last executing test programs: 4.179863125s ago: executing program 2 (id=1467): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000005fc0)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @local, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7, 0x8000, 0x3d, 0x500, 0x5, 0x18c0012}) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000040)}}) r2 = socket(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x84000848}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x7}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x20000001) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603da0e1208000f0000000401a800160011000140030003000700000000000000008b6d3dd2dd0c61c1d6900094007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b4aa46db6a44f995922fe7c9f877d730d16a4683f5aeb4edbafb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbe75de6ccd40dd6e4edef3d93452a92", 0xd8}], 0x1}, 0x48080) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000100)={'veth1_vlan\x00', 0x44}) 4.087688977s ago: executing program 2 (id=1468): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000400)='blkio.bfq.sectors\x00', 0x0, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x8000, 0x0, 0xf, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) close_range(r0, 0xffffffffffffffff, 0x200000000000000) mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='romfs\x00', 0x4, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582"], 0x0) sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x840}, 0x40000810) 3.504220282s ago: executing program 3 (id=1470): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x20005005) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0xd0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f0977", 0x8}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c05442", 0x39}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d6b", 0xb2}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = socket(0x10, 0x803, 0x0) recvmmsg(r5, 0x0, 0x0, 0x2000, &(0x7f0000003700)={0x77359400}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.878766258s ago: executing program 1 (id=1474): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f00000004c0)={@void, @void, @mpls={[{0x9}, {0x200, 0x0, 0x1}], @ipv6=@tipc_packet={0x3, 0x6, '\x00', 0xb4, 0x6, 0x0, @loopback, @mcast1, {[], @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x2, 0x0, 0x0, 0xf000, 0x8, 0x7, 0x4e21, 0x4e23, 0x4, 0x4, 0x0, 0x0, 0x1}, [{0x8, 0x4, 0x7fffffff, 0x57a, 0xb319, 0x70c0, 0xf}, {0x0, 0xffffffff, 0x2000009, 0x2, 0x80000000, 0x5, 0x0, 0x82}, {0x80, 0x70b8, 0x68f4, 0x8002, 0x200, 0x7, 0x1, 0x8000000}, {0x6, 0x6, 0x8, 0x2000000, 0x8, 0x9, 0x6, 0x1}, {0x9, 0x5034, 0x7, 0x800, 0x8, 0x9, 0x4, 0xc0}]}}}}}, 0xe4) 2.798445415s ago: executing program 1 (id=1475): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$nci(r0, &(0x7f0000000040)=@NCI_OP_RF_NFCEE_ACTION_NTF={0x1, 0x0, 0x3, 0x9, 0x5}, 0x3) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x40010, r0, 0x47f45000) r1 = syz_usb_connect$midi(0x0, 0x56, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x81, 0xd0, 0x59, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x30, 0x21, [@midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x5, 0x7f}], [{{0x9, 0x5, 0xd, 0x10, 0x608, 0xb0, 0x9, 0x9, {0x13, 0x25, 0x1, 0xf, "b340ff97150b52b33c8f8ffcf1f2db"}}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x10, 0x6, 0x0, {0x7, 0x25, 0x1, 0x3, 'r~n'}}}]}}}}}]}}, &(0x7f00000002c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x8, 0x0, 0x1, 0x40, 0x2}, 0x3d, &(0x7f0000000140)={0x5, 0xf, 0x3d, 0x2, [@ssp_cap={0x24, 0x10, 0xa, 0x0, 0x6, 0x7ff, 0x0, 0xfffc, [0xff3f0f, 0xc000, 0xffc03f, 0x3f, 0xff0000, 0x3f00]}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "da1ee81d3b323d57b913846f64fa2dd1"}]}, 0x4, [{0x7d, &(0x7f0000000180)=@string={0x7d, 0x3, "f95d2318b0b4f3d144691ccb9b58dc8bc8db4fa5b610cb17393a1da4920fed1dd627cc8433b21fd000b0604d9b8e1cb197d6ff937e8871d1b41553e51f627041b71833297c4cc9cd499842821f232ed27f7084959b452ae0f206984eeae116fe0d662b84096164ba64dd3ae7b82a2ee5011c1488ae669977b17034"}}, {0x27, &(0x7f0000000200)=@string={0x27, 0x3, "dc6446f7fde80983a311e1f1c52fb75a88f7c0b523e61f54e5ece5d0ed2124a954a90af9bd"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x7845}}]}) syz_usb_control_io$printer(r1, &(0x7f0000000440)={0x14, &(0x7f0000000340)={0x40, 0x23, 0x17, {0x17, 0x30, "ff015528f829500394c2f27df1f7f4e4932a6fbec4"}}, &(0x7f0000000380)={0x0, 0x3, 0x99, @string={0x99, 0x3, "cc576a0c874f7c10006e094a9ef8ae1ef2fd94a47b9d84710c01972377bb36f9f4bc9430b10839a9075f4b1fab6e17ee9c8358089d35e829b34949f50226e0ee62ea8e00a2f4833bcfac3c7aa4f09822bec8361b110e1d905dffe6122fe7870d2ad66a41a4d5174d24a402036890c63d39b869a592d9fbc2356ab0c32c5a6ab01998808cfc8a2de2e53f2f7f27c35fbeda30406dbe73b1"}}}, &(0x7f00000006c0)={0x34, &(0x7f0000000480)={0x0, 0xf, 0xa, "76f0217f52c92833284e"}, &(0x7f00000004c0)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000540)={0x20, 0x0, 0xf0, {0xee, "d8798cc7d3a42f28ea4cfa35867e2ef9496c5290e60d30a39513bf1688c51246c0c5d3d4b5843b1bbf5fc23899250588666b40fc6aecdbe6f54ae4f40f6fce740d1d460064e025453882c688dd335a1fac9064325f19c3d1c3e3ad9ed654132f3ad827ee0e8f8b8f73f7baf2a8d52fd5c24359dad6b2bf735ec08d65333b607a51dc11ad7ebb9f68e399c3de205b1ed4907869ec0db7388e792b15ed9459b6d62defdcd24da5800b3bef1c8247b6772845ab25da8a5d13e83e3318c0fcdf8e306c15e2f0c934bdcc131966c77a9ee0038136344c4aa05cfc3a8e2f81cd4c30bf9a5f5258b9b13e7389045ffb2196"}}, &(0x7f0000000640)={0x20, 0x1, 0x1, 0x3}, &(0x7f0000000680)={0x20, 0x0, 0x1, 0x5}}) write$nci(r0, &(0x7f0000000700)=@NCI_OP_NFCEE_DISCOVER_NTF={0x2, 0x1, 0x3, 0x0, 0x40, {0x3, 0x5, "5e94052534b360b56430155df400f67f85e113c960622aeaa2778cb8c3bcde38274cfdb024f2eff3aefd481b8f271cbed2c7ccc5370619"}}, 0x3c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000780), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000007c0)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000800)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000840)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000880)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000940)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x34, r3, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$igmp(0x2, 0x3, 0x2) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000009c0), r2) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r2, &(0x7f0000000a80)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x28, r8, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f0000000ac0)) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000b80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r9, &(0x7f0000000c40)={&(0x7f0000000b00), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r10, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0xfffffffb, 0x73}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24028005}, 0x20004050) syz_usb_control_io$hid(r1, &(0x7f0000000d80)={0x24, &(0x7f0000000c80)={0x0, 0x1, 0x7, {0x7, 0x3c, "256e04e303"}}, &(0x7f0000000cc0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1009}}, &(0x7f0000000d00)={0x0, 0x22, 0x5, {[@local, @main=@item_012={0x1, 0x0, 0x8, "1a"}, @main=@item_012={0x1, 0x0, 0xc, 'H'}]}}, &(0x7f0000000d40)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0x40, 0x1, {0x22, 0x3ce}}}}, &(0x7f0000001080)={0x2c, &(0x7f0000000dc0)={0x20, 0x8, 0xcf, "0065139e68a165222b5528a0efa1f9e618b2dc3d12a8c6577ab4759590f62e4e6781b3a975de183567bc81030d56ed36641051a1111ec0e49fcafb91bcc79f1a37faab49405fc1b0bad67754ef98326c115ab209cff0319ca9aec05e3397002d38bd22a25c4c4a1efccf28c686d397353290c24e530403c39898f3bbe2f36c37fb892578f6a63a4bde3660e2db345a8b97ca62a19740c9801596afb30a30c8c3813b1a87a56c300216163e8ba630a13f71f854443bd40f0b6f329afdc0ec09cdf97b1e09c8894fac30a9a45c7b03e0"}, &(0x7f0000000ec0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000f00)={0x0, 0x8, 0x1, 0xcd}, &(0x7f0000000f40)={0x20, 0x1, 0xbc, "d4b3605b06541168a5ed2b296b4cc8bc12a5072c623f00f8fb9a1880e7d419de10dec62161b5d136bb8bf7a5f87d942a56efd945f53b90c4d27da62a2c3d6dc51fa8a429c7a276da4ed03ea26524c464e2419ddda332fb258c0006d56a70b630435faddda11b5e44d826a672456106ebe680a4ebed6e6279f2ee56c783239d5250432938a6707106b5fce14ab5960279a0cd18d19e90a7128f134718c2d685105b89237def1f44f5d0760dc6923e3f579f167f927e21ee9c98432b49"}, &(0x7f0000001040)={0x20, 0x3, 0x1, 0x5}}) syz_80211_inject_frame(&(0x7f00000010c0)=@broadcast, &(0x7f0000001100)=@data_frame={@msdu=@type01={{0x0, 0x2, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x3}, @device_b, @initial, @broadcast, {0x7, 0x537}}, @random="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"}, 0x75e) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000001880)={0x3, 0x36, "1db63671f0265b45d6ac5cec6c990cad00211ed893be6abc6c549b78b67fcab2f23c4ba5c8a46e84de8bb02c251f421e7a6c831f6be6"}) r12 = syz_genetlink_get_family_id$nbd(&(0x7f0000001900), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x28, r12, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6114}]}, 0x28}, 0x1, 0x0, 0x0, 0x24048000}, 0x4048080) r13 = openat$null(0xffffffffffffff9c, &(0x7f0000001a00), 0x4080, 0x0) ioctl$RNDADDTOENTCNT(r13, 0x40045201, &(0x7f0000001a40)=0x10001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000002b00)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000001a80)=""/4096, 0x1000, 0x1, &(0x7f0000002a80)=""/89, 0x59}, &(0x7f0000002b40)=0x40) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002b80)) 2.659866082s ago: executing program 2 (id=1476): r0 = socket$nl_rdma(0x10, 0x3, 0x14) chdir(&(0x7f0000000540)='./cgroup\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000200)=""/179, 0xb3) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r2) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f0000000740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0200006fc7da7061b41e2438e2805c7a23bdcca0a61c9f20190e6f0226095682de5c1033d04a947a728c632c44189dff66d8228ee1e10466392f9e719d8c980834235fded6462bff4008b5e9bdd2a3c7f95c07d80391653a6cd0cd3275e01cf69134175f000000005f57804df340af70d3ab3d5a096700"/133, @ANYRES16=r3, @ANYBLOB="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"], 0x24c}, 0x1, 0x0, 0x0, 0x10}, 0x20008001) (async) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000001b", @ANYBLOB='-/'], 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20040804) 2.528294664s ago: executing program 2 (id=1477): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x201, 0xffffffffffffffff) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)) tgkill(r0, r0, 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r1, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r3) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r4 = dup(r3) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$binfmt_elf64(r4, &(0x7f00000003c0)=ANY=[], 0x78) write$cgroup_pid(r4, &(0x7f0000000780), 0x12) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000002c0)={[{0x2b, 'net_prio'}]}, 0xa) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fb, 0x8001, 0xffff1896, 0xe3, 0x24, 0xffffffb7, 0x1a}, 0x9c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.374426176s ago: executing program 2 (id=1478): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007f, 0xe001) capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r2 = dup3(r0, r1, 0x0) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000040)) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) (async) syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007f, 0xe001) (async) capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) (async) dup3(r0, r1, 0x0) (async) ioctl$MON_IOCG_STATS(r2, 0xc0109207, &(0x7f0000000040)) (async) 2.276138074s ago: executing program 3 (id=1479): socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000000)) syz_open_dev$sg(&(0x7f0000000040), 0x2, 0x800) r0 = memfd_create(&(0x7f0000000c40)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;+\x98I%S\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82Q\xe9\xb8\xac\x88<\xb4\x19\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e23, 0x4, @private0, 0x2}}}, &(0x7f0000000040)=0x84) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x1c, 0x2400e044}, 0x6) write$binfmt_misc(r0, &(0x7f0000000180)="e502", 0x2) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r7, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e20, 0x7a, @mcast2, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="300000000000000029000000040000008402300000070000050200030401"], 0x30}, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, &(0x7f00000000c0)={'comedi_parport\x00', [0x100, 0x2007, 0x0, 0x1000, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x800000, 0x6d, 0x1, 0x5, 0x1, 0x100, 0x4, 0xfffffffd, 0xf, 0x3, 0x7fffffff, 0xf351, 0xca9f, 0x1, 0x5, 0x8, 0x2, 0x3, 0x800008, 0xa6b7, 0x2000, 0xfffffff8]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r5, 0xc04064aa, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) dup3(r4, r9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/keys\x00', 0x0, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r9) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r10, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r11, 0x0, 0x70bd25, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x40854}, 