922402][ T7582] usb 4-1: new low-speed USB device number 82 using dummy_hcd [ 433.962374][ T5914] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 434.076013][ T7582] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 434.085091][ T7582] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.096267][ T7582] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.109029][ T7582] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 434.124499][ T7582] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 434.137114][ T7582] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 434.145576][ T5914] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 434.153801][ T7582] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.164800][ T5914] usb 5-1: config 1 has no interface number 0 [ 434.171135][ T5914] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 434.181109][ T7582] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.192947][ T5914] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 434.203816][ T7582] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 434.215160][ T7582] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 434.229371][ T7582] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 434.238390][ T7582] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 434.249473][ T7582] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 434.261549][ T5914] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 434.270908][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.279051][ T7582] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 434.290330][ T5914] usb 5-1: Product: syz [ 434.294557][ T7582] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 434.306092][ T5914] usb 5-1: Manufacturer: syz [ 434.310696][ T5914] usb 5-1: SerialNumber: syz [ 434.325428][ T7582] usb 4-1: string descriptor 0 read error: -22 [ 434.332274][ T7582] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 434.341684][ T7582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.350945][T11872] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 434.359297][T11872] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 434.370446][ T5914] usb 5-1: Expected 3 endpoints, found: 2 [ 434.384153][ T7582] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 434.395521][T11878] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1807'. [ 434.575879][ T5912] usb 5-1: USB disconnect, device number 30 [ 434.622383][ T5832] Bluetooth: hci1: command 0x0c1a tx timeout [ 434.622393][ T6301] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 434.669841][ T6301] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 434.800290][ T7706] usb 1-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 434.855977][ T7706] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 434.883819][ T7706] usb 1-1: USB disconnect, device number 93 [ 434.914996][T11883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.944930][T11883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.048103][ T5914] usb 4-1: USB disconnect, device number 82 [ 435.156914][T11897] input: syz0 as /devices/virtual/input/input122 [ 435.532673][ T5914] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 435.592265][T11918] 9p: Bad value for 'rfdno' [ 435.667018][T11923] /dev/nullb0: Can't open blockdev [ 435.694481][ T5914] usb 5-1: Using ep0 maxpacket: 16 [ 435.711750][ T5914] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.728757][ T5914] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.754987][ T5914] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 435.776850][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 435.795022][ T5914] usb 5-1: Product: syz [ 435.814809][ T5914] usb 5-1: config 0 descriptor?? [ 435.853880][T11930] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.870751][T11930] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.044324][ T5914] usb 5-1: USB disconnect, device number 31 [ 436.119158][ T5912] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 436.304351][ T5912] usb 1-1: not running at top speed; connect to a high speed hub [ 436.313395][ T5912] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 436.324371][ T5912] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 436.338551][ T5912] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.347764][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.356450][ T5912] usb 1-1: Product: syz [ 436.360643][ T5912] usb 1-1: Manufacturer: አ[ 436.365419][ T5912] usb 1-1: SerialNumber: syz [ 436.373949][T11929] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 436.588600][ T5912] cdc_ncm 1-1:1.0: bind() failure [ 436.609236][ T5912] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 436.617668][ T5912] cdc_ncm 1-1:1.1: bind() failure [ 436.640804][ T5912] usb 1-1: USB disconnect, device number 94 [ 436.783027][ T5832] Bluetooth: hci3: command 0x0c1a tx timeout [ 436.783405][ T6301] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 436.799185][ T6301] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 436.842739][ T5914] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 436.894950][T11960] FAULT_INJECTION: forcing a failure. [ 436.894950][T11960] name failslab, interval 1, probability 0, space 0, times 0 [ 436.907750][T11960] CPU: 1 UID: 0 PID: 11960 Comm: syz.3.1819 Tainted: G L syzkaller #0 PREEMPT(full) [ 436.907776][T11960] Tainted: [L]=SOFTLOCKUP [ 436.907783][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 436.907793][T11960] Call Trace: [ 436.907801][T11960] [ 436.907809][T11960] dump_stack_lvl+0x189/0x250 [ 436.907830][T11960] ? __pfx____ratelimit+0x10/0x10 [ 436.907853][T11960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.907870][T11960] ? __pfx__printk+0x10/0x10 [ 436.907900][T11960] ? __pfx___might_resched+0x10/0x10 [ 436.907929][T11960] should_fail_ex+0x414/0x560 [ 436.907958][T11960] should_failslab+0xa8/0x100 [ 436.907977][T11960] kmem_cache_alloc_noprof+0x88/0x710 [ 436.908000][T11960] ? __kernfs_new_node+0xdc/0x880 [ 436.908022][T11960] __kernfs_new_node+0xdc/0x880 [ 436.908046][T11960] ? __pfx___kernfs_new_node+0x10/0x10 [ 436.908063][T11960] ? kernfs_root+0x1c/0x230 [ 436.908093][T11960] ? kernfs_root+0x1c/0x230 [ 436.908115][T11960] ? kernfs_root+0x1c/0x230 [ 436.908135][T11960] ? kernfs_root+0x1c/0x230 [ 436.908163][T11960] kernfs_new_node+0x102/0x210 [ 436.908185][T11960] __kernfs_create_file+0x4b/0x2e0 [ 436.908208][T11960] sysfs_add_file_mode_ns+0x238/0x300 [ 436.908239][T11960] internal_create_group+0x667/0x1170 [ 436.908280][T11960] ? __pfx_internal_create_group+0x10/0x10 [ 436.908305][T11960] ? kernfs_add_one+0x46f/0x5c0 [ 436.908329][T11960] sysfs_create_groups+0x59/0x120 [ 436.908355][T11960] device_add_attrs+0x13f/0x5a0 [ 436.908375][T11960] ? kernfs_put+0x40e/0x470 [ 436.908393][T11960] ? __pfx_device_add_attrs+0x10/0x10 [ 436.908408][T11960] ? kobject_put+0x52a/0x570 [ 436.908431][T11960] ? device_add_class_symlinks+0x21f/0x240 [ 436.908452][T11960] device_add+0x496/0xb80 [ 436.908475][T11960] input_register_device+0x9d3/0x1170 [ 436.908499][T11960] ? input_ff_create+0x235/0x300 [ 436.908520][T11960] uinput_create_device+0x422/0x670 [ 436.908546][T11960] uinput_ioctl_handler+0x3f0/0x1570 [ 436.908566][T11960] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 436.908600][T11960] ? __fget_files+0x2a/0x420 [ 436.908622][T11960] ? bpf_lsm_file_ioctl+0x9/0x20 [ 436.908638][T11960] ? __pfx_uinput_ioctl+0x10/0x10 [ 436.908654][T11960] __se_sys_ioctl+0xfc/0x170 [ 436.908679][T11960] do_syscall_64+0xfa/0xf80 [ 436.908710][T11960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.908727][T11960] ? clear_bhb_loop+0x60/0xb0 [ 436.908748][T11960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.908765][T11960] RIP: 0033:0x7f0a8d18f749 [ 436.908780][T11960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.908795][T11960] RSP: 002b:00007f0a8e0f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 436.908814][T11960] RAX: ffffffffffffffda RBX: 00007f0a8d3e5fa0 RCX: 00007f0a8d18f749 [ 436.908827][T11960] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 436.908838][T11960] RBP: 00007f0a8e0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 436.908849][T11960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 436.908860][T11960] R13: 00007f0a8d3e6038 R14: 00007f0a8d3e5fa0 R15: 00007ffdfc198ad8 [ 436.908891][T11960] [ 437.323738][ T5914] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 437.331779][ T5914] usb 5-1: config 1 has no interface number 0 [ 437.338279][ T5914] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 437.348846][ T5914] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 437.362497][ T5914] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 437.371571][ T5914] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.379577][ T5914] usb 5-1: Product: syz [ 437.383834][ T5914] usb 5-1: Manufacturer: syz [ 437.388414][ T5914] usb 5-1: SerialNumber: syz [ 437.395959][T11953] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 437.403295][T11953] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 437.412249][ T5914] usb 5-1: Expected 3 endpoints, found: 2 [ 437.522399][ T5912] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 437.614887][ T7706] usb 5-1: USB disconnect, device number 32 [ 437.673322][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 437.680160][ T5912] usb 4-1: unable to get BOS descriptor or descriptor too short [ 437.688967][ T5912] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 437.697092][ T5912] usb 4-1: config 4 has no interface number 0 [ 437.703359][ T5912] usb 4-1: config 4 interface 30 has no altsetting 0 [ 437.712933][ T5912] usb 4-1: string descriptor 0 read error: -22 [ 437.719142][ T5912] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 437.728345][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.742803][ T5912] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 437.749852][ T5912] dw2102: su3000_power_ctrl: 1, initialized 0 [ 437.755961][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 437.763625][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 437.773819][ T5912] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 437.781307][ T5912] usb 4-1: media controller created [ 437.787139][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 437.792938][ T5912] dw2102: i2c transfer failed. [ 437.797707][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 437.803478][ T5912] dw2102: i2c transfer failed. [ 437.808242][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 437.813991][ T5912] dw2102: i2c transfer failed. [ 437.818754][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 437.824777][ T5912] dw2102: i2c transfer failed. [ 437.830015][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 437.836607][ T5912] dw2102: i2c transfer failed. [ 437.841394][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 437.847188][ T5912] dw2102: i2c transfer failed. [ 437.851949][ T5912] dvb-usb: MAC address: 02:02:02:02:02:02 [ 437.864765][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.887222][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 437.893012][ T5912] dw2102: command 0x0e transfer failed. [ 437.898556][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 437.904674][ T5912] dw2102: command 0x0e transfer failed. [ 438.184383][T11970] 9p: Bad value for 'rfdno' [ 438.223358][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 438.229618][ T5912] dw2102: command 0x0e transfer failed. [ 438.240126][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 438.245943][ T5912] dw2102: command 0x0e transfer failed. [ 438.251515][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 438.257572][ T5912] dw2102: command 0x51 transfer failed. [ 438.266066][ T5912] dvb-usb: bulk message failed: -22 (5/0) [ 438.272356][ T5912] dw2102: i2c probe for address 0x68 failed. [ 438.278339][ T5912] dvb-usb: bulk message failed: -22 (5/0) [ 438.284377][ T5912] dw2102: i2c probe for address 0x69 failed. [ 438.290355][ T5912] dvb-usb: bulk message failed: -22 (5/0) [ 438.296382][ T5912] dw2102: i2c probe for address 0x6a failed. [ 438.302435][ T5912] dw2102: probing for demodulator failed. Is the external power switched on? [ 438.311198][ T5912] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 438.362389][ T5912] rc_core: IR keymap rc-tt-1500 not found [ 438.368112][ T5912] Registered IR keymap rc-empty [ 438.373848][ T5912] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 438.386619][ T5912] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input124 [ 438.398672][ T5912] dvb-usb: schedule remote query interval to 250 msecs. [ 438.406414][ T5912] dw2102: su3000_power_ctrl: 0, initialized 1 [ 438.412556][ T5912] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 438.425531][ T5912] usb 4-1: USB disconnect, device number 83 [ 438.481490][ T5912] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 438.553617][ T7706] usb 1-1: new full-speed USB device number 95 using dummy_hcd [ 438.705415][ T7706] usb 1-1: unable to get BOS descriptor or descriptor too short [ 438.713735][ T7706] usb 1-1: not running at top speed; connect to a high speed hub [ 438.722758][ T7706] usb 1-1: config 5 has an invalid interface number: 215 but max is 0 [ 438.730930][ T7706] usb 1-1: config 5 has no interface number 0 [ 438.741462][ T7706] usb 1-1: config 5 interface 215 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 438.752745][ T7706] usb 1-1: config 5 interface 215 has no altsetting 0 [ 438.761083][ T7706] usb 1-1: New USB device found, idVendor=1163, idProduct=0100, bcdDevice=dc.ba [ 438.770767][ T7706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.779303][ T7706] usb 1-1: Product: syz [ 438.783673][ T7706] usb 1-1: Manufacturer: syz [ 438.788287][ T7706] usb 1-1: SerialNumber: syz [ 438.796139][T11974] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 