last executing test programs: 2m40.728702393s ago: executing program 0 (id=145): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="680000000b06010200000000000000000000000005000100070000000900020073797a3100000000400007800c001a"], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x80) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) readv(r1, &(0x7f00000020c0)=[{&(0x7f0000000000)=""/187, 0xbb}, {&(0x7f0000000400)=""/54, 0x36}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f0000000600)=""/221, 0xdd}, {&(0x7f0000000700)=""/120, 0x78}, {&(0x7f0000000780)=""/132, 0x84}, {&(0x7f0000000840)=""/8, 0x8}, {&(0x7f0000000880)=""/223, 0xdf}, {&(0x7f0000000980)=""/37, 0x25}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0xa) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000001080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) read(r3, &(0x7f0000002480)=""/4096, 0x1000) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x3000004, 0x40010, r0, 0xcd3f0000) pwritev2(r3, &(0x7f00000003c0)=[{&(0x7f0000000100)="caef9d7365c8a28a26b8b27f9b3e4458ffa3fae41090d960dfff568e7402c5ae0121cf497e1a0e0e22965a58045316182c39121d209e7b287ce425b20cc03177a728c3a59fee9f074ed1d98d9193d048b1b16d39ebd005490f8edecf2c3e0a02a5fd821a01cda55924dd94e356c2aef0d4916e8958118560a59e31d2b60e8dbd6d3a477fbbae42d1b557cf79065a337f08d2a6f20b1b3869ce3affdc3ff4c318f665f935c4ea98e3392fbfa5b8dff291c232504128be85d1d7d29358caba2b279d56ef824336ba477eb88ba634df7a9d1a5075", 0xd3}, {&(0x7f0000000200)="ae5fc49bd357073856066ba8a91083eaf9a8b53cecb45a9675c1d61a8f7593f3953a5299c4541a82f0e2af9f8d99c7709b4cfa34a3b8c422172d759551c3924cca900eae3c80add31b3ed3b2a2948f13e58ef06c3c08b5d96c003bc6f90820f17336835b4f074fc8268cc58da0d1d75c937bf6c4faae2a5396a35a393b88e61dbaaa6402d47b48a32940df0cb0040df44ee6de1729dacce5bb62076c4ebd6a02665681a4a57cae6e4f16bd46c33c4585485899bfc2116b4a75e175f17ea228e53f88c83c53a00c1efcf44b40bed74cbc4be9902985153eeeb34fb38fc387f1bb18d0", 0xe2}, {&(0x7f0000000300)="68e79f7283d44421513a6cef825faee54c8bc500b7a4983bae4a70f580013bbc325e48c01dc6e86d6dbec2257c0cafecf3b5961670e68999c4846b72ee5794b839a5d75475aede7749880e78a6b022438b27d14012ee5ec0ee7b1b", 0x5b}, {&(0x7f0000000380)="a557f09b505c9f4c56a4886e14ca801b207ebaf666eff15a57a56e48915e7d", 0x1f}], 0x4, 0x81, 0x81, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r2, 0x118, 0x0, 0x0, 0x1d) 2m37.873963372s ago: executing program 0 (id=150): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000040)=0x1) ioctl$USBDEVFS_CLAIM_PORT(r1, 0x80045518, &(0x7f0000000000)=0x1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000000c0)={0x4d, 0x1, 0x2, "08000000ff0b57e38600", 0x31364d4e}) 2m36.57690918s ago: executing program 0 (id=152): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @loopback}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x200000, {{}, 0xfffff788}}}}}}}, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000006900000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000040)={r2, 0xffffffffffffffff, 0xcc0, 0x0, @val=@iter={&(0x7f0000000000)=@map_fd=r0, 0x10}}, 0x20) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r6, &(0x7f0000003680)={0x2020}, 0x2020) 2m35.463820048s ago: executing program 0 (id=156): socket$inet6(0xa, 0x2, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4048011}, 0x4044000) (async) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) (async) r2 = syz_open_dev$loop(&(0x7f0000000100), 0xd, 0x40080) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async, rerun: 64) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00') (async) socket(0x1e, 0x805, 0x0) (async, rerun: 32) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6001, 0x0) (async, rerun: 32) r5 = creat(&(0x7f00000000c0)='./file0\x00', 0x2) r6 = dup2(r5, r5) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$BLKTRACESTART(r5, 0x1274, 0x0) (async) ioctl$BLKTRACESTOP(r5, 0x1275, 0x0) 2m26.775605907s ago: executing program 0 (id=172): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000008000000000000000900000073112f00000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m26.691262771s ago: executing program 0 (id=173): unshare(0x44040200) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x356, 0x360, 0x356, 0x5c0, 0x9, 0x2, 0x4, 0x1, {0x4, 0x5}, {0x4c, 0x7}, {0x6, 0x1b4}, {0xb}, 0x2, 0x80, 0x2, 0xff, 0x0, 0x80000001, 0xb21, 0x2, 0x2, 0x7, 0x4, 0xfffffff8, 0x0, 0x1, 0x1, 0xc}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) 2m7.968996373s ago: executing program 32 (id=173): unshare(0x44040200) r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000500)={0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x3}, 0x1c) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x20001, 0x0) ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f00000000c0)={0x356, 0x360, 0x356, 0x5c0, 0x9, 0x2, 0x4, 0x1, {0x4, 0x5}, {0x4c, 0x7}, {0x6, 0x1b4}, {0xb}, 0x2, 0x80, 0x2, 0xff, 0x0, 0x80000001, 0xb21, 0x2, 0x2, 0x7, 0x4, 0xfffffff8, 0x0, 0x1, 0x1, 0xc}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x2}]}, 0x20}}, 0x0) 2m3.206210359s ago: executing program 1 (id=199): syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201720607c2dc08801b09e303000000030109022200010bc010080904909b0150e051000905000c000207c5020705ea"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4f20, 0xa, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x1}, {0xa, 0x4e22, 0x2, @remote, 0x80000001}, r1, 0xfffffe4d}}, 0x48) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) 1m59.479313662s ago: executing program 1 (id=210): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x70bd2b, 0x25dfdbfc, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x45, 0x0, 0x4, 0x80000000}, {0x80, 0x3, 0x4}, {0x0, 0xff}, {0x4, 0x0, 0x2, 0x87ea}, {0x9, 0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x9}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = socket(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000180)="7800000018002507b9409b14ffff00000204be04020506050e0204095c0008000400000046000045653600648d0a0012000200000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004b32000400170005000a00000000e5c2cc7f18ff2439d1ddf66ed538f252325bd059c52cd85ab6d3", 0x78, 0x0, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) pipe(&(0x7f0000000200)) setsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x5, &(0x7f0000000000)=0x1, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000080)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m55.055983005s ago: executing program 1 (id=215): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [], {0x14}}, 0x28}}, 0x40000) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001b1401002abdd444d446df25080001000000000009"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000000)={"0475a0ba", 0x6, 0x3, 0x9, 0x1, 0x2, "9c65a9bf6c96e07bf3102a0f39f437", "7ef56cf4", "4e015999", "1465e782", ["3b6b871829f5962019fead4a", "c5aa9e31c9e8b8d5d55364cf", "6ee7a59ea03a51930bfbdcb0", "c36d3eabb1feb444ab32d7f2"]}) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x0) 1m54.818170201s ago: executing program 1 (id=219): epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x8002) r3 = openat$panthor(0xffffffffffffff9c, &(0x7f00000006c0), 0x2, 0x0) ioctl$DRM_IOCTL_GET_CAP(r3, 0xc010640c, &(0x7f0000000800)={0x2}) r4 = fcntl$dupfd(r2, 0x0, r2) read$FUSE(r4, 0x0, 0x2000) 1m53.173607722s ago: executing program 1 (id=223): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="ec00000010000108000000008100000000000000", @ANYRES32=r0, @ANYBLOB="0b00000000000000cc001a8018000a80140007"], 0xec}, 0x1, 0x0, 0x0, 0x20000010}, 0x200080c4) (fail_nth: 7) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x40000) 1m52.491737535s ago: executing program 1 (id=228): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xf, &(0x7f0000000280)={0xe2bd, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x8}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="e7265155a026b5843c4059a728744d64ef9a6668391f702eefcbdc36eebfc4c4dc", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000500040001000000"], 0x1c}}, 0x0) 1m37.078808014s ago: executing program 33 (id=228): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r1, 0x80079a3) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xb8, &(0x7f0000000140)=""/184, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xf, &(0x7f0000000280)={0xe2bd, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='bic', 0xff3d) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x8}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001040)=ANY=[@ANYBLOB="e7265155a026b5843c4059a728744d64ef9a6668391f702eefcbdc36eebfc4c4dc", @ANYRES16=r8, @ANYBLOB="01000000000000000000010000000500040001000000"], 0x1c}}, 0x0) 6.65187122s ago: executing program 2 (id=440): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 5.051567357s ago: executing program 3 (id=443): fadvise64(0xffffffffffffffff, 0x8, 0x9, 0x0) 4.90347704s ago: executing program 3 (id=444): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000000)={0xfff, 0x30000, 0x0, 0xffffffffffffffff, 0xb}) 4.810639191s ago: executing program 2 (id=445): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000380)="2e0fc779960f649d5089fda20f231c6fb9010100c0b8ba8c0000ba000000000f300fc72b0f20e035000002000f22e0b93f0a0000b86f4e0000ba000000000f3067660f73d70066b863008ed0", 0x4c}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.609292887s ago: executing program 3 (id=446): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x6) 4.272592903s ago: executing program 2 (id=448): r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r1, 0x0, 0x8, &(0x7f00000000c0)=0x7, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x66, 0x0, 0x0, 0x11, 0x0, @private=0xa010101, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x63, 0x0, &(0x7f0000000000)="ff", 0x0, 0x149d, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 4.272444709s ago: executing program 3 (id=449): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100002eab5a40401c3405cc6d010203010902120001000000000904"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000005c0)={0x1c, &(0x7f0000000480)={0x40, 0x6589d1dcc1ed157f, 0x4, "677afef2"}, 0x0, 0x0}) 4.271235304s ago: executing program 4 (id=450): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) lsetxattr$trusted_overlay_opaque(0x0, 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 3.942552213s ago: executing program 4 (id=451): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x2, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.755563629s ago: executing program 4 (id=452): r0 = syz_usb_connect$hid(0x5, 0x47, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xc70, 0xf014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf0, 0x2, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0x6, 0xe9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000180)={0x14, &(0x7f0000000000)={0x20, 0x5, 0x2b, {0x2b, 0xb, "e41532011d1284d2c3db00d849786782fa4889ad8d80209c692381720bd892330572e8d4263e6daa01"}}, &(0x7f0000000100)={0x0, 0x3, 0x3d, @string={0x3d, 0x3, "a6305e8518a41b8b836473075dfb4181880d58897651f45aa75ffda99bc83e6fcf01a81d7ddffe2efb72ac60a32783e60bafc6ed1983ab029aad8b"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000200)={0x20, 0x31, 0xce, "45991709ce4a73465b35e21c5ede9f53b69a511a31b4005a112f023b9174a518ed77fb653747f9a3d149120eddf96fd9c6ecf0a3e02928d78f44930b73b4f20dbcb45e8764c59356a2008e1a46a24f4575ed3e1d335f8bad10ab1d94c1e060eb7722fa428df6274f9d4a844a506c2cd2fb9b903dce8623ace07509f79a911efdcbdbcfadd386cf7353e65b76a6b944df1856ca4b5de00ae9576fd7e99cebe6c13181155fa5ffd08a06ca97b2ea09e9fae6f89c7c84018263254505ced417db6fe93b1871a35233f2b8832aa5c468"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000380)={0x20, 0x81, 0x2, 'L6'}, &(0x7f00000003c0)={0x20, 0x82, 0x2, "58f5"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "4af2"}, &(0x7f0000000440)={0x20, 0x84, 0x1, "bb"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "affcee"}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f00000002c0), 0xf, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x2, 0x4, 0xfffd, 0x1000101, "000076ffffffff02211b140987bd29144f000000001600000000000900"}) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.323362224s ago: executing program 2 (id=453): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r0, &(0x7f00000006c0)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000280)='bbr', 0x3) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 1.926935512s ago: executing program 2 (id=454): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000000)=@x86={0xa0, 0xfd, 0x5, 0x0, 0x3, 0x3, 0xb, 0x1, 0xf8, 0x19, 0x7, 0x3, 0x0, 0x9d, 0x1, 0x7, 0x6, 0x40, 0x0, '\x00', 0x4, 0xcaa}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.235543805s ago: executing program 3 (id=455): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0xffdc, 0x20, 0xfff3}) 1.078174875s ago: executing program 2 (id=456): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) lstat(0x0, 0x0) 983.398884ms ago: executing program 3 (id=457): r0 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001680)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)={0x40, 0x5, 0x1, '/'}}) syz_usb_control_io(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 646.977858ms ago: executing program 4 (id=458): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x6004, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x648000, 0x0) fadvise64(r0, 0x36a9, 0x9, 0x4) 586.990671ms ago: executing program 4 (id=459): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) 0s ago: executing program 4 (id=460): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x3, 0x100, 0x0, 0x4b97, 0x5, 0x5}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000020003ba72bbd7000f9dbdf250a0624cdff000001020001000800060000000000140002000000000000000000000000000000000108001000ff03000008"], 0x48}, 0x1, 0x0, 0x0, 0x845}, 0x4000000) kernel console output (not intermixed with test programs): [ T6328] FAULT_INJECTION: forcing a failure. [ 163.344039][ T6328] name failslab, interval 1, probability 0, space 0, times 0 [ 163.344119][ T6328] CPU: 0 UID: 0 PID: 6328 Comm: syz.1.146 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 163.344150][ T6328] Tainted: [L]=SOFTLOCKUP [ 163.344157][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 163.344173][ T6328] Call Trace: [ 163.344179][ T6328] [ 163.344186][ T6328] dump_stack_lvl+0xe8/0x150 [ 163.344210][ T6328] should_fail_ex+0x46b/0x600 [ 163.344240][ T6328] should_failslab+0xa8/0x100 [ 163.344261][ T6328] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 163.344279][ T6328] ? __rcu_read_unlock+0x83/0xe0 [ 163.344297][ T6328] ? __d_alloc+0x37/0x6f0 [ 163.344316][ T6328] __d_alloc+0x37/0x6f0 [ 163.344337][ T6328] d_alloc+0x4b/0x190 [ 163.344350][ T6328] ? lookup_one_qstr_excl+0xc4/0x360 [ 163.344369][ T6328] lookup_one_qstr_excl+0xd8/0x360 [ 163.344390][ T6328] __start_renaming+0x186/0x410 [ 163.344414][ T6328] filename_renameat2+0x38c/0x9c0 [ 163.344447][ T6328] ? __pfx_filename_renameat2+0x10/0x10 [ 163.344476][ T6328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.344499][ T6328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.344516][ T6328] __se_sys_rename+0x55/0x2c0 [ 163.344539][ T6328] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.344556][ T6328] do_syscall_64+0x15f/0xf80 [ 163.344575][ T6328] ? clear_bhb_loop+0x40/0x90 [ 163.344594][ T6328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.344609][ T6328] RIP: 0033:0x7f3db7e7cdd9 [ 163.344624][ T6328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.344636][ T6328] RSP: 002b:00007f3db60b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 163.344653][ T6328] RAX: ffffffffffffffda RBX: 00007f3db80f6090 RCX: 00007f3db7e7cdd9 [ 163.344665][ T6328] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 00002000000000c0 [ 163.344675][ T6328] RBP: 00007f3db60b5090 R08: 0000000000000000 R09: 0000000000000000 [ 163.344684][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 163.344693][ T6328] R13: 