0x80) ioctl$XFS_IOC_FSGROWFSRT(r10, 0x400c5870, &(0x7f0000000300)={0x7ee4, 0x9}) getpgrp(0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r6], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4880) syz_open_dev$video(&(0x7f00000004c0), 0xbd, 0x418141) 2.275278428s ago: executing program 2 (id=1480): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10000, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000040)={0x1, 0x4, 0x12dc, 0x800, 0xffffffffffffffff}) r3 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x800) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x10000, 0x0, 0x8, 0x2ea473, 0x19bbe4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r6, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x39f33f}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x6, 0x7, 0x3, 0x0, 0x0, [{{r1}, 0xd}, {{r2}, 0xa1}, {{r3}, 0x8}]}) syz_usb_connect(0x3, 0x3f, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100032db48408da040d25027b0102037b09022d000305096004090403090053a7170e0904ba0900ff"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x809}}]}) 2.099381372s ago: executing program 0 (id=1482): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='mpol=interleave:2-2:2/']) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x1a) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000001580)=""/186, 0xba}], 0x1, 0x6, 0x0, 0x1c) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000040)={r3, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x4000000000001001, 0x0, 0x12, 0x8, 0x2d, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc72c89f3d9e234b30c50997d3bcf409ff2176ff7bfe55cd4a5d83cd4a5249d3ffe70c7f3f800b2f1c6aa54cc50a1fcaed33ba1fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce2, 0x200006]}}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4082, 0xff2}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='mpol=interleave:2-2:2/']) (async) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8140, 0x0) (async) capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x1a) (async) preadv2(r0, &(0x7f00000001c0)=[{&(0x7f0000001580)=""/186, 0xba}], 0x1, 0x6, 0x0, 0x1c) (async) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7ffff000) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x82802, 0xf) (async) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000040)={r3, 0x1000, {0x0, 0x0, 0x0, 0x0, 0x4000000000001001, 0x0, 0x12, 0x8, 0x2d, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc72c89f3d9e234b30c50997d3bcf409ff2176ff7bfe55cd4a5d83cd4a5249d3ffe70c7f3f800b2f1c6aa54cc50a1fcaed33ba1fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce2, 0x200006]}}) (async) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4082, 0xff2}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) (async) 1.948503125s ago: executing program 1 (id=1483): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f00000004c0)={@void, @void, @mpls={[{0x9}, {0x200, 0x0, 0x1}], @ipv6=@tipc_packet={0x3, 0x6, '\x00', 0xb4, 0x6, 0x0, @loopback, @mcast1, {[], @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x2, 0x0, 0x0, 0xf000, 0x8, 0x7, 0x4e21, 0x4e23, 0x4, 0x4, 0x0, 0x0, 0x1}, [{0x8, 0x4, 0x7fffffff, 0x57a, 0xb319, 0x7000, 0xf, 0x20}, {0x0, 0xffffffff, 0x2000009, 0x2, 0x80000000, 0x5, 0x0, 0x82}, {0x80, 0x70b8, 0x68f4, 0x8002, 0x200, 0x7, 0x1, 0x8000000}, {0x6, 0x6, 0x8, 0x2000000, 0x8, 0x9, 0x6, 0x1}, {0x9, 0x5034, 0x7, 0x800, 0x8, 0x9, 0x4, 0xc0}]}}}}}, 0xe4) 1.887027827s ago: executing program 1 (id=1484): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000002880), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) (async) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r4) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x14, r5, 0x303, 0x4000, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x41) (async) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, r5, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x41) syz_clone3(&(0x7f0000000080)={0x180801400, &(0x7f0000000000)=0xffffffffffffffff, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40040, 0x59) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000800)={'trans=fd,', {'rfdno', 0x3d, r7}, 0x2c, {'wfdno', 0x3d, r6}}) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4044000) (async) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c000}, 0x4044000) 1.87645864s ago: executing program 3 (id=1485): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x22401) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) write$tun(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="000089142450", @ANYRES64=r3], 0xb2) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f00000001c0)={0x23, 0x1, r4, r1, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)}) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_TIME_STAMP(r5, 0x0, 0x3, &(0x7f0000000000)=0xd, 0x4) r6 = socket$netlink(0x10, 0x3, 0x8) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000001600010000000000000000000a0000000400220014000100fe80000000000000000000000000000b"], 0x2c}}, 0x0) r7 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000040)='\x00\x00\x00\x00\x00\x87\x00\x00\x00', &(0x7f0000000140)='iocharset\xe4\x95\xd5O[\xe5H\xcf\xe3=\xf2\xc2&\xa3\x80\rfg\xf1\xd0\x05\xf7\xc7\x83\xa4\xdb\xe7\xcf\xcb70BN\xc2o\xa8\xe9\xbd\xa3\xf4\x1c\x10j\xe2\xcb\xb3\xf4\xcd\t:#E\xe9Js=\x97\x9dT\x84t\x8b\xac\x9c\xdc\x8dJ\xd9\xef}\xb0b\xf7\x1aeW\xa2\xeb\xb8;\xb8\xdb\x01\x00\xc4R', 0x0) 1.728363525s ago: executing program 0 (id=1486): r0 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r0, 0x4) setreuid(0xee01, 0xee00) faccessat(0xffffffffffffff9c, 0x0, 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, 0x0, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000002100010000000000fefffffffc020000000000000000000000000000fc02000000000000000000000000000000000000000000000200000084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100"], 0xa0}}, 0x0) 1.68182105s ago: executing program 0 (id=1487): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x14, r1, 0x1, 0x70bd25, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x808) r2 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x25, &(0x7f00000004c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0x79}, 0x90) r3 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf010000, 0x8, 0x0, r3, 0x0, &(0x7f0000000040)={0xa30001, 0x6, '\x00', @p_u16=0x0}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) bind$packet(r2, &(0x7f0000000080)={0x11, 0xd, r4, 0x1, 0x7, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}}, 0x14) 1.611605801s ago: executing program 0 (id=1488): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r0, 0x29, 0xc9, 0x0, &(0x7f0000000040)) r1 = syz_open_dev$swradio(&(0x7f00000001c0), 0x1, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x4000, 0x0, 0xe, 0x0, 0x0}) 1.428350842s ago: executing program 0 (id=1489): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYBLOB='\b\x00*'], 0x24}, 0x1, 0x0, 0x0, 0x48}, 0x20040000) 1.294295517s ago: executing program 3 (id=1490): r0 = dup(0xffffffffffffffff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000480)={0x70, 0x1, 0x836, 0x8, 0x2}, 0x14) write$binfmt_elf64(r0, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c46"], 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) ioctl$SOUND_MIXER_READ_VOLUME(r0, 0x80044d0a, &(0x7f0000000100)) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x1, @none, 0x0, 0x1}, 0xe) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f0000000080)=@v2={0x2000000, [{0x5, 0x5}, {0x6, 0x6}]}, 0x14, 0x2) 1.29194915s ago: executing program 0 (id=1491): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x1000, 0x2}, &(0x7f0000000000)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x100}}}, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r6, &(0x7f0000000580)={0x0, 0x1460, 0x10700, 0x1, 0xcd, 0x0, r0}, &(0x7f0000000d00)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf0b2, 0x10002, 0xfffffffe, 0x2e2, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x10000, 0x80000009, 0x1e8, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1a02, 0x2, 0x5, 0x902c4, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x402030, 0x40, 0x2, 0x9e, 0x0, r0}}], 0x16, &(0x7f0000001540)={0x2e, 0x41, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x6}, 0x0, r5, '\x00', {0x3, 0x4ab, 0x0, 0x0}}, 0x0) r8 = syz_io_uring_setup(0x452a, &(0x7f0000000040)={0x0, 0x458d, 0x20000, 0x3, 0x26}, &(0x7f00000000c0), &(0x7f0000000140), &(0x7f00000001c0)) r9 = signalfd(r7, &(0x7f00000001c0)={[0xfffffffffffffffc]}, 0x8) close(r9) read$FUSE(r9, &(0x7f0000000200)={0x2020}, 0x2020) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x14}}, 0x64}}, 0x0) read$FUSE(r10, 0x0, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) r13 = dup(r12) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_ublk_setup_queues(0xffffffffffffffff, r6, &(0x7f0000000240)={0x0, 0xac39, 0x40, 0x2, 0x2b5, 0x0, r8}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x869d, 0x51, 0x1, 0x3ca}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf1a1, 0x10000, 0x2, 0x3a2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c02, 0x8, 0x1, 0x22a, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc142, 0x2, 0x0, 0x1e, 0x0, r10}}], 0x4, &(0x7f0000001540)={0x2e, 0x52, 0x0, r13, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xd}, 0x0, 0x0, '\x00', {0x1, 0xca9, 0x0, &(0x7f0000000540)=@buf_max_buf="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"}}, &(0x7f00000015c0)) r14 = getpid() syz_pidfd_open(r14, 0x0) r15 = epoll_create1(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r17, &(0x7f00000bd000), 0x318, 0x0) r18 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r15, 0x1, r17, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r18, 0x1, r15, &(0x7f0000000000)={0xa0000001}) ppoll(&(0x7f0000000200)=[{r18, 0x1}], 0x1, 0x0, 0x0, 0x3) close_range(r18, r16, 0x0) 475.908128ms ago: executing program 3 (id=1492): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) write$tun(r1, &(0x7f00000004c0)={@void, @void, @mpls={[{0x9}, {0x200, 0x0, 0x1}], @ipv6=@tipc_packet={0x3, 0x6, '\x00', 0xb4, 0x6, 0x0, @loopback, @mcast1, {[], @name_distributor={{0xb4, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0x2, 0x0, 0x0, 0xf000, 0x8, 0x7, 0x4e21, 0x4e23, 0x4, 0x4, 0x0, 0x0, 0x1}, [{0x8, 0x4, 0x7fffffff, 0x57a, 0xb319, 0x7000, 0xf, 0x30}, {0x0, 0xffffffff, 0x2000009, 0x2, 0x80000000, 0x5, 0x0, 0x82}, {0x80, 0x70b8, 0x68f4, 0x8002, 0x200, 0x7, 0x1, 0x8000000}, {0x6, 0x6, 0x8, 0x2000000, 0x8, 0x9, 0x6, 0x1}, {0x9, 0x5034, 0x7, 0x800, 0x8, 0x9, 0x4, 0xc0}]}}}}}, 0xe4) 427.309926ms ago: executing program 3 (id=1493): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000080)={0x64, r1, 0x1, 0x200, 0x25dfdbfe, {0x37}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}]}, 0x64}}, 0x80) r2 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x88042, 0x0) write$dsp(r3, &(0x7f0000000280)="dbd7", 0x2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) syz_open_procfs$namespace(r2, &(0x7f0000000080)='ns/uts\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000300)={0x0, 0x0, 0x6, 0xf4f9, 0x6, "97245389bc7b88f46eac36ac540ef2ad622301"}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0x4000) r6 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r6, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r7}) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)='\x00\x00\x00\x00\x00', 0x5) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, '\x00', 0x44}, 0x10}, 0x1c) write(r8, 0x0, 0x0) r9 = accept4(r5, 0x0, 0x0, 0x800) r10 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r10, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@ip_retopts={{0x14, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}]}}}], 0x18}, 0x0) sendmmsg$alg(r9, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9ea6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) write$binfmt_misc(r4, &(0x7f0000000240), 0xfffffecc) 219.2883ms ago: executing program 1 (id=1494): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000000)="8907", 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x11, 0x1) ioctl$USBDEVFS_IOCTL(r1, 0x80045505, &(0x7f0000000000)=@usbdevfs_connect={0xfffffffa}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) r3 = syz_open_dev$vcsn(&(0x7f0000000100), 0x66, 0x4001) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000380)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000140)=""/223, 0xdf, 0x0, &(0x7f0000000280)=""/231, 0xe7}, &(0x7f00000003c0)=0x40) ptrace$poke(0x4, r2, &(0x7f00000000c0), 0x5) 0s ago: executing program 1 (id=1495): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}}, 0x0) syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[], 0x0) kernel console output (not intermixed with test programs): n list (type=1 state=0 pid=ffff) [ 