438.822452][ T5912] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 438.942581][ T5841] Bluetooth: hci4: command 0xfc11 tx timeout [ 438.942597][ T5832] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 438.963075][ T5914] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 438.990706][ T5912] usb 4-1: Using ep0 maxpacket: 32 [ 439.021726][ T5912] usb 4-1: config 128 has an invalid interface number: 67 but max is 0 [ 439.031738][ T7706] cypress_m8 1-1:5.215: DeLorme Earthmate USB converter detected [ 439.044397][ T5912] usb 4-1: config 128 has no interface number 0 [ 439.063973][ T5912] usb 4-1: New USB device found, idVendor=10b8, idProduct=1e80, bcdDevice=51.9c [ 439.064312][ T7706] usb 1-1: DeLorme Earthmate USB converter now attached to ttyUSB0 [ 439.082428][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.090430][ T5912] usb 4-1: Product: syz [ 439.102459][ T5912] usb 4-1: Manufacturer: syz [ 439.102461][ T5914] usb 5-1: device descriptor read/64, error -71 [ 439.113874][ T7706] usb 1-1: USB disconnect, device number 95 [ 439.122426][ T5912] usb 4-1: SerialNumber: syz [ 439.127890][ T7706] earthmate ttyUSB0: DeLorme Earthmate USB converter now disconnected from ttyUSB0 [ 439.144977][ T7706] cypress_m8 1-1:5.215: device disconnected [ 439.342646][ T5914] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 439.472745][ T5914] usb 5-1: device descriptor read/64, error -71 [ 439.506188][ T5979] usb 2-1: new full-speed USB device number 116 using dummy_hcd [ 439.558359][ T5912] dvb-usb: found a 'DiBcom STK7770P reference design' in cold state, will try to load a firmware [ 439.583803][ T5914] usb usb5-port1: attempt power cycle [ 439.615034][T11985] netlink: 'syz.0.1829': attribute type 10 has an invalid length. [ 439.626864][ T5912] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 439.636241][T11985] team0: Device tunl0 is of different type [ 439.636347][ T5912] dib0700: firmware download failed at 7 with -22 [ 439.652834][ T5912] usb 4-1: USB disconnect, device number 84 [ 439.668927][T11985] netlink: 'syz.0.1829': attribute type 9 has an invalid length. [ 439.679749][ T5979] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 439.685771][T11985] netlink: 'syz.0.1829': attribute type 11 has an invalid length. [ 439.693662][ T5979] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 439.705142][T11985] netlink: 'syz.0.1829': attribute type 12 has an invalid length. [ 439.714253][T11985] netlink: 170612 bytes leftover after parsing attributes in process `syz.0.1829'. [ 439.725128][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.734593][ T5979] usb 2-1: Product: syz [ 439.734885][T11985] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 439.738825][ T5979] usb 2-1: Manufacturer: syz [ 439.748939][T11985] VFS: Can't find a romfs filesystem on dev nullb0. [ 439.748939][T11985] [ 439.750968][ T5979] usb 2-1: SerialNumber: syz [ 439.771871][ T5979] usb 2-1: config 0 descriptor?? [ 439.908845][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.915394][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.923342][ T5914] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 439.952997][ T5914] usb 5-1: device descriptor read/8, error -71 [ 440.005631][ T5979] usb 2-1: USB disconnect, device number 116 [ 440.050580][T11736] udevd[11736]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.145961][T11997] FAULT_INJECTION: forcing a failure. [ 440.145961][T11997] name failslab, interval 1, probability 0, space 0, times 0 [ 440.159233][T11997] CPU: 0 UID: 0 PID: 11997 Comm: syz.3.1833 Tainted: G L syzkaller #0 PREEMPT(full) [ 440.159250][T11997] Tainted: [L]=SOFTLOCKUP [ 440.159253][T11997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 440.159259][T11997] Call Trace: [ 440.159264][T11997] [ 440.159269][T11997] dump_stack_lvl+0x189/0x250 [ 440.159281][T11997] ? __pfx____ratelimit+0x10/0x10 [ 440.159297][T11997] ? __pfx_dump_stack_lvl+0x10/0x10 [ 440.159306][T11997] ? __pfx__printk+0x10/0x10 [ 440.159324][T11997] ? __pfx___might_resched+0x10/0x10 [ 440.159342][T11997] should_fail_ex+0x414/0x560 [ 440.159361][T11997] should_failslab+0xa8/0x100 [ 440.159373][T11997] kmem_cache_alloc_noprof+0x88/0x710 [ 440.159387][T11997] ? __kernfs_new_node+0xdc/0x880 [ 440.159399][T11997] __kernfs_new_node+0xdc/0x880 [ 440.159412][T11997] ? __pfx___kernfs_new_node+0x10/0x10 [ 440.159422][T11997] ? kernfs_root+0x1c/0x230 [ 440.159439][T11997] ? kernfs_root+0x1c/0x230 [ 440.159453][T11997] ? kernfs_root+0x1c/0x230 [ 440.159465][T11997] ? kernfs_root+0x1c/0x230 [ 440.159482][T11997] kernfs_new_node+0x102/0x210 [ 440.159494][T11997] __kernfs_create_file+0x4b/0x2e0 [ 440.159507][T11997] sysfs_add_file_mode_ns+0x238/0x300 [ 440.159524][T11997] internal_create_group+0x667/0x1170 [ 440.159548][T11997] ? __pfx_internal_create_group+0x10/0x10 [ 440.159563][T11997] ? kernfs_add_one+0x46f/0x5c0 [ 440.159576][T11997] sysfs_create_groups+0x59/0x120 [ 440.159592][T11997] device_add_attrs+0x13f/0x5a0 [ 440.159603][T11997] ? kernfs_put+0x40e/0x470 [ 440.159613][T11997] ? __pfx_device_add_attrs+0x10/0x10 [ 440.159622][T11997] ? kobject_put+0x52a/0x570 [ 440.159634][T11997] ? device_add_class_symlinks+0x21f/0x240 [ 440.159646][T11997] device_add+0x496/0xb80 [ 440.159658][T11997] input_register_device+0x9d3/0x1170 [ 440.159672][T11997] ? input_ff_create+0x235/0x300 [ 440.159684][T11997] uinput_create_device+0x422/0x670 [ 440.159699][T11997] uinput_ioctl_handler+0x3f0/0x1570 [ 440.159710][T11997] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 440.159728][T11997] ? __fget_files+0x2a/0x420 [ 440.159741][T11997] ? bpf_lsm_file_ioctl+0x9/0x20 [ 440.159751][T11997] ? __pfx_uinput_ioctl+0x10/0x10 [ 440.159760][T11997] __se_sys_ioctl+0xfc/0x170 [ 440.159776][T11997] do_syscall_64+0xfa/0xf80 [ 440.159798][T11997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.159807][T11997] ? clear_bhb_loop+0x60/0xb0 [ 440.159819][T11997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.159829][T11997] RIP: 0033:0x7f0a8d18f749 [ 440.159839][T11997] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.159848][T11997] RSP: 002b:00007f0a8e0f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 440.159860][T11997] RAX: ffffffffffffffda RBX: 00007f0a8d3e5fa0 RCX: 00007f0a8d18f749 [ 440.159868][T11997] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 440.159874][T11997] RBP: 00007f0a8e0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 440.159880][T11997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 440.159886][T11997] R13: 00007f0a8d3e6038 R14: 00007f0a8d3e5fa0 R15: 00007ffdfc198ad8 [ 440.159903][T11997] [ 440.163982][ T6301] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 440.484377][ T5914] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 440.500266][ T5912] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 440.513115][ T5914] usb 5-1: device descriptor read/8, error -71 [ 440.528107][T12001] 9p: Bad value for 'rfdno' [ 440.569715][T12003] netlink: 'syz.1.1836': attribute type 83 has an invalid length. [ 440.623078][ T5914] usb usb5-port1: unable to enumerate USB device [ 440.631025][T12004] netlink: 'syz.1.1836': attribute type 83 has an invalid length. [ 440.646882][ T6301] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 440.654948][ T6301] usb 1-1: config 1 has no interface number 0 [ 440.663318][ T6301] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 440.674449][ T6301] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 440.688157][ T6301] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 440.692688][ T5912] usb 4-1: Using ep0 maxpacket: 8 [ 440.697813][ T6301] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.712180][ T6301] usb 1-1: Product: syz [ 440.718492][ T6301] usb 1-1: Manufacturer: syz [ 440.724521][ T6301] usb 1-1: SerialNumber: syz [ 440.733200][ T5912] usb 4-1: unable to get BOS descriptor or descriptor too short [ 440.747942][ T5912] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 440.758742][ T5912] usb 4-1: config 4 has no interface number 0 [ 440.762845][T11992] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 440.765685][ T5912] usb 4-1: config 4 interface 30 has no altsetting 0 [ 440.778885][T11992] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 440.791806][ T6301] usb 1-1: Expected 3 endpoints, found: 2 [ 440.793505][ T5912] usb 4-1: string descriptor 0 read error: -22 [ 440.805745][ T5912] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 440.815451][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.850456][ T5912] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 440.858142][ T5912] dw2102: su3000_power_ctrl: 1, initialized 0 [ 440.864675][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 440.886018][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 440.897649][ T5912] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 440.905294][ T5912] usb 4-1: media controller created [ 440.910937][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 440.917424][ T5912] dw2102: i2c transfer failed. [ 440.922469][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 440.928893][ T5912] dw2102: i2c transfer failed. [ 440.933920][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 440.939997][ T5912] dw2102: i2c transfer failed. [ 440.946645][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 440.952490][ T5912] dw2102: i2c transfer failed. [ 440.957426][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 440.963222][ T5912] dw2102: i2c transfer failed. [ 440.969189][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 440.975059][ T5912] dw2102: i2c transfer failed. [ 440.980046][ T5912] dvb-usb: MAC address: 02:02:02:02:02:02 [ 441.003141][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 441.009868][ T6301] usb 1-1: USB disconnect, device number 96 [ 441.035919][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 441.044380][ T5912] dw2102: command 0x0e transfer failed. [ 441.053278][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 441.059754][ T5912] dw2102: command 0x0e transfer failed. [ 441.372363][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 441.379712][ T5912] dw2102: command 0x0e transfer failed. [ 441.385347][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 441.391583][ T5912] dw2102: command 0x0e transfer failed. [ 441.401991][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 441.407782][ T5912] dw2102: command 0x51 transfer failed. [ 441.413492][ T5912] dvb-usb: bulk message failed: -22 (5/0) [ 441.420161][ T5912] dw2102: i2c probe for address 0x68 failed. [ 441.426256][ T5912] dvb-usb: bulk message failed: -22 (5/0) [ 441.432435][ T5912] dw2102: i2c probe for address 0x69 failed. [ 441.438594][ T5912] dvb-usb: bulk message failed: -22 (5/0) [ 441.444434][ T5912] dw2102: i2c probe for address 0x6a failed. [ 441.452438][T11999] dvb-usb: bulk message failed: -22 (3/0) [ 441.458185][ T5912] dw2102: probing for demodulator failed. Is the external power switched on? [ 441.467051][T11999] dw2102: i2c transfer failed. [ 441.472459][ T5912] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 441.572599][ T5912] rc_core: IR keymap rc-tt-1500 not found [ 441.591280][ T5912] Registered IR keymap rc-empty [ 441.604103][ T5912] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 441.633576][T12010] 9p: Bad value for 'rfdno' [ 441.638167][T12010] FAULT_INJECTION: forcing a failure. [ 441.638167][T12010] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 441.652994][ T5912] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input126 [ 441.684312][ T5912] dvb-usb: schedule remote query interval to 250 msecs. [ 441.691259][ T5912] dw2102: su3000_power_ctrl: 0, initialized 1 [ 441.723124][T12010] CPU: 0 UID: 0 PID: 12010 Comm: syz.0.1837 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.723141][T12010] Tainted: [L]=SOFTLOCKUP [ 441.723145][T12010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 441.723150][T12010] Call Trace: [ 441.723155][T12010] [ 441.723162][T12010] dump_stack_lvl+0x189/0x250 [ 441.723182][T12010] ? __pfx____ratelimit+0x10/0x10 [ 441.723206][T12010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 441.723222][T12010] ? __pfx__printk+0x10/0x10 [ 441.723255][T12010] should_fail_ex+0x414/0x560 [ 441.723284][T12010] _copy_to_user+0x31/0xb0 [ 441.723306][T12010] simple_read_from_buffer+0xe1/0x170 [ 441.723328][T12010] proc_fail_nth_read+0x1b3/0x220 [ 441.723354][T12010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.723379][T12010] ? rw_verify_area+0x2a6/0x4d0 [ 441.723399][T12010] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 441.723433][T12010] vfs_read+0x200/0xa30 [ 441.723454][T12010] ? fdget_pos+0x247/0x320 [ 441.723475][T12010] ? __pfx___mutex_lock+0x10/0x10 [ 441.723491][T12010] ? __pfx_vfs_read+0x10/0x10 [ 441.723515][T12010] ? __fget_files+0x2a/0x420 [ 441.723535][T12010] ? __fget_files+0x3a0/0x420 [ 441.723551][T12010] ? __fget_files+0x2a/0x420 [ 441.723576][T12010] ksys_read+0x145/0x250 [ 441.723596][T12010] ? __pfx_ksys_read+0x10/0x10 [ 441.723616][T12010] ? do_syscall_64+0xbe/0xf80 [ 441.723637][T12010] do_syscall_64+0xfa/0xf80 [ 441.723655][T12010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.723670][T12010] ? clear_bhb_loop+0x60/0xb0 [ 441.723686][T12010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.723699][T12010] RIP: 0033:0x7f262398e15c [ 441.723711][T12010] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 441.723723][T12010] RSP: 002b:00007f2624870030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 441.723738][T12010] RAX: ffffffffffffffda RBX: 00007f2623be5fa0 RCX: 00007f262398e15c [ 441.723748][T12010] RDX: 000000000000000f RSI: 00007f26248700a0 RDI: 0000000000000003 [ 441.723757][T12010] RBP: 00007f2624870090 R08: 0000000000000000 R09: 0000000000000000 [ 441.723765][T12010] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000002 [ 441.723774][T12010] R13: 00007f2623be6038 R14: 00007f2623be5fa0 R15: 00007ffdcf509508 [ 441.723797][T12010] [ 441.964541][ T5912] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 441.976144][ T5912] usb 4-1: USB disconnect, device number 85 [ 442.147259][ T5912] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 442.245830][T12028] FAULT_INJECTION: forcing a failure. [ 442.245830][T12028] name failslab, interval 1, probability 0, space 0, times 0 [ 442.258508][T12028] CPU: 0 UID: 0 PID: 12028 Comm: syz.3.1843 Tainted: G L syzkaller #0 PREEMPT(full) [ 442.258533][T12028] Tainted: [L]=SOFTLOCKUP [ 442.258540][T12028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 442.258549][T12028] Call Trace: [ 442.258557][T12028] [ 442.258563][T12028] dump_stack_lvl+0x189/0x250 [ 442.258584][T12028] ? __pfx____ratelimit+0x10/0x10 [ 442.258605][T12028] ? __pfx_dump_stack_lvl+0x10/0x10 [ 442.258622][T12028] ? __pfx__printk+0x10/0x10 [ 442.258651][T12028] ? __pfx___might_resched+0x10/0x10 [ 442.258679][T12028] should_fail_ex+0x414/0x560 [ 442.258709][T12028] should_failslab+0xa8/0x100 [ 442.258730][T12028] kmem_cache_alloc_noprof+0x88/0x710 [ 442.258753][T12028] ? __kernfs_new_node+0xdc/0x880 [ 442.258774][T12028] __kernfs_new_node+0xdc/0x880 [ 442.258797][T12028] ? __pfx___kernfs_new_node+0x10/0x10 [ 442.258815][T12028] ? kernfs_root+0x1c/0x230 [ 442.258844][T12028] ? kernfs_root+0x1c/0x230 [ 442.258867][T12028] ? kernfs_root+0x1c/0x230 [ 442.258887][T12028] ? kernfs_root+0x1c/0x230 [ 442.258915][T12028] kernfs_new_node+0x102/0x210 [ 442.258937][T12028] __kernfs_create_file+0x4b/0x2e0 [ 442.258960][T12028] sysfs_add_file_mode_ns+0x238/0x300 [ 442.258989][T12028] internal_create_group+0x667/0x1170 [ 442.259030][T12028] ? __pfx_internal_create_group+0x10/0x10 [ 442.259055][T12028] ? kernfs_add_one+0x46f/0x5c0 [ 442.259079][T12028] sysfs_create_groups+0x59/0x120 [ 442.259106][T12028] device_add_attrs+0x13f/0x5a0 [ 442.259126][T12028] ? kernfs_put+0x40e/0x470 [ 442.259143][T12028] ? __pfx_device_add_attrs+0x10/0x10 [ 442.259159][T12028] ? kobject_put+0x52a/0x570 [ 442.259181][T12028] ? device_add_class_symlinks+0x21f/0x240 [ 442.259202][T12028] device_add+0x496/0xb80 [ 442.259224][T12028] input_register_device+0x9d3/0x1170 [ 442.259249][T12028] ? input_ff_create+0x235/0x300 [ 442.259270][T12028] uinput_create_device+0x422/0x670 [ 442.259297][T12028] uinput_ioctl_handler+0x3f0/0x1570 [ 442.259317][T12028] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 442.259350][T12028] ? __fget_files+0x2a/0x420 [ 442.259372][T12028] ? bpf_lsm_file_ioctl+0x9/0x20 [ 442.259396][T12028] ? __pfx_uinput_ioctl+0x10/0x10 [ 442.259412][T12028] __se_sys_ioctl+0xfc/0x170 [ 442.259437][T12028] do_syscall_64+0xfa/0xf80 [ 442.259462][T12028] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.259479][T12028] ? clear_bhb_loop+0x60/0xb0 [ 442.259500][T12028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.259516][T12028] RIP: 0033:0x7f0a8d18f749 [ 442.259532][T12028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.259547][T12028] RSP: 002b:00007f0a8e0f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 442.259565][T12028] RAX: ffffffffffffffda RBX: 00007f0a8d3e5fa0 RCX: 00007f0a8d18f749 [ 442.259579][T12028] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 442.259590][T12028] RBP: 00007f0a8e0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 442.259600][T12028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 442.259611][T12028] R13: 00007f0a8d3e6038 R14: 00007f0a8d3e5fa0 R15: 00007ffdfc198ad8 [ 442.259641][T12028] [ 442.806908][ T5914] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 442.982737][ T5914] usb 1-1: Using ep0 maxpacket: 32 [ 442.999263][ T5914] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.038291][ T5914] usb 1-1: New USB device found, idVendor=0c45, idProduct=628f, bcdDevice= 8.b6 [ 443.059166][ T5914] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.072387][ T5979] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 443.080167][ T5914] usb 1-1: Product: syz [ 443.090360][ T5914] usb 1-1: Manufacturer: syz [ 443.100362][ T5914] usb 1-1: SerialNumber: syz [ 443.107180][T12036] 9p: Bad value for 'rfdno' [ 443.113463][ T5914] usb 1-1: config 0 descriptor?? [ 443.136888][ T5914] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:628f [ 443.250135][ T5979] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 443.272756][ T5979] usb 2-1: config 1 has no interface number 0 [ 443.278915][ T5979] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 443.302414][ T5979] usb 2-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 443.328779][ T5979] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 443.340220][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.358075][ T5979] usb 2-1: Product: syz [ 443.362997][ T5979] usb 2-1: Manufacturer: syz [ 443.367696][ T5979] usb 2-1: SerialNumber: syz [ 443.451176][T12034] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 443.458407][T12034] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 443.482686][ T5979] usb 2-1: Expected 3 endpoints, found: 2 [ 443.540431][ T5914] gspca_sn9c20x: Write register 1001 failed -71 [ 443.555632][ T5914] gspca_sn9c20x: Device initialization failed [ 443.562503][ T5914] gspca_sn9c20x 1-1:0.0: probe with driver gspca_sn9c20x failed with error -71 [ 443.580669][ T5914] usb 1-1: USB disconnect, device number 97 [ 443.689001][ T5979] usb 2-1: USB disconnect, device number 117 [ 444.266228][T12061] input: syz0 as /devices/virtual/input/input128 [ 444.442756][ T5912] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 444.479863][ T5979] IPVS: starting estimator thread 0... [ 444.520791][T12067] program syz.3.1856 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 444.572424][T12070] IPVS: using max 29 ests per chain, 69600 per kthread [ 444.603983][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 444.615032][ T5912] usb 5-1: unable to get BOS descriptor or descriptor too short [ 444.640916][ T5912] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 444.661713][ T5912] usb 5-1: config 4 has no interface number 0 [ 444.671840][ T5912] usb 5-1: config 4 interface 30 has no altsetting 0 [ 444.742875][ T5912] usb 5-1: string descriptor 0 read error: -22 [ 444.749167][ T5912] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 444.772350][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.799295][T12079] netlink: 'syz.0.1858': attribute type 1 has an invalid length. [ 444.808973][ T5912] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 444.816871][ T5912] dw2102: su3000_power_ctrl: 1, initialized 0 [ 444.830832][ T5912] dvb-usb: bulk message failed: -22 (2/0) [ 444.840567][T12079] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1858'. [ 444.853147][ T5912] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 444.893223][ T5912] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 444.900731][ T5912] usb 5-1: media controller created [ 444.912921][T12079] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1858'. [ 444.922632][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 444.929045][ T5912] dw2102: i2c transfer failed. [ 444.939986][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 444.969466][ T5912] dw2102: i2c transfer failed. [ 444.985011][T12079] netlink: 658 bytes leftover after parsing attributes in process `syz.0.1858'. [ 444.996173][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 445.001914][ T5912] dw2102: i2c transfer failed. [ 445.009226][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 445.020038][ T5912] dw2102: i2c transfer failed. [ 445.037318][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 445.047420][ T5912] dw2102: i2c transfer failed. [ 445.052209][ T5912] dvb-usb: bulk message failed: -22 (6/0) [ 445.062216][ T5912] dw2102: i2c transfer failed. [ 445.067101][ T5912] dvb-usb: MAC address: 02:02:02:02:02:02 [ 445.092557][ T5912] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 445.101593][T12057] dvb-usb: bulk message failed: -22 (3/0) [ 445.130479][T12057] dw2102: i2c transfer failed. [ 445.193550][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 445.199286][ T5912] dw2102: command 0x0e transfer failed. [ 445.212558][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 445.222455][ T5914] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 445.230712][ T5912] dw2102: command 0x0e transfer failed. [ 445.414523][ T5914] usb 2-1: config 0 has an invalid interface number: 123 but max is 0 [ 445.425681][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.440520][ T5914] usb 2-1: config 0 has no interface number 0 [ 445.452475][ T5914] usb 2-1: New USB device found, idVendor=20df, idProduct=0001, bcdDevice=97.6d [ 445.461861][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.470170][ T5914] usb 2-1: Product: syz [ 445.475293][ T5914] usb 2-1: Manufacturer: syz [ 445.505389][ T5914] usb 2-1: SerialNumber: syz [ 445.520351][ T5914] usb 2-1: config 0 descriptor?? [ 445.535366][ T5914] cdc_acm 2-1:0.123: skipping garbage [ 445.542400][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 445.551577][ T5912] dw2102: command 0x0e transfer failed. [ 445.557300][ T5912] dvb-usb: bulk message failed: -22 (3/0) [ 445.563253][ T5912] dw2102: command 0x0e transfer failed. [ 445.568921][ T5912] dvb-usb: bulk message failed: -22 (1/0) [ 445.575650][ T5912] dw2102: command 0x51 transfer failed. [ 445.590131][ T5912] dvb-usb: bulk message failed: -22 (5/0) [ 445.599830][ T5912] dw2102: i2c probe for address 0x68 failed. [ 445.612979][ T5912] dvb-usb: bulk message failed: -22 (5/0) [ 445.619126][ T5912] dw2102: i2c probe for address 0x69 failed. [ 445.625399][ T5912] dvb-usb: bulk message failed: -22 (5/0) [ 445.631300][ T5912] dw2102: i2c probe for address 0x6a failed. [ 445.738593][ T5913] usb 2-1: USB disconnect, device number 118 [ 445.757513][ T5912] dw2102: probing for demodulator failed. Is the external power switched on? [ 445.768286][ T5912] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 445.870105][ T5912] rc_core: IR keymap rc-tt-1500 not found [ 445.881321][ T5912] Registered IR keymap rc-empty [ 445.891787][ T5912] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 445.930577][ T5912] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input129 [ 445.973341][ T5912] dvb-usb: schedule remote query interval to 250 msecs. [ 446.003512][ T5912] dw2102: su3000_power_ctrl: 0, initialized 1 [ 446.009619][ T5912] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 446.033310][ T5912] usb 5-1: USB disconnect, device number 37 [ 446.156462][ T5912] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 446.492381][ T5912] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 446.592387][ T5914] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 446.642382][ T5912] usb 5-1: Using ep0 maxpacket: 16 [ 446.654134][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.672399][ T5912] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.682275][ T5912] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 446.692606][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.703535][ T5912] usb 5-1: config 0 descriptor?? [ 446.755963][ T5914] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 446.782729][ T5914] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 446.792275][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.813597][ T5914] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 446.912413][ T5979] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 447.072388][ T5979] usb 2-1: Using ep0 maxpacket: 8 [ 447.079390][ T5979] usb 2-1: unable to get BOS descriptor or descriptor too short [ 447.088361][ T5979] usb 2-1: config 4 has an invalid interface number: 30 but max is 0 [ 447.096663][ T5979] usb 2-1: config 4 has no interface number 0 [ 447.103325][ T5979] usb 2-1: config 4 interface 30 has no altsetting 0 [ 447.123336][ T5979] usb 2-1: string descriptor 0 read error: -22 [ 447.129669][ T5979] usb 2-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 447.149037][ T5979] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.151714][ T5912] hid-multitouch 0003:1FD2:6007.0021: unknown main item tag 0x2 [ 447.198586][ T5979] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 447.207086][ T5912] hid-multitouch 0003:1FD2:6007.0021: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 447.223280][ T5979] dw2102: su3000_power_ctrl: 1, initialized 0 [ 447.239695][ T5979] dvb-usb: bulk message failed: -22 (2/0) [ 447.256167][ T5979] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 447.286709][ T5979] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 447.302971][ T5979] usb 2-1: media controller created [ 447.312423][ T5979] dvb-usb: bulk message failed: -22 (6/0) [ 447.318249][ T5979] dw2102: i2c transfer failed. [ 447.342231][ T5912] usb 5-1: USB disconnect, device number 38 [ 447.342377][ T5979] dvb-usb: bulk message failed: -22 (6/0) [ 447.355071][ T5979] dw2102: i2c transfer failed. [ 447.365183][ T5979] dvb-usb: bulk message failed: -22 (6/0) [ 447.370926][ T5979] dw2102: i2c transfer failed. [ 447.392176][T12112] dvb-usb: bulk message failed: -22 (3/0) [ 447.398099][T12112] dw2102: i2c transfer failed. [ 447.414481][ T5979] dvb-usb: bulk message failed: -22 (6/0) [ 447.420231][ T5979] dw2102: i2c transfer failed. [ 447.433080][ T5979] dvb-usb: bulk message failed: -22 (6/0) [ 447.461914][ T5979] dw2102: i2c transfer failed. [ 447.473305][ T5979] dvb-usb: bulk message failed: -22 (6/0) [ 447.482387][ T5979] dw2102: i2c transfer failed. [ 447.487280][ T5979] dvb-usb: MAC address: 02:02:02:02:02:02 [ 447.525088][ T5979] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 447.561149][ T5979] dvb-usb: bulk message failed: -22 (3/0) [ 447.566969][ T5979] dw2102: command 0x0e transfer failed. [ 447.573096][ T5979] dvb-usb: bulk message failed: -22 (3/0) [ 447.578846][ T5979] dw2102: command 0x0e transfer failed. [ 447.644305][T12129] 9p: Bad value for 'rfdno' [ 447.832691][ T5914] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -71 [ 447.840934][ T5914] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 447.847802][ T5914] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 447.856359][ T5914] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 447.865981][ T5914] usb 1-1: USB disconnect, device number 98 [ 447.892410][ T5979] dvb-usb: bulk message failed: -22 (3/0) [ 447.898345][ T5979] dw2102: command 0x0e transfer failed. [ 447.905945][ T5979] dvb-usb: bulk message failed: -22 (3/0) [ 447.911862][ T5979] dw2102: command 0x0e transfer failed. [ 447.917764][ T5979] dvb-usb: bulk message failed: -22 (1/0) [ 447.923821][ T5979] dw2102: command 0x51 transfer failed. [ 447.929453][ T5979] dvb-usb: bulk message failed: -22 (5/0) [ 447.943153][ T5979] dw2102: i2c probe for address 0x68 failed. [ 447.955663][ T5979] dvb-usb: bulk message failed: -22 (5/0) [ 447.961515][ T5979] dw2102: i2c probe for address 0x69 failed. [ 447.967910][ T5979] dvb-usb: bulk message failed: -22 (5/0) [ 447.973782][ T5979] dw2102: i2c probe for address 0x6a failed. [ 447.979888][ T5979] dw2102: probing for demodulator failed. Is the external power switched on? [ 447.994793][ T5979] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 448.066530][ T5979] rc_core: IR keymap rc-tt-1500 not found [ 448.076764][ T5979] Registered IR keymap rc-empty [ 448.084745][ T5979] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 448.112818][ T5979] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input130 [ 448.129452][T12142] kvm: kvm [12141]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010003) = 0xffffffffffffffff [ 448.151836][ T5979] dvb-usb: schedule remote query interval to 250 msecs. [ 448.181365][ T5979] dw2102: su3000_power_ctrl: 0, initialized 1 [ 448.191154][ T5979] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 448.220985][ T5979] usb 2-1: USB disconnect, device number 119 [ 448.301996][ T5979] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 448.417604][T12155] 9p: Bad value for 'rfdno' [ 448.822429][ T5858] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 448.864868][T12167] atomic_op ffff8880291e8998 conn xmit_atomic 0000000000000000 [ 448.907336][T12167] comedi comedi4: bad chanlist[0]=0x00400004 chan=4 range length=2 [ 448.984726][ T5858] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.002364][ T5858] usb 5-1: config 0 has no interfaces? [ 449.008758][ T5858] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 449.026469][ T5858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.044194][ T5858] usb 5-1: config 0 descriptor?? [ 449.261055][ T5858] usb 5-1: USB disconnect, device number 39 [ 449.318462][T12177] FAULT_INJECTION: forcing a failure. [ 449.318462][T12177] name failslab, interval 1, probability 0, space 0, times 0 [ 449.344156][T12177] CPU: 0 UID: 0 PID: 12177 Comm: syz.0.1895 Tainted: G L syzkaller #0 PREEMPT(full) [ 449.344183][T12177] Tainted: [L]=SOFTLOCKUP [ 449.344189][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 449.344199][T12177] Call Trace: [ 449.344206][T12177] [ 449.344214][T12177] dump_stack_lvl+0x189/0x250 [ 449.344235][T12177] ? __pfx____ratelimit+0x10/0x10 [ 449.344259][T12177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 449.344276][T12177] ? __pfx__printk+0x10/0x10 [ 449.344305][T12177] ? __pfx___might_resched+0x10/0x10 [ 449.344339][T12177] should_fail_ex+0x414/0x560 [ 449.344370][T12177] should_failslab+0xa8/0x100 [ 449.344394][T12177] kmem_cache_alloc_noprof+0x88/0x710 [ 449.344417][T12177] ? __kernfs_new_node+0xdc/0x880 [ 449.344438][T12177] __kernfs_new_node+0xdc/0x880 [ 449.344461][T12177] ? __pfx___kernfs_new_node+0x10/0x10 [ 449.344478][T12177] ? kernfs_root+0x1c/0x230 [ 449.344508][T12177] ? kernfs_root+0x1c/0x230 [ 449.344529][T12177] ? kernfs_root+0x1c/0x230 [ 449.344550][T12177] ? kernfs_root+0x1c/0x230 [ 449.344577][T12177] kernfs_new_node+0x102/0x210 [ 449.344597][T12177] __kernfs_create_file+0x4b/0x2e0 [ 449.344620][T12177] sysfs_add_file_mode_ns+0x238/0x300 [ 449.344650][T12177] internal_create_group+0x667/0x1170 [ 449.344690][T12177] ? __pfx_internal_create_group+0x10/0x10 [ 449.344716][T12177] ? kernfs_add_one+0x46f/0x5c0 [ 449.344739][T12177] sysfs_create_groups+0x59/0x120 [ 449.344766][T12177] device_add_attrs+0x13f/0x5a0 [ 449.344786][T12177] ? kernfs_put+0x40e/0x470 [ 449.344803][T12177] ? __pfx_device_add_attrs+0x10/0x10 [ 449.344819][T12177] ? kobject_put+0x52a/0x570 [ 449.344841][T12177] ? device_add_class_symlinks+0x21f/0x240 [ 449.344862][T12177] device_add+0x496/0xb80 [ 449.344884][T12177] input_register_device+0x9d3/0x1170 [ 449.344908][T12177] ? input_ff_create+0x235/0x300 [ 449.344930][T12177] uinput_create_device+0x422/0x670 [ 449.344962][T12177] uinput_ioctl_handler+0x3f0/0x1570 [ 449.344983][T12177] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 449.345015][T12177] ? __fget_files+0x2a/0x420 [ 449.345038][T12177] ? bpf_lsm_file_ioctl+0x9/0x20 [ 449.345054][T12177] ? __pfx_uinput_ioctl+0x10/0x10 [ 449.345071][T12177] __se_sys_ioctl+0xfc/0x170 [ 449.345095][T12177] do_syscall_64+0xfa/0xf80 [ 449.345120][T12177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.345137][T12177] ? clear_bhb_loop+0x60/0xb0 [ 449.345157][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.345173][T12177] RIP: 0033:0x7f262398f749 [ 449.345189][T12177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 449.345204][T12177] RSP: 002b:00007f2624870038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 449.345221][T12177] RAX: ffffffffffffffda RBX: 00007f2623be5fa0 RCX: 00007f262398f749 [ 449.345234][T12177] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 449.345245][T12177] RBP: 00007f2624870090 R08: 0000000000000000 R09: 0000000000000000 [ 449.345256][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.345266][T12177] R13: 00007f2623be6038 R14: 00007f2623be5fa0 R15: 00007ffdcf509508 [ 449.345297][T12177] [ 449.815053][ T5858] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 449.964186][ T5858] usb 5-1: device descriptor read/64, error -71 [ 449.984639][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1896'. [ 449.998140][T12180] 9p: Bad value for 'rfdno' [ 450.222481][ T5858] usb 5-1: new full-speed USB device number 41 using dummy_hcd [ 450.384115][ T5858] usb 5-1: device descriptor read/64, error -71 [ 450.422419][ T5913] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 450.500405][ T5858] usb usb5-port1: attempt power cycle [ 450.572435][ T5913] usb 2-1: Using ep0 maxpacket: 16 [ 450.579249][ T5913] usb 2-1: New USB device found, idVendor=2001, idProduct=4002, bcdDevice=df.bf [ 450.592405][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.613311][ T5913] usb 2-1: config 0 descriptor?? [ 450.639627][T12195] FAULT_INJECTION: forcing a failure. [ 450.639627][T12195] name failslab, interval 1, probability 0, space 0, times 0 [ 450.652913][T12195] CPU: 1 UID: 0 PID: 12195 Comm: syz.3.1904 Tainted: G L syzkaller #0 PREEMPT(full) [ 450.652939][T12195] Tainted: [L]=SOFTLOCKUP [ 450.652946][T12195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 450.652956][T12195] Call Trace: [ 450.652961][T12195] [ 450.652965][T12195] dump_stack_lvl+0x189/0x250 [ 450.652978][T12195] ? __pfx____ratelimit+0x10/0x10 [ 450.652993][T12195] ? __pfx_dump_stack_lvl+0x10/0x10 [ 450.653003][T12195] ? __pfx__printk+0x10/0x10 [ 450.653027][T12195] ? __pfx___might_resched+0x10/0x10 [ 450.653057][T12195] should_fail_ex+0x414/0x560 [ 450.653087][T12195] should_failslab+0xa8/0x100 [ 450.653114][T12195] kmem_cache_alloc_noprof+0x88/0x710 [ 450.653128][T12195] ? __kernfs_new_node+0xdc/0x880 [ 450.653141][T12195] __kernfs_new_node+0xdc/0x880 [ 450.653153][T12195] ? __pfx___kernfs_new_node+0x10/0x10 [ 450.653163][T12195] ? kernfs_root+0x1c/0x230 [ 450.653191][T12195] ? kernfs_root+0x1c/0x230 [ 450.653215][T12195] ? kernfs_root+0x1c/0x230 [ 450.653235][T12195] ? kernfs_root+0x1c/0x230 [ 450.653259][T12195] kernfs_new_node+0x102/0x210 [ 450.653271][T12195] __kernfs_create_file+0x4b/0x2e0 [ 450.653285][T12195] sysfs_add_file_mode_ns+0x238/0x300 [ 450.653302][T12195] internal_create_group+0x667/0x1170 [ 450.653335][T12195] ? __pfx_internal_create_group+0x10/0x10 [ 450.653361][T12195] ? kernfs_add_one+0x46f/0x5c0 [ 450.653385][T12195] sysfs_create_groups+0x59/0x120 [ 450.653409][T12195] device_add_attrs+0x13f/0x5a0 [ 450.653420][T12195] ? kernfs_put+0x40e/0x470 [ 450.653430][T12195] ? __pfx_device_add_attrs+0x10/0x10 [ 450.653438][T12195] ? kobject_put+0x52a/0x570 [ 450.653451][T12195] ? device_add_class_symlinks+0x21f/0x240 [ 450.653462][T12195] device_add+0x496/0xb80 [ 450.653483][T12195] input_register_device+0x9d3/0x1170 [ 450.653508][T12195] ? input_ff_create+0x235/0x300 [ 450.653529][T12195] uinput_create_device+0x422/0x670 [ 450.653554][T12195] uinput_ioctl_handler+0x3f0/0x1570 [ 450.653565][T12195] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 450.653583][T12195] ? __fget_files+0x2a/0x420 [ 450.653596][T12195] ? bpf_lsm_file_ioctl+0x9/0x20 [ 450.653605][T12195] ? __pfx_uinput_ioctl+0x10/0x10 [ 450.653617][T12195] __se_sys_ioctl+0xfc/0x170 [ 450.653643][T12195] do_syscall_64+0xfa/0xf80 [ 450.653668][T12195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.653685][T12195] ? clear_bhb_loop+0x60/0xb0 [ 450.653703][T12195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.653712][T12195] RIP: 0033:0x7f0a8d18f749 [ 450.653722][T12195] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.653731][T12195] RSP: 002b:00007f0a8e0f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 450.653743][T12195] RAX: ffffffffffffffda RBX: 00007f0a8d3e5fa0 RCX: 00007f0a8d18f749 [ 450.653750][T12195] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 450.653757][T12195] RBP: 00007f0a8e0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 450.653766][T12195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 450.653776][T12195] R13: 00007f0a8d3e6038 R14: 00007f0a8d3e5fa0 R15: 00007ffdfc198ad8 [ 450.653808][T12195] [ 451.032665][ T5858] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 451.032888][ T5912] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 451.052875][ T5858] usb 5-1: device descriptor read/8, error -71 [ 451.203468][ T5912] usb 1-1: Using ep0 maxpacket: 8 [ 451.211545][ T5912] usb 1-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 451.220664][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 451.228963][ T5912] usb 1-1: Product: syz [ 451.232388][ T6301] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 451.233207][ T5912] usb 1-1: Manufacturer: syz [ 451.245439][ T5912] usb 1-1: SerialNumber: syz [ 451.253443][ T5912] usb 1-1: config 0 descriptor?? [ 451.292412][ T5858] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 451.312907][ T5858] usb 5-1: device descriptor read/8, error -71 [ 451.392383][ T6301] usb 4-1: Using ep0 maxpacket: 8 [ 451.393786][ T6301] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 451.405649][ T6301] usb 4-1: config 2 has no interface number 0 [ 451.411780][ T6301] usb 4-1: config 2 interface 31 has no altsetting 0 [ 451.420728][ T6301] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 451.430727][ T5858] usb usb5-port1: unable to enumerate USB device [ 451.437145][ T6301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.445744][ T6301] usb 4-1: Product: syz [ 451.449906][ T6301] usb 4-1: Manufacturer: syz [ 451.454569][ T6301] usb 4-1: SerialNumber: syz [ 451.538503][ T5912] usb 1-1: USB disconnect, device number 99 [ 451.558122][T11597] udevd[11597]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 452.010604][ T5913] pegasus 2-1:0.0: can't reset MAC [ 452.016902][ T5913] pegasus 2-1:0.0: probe with driver pegasus failed with error -5 [ 452.029060][ T5913] usb 2-1: USB disconnect, device number 120 [ 452.069970][T12197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.084905][T12197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.111378][ T6301] ch9200 4-1:2.31: probe with driver ch9200 failed with error -22 [ 452.127032][ T6301] usb 4-1: USB disconnect, device number 86 [ 452.158818][T12204] netlink: 'syz.0.1908': attribute type 13 has an invalid length. [ 452.167591][T12204] 9p: Bad value for 'rfdno' [ 452.492354][ T5913] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 452.585874][T12209] binder: 12208:12209 ioctl c018620b 200000000280 returned -14 [ 452.663477][ T5913] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 452.671486][ T5913] usb 1-1: config 1 has no interface number 0 [ 452.700084][ T5913] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 452.712628][ T5913] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 452.724114][T12218] FAULT_INJECTION: forcing a failure. [ 452.724114][T12218] name failslab, interval 1, probability 0, space 0, times 0 [ 452.727089][ T5913] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 452.737604][T12218] CPU: 1 UID: 0 PID: 12218 Comm: syz.4.1914 Tainted: G L syzkaller #0 PREEMPT(full) [ 452.737629][T12218] Tainted: [L]=SOFTLOCKUP [ 452.737636][T12218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 452.737647][T12218] Call Trace: [ 452.737654][T12218] [ 452.737661][T12218] dump_stack_lvl+0x189/0x250 [ 452.737682][T12218] ? __pfx____ratelimit+0x10/0x10 [ 452.737711][T12218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.737734][T12218] ? __pfx__printk+0x10/0x10 [ 452.737764][T12218] ? __pfx___might_resched+0x10/0x10 [ 452.737791][T12218] should_fail_ex+0x414/0x560 [ 452.737821][T12218] should_failslab+0xa8/0x100 [ 452.737840][T12218] kmem_cache_alloc_noprof+0x88/0x710 [ 452.737863][T12218] ? __kernfs_new_node+0xdc/0x880 [ 452.737884][T12218] __kernfs_new_node+0xdc/0x880 [ 452.737906][T12218] ? __pfx___kernfs_new_node+0x10/0x10 [ 452.737922][T12218] ? kernfs_root+0x1c/0x230 [ 452.737951][T12218] ? kernfs_root+0x1c/0x230 [ 452.737972][T12218] ? kernfs_root+0x1c/0x230 [ 452.737992][T12218] ? kernfs_root+0x1c/0x230 [ 452.738018][T12218] kernfs_new_node+0x102/0x210 [ 452.738040][T12218] __kernfs_create_file+0x4b/0x2e0 [ 452.738063][T12218] sysfs_add_file_mode_ns+0x238/0x300 [ 452.738092][T12218] internal_create_group+0x667/0x1170 [ 452.738131][T12218] ? __pfx_internal_create_group+0x10/0x10 [ 452.738155][T12218] ? kernfs_add_one+0x46f/0x5c0 [ 452.738178][T12218] sysfs_create_groups+0x59/0x120 [ 452.738204][T12218] device_add_attrs+0x13f/0x5a0 [ 452.738223][T12218] ? kernfs_put+0x40e/0x470 [ 452.738240][T12218] ? __pfx_device_add_attrs+0x10/0x10 [ 452.738254][T12218] ? kobject_put+0x52a/0x570 [ 452.738277][T12218] ? device_add_class_symlinks+0x21f/0x240 [ 452.738297][T12218] device_add+0x496/0xb80 [ 452.738318][T12218] input_register_device+0x9d3/0x1170 [ 452.738342][T12218] ? input_ff_create+0x235/0x300 [ 452.738362][T12218] uinput_create_device+0x422/0x670 [ 452.738387][T12218] uinput_ioctl_handler+0x3f0/0x1570 [ 452.738407][T12218] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 452.738440][T12218] ? __fget_files+0x2a/0x420 [ 452.738462][T12218] ? bpf_lsm_file_ioctl+0x9/0x20 [ 452.738478][T12218] ? __pfx_uinput_ioctl+0x10/0x10 [ 452.738494][T12218] __se_sys_ioctl+0xfc/0x170 [ 452.738518][T12218] do_syscall_64+0xfa/0xf80 [ 452.738542][T12218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.738558][T12218] ? clear_bhb_loop+0x60/0xb0 [ 452.738579][T12218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.738595][T12218] RIP: 0033:0x7f568678f749 [ 452.738610][T12218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.738626][T12218] RSP: 002b:00007f56876fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 452.738644][T12218] RAX: ffffffffffffffda RBX: 00007f56869e5fa0 RCX: 00007f568678f749 [ 452.738656][T12218] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 452.738667][T12218] RBP: 00007f56876fd090 R08: 0000000000000000 R09: 0000000000000000 [ 452.738677][T12218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.738687][T12218] R13: 00007f56869e6038 R14: 00007f56869e5fa0 R15: 00007ffcae119a78 [ 452.738724][T12218] [ 452.770549][T12216] binder: 12215:12216 ioctl 4018620d 0 returned -22 [ 452.774704][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.774728][ T5913] usb 1-1: Product: syz [ 452.774743][ T5913] usb 1-1: Manufacturer: syz [ 452.774757][ T5913] usb 1-1: SerialNumber: syz [ 452.903678][T12207] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 453.115319][T12207] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 453.142912][ T5913] usb 1-1: Expected 3 endpoints, found: 2 [ 453.185791][T12230] 9p: Bad value for 'rfdno' [ 453.335153][ T5858] usb 1-1: USB disconnect, device number 100 [ 453.472498][ T6301] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 453.656905][ T6301] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.678831][ T6301] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 453.685085][T12242] FAULT_INJECTION: forcing a failure. [ 453.685085][T12242] name failslab, interval 1, probability 0, space 0, times 0 [ 453.694214][ T6301] usb 4-1: config 0 interface 0 has no altsetting 0 [ 453.704382][T12242] CPU: 0 UID: 0 PID: 12242 Comm: syz.4.1923 Tainted: G L syzkaller #0 PREEMPT(full) [ 453.704407][T12242] Tainted: [L]=SOFTLOCKUP [ 453.704414][T12242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 453.704428][T12242] Call Trace: [ 453.704436][T12242] [ 453.704442][T12242] dump_stack_lvl+0x189/0x250 [ 453.704461][T12242] ? __pfx____ratelimit+0x10/0x10 [ 453.704484][T12242] ? __pfx_dump_stack_lvl+0x10/0x10 [ 453.704501][T12242] ? __pfx__printk+0x10/0x10 [ 453.704530][T12242] ? __pfx___might_resched+0x10/0x10 [ 453.704558][T12242] should_fail_ex+0x414/0x560 [ 453.704587][T12242] should_failslab+0xa8/0x100 [ 453.704607][T12242] kmem_cache_alloc_noprof+0x88/0x710 [ 453.704630][T12242] ? __kernfs_new_node+0xdc/0x880 [ 453.704650][T12242] __kernfs_new_node+0xdc/0x880 [ 453.704673][T12242] ? __pfx___kernfs_new_node+0x10/0x10 [ 453.704689][T12242] ? kernfs_root+0x1c/0x230 [ 453.704717][T12242] ? kernfs_root+0x1c/0x230 [ 453.704739][T12242] ? kernfs_root+0x1c/0x230 [ 453.704759][T12242] ? kernfs_root+0x1c/0x230 [ 453.704785][T12242] kernfs_new_node+0x102/0x210 [ 453.704807][T12242] __kernfs_create_file+0x4b/0x2e0 [ 453.704829][T12242] sysfs_add_file_mode_ns+0x238/0x300 [ 453.704859][T12242] internal_create_group+0x667/0x1170 [ 453.704898][T12242] ? __pfx_internal_create_group+0x10/0x10 [ 453.704923][T12242] ? kernfs_add_one+0x46f/0x5c0 [ 453.704953][T12242] sysfs_create_groups+0x59/0x120 [ 453.704979][T12242] device_add_attrs+0x13f/0x5a0 [ 453.704999][T12242] ? kernfs_put+0x40e/0x470 [ 453.705016][T12242] ? __pfx_device_add_attrs+0x10/0x10 [ 453.705031][T12242] ? kobject_put+0x52a/0x570 [ 453.705052][T12242] ? device_add_class_symlinks+0x21f/0x240 [ 453.705072][T12242] device_add+0x496/0xb80 [ 453.705094][T12242] input_register_device+0x9d3/0x1170 [ 453.705118][T12242] ? input_ff_create+0x235/0x300 [ 453.705138][T12242] uinput_create_device+0x422/0x670 [ 453.705163][T12242] uinput_ioctl_handler+0x3f0/0x1570 [ 453.705183][T12242] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 453.705215][T12242] ? __fget_files+0x2a/0x420 [ 453.705237][T12242] ? bpf_lsm_file_ioctl+0x9/0x20 [ 453.705252][T12242] ? __pfx_uinput_ioctl+0x10/0x10 [ 453.705268][T12242] __se_sys_ioctl+0xfc/0x170 [ 453.705297][T12242] do_syscall_64+0xfa/0xf80 [ 453.705321][T12242] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.705337][T12242] ? clear_bhb_loop+0x60/0xb0 [ 453.705357][T12242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.705373][T12242] RIP: 0033:0x7f568678f749 [ 453.705388][T12242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.705403][T12242] RSP: 002b:00007f56876fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 453.705421][T12242] RAX: ffffffffffffffda RBX: 00007f56869e5fa0 RCX: 00007f568678f749 [ 453.705434][T12242] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 453.705445][T12242] RBP: 00007f56876fd090 R08: 0000000000000000 R09: 0000000000000000 [ 453.705455][T12242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 453.705464][T12242] R13: 00007f56869e6038 R14: 00007f56869e5fa0 R15: 00007ffcae119a78 [ 453.705494][T12242] [ 453.753344][T12244] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1924'. [ 453.792366][ T6301] usb 4-1: New USB device found, idVendor=28bd, idProduct=0055, bcdDevice= 0.00 [ 453.799884][T12244] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1924'. [ 453.803626][ T6301] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.063259][ T6301] usb 4-1: config 0 descriptor?? [ 454.231642][T12253] binder: 12252:12253 ioctl c0306201 0 returned -14 [ 454.322521][T12258] loop8: detected capacity change from 0 to 8 [ 454.339068][T12258] Dev loop8: unable to read RDB block 8 [ 454.348214][T12258] loop8: unable to read partition table [ 454.354357][T12258] loop8: partition table beyond EOD, truncated [ 454.363661][T12258] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 454.485889][ T6301] uclogic 0003:28BD:0055.0022: interface is invalid, ignoring [ 455.316639][T12283] binder: 12281:12283 ioctl c0306201 0 returned -14 [ 455.433946][ T5912] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 455.562572][ T5912] usb 5-1: device descriptor read/64, error -71 [ 455.602373][ T5913] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 455.622514][ T5979] usb 2-1: new high-speed USB device number 121 using dummy_hcd [ 455.753771][ T5913] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 455.761825][ T5913] usb 1-1: config 1 has no interface number 0 [ 455.767970][ T5913] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 455.777922][ T5913] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 455.787524][ T5979] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 455.790410][ T5913] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 455.800066][ T5979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.806704][ T5912] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 455.822265][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.830566][ T5913] usb 1-1: Product: syz [ 455.835430][ T5913] usb 1-1: Manufacturer: syz [ 455.836440][ T5979] usb 2-1: config 0 descriptor?? [ 455.840026][ T5913] usb 1-1: SerialNumber: syz [ 455.848012][ T5979] cp210x 2-1:0.0: cp210x converter detected [ 455.861221][T12284] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 455.868609][T12284] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 455.877981][ T5913] usb 1-1: Expected 3 endpoints, found: 2 [ 455.962394][ T5912] usb 5-1: device descriptor read/64, error -71 [ 456.072571][ T5912] usb usb5-port1: attempt power cycle [ 456.097150][ T5858] usb 1-1: USB disconnect, device number 101 [ 456.258509][ T1216] usb 4-1: USB disconnect, device number 87 [ 456.300682][ T5979] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 456.378409][ T5979] usb 2-1: cp210x converter now attached to ttyUSB0 [ 456.385256][T12289] loop8: detected capacity change from 0 to 8 [ 456.386612][T12289] Dev loop8: unable to read RDB block 8 [ 456.412389][ T5912] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 456.420786][T12289] loop8: unable to read partition table [ 456.427391][T12289] loop8: partition table beyond EOD, truncated [ 456.443449][ T5912] usb 5-1: device descriptor read/8, error -71 [ 456.450784][T12289] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 456.601680][ T5858] usb 2-1: USB disconnect, device number 121 [ 456.616940][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 456.630010][ T5858] cp210x 2-1:0.0: device disconnected [ 456.682504][ T5912] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 456.703769][ T5912] usb 5-1: device descriptor read/8, error -71 [ 456.812570][ T5912] usb usb5-port1: unable to enumerate USB device [ 456.832375][ T1216] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 456.983864][ T1216] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.994860][ T1216] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 457.004743][ T1216] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.023320][ T1216] usb 4-1: config 0 descriptor?? [ 457.304687][T12304] binder: 12303:12304 ioctl c0306201 0 returned -14 [ 457.412387][ T5912] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 457.433373][ T1216] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 457.440769][ T1216] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 457.448250][ T1216] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 457.456626][ T1216] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 457.464158][ T1216] playstation 0003:054C:0DF2.0023: unknown main item tag 0x0 [ 457.473650][ T1216] playstation 0003:054C:0DF2.0023: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 457.573623][ T5912] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 457.581900][ T5912] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 457.595219][ T5913] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 457.602917][ T5912] usb 2-1: config 220 contains an unexpected descriptor of type 0x1, skipping [ 457.611779][ T5912] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 457.622829][ T5912] usb 2-1: config 220 has no interface number 2 [ 457.630844][ T5912] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 457.644216][ T5912] usb 2-1: config 220 interface 0 has no altsetting 0 [ 457.651048][ T5912] usb 2-1: config 220 interface 76 has no altsetting 0 [ 457.658152][ T5912] usb 2-1: config 220 interface 1 has no altsetting 0 [ 457.669442][ T5912] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 457.678970][ T1216] playstation 0003:054C:0DF2.0023: Failed to retrieve feature with reportID 9: -71 [ 457.688567][ T1216] playstation 0003:054C:0DF2.0023: Failed to retrieve DualSense pairing info: -71 [ 457.698412][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.706564][ T1216] playstation 0003:054C:0DF2.0023: Failed to get MAC address from DualSense [ 457.715582][ T5912] usb 2-1: Product: syz [ 457.719786][ T5912] usb 2-1: Manufacturer: syz [ 457.724474][ T1216] playstation 0003:054C:0DF2.0023: Failed to create dualsense. [ 457.732407][ T5912] usb 2-1: SerialNumber: syz [ 457.743273][ T1216] playstation 0003:054C:0DF2.0023: probe with driver playstation failed with error -71 [ 457.759036][ T1216] usb 4-1: USB disconnect, device number 88 [ 457.772396][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 457.779046][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 457.788314][ T5913] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 457.797867][ T5913] usb 1-1: config 4 has no interface number 0 [ 457.804167][ T5913] usb 1-1: config 4 interface 30 has no altsetting 0 [ 457.813639][ T5913] usb 1-1: string descriptor 0 read error: -22 [ 457.819888][ T5913] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 457.828952][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.846634][ T5913] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 457.853892][ T5913] dw2102: su3000_power_ctrl: 1, initialized 0 [ 457.859962][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 457.868081][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 457.878444][ T5913] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 457.886012][ T5913] usb 1-1: media controller created [ 457.891236][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 457.897384][ T5913] dw2102: i2c transfer failed. [ 457.902161][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 457.909395][ T5913] dw2102: i2c transfer failed. [ 457.914213][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 457.919959][ T5913] dw2102: i2c transfer failed. [ 457.924813][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 