00007f3db80f6128 R14: 00007f3db80f6090 R15: 00007ffed4bfe5f8 [ 163.344718][ T6328] [ 164.766543][ T6317] fido_id[6317]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 165.928529][ T5860] usb 4-1: config 0 descriptor?? [ 165.929160][ T5860] usb 4-1: can't set config #0, error -71 [ 165.967094][ T5860] usb 4-1: USB disconnect, device number 2 [ 166.362441][ T6349] netlink: 'syz.4.154': attribute type 1 has an invalid length. [ 166.583369][ T6349] vivid-007: ================= START STATUS ================= [ 166.583442][ T6349] vivid-007: Generate PTS: true [ 166.583475][ T6349] vivid-007: Generate SCR: true [ 166.583502][ T6349] tpg source WxH: 320x240 (Y'CbCr) [ 166.583512][ T6349] tpg field: 1 [ 166.583517][ T6349] tpg crop: (0,0)/320x240 [ 166.583526][ T6349] tpg compose: (0,0)/320x240 [ 166.583536][ T6349] tpg colorspace: 8 [ 166.583542][ T6349] tpg transfer function: 0/0 [ 166.583549][ T6349] tpg Y'CbCr encoding: 0/0 [ 166.583574][ T6349] tpg quantization: 0/0 [ 166.583580][ T6349] tpg RGB range: 0/2 [ 166.583587][ T6349] vivid-007: ================== END STATUS ================== [ 166.729472][ T5860] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 166.939169][ T5860] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 166.939199][ T5860] usb 4-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 166.939223][ T5860] usb 4-1: config 0 has no interface number 0 [ 166.973690][ T5860] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 166.973721][ T5860] usb 4-1: New USB device strings: Mfr=1, Product=29, SerialNumber=3 [ 166.973743][ T5860] usb 4-1: Product: syz [ 166.973758][ T5860] usb 4-1: Manufacturer: syz [ 166.973773][ T5860] usb 4-1: SerialNumber: syz [ 167.032231][ T5860] usb 4-1: config 0 descriptor?? [ 167.126187][ T42] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 167.286611][ T42] usb 3-1: Using ep0 maxpacket: 8 [ 167.289808][ T42] usb 3-1: unable to get BOS descriptor or descriptor too short [ 167.291563][ T42] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 167.291603][ T42] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 167.291629][ T42] usb 3-1: config 1 interface 0 has no altsetting 0 [ 167.354088][ T42] usb 3-1: string descriptor 0 read error: -22 [ 167.354240][ T42] usb 3-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 167.354264][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.395467][ T6332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 167.395785][ T6332] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 167.441034][ T42] usblp0: Disabling reads from problematic bidirectional printer [ 167.987991][ T42] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 9 proto 1 vid 0x03F0 pid 0x0004 [ 168.019796][ T42] usb 3-1: USB disconnect, device number 14 [ 168.155467][ T42] usblp0: removed [ 171.333448][ T5860] uvcvideo 4-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 171.333492][ T5860] uvcvideo 4-1:0.64: No valid video chain found. [ 171.480311][ T5860] usb 4-1: USB disconnect, device number 3 [ 171.496211][ T42] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 171.676037][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 171.697399][ T42] usb 3-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 171.697431][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.697453][ T42] usb 3-1: Product: syz [ 171.697469][ T42] usb 3-1: Manufacturer: syz [ 171.697492][ T42] usb 3-1: SerialNumber: syz [ 171.780224][ T42] usb 3-1: config 0 descriptor?? [ 171.799829][ T42] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 171.801367][ T42] dvb-usb: bulk message failed: -22 (2/0) [ 171.852460][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.853597][ T42] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 171.853691][ T42] usb 3-1: media controller created [ 171.920596][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 171.986645][ T42] usb 3-1: selecting invalid altsetting 7 [ 171.986667][ T42] cxusb: set interface failed [ 171.986680][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 172.084036][ T42] DVB: Unable to find symbol lgdt330x_attach() [ 172.084054][ T42] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 172.232208][ T42] rc_core: IR keymap rc-dvico-portable not found [ 172.232229][ T42] Registered IR keymap rc-empty [ 172.288459][ T42] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 172.307192][ T42] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input9 [ 172.328964][ T42] dvb-usb: schedule remote query interval to 100 msecs. [ 172.328990][ T42] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 172.722693][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 172.848974][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 173.113743][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 173.228939][ T31] dvb-usb: bulk message failed: -22 (1/0) [ 173.773134][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 173.886195][ T5723] dvb-usb: bulk message failed: -22 (1/0) [ 173.998088][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 174.106228][ T42] dvb-usb: bulk message failed: -22 (1/0) [ 174.214717][ T5730] usb 3-1: USB disconnect, device number 15 [ 174.259093][ T6391] netlink: 'syz.4.166': attribute type 1 has an invalid length. [ 174.779791][ T6402] netlink: 32 bytes leftover after parsing attributes in process `syz.4.168'. [ 174.849600][ T6402] sctp: [Deprecated]: syz.4.168 (pid 6402) Use of int in max_burst socket option deprecated. [ 174.849600][ T6402] Use struct sctp_assoc_value instead [ 175.468666][ T5730] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 178.379503][ T5587] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 178.626020][ T42] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 178.666040][ T5587] usb 3-1: device descriptor read/64, error -71 [ 178.855688][ T42] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 178.855729][ T42] usb 5-1: config 0 interface 0 has no altsetting 0 [ 178.855765][ T42] usb 5-1: New USB device found, idVendor=0853, idProduct=0148, bcdDevice= 0.00 [ 178.855790][ T42] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.933109][ T42] usb 5-1: config 0 descriptor?? [ 178.934916][ T6434] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 179.240824][ T42] hid (null): report_id 0 is invalid [ 179.300472][ T42] topre 0003:0853:0148.0002: unknown main item tag 0x0 [ 179.300536][ T42] topre 0003:0853:0148.0002: unknown main item tag 0x0 [ 179.300970][ T42] topre 0003:0853:0148.0002: unknown main item tag 0x0 [ 179.301005][ T42] topre 0003:0853:0148.0002: unknown main item tag 0x0 [ 179.301031][ T42] topre 0003:0853:0148.0002: unknown main item tag 0x0 [ 179.301402][ T42] topre 0003:0853:0148.0002: unknown main item tag 0x0 [ 179.301812][ T42] topre 0003:0853:0148.0002: unknown main item tag 0x0 [ 179.301908][ T42] topre 0003:0853:0148.0002: unknown main item tag 0x0 [ 179.301937][ T42] topre 0003:0853:0148.0002: unknown main item tag 0x0 [ 179.301964][ T42] topre 0003:0853:0148.0002: unknown main item tag 0x0 [ 179.304213][ T42] topre 0003:0853:0148.0002: item 0 1 0 8 parsing failed [ 179.394957][ T42] topre 0003:0853:0148.0002: probe with driver topre failed with error -22 [ 179.679866][ T42] usb 5-1: USB disconnect, device number 7 [ 180.136550][ T5587] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 180.368887][ T5587] usb 3-1: too many configurations: 51, using maximum allowed: 8 [ 180.439442][ T5587] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 180.439477][ T5587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.439500][ T5587] usb 3-1: Product: syz [ 180.439515][ T5587] usb 3-1: Manufacturer: syz [ 180.439530][ T5587] usb 3-1: SerialNumber: syz [ 180.803288][ T5587] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 180.803349][ T5587] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 180.803387][ T5587] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 182.218389][ T5587] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 182.568623][ T5587] usb 3-1: USB disconnect, device number 18 [ 182.852755][ T6458] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 194.533311][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.533383][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.792782][ T36] kauditd_printk_skb: 33 callbacks suppressed [ 194.792804][ T36] audit: type=1326 audit(1777978764.158:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db7e7cdd9 code=0x7ffc0000 [ 194.795708][ T36] audit: type=1326 audit(1777978764.188:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db7e7cdd9 code=0x7ffc0000 [ 194.795757][ T36] audit: type=1326 audit(1777978764.188:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db7e7cdd9 code=0x7ffc0000 [ 194.795812][ T36] audit: type=1326 audit(1777978764.188:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=74 compat=0 ip=0x7f3db7e7cdd9 code=0x7ffc0000 [ 194.905529][ T36] audit: type=1326 audit(1777978764.188:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db7e7cdd9 code=0x7ffc0000 [ 194.905591][ T36] audit: type=1326 audit(1777978764.188:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db7e7cdd9 code=0x7ffc0000 [ 194.905645][ T36] audit: type=1326 audit(1777978764.238:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db7e7cdd9 code=0x7ffc0000 [ 194.905692][ T36] audit: type=1326 audit(1777978764.238:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db7e7cdd9 code=0x7ffc0000 [ 194.905738][ T36] audit: type=1326 audit(1777978764.248:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3db7e3d60e code=0x7ffc0000 [ 195.014513][ T36] audit: type=1326 audit(1777978764.338:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6487 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3db7e7cdd9 code=0x7ffc0000 [ 195.169551][ T6491] ntfs3(loop1): try to read out of volume at offset 0x0 [ 195.901179][ T5610] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 195.978929][ T5610] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 195.982005][ T5610] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 196.003908][ T5610] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 196.022744][ T5610] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 199.117635][ T5610] Bluetooth: hci5: command tx timeout [ 199.732658][ T6537] overlayfs: overlapping lowerdir path [ 200.177931][ T6541] batman_adv: batadv0: Adding interface: ipvlan2 [ 200.177951][ T6541] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 200.177982][ T6541] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.178000][ T6541] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.178011][ T6541] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 200.795609][ T195] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.896066][ T5608] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 200.937782][ T5799] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 201.056127][ T5608] usb 5-1: Using ep0 maxpacket: 16 [ 201.064539][ T5608] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 201.064571][ T5608] usb 5-1: config 0 has no interface number 0 [ 201.092140][ T5799] usb 4-1: Using ep0 maxpacket: 8 [ 201.094544][ T5608] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 201.094612][ T5608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.094678][ T5608] usb 5-1: Product: syz [ 201.094694][ T5608] usb 5-1: Manufacturer: syz [ 201.094710][ T5608] usb 5-1: SerialNumber: syz [ 201.129920][ T5799] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.129947][ T5799] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 201.129998][ T5799] usb 4-1: too many endpoints for config 1 interface 1 altsetting 0: 255, using maximum allowed: 30 [ 201.130040][ T5799] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 201.130083][ T5799] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.148088][ T5610] Bluetooth: hci5: command tx timeout [ 201.203320][ T5799] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 201.203349][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.203367][ T5799] usb 4-1: Product: syz [ 201.203381][ T5799] usb 4-1: Manufacturer: syz [ 201.203396][ T5799] usb 4-1: SerialNumber: syz [ 201.295095][ T6556] nftables ruleset with unbound set [ 201.360566][ T5608] usb 5-1: config 0 descriptor?? [ 201.404657][ T5608] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 201.506061][ T31] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 201.539828][ T6552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.593820][ T6552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.651597][ T195] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.666282][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 201.675071][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 201.685822][ T31] usb 2-1: config 11 has an invalid interface number: 144 but max is 0 [ 201.686886][ T31] usb 2-1: config 11 has no interface number 0 [ 201.729822][ T5799] usb 4-1: unit 1 not found! [ 201.730916][ T31] usb 2-1: config 11 interface 144 altsetting 155 has an invalid descriptor for endpoint zero, skipping [ 201.730944][ T31] usb 2-1: config 11 interface 144 altsetting 155 has an endpoint descriptor with address 0xEA, changing to 0x8A [ 201.731027][ T31] usb 2-1: config 11 interface 144 altsetting 155 endpoint 0x8A has invalid wMaxPacketSize 0 [ 201.731049][ T31] usb 2-1: config 11 interface 144 altsetting 155 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.731075][ T31] usb 2-1: config 11 interface 144 has no altsetting 0 [ 201.733076][ T31] usb 2-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice= 0.03 [ 201.733101][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 201.733120][ T31] usb 2-1: SerialNumber: syz [ 202.316866][ T31] em28xx 2-1:11.144: New device @ 480 Mbps (1b80:e309, interface 144, class 144) [ 202.316912][ T31] em28xx 2-1:11.144: Video interface 144 found: [ 202.316930][ T31] em28xx 2-1:11.144: DVB interface 144 found: [ 202.318521][ T5799] usb 4-1: USB disconnect, device number 4 [ 202.584282][ T31] em28xx 2-1:11.144: unknown em28xx chip ID (0) [ 202.729451][ T195] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.089645][ T5608] gspca_spca1528: reg_w err -71 [ 203.089746][ T5608] spca1528 5-1:0.1: probe with driver spca1528 failed with error -71 [ 203.240940][ T5610] Bluetooth: hci5: command tx timeout [ 204.228151][ T5608] usb 5-1: USB disconnect, device number 8 [ 204.259975][ T31] em28xx 2-1:11.144: reading from i2c device at 0xa0 failed (error=-5) [ 204.260010][ T31] em28xx 2-1:11.144: board has no eeprom [ 204.315979][ T31] em28xx 2-1:11.144: Identified as Easy Cap Capture DC-60 (card=64) [ 204.316024][ T31] em28xx 2-1:11.144: analog set to bulk mode. [ 204.316040][ T31] em28xx 2-1:11.144: dvb set to bulk mode. [ 204.322616][ T42] em28xx 2-1:11.144: Registering V4L2 extension [ 204.455109][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.777662][ T42] em28xx 2-1:11.144: reading from i2c device at 0x4a failed (error=-5) [ 204.783934][ T42] em28xx 2-1:11.144: reading from i2c device at 0x48 failed (error=-5) [ 204.844560][ T42] em28xx 2-1:11.144: reading from i2c device at 0x42 failed (error=-5) [ 204.934270][ T42] em28xx 2-1:11.144: reading from i2c device at 0x40 failed (error=-5) [ 205.100007][ T42] em28xx 2-1:11.144: Config register raw data: 0xfffffffb [ 205.136910][ T42] em28xx 2-1:11.144: AC97 chip type couldn't be determined [ 205.137013][ T42] em28xx 2-1:11.144: No AC97 audio processor [ 205.585024][ T5610] Bluetooth: hci5: command tx timeout [ 205.624514][ T31] usb 2-1: USB disconnect, device number 6 [ 205.695586][ T31] em28xx 2-1:11.144: Disconnecting em28xx [ 205.734944][ T42] usb 2-1: Decoder not found [ 205.734967][ T42] em28xx 2-1:11.144: failed to create media graph [ 205.735035][ T42] em28xx 2-1:11.144: V4L2 device video103 deregistered [ 205.825331][ T42] em28xx 2-1:11.144: Remote control support is not available for this card. [ 205.825654][ T31] em28xx 2-1:11.144: Closing input extension [ 207.117354][ T6592] netlink: 48 bytes leftover after parsing attributes