316.801880][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.801897][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.802005][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.802021][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.802122][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.802139][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.802238][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.802254][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.802360][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.802376][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.802477][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.802494][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.802596][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.802613][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.802712][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.802729][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.802837][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.802853][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.802953][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.802978][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.803078][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.803095][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.803195][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.803211][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.803317][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.803333][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.803434][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.803451][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.803551][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.803568][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.803668][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.803684][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.803790][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.803807][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.803907][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.803923][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.814393][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.814418][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.814539][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.814556][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.814696][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.814713][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.814813][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.814829][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.814932][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.814951][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.815062][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.815080][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.815240][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.815257][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.817838][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.817857][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.817963][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.817988][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.818089][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.818106][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.819251][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.819269][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.819370][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.819387][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.819488][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.819505][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.819604][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.819621][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.821271][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.821290][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.821391][ T9413] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 316.821408][ T9413] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 316.918117][ T5709] usb 1-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 316.918147][ T5709] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 316.921389][ T5709] usb 1-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 316.921417][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.921437][ T5709] usb 1-1: Product: syz [ 316.921452][ T5709] usb 1-1: Manufacturer: syz [ 316.921466][ T5709] usb 1-1: SerialNumber: syz [ 317.300323][ T5709] usb 1-1: config 0 descriptor?? [ 317.310839][ T5709] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 317.387591][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.417621][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.710563][ T5709] gspca_sunplus: reg_r err -32 [ 317.710660][ T5709] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 317.842652][ T5819] usb 1-1: USB disconnect, device number 66 [ 318.106611][ T823] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 318.181238][ T9428] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 318.181238][ T9428] program syz.0.1151 not setting count and/or reply_len properly [ 318.181574][ T9428] FAULT_INJECTION: forcing a failure. [ 318.181574][ T9428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 318.181599][ T9428] CPU: 1 UID: 0 PID: 9428 Comm: syz.0.1151 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 318.181618][ T9428] Tainted: [L]=SOFTLOCKUP [ 318.181623][ T9428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 318.181631][ T9428] Call Trace: [ 318.181636][ T9428] [ 318.181641][ T9428] dump_stack_lvl+0xe8/0x150 [ 318.181663][ T9428] should_fail_ex+0x46b/0x600 [ 318.181685][ T9428] _copy_from_iter+0x1d3/0x1670 [ 318.181702][ T9428] ? pfn_valid+0x125/0x4c0 [ 318.181716][ T9428] ? pfn_valid+0x440/0x4c0 [ 318.181729][ T9428] ? __pfx__copy_from_iter+0x10/0x10 [ 318.181745][ T9428] ? bvec_try_merge_page+0x1d4/0x280 [ 318.181764][ T9428] ? bio_add_page+0x2e9/0x6f0 [ 318.181780][ T9428] copy_page_from_iter+0x220/0x2d0 [ 318.181796][ T9428] blk_rq_map_user_iov+0xa14/0x1790 [ 318.181826][ T9428] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 318.181854][ T9428] ? import_ubuf+0xfb/0x1d0 [ 318.181870][ T9428] blk_rq_map_user_io+0x2ae/0x440 [ 318.181892][ T9428] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 318.181913][ T9428] ? do_raw_spin_lock+0x12b/0x2f0 [ 318.181934][ T9428] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 318.181953][ T9428] ? lockdep_hardirqs_on+0x7a/0x110 [ 318.181971][ T9428] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 318.181992][ T9428] ? rt_mutex_slowunlock+0x1cb/0x300 [ 318.182007][ T9428] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 318.182028][ T9428] sg_common_write+0xcff/0x13e0 [ 318.182051][ T9428] ? __pfx_sg_common_write+0x10/0x10 [ 318.182064][ T9428] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 318.182082][ T9428] ? ___ratelimit+0x58c/0x8d0 [ 318.182104][ T9428] sg_write+0xafb/0xf00 [ 318.182127][ T9428] ? __pfx_sg_write+0x10/0x10 [ 318.182148][ T9428] ? __pfx_aa_file_perm+0x10/0x10 [ 318.182181][ T9428] ? rw_verify_area+0x25b/0x4e0 [ 318.182198][ T9428] ? __pfx_sg_write+0x10/0x10 [ 318.182218][ T9428] vfs_write+0x2a3/0xba0 [ 318.182239][ T9428] ? __pfx_vfs_write+0x10/0x10 [ 318.182257][ T9428] ? __fget_files+0x2a/0x420 [ 318.182274][ T9428] ? __fget_files+0x2a/0x420 [ 318.182287][ T9428] ? __fget_files+0x3a6/0x420 [ 318.182301][ T9428] ? __fget_files+0x2a/0x420 [ 318.182320][ T9428] ksys_write+0x156/0x270 [ 318.182338][ T9428] ? __pfx_ksys_write+0x10/0x10 [ 318.182360][ T9428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.182374][ T9428] do_syscall_64+0x174/0x580 [ 318.182391][ T9428] ? trace_irq_disable+0x3b/0x140 [ 318.182406][ T9428] ? clear_bhb_loop+0x40/0x90 [ 318.182420][ T9428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.182433][ T9428] RIP: 0033:0x7f9f6854ce59 [ 318.182446][ T9428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.182457][ T9428] RSP: 002b:00007f9f667a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.182471][ T9428] RAX: ffffffffffffffda RBX: 00007f9f687c5fa0 RCX: 00007f9f6854ce59 [ 318.182481][ T9428] RDX: 00000000000000e4 RSI: 00002000000004c0 RDI: 0000000000000004 [ 318.182495][ T9428] RBP: 00007f9f667a6090 R08: 0000000000000000 R09: 0000000000000000 [ 318.182503][ T9428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.182510][ T9428] R13: 00007f9f687c6038 R14: 00007f9f687c5fa0 R15: 00007fff54761638 [ 318.182529][ T9428] [ 318.276527][ T823] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 318.276560][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.276581][ T823] usb 3-1: Product: syz [ 318.276595][ T823] usb 3-1: Manufacturer: syz [ 318.276609][ T823] usb 3-1: SerialNumber: syz [ 318.313642][ T823] usb 3-1: config 0 descriptor?? [ 318.354374][ T823] i2c-tiny-usb 3-1:0.0: version 6d.cc found at bus 003 address 070 [ 318.575255][ T5709] usb 4-1: USB disconnect, device number 74 [ 318.817334][ T823] (null): failure reading functionality [ 318.926403][ T5621] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 318.928985][ T823] i2c i2c-1: failure reading functionality [ 318.992107][ T823] i2c i2c-1: connected i2c-tiny-usb device [ 319.000946][ T823] usb 3-1: USB disconnect, device number 70 [ 319.089563][ T5621] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 319.089599][ T5621] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 319.089622][ T5621] usb 2-1: Product: syz [ 319.089637][ T5621] usb 2-1: SerialNumber: syz [ 319.135069][ T5621] usb 2-1: config 0 descriptor?? [ 319.351371][ T9434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.352058][ T9434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.356589][ T9447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.360632][ T9447] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.400984][ T5621] hso 2-1:0.0: Failed to find BULK eps [ 319.429811][ T38] audit: type=1326 audit(1780874283.232:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9448 comm="syz.0.1158" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9f6854ce59 code=0x0 [ 319.532190][ T4929] Bluetooth: Wrong link type (-71) [ 319.566190][ T9434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.567605][ T9434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.569832][ T5621] usb 2-1: USB disconnect, device number 85 [ 319.667935][ T9459] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 319.667935][ T9459] program syz.0.1161 not setting count and/or reply_len properly [ 319.668205][ T9459] FAULT_INJECTION: forcing a failure. [ 319.668205][ T9459] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.668234][ T9459] CPU: 1 UID: 0 PID: 9459 Comm: syz.0.1161 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 319.668266][ T9459] Tainted: [L]=SOFTLOCKUP [ 319.668274][ T9459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.668288][ T9459] Call Trace: [ 319.668296][ T9459] [ 319.668304][ T9459] dump_stack_lvl+0xe8/0x150 [ 319.668336][ T9459] should_fail_ex+0x46b/0x600 [ 319.668370][ T9459] _copy_from_iter+0x1d3/0x1670 [ 319.668388][ T9459] ? pfn_valid+0x125/0x4c0 [ 319.668403][ T9459] ? pfn_valid+0x440/0x4c0 [ 319.668416][ T9459] ? __pfx__copy_from_iter+0x10/0x10 [ 319.668428][ T9459] ? bvec_try_merge_page+0x1d4/0x280 [ 319.668446][ T9459] ? bio_add_page+0x2e9/0x6f0 [ 319.668463][ T9459] copy_page_from_iter+0x220/0x2d0 [ 319.668478][ T9459] blk_rq_map_user_iov+0xa14/0x1790 [ 319.668507][ T9459] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 319.668534][ T9459] ? import_ubuf+0xfb/0x1d0 [ 319.668550][ T9459] blk_rq_map_user_io+0x2ae/0x440 [ 319.668572][ T9459] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 319.668593][ T9459] ? do_raw_spin_lock+0x12b/0x2f0 [ 319.668615][ T9459] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 319.668636][ T9459] ? lockdep_hardirqs_on+0x7a/0x110 [ 319.668654][ T9459] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 319.668671][ T9459] ? rt_mutex_slowunlock+0x1cb/0x300 [ 319.668686][ T9459] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 319.668707][ T9459] sg_common_write+0xcff/0x13e0 [ 319.668730][ T9459] ? __pfx_sg_common_write+0x10/0x10 [ 319.668743][ T9459] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 319.668761][ T9459] ? ___ratelimit+0x58c/0x8d0 [ 319.668782][ T9459] sg_write+0xafb/0xf00 [ 319.668805][ T9459] ? __pfx_sg_write+0x10/0x10 [ 319.668826][ T9459] ? __pfx_aa_file_perm+0x10/0x10 [ 319.668858][ T9459] ? rw_verify_area+0x25b/0x4e0 [ 319.668875][ T9459] ? __pfx_sg_write+0x10/0x10 [ 319.668894][ T9459] vfs_write+0x2a3/0xba0 [ 319.668915][ T9459] ? __pfx_vfs_write+0x10/0x10 [ 319.668932][ T9459] ? __fget_files+0x2a/0x420 [ 319.668953][ T9459] ? __fget_files+0x2a/0x420 [ 319.668967][ T9459] ? __fget_files+0x3a6/0x420 [ 319.668980][ T9459] ? __fget_files+0x2a/0x420 [ 319.668999][ T9459] ksys_write+0x156/0x270 [ 319.669018][ T9459] ? __pfx_ksys_write+0x10/0x10 [ 319.669039][ T9459] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.669053][ T9459] do_syscall_64+0x174/0x580 [ 319.669072][ T9459] ? trace_irq_disable+0x3b/0x140 [ 319.669087][ T9459] ? clear_bhb_loop+0x40/0x90 [ 319.669164][ T9459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.669188][ T9459] RIP: 0033:0x7f9f6854ce59 [ 319.669209][ T9459] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.669224][ T9459] RSP: 002b:00007f9f667a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.669239][ T9459] RAX: ffffffffffffffda RBX: 00007f9f687c5fa0 RCX: 00007f9f6854ce59 [ 319.669248][ T9459] RDX: 00000000000000e4 RSI: 00002000000004c0 RDI: 0000000000000004 [ 319.669256][ T9459] RBP: 00007f9f667a6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.669265][ T9459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 319.669272][ T9459] R13: 00007f9f687c6038 R14: 00007f9f687c5fa0 R15: 00007fff54761638 [ 319.669291][ T9459] [ 319.893974][ T38] audit: type=1326 audit(1780874283.712:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1164" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98802ace59 code=0x7ffc0000 [ 319.894309][ T38] audit: type=1326 audit(1780874283.712:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1164" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98802ace59 code=0x7ffc0000 [ 319.894355][ T38] audit: type=1326 audit(1780874283.712:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1164" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98802ace59 code=0x7ffc0000 [ 319.895597][ T38] audit: type=1326 audit(1780874283.712:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1164" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f98802ace59 code=0x7ffc0000 [ 319.896019][ T38] audit: type=1326 audit(1780874283.722:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1164" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98802ace59 code=0x7ffc0000 [ 319.899658][ T38] audit: type=1326 audit(1780874283.722:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1164" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98802ace59 code=0x7ffc0000 [ 319.899704][ T38] audit: type=1326 audit(1780874283.722:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1164" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98802ace59 code=0x7ffc0000 [ 319.902040][ T38] audit: type=1326 audit(1780874283.722:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1164" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f98802ace59 code=0x7ffc0000 [ 319.902090][ T38] audit: type=1326 audit(1780874283.722:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9467 comm="syz.3.1164" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98802ace59 code=0x7ffc0000 [ 320.191938][ T9479] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 320.191938][ T9479] program syz.1.1169 not setting count and/or reply_len properly [ 320.325175][ T5709] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 320.364345][ T823] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 320.474301][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 320.478102][ T5709] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 320.478136][ T5709] usb 1-1: config 0 has no interface number 0 [ 320.480898][ T5709] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 320.480929][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.480950][ T5709] usb 1-1: Product: syz [ 320.480962][ T5709] usb 1-1: Manufacturer: syz [ 320.480971][ T5709] usb 1-1: SerialNumber: syz [ 320.487976][ T5709] usb 1-1: config 0 descriptor?? [ 320.549297][ T823] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 320.549373][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.549395][ T823] usb 4-1: Product: syz [ 320.549404][ T823] usb 4-1: Manufacturer: syz [ 320.549413][ T823] usb 4-1: SerialNumber: syz [ 320.559397][ T823] usb 4-1: config 0 descriptor?? [ 320.567301][ T32] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 320.734254][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 320.736452][ T32] usb 3-1: config 0 has no interfaces? [ 320.739135][ T32] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 320.739154][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.739212][ T32] usb 3-1: Product: syz [ 320.739222][ T32] usb 3-1: Manufacturer: syz [ 320.739231][ T32] usb 3-1: SerialNumber: syz [ 320.760147][ T32] usb 3-1: config 0 descriptor?? [ 320.801065][ T823] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 320.938342][ T823] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 320.963167][ T823] usb 4-1: USB disconnect, device number 75 [ 320.985747][ T5709] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 320.985783][ T5709] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 321.057169][ T9489] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 321.057169][ T9489] program syz.3.1171 not setting count and/or reply_len properly [ 321.060993][ T9489] FAULT_INJECTION: forcing a failure. [ 321.060993][ T9489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.061036][ T9489] CPU: 1 UID: 0 PID: 9489 Comm: syz.3.1171 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 321.061068][ T9489] Tainted: [L]=SOFTLOCKUP [ 321.061079][ T9489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 321.061093][ T9489] Call Trace: [ 321.061102][ T9489] [ 321.061112][ T9489] dump_stack_lvl+0xe8/0x150 [ 321.061146][ T9489] should_fail_ex+0x46b/0x600 [ 321.061183][ T9489] _copy_from_iter+0x1d3/0x1670 [ 321.061216][ T9489] ? pfn_valid+0x125/0x4c0 [ 321.061241][ T9489] ? pfn_valid+0x440/0x4c0 [ 321.061264][ T9489] ? __pfx__copy_from_iter+0x10/0x10 [ 321.061286][ T9489] ? bvec_try_merge_page+0x1d4/0x280 [ 321.061319][ T9489] ? bio_add_page+0x2e9/0x6f0 [ 321.061349][ T9489] copy_page_from_iter+0x220/0x2d0 [ 321.061377][ T9489] blk_rq_map_user_iov+0xa14/0x1790 [ 321.061433][ T9489] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 321.061485][ T9489] ? import_ubuf+0xfb/0x1d0 [ 321.061512][ T9489] blk_rq_map_user_io+0x2ae/0x440 [ 321.061550][ T9489] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 321.061588][ T9489] ? do_raw_spin_lock+0x12b/0x2f0 [ 321.061624][ T9489] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 321.061658][ T9489] ? lockdep_hardirqs_on+0x7a/0x110 [ 321.061690][ T9489] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 321.061722][ T9489] ? rt_mutex_slowunlock+0x1cb/0x300 [ 321.061748][ T9489] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 321.061787][ T9489] sg_common_write+0xcff/0x13e0 [ 321.061827][ T9489] ? __pfx_sg_common_write+0x10/0x10 [ 321.061853][ T9489] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 321.061894][ T9489] ? ___ratelimit+0x58c/0x8d0 [ 321.061933][ T9489] sg_write+0xafb/0xf00 [ 321.061974][ T9489] ? __pfx_sg_write+0x10/0x10 [ 321.062009][ T9489] ? __pfx_aa_file_perm+0x10/0x10 [ 321.062071][ T9489] ? rw_verify_area+0x25b/0x4e0 [ 321.062101][ T9489] ? __pfx_sg_write+0x10/0x10 [ 321.062135][ T9489] vfs_write+0x2a3/0xba0 [ 321.062173][ T9489] ? __pfx_vfs_write+0x10/0x10 [ 321.062206][ T9489] ? __fget_files+0x2a/0x420 [ 321.062234][ T9489] ? __fget_files+0x2a/0x420 [ 321.062258][ T9489] ? __fget_files+0x3a6/0x420 [ 321.062283][ T9489] ? __fget_files+0x2a/0x420 [ 321.062317][ T9489] ksys_write+0x156/0x270 [ 321.062349][ T9489] ? __pfx_ksys_write+0x10/0x10 [ 321.062387][ T9489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.062411][ T9489] do_syscall_64+0x174/0x580 [ 321.062442][ T9489] ? trace_irq_disable+0x3b/0x140 [ 321.062467][ T9489] ? clear_bhb_loop+0x40/0x90 [ 321.062491][ T9489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.062513][ T9489] RIP: 0033:0x7f98802ace59 [ 321.062534][ T9489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.062554][ T9489] RSP: 002b:00007f987e506028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.062579][ T9489] RAX: ffffffffffffffda RBX: 00007f9880525fa0 RCX: 00007f98802ace59 [ 321.062595][ T9489] RDX: 00000000000000e4 RSI: 00002000000004c0 RDI: 0000000000000004 [ 321.062609][ T9489] RBP: 00007f987e506090 R08: 0000000000000000 R09: 0000000000000000 [ 321.062623][ T9489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 321.062637][ T9489] R13: 00007f9880526038 R14: 00007f9880525fa0 R15: 00007ffcfa56e088 [ 321.062671][ T9489] [ 321.599305][ T5709] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 321.599649][ T5709] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 321.630186][ T5709] usb 1-1: USB disconnect, device number 67 [ 322.494254][ T5621] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 322.834817][ T9538] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 322.834817][ T9538] program syz.1.1181 not setting count and/or reply_len properly [ 322.835199][ T9538] FAULT_INJECTION: forcing a failure. [ 322.835199][ T9538] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.835235][ T9538] CPU: 0 UID: 0 PID: 9538 Comm: syz.1.1181 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 322.835266][ T9538] Tainted: [L]=SOFTLOCKUP [ 322.835273][ T9538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 322.835286][ T9538] Call Trace: [ 322.835295][ T9538] [ 322.835304][ T9538] dump_stack_lvl+0xe8/0x150 [ 322.835336][ T9538] should_fail_ex+0x46b/0x600 [ 322.835376][ T9538] _copy_from_iter+0x1d3/0x1670 [ 322.835408][ T9538] ? pfn_valid+0x125/0x4c0 [ 322.835442][ T9538] ? pfn_valid+0x440/0x4c0 [ 322.835466][ T9538] ? __pfx__copy_from_iter+0x10/0x10 [ 322.835487][ T9538] ? bvec_try_merge_page+0x1d4/0x280 [ 322.835519][ T9538] ? bio_add_page+0x2e9/0x6f0 [ 322.835552][ T9538] copy_page_from_iter+0x220/0x2d0 [ 322.835579][ T9538] blk_rq_map_user_iov+0xa14/0x1790 [ 322.835628][ T9538] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 322.835679][ T9538] ? import_ubuf+0xfb/0x1d0 [ 322.835707][ T9538] blk_rq_map_user_io+0x2ae/0x440 [ 322.835747][ T9538] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 322.835783][ T9538] ? do_raw_spin_lock+0x12b/0x2f0 [ 322.835817][ T9538] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 322.835851][ T9538] ? lockdep_hardirqs_on+0x7a/0x110 [ 322.835882][ T9538] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 322.835912][ T9538] ? rt_mutex_slowunlock+0x1cb/0x300 [ 322.835937][ T9538] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 322.835973][ T9538] sg_common_write+0xcff/0x13e0 [ 322.836012][ T9538] ? __pfx_sg_common_write+0x10/0x10 [ 322.836036][ T9538] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 322.836069][ T9538] ? ___ratelimit+0x58c/0x8d0 [ 322.836107][ T9538] sg_write+0xafb/0xf00 [ 322.836150][ T9538] ? __pfx_sg_write+0x10/0x10 [ 322.836187][ T9538] ? __pfx_aa_file_perm+0x10/0x10 [ 322.836249][ T9538] ? rw_verify_area+0x25b/0x4e0 [ 322.836279][ T9538] ? __pfx_sg_write+0x10/0x10 [ 322.836314][ T9538] vfs_write+0x2a3/0xba0 [ 322.836353][ T9538] ? __pfx_vfs_write+0x10/0x10 [ 322.836386][ T9538] ? __fget_files+0x2a/0x420 [ 322.836415][ T9538] ? __fget_files+0x2a/0x420 [ 322.836448][ T9538] ? __fget_files+0x3a6/0x420 [ 322.836473][ T9538] ? __fget_files+0x2a/0x420 [ 322.836507][ T9538] ksys_write+0x156/0x270 [ 322.836540][ T9538] ? __pfx_ksys_write+0x10/0x10 [ 322.836579][ T9538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.836604][ T9538] do_syscall_64+0x174/0x580 [ 322.836635][ T9538] ? trace_irq_disable+0x3b/0x140 [ 322.836660][ T9538] ? clear_bhb_loop+0x40/0x90 [ 322.836688][ T9538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.836711][ T9538] RIP: 0033:0x7fd041e8ce59 [ 322.836731][ T9538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 322.836751][ T9538] RSP: 002b:00007fd0400e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.836776][ T9538] RAX: ffffffffffffffda RBX: 00007fd042105fa0 RCX: 00007fd041e8ce59 [ 322.836792][ T9538] RDX: 00000000000000e4 RSI: 00002000000004c0 RDI: 0000000000000004 [ 322.836807][ T9538] RBP: 00007fd0400e6090 R08: 0000000000000000 R09: 0000000000000000 [ 322.836820][ T9538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 322.836833][ T9538] R13: 00007fd042106038 R14: 00007fd042105fa0 R15: 00007ffd62d1b358 [ 322.836866][ T9538] [ 322.974177][ T823] usb 4-1: new full-speed USB device number 76 using dummy_hcd [ 323.136915][ T823] usb 4-1: not running at top speed; connect to a high speed hub [ 323.141376][ T823] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 323.147771][ T823] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 323.147802][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.147823][ T823] usb 4-1: Product: syz [ 323.147838][ T823] usb 4-1: Manufacturer: syz [ 323.147852][ T823] usb 4-1: SerialNumber: syz [ 323.489877][ T823] usb 4-1: USB disconnect, device number 76 [ 323.796040][ T5709] usb 3-1: USB disconnect, device number 71 [ 323.961311][ T9566] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 323.961311][ T9566] program syz.1.1192 not setting count and/or reply_len properly [ 323.961751][ T9566] FAULT_INJECTION: forcing a failure. [ 323.961751][ T9566] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 323.961788][ T9566] CPU: 0 UID: 0 PID: 9566 Comm: syz.1.1192 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 323.961819][ T9566] Tainted: [L]=SOFTLOCKUP [ 323.961827][ T9566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.961840][ T9566] Call Trace: [ 323.961850][ T9566] [ 323.961859][ T9566] dump_stack_lvl+0xe8/0x150 [ 323.961892][ T9566] should_fail_ex+0x46b/0x600 [ 323.961931][ T9566] _copy_from_iter+0x1d3/0x1670 [ 323.961961][ T9566] ? pfn_valid+0x125/0x4c0 [ 323.961987][ T9566] ? pfn_valid+0x440/0x4c0 [ 323.962016][ T9566] ? __pfx__copy_from_iter+0x10/0x10 [ 323.962039][ T9566] ? bvec_try_merge_page+0x1d4/0x280 [ 323.962073][ T9566] ? bio_add_page+0x2e9/0x6f0 [ 323.962102][ T9566] copy_page_from_iter+0x220/0x2d0 [ 323.962128][ T9566] blk_rq_map_user_iov+0xa14/0x1790 [ 323.962182][ T9566] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 323.962236][ T9566] ? import_ubuf+0xfb/0x1d0 [ 323.962264][ T9566] blk_rq_map_user_io+0x2ae/0x440 [ 323.962304][ T9566] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 323.962343][ T9566] ? do_raw_spin_lock+0x12b/0x2f0 [ 323.962379][ T9566] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 323.962413][ T9566] ? lockdep_hardirqs_on+0x7a/0x110 [ 323.962445][ T9566] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 323.962486][ T9566] ? rt_mutex_slowunlock+0x1cb/0x300 [ 323.962512][ T9566] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 323.962551][ T9566] sg_common_write+0xcff/0x13e0 [ 323.962592][ T9566] ? __pfx_sg_common_write+0x10/0x10 [ 323.962617][ T9566] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 323.962650][ T9566] ? ___ratelimit+0x58c/0x8d0 [ 323.962690][ T9566] sg_write+0xafb/0xf00 [ 323.962733][ T9566] ? __pfx_sg_write+0x10/0x10 [ 323.962770][ T9566] ? __pfx_aa_file_perm+0x10/0x10 [ 323.962833][ T9566] ? rw_verify_area+0x25b/0x4e0 [ 323.962863][ T9566] ? __pfx_sg_write+0x10/0x10 [ 323.962897][ T9566] vfs_write+0x2a3/0xba0 [ 323.962934][ T9566] ? __pfx_vfs_write+0x10/0x10 [ 323.962964][ T9566] ? __fget_files+0x2a/0x420 [ 323.962994][ T9566] ? __fget_files+0x2a/0x420 [ 323.963020][ T9566] ? __fget_files+0x3a6/0x420 [ 323.963045][ T9566] ? __fget_files+0x2a/0x420 [ 323.963079][ T9566] ksys_write+0x156/0x270 [ 323.963113][ T9566] ? __pfx_ksys_write+0x10/0x10 [ 323.963152][ T9566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.963177][ T9566] do_syscall_64+0x174/0x580 [ 323.963207][ T9566] ? trace_irq_disable+0x3b/0x140 [ 323.963232][ T9566] ? clear_bhb_loop+0x40/0x90 [ 323.963259][ T9566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.963281][ T9566] RIP: 0033:0x7fd041e8ce59 [ 323.963303][ T9566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.963323][ T9566] RSP: 002b:00007fd0400e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 323.963348][ T9566] RAX: ffffffffffffffda RBX: 00007fd042105fa0 RCX: 00007fd041e8ce59 [ 323.963365][ T9566] RDX: 00000000000000e4 RSI: 00002000000004c0 RDI: 0000000000000004 [ 323.963381][ T9566] RBP: 00007fd0400e6090 R08: 0000000000000000 R09: 0000000000000000 [ 323.963395][ T9566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 323.963408][ T9566] R13: 00007fd042106038 R14: 00007fd042105fa0 R15: 00007ffd62d1b358 [ 323.963443][ T9566] [ 324.233673][ T9572] 9p: Bad value for 'wfdno' [ 324.360870][ T9575] sg_write: data in/out 805470172/186 bytes for SCSI command 0x0-- guessing data in; [ 324.360870][ T9575] program syz.1.1195 not setting count and/or reply_len properly [ 324.629550][ T823] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 324.754367][ T823] usb 3-1: device descriptor read/64, error -71 [ 324.862589][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.863268][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.874185][ T32] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 324.879554][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.881207][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.994223][ T823] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 324.995044][ T5709] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 325.044130][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 325.046685][ T32] usb 2-1: unable to get BOS descriptor or descriptor too short [ 325.047904][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.047932][ T32] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 325.047995][ T32] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 325.050817][ T32] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.050851][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.050871][ T32] usb 2-1: Product: syz [ 325.050886][ T32] usb 2-1: Manufacturer: syz [ 325.050899][ T32] usb 2-1: SerialNumber: syz [ 325.097927][ T6565] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 325.124240][ T5709] usb 4-1: device descriptor read/64, error -71 [ 325.124456][ T823] usb 3-1: device descriptor read/64, error -71 [ 325.254182][ T823] usb usb3-port1: attempt power cycle [ 325.286495][ T6565] usb 1-1: config index 0 descriptor too short (expected 45, got 11) [ 325.286530][ T6565] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 325.286552][ T6565] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 325.289123][ T6565] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 325.289156][ T6565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.289178][ T6565] usb 1-1: Product: syz [ 325.289192][ T6565] usb 1-1: Manufacturer: syz [ 325.289207][ T6565] usb 1-1: SerialNumber: syz [ 325.382318][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.395214][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.414752][ T5709] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 325.469363][ T9583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.481039][ T9583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.545149][ T5709] usb 4-1: device descriptor read/64, error -71 [ 325.614419][ T823] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 325.639471][ T823] usb 3-1: device descriptor read/8, error -71 [ 325.654763][ T5709] usb usb4-port1: attempt power cycle [ 325.894274][ T823] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 325.916035][ T823] usb 3-1: device descriptor read/8, error -71 [ 326.014248][ T5709] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 326.035711][ T5709] usb 4-1: device descriptor read/8, error -71 [ 326.035761][ T823] usb usb3-port1: unable to enumerate USB device [ 326.072254][ T6565] usb 1-1: USB disconnect, device number 69 [ 326.220697][ T9603] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 326.220697][ T9603] program syz.1.1205 not setting count and/or reply_len properly [ 326.221128][ T9603] FAULT_INJECTION: forcing a failure. [ 326.221128][ T9603] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.221164][ T9603] CPU: 0 UID: 0 PID: 9603 Comm: syz.1.1205 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 326.221195][ T9603] Tainted: [L]=SOFTLOCKUP [ 326.221202][ T9603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 326.221215][ T9603] Call Trace: [ 326.221224][ T9603] [ 326.221234][ T9603] dump_stack_lvl+0xe8/0x150 [ 326.221268][ T9603] should_fail_ex+0x46b/0x600 [ 326.221306][ T9603] _copy_from_iter+0x1d3/0x1670 [ 326.221337][ T9603] ? pfn_valid+0x125/0x4c0 [ 326.221360][ T9603] ? pfn_valid+0x440/0x4c0 [ 326.221384][ T9603] ? __pfx__copy_from_iter+0x10/0x10 [ 326.221406][ T9603] ? bvec_try_merge_page+0x1d4/0x280 [ 326.221439][ T9603] ? bio_add_page+0x2e9/0x6f0 [ 326.221471][ T9603] copy_page_from_iter+0x220/0x2d0 [ 326.221506][ T9603] blk_rq_map_user_iov+0xa14/0x1790 [ 326.221556][ T9603] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 326.221607][ T9603] ? import_ubuf+0xfb/0x1d0 [ 326.221635][ T9603] blk_rq_map_user_io+0x2ae/0x440 [ 326.221673][ T9603] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 326.221709][ T9603] ? do_raw_spin_lock+0x12b/0x2f0 [ 326.221744][ T9603] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 326.221777][ T9603] ? lockdep_hardirqs_on+0x7a/0x110 [ 326.221809][ T9603] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 326.221840][ T9603] ? rt_mutex_slowunlock+0x1cb/0x300 [ 326.221866][ T9603] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 326.221902][ T9603] sg_common_write+0xcff/0x13e0 [ 326.221944][ T9603] ? __pfx_sg_common_write+0x10/0x10 [ 326.221968][ T9603] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 326.221998][ T9603] ? ___ratelimit+0x58c/0x8d0 [ 326.222035][ T9603] sg_write+0xafb/0xf00 [ 326.222076][ T9603] ? __pfx_sg_write+0x10/0x10 [ 326.222111][ T9603] ? __pfx_aa_file_perm+0x10/0x10 [ 326.222170][ T9603] ? rw_verify_area+0x25b/0x4e0 [ 326.222200][ T9603] ? __pfx_sg_write+0x10/0x10 [ 326.222233][ T9603] vfs_write+0x2a3/0xba0 [ 326.222270][ T9603] ? __pfx_vfs_write+0x10/0x10 [ 326.222301][ T9603] ? __fget_files+0x2a/0x420 [ 326.222331][ T9603] ? __fget_files+0x2a/0x420 [ 326.222353][ T9603] ? __fget_files+0x3a6/0x420 [ 326.222375][ T9603] ? __fget_files+0x2a/0x420 [ 326.222409][ T9603] ksys_write+0x156/0x270 [ 326.222441][ T9603] ? __pfx_ksys_write+0x10/0x10 [ 326.222475][ T9603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.222509][ T9603] do_syscall_64+0x174/0x580 [ 326.222539][ T9603] ? trace_irq_disable+0x3b/0x140 [ 326.222573][ T9603] ? clear_bhb_loop+0x40/0x90 [ 326.222599][ T9603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.222621][ T9603] RIP: 0033:0x7fd041e8ce59 [ 326.222640][ T9603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 326.222659][ T9603] RSP: 002b:00007fd0400e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 326.222683][ T9603] RAX: ffffffffffffffda RBX: 00007fd042105fa0 RCX: 00007fd041e8ce59 [ 326.222698][ T9603] RDX: 00000000000000e4 RSI: 00002000000004c0 RDI: 0000000000000004 [ 326.222712][ T9603] RBP: 00007fd0400e6090 R08: 0000000000000000 R09: 0000000000000000 [ 326.222726][ T9603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 326.222740][ T9603] R13: 00007fd042106038 R14: 00007fd042105fa0 R15: 00007ffd62d1b358 [ 326.222770][ T9603] [ 326.274256][ T5709] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 326.324914][ T5709] usb 4-1: device descriptor read/8, error -71 [ 326.446257][ T5709] usb usb4-port1: unable to enumerate USB device [ 327.247261][ T9628] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 327.247261][ T9628] program syz.0.1217 not setting count and/or reply_len properly [ 327.252444][ T9628] FAULT_INJECTION: forcing a failure. [ 327.252444][ T9628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.252486][ T9628] CPU: 1 UID: 0 PID: 9628 Comm: syz.0.1217 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 327.252519][ T9628] Tainted: [L]=SOFTLOCKUP [ 327.252531][ T9628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 327.252544][ T9628] Call Trace: [ 327.252553][ T9628] [ 327.252563][ T9628] dump_stack_lvl+0xe8/0x150 [ 327.252597][ T9628] should_fail_ex+0x46b/0x600 [ 327.252635][ T9628] _copy_from_iter+0x1d3/0x1670 [ 327.252667][ T9628] ? pfn_valid+0x125/0x4c0 [ 327.252692][ T9628] ? pfn_valid+0x440/0x4c0 [ 327.252714][ T9628] ? __pfx__copy_from_iter+0x10/0x10 [ 327.252737][ T9628] ? bvec_try_merge_page+0x1d4/0x280 [ 327.252770][ T9628] ? bio_add_page+0x2e9/0x6f0 [ 327.252800][ T9628] copy_page_from_iter+0x220/0x2d0 [ 327.252826][ T9628] blk_rq_map_user_iov+0xa14/0x1790 [ 327.252878][ T9628] ? __pfx_blk_rq_map_user_iov+0x10/0x10 [ 327.252927][ T9628] ? import_ubuf+0xfb/0x1d0 [ 327.252953][ T9628] blk_rq_map_user_io+0x2ae/0x440 [ 327.252990][ T9628] ? __pfx_blk_rq_map_user_io+0x10/0x10 [ 327.253028][ T9628] ? do_raw_spin_lock+0x12b/0x2f0 [ 327.253063][ T9628] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 327.253097][ T9628] ? lockdep_hardirqs_on+0x7a/0x110 [ 327.253130][ T9628] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 327.253162][ T9628] ? rt_mutex_slowunlock+0x1cb/0x300 [ 327.253188][ T9628] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 327.253227][ T9628] sg_common_write+0xcff/0x13e0 [ 327.253269][ T9628] ? __pfx_sg_common_write+0x10/0x10 [ 327.253294][ T9628] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 327.253326][ T9628] ? ___ratelimit+0x58c/0x8d0 [ 327.253374][ T9628] sg_write+0xafb/0xf00 [ 327.253418][ T9628] ? __pfx_sg_write+0x10/0x10 [ 327.253454][ T9628] ? __pfx_aa_file_perm+0x10/0x10 [ 327.253517][ T9628] ? rw_verify_area+0x25b/0x4e0 [ 327.253547][ T9628] ? __pfx_sg_write+0x10/0x10 [ 327.253583][ T9628] vfs_write+0x2a3/0xba0 [ 327.253621][ T9628] ? __pfx_vfs_write+0x10/0x10 [ 327.253654][ T9628] ? __fget_files+0x2a/0x420 [ 327.253684][ T9628] ? __fget_files+0x2a/0x420 [ 327.253709][ T9628] ? __fget_files+0x3a6/0x420 [ 327.253733][ T9628] ? __fget_files+0x2a/0x420 [ 327.253769][ T9628] ksys_write+0x156/0x270 [ 327.253802][ T9628] ? __pfx_ksys_write+0x10/0x10 [ 327.253840][ T9628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.253866][ T9628] do_syscall_64+0x174/0x580 [ 327.253899][ T9628] ? trace_irq_disable+0x3b/0x140 [ 327.253924][ T9628] ? clear_bhb_loop+0x40/0x90 [ 327.253952][ T9628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.253974][ T9628] RIP: 0033:0x7f9f6854ce59 [ 327.253995][ T9628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.254012][ T9628] RSP: 002b:00007f9f667a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 327.254036][ T9628] RAX: ffffffffffffffda RBX: 00007f9f687c5fa0 RCX: 00007f9f6854ce59 [ 327.254052][ T9628] RDX: 00000000000000e4 RSI: 00002000000004c0 RDI: 0000000000000004 [ 327.254065][ T9628] RBP: 00007f9f667a6090 R08: 0000000000000000 R09: 0000000000000000 [ 327.254078][ T9628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 327.254090][ T9628] R13: 00007f9f687c6038 R14: 00007f9f687c5fa0 R15: 00007fff54761638 [ 327.254141][ T9628] [ 327.649653][ T9634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.650228][ T9634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.685018][ T9632] sg_write: data in/out 163804/578 bytes for SCSI command 0x0-- guessing data in; [ 327.685018][ T9632] program syz.2.1219 not setting count and/or reply_len