457.930552][ T5913] dw2102: i2c transfer failed. [ 457.935800][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 457.941556][ T5913] dw2102: i2c transfer failed. [ 457.946418][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 457.952166][ T5913] dw2102: i2c transfer failed. [ 457.955756][T12299] syzkaller1: entered promiscuous mode [ 457.957097][ T5913] dvb-usb: MAC address: 02:02:02:02:02:02 [ 457.962936][T12299] syzkaller1: entered allmulticast mode [ 457.984503][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.017904][ T5913] dvb-usb: bulk message failed: -22 (3/0) [ 458.023709][ T5913] dw2102: command 0x0e transfer failed. [ 458.029264][ T5913] dvb-usb: bulk message failed: -22 (3/0) [ 458.035031][ T5913] dw2102: command 0x0e transfer failed. [ 458.054465][T12306] syzkaller1: entered promiscuous mode [ 458.061758][T12306] syzkaller1: entered allmulticast mode [ 458.068092][ T5912] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 458.075485][ T5912] uvcvideo 2-1:220.0: No valid video chain found. [ 458.081926][ T5912] usb 2-1: selecting invalid altsetting 0 [ 458.098182][ T5912] usb 2-1: selecting invalid altsetting 0 [ 458.104016][ T5912] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 458.121381][ T5912] usb 2-1: USB disconnect, device number 122 [ 458.335694][T12312] loop8: detected capacity change from 0 to 8 [ 458.343172][ T5913] dvb-usb: bulk message failed: -22 (3/0) [ 458.348930][ T5913] dw2102: command 0x0e transfer failed. [ 458.349430][T12312] Dev loop8: unable to read RDB block 8 [ 458.354568][ T5913] dvb-usb: bulk message failed: -22 (3/0) [ 458.360726][T12312] loop8: unable to read partition table [ 458.367737][ T5913] dw2102: command 0x0e transfer failed. [ 458.373023][T12312] loop8: partition table beyond EOD, truncated [ 458.377275][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 458.385082][T12312] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 458.402795][ T5913] dw2102: command 0x51 transfer failed. [ 458.423298][ T5913] dvb-usb: bulk message failed: -22 (5/0) [ 458.431697][ T5913] dw2102: i2c probe for address 0x68 failed. [ 458.447870][ T5913] dvb-usb: bulk message failed: -22 (5/0) [ 458.461671][ T5913] dw2102: i2c probe for address 0x69 failed. [ 458.468418][ T5913] dvb-usb: bulk message failed: -22 (5/0) [ 458.475811][ T5913] dw2102: i2c probe for address 0x6a failed. [ 458.481976][T12306] dvb-usb: bulk message failed: -22 (3/0) [ 458.489642][ T5913] dw2102: probing for demodulator failed. Is the external power switched on? [ 458.498927][T12306] dw2102: i2c transfer failed. [ 458.504137][ T5913] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 458.511779][T12306] dvb-usb: bulk message failed: -22 (3/0) [ 458.519080][T12306] dw2102: i2c transfer failed. [ 458.587209][ T5913] rc_core: IR keymap rc-tt-1500 not found [ 458.605848][ T5913] Registered IR keymap rc-empty [ 458.620295][ T5913] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 458.638890][ T5913] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input136 [ 458.662519][ T5913] dvb-usb: schedule remote query interval to 250 msecs. [ 458.669427][T12318] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 458.669464][ T5913] dw2102: su3000_power_ctrl: 0, initialized 1 [ 458.702857][ T5913] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 458.721570][ T5913] usb 1-1: USB disconnect, device number 102 [ 458.787417][ T5913] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 458.822412][ T5858] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 458.974663][ T5858] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 458.985838][ T5858] usb 4-1: config 1 has no interface number 0 [ 458.991949][ T5858] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 459.003144][ T5858] usb 4-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 459.019875][ T5858] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 459.029140][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.037321][ T5858] usb 4-1: Product: syz [ 459.041492][ T5858] usb 4-1: Manufacturer: syz [ 459.046783][ T5858] usb 4-1: SerialNumber: syz [ 459.059781][T12316] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 459.067918][T12316] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 459.075453][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1956'. [ 459.086015][T12329] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1956'. [ 459.087880][ T5858] usb 4-1: Expected 3 endpoints, found: 2 [ 459.104084][ T6301] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 459.262504][ T6301] usb 2-1: Using ep0 maxpacket: 16 [ 459.269027][ T6301] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 459.279691][ T6301] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 459.293686][ T6301] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 459.302946][ T6301] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.310937][ T6301] usb 2-1: Product: syz [ 459.322358][ T6301] usb 2-1: Manufacturer: syz [ 459.326970][ T6301] usb 2-1: SerialNumber: syz [ 459.341948][ T5858] usb 4-1: USB disconnect, device number 89 [ 459.343436][T12343] loop8: detected capacity change from 0 to 8 [ 459.361156][T12343] Dev loop8: unable to read RDB block 8 [ 459.367160][T12343] loop8: unable to read partition table [ 459.373499][T12343] loop8: partition table beyond EOD, truncated [ 459.397583][T12343] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 459.502422][ T5913] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 459.569340][ T6301] usb 2-1: 0:2 : does not exist [ 459.583724][ T6301] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 459.624455][ T6301] usb 2-1: USB disconnect, device number 123 [ 459.697978][T11597] udevd[11597]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 459.722492][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 459.729599][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 459.738433][ T5913] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 459.747280][ T5913] usb 1-1: config 4 has no interface number 0 [ 459.762346][ T5913] usb 1-1: config 4 interface 30 has no altsetting 0 [ 459.802096][ T5913] usb 1-1: string descriptor 0 read error: -22 [ 459.815181][ T5913] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 459.835286][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.869493][ T5913] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 459.881064][ T5913] dw2102: su3000_power_ctrl: 1, initialized 0 [ 459.889890][ T5913] dvb-usb: bulk message failed: -22 (2/0) [ 459.904117][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 459.920642][ T5913] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 459.928741][ T5913] usb 1-1: media controller created [ 459.934153][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 459.939950][ T5913] dw2102: i2c transfer failed. [ 459.945335][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 459.951135][ T5913] dw2102: i2c transfer failed. [ 459.956139][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 459.961925][ T5913] dw2102: i2c transfer failed. [ 459.969114][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 459.975225][ T5913] dw2102: i2c transfer failed. [ 459.980005][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 459.986026][ T5913] dw2102: i2c transfer failed. [ 459.990807][ T5913] dvb-usb: bulk message failed: -22 (6/0) [ 459.998159][ T5913] dw2102: i2c transfer failed. [ 460.002978][ T5913] dvb-usb: MAC address: 02:02:02:02:02:02 [ 460.016529][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 460.036481][ T5913] dvb-usb: bulk message failed: -22 (3/0) [ 460.042227][ T5913] dw2102: command 0x0e transfer failed. [ 460.048073][ T5913] dvb-usb: bulk message failed: -22 (3/0) [ 460.053829][ T5913] dw2102: command 0x0e transfer failed. [ 460.128650][T12358] serio: Serial port pty22 [ 460.222411][ T5858] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 460.362540][ T5913] dvb-usb: bulk message failed: -22 (3/0) [ 460.368434][ T5913] dw2102: command 0x0e transfer failed. [ 460.372819][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 460.374458][ T5913] dvb-usb: bulk message failed: -22 (3/0) [ 460.390563][ T5913] dw2102: command 0x0e transfer failed. [ 460.394943][ T5858] usb 5-1: unable to get BOS descriptor or descriptor too short [ 460.396492][ T5913] dvb-usb: bulk message failed: -22 (1/0) [ 460.409645][ T5913] dw2102: command 0x51 transfer failed. [ 460.415356][ T5913] dvb-usb: bulk message failed: -22 (5/0) [ 460.421264][ T5913] dw2102: i2c probe for address 0x68 failed. [ 460.425962][ T5858] usb 5-1: config 4 has an invalid interface number: 30 but max is 0 [ 460.427851][ T5913] dvb-usb: bulk message failed: -22 (5/0) [ 460.442541][ T5858] usb 5-1: config 4 has no interface number 0 [ 460.448637][ T5858] usb 5-1: config 4 interface 30 has no altsetting 0 [ 460.449671][ T5913] dw2102: i2c probe for address 0x69 failed. [ 460.462146][ T5858] usb 5-1: string descriptor 0 read error: -22 [ 460.463727][T12366] loop8: detected capacity change from 0 to 8 [ 460.469194][ T5858] usb 5-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 460.474787][ T5913] dvb-usb: bulk message failed: -22 (5/0) [ 460.484364][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.490730][ T5913] dw2102: i2c probe for address 0x6a failed. [ 460.503964][T12366] Dev loop8: unable to read RDB block 8 [ 460.504375][ T5858] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 460.510197][T12366] loop8: unable to read partition table [ 460.522819][T12366] loop8: partition table beyond EOD, truncated [ 460.529080][T12339] dvb-usb: bulk message failed: -22 (3/0) [ 460.535157][T12339] dw2102: i2c transfer failed. [ 460.540000][ T5858] dw2102: su3000_power_ctrl: 1, initialized 0 [ 460.540362][ T5913] dw2102: probing for demodulator failed. Is the external power switched on? [ 460.549782][ T5858] dvb-usb: bulk message failed: -22 (2/0) [ 460.555840][T12366] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 460.570754][ T5913] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 460.581234][T12339] dvb-usb: bulk message failed: -22 (3/0) [ 460.587243][ T6301] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 460.607679][T12339] dw2102: i2c transfer failed. [ 460.638442][ T5858] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 460.663847][ T5858] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 460.671351][ T5858] usb 5-1: media controller created [ 460.678605][ T5858] dvb-usb: bulk message failed: -22 (6/0) [ 460.686491][ T5858] dw2102: i2c transfer failed. [ 460.691274][ T5858] dvb-usb: bulk message failed: -22 (6/0) [ 460.695689][ T5913] rc_core: IR keymap rc-tt-1500 not found [ 460.698583][ T5858] dw2102: i2c transfer failed. [ 460.711572][ T5858] dvb-usb: bulk message failed: -22 (6/0) [ 460.714323][ T5913] Registered IR keymap rc-empty [ 460.719537][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.723702][ T5913] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 460.731096][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.741969][ T5913] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input137 [ 460.758971][ T5858] dw2102: i2c transfer failed. [ 460.762904][T12369] FAULT_INJECTION: forcing a failure. [ 460.762904][T12369] name failslab, interval 1, probability 0, space 0, times 0 [ 460.765413][ T6301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.783552][T12369] CPU: 0 UID: 0 PID: 12369 Comm: syz.3.1970 Tainted: G L syzkaller #0 PREEMPT(full) [ 460.783578][T12369] Tainted: [L]=SOFTLOCKUP [ 460.783585][T12369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 460.783595][T12369] Call Trace: [ 460.783602][T12369] [ 460.783609][T12369] dump_stack_lvl+0x189/0x250 [ 460.783629][T12369] ? __pfx____ratelimit+0x10/0x10 [ 460.783652][T12369] ? __pfx_dump_stack_lvl+0x10/0x10 [ 460.783669][T12369] ? __pfx__printk+0x10/0x10 [ 460.783698][T12369] ? __pfx___might_resched+0x10/0x10 [ 460.783725][T12369] should_fail_ex+0x414/0x560 [ 460.783755][T12369] should_failslab+0xa8/0x100 [ 460.783774][T12369] kmem_cache_alloc_noprof+0x88/0x710 [ 460.783796][T12369] ? __kernfs_new_node+0xdc/0x880 [ 460.783817][T12369] __kernfs_new_node+0xdc/0x880 [ 460.783839][T12369] ? __pfx___kernfs_new_node+0x10/0x10 [ 460.783856][T12369] ? kernfs_root+0x1c/0x230 [ 460.783885][T12369] ? kernfs_root+0x1c/0x230 [ 460.783907][T12369] ? kernfs_root+0x1c/0x230 [ 460.783926][T12369] ? kernfs_root+0x1c/0x230 [ 460.783953][T12369] kernfs_new_node+0x102/0x210 [ 460.783975][T12369] __kernfs_create_file+0x4b/0x2e0 [ 460.783997][T12369] sysfs_add_file_mode_ns+0x238/0x300 [ 460.784026][T12369] sysfs_merge_group+0x177/0x310 [ 460.784045][T12369] ? __pfx_sysfs_merge_group+0x10/0x10 [ 460.784062][T12369] ? kobject_put+0x52a/0x570 [ 460.784084][T12369] dpm_sysfs_add+0xd2/0x270 [ 460.784106][T12369] device_add+0x4d8/0xb80 [ 460.784127][T12369] input_register_device+0x9d3/0x1170 [ 460.784151][T12369] ? input_ff_create+0x235/0x300 [ 460.784171][T12369] uinput_create_device+0x422/0x670 [ 460.784196][T12369] uinput_ioctl_handler+0x3f0/0x1570 [ 460.784216][T12369] ? __pfx_uinput_ioctl_handler+0x10/0x10 [ 460.784254][T12369] ? __fget_files+0x2a/0x420 [ 460.784276][T12369] ? bpf_lsm_file_ioctl+0x9/0x20 [ 460.784292][T12369] ? __pfx_uinput_ioctl+0x10/0x10 [ 460.784308][T12369] __se_sys_ioctl+0xfc/0x170 [ 460.784335][T12369] do_syscall_64+0xfa/0xf80 [ 460.784359][T12369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.784375][T12369] ? clear_bhb_loop+0x60/0xb0 [ 460.784395][T12369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.784411][T12369] RIP: 0033:0x7f0a8d18f749 [ 460.784426][T12369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.784440][T12369] RSP: 002b:00007f0a8e0f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 460.784459][T12369] RAX: ffffffffffffffda RBX: 00007f0a8d3e5fa0 RCX: 00007f0a8d18f749 [ 