in process `syz.4.214'. [ 207.205775][ T6592] IPv6: addrconf: prefix option has invalid lifetime [ 207.249105][ T31] em28xx 2-1:11.144: Freeing device [ 207.524559][ T195] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.552275][ T6596] netlink: 'syz.1.215': attribute type 1 has an invalid length. [ 208.316394][ T6610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.217'. [ 208.316423][ T6610] netlink: 28 bytes leftover after parsing attributes in process `syz.2.217'. [ 209.337099][ T6618] netlink: 32 bytes leftover after parsing attributes in process `syz.3.222'. [ 209.423018][ T6623] FAULT_INJECTION: forcing a failure. [ 209.423018][ T6623] name failslab, interval 1, probability 0, space 0, times 0 [ 209.423058][ T6623] CPU: 0 UID: 0 PID: 6623 Comm: syz.4.224 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 209.423093][ T6623] Tainted: [L]=SOFTLOCKUP [ 209.423101][ T6623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 209.423114][ T6623] Call Trace: [ 209.423122][ T6623] [ 209.423132][ T6623] dump_stack_lvl+0xe8/0x150 [ 209.423166][ T6623] should_fail_ex+0x46b/0x600 [ 209.423210][ T6623] should_failslab+0xa8/0x100 [ 209.423240][ T6623] __kmalloc_noprof+0xdf/0x7b0 [ 209.423272][ T6623] ? nft_set_elem_expr_alloc+0x1a5/0x5f0 [ 209.423307][ T6623] nft_set_elem_expr_alloc+0x1a5/0x5f0 [ 209.423337][ T6623] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 209.423387][ T6623] ? nft_pernet+0x23/0x240 [ 209.423417][ T6623] nft_set_expr_alloc+0x68/0x760 [ 209.423452][ T6623] nf_tables_newset+0xee6/0x2580 [ 209.423499][ T6623] ? __pfx_nf_tables_newset+0x10/0x10 [ 209.423558][ T6623] ? __nla_parse+0x40/0x60 [ 209.423589][ T6623] nfnetlink_rcv+0x1247/0x27b0 [ 209.423653][ T6623] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 209.423697][ T6623] ? ref_tracker_free+0x673/0x820 [ 209.423755][ T6623] ? __netlink_deliver_tap+0x807/0x850 [ 209.423795][ T6623] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.423821][ T6623] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.423855][ T6623] netlink_unicast+0x780/0x920 [ 209.423892][ T6623] netlink_sendmsg+0x813/0xb40 [ 209.423930][ T6623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.423961][ T6623] ? unwind_get_return_address+0x4d/0x90 [ 209.423996][ T6623] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 209.424024][ T6623] ____sys_sendmsg+0x94c/0x9c0 [ 209.424061][ T6623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.424101][ T6623] ? import_iovec+0x73/0xa0 [ 209.424131][ T6623] ___sys_sendmsg+0x2a5/0x360 [ 209.424158][ T6623] ? __lock_acquire+0x6b5/0x2cf0 [ 209.424195][ T6623] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.424271][ T6623] ? __fget_files+0x2a/0x420 [ 209.424292][ T6623] ? __fget_files+0x3a6/0x420 [ 209.424325][ T6623] __x64_sys_sendmsg+0x1c3/0x2a0 [ 209.424358][ T6623] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.424400][ T6623] ? __pfx_ksys_write+0x10/0x10 [ 209.424436][ T6623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.424462][ T6623] do_syscall_64+0x15f/0xf80 [ 209.424487][ T6623] ? trace_irq_disable+0x3b/0x140 [ 209.424513][ T6623] ? clear_bhb_loop+0x40/0x90 [ 209.424542][ T6623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.424565][ T6623] RIP: 0033:0x7f20cdfacdd9 [ 209.424586][ T6623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.424604][ T6623] RSP: 002b:00007f20cc206028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.424628][ T6623] RAX: ffffffffffffffda RBX: 00007f20ce225fa0 RCX: 00007f20cdfacdd9 [ 209.424644][ T6623] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 209.424657][ T6623] RBP: 00007f20cc206090 R08: 0000000000000000 R09: 0000000000000000 [ 209.424670][ T6623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.424683][ T6623] R13: 00007f20ce226038 R14: 00007f20ce225fa0 R15: 00007ffede9425f8 [ 209.424719][ T6623] [ 210.155077][ T6640] netlink: 'syz.4.229': attribute type 1 has an invalid length. [ 210.254976][ T36] kauditd_printk_skb: 127 callbacks suppressed [ 210.254998][ T36] audit: type=1326 audit(1777978779.628:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6629 comm="syz.2.226" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f68c217cdd9 code=0x0 [ 210.387551][ T6637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 213.546026][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.234'. [ 213.548983][ T6673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.234'. [ 214.759687][ T6684] ptrace attach of "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6685] was attempted by "ci-upstream-kasan-gce-smack-root/syz-executor exec"[6684] [ 215.073030][ T195] bridge_slave_1: left allmulticast mode [ 215.073161][ T195] bridge_slave_1: left promiscuous mode [ 215.101823][ T195] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.288101][ T6695] FAULT_INJECTION: forcing a failure. [ 215.288101][ T6695] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.288133][ T6695] CPU: 0 UID: 0 PID: 6695 Comm: syz.2.238 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 215.288157][ T6695] Tainted: [L]=SOFTLOCKUP [ 215.288163][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 215.288173][ T6695] Call Trace: [ 215.288180][ T6695] [ 215.288187][ T6695] dump_stack_lvl+0xe8/0x150 [ 215.288213][ T6695] should_fail_ex+0x46b/0x600 [ 215.288245][ T6695] _copy_to_user+0x31/0xb0 [ 215.288267][ T6695] simple_read_from_buffer+0xe1/0x170 [ 215.288302][ T6695] proc_fail_nth_read+0x1be/0x230 [ 215.288335][ T6695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.288366][ T6695] ? rw_verify_area+0x2ac/0x4e0 [ 215.288385][ T6695] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 215.288414][ T6695] vfs_read+0x212/0xa80 [ 215.288441][ T6695] ? __pfx_vfs_read+0x10/0x10 [ 215.288463][ T6695] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 215.288486][ T6695] ? lockdep_hardirqs_on+0x7a/0x110 [ 215.288506][ T6695] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 215.288527][ T6695] ? mutex_lock_nested+0x152/0x1d0 [ 215.288551][ T6695] ? fdget_pos+0x252/0x320 [ 215.288576][ T6695] ksys_read+0x156/0x270 [ 215.288598][ T6695] ? __pfx_ksys_read+0x10/0x10 [ 215.288616][ T6695] ? __pfx_do_pagemap_cmd+0x10/0x10 [ 215.288647][ T6695] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.288667][ T6695] do_syscall_64+0x15f/0xf80 [ 215.288686][ T6695] ? trace_irq_disable+0x3b/0x140 [ 215.288707][ T6695] ? clear_bhb_loop+0x40/0x90 [ 215.288739][ T6695] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.288757][ T6695] RIP: 0033:0x7f68c213d60e [ 215.288774][ T6695] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 215.288789][ T6695] RSP: 002b:00007f68c03d5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 215.288808][ T6695] RAX: ffffffffffffffda RBX: 00007f68c03d66c0 RCX: 00007f68c213d60e [ 215.288827][ T6695] RDX: 000000000000000f RSI: 00007f68c03d60a0 RDI: 0000000000000004 [ 215.288838][ T6695] RBP: 00007f68c03d6090 R08: 0000000000000000 R09: 0000000000000000 [ 215.288849][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.288860][ T6695] R13: 00007f68c23f6038 R14: 00007f68c23f5fa0 R15: 00007fff2371e548 [ 215.288891][ T6695] [ 215.573771][ T6697] netlink: 'syz.4.239': attribute type 1 has an invalid length. [ 215.712539][ T195] bridge_slave_0: left allmulticast mode [ 215.712576][ T195] bridge_slave_0: left promiscuous mode [ 215.712825][ T195] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.441876][ T6707] FAULT_INJECTION: forcing a failure. [ 216.441876][ T6707] name failslab, interval 1, probability 0, space 0, times 0 [ 216.441915][ T6707] CPU: 1 UID: 0 PID: 6707 Comm: syz.3.240 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 216.441945][ T6707] Tainted: [L]=SOFTLOCKUP [ 216.441953][ T6707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 216.441965][ T6707] Call Trace: [ 216.441973][ T6707] [ 216.441983][ T6707] dump_stack_lvl+0xe8/0x150 [ 216.442015][ T6707] should_fail_ex+0x46b/0x600 [ 216.442057][ T6707] should_failslab+0xa8/0x100 [ 216.442087][ T6707] kmem_cache_alloc_noprof+0x87/0x680 [ 216.442111][ T6707] ? locks_get_lock_context+0x33f/0x5b0 [ 216.442136][ T6707] ? posix_lock_inode+0x23f/0x3d90 [ 216.442163][ T6707] posix_lock_inode+0x23f/0x3d90 [ 216.442184][ T6707] ? smk_tskacc+0x311/0x3a0 [ 216.442215][ T6707] ? smack_file_lock+0x1e4/0x280 [ 216.442241][ T6707] ? __pfx_smack_file_lock+0x10/0x10 [ 216.442278][ T6707] ? __pfx_posix_lock_inode+0x10/0x10 [ 216.442312][ T6707] fcntl_setlk+0x9de/0x1090 [ 216.442358][ T6707] ? __pfx_fcntl_setlk+0x10/0x10 [ 216.442400][ T6707] do_fcntl+0x981/0x19e0 [ 216.442431][ T6707] ? smack_file_fcntl+0x27a/0x320 [ 216.442458][ T6707] ? __pfx_do_fcntl+0x10/0x10 [ 216.442484][ T6707] ? __pfx_smack_file_fcntl+0x10/0x10 [ 216.442523][ T6707] ? __fget_files+0x2a/0x420 [ 216.442552][ T6707] ? bpf_lsm_file_fcntl+0x9/0x20 [ 216.442584][ T6707] __se_sys_fcntl+0xcb/0x160 [ 216.442609][ T6707] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.442635][ T6707] do_syscall_64+0x15f/0xf80 [ 216.442667][ T6707] ? trace_irq_disable+0x3b/0x140 [ 216.442694][ T6707] ? clear_bhb_loop+0x40/0x90 [ 216.442723][ T6707] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.442745][ T6707] RIP: 0033:0x7f8f11fdcdd9 [ 216.442766][ T6707] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 216.442784][ T6707] RSP: 002b:00007f8f101ec028 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 216.442807][ T6707] RAX: ffffffffffffffda RBX: 00007f8f12256180 RCX: 00007f8f11fdcdd9 [ 216.442823][ T6707] RDX: 00002000000000c0 RSI: 0000000000000007 RDI: 0000000000000005 [ 216.442836][ T6707] RBP: 00007f8f101ec090 R08: 0000000000000000 R09: 0000000000000000 [ 216.442850][ T6707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.442862][ T6707] R13: 00007f8f12256218 R14: 00007f8f12256180 R15: 00007ffcf43944b8 [ 216.442898][ T6707] [ 217.108871][ T5621] Bluetooth: hci4: command 0x2016 tx timeout [ 217.108911][ T5621] Bluetooth: hci0: command 0x0406 tx timeout [ 217.108938][ T5621] Bluetooth: hci2: command 0x0405 tx timeout [ 217.871522][ T832] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 218.052327][ T832] usb 4-1: Using ep0 maxpacket: 16 [ 218.054743][ T832] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 218.054770][ T832] usb 4-1: config 0 has no interface number 0 [ 218.085173][ T832] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 218.085207][ T832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.085229][ T832] usb 4-1: Product: syz [ 218.085245][ T832] usb 4-1: Manufacturer: syz [ 218.085260][ T832] usb 4-1: SerialNumber: syz [ 218.185065][ T6717] netlink: 8 bytes leftover after parsing attributes in process `syz.2.246'. [ 218.229850][ T832] usb 4-1: config 0 descriptor?? [ 218.269717][ T832] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 218.557297][ T6721] FAULT_INJECTION: forcing a failure. [ 218.557297][ T6721] name failslab, interval 1, probability 0, space 0, times 0 [ 218.557335][ T6721] CPU: 1 UID: 0 PID: 6721 Comm: syz.2.247 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 218.557363][ T6721] Tainted: [L]=SOFTLOCKUP [ 218.557370][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.557381][ T6721] Call Trace: [ 218.557388][ T6721] [ 218.557396][ T6721] dump_stack_lvl+0xe8/0x150 [ 218.557427][ T6721] should_fail_ex+0x46b/0x600 [ 218.557468][ T6721] should_failslab+0xa8/0x100 [ 218.557497][ T6721] __kmalloc_cache_noprof+0x84/0x690 [ 218.557523][ T6721] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 218.557555][ T6721] wakeup_source_sysfs_add+0x57/0x2c0 [ 218.557590][ T6721] wakeup_source_register+0x18a/0x390 [ 218.557619][ T6721] ep_modify+0x2e1/0xa50 [ 218.557648][ T6721] ? __pfx_ep_modify+0x10/0x10 [ 218.557677][ T6721] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 218.557704][ T6721] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 218.557729][ T6721] ? mutex_lock_nested+0x152/0x1d0 [ 218.557758][ T6721] ? do_epoll_ctl+0x3d2/0xe90 [ 218.557782][ T6721] do_epoll_ctl+0x6be/0xe90 [ 218.557815][ T6721] __x64_sys_epoll_ctl+0x165/0x1b0 [ 218.557842][ T6721] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 218.557876][ T6721] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.557900][ T6721] do_syscall_64+0x15f/0xf80 [ 218.557924][ T6721] ? clear_bhb_loop+0x40/0x90 [ 218.557950][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.557973][ T6721] RIP: 0033:0x7f68c217cdd9 [ 218.557993][ T6721] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.558009][ T6721] RSP: 002b:00007f68c03d6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 218.558030][ T6721] RAX: ffffffffffffffda RBX: 00007f68c23f5fa0 RCX: 00007f68c217cdd9 [ 218.558045][ T6721] RDX: 0000000000000004 RSI: 0000000000000003 RDI: 0000000000000003 [ 218.558057][ T6721] RBP: 00007f68c03d6090 R08: 0000000000000000 R09: 0000000000000000 [ 218.558069][ T6721] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 218.558082][ T6721] R13: 00007f68c23f6038 R14: 00007f68c23f5fa0 R15: 00007fff2371e548 [ 218.558116][ T6721] [ 221.836707][ T832] gspca_spca1528: reg_w err -110 [ 221.836809][ T832] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110 [ 222.442121][ T42] usb 4-1: USB disconnect, device number 5 [ 222.659491][ T195] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.962546][ T195] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.367924][ T195] bond0 (unregistering): Released all slaves [ 223.497758][ T195] bond1 (unregistering): Released all slaves [ 224.142249][ T5261] 8021q: adding VLAN 0 to HW filter on device eth1 [ 224.477787][ T6498] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.483590][ T6498] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.483824][ T6498] bridge_slave_0: entered allmulticast mode [ 224.519158][ T6498] bridge_slave_0: entered promiscuous mode [ 224.536657][ T6498] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.537514][ T6498] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.537738][ T6498] bridge_slave_1: entered allmulticast mode [ 224.543729][ T6498] bridge_slave_1: entered promiscuous mode [ 224.636928][ T6498] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.641319][ T6498] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.707351][ T6498] team0: Port device team_slave_0 added [ 224.715478][ T6498] team0: Port device team_slave_1 added [ 224.778042][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.778061][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.778089][ T6498] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.780554][ T6498] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.780569][ T6498] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 224.780598][ T6498] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.938848][ T6498] hsr_slave_0: entered promiscuous mode [ 224.940240][ T6498] hsr_slave_1: entered promiscuous mode [ 224.941206][ T6498] debugfs: 'hsr0' already exists in 'hsr' [ 224.941230][ T6498] Cannot create hsr debugfs directory [ 226.154734][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.168649][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.175729][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.266167][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.268809][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.664831][ T6762] FAULT_INJECTION: forcing a failure. [ 227.664831][ T6762] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 227.664944][ T6762] CPU: 0 UID: 0 PID: 6762 Comm: syz.4.257 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 227.664975][ T6762] Tainted: [L]=SOFTLOCKUP [ 227.664983][ T6762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 227.664996][ T6762] Call Trace: [ 227.665004][ T6762] [ 227.665014][ T6762] dump_stack_lvl+0xe8/0x150 [ 227.665047][ T6762] should_fail_ex+0x46b/0x600 [ 227.665088][ T6762] _copy_from_user+0x2d/0xb0 [ 227.665116][ T6762] inet6_ioctl+0x1ac/0x2e0 [ 227.665141][ T6762] ? __pfx_inet6_ioctl+0x10/0x10 [ 227.665176][ T6762] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 227.665212][ T6762] sock_do_ioctl+0x101/0x320 [ 227.665275][ T6762] ? __pfx_sock_do_ioctl+0x10/0x10 [ 227.665312][ T6762] ? __asan_memset+0x22/0x50 [ 227.665346][ T6762] ? smack_file_ioctl+0x263/0x360 [ 227.665381][ T6762] sock_ioctl+0x5c9/0x7f0 [ 227.665417][ T6762] ? __pfx_sock_ioctl+0x10/0x10 [ 227.665457][ T6762] ? __fget_files+0x2a/0x420 [ 227.665477][ T6762] ? __fget_files+0x3a6/0x420 [ 227.665497][ T6762] ? __fget_files+0x2a/0x420 [ 227.665522][ T6762] ? bpf_lsm_file_ioctl+0x9/0x20 [ 227.665549][ T6762] ? __pfx_sock_ioctl+0x10/0x10 [ 227.665582][ T6762] __se_sys_ioctl+0xff/0x170 [ 227.665612][ T6762] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.665637][ T6762] do_syscall_64+0x15f/0xf80 [ 227.665664][ T6762] ? clear_bhb_loop+0x40/0x90 [ 227.665693][ T6762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.665716][ T6762] RIP: 0033:0x7f20cdfacdd9 [ 227.665737][ T6762] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.665755][ T6762] RSP: 002b:00007f20cc1c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 227.665778][ T6762] RAX: ffffffffffffffda RBX: 00007f20ce226180 RCX: 00007f20cdfacdd9 [ 227.665794][ T6762] RDX: 00002000000005c0 RSI: 000000000000890b RDI: 0000000000000005 [ 227.665808][ T6762] RBP: 00007f20cc1c4090 R08: 0000000000000000 R09: 0000000000000000 [ 227.665826][ T6762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.665838][ T6762] R13: 00007f20ce226218 R14: 00007f20ce226180 R15: 00007ffede9425f8 [ 227.665871][ T6762] [ 229.642754][ T5610] Bluetooth: hci3: command tx timeout [ 230.584479][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.2.253'. [ 231.553638][ T5261] 8021q: adding VLAN 0 to HW filter on device eth2 [ 231.743695][ T5610] Bluetooth: hci3: command tx timeout [ 231.959720][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.264'. [ 232.014941][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.264'. [ 232.146078][ T6802] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.179254][ T6802] netlink: 32 bytes leftover after parsing attributes in process `syz.3.264'. [ 232.712987][ T6806] netlink: 28 bytes leftover after parsing attributes in process `syz.3.266'. [ 233.786655][ T5610] Bluetooth: hci3: command tx timeout [ 234.156055][ T5608] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 234.342565][ T5608] usb 5-1: unable to get BOS descriptor or descriptor too short [ 234.343347][ T5608] usb 5-1: not running at top speed; connect to a high speed hub [ 234.359094][ T5608] usb 5-1: config 6 has an invalid interface number: 223 but max is 0 [ 234.359124][ T5608] usb 5-1: config 6 has no interface number 0 [ 234.359170][ T5608] usb 5-1: config 6 interface 223 altsetting 199 endpoint 0x6 has invalid wMaxPacketSize 0 [ 234.359194][ T5608] usb 5-1: config 6 interface 223 altsetting 199 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 234.359222][ T5608] usb 5-1: config 6 interface 223 altsetting 199 has an endpoint descriptor with address 0xEC, changing to 0x8C [ 234.359248][ T5608] usb 5-1: config 6 interface 223 altsetting 199 endpoint 0x8C has invalid maxpacket 37112, setting to 64 [ 234.359276][ T5608] usb 5-1: config 6 interface 223 altsetting 199 has a duplicate endpoint with address 0x6, skipping [ 234.359298][ T5608] usb 5-1: config 6 interface 223 altsetting 199 has an invalid descriptor for endpoint zero, skipping [ 234.359321][ T5608] usb 5-1: config 6 interface 223 altsetting 199 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 234.359347][ T5608] usb 5-1: config 6 interface 223 has no altsetting 0 [ 234.477622][ T5608] usb 5-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice=b4.5e [ 234.477654][ T5608] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.477675][ T5608] usb 5-1: Product: syz [ 234.477689][ T5608] usb 5-1: Manufacturer: syz [ 234.477704][ T5608] usb 5-1: SerialNumber: syz [ 234.824653][ T5608] usb 5-1: USB disconnect, device number 9 [ 235.320337][ T195] hsr_slave_0: left promiscuous mode [ 235.362210][ T195] hsr_slave_1: left promiscuous mode [ 235.371631][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.372021][ T195] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.875242][ T195] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.875270][ T195] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.875372][ T5610] Bluetooth: hci3: command tx timeout [ 236.417823][ T195] veth1_macvtap: left promiscuous mode [ 236.420442][ T195] veth0_macvtap: left promiscuous mode [ 236.420750][ T195] veth1_vlan: left promiscuous mode [ 236.421100][ T195] veth0_vlan: left promiscuous mode [ 236.615994][ T5608] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 236.795983][ T5608] usb 3-1: Using ep0 maxpacket: 8 [ 236.797916][ T5608] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.797951][ T5608] usb 3-1: config 0 interface 0 altsetting 144 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.797968][ T5608] usb 3-1: config 0 interface 0 has no altsetting 0 [ 236.797992][ T5608] usb 3-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 236.798022][ T5608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.805972][ T5608] usb 3-1: config 0 descriptor?? [ 237.115675][ T5608] hid_parser_main: 44 callbacks suppressed [ 237.115726][ T5608] smartjoyplus 0003:6666:8804.0003: unknown main item tag 0x2 [ 237.115760][ T5608] smartjoyplus 0003:6666:8804.0003: unknown main item tag 0x5 [ 237.176320][ T5608] smartjoyplus 0003:6666:8804.0003: hidraw0: USB HID v0.00 Device [HID 6666:8804] on usb-dummy_hcd.2-1/input0 [ 237.176356][ T5608] smartjoyplus 0003:6666:8804.0003: Force feedback for SmartJoy PLUS PS2/USB adapter [ 237.301135][ T5608] usb 3-1: USB disconnect, device number 19 [ 237.770256][ T6862] netlink: 1 bytes leftover after parsing attributes in process `syz.3.279'. [ 241.788190][ T195] team0 (unregistering): Port device team_slave_1 removed [ 241.847354][ T195] team0 (unregistering): Port device team_slave_0 removed [ 242.254937][ T5261] 8021q: adding VLAN 0 to HW filter on device eth3 [ 242.281942][ T6882] netlink: 'syz.2.287': attribute type 9 has an invalid length. [ 242.639771][ T6892] FAULT_INJECTION: forcing a failure. [ 242.639771][ T6892] name failslab, interval 1, probability 0, space 0, times 0 [ 242.639837][ T6892] CPU: 1 UID: 0 PID: 6892 Comm: syz.2.288 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 242.639863][ T6892] Tainted: [L]=SOFTLOCKUP [ 242.639869][ T6892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 242.639886][ T6892] Call Trace: [ 242.639894][ T6892] [ 242.639903][ T6892] dump_stack_lvl+0xe8/0x150 [ 242.639937][ T6892] should_fail_ex+0x46b/0x600 [ 242.639979][ T6892] should_failslab+0xa8/0x100 [ 242.640009][ T6892] kmem_cache_alloc_noprof+0x87/0x680 [ 242.640030][ T6892] ? rcu_is_watching+0x15/0xb0 [ 242.640062][ T6892] ? security_file_alloc+0x34/0x310 [ 242.640098][ T6892] security_file_alloc+0x34/0x310 [ 242.640130][ T6892] init_file+0x96/0x2d0 [ 242.640173][ T6892] alloc_empty_file+0x74/0x1d0 [ 242.640209][ T6892] dentry_open_nonotify+0x1f/0xc0 [ 242.640244][ T6892] fanotify_read+0xade/0x2bd0 [ 242.640278][ T6892] ? __pfx_css_rstat_updated+0x10/0x10 [ 242.640339][ T6892] ? __pfx_fanotify_read+0x10/0x10 [ 242.640375][ T6892] ? kvm_sched_clock_read+0x11/0x20 [ 242.640397][ T6892] ? sched_clock+0x3f/0x60 [ 242.640422][ T6892] ? finish_task_switch+0x15f/0xbe0 [ 242.640455][ T6892] ? lock_acquire+0x106/0x350 [ 242.640493][ T6892] ? __lock_acquire+0x6b5/0x2cf0 [ 242.640529][ T6892] ? __pfx_woken_wake_function+0x10/0x10 [ 242.640560][ T6892] ? finish_task_switch+0x41f/0xbe0 [ 242.640600][ T6892] ? rw_verify_area+0x2ac/0x4e0 [ 242.640624][ T6892] ? __pfx_fanotify_read+0x10/0x10 [ 242.640661][ T6892] vfs_read+0x212/0xa80 [ 242.640694][ T6892] ? __pfx_vfs_read+0x10/0x10 [ 242.640721][ T6892] ? __fget_files+0x2a/0x420 [ 242.640745][ T6892] ? __fget_files+0x2a/0x420 [ 242.640764][ T6892] ? __fget_files+0x3a6/0x420 [ 242.640783][ T6892] ? __fget_files+0x2a/0x420 [ 242.640814][ T6892] ksys_read+0x156/0x270 [ 242.640842][ T6892] ? __pfx_ksys_read+0x10/0x10 [ 242.640876][ T6892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.640901][ T6892] do_syscall_64+0x15f/0xf80 [ 242.640927][ T6892] ? clear_bhb_loop+0x40/0x90 [ 242.640955][ T6892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.640977][ T6892] RIP: 0033:0x7f68c217cdd9 [ 242.640999][ T6892] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.641017][ T6892] RSP: 002b:00007f68c03b5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 242.641039][ T6892] RAX: ffffffffffffffda RBX: 00007f68c23f6090 RCX: 00007f68c217cdd9 [ 242.641055][ T6892] RDX: 0000000000002020 RSI: 0000200000002300 RDI: 0000000000000006 [ 242.641069][ T6892] RBP: 00007f68c03b5090 R08: 0000000000000000 R09: 0000000000000000 [ 242.641082][ T6892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.641095][ T6892] R13: 00007f68c23f6128 R14: 00007f68c23f6090 R15: 00007fff2371e548 [ 242.641130][ T6892] [ 243.388491][ T6895] netlink: 44 bytes leftover after parsing attributes in process `syz.3.289'. [ 243.467391][ T5608] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 243.537444][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.290'. [ 243.641601][ T5608] usb 3-1: unable to get BOS descriptor or descriptor too short [ 243.642387][ T5608] usb 3-1: not running at top speed; connect to a high speed hub [ 243.647121][ T5608] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 243.647153][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.647174][ T5608] usb 3-1: Product: syz [ 243.647189][ T5608] usb 3-1: Manufacturer: syz [ 243.647204][ T5608] usb 3-1: SerialNumber: syz [ 244.165309][ T5608] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 244.235805][ T5608] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 244.236680][ T5608] usb 3-1: unit 5 not found! [ 244.852453][ T5608] usb 3-1: USB disconnect, device number 20 [ 244.881217][ T6498] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 245.388112][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.4.293'. [ 245.770125][ T6498] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 245.792253][ T6913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.293'. [ 245.792383][ T6913] netlink: 28 bytes leftover after parsing attributes in process `syz.4.293'. [ 246.448090][ T5925] udevd[5925]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.491026][ T6498] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 246.637601][ T6498] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 246.758190][ T6498] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 246.878649][ T6498] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 246.922976][ T6498] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 247.025209][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.296'. [ 247.091740][ T6498] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.116921][ T6923] ip6gretap0: entered promiscuous mode [ 247.121312][ T6923] macvtap1: entered promiscuous mode [ 247.121567][ T6923] macvtap1: entered allmulticast mode [ 247.123515][ T6923] ip6gretap0: entered allmulticast mode [ 247.326215][ T42] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 247.488098][ T42] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 247.488126][ T42] usb 5-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 247.488145][ T42] usb 5-1: Product: syz [ 247.488158][ T42] usb 5-1: SerialNumber: syz [ 247.577831][ T42] usb 5-1: config 0 descriptor?? [ 247.804206][ T42] ldusb 5-1:0.0: Interrupt in endpoint not found [ 247.989080][ T42] usb 5-1: USB disconnect, device number 10 [ 248.063075][ T5925] udevd[5925]: setting owner of /dev/bus/usb/005/010 to uid=0, gid=0 failed: No such file or directory [ 248.976661][ T6755] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.976799][ T6755] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.977039][ T6755] bridge_slave_0: entered allmulticast mode [ 249.021644][ T6755] bridge_slave_0: entered promiscuous mode [ 249.074244][ T6755] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.074376][ T6755] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.074606][ T6755] bridge_slave_1: entered allmulticast mode [ 249.110797][ T6755] bridge_slave_1: entered promiscuous mode [ 249.127562][ T5261] 8021q: adding VLAN 0 to HW filter on device eth4 [ 249.263143][ T6962] FAULT_INJECTION: forcing a failure. [ 249.263143][ T6962] name failslab, interval 1, probability 0, space 0, times 0 [ 249.263182][ T6962] CPU: 1 UID: 0 PID: 6962 Comm: syz.3.301 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 249.263211][ T6962] Tainted: [L]=SOFTLOCKUP [ 249.263218][ T6962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 249.263229][ T6962] Call Trace: [ 249.263237][ T6962] [ 249.263246][ T6962] dump_stack_lvl+0xe8/0x150 [ 249.263277][ T6962] should_fail_ex+0x46b/0x600 [ 249.263321][ T6962] should_failslab+0xa8/0x100 [ 249.263356][ T6962] kmem_cache_alloc_noprof+0x87/0x680 [ 249.263408][ T6962] ? __anon_vma_prepare+0xcb/0x4a0 [ 249.263438][ T6962] __anon_vma_prepare+0xcb/0x4a0 [ 249.263463][ T6962] ? __pte_alloc+0x15e/0x1a0 [ 249.263498][ T6962] do_pte_missing+0x1d67/0x2950 [ 249.263534][ T6962] ? mt_find+0x186/0x630 [ 249.263568][ T6962] handle_mm_fault+0xd0a/0x13c0 [ 249.263623][ T6962] ? mt_find+0x186/0x630 [ 249.263650][ T6962] ? handle_mm_fault+0xe7/0x13c0 [ 249.263677][ T6962] ? __pfx_handle_mm_fault+0x10/0x10 [ 249.263728][ T6962] __get_user_pages+0x168f/0x2570 [ 249.263784][ T6962] populate_vma_page_range+0x2be/0x3c0 [ 249.263811][ T6962] ? __pfx_populate_vma_page_range+0x10/0x10 [ 249.263834][ T6962] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.263862][ T6962] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 249.263895][ T6962] __mm_populate+0x25f/0x390 [ 249.263921][ T6962] ? __pfx___mm_populate+0x10/0x10 [ 249.263944][ T6962] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 249.263970][ T6962] ? lockdep_hardirqs_on+0x7a/0x110 [ 249.263993][ T6962] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 249.264022][ T6962] do_mlock+0x646/0x750 [ 249.264064][ T6962] ? __pfx_do_mlock+0x10/0x10 [ 249.264097][ T6962] ? fput+0xa0/0xd0 [ 249.264130][ T6962] ? ksys_write+0x248/0x270 [ 249.264160][ T6962] ? __pfx_ksys_write+0x10/0x10 [ 249.264191][ T6962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.264217][ T6962] __x64_sys_mlock+0x60/0x70 [ 249.264249][ T6962] do_syscall_64+0x15f/0xf80 [ 249.264273][ T6962] ? trace_irq_disable+0x3b/0x140 [ 249.264300][ T6962] ? clear_bhb_loop+0x40/0x90 [ 249.264327][ T6962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.264348][ T6962] RIP: 0033:0x7f8f11fdcdd9 [ 249.264368][ T6962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 249.264386][ T6962] RSP: 002b:00007f8f1022e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000095 [ 249.264409][ T6962] RAX: ffffffffffffffda RBX: 00007f8f12255fa0 RCX: 00007f8f11fdcdd9 [ 249.264426][ T6962] RDX: 0000000000000000 RSI: 0000000000003000 RDI: 0000200000ffd000 [ 249.264440][ T6962] RBP: 00007f8f1022e090 R08: 0000000000000000 R09: 0000000000000000 [ 249.264454][ T6962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.264467][ T6962] R13: 00007f8f12256038 R14: 00007f8f12255fa0 R15: 00007ffcf43944b8 [ 249.264503][ T6962] [ 249.636730][ T6755] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.658043][ T6755] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.794204][ T6755] team0: Port device team_slave_0 added [ 249.818229][ T6755] team0: Port device team_slave_1 added [ 251.129867][ T6972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.304'. [ 251.415568][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.415588][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.415623][ T6755] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.697445][ T6755] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.697466][ T6755] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.697499][ T6755] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.553693][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 252.864285][ T1127] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.867549][ T42] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 253.057936][ T42] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 253.057971][ T42] usb 3-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 253.057994][ T42] usb 3-1: Product: syz [ 253.058010][ T42] usb 3-1: SerialNumber: syz [ 253.088243][ T42] usb 3-1: config 0 descriptor?? [ 253.186930][ T6989] ip6gretap0: entered promiscuous mode [ 253.193571][ T6989] macvtap1: entered promiscuous mode [ 253.194006][ T6989] macvtap1: entered allmulticast mode [ 253.194028][ T6989] ip6gretap0: entered allmulticast mode [ 253.428871][ T42] ldusb 3-1:0.0: Interrupt in endpoint not found [ 253.438759][ T42] usb 3-1: USB disconnect, device number 21 [ 253.462040][ T36] audit: type=1326 audit(1777978822.858:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6999 comm="syz.3.312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 253.462099][ T36] audit: type=1326 audit(1777978822.858:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6999 comm="syz.3.312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 253.463993][ T36] audit: type=1326 audit(1777978822.858:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6999 comm="syz.3.312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 253.464047][ T36] audit: type=1326 audit(1777978822.858:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6999 comm="syz.3.312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 253.464100][ T36] audit: type=1326 audit(1777978822.858:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6999 comm="syz.3.312" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 253.838506][ T7004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 254.351316][ T1127] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.357380][ T6755] hsr_slave_0: entered promiscuous mode [ 255.358721][ T6755] hsr_slave_1: entered promiscuous mode [ 255.359726][ T6755] debugfs: 'hsr0' already exists in 'hsr' [ 255.359751][ T6755] Cannot create hsr debugfs directory [ 255.973243][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.003343][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.240413][ T4916] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.274792][ T4916] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.293794][ T4916] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 256.315735][ T4916] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 256.325339][ T4916] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.346245][ T1127] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.130749][ T1127] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.502759][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.325'. [ 258.755940][ T5610] Bluetooth: hci1: command tx timeout [ 258.986042][ T5799] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 259.037626][ T7062] ip6gretap0: entered promiscuous mode [ 259.042677][ T7062] macvtap1: entered promiscuous mode [ 259.042974][ T7062] macvtap1: entered allmulticast mode [ 259.042999][ T7062] ip6gretap0: entered allmulticast mode [ 259.126238][ T820] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 259.165204][ T5799] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 259.165229][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 259.165244][ T5799] usb 4-1: Product: syz [ 259.165254][ T5799] usb 4-1: SerialNumber: syz [ 259.203840][ T5799] usb 4-1: config 0 descriptor?? [ 259.289266][ T820] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 259.289296][ T820] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.329753][ T820] usb 3-1: config 0 descriptor?? [ 259.357366][ T820] cp210x 3-1:0.0: cp210x converter detected [ 259.446588][ T5799] ldusb 4-1:0.0: Interrupt in endpoint not found [ 259.506508][ T5799] usb 4-1: USB disconnect, device number 6 [ 259.630449][ T820] usb 3-1: cp210x converter now attached to ttyUSB0 [ 260.825970][ T5610] Bluetooth: hci1: command tx timeout [ 260.970683][ T7096] netlink: 24 bytes leftover after parsing attributes in process `syz.3.335'. [ 261.435086][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 261.435232][ T7098] netlink: 28 bytes leftover after parsing attributes in process `syz.3.335'. [ 261.882026][ T5799] usb 3-1: USB disconnect, device number 22 [ 262.161995][ T7103] netlink: 'syz.2.338': attribute type 2 has an invalid length. [ 262.236256][ T5799] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 262.248770][ T5799] cp210x 3-1:0.0: device disconnected [ 262.916280][ T5610] Bluetooth: hci1: command tx timeout [ 264.126164][ T5799] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 264.266713][ T5799] usb 3-1: device descriptor read/64, error -71 [ 264.523865][ T5799] usb 3-1: new low-speed USB device number 24 using dummy_hcd [ 264.666154][ T5799] usb 3-1: device descriptor read/64, error -71 [ 264.834458][ T5799] usb usb3-port1: attempt power cycle [ 265.007277][ T5610] Bluetooth: hci1: command tx timeout [ 265.208563][ T5799] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 265.485750][ T5799] usb 3-1: device not accepting address 25, error -71 [ 265.568839][ T1127] bridge_slave_1: left allmulticast mode [ 265.568867][ T1127] bridge_slave_1: left promiscuous mode [ 265.569067][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.667760][ T1127] bridge_slave_0: left allmulticast mode [ 265.667799][ T1127] bridge_slave_0: left promiscuous mode [ 265.669149][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.484613][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.502028][ T7141] xt_l2tp: invalid flags combination: 0 [ 267.516735][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.538734][ T1127] bond0 (unregistering): Released all slaves [ 267.712162][ T5261] 8021q: adding VLAN 0 to HW filter on device eth5 [ 268.093385][ T6755] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 268.217942][ T6755] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 268.298399][ T42] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 268.326403][ T6755] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 268.349372][ T820] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 268.420172][ T6755] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 268.466172][ T42] usb 5-1: Using ep0 maxpacket: 8 [ 268.469929][ T42] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.469985][ T42] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 268.470013][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 268.470040][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 268.470070][ T42] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 268.470097][ T42] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.494581][ T42] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 268.494610][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.494629][ T42] usb 5-1: Product: syz [ 268.494644][ T42] usb 5-1: Manufacturer: syz [ 268.494657][ T42] usb 5-1: SerialNumber: syz [ 268.506044][ T820] usb 3-1: Using ep0 maxpacket: 16 [ 268.515163][ T820] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 268.515195][ T820] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.515213][ T820] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 268.556754][ T820] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 268.556787][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.556809][ T820] usb 3-1: Product: syz [ 268.556824][ T820] usb 3-1: Manufacturer: syz [ 268.556840][ T820] usb 3-1: SerialNumber: syz [ 268.665617][ T42] usb 5-1: config 0 descriptor?? [ 268.691789][ T7149] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 268.784241][ T820] usb 3-1: 0:2 : does not exist [ 268.925295][ T7151] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 268.938231][ T7151] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.977100][ T820] usb 3-1: 1:0: cannot get min/max values for control 4 (id 1) [ 269.053859][ T6755] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 269.087812][ T832] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 269.116122][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.121510][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.165312][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.178490][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.198528][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.199236][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.200231][ T6755] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 269.233554][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.252372][ T832] usb 4-1: Using ep0 maxpacket: 16 [ 269.257876][ T832] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 269.257971][ T832] usb 4-1: config 1 has no interface number 0 [ 269.258027][ T832] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 269.258085][ T832] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 269.258148][ T832] usb 4-1: config 1 interface 105 has no altsetting 0 [ 269.330050][ T832] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 269.330084][ T832] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 269.330107][ T832] usb 4-1: Product: syz [ 269.330123][ T832] usb 4-1: Manufacturer: syz [ 269.330139][ T832] usb 4-1: SerialNumber: syz [ 269.392101][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.443728][ T7160] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 269.444021][ T7160] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 269.755114][ T6755] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 269.848666][ T820] usb 3-1: USB disconnect, device number 27 [ 269.864575][ T7149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.879379][ T7160] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 269.879569][ T7160] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 269.905358][ T7149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.120017][ T6755] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 270.290454][ T832] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 270.306734][ T42] rc_core: IR keymap rc-snapstream-firefly not found [ 270.306754][ T42] Registered IR keymap rc-empty [ 270.308427][ T42] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 270.313121][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.357645][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.359346][ T42] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 270.384081][ T7160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.409632][ T7160] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.440444][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.504882][ T42] input: syz syz mouse as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11 [ 270.593076][ T42] usb 5-1: USB disconnect, device number 11 [ 270.593159][ C1] ati_remote 5-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 270.689233][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.693082][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.731796][ T7176] netlink: 24 bytes leftover after parsing attributes in process `syz.2.351'. [ 270.844382][ T4951] ati_remote 5-1:0.0: ati_remote_open: usb_submit_urb failed! [ 270.935374][ T832] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 270.936146][ T832] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 271.425965][ T42] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 271.609092][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 271.619070][ T42] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.628819][ T42] usb 5-1: config 0 has an invalid interface number: 228 but max is 2 [ 271.628858][ T42] usb 5-1: config 0 has an invalid interface number: 172 but max is 2 [ 271.628880][ T42] usb 5-1: config 0 has an invalid interface number: 181 but max is 2 [ 271.628902][ T42] usb 5-1: config 0 has no interface number 0 [ 271.628920][ T42] usb 5-1: config 0 has no interface number 1 [ 271.628936][ T42] usb 5-1: config 0 has no interface number 2 [ 271.628994][ T42] usb 5-1: config 0 interface 228 has no altsetting 0 [ 271.629015][ T42] usb 5-1: config 0 interface 172 has no altsetting 0 [ 271.629035][ T42] usb 5-1: config 0 interface 181 has no altsetting 0 [ 271.686494][ T42] usb 5-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=f1.7f [ 271.686526][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.686547][ T42] usb 5-1: Product: syz [ 271.686562][ T42] usb 5-1: Manufacturer: syz [ 271.686578][ T42] usb 5-1: SerialNumber: syz [ 271.753282][ T832] aqc111 4-1:1.105 eth9: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 8a:31:b8:7b:a2:e4 [ 271.828063][ T42] usb 5-1: config 0 descriptor?? [ 271.856108][ T832] usb 4-1: USB disconnect, device number 7 [ 271.907008][ T832] aqc111 4-1:1.105 eth9: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 272.102517][ T42] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 272.105224][ T42] usb 5-1: selecting invalid altsetting 0 [ 272.166955][ T42] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 272.167380][ T42] usb 5-1: selecting invalid altsetting 0 [ 272.212264][ T42] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner [ 272.212663][ T42] usb 5-1: selecting invalid altsetting 0 [ 272.229567][ T42] usb 5-1: USB disconnect, device number 12 [ 272.260679][ T2387] pvrusb2: Invalid write control endpoint [ 272.454719][ T2387] pvrusb2: Invalid write control endpoint [ 272.454746][ T2387] pvrusb2: Invalid write control endpoint [ 272.454762][ T2387] pvrusb2: Invalid write control endpoint [ 272.454778][ T2387] pvrusb2: Invalid write control endpoint [ 272.454793][ T2387] pvrusb2: Invalid write control endpoint [ 272.454808][ T2387] pvrusb2: Invalid write control endpoint [ 272.454823][ T2387] pvrusb2: Invalid write control endpoint [ 272.454838][ T2387] pvrusb2: Invalid write control endpoint [ 272.454860][ T2387] pvrusb2: Invalid write control endpoint [ 272.454875][ T2387] pvrusb2: Invalid write control endpoint [ 272.454890][ T2387] pvrusb2: Invalid write control endpoint [ 272.454909][ T2387] pvrusb2: Invalid write control endpoint [ 272.528099][ T2387] pvrusb2: Invalid write control endpoint [ 272.528121][ T2387] pvrusb2: Invalid write control endpoint [ 272.528137][ T2387] pvrusb2: Invalid write control endpoint [ 272.528152][ T2387] pvrusb2: Invalid write control endpoint [ 272.528168][ T2387] pvrusb2: Invalid write control endpoint [ 272.528182][ T2387] pvrusb2: Invalid write control endpoint [ 272.528198][ T2387] pvrusb2: Invalid write control endpoint [ 272.528213][ T2387] pvrusb2: Invalid write control endpoint [ 272.528229][ T2387] pvrusb2: Invalid write control endpoint [ 272.528243][ T2387] pvrusb2: Invalid write control endpoint [ 272.528258][ T2387] pvrusb2: Invalid write control endpoint [ 272.528274][ T2387] pvrusb2: Invalid write control endpoint [ 272.528289][ T2387] pvrusb2: Invalid write control endpoint [ 272.528304][ T2387] pvrusb2: Invalid write control endpoint [ 272.528319][ T2387] pvrusb2: Invalid write control endpoint [ 272.528335][ T2387] pvrusb2: Invalid write control endpoint [ 272.528349][ T2387] pvrusb2: Invalid write control endpoint [ 272.528364][ T2387] pvrusb2: Invalid write control endpoint [ 272.528379][ T2387] pvrusb2: Invalid write control endpoint [ 272.528393][ T2387] pvrusb2: Invalid write control endpoint [ 272.673942][ T2387] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 272.841628][ T2387] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_a) [ 272.841703][ T2387] pvrusb2: Invalid write control endpoint [ 272.841719][ T2387] pvrusb2: Invalid write control endpoint [ 272.841731][ T2387] pvrusb2: Invalid write control endpoint [ 272.841742][ T2387] pvrusb2: Invalid write control endpoint [ 272.841753][ T2387] pvrusb2: Invalid write control endpoint [ 272.841764][ T2387] pvrusb2: Invalid write control endpoint [ 272.841776][ T2387] pvrusb2: Invalid write control endpoint [ 272.898700][ T2387] pvrusb2: Invalid write control endpoint [ 272.898719][ T2387] pvrusb2: Invalid write control endpoint [ 272.898731][ T2387] pvrusb2: Invalid write control endpoint [ 