properly [ 327.950156][ T9642] comedi comedi2: dt2801: I/O port conflict (0x294,2) [ 327.994480][ T9642] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1222'. [ 328.067494][ T9647] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 328.067494][ T9647] program syz.3.1225 not setting count and/or reply_len properly [ 328.074806][ T9642] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1222'. [ 328.459063][ T9661] binder: 9659:9661 ioctl c018620c 200000000140 returned -22 [ 328.652996][ T9670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.668018][ T9670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.681565][ T9669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.687854][ T9669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.711799][ T9670] No control pipe specified [ 328.718962][ T9671] No control pipe specified [ 328.805401][ T6565] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 328.864213][ T5621] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 328.966423][ T6565] usb 1-1: config 39 has an invalid interface number: 111 but max is 1 [ 328.966459][ T6565] usb 1-1: config 39 has an invalid interface number: 122 but max is 1 [ 328.966481][ T6565] usb 1-1: config 39 has no interface number 0 [ 328.966498][ T6565] usb 1-1: config 39 has no interface number 1 [ 328.966562][ T6565] usb 1-1: config 39 interface 111 has no altsetting 0 [ 328.966583][ T6565] usb 1-1: config 39 interface 122 has no altsetting 0 [ 328.969240][ T6565] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=81.96 [ 328.969272][ T6565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.969293][ T6565] usb 1-1: Product: syz [ 328.969309][ T6565] usb 1-1: Manufacturer: syz [ 328.969324][ T6565] usb 1-1: SerialNumber: syz [ 329.024196][ T5621] usb 3-1: Using ep0 maxpacket: 8 [ 329.039115][ T5621] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 329.039206][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 329.039231][ T5621] usb 3-1: Product: syz [ 329.039255][ T5621] usb 3-1: Manufacturer: syz [ 329.039277][ T5621] usb 3-1: SerialNumber: syz [ 329.076417][ T5621] usb 3-1: config 0 descriptor?? [ 329.121629][ T5621] gspca_main: sq905-2.14.0 probing 2770:9120 [ 329.272425][ T6565] usbhid 1-1:39.122: couldn't find an input interrupt endpoint [ 329.305169][ T6565] usb 1-1: USB disconnect, device number 70 [ 329.538635][ T9679] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 329.538635][ T9679] program syz.1.1236 not setting count and/or reply_len properly [ 329.699754][ T9684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.702598][ T9684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.922192][ T5621] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 329.922303][ T5621] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 329.940429][ T5621] usb 3-1: USB disconnect, device number 76 [ 330.150476][ T9695] sg_write: data in/out 131036/186 bytes for SCSI command 0x0-- guessing data in; [ 330.150476][ T9695] program syz.3.1242 not setting count and/or reply_len properly [ 330.188165][ T32] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 330.188197][ T32] usb 2-1: 1:1 : format type 0 is not supported yet [ 330.188917][ T32] usb 2-1: 0:2 : does not exist [ 330.336044][ T9700] loop5: detected capacity change from 0 to 7 [ 330.383074][ T9700] Dev loop5: unable to read RDB block 7 [ 330.383107][ T9700] loop5: AHDI p1 [ 330.383129][ T9700] loop5: partition table partially beyond EOD, truncated [ 330.659723][ T9709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.660547][ T9710] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 330.660547][ T9710] program syz.2.1246 not setting count and/or reply_len properly [ 330.662718][ T9709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.673371][ T9711] sg_write: data in/out 394205/258 bytes for SCSI command 0x0-- guessing data in; [ 330.673371][ T9711] program syz.3.1247 not setting count and/or reply_len properly [ 331.311678][ T5624] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 331.414524][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 331.422384][ T5624] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 331.430624][ T5624] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 331.431552][ T5624] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 331.484816][ T38] kauditd_printk_skb: 51 callbacks suppressed [ 331.484854][ T38] audit: type=1326 audit(1780874295.302:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.3.1247" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98802ace59 code=0x7fc00000 [ 331.484910][ T38] audit: type=1326 audit(1780874295.302:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.3.1247" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f98802ace59 code=0x7fc00000 [ 331.484962][ T38] audit: type=1326 audit(1780874295.302:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.3.1247" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98802ace59 code=0x7fc00000 [ 331.489192][ T38] audit: type=1326 audit(1780874295.312:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9707 comm="syz.3.1247" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f98802ace59 code=0x7fc00000 [ 332.336105][ T9741] sg_write: data in/out 221268/136 bytes for SCSI command 0x0-- guessing data in; [ 332.336105][ T9741] program syz.2.1255 not setting count and/or reply_len properly [ 332.369522][ T9742] loop5: detected capacity change from 0 to 7 [ 332.381085][ T9742] Dev loop5: unable to read RDB block 7 [ 332.381115][ T9742] loop5: AHDI p1 [ 332.381134][ T9742] loop5: partition table partially beyond EOD, truncated [ 332.604142][ T5623] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 332.759696][ T5623] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 332.759733][ T5623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.787014][ T5623] usb 3-1: config 0 descriptor?? [ 332.824891][ T5623] cp210x 3-1:0.0: cp210x converter detected [ 333.211418][ T9741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.212375][ T9741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.546319][ T4929] Bluetooth: hci4: command tx timeout [ 333.631132][ T32] IPVS: starting estimator thread 0... [ 333.632858][ T5623] usb 3-1: cp210x converter now attached to ttyUSB0 [ 333.715077][ T9755] IPVS: using max 13 ests per chain, 31200 per kthread [ 333.723609][ T5623] usb 3-1: USB disconnect, device number 77 [ 333.751801][ T5623] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 333.798343][ T9757] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.799034][ T9757] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.054511][ T5623] cp210x 3-1:0.0: device disconnected [ 334.308481][ T9765] loop5: detected capacity change from 0 to 7 [ 334.380164][ T9765] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 334.380198][ T9765] loop5: partition table partially beyond EOD, truncated [ 334.380502][ T9765] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 334.412445][ T5623] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 334.528956][ T9765] support for the xor transformation has been removed. [ 334.617142][ T5623] usb 3-1: unable to get BOS descriptor or descriptor too short [ 334.618766][ T5623] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 334.618794][ T5623] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 334.618813][ T5623] usb 3-1: config 63 has no interface number 0 [ 334.618841][ T5623] usb 3-1: config 63 interface 66 has no altsetting 0 [ 334.621759][ T5623] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 334.621790][ T5623] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.621812][ T5623] usb 3-1: Product: syz [ 334.621827][ T5623] usb 3-1: Manufacturer: syz [ 334.621843][ T5623] usb 3-1: SerialNumber: syz [ 334.766223][ T7556] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.823258][ T9772] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 334.823258][ T9772] program syz.3.1263 not setting count and/or reply_len properly [ 335.032093][ T5623] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf) [ 335.032687][ T5623] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1). [ 335.054191][ T5623] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 9 on unit 1: -71 (exp. 1). [ 335.064851][ T5623] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 1 on unit 1: -71 (exp. 1). [ 335.074201][ T5623] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1). [ 335.086810][ T5623] uvcvideo 3-1:63.66: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 335.086901][ T5623] uvcvideo 3-1:63.66: No streaming interface found for terminal 29. [ 335.086923][ T5623] uvcvideo 3-1:63.66: Entity type for entity Output 32773 was not initialized! [ 335.261345][ T5623] usb 3-1: USB disconnect, device number 78 [ 335.629730][ T4929] Bluetooth: hci4: command tx timeout [ 335.730821][ T7148] udevd[7148]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 335.960601][ T9779] loop5: detected capacity change from 0 to 7 [ 335.980163][ T9779] Dev loop5: unable to read RDB block 7 [ 335.980196][ T9779] loop5: AHDI p1 [ 335.980217][ T9779] loop5: partition table partially beyond EOD, truncated [ 336.355111][ T6565] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 336.450461][ T7556] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.527025][ T6565] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 336.527061][ T6565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.527085][ T6565] usb 4-1: Product: syz [ 336.527101][ T6565] usb 4-1: Manufacturer: syz [ 336.527116][ T6565] usb 4-1: SerialNumber: syz [ 336.987217][ T6565] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 336.987290][ T6565] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 337.045421][ T7556] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.233719][ T9792] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1269'. [ 337.419233][ T9795] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 337.486050][ T9795] overlayfs: overlapping lowerdir path [ 337.667583][ T9803] netlink: 'syz.2.1272': attribute type 11 has an invalid length. [ 337.667671][ T9803] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.1272'. [ 337.704257][ T4929] Bluetooth: hci4: command tx timeout [ 337.770362][ T7556] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.787234][ T9805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.821103][ T9805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.874729][ T9805] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 337.875105][ T9805] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 337.886141][ T9805] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 337.886397][ T9805] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 337.889934][ T9805] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 337.890165][ T9805] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 337.891570][ T9805] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 337.891770][ T9805] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512 [ 337.891791][ T9805] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1) [ 338.249136][ T9781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.259508][ T9781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.375308][ T32] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 338.472131][ T6565] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 338.472197][ T6565] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 338.473174][ T6565] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 338.514584][ T6565] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 338.529013][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 338.543321][ T6565] usb 4-1: USB disconnect, device number 81 [ 338.552682][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 338.554364][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.554443][ T32] usb 3-1: config 1 interface 2 has no altsetting 0 [ 338.592976][ T32] usb 3-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 338.593012][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.593035][ T32] usb 3-1: Product: syz [ 338.593052][ T32] usb 3-1: Manufacturer: syz [ 338.593068][ T32] usb 3-1: SerialNumber: syz [ 338.917786][ T32] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 338.930666][ T32] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 338.997044][ T9813] loop5: detected capacity change from 0 to 7 [ 339.020811][ T9813] Dev loop5: unable to read RDB block 7 [ 339.020842][ T9813] loop5: AHDI p1 [ 339.020860][ T9813] loop5: partition table partially beyond EOD, truncated [ 339.394955][ T9822] FAULT_INJECTION: forcing a failure. [ 339.394955][ T9822] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.394992][ T9822] CPU: 1 UID: 0 PID: 9822 Comm: syz.3.1275 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 339.395020][ T9822] Tainted: [L]=SOFTLOCKUP [ 339.395027][ T9822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 339.395038][ T9822] Call Trace: [ 339.395046][ T9822] [ 339.395054][ T9822] dump_stack_lvl+0xe8/0x150 [ 339.395082][ T9822] should_fail_ex+0x46b/0x600 [ 339.395115][ T9822] _copy_from_user+0x2d/0xb0 [ 339.395136][ T9822] kstrtouint_from_user+0xd6/0x180 [ 339.395171][ T9822] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 339.395223][ T9822] proc_fail_nth_write+0x8e/0x210 [ 339.395244][ T9822] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 339.395270][ T9822] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 339.395292][ T9822] vfs_write+0x2a3/0xba0 [ 339.395325][ T9822] ? __pfx_vfs_write+0x10/0x10 [ 339.395352][ T9822] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 339.395380][ T9822] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.395407][ T9822] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.395432][ T9822] ? mutex_lock_nested+0x152/0x1d0 [ 339.395451][ T9822] ? fdget_pos+0x252/0x320 [ 339.395480][ T9822] ksys_write+0x156/0x270 [ 339.395507][ T9822] ? __pfx_ksys_write+0x10/0x10 [ 339.395538][ T9822] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.395557][ T9822] do_syscall_64+0x174/0x580 [ 339.395582][ T9822] ? trace_irq_disable+0x3b/0x140 [ 339.395603][ T9822] ? clear_bhb_loop+0x40/0x90 [ 339.395625][ T9822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.395643][ T9822] RIP: 0033:0x7f988026d68e [ 339.395661][ T9822] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 339.395676][ T9822] RSP: 002b:00007f987e4c3fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 339.395697][ T9822] RAX: ffffffffffffffda RBX: 00007f987e4c46c0 RCX: 00007f988026d68e [ 339.395714][ T9822] RDX: 0000000000000001 RSI: 00007f987e4c40a0 RDI: 0000000000000006 [ 339.395724][ T9822] RBP: 00007f987e4c4090 R08: 0000000000000000 R09: 0000000000000000 [ 339.395736][ T9822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.395748][ T9822] R13: 00007f9880526218 R14: 00007f9880526180 R15: 00007ffcfa56e088 [ 339.395779][ T9822] [ 339.784256][ T4929] Bluetooth: hci4: command tx timeout [ 340.291451][ T32] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 340.298175][ T32] usb 3-1: USB disconnect, device number 79 [ 340.306345][ T9726] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.306666][ T9726] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.306993][ T9726] bridge_slave_0: entered allmulticast mode [ 340.341912][ T9726] bridge_slave_0: entered promiscuous mode [ 340.450963][ T9726] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.451177][ T9726] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.451396][ T9726] bridge_slave_1: entered allmulticast mode [ 340.452656][ T6928] udevd[6928]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 340.471762][ T9726] bridge_slave_1: entered promiscuous mode [ 340.634380][ T5623] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 340.694998][ T7556] bridge_slave_1: left allmulticast mode [ 340.695219][ T7556] bridge_slave_1: left promiscuous mode [ 340.711574][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.804268][ T5623] usb 4-1: Using ep0 maxpacket: 32 [ 340.806320][ T5623] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.806348][ T5623] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.809398][ T5623] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 340.809416][ T5623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.809429][ T5623] usb 4-1: Product: syz [ 340.809438][ T5623] usb 4-1: Manufacturer: syz [ 340.809448][ T5623] usb 4-1: SerialNumber: syz [ 340.817763][ T5623] usb 4-1: config 0 descriptor?? [ 340.926629][ T7556] bridge_slave_0: left allmulticast mode [ 340.926658][ T7556] bridge_slave_0: left promiscuous mode [ 340.926842][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.027089][ T5623] usb 4-1: USB disconnect, device number 82 [ 341.701674][ T9840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.702154][ T9840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.248067][ T7556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 342.345649][ T7556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 342.367768][ T7556] bond0 (unregistering): Released all slaves [ 342.631905][ T9726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 342.678187][ T9726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 342.708875][ T9849] loop5: detected capacity change from 0 to 7 [ 342.742409][ T9849] Dev loop5: unable to read RDB block 7 [ 342.742442][ T9849] loop5: AHDI p1 [ 342.742465][ T9849] loop5: partition table partially beyond EOD, truncated [ 342.827899][ T9726] team0: Port device team_slave_0 added [ 342.843846][ T9726] team0: Port device team_slave_1 added [ 343.539084][ T9862] netlink: 'syz.1.1287': attribute type 10 has an invalid length. [ 343.612100][ T9863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.612824][ T9863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.199467][ T9726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.201464][ T9726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.201501][ T9726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.434418][ T5819] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 344.471812][ T9862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 344.485802][ T9862] team0: Port device netdevsim1 added [ 344.490167][ T9726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.490182][ T9726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.490200][ T9726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.615399][ T5819] usb 4-1: Using ep0 maxpacket: 32 [ 344.657386][ T5819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 344.659385][ T5276] 8021q: adding VLAN 0 to HW filter on device eth1 [ 344.684638][ T5819] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 50178, setting to 1024 [ 344.684678][ T5819] usb 4-1: config 1 interface 2 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 344.729050][ T5819] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 344.729084][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.729106][ T5819] usb 4-1: Product: syz [ 344.729121][ T5819] usb 4-1: Manufacturer: syz [ 344.729137][ T5819] usb 4-1: SerialNumber: syz [ 344.872905][ T9726] hsr_slave_0: entered promiscuous mode [ 344.882543][ T9726] hsr_slave_1: entered promiscuous mode [ 345.278587][ T5819] usb 4-1: USB disconnect, device number 83 [ 345.423907][ T6902] udevd[6902]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 345.480545][ T9886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 345.549634][ T9886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.050277][ T9889] tipc: Started in network mode [ 346.050299][ T9889] tipc: Node identity ac14140f, cluster identity 4711 [ 346.082248][ T9889] tipc: New replicast peer: 255.255.255.255 [ 346.083845][ T9889] tipc: Enabled bearer , priority 10 [ 346.116863][ T5819] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 346.334309][ T5819] usb 4-1: Using ep0 maxpacket: 16 [ 346.337635][ T5819] usb 4-1: unable to get BOS descriptor or descriptor too short [ 346.340932][ T5819] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.340997][ T5819] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 346.359891][ T5819] usb 4-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 346.359923][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.359945][ T5819] usb 4-1: Product: syz [ 346.359958][ T5819] usb 4-1: Manufacturer: syz [ 346.359973][ T5819] usb 4-1: SerialNumber: syz [ 346.601184][ T5819] snd-ua101 4-1:1.1: invalid num_altsetting [ 346.601238][ T5819] snd-ua101 4-1:1.0: invalid num_altsetting [ 346.638200][ T5819] usb 4-1: USB disconnect, device number 84 [ 347.345147][ T5819] tipc: Node number set to 2886997007 [ 347.637701][ T9921] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 347.637701][ T9921] program syz.3.1299 not setting count and/or reply_len properly [ 347.835461][ T7556] hsr_slave_0: left promiscuous mode [ 347.874322][ T9922] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.875045][ T9922] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.895153][ T9922] sg_write: data in/out 732549/136 bytes for SCSI command 0x0-- guessing data in; [ 347.895153][ T9922] program syz.1.1298 not setting count and/or reply_len properly [ 347.929661][ T7556] hsr_slave_1: left promiscuous mode [ 347.966398][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.016030][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.062606][ T7556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.062637][ T7556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.257629][ T9935] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1301'. [ 348.279741][ T9935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1301'. [ 348.339700][ T7556] veth1_macvtap: left promiscuous mode [ 348.339960][ T7556] veth0_macvtap: left promiscuous mode [ 348.340245][ T7556] veth1_vlan: left promiscuous mode [ 348.340504][ T7556] veth0_vlan: left promiscuous mode [ 349.395504][ T7556] team0 (unregistering): Port device team_slave_1 removed [ 349.482009][ T7556] team0 (unregistering): Port device team_slave_0 removed [ 349.810544][ T5276] 8021q: adding VLAN 0 to HW filter on device eth2 [ 350.164225][ T6565] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 350.326338][ T6565] usb 4-1: Using ep0 maxpacket: 32 [ 350.379729][ T6565] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 350.379774][ T6565] usb 4-1: can't read configurations, error -61 [ 350.506431][ T6565] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 350.654227][ T6565] usb 4-1: Using ep0 maxpacket: 32 [ 350.698089][ T6565] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 350.698131][ T6565] usb 4-1: can't read configurations, error -61 [ 350.721539][ T6565] usb usb4-port1: attempt power cycle [ 351.064392][ T6565] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 351.084763][ T6565] usb 4-1: Using ep0 maxpacket: 32 [ 351.087383][ T6565] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 351.087426][ T6565] usb 4-1: can't read configurations, error -61 [ 351.108337][ T38] audit: type=1326 audit(1780874314.892:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9959 comm="syz.1.1307" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd041e8ce59 code=0x0 [ 351.234198][ T6565] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 351.254797][ T6565] usb 4-1: Using ep0 maxpacket: 32 [ 351.258640][ T6565] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 351.258681][ T6565] usb 4-1: can't read configurations, error -61 [ 351.259160][ T6565] usb usb4-port1: unable to enumerate USB device [ 351.410015][ T9971] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 351.410015][ T9971] program syz.1.1309 not setting count and/or reply_len properly [ 351.516656][ T5276] 8021q: adding VLAN 0 to HW filter on device eth3 [ 352.347418][ T823] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 352.505107][ T823] usb 3-1: config 1 interface 0 altsetting 8 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 352.505148][ T823] usb 3-1: config 1 interface 0 has no altsetting 0 [ 352.508325][ T823] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 352.508355][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.508375][ T823] usb 3-1: Product: 縪茚鱎䫡咎䶴墩Ꭼ㻮὇︿磂⎫뿱呮중챉␴婾棎镜ۧ冭卽Ꞵ틎ᆞ꠆ୃ䁫⫰쭂▦㫵ﶰ磙ᾕ緊༇耽䢠灒ᝀ⽻曹ꛇ觏嗢⍚慔⣽䇠╥ﴨ싪坯鞪뚿羿꘦縢䅗舒猃䧀岧仑ۧ俔然歀僢䱹Ẋ쥷혏൝頭䲫䰢琵ए覣K瑱섻욆냧ߝ㵧捏릅胃逹嫰ᨖꛕ [ 352.508405][ T823] usb 3-1: Manufacturer: ࠇ [ 352.508419][ T823] usb 3-1: SerialNumber:  [ 352.534162][ T9982] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 352.995140][ T9982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.995838][ T9982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.999653][ T9983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.000308][ T9983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.020902][ T9982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.021521][ T9982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.031800][ T9983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.036170][ T9983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.047419][ T823] usb 3-1: USB disconnect, device number 80 [ 353.136803][T10005] loop5: detected capacity change from 0 to 7 [ 353.137938][T10005] Dev loop5: unable to read RDB block 7 [ 353.137965][T10005] loop5: AHDI p1 [ 353.137982][T10005] loop5: partition table partially beyond EOD, truncated [ 353.906524][T10021] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 353.906524][T10021] program syz.1.1318 not setting count and/or reply_len properly [ 355.341947][T10054] loop5: detected capacity change from 0 to 7 [ 355.355549][T10054] Dev loop5: unable to read RDB block 7 [ 355.355596][T10054] loop5: AHDI p1 [ 355.355615][T10054] loop5: partition table partially beyond EOD, truncated [ 355.445149][ T5819] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 355.626324][ T5819] usb 4-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 355.626361][ T5819] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.626383][ T5819] usb 4-1: Product: syz [ 355.626399][ T5819] usb 4-1: Manufacturer: syz [ 355.626416][ T5819] usb 4-1: SerialNumber: syz [ 355.645152][ T5819] usb 4-1: config 0 descriptor?? [ 355.680625][ T5819] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 355.861085][ T5819] gspca_sunplus: reg_r err -32 [ 355.920547][ T6565] usb 4-1: USB disconnect, device number 89 [ 356.181367][T10071] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 356.181367][T10071] program syz.3.1326 not setting count and/or reply_len properly [ 