460.784471][T12369] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 460.784481][T12369] RBP: 00007f0a8e0f3090 R08: 0000000000000000 R09: 0000000000000000 [ 460.784492][T12369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 460.784501][T12369] R13: 00007f0a8d3e6038 R14: 00007f0a8d3e5fa0 R15: 00007ffdfc198ad8 [ 460.784530][T12369] [ 460.849444][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.850104][ T5858] dvb-usb: bulk message failed: -22 (6/0) [ 460.860990][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.865677][ T5858] dw2102: i2c transfer failed. [ 460.884864][ T5913] dvb-usb: schedule remote query interval to 250 msecs. [ 460.895900][ T5858] dvb-usb: bulk message failed: -22 (6/0) [ 460.924050][ T5913] dw2102: su3000_power_ctrl: 0, initialized 1 [ 460.924067][ T5913] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 460.934960][ T5858] dw2102: i2c transfer failed. [ 460.962616][ T5913] usb 1-1: USB disconnect, device number 103 [ 460.974824][ T6301] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 461.011424][T12373] afs: Unknown parameter 'afs' [ 461.025599][ T5858] dvb-usb: bulk message failed: -22 (6/0) [ 461.025617][ T5858] dw2102: i2c transfer failed. [ 461.025628][ T5858] dvb-usb: MAC address: 02:02:02:02:02:02 [ 461.037344][ T5858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.096347][T12373] overlay: filesystem on ./bus not supported as upperdir [ 461.099672][ T6301] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 461.202589][ T6301] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 461.213718][ T6301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.215077][T12356] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.234989][ T6301] usb 2-1: config 0 descriptor?? [ 461.240554][ T5858] dvb-usb: bulk message failed: -22 (3/0) [ 461.246938][ T5858] dw2102: command 0x0e transfer failed. [ 461.252536][ T5858] dvb-usb: bulk message failed: -22 (3/0) [ 461.258275][ T5858] dw2102: command 0x0e transfer failed. [ 461.272884][T12356] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.392393][ T1216] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 461.511615][T12356] dvb-usb: bulk message failed: -22 (3/0) [ 461.518132][T12356] dw2102: i2c transfer failed. [ 461.522988][T12356] dvb-usb: bulk message failed: -22 (3/0) [ 461.528769][T12356] dw2102: i2c transfer failed. [ 461.536240][ T5913] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 461.570695][ T1216] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 461.572471][ T5858] dvb-usb: bulk message failed: -22 (3/0) [ 461.581715][ T1216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.587950][ T5858] dw2102: command 0x0e transfer failed. [ 461.596010][ T1216] usb 4-1: Product: syz [ 461.599910][ T5858] dvb-usb: bulk message failed: -22 (3/0) [ 461.610798][ T1216] usb 4-1: Manufacturer: syz [ 461.611095][ T5858] dw2102: command 0x0e transfer failed. [ 461.615431][ T1216] usb 4-1: SerialNumber: syz [ 461.618003][ T1216] usb 4-1: config 0 descriptor?? [ 461.621450][ T5858] dvb-usb: bulk message failed: -22 (1/0) [ 461.629653][ T1216] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 090 [ 461.641645][ T5858] dw2102: command 0x51 transfer failed. [ 461.650897][ T5858] dvb-usb: bulk message failed: -22 (5/0) [ 461.659093][ T5858] dw2102: i2c probe for address 0x68 failed. [ 461.667002][ T6301] hid-udraw 0003:20D6:CB17.0024: item fetching failed at offset 3/7 [ 461.675058][ T5858] dvb-usb: bulk message failed: -22 (5/0) [ 461.680780][ T5858] dw2102: i2c probe for address 0x69 failed. [ 461.687571][ T6301] hid-udraw 0003:20D6:CB17.0024: parse failed [ 461.693794][ T6301] hid-udraw 0003:20D6:CB17.0024: probe with driver hid-udraw failed with error -22 [ 461.703350][ T5858] dvb-usb: bulk message failed: -22 (5/0) [ 461.710648][ T5858] dw2102: i2c probe for address 0x6a failed. [ 461.721209][ T5858] dw2102: probing for demodulator failed. Is the external power switched on? [ 461.730029][ T5858] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 461.793604][ T5858] rc_core: IR keymap rc-tt-1500 not found [ 461.799335][ T5858] Registered IR keymap rc-empty [ 461.806294][ T5858] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 461.819250][ T5858] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input139 [ 461.831588][ T5858] dvb-usb: schedule remote query interval to 250 msecs. [ 461.838627][ T5858] dw2102: su3000_power_ctrl: 0, initialized 1 [ 461.844864][ T5858] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 461.857425][ T5858] usb 5-1: USB disconnect, device number 48 [ 461.863729][ T5913] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 461.881206][T12364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.893226][T12364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.904848][ T10] usb 2-1: USB disconnect, device number 124 [ 461.936267][ T5858] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 462.043006][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 462.048381][ T1216] (null): failure reading functionality [ 462.057011][ T1216] i2c i2c-1: failure reading functionality [ 462.067780][ T5913] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 462.078252][ T1216] i2c i2c-1: connected i2c-tiny-usb device [ 462.091366][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.111725][ T5913] usb 1-1: Product: syz [ 462.116746][ T5913] usb 1-1: Manufacturer: syz [ 462.121353][ T5913] usb 1-1: SerialNumber: syz [ 462.130191][ T5913] usb 1-1: config 0 descriptor?? [ 462.267403][ T5858] usb 4-1: USB disconnect, device number 90 [ 462.338384][ T5913] speedtch 1-1:0.0: speedtch_bind: wrong device class 68 [ 462.345556][ T5913] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 462.481375][T12397] loop8: detected capacity change from 0 to 8 [ 462.490454][T12397] Dev loop8: unable to read RDB block 8 [ 462.496131][T12397] loop8: unable to read partition table [ 462.501871][T12397] loop8: partition table beyond EOD, truncated [ 462.508895][T12397] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 462.554037][T12382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.562882][T12382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.573677][ T5858] usb 1-1: USB disconnect, device number 104 [ 462.642412][ T5913] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 462.793886][ T5913] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 462.802152][ T5913] usb 5-1: config 1 has no interface number 0 [ 462.808792][ T5913] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 462.820016][ T5913] usb 5-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 462.835475][ T5913] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 462.844961][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.853565][ T5913] usb 5-1: Product: syz [ 462.857835][ T5913] usb 5-1: Manufacturer: syz [ 462.863897][ T5913] usb 5-1: SerialNumber: syz [ 462.872380][ T1216] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 462.886080][T12389] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 462.895084][T12389] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 462.903905][ T5913] usb 5-1: Expected 3 endpoints, found: 2 [ 463.052363][ T1216] usb 2-1: Using ep0 maxpacket: 32 [ 463.059619][ T1216] usb 2-1: config 7 has an invalid descriptor of length 133, skipping remainder of the config [ 463.070091][ T1216] usb 2-1: config 7 has 0 interfaces, different from the descriptor's value: 1 [ 463.080775][ T1216] usb 2-1: New USB device found, idVendor=04b4, idProduct=6831, bcdDevice=5a.a6 [ 463.089970][ T1216] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.099033][ T1216] usb 2-1: Product: syz [ 463.102527][ T6301] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 463.109130][ T1216] usb 2-1: Manufacturer: syz [ 463.118043][ T1216] usb 2-1: SerialNumber: syz [ 463.123750][ T5913] usb 5-1: USB disconnect, device number 49 [ 463.288473][ T6301] usb 4-1: Using ep0 maxpacket: 8 [ 463.295891][ T6301] usb 4-1: unable to get BOS descriptor or descriptor too short [ 463.348426][ T6301] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 463.372468][ T6301] usb 4-1: config 4 has no interface number 0 [ 463.378079][ T1216] usb 2-1: USB disconnect, device number 125 [ 463.378556][ T6301] usb 4-1: config 4 interface 30 has no altsetting 0 [ 463.407273][ T6301] usb 4-1: string descriptor 0 read error: -22 [ 463.414195][ T6301] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 463.423979][ T6301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.437854][ T10] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 463.439832][ T6301] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 463.453400][ T6301] dw2102: su3000_power_ctrl: 1, initialized 0 [ 463.459483][ T6301] dvb-usb: bulk message failed: -22 (2/0) [ 463.469987][ T6301] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 463.480697][ T6301] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 463.488237][ T6301] usb 4-1: media controller created [ 463.494465][ T6301] dvb-usb: bulk message failed: -22 (6/0) [ 463.500172][ T6301] dw2102: i2c transfer failed. [ 463.505673][ T6301] dvb-usb: bulk message failed: -22 (6/0) [ 463.511393][ T6301] dw2102: i2c transfer failed. [ 463.516417][ T6301] dvb-usb: bulk message failed: -22 (6/0) [ 463.522126][ T6301] dw2102: i2c transfer failed. [ 463.526977][ T6301] dvb-usb: bulk message failed: -22 (6/0) [ 463.532792][ T6301] dw2102: i2c transfer failed. [ 463.537543][ T6301] dvb-usb: bulk message failed: -22 (6/0) [ 463.543419][ T6301] dw2102: i2c transfer failed. [ 463.548187][ T6301] dvb-usb: bulk message failed: -22 (6/0) [ 463.553992][ T6301] dw2102: i2c transfer failed. [ 463.558755][ T6301] dvb-usb: MAC address: 02:02:02:02:02:02 [ 463.571640][ T6301] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.592136][ T6301] dvb-usb: bulk message failed: -22 (3/0) [ 463.597920][ T6301] dw2102: command 0x0e transfer failed. [ 463.603550][ T6301] dvb-usb: bulk message failed: -22 (3/0) [ 463.609266][ T6301] dw2102: command 0x0e transfer failed. [ 463.623024][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 463.629938][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 463.638952][ T10] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 463.647540][ T10] usb 1-1: config 4 has no interface number 0 [ 463.654325][ T10] usb 1-1: config 4 interface 30 has no altsetting 0 [ 463.665173][ T10] usb 1-1: string descriptor 0 read error: -22 [ 463.671403][ T10] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 463.680948][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.695235][ T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 463.702280][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 463.708534][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 463.716636][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 463.726751][ T10] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) [ 463.734374][ T10] usb 1-1: media controller created [ 463.739585][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 463.745620][ T10] dw2102: i2c transfer failed. [ 463.750374][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 463.756156][ T10] dw2102: i2c transfer failed. [ 463.760927][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 463.766754][ T10] dw2102: i2c transfer failed. [ 463.771519][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 463.777267][ T10] dw2102: i2c transfer failed. [ 463.782062][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 463.787897][ T10] dw2102: i2c transfer failed. [ 463.793003][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 463.798731][ T10] dw2102: i2c transfer failed. [ 463.803561][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 463.816428][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 463.840706][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 463.846720][ T10] dw2102: command 0x0e transfer failed. [ 463.852455][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 463.858179][ T10] dw2102: command 0x0e transfer failed. [ 463.922425][ T6301] dvb-usb: bulk message failed: -22 (3/0) [ 463.928249][ T6301] dw2102: command 0x0e transfer failed. [ 463.938220][ T6301] dvb-usb: bulk message failed: -22 (3/0) [ 463.946338][ T6301] dw2102: command 0x0e transfer failed. [ 463.952372][ T6301] dvb-usb: bulk message failed: -22 (1/0) [ 463.956749][T12409] ªªªªªª speed is unknown, defaulting to 1000 [ 463.958348][ T6301] dw2102: command 0x51 transfer failed. [ 463.978353][ T6301] dvb-usb: bulk message failed: -22 (5/0) [ 463.987040][ T6301] dw2102: i2c probe for address 0x68 failed. [ 463.993097][ T6301] dvb-usb: bulk message failed: -22 (5/0) [ 463.999102][ T6301] dw2102: i2c probe for address 0x69 failed. [ 464.005151][ T6301] dvb-usb: bulk message failed: -22 (5/0) [ 464.011055][ T6301] dw2102: i2c probe for address 0x6a failed. [ 464.018172][T12405] dvb-usb: bulk message failed: -22 (3/0) [ 464.024506][T12405] dw2102: i2c transfer failed. [ 464.029311][T12405] dvb-usb: bulk message failed: -22 (3/0) [ 464.035480][ T6301] dw2102: probing for demodulator failed. Is the external power switched on? [ 464.044367][T12405] dw2102: i2c transfer failed. [ 464.049211][ T6301] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 464.062712][T12407] dvb-usb: bulk message failed: -22 (3/0) [ 464.068452][T12407] dw2102: i2c transfer failed. [ 464.096918][T12407] dvb-usb: bulk message failed: -22 (3/0) [ 464.103297][T12407] dw2102: i2c transfer failed. [ 464.132395][ T6301] rc_core: IR keymap rc-tt-1500 not found [ 464.138151][ T6301] Registered IR keymap rc-empty [ 464.148644][ T6301] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 464.167242][ T6301] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input140 [ 464.182519][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 464.191512][ T10] dw2102: command 0x0e transfer failed. [ 464.197451][ T6301] dvb-usb: schedule remote query interval to 250 msecs. [ 464.204894][ T6301] dw2102: su3000_power_ctrl: 0, initialized 1 [ 464.205964][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 464.217796][ T6301] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 464.218219][ T10] dw2102: command 0x0e transfer failed. [ 464.234627][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 464.240470][ T10] dw2102: command 0x51 transfer failed. [ 464.250060][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 464.256558][ T6301] usb 4-1: USB disconnect, device number 91 [ 464.273808][ T10] dw2102: i2c probe for address 0x68 failed. [ 464.280072][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 464.289723][ T10] dw2102: i2c probe for address 0x69 failed. [ 464.298131][ T10] dvb-usb: bulk message failed: -22 (5/0) [ 464.310119][ T6301] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 464.342847][ T10] dw2102: i2c probe for address 0x6a failed. [ 464.348842][ T10] dw2102: probing for demodulator failed. Is the external power switched on? [ 464.372395][ T10] dvb-usb: no frontend was attached by 'TeVii S482 (tuner 2)' [ 464.452390][ T10] rc_core: IR keymap rc-tt-1500 not found [ 464.458169][ T10] Registered IR keymap rc-empty [ 464.464018][ T10] rc rc0: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 464.475527][ T10] input: TeVii S482 (tuner 2) as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input141 [ 464.495361][ T10] dvb-usb: schedule remote query interval to 250 msecs. [ 464.511149][ T10] dw2102: su3000_power_ctrl: 0, initialized 1 [ 464.517395][ T10] dvb-usb: TeVii S482 (tuner 2) successfully initialized and connected. [ 464.535763][ T10] usb 1-1: USB disconnect, device number 105 [ 464.578200][ T36] netdevice_event(NETDEV_UNREGISTER) for ffff888021baa000 on ffff888078744000 start [ 464.607053][ T36] netdevice_event(NETDEV_UNREGISTER) for ffff888021baa000 on ffff888078744000 end [ 464.636708][ T36] netdevice_event(NETDEV_UNREGISTER) for ffff888021baa000 on ffff888078744000 start [ 464.656393][ T10] dvb-usb: TeVii S482 (tuner 2) successfully deinitialized and disconnected. [ 464.677158][ T36] netdevice_event(NETDEV_UNREGISTER) for ffff888021baa000 on ffff888078744000 end [ 464.751869][T12421] loop8: detected capacity change from 0 to 8 [ 464.769792][T11597] Dev loop8: unable to read RDB block 8 [ 464.779008][T11597] loop8: unable to read partition table [ 464.792694][T11597] loop8: partition table beyond EOD, truncated [ 464.799990][T12421] Dev loop8: unable to read RDB block 8 [ 464.809919][T12421] loop8: unable to read partition table [ 464.825536][T12421] loop8: partition table beyond EOD, truncated [ 464.834414][T12421] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 465.003431][T12428] binder: BINDER_SET_CONTEXT_MGR already set [ 465.012386][ T5858] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 465.019775][T12428] binder: 12427:12428 ioctl 4018620d 200000004a80 returned -16 [ 465.139006][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'. [ 465.148742][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'. [ 465.158984][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1995'. [ 465.187016][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.198329][ T5858] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 465.204280][ T1216] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 465.227878][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.238752][ T5858] usb 4-1: config 0 descriptor?? [ 465.374082][ T1216] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 465.385647][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 465.396977][ T1216] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 465.408735][ T1216] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 465.421776][ T5913] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 465.429552][ T1216] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 465.438725][ T1216] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.449664][ T1216] usb 2-1: config 0 descriptor?? [ 465.460456][T12426] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 465.472372][ T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 465.594062][ T5913] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 465.602089][ T5913] usb 1-1: config 1 has no interface number 0 [ 465.608366][ T5913] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024 [ 465.618442][ T5913] usb 1-1: config 1 interface 7 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 465.631390][ T5913] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 465.640499][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 465.645730][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.653981][ T5858] keytouch 0003:0926:3333.0025: fixing up Keytouch IEC report descriptor [ 465.655474][ T5913] usb 1-1: Product: syz [ 465.671838][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 465.681281][ T5913] usb 1-1: Manufacturer: syz [ 465.682910][ T5858] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0025/input/input142 [ 465.685990][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.705536][ T5913] usb 1-1: SerialNumber: syz [ 465.713638][T12436] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 465.720888][T12436] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 465.731977][ T5913] usb 1-1: Expected 3 endpoints, found: 2 [ 465.738219][ T10] usb 5-1: config 0 descriptor?? [ 465.751150][ T10] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 465.795891][ T5858] keytouch 0003:0926:3333.0025: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 465.883425][ T1216] plantronics 0003:047F:FFFF.0026: reserved main item tag 0xd [ 465.922674][ T1216] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 465.972877][ T5913] usb 1-1: USB disconnect, device number 106 [ 466.254175][ T5858] usb 4-1: USB disconnect, device number 92 [ 466.449724][ T145] netdevice_event(NETDEV_UNREGISTER) for ffff888021baa000 on ffff888078744000 start [ 466.478477][ T145] netdevice_event(NETDEV_UNREGISTER) for ffff888021baa000 on ffff888078744000 end [ 466.488008][ T145] netdevice_event(NETDEV_UNREGISTER) for ffff888021baa000 on ffff888078744000 start [ 466.498740][ T145] netdevice_event(NETDEV_UNREGISTER) for ffff888021baa000 on ffff888078744000 end [ 466.518649][ T5879] usb 2-1: USB disconnect, device number 126 [ 466.787510][T12438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.796584][T12438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 Stopping sshd: stopped /usr/sbin/sshd (pid 5582) OK Stopping crond: [ 467.022768][ T10] usb 4-1: new high-speed USB device number 93 using dummy_hcd stopped /usr/sbin/crond (pid 5570) OK [ 467.202954][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 467.209910][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 467.218919][ T10] usb 4-1: config 4 has an invalid interface number: 30 but max is 0 [ 467.227225][ T10] usb 4-1: config 4 has no interface number 0 [ 467.233488][ T10] usb 4-1: config 4 interface 30 has no altsetting 0 [ 467.243101][ T10] usb 4-1: string descriptor 0 read error: -22 [ 467.249627][ T10] usb 4-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 467.258751][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 Stopping dhcpcd... [ 467.279100][ T10] dvb-usb: found a 'TeVii S482 (tuner 2)' in warm state. [ 467.292710][ T10] dw2102: su3000_power_ctrl: 1, initialized 0 [ 467.298943][ T10] dvb-usb: bulk message failed: -22 (2/0) [ 467.314881][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. stopped /sbin/dh[ 467.333237][ T10] dvbdev: DVB: registering new adapter (TeVii S482 (tuner 2)) cpcd (pid 5495)[ 467.341606][ T10] usb 4-1: media controller created [ 467.350062][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 467.356891][ T10] dw2102: i2c transfer failed. [ 467.362642][ T5879] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 467.366218][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 467.376368][ T10] dw2102: i2c transfer failed. [ 467.381151][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 467.387079][ T10] dw2102: i2c transfer failed. [ 467.391854][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 467.397809][ T10] dw2102: i2c transfer failed. [ 467.402699][ T1216] usb 2-1: new low-speed USB device number 127 using dummy_hcd [ 467.410412][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 467.416638][ T10] dw2102: i2c transfer failed. [ 467.421750][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 467.428314][ T10] dw2102: i2c transfer failed. [ 467.433813][ T10] dvb-usb: MAC address: 02:02:02:02:02:02 [ 467.465547][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 467.478122][T12446] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000002: 0000 [#1] SMP KASAN PTI [ 467.490021][T12446] KASAN: null-ptr-deref in range [0x0000000000000010-0x0000000000000017] [ 467.498443][T12446] CPU: 0 UID: 0 PID: 12446 Comm: syz.3.1997 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.509384][T12446] Tainted: [L]=SOFTLOCKUP [ 467.513702][T12446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.523793][T12446] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 467.529704][T12446] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 3d 3d 62 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 467.542388][ T5879] usb 1-1: Using ep0 maxpacket: 8 [ 467.549319][T12446] RSP: 0018:ffffc90003f5fa88 EFLAGS: 00010202 [ 467.549342][T12446] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 467.549355][T12446] RDX: ffffffff87c60fb5 RSI: ffffffff8f2dba30 RDI: 0000000000001900 [ 467.576313][T12446] RBP: 0000000000000000 R08: ffff888033e9bd00 R09: 0000000000000002 [ 467.584273][T12446] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 467.592236][T12446] R13: 1ffff1100ed398d8 R14: 0000000000000002 R15: ffff8880769cc6c8 [ 467.600194][T12446] FS: 00007f0a8e0f36c0(0000) GS:ffff8881259e6000(0000) knlGS:0000000000000000 [ 467.609110][T12446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.615695][T12446] CR2: 000000110c248961 CR3: 000000003053a000 CR4: 00000000003526f0 [ 467.623689][T12446] Call Trace: [ 467.626961][T12446] [ 467.629901][T12446] __i2c_transfer+0x871/0x2110 [ 467.634666][T12446] ? lockdep_hardirqs_on+0x98/0x140 [ 467.639856][T12446] ? __pfx___i2c_transfer+0x10/0x10 [ 467.645048][T12446] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 467.650405][T12446] ? i2c_transfer+0x120/0x3a0 [ 467.655073][T12446] i2c_transfer+0x25b/0x3a0 [ 467.659563][T12446] ? __pfx_i2c_transfer+0x10/0x10 [ 467.664574][T12446] ? _copy_from_user+0x94/0xb0 [ 467.669332][T12446] i2cdev_ioctl_rdwr+0x460/0x740 [ 467.674262][T12446] i2cdev_ioctl+0x64b/0x820 [ 467.678761][T12446] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 467.683781][T12446] ? __fget_files+0x3a0/0x420 [ 467.688442][T12446] ? __fget_files+0x2a/0x420 [ 467.693042][T12446] ? bpf_lsm_file_ioctl+0x9/0x20 [ 467.697962][T12446] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 467.702994][T12446] __se_sys_ioctl+0xfc/0x170 [ 467.707579][T12446] do_syscall_64+0xfa/0xf80 [ 467.712075][T12446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.718123][T12446] ? clear_bhb_loop+0x60/0xb0 [ 467.722794][T12446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.728668][T12446] RIP: 0033:0x7f0a8d18f749 [ 467.733067][T12446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 467.752665][T12446] RSP: 002b:00007f0a8e0f3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 467.761066][T12446] RAX: ffffffffffffffda RBX: 00007f0a8d3e5fa0 RCX: 00007f0a8d18f749 [ 467.769021][T12446] RDX: 0000200000000080 RSI: 0000000000000707 RDI: 0000000000000004 [ 467.776980][T12446] RBP: 00007f0a8d213f91 R08: 0000000000000000 R09: 0000000000000000 [ 467.784933][T12446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 467.792895][T12446] R13: 00007f0a8d3e6038 R14: 00007f0a8d3e5fa0 R15: 00007ffdfc198ad8 [ 467.800882][T12446] [ 467.803892][T12446] Modules linked in: Stopping network[ 467.808688][T12446] ---[ end trace 0000000000000000 ]--- : [ 467.818309][T12446] RIP: 0010:su3000_i2c_transfer+0x1ad/0xfd0 [ 467.825325][T12446] Code: 4c 89 f8 48 c1 e8 03 49 bc 00 00 00 00 00 fc ff df 42 80 3c 20 00 74 08 4c 89 ff e8 3d 3d 62 fa 49 8b 1f 48 89 d8 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 f3 08 00 00 0f b6 1b 48 8b 44 24 38 42 [ 467.854802][T12446] RSP: 0018:ffffc90003f5fa88 EFLAGS: 00010202 [ 467.860991][T12446] RAX: 0000000000000002 RBX: 0000000000000010 RCX: 0000000000000003 [ 467.870230][T12446] RDX: ffffffff87c60fb5 RSI: ffffffff8f2dba30 RDI: 0000000000001900 [ 467.872238][ T5879] usb 1-1: unable to get BOS descriptor or descriptor too short [ 467.886099][T12446] RBP: 0000000000000000 R08: ffff888033e9bd00 R09: 0000000000000002 [ 467.891859][ T5879] usb 1-1: config 4 has an invalid interface number: 30 but max is 0 [ 467.894409][ T1216] usb 2-1: Invalid ep0 maxpacket: 32 [ 467.902560][ T5879] usb 1-1: config 4 has no interface number 0 [ 467.912262][T12446] R10: 0000000000001a00 R11: 0000000000000002 R12: dffffc0000000000 [ 467.917770][ T5879] usb 1-1: config 4 interface 30 has no altsetting 0 [ 467.937398][T12446] R13: 1ffff1100ed398d8 R14: 0000000000000002 R15: ffff8880769cc6c8 [ 467.957205][T12446] FS: 00007f0a8e0f36c0(0000) GS:ffff8881259e6000(0000) knlGS:0000000000000000 [ 467.969205][ T5879] usb 1-1: New USB device found, idVendor=9022, idProduct=d484, bcdDevice=ff.88 [ 467.982011][T12446] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 467.985297][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.995773][T12446] CR2: 00005626df4b0008 CR3: 000000003053a000 CR4: 00000000003526f0 [ 467.999889][ T5879] usb 1-1: Product: з [ 468.009639][ T5879] usb 1-1: Manufacturer: и [ 468.021459][T12446] Kernel panic - not syncing: Fatal exception [ 468.027873][T12446] Kernel Offset: disabled [ 468.032221][T12446] Rebooting in 86400 seconds..