272.898742][ T2387] pvrusb2: Invalid write control endpoint [ 272.898753][ T2387] pvrusb2: Invalid write control endpoint [ 272.898764][ T2387] pvrusb2: Invalid write control endpoint [ 272.898777][ T2387] pvrusb2: Invalid write control endpoint [ 272.898790][ T2387] pvrusb2: Invalid write control endpoint [ 272.898802][ T2387] pvrusb2: Invalid write control endpoint [ 272.898813][ T2387] pvrusb2: Invalid write control endpoint [ 272.898824][ T2387] pvrusb2: Invalid write control endpoint [ 272.898836][ T2387] pvrusb2: Invalid write control endpoint [ 272.898847][ T2387] pvrusb2: Invalid write control endpoint [ 272.898860][ T2387] pvrusb2: Invalid write control endpoint [ 272.990367][ T2387] pvrusb2: Attached sub-driver cs53l32a [ 273.069624][ T2387] pvrusb2: Invalid write control endpoint [ 273.069663][ T2387] pvrusb2: Invalid write control endpoint [ 273.069687][ T2387] pvrusb2: Invalid write control endpoint [ 273.069710][ T2387] pvrusb2: Invalid write control endpoint [ 273.069722][ T2387] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 273.069757][ T2387] pvrusb2: Device being rendered inoperable [ 273.126606][ T2387] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 273.126624][ T2387] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 273.127285][ T2387] pvrusb2: Invalid write control endpoint [ 273.913619][ T832] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 273.913787][ T832] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 273.913924][ T832] aqc111 4-1:1.105 eth9 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 274.029169][ T2387] pvrusb2: Invalid write control endpoint [ 274.029194][ T2387] pvrusb2: Invalid write control endpoint [ 274.029210][ T2387] pvrusb2: Invalid write control endpoint [ 274.029226][ T2387] pvrusb2: Invalid write control endpoint [ 274.029241][ T2387] pvrusb2: Invalid write control endpoint [ 274.150077][ T2387] pvrusb2: Invalid write control endpoint [ 274.150103][ T2387] pvrusb2: Invalid write control endpoint [ 274.150118][ T2387] pvrusb2: Invalid write control endpoint [ 274.150133][ T2387] pvrusb2: Invalid write control endpoint [ 274.150148][ T2387] pvrusb2: Invalid write control endpoint [ 274.150163][ T2387] pvrusb2: Invalid write control endpoint [ 274.150178][ T2387] pvrusb2: Invalid write control endpoint [ 274.150192][ T2387] pvrusb2: Invalid write control endpoint [ 274.150207][ T2387] pvrusb2: Invalid write control endpoint [ 274.150223][ T2387] pvrusb2: Invalid write control endpoint [ 274.150238][ T2387] pvrusb2: Invalid write control endpoint [ 274.150253][ T2387] pvrusb2: Invalid write control endpoint [ 274.150268][ T2387] pvrusb2: Invalid write control endpoint [ 274.150283][ T2387] pvrusb2: Invalid write control endpoint [ 274.150298][ T2387] pvrusb2: Invalid write control endpoint [ 274.150313][ T2387] pvrusb2: Invalid write control endpoint [ 274.150329][ T2387] pvrusb2: Invalid write control endpoint [ 274.150360][ T2387] pvrusb2: Invalid write control endpoint [ 274.150376][ T2387] pvrusb2: Invalid write control endpoint [ 274.150391][ T2387] pvrusb2: Invalid write control endpoint [ 274.150407][ T2387] pvrusb2: Invalid write control endpoint [ 274.150422][ T2387] pvrusb2: Invalid write control endpoint [ 274.150438][ T2387] pvrusb2: Invalid write control endpoint [ 274.150460][ T2387] pvrusb2: Invalid write control endpoint [ 274.150476][ T2387] pvrusb2: Invalid write control endpoint [ 274.150491][ T2387] pvrusb2: Invalid write control endpoint [ 274.150505][ T2387] pvrusb2: Invalid write control endpoint [ 274.339614][ T2387] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 274.504123][ T2387] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b) [ 274.504191][ T2387] pvrusb2: Invalid write control endpoint [ 274.504208][ T2387] pvrusb2: Invalid write control endpoint [ 274.504223][ T2387] pvrusb2: Invalid write control endpoint [ 274.504237][ T2387] pvrusb2: Invalid write control endpoint [ 274.504251][ T2387] pvrusb2: Invalid write control endpoint [ 274.504265][ T2387] pvrusb2: Invalid write control endpoint [ 274.504280][ T2387] pvrusb2: Invalid write control endpoint [ 274.504474][ T2387] pvrusb2: Invalid write control endpoint [ 274.504490][ T2387] pvrusb2: Invalid write control endpoint [ 274.504506][ T2387] pvrusb2: Invalid write control endpoint [ 274.504520][ T2387] pvrusb2: Invalid write control endpoint [ 274.504535][ T2387] pvrusb2: Invalid write control endpoint [ 274.504550][ T2387] pvrusb2: Invalid write control endpoint [ 274.504565][ T2387] pvrusb2: Invalid write control endpoint [ 274.504580][ T2387] pvrusb2: Invalid write control endpoint [ 274.504596][ T2387] pvrusb2: Invalid write control endpoint [ 274.504611][ T2387] pvrusb2: Invalid write control endpoint [ 274.504626][ T2387] pvrusb2: Invalid write control endpoint [ 274.504641][ T2387] pvrusb2: Invalid write control endpoint [ 274.504664][ T2387] pvrusb2: Invalid write control endpoint [ 274.504679][ T2387] pvrusb2: Invalid write control endpoint [ 274.666199][ T2387] pvrusb2: Attached sub-driver cs53l32a [ 274.713268][ T2387] pvrusb2: Invalid write control endpoint [ 274.713300][ T2387] pvrusb2: Invalid write control endpoint [ 274.713334][ T2387] pvrusb2: Invalid write control endpoint [ 274.713358][ T2387] pvrusb2: Invalid write control endpoint [ 274.713369][ T2387] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 274.713391][ T2387] pvrusb2: Device being rendered inoperable [ 274.714242][ T2387] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 274.714320][ T2387] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 274.714371][ T2387] pvrusb2: Invalid write control endpoint [ 274.965197][ T2387] pvrusb2: Invalid write control endpoint [ 274.965221][ T2387] pvrusb2: Invalid write control endpoint [ 274.965237][ T2387] pvrusb2: Invalid write control endpoint [ 274.965253][ T2387] pvrusb2: Invalid write control endpoint [ 274.965268][ T2387] pvrusb2: Invalid write control endpoint [ 274.965282][ T2387] pvrusb2: Invalid write control endpoint [ 274.965297][ T2387] pvrusb2: Invalid write control endpoint [ 274.965312][ T2387] pvrusb2: Invalid write control endpoint [ 274.965328][ T2387] pvrusb2: Invalid write control endpoint [ 274.965342][ T2387] pvrusb2: Invalid write control endpoint [ 274.965357][ T2387] pvrusb2: Invalid write control endpoint [ 274.965371][ T2387] pvrusb2: Invalid write control endpoint [ 274.965386][ T2387] pvrusb2: Invalid write control endpoint [ 274.965400][ T2387] pvrusb2: Invalid write control endpoint [ 274.965414][ T2387] pvrusb2: Invalid write control endpoint [ 274.965440][ T2387] pvrusb2: Invalid write control endpoint [ 274.965454][ T2387] pvrusb2: Invalid write control endpoint [ 274.965469][ T2387] pvrusb2: Invalid write control endpoint [ 274.965484][ T2387] pvrusb2: Invalid write control endpoint [ 274.965499][ T2387] pvrusb2: Invalid write control endpoint [ 274.965514][ T2387] pvrusb2: Invalid write control endpoint [ 274.965528][ T2387] pvrusb2: Invalid write control endpoint [ 274.965544][ T2387] pvrusb2: Invalid write control endpoint [ 274.965558][ T2387] pvrusb2: Invalid write control endpoint [ 274.965573][ T2387] pvrusb2: Invalid write control endpoint [ 274.965588][ T2387] pvrusb2: Invalid write control endpoint [ 274.965603][ T2387] pvrusb2: Invalid write control endpoint [ 274.965618][ T2387] pvrusb2: Invalid write control endpoint [ 274.965638][ T2387] pvrusb2: Invalid write control endpoint [ 274.965652][ T2387] pvrusb2: Invalid write control endpoint [ 274.965667][ T2387] pvrusb2: Invalid write control endpoint [ 274.965681][ T2387] pvrusb2: Invalid write control endpoint [ 275.151230][ T832] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 275.235601][ T2387] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 275.308831][ T832] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 275.308869][ T832] usb 4-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.308894][ T832] usb 4-1: config 2 interface 0 has no altsetting 0 [ 275.308929][ T832] usb 4-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 275.308953][ T832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.413566][ T2387] cs53l32a 1-0011: chip found @ 0x22 (pvrusb2_c) [ 275.413644][ T2387] pvrusb2: Invalid write control endpoint [ 275.413663][ T2387] pvrusb2: Invalid write control endpoint [ 275.413678][ T2387] pvrusb2: Invalid write control endpoint [ 275.413693][ T2387] pvrusb2: Invalid write control endpoint [ 275.413709][ T2387] pvrusb2: Invalid write control endpoint [ 275.413724][ T2387] pvrusb2: Invalid write control endpoint [ 275.413739][ T2387] pvrusb2: Invalid write control endpoint [ 275.413960][ T2387] pvrusb2: Invalid write control endpoint [ 275.413976][ T2387] pvrusb2: Invalid write control endpoint [ 275.413992][ T2387] pvrusb2: Invalid write control endpoint [ 275.414007][ T2387] pvrusb2: Invalid write control endpoint [ 275.414022][ T2387] pvrusb2: Invalid write control endpoint [ 275.414037][ T2387] pvrusb2: Invalid write control endpoint [ 275.414053][ T2387] pvrusb2: Invalid write control endpoint [ 275.414068][ T2387] pvrusb2: Invalid write control endpoint [ 275.414083][ T2387] pvrusb2: Invalid write control endpoint [ 275.414098][ T2387] pvrusb2: Invalid write control endpoint [ 275.414112][ T2387] pvrusb2: Invalid write control endpoint [ 275.414126][ T2387] pvrusb2: Invalid write control endpoint [ 275.414142][ T2387] pvrusb2: Invalid write control endpoint [ 275.414157][ T2387] pvrusb2: Invalid write control endpoint [ 275.583348][ T2387] pvrusb2: Attached sub-driver cs53l32a [ 275.663357][ T2387] pvrusb2: Invalid write control endpoint [ 275.663381][ T2387] pvrusb2: Invalid write control endpoint [ 275.663397][ T2387] pvrusb2: Invalid write control endpoint [ 275.663413][ T2387] pvrusb2: Invalid write control endpoint [ 275.663420][ T2387] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 275.663478][ T2387] pvrusb2: Device being rendered inoperable [ 275.663496][ T2387] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 275.663505][ T2387] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 275.898599][ T5862] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 276.033069][ T832] elo 0003:04E7:0009.0004: item fetching failed at offset 4/5 [ 276.033859][ T832] elo 0003:04E7:0009.0004: parse failed [ 276.033973][ T832] elo 0003:04E7:0009.0004: probe with driver elo failed with error -22 [ 276.056305][ T5862] usb 3-1: Using ep0 maxpacket: 16 [ 276.077250][ T5862] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 276.077393][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.077418][ T5862] usb 3-1: Product: syz [ 276.077434][ T5862] usb 3-1: Manufacturer: syz [ 276.077449][ T5862] usb 3-1: SerialNumber: syz [ 276.122306][ T5862] r8152-cfgselector 3-1: Unknown version 0x0000 [ 276.122334][ T5862] r8152-cfgselector 3-1: config 0 descriptor?? [ 276.176115][ T42] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 276.193920][ T1127] hsr_slave_0: left promiscuous mode [ 276.224493][ T5862] usb 4-1: USB disconnect, device number 8 [ 276.232054][ T1127] hsr_slave_1: left promiscuous mode [ 276.248667][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 276.248696][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 276.277134][ T1127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 276.277162][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 276.326005][ T42] usb 5-1: Using ep0 maxpacket: 16 [ 276.342891][ T42] usb 5-1: config 0 has an invalid interface number: 246 but max is 0 [ 276.342921][ T42] usb 5-1: config 0 has no interface number 0 [ 276.342971][ T42] usb 5-1: config 0 interface 246 altsetting 255 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 276.343002][ T42] usb 5-1: config 0 interface 246 altsetting 255 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 276.343032][ T42] usb 5-1: config 0 interface 246 has no altsetting 0 [ 276.401527][ T42] usb 5-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=35.27 [ 276.401561][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.401576][ T42] usb 5-1: Product: syz [ 276.401587][ T42] usb 5-1: Manufacturer: syz [ 276.401597][ T42] usb 5-1: SerialNumber: syz [ 276.425608][ T42] usb 5-1: config 0 descriptor?? [ 276.506705][ T1127] veth1_macvtap: left promiscuous mode [ 276.506832][ T1127] veth0_macvtap: left promiscuous mode [ 276.507091][ T1127] veth1_vlan: left promiscuous mode [ 276.507279][ T1127] veth0_vlan: left promiscuous mode [ 276.672096][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.673994][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.704150][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.722378][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.758245][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.760994][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.765727][ T7215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.810728][ T7215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.046203][ T42] usb 5-1: USB disconnect, device number 13 [ 278.257261][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 278.377042][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 278.384082][ T42] r8152-cfgselector 3-1: USB disconnect, device number 28 [ 278.826059][ T5799] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 278.987880][ T5799] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 278.987914][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.987936][ T5799] usb 5-1: Product: syz [ 278.987951][ T5799] usb 5-1: Manufacturer: syz [ 278.987966][ T5799] usb 5-1: SerialNumber: syz [ 279.043931][ T5799] usb 5-1: config 0 descriptor?? [ 279.064604][ T5799] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 014 [ 279.478913][ T7254] netlink: 84 bytes leftover after parsing attributes in process `syz.2.371'. [ 279.524312][ T5799] (null): failure reading functionality [ 279.536650][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.559805][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.606592][ T5799] i2c i2c-1: connected i2c-tiny-usb device [ 279.650062][ T7034] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.650191][ T7034] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.650428][ T7034] bridge_slave_0: entered allmulticast mode [ 279.693764][ T7034] bridge_slave_0: entered promiscuous mode [ 279.745995][ T7034] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.746102][ T7034] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.746334][ T7034] bridge_slave_1: entered allmulticast mode [ 279.801689][ T7034] bridge_slave_1: entered promiscuous mode [ 279.927335][ T832] usb 5-1: USB disconnect, device number 14 [ 281.211218][ T7034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.453300][ T7034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.654821][ T7034] team0: Port device team_slave_0 added [ 281.673775][ T7034] team0: Port device team_slave_1 added [ 281.844080][ T7034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.844100][ T7034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.844131][ T7034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.860038][ T7034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.860084][ T7034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.860169][ T7034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.245585][ T7034] hsr_slave_0: entered promiscuous mode [ 282.247779][ T7034] hsr_slave_1: entered promiscuous mode [ 282.255999][ T832] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 282.408424][ T832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.408459][ T832] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 282.408499][ T832] usb 3-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 282.408522][ T832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.463890][ T832] usb 3-1: config 0 descriptor?? [ 282.875630][ T6755] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.919025][ T7278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.919671][ T7278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.012693][ T832] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 283.012734][ T832] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 283.012764][ T832] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 283.012792][ T832] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 283.012821][ T832] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 283.012849][ T832] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 283.012878][ T832] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 283.012907][ T832] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 283.012942][ T832] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 283.012970][ T832] aquacomputer_d5next 0003:0C70:F014.0005: unknown main item tag 0x0 [ 283.157766][ T832] aquacomputer_d5next 0003:0C70:F014.0005: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.2-1/input0 [ 283.350355][ T832] usb 3-1: USB disconnect, device number 29 [ 283.446566][ T7295] fido_id[7295]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 283.583084][ T5261] 8021q: adding VLAN 0 to HW filter on device eth6 [ 283.756049][ T5799] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 283.905964][ T5799] usb 5-1: Using ep0 maxpacket: 8 [ 283.923689][ T5799] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 283.923735][ T5799] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 283.923787][ T5799] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 283.923817][ T5799] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.923845][ T5799] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 283.923873][ T5799] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 283.923902][ T5799] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 283.923931][ T5799] usb 5-1: config 168 interface 0 has no altsetting 0 [ 283.925786][ T5799] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 284.020304][ T5799] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 284.020353][ T5799] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 284.020379][ T5799] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.020426][ T5799] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.020448][ T5799] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 284.020470][ T5799] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 284.020493][ T5799] usb 5-1: config 168 interface 0 has no altsetting 0 [ 284.035987][ T5799] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 284.036032][ T5799] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 284.036083][ T5799] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 284.036112][ T5799] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.036139][ T5799] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.036167][ T5799] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 284.036197][ T5799] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 284.036224][ T5799] usb 5-1: config 168 interface 0 has no altsetting 0 [ 284.053807][ T5799] usb 5-1: string descriptor 0 read error: -22 [ 284.053952][ T5799] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 284.054099][ T5799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.155955][ T5862] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 284.263828][ T5799] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 284.319507][ T5862] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 284.319539][ T5862] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 284.319560][ T5862] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 284.319580][ T5862] usb 3-1: config 220 has no interface number 2 [ 284.319658][ T5862] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 284.319689][ T5862] usb 3-1: config 220 interface 0 has no altsetting 0 [ 284.319710][ T5862] usb 3-1: config 220 interface 76 has no altsetting 0 [ 284.319729][ T5862] usb 3-1: config 220 interface 1 has no altsetting 0 [ 284.322324][ T5862] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 284.322351][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.322369][ T5862] usb 3-1: Product: syz [ 284.322381][ T5862] usb 3-1: Manufacturer: syz [ 284.322393][ T5862] usb 3-1: SerialNumber: syz [ 284.604519][ T6755] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.621559][ T7308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.636223][ T7308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.659315][ T7308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.731301][ T7308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.840542][ T5862] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 284.840579][ T5862] uvcvideo 3-1:220.0: No valid video chain found. [ 284.840647][ T5862] usb 3-1: selecting invalid altsetting 0 [ 284.874509][ T5862] usb 3-1: selecting invalid altsetting 0 [ 284.874554][ T5862] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 284.910631][ T5862] usb 3-1: USB disconnect, device number 30 [ 285.003317][ T820] usb 5-1: USB disconnect, device number 15 [ 285.807593][ T820] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 285.856075][ T5862] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 285.882071][ T4916] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.961282][ T4916] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.992615][ T4916] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 286.010025][ T4916] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 286.028085][ T820] usb 4-1: Using ep0 maxpacket: 8 [ 286.073888][ T820] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 286.073952][ T820] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 286.073982][ T820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 286.074008][ T820] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 286.074036][ T820] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 286.074061][ T820] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 286.074107][ T820] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 286.074131][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.079404][ T4916] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.135710][ T5862] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 286.135740][ T5862] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.135761][ T5862] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 286.135782][ T5862] usb 3-1: config 1 has no interface number 1 [ 286.136590][ T5862] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 286.136634][ T5862] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 286.275026][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.275239][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.303456][ T5862] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 286.303489][ T5862] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.303510][ T5862] usb 3-1: Product: syz [ 286.303524][ T5862] usb 3-1: Manufacturer: syz [ 286.303539][ T5862] usb 3-1: SerialNumber: syz [ 286.649048][ T820] usb 4-1: GET_CAPABILITIES returned 0 [ 286.649099][ T820] usbtmc 4-1:16.0: can't read capabilities [ 286.655589][ T5862] usb 3-1: Failed to set altset [ 286.655659][ T5862] usb 3-1: 0:2: cannot create sequencer device [ 286.752034][ T5862] usb 3-1: Failed to set altset [ 286.842515][ T5862] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 286.870357][ T5862] usb 3-1: USB disconnect, device number 31 [ 286.889595][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.939024][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.052148][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.079088][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.192656][ T7324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 287.234164][ T7324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 287.369577][ T5587] usb 4-1: USB disconnect, device number 9 [ 288.426307][ T4916] Bluetooth: hci5: command tx timeout [ 288.596031][ T5862] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 288.754628][ T5862] usb 5-1: config 127 has an invalid interface number: 127 but max is 0 [ 288.754660][ T5862] usb 5-1: config 127 has no interface number 0 [ 288.775742][ T5862] usb 5-1: New USB device found, idVendor=0424, idProduct=9d00, bcdDevice=53.27 [ 288.775777][ T5862] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.777187][ T5862] usb 5-1: Product: syz [ 288.777207][ T5862] usb 5-1: Manufacturer: syz [ 288.777223][ T5862] usb 5-1: SerialNumber: syz [ 289.156104][ T820] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 289.320969][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.321003][ T820] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.321026][ T820] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 289.321065][ T820] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 289.321088][ T820] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.354078][ T820] usb 4-1: config 0 descriptor?? [ 289.923948][ T820] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 290.508986][ T4916] Bluetooth: hci5: command tx timeout [ 291.471020][ T5862] usb 5-1: USB disconnect, device number 16 [ 291.606330][ T5730] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 291.666440][ T1127] bridge_slave_1: left allmulticast mode [ 291.666477][ T1127] bridge_slave_1: left promiscuous mode [ 291.666782][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.777548][ T5730] usb 3-1: not running at top speed; connect to a high speed hub [ 291.779062][ T5730] usb 3-1: config 11 has an invalid interface number: 95 but max is 0 [ 291.779092][ T5730] usb 3-1: config 11 has no interface number 0 [ 291.779139][ T5730] usb 3-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 291.779169][ T5730] usb 3-1: config 11 interface 95 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 291.779193][ T5730] usb 3-1: config 11 interface 95 has no altsetting 0 [ 291.781203][ T5730] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 291.781232][ T5730] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 291.781254][ T5730] usb 3-1: Manufacturer: syz [ 291.899982][ T7402] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 291.949640][ T1127] bridge_slave_0: left allmulticast mode [ 291.949678][ T1127] bridge_slave_0: left promiscuous mode [ 291.949961][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.181594][ T5730] usb 3-1: USB disconnect, device number 32 [ 292.323837][ T820] usb 4-1: USB disconnect, device number 10 [ 292.600367][ T4916] Bluetooth: hci5: command tx timeout [ 293.006058][ T820] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 293.048061][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.155977][ T820] usb 3-1: Using ep0 maxpacket: 8 [ 293.158119][ T820] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.158146][ T820] usb 3-1: config 0 has no interface number 0 [ 293.158182][ T820] usb 3-1: config 0 interface 1 has no altsetting 0 [ 293.161079][ T820] usb 3-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f [ 293.161108][ T820] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.161130][ T820] usb 3-1: Product: syz [ 293.161146][ T820] usb 3-1: Manufacturer: syz [ 293.161162][ T820] usb 3-1: SerialNumber: syz [ 293.165690][ T820] usb 3-1: config 0 descriptor?? [ 293.244092][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.308471][ T1127] bond0 (unregistering): Released all slaves [ 293.404932][ T5261] 8021q: adding VLAN 0 to HW filter on device eth7 [ 293.555136][ T820] i2c-cp2615 3-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 293.580292][ T7432] vlan0: entered promiscuous mode [ 293.764510][ T7427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.775357][ T7427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.837566][ T6013] usb 3-1: USB disconnect, device number 33 [ 294.206633][ T5730] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 294.266131][ T1127] hsr_slave_0: left promiscuous mode [ 294.306676][ T1127] hsr_slave_1: left promiscuous mode [ 294.311000][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.362609][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.381727][ T5730] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 109, changing to 7 [ 294.385537][ T5730] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 294.385569][ T5730] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.385592][ T5730] usb 4-1: Product: syz [ 294.385607][ T5730] usb 4-1: Manufacturer: syz [ 294.385623][ T5730] usb 4-1: SerialNumber: syz [ 294.666254][ T4916] Bluetooth: hci5: command tx timeout [ 294.735122][ T5730] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 294.735780][ T5730] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 294.826739][ T42] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 295.952663][ T42] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 295.952690][ T42] usb 3-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.952708][ T42] usb 3-1: config 2 interface 0 has no altsetting 0 [ 295.952733][ T42] usb 3-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 295.952750][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.217719][ T5730] usb 4-1: USB disconnect, device number 11 [ 296.608864][ T42] elo 0003:04E7:0009.0007: item fetching failed at offset 0/5 [ 296.614770][ T42] elo 0003:04E7:0009.0007: parse failed [ 296.614865][ T42] elo 0003:04E7:0009.0007: probe with driver elo failed with error -22 [ 296.731744][ T5926] udevd[5926]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 296.870266][ T42] usb 3-1: USB disconnect, device number 34 [ 297.187142][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 297.348210][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 298.401258][ T7464] netlink: 8 bytes leftover after parsing attributes in process `syz.4.415'. [ 299.595980][ T820] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 299.774052][ T820] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 299.774082][ T820] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.774102][ T820] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 299.774125][ T820] usb 4-1: config 1 has no interface number 1 [ 299.774172][ T820] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 299.774215][ T820] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 299.788699][ T820] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.788732][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.788753][ T820] usb 4-1: Product: syz [ 299.788768][ T820] usb 4-1: Manufacturer: syz [ 299.788783][ T820] usb 4-1: SerialNumber: syz [ 300.235528][ T820] usb 4-1: Failed to set altset [ 300.235578][ T820] usb 4-1: 0:2: cannot create sequencer device [ 300.256704][ T820] usb 4-1: Failed to set altset [ 300.437744][ T820] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 300.516354][ T820] usb 4-1: USB disconnect, device number 12 [ 300.645717][ T7329] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.648828][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.649070][ T7329] bridge_slave_0: entered allmulticast mode [ 300.665997][ T42] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 300.693401][ T7329] bridge_slave_0: entered promiscuous mode [ 300.718625][ T7329] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.718852][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.719085][ T7329] bridge_slave_1: entered allmulticast mode [ 300.722599][ T7329] bridge_slave_1: entered promiscuous mode [ 300.827605][ T7329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.831693][ T7329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.905489][ T7329] team0: Port device team_slave_0 added [ 300.914800][ T7329] team0: Port device team_slave_1 added [ 300.952594][ T42] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 300.952629][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.952652][ T42] usb 3-1: Product: syz [ 300.952667][ T42] usb 3-1: Manufacturer: syz [ 300.952683][ T42] usb 3-1: SerialNumber: syz [ 301.020897][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.020916][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.020948][ T7329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.071552][ T7329] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.071571][ T7329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 301.071603][ T7329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.489138][ T7495] syz.3.422 uses obsolete (PF_INET,SOCK_PACKET) [ 302.563907][ T7329] hsr_slave_0: entered promiscuous mode [ 302.570172][ T42] usb 3-1: config 0 descriptor?? [ 302.585444][ T7329] hsr_slave_1: entered promiscuous mode [ 302.766185][ T7329] debugfs: 'hsr0' already exists in 'hsr' [ 302.766215][ T7329] Cannot create hsr debugfs directory [ 303.066558][ T42] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 035 [ 303.995770][ T42] (null): failure reading functionality [ 304.007738][ T42] i2c i2c-1: failure reading functionality [ 304.073223][ T42] i2c i2c-1: connected i2c-tiny-usb device [ 304.243105][ T42] usb 3-1: USB disconnect, device number 35 [ 304.295990][ T5799] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 304.487090][ T5799] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.487129][ T5799] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.488994][ T5799] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 304.489024][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.489045][ T5799] usb 5-1: SerialNumber: syz [ 304.530664][ T5799] usb 5-1: 0:2 : does not exist [ 305.109277][ T7504] tipc: Started in network mode [ 305.109311][ T7504] tipc: Node identity 2d030000000000002e2e, cluster identity 4711 [ 305.140944][ T10] usb 5-1: USB disconnect, device number 17 [ 306.446074][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 306.640055][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.640096][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 306.640141][ T10] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 306.640166][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.686202][ T10] usb 5-1: config 0 descriptor?? [ 307.187995][ T7526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.195430][ T7526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.402623][ T10] hid_parser_main: 28 callbacks suppressed [ 307.402644][ T10] aquacomputer_d5next 0003:0C70:F014.0008: unknown main item tag 0x0 [ 307.402675][ T10] aquacomputer_d5next 0003:0C70:F014.0008: unknown main item tag 0x0 [ 307.402695][ T10] aquacomputer_d5next 0003:0C70:F014.0008: unknown main item tag 0x0 [ 307.402714][ T10] aquacomputer_d5next 0003:0C70:F014.0008: unknown main item tag 0x0 [ 307.402733][ T10] aquacomputer_d5next 0003:0C70:F014.0008: unknown main item tag 0x0 [ 307.402753][ T10] aquacomputer_d5next 0003:0C70:F014.0008: unknown main item tag 0x0 [ 307.402774][ T10] aquacomputer_d5next 0003:0C70:F014.0008: unknown main item tag 0x0 [ 307.402794][ T10] aquacomputer_d5next 0003:0C70:F014.0008: unknown main item tag 0x0 [ 307.402813][ T10] aquacomputer_d5next 0003:0C70:F014.0008: unknown main item tag 0x0 [ 307.402833][ T10] aquacomputer_d5next 0003:0C70:F014.0008: unknown main item tag 0x0 [ 307.504525][ T10] aquacomputer_d5next 0003:0C70:F014.0008: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.4-1/input0 [ 307.572321][ T10] usb 5-1: USB disconnect, device number 18 [ 307.663064][ T7528] fido_id[7528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 308.061090][ T5261] 8021q: adding VLAN 0 to HW filter on device eth8 [ 308.205935][ T42] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 308.356682][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 308.365671][ T42] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 308.365701][ T42] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 308.365724][ T42] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 308.365777][ T42] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 308.368220][ T42] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 308.368343][ T42] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 308.368479][ T42] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 308.368557][ T42] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.489634][ T42] usb 3-1: config 0 descriptor?? [ 309.821360][ T42] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 36 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 309.832711][ T42] usb 3-1: USB disconnect, device number 36 [ 309.843080][ T42] usblp0: removed [ 312.225903][ T820] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 313.024029][ T820] usb 4-1: Using ep0 maxpacket: 32 [ 314.418017][ T820] usb 4-1: device descriptor read/all, error -71 [ 315.080385][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz.4.437'. [ 315.360425][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 315.410901][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 315.431318][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 315.460063][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 315.460938][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 315.961644][ T7570] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 316.107735][ T36] audit: type=1326 audit(2000000003.720:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.3.442" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 316.108101][ T36] audit: type=1326 audit(2000000003.720:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.3.442" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 316.112126][ T36] audit: type=1326 audit(2000000003.720:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.3.442" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 316.114924][ T36] audit: type=1326 audit(2000000003.720:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.3.442" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 316.115302][ T36] audit: type=1326 audit(2000000003.720:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.3.442" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 316.115500][ T36] audit: type=1326 audit(2000000003.720:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.3.442" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 316.117233][ T36] audit: type=1326 audit(2000000003.720:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.3.442" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 316.117353][ T36] audit: type=1326 audit(2000000003.720:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.3.442" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 316.117486][ T36] audit: type=1326 audit(2000000003.730:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.3.442" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 316.117612][ T36] audit: type=1326 audit(2000000003.730:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7572 comm="syz.3.442" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f11fdcdd9 code=0x7ffc0000 [ 316.820496][ T7577] binder: 7572:7577 ioctl c0306201 0 returned -14 [ 317.236753][ T7557] veth1_macvtap: left promiscuous mode [ 317.389244][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.389443][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.026678][ T4916] Bluetooth: hci3: command tx timeout [ 318.541204][ T820] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 318.586413][ T7605] binder: 7603:7605 ioctl c0306201 0 returned -14 [ 318.701601][ T820] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 318.701644][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.701667][ T820] usb 4-1: Product: syz [ 318.701683][ T820] usb 4-1: Manufacturer: syz [ 318.701697][ T820] usb 4-1: SerialNumber: syz [ 318.759494][ T820] usb 4-1: config 0 descriptor?? [ 318.797275][ T820] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 015 [ 319.168607][ T5799] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 319.202122][ T820] (null): failure reading functionality [ 319.213225][ T7598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.214956][ T7598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.216559][ T4916] Bluetooth: hci3: command tx timeout [ 320.398399][ T5799] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 320.398496][ T5799] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 320.398542][ T5799] usb 5-1: New USB device found, idVendor=0c70, idProduct=f014, bcdDevice= 0.00 [ 320.398568][ T5799] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.513103][ T820] i2c i2c-1: connected i2c-tiny-usb device [ 320.532042][ T820] usb 4-1: USB disconnect, device number 15 [ 320.552917][ T5799] usb 5-1: config 0 descriptor?? [ 320.995988][ T7607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.997134][ T7607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.027530][ T5799] hid_parser_main: 28 callbacks suppressed [ 321.027555][ T5799] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 321.027588][ T5799] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 321.027617][ T5799] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 321.027645][ T5799] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 321.027671][ T5799] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 321.027708][ T5799] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 321.027737][ T5799] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 321.027766][ T5799] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 321.027795][ T5799] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 321.027823][ T5799] aquacomputer_d5next 0003:0C70:F014.0009: unknown main item tag 0x0 [ 321.033446][ T5799] aquacomputer_d5next 0003:0C70:F014.0009: hidraw0: USB HID v0.00 Device [HID 0c70:f014] on usb-dummy_hcd.4-1/input0 [ 321.222418][ T5799] usb 5-1: USB disconnect, device number 19 [ 321.550021][ T7623] fido_id[7623]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 321.745957][ T5587] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 321.921529][ T5587] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 321.921560][ T5587] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.921580][ T5587] usb 4-1: Product: syz [ 321.921594][ T5587] usb 4-1: Manufacturer: syz [ 321.921609][ T5587] usb 4-1: SerialNumber: syz [ 322.066297][ T1127] bridge_slave_1: left allmulticast mode [ 322.066336][ T1127] bridge_slave_1: left promiscuous mode [ 322.067942][ T1127] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.118068][ T1127] bridge_slave_0: left allmulticast mode [ 322.118107][ T1127] bridge_slave_0: left promiscuous mode [ 322.118540][ T1127] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.267982][ T4916] Bluetooth: hci3: command tx timeout [ 322.586508][ T5587] (unnamed net_device) (uninitialized): Assigned a random MAC address: 1a:a7:f5:07:9b:0a [ 322.590740][ T7629] [ 322.590754][ T7629] ============================= [ 322.590762][ T7629] WARNING: suspicious RCU usage [ 322.590778][ T7629] syzkaller #0 Tainted: G L [ 322.590791][ T7629] ----------------------------- [ 322.590799][ T7629] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage! [ 322.590815][ T7629] [ 322.590815][ T7629] other info that might help us debug this: [ 322.590815][ T7629] [ 322.590823][ T7629] [ 322.590823][ T7629] rcu_scheduler_active = 2, debug_locks = 1 [ 322.590840][ T7629] 1 lock held by syz.3.457/7629: [ 322.590853][ T7629] #0: ffffffff8dfc8338 (rcu_tasks_trace_srcu_struct){....}-{0:0}, at: rcu_read_lock_trace+0x25/0x110 [ 322.590925][ T7629] [ 322.590925][ T7629] stack backtrace: [ 322.590942][ T7629] CPU: 1 UID: 0 PID: 7629 Comm: syz.3.457 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.590972][ T7629] Tainted: [L]=SOFTLOCKUP SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 322.590980][ T7629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 322.590994][ T7629] Call Trace: [ 322.591003][ T7629] [ 322.591017][ T7629] dump_stack_lvl+0xe8/0x150 [ 322.591047][ T7629] lockdep_rcu_suspicious+0x13f/0x1d0 [ 322.591086][ T7629] get_callchain_entry+0x2b6/0x3c0 [ 322.591126][ T7629] get_perf_callchain+0xd5/0x880 [ 322.591166][ T7629] ? __pfx_get_perf_callchain+0x10/0x10 [ 322.591214][ T7629] __bpf_get_stack+0x445/0xab0 [ 322.591258][ T7629] ? __pfx___bpf_get_stack+0x10/0x10 [ 322.591296][ T7629] ? __lock_acquire+0x6b5/0x2cf0 [ 322.591332][ T7629] bpf_get_stack+0x33/0x50 [ 322.591362][ T7629] ? bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 322.591386][ T7629] bpf_get_stack_raw_tp+0x1a9/0x220 [ 322.591418][ T7629] bpf_prog_42db8cfdf50901c9+0x46/0x4e [ 322.591442][ T7629] bpf_prog_run_pin_on_cpu+0x142/0x470 [ 322.591480][ T7629] bpf_prog_test_run_syscall+0x318/0x4c0 [ 322.591513][ T7629] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 322.591542][ T7629] ? __fget_files+0x2a/0x420 [ 322.591577][ T7629] ? __pfx_bpf_prog_test_run_syscall+0x10/0x10 [ 322.591610][ T7629] bpf_prog_test_run+0x2cd/0x340 [ 322.591645][ T7629] __sys_bpf+0x643/0x950 [ 322.591675][ T7629] ? __pfx___sys_bpf+0x10/0x10 [ 322.591700][ T7629] ? smack_file_ioctl+0x263/0x360 [ 322.591750][ T7629] ? rcu_is_watching+0x15/0xb0 [ 322.591790][ T7629] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.591816][ T7629] __x64_sys_bpf+0x7c/0x90 [ 322.591840][ T7629] do_syscall_64+0x15f/0xf80 [ 322.591865][ T7629] ? trace_irq_disable+0x3b/0x140 [ 322.591892][ T7629] ? clear_bhb_loop+0x40/0x90 [ 322.591921][ T7629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.591944][ T7629] RIP: 0033:0x7f8f11fdcdd9 [ 322.591964][ T7629] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.591984][ T7629] RSP: 002b:00007f8f1022e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 322.592007][ T7629] RAX: ffffffffffffffda RBX: 00007f8f12255fa0 RCX: 00007f8f11fdcdd9 [ 322.592024][ T7629] RDX: 000000000000000c RSI: 00002000000004c0 RDI: 000000000000000a [ 322.592039][ T7629] RBP: 00007f8f12072d69 R08: 0000000000000000 R09: 0000000000000000 [ 322.592054][ T7629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 322.592067][ T7629] R13: 00007f8f12256038 R14: 00007f8f12255fa0 R15: 00007ffcf43944b8 [ 322.592104][ T7629] [ 322.756961][ T5608] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 322.955917][ T5608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.955949][ T5608] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.955972][ T5608] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 322.956015][ T5608] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 322.956038][ T5608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.088261][ T5608] usb 5-1: config 0 descriptor?? [ 324.348782][ T4916] Bluetooth: hci3: command tx timeout [ 324.593121][ T1127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.766967][ T1127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.849622][ T1127] bond0 (unregistering): Released all slaves [ 325.031976][ T5587] rtl8150 4-1:1.0: eth13: rtl8150 is detected [ 325.266492][ T5587] usb 4-1: USB disconnect, device number 16 [ 325.977671][ T5608] usbhid 5-1:0.0: can't add hid device: -71 [ 325.977810][ T5608] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 326.047826][ T5608] usb 5-1: USB disconnect, device number 20 [ 326.606089][ T1127] hsr_slave_0: left promiscuous mode [ 326.626157][ T1127] hsr_slave_1: left promiscuous mode [ 326.627030][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.673682][ T1127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.097848][ T1127] team0 (unregistering): Port device team_slave_1 removed [ 327.146999][ T1127] team0 (unregistering): Port device team_slave_0 removed [ 329.521755][ T1127] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.115403][ T1127] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.424935][ T1127] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 330.681912][ T1127] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.370093][ T1127] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.711291][ T1127] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.752257][ T5261] 8021q: adding VLAN 0 to HW filter on device eth9 [ 332.051325][ T1127] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.361993][ T1127] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.420133][ T5261] 8021q: adding VLAN 0 to HW filter on device eth10