356.714186][ T6565] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 356.778212][T10085] netlink: 'syz.2.1330': attribute type 1 has an invalid length. [ 356.782064][T10086] netlink: 'syz.2.1330': attribute type 1 has an invalid length. [ 356.864252][ T6565] usb 4-1: Using ep0 maxpacket: 32 [ 356.870600][ T6565] usb 4-1: unable to get BOS descriptor or descriptor too short [ 356.878217][ T6565] usb 4-1: config 6 has an invalid interface number: 61 but max is 0 [ 356.878251][ T6565] usb 4-1: config 6 has no interface number 0 [ 356.878303][ T6565] usb 4-1: config 6 interface 61 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 356.878334][ T6565] usb 4-1: config 6 interface 61 has no altsetting 0 [ 356.896521][ T6565] usb 4-1: New USB device found, idVendor=0bfd, idProduct=0115, bcdDevice=60.1f [ 356.896557][ T6565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.896579][ T6565] usb 4-1: Product: syz [ 356.896595][ T6565] usb 4-1: Manufacturer: syz [ 356.896611][ T6565] usb 4-1: SerialNumber: syz [ 357.287776][ T6565] kvaser_usb 4-1:6.61: error -ENODEV: Cannot get usb endpoint(s) [ 357.311074][ T9726] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.336685][ T6565] usb 4-1: USB disconnect, device number 90 [ 357.432964][ T9726] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.436164][ T9726] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 357.512309][ T9726] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.552631][ T9726] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.620820][ T9726] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.623225][ T9726] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.710434][ T9726] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 358.155090][T10114] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1332'. [ 358.155119][T10114] veth0_to_bond: default FDB implementation only supports local addresses [ 358.234196][ T5722] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 358.261292][T10117] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 358.261292][T10117] program syz.3.1335 not setting count and/or reply_len properly [ 358.414759][ T5722] usb 3-1: Using ep0 maxpacket: 8 [ 358.422632][ T5722] usb 3-1: unable to get BOS descriptor or descriptor too short [ 358.427464][ T5722] usb 3-1: config 3 has an invalid interface number: 171 but max is 0 [ 358.427499][ T5722] usb 3-1: config 3 has no interface number 0 [ 358.444138][ T5722] usb 3-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=1a.86 [ 358.444173][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.444197][ T5722] usb 3-1: Product: syz [ 358.444212][ T5722] usb 3-1: Manufacturer: syz [ 358.444227][ T5722] usb 3-1: SerialNumber: syz [ 358.572956][ T9726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.128214][ T9726] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.302150][ T6115] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.302625][ T6115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.426836][ T7864] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.426997][ T7864] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.499614][ T5722] (null): radio-mr800 - initialization failed [ 359.499907][ T5722] radio-mr800 3-1:3.171: probe with driver radio-mr800 failed with error -22 [ 359.500464][ T5722] usbhid 3-1:3.171: couldn't find an input interrupt endpoint [ 359.528316][ T5722] usb 3-1: USB disconnect, device number 81 [ 360.720468][T10154] syzkaller1: entered promiscuous mode [ 360.720499][T10154] syzkaller1: entered allmulticast mode [ 361.191150][T10168] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.191823][T10168] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.518082][ T9726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.683784][ T9726] veth0_vlan: entered promiscuous mode [ 361.726870][ T9726] veth1_vlan: entered promiscuous mode [ 361.867231][ T9726] veth0_macvtap: entered promiscuous mode [ 361.892725][ T9726] veth1_macvtap: entered promiscuous mode [ 361.939527][T10179] tmpfs: Bad value for 'nr_inodes' [ 361.995815][T10181] tmpfs: Bad value for 'nr_inodes' [ 362.003591][T10179] Can't find ip_set type has:ip,port,ip [ 362.039066][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.112901][ T9726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 362.123045][ T823] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 362.211729][ T7565] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.242316][ T7565] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.263520][ T7565] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.307713][ T7565] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 362.338454][ T823] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 362.338485][ T823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.338506][ T823] usb 3-1: config 0 has no interface number 0 [ 362.338553][ T823] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 362.342966][ T823] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 362.342999][ T823] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 362.343018][ T823] usb 3-1: Product: syz [ 362.343027][ T823] usb 3-1: SerialNumber: syz [ 362.362074][ T823] usb 3-1: config 0 descriptor?? [ 362.451004][ T823] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 362.601691][ T823] usb 3-1: USB disconnect, device number 82 [ 363.755962][ T6139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.755986][ T6139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.804344][ T5819] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 363.865225][ T5722] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 363.991575][ T5819] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 363.991611][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.991633][ T5819] usb 3-1: Product: syz [ 363.991649][ T5819] usb 3-1: Manufacturer: syz [ 363.991663][ T5819] usb 3-1: SerialNumber: syz [ 363.995863][T10200] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.996446][T10200] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.022891][T10201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.023497][T10201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.044107][ T5722] usb 4-1: Using ep0 maxpacket: 8 [ 364.060873][ T5819] usb 3-1: config 0 descriptor?? [ 364.063500][ T193] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.063522][ T193] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.090299][ T5722] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.090337][ T5722] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.090362][ T5722] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 364.090389][ T5722] usb 4-1: config 0 interface 0 has no altsetting 0 [ 364.090425][ T5722] usb 4-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 364.090450][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.100643][ T5819] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 364.167687][ T5722] usb 4-1: config 0 descriptor?? [ 364.612041][T10210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.623758][T10210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.635884][ T5722] usbhid 4-1:0.0: can't add hid device: -71 [ 364.636080][ T5722] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 364.667804][ T5722] usb 4-1: USB disconnect, device number 91 [ 365.061697][T10224] netlink: 'syz.1.1356': attribute type 12 has an invalid length. [ 365.154241][ T5722] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 365.309943][ T5722] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 365.309977][ T5722] usb 4-1: config 0 has no interface number 0 [ 365.310027][ T5722] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 365.310056][ T5722] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.353401][ T5722] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 365.353434][ T5722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.353453][ T5722] usb 4-1: Product: syz [ 365.353466][ T5722] usb 4-1: Manufacturer: syz [ 365.353480][ T5722] usb 4-1: SerialNumber: syz [ 365.411482][ T5722] usb 4-1: config 0 descriptor?? [ 365.426626][T10213] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 365.445414][ T5722] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 365.476057][ T5722] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 365.678878][T10229] netlink: 5028 bytes leftover after parsing attributes in process `syz.1.1357'. [ 365.713730][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.731854][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.892918][ C0] cyberjack ttyUSB0: cyberjack_read_int_callback - failed resubmitting read urb, error -22 [ 366.172048][ T6565] usb 4-1: USB disconnect, device number 92 [ 366.225251][ T6565] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 366.230525][ T6565] cyberjack 4-1:0.69: device disconnected [ 366.903042][T10244] netlink: 'syz.0.1360': attribute type 32 has an invalid length. [ 367.128712][T10247] program syz.3.1362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.472055][T10257] loop5: detected capacity change from 0 to 7 [ 367.473885][T10257] Dev loop5: unable to read RDB block 7 [ 367.473913][T10257] loop5: AHDI p1 [ 367.473935][T10257] loop5: partition table partially beyond EOD, truncated [ 367.760455][T10262] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1367'. [ 368.053664][T10196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.071199][T10196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.089382][ T5819] gspca_stk1135: reg_w 0x1b err -71 [ 368.090505][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 368.090520][ T5819] gspca_stk1135: Sensor write failed [ 368.090545][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 368.090555][ T5819] gspca_stk1135: Sensor write failed [ 368.090599][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 368.090607][ T5819] gspca_stk1135: Sensor read failed [ 368.090633][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 368.090642][ T5819] gspca_stk1135: Sensor read failed [ 368.090649][ T5819] gspca_stk1135: Detected sensor type unknown (0x0) [ 368.090678][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 368.090687][ T5819] gspca_stk1135: Sensor read failed [ 368.090712][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 368.090720][ T5819] gspca_stk1135: Sensor read failed [ 368.090744][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 368.090754][ T5819] gspca_stk1135: Sensor write failed [ 368.090778][ T5819] gspca_stk1135: serial bus timeout: status=0x00 [ 368.090787][ T5819] gspca_stk1135: Sensor write failed [ 368.090875][ T5819] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 368.263125][ T5819] usb 3-1: USB disconnect, device number 83 [ 368.314228][ T5623] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 368.494251][ T5623] usb 4-1: Using ep0 maxpacket: 32 [ 368.496732][ T5623] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 368.496765][ T5623] usb 4-1: config 0 has no interface number 0 [ 368.496817][ T5623] usb 4-1: config 0 interface 184 has no altsetting 0 [ 368.524802][ T5623] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 368.524838][ T5623] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.524861][ T5623] usb 4-1: Product: syz [ 368.524876][ T5623] usb 4-1: Manufacturer: syz [ 368.524893][ T5623] usb 4-1: SerialNumber: syz [ 368.571630][ T5623] usb 4-1: config 0 descriptor?? [ 368.688829][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.701375][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.807672][T10273] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 368.973755][T10282] loop5: detected capacity change from 0 to 7 [ 368.980844][T10282] Dev loop5: unable to read RDB block 7 [ 368.980875][T10282] loop5: AHDI p1 [ 368.980895][T10282] loop5: partition table partially beyond EOD, truncated [ 369.103408][T10284] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 369.103408][T10284] program syz.2.1375 not setting count and/or reply_len properly [ 369.663096][ T5623] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 369.663135][ T5623] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 369.663156][ T5623] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 369.663509][ T5623] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 369.736320][ T5623] usb 4-1: USB disconnect, device number 93 [ 370.020750][T10296] netlink: 'syz.0.1377': attribute type 21 has an invalid length. [ 370.309147][T10299] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1378'. [ 371.004135][ T5623] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 371.282402][T10324] gfs2: error -5 reading superblock [ 371.542775][T10337] comedi comedi3: dt2814: I/O base address or length out of range [ 371.766559][T10340] faux_driver vkms: [drm] Unknown color mode 5; guessing buffer size. [ 371.845743][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'. [ 371.956711][T10340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.970620][T10340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.992636][T10346] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 371.992636][T10346] program syz.2.1392 not setting count and/or reply_len properly [ 372.055964][ T5623] usb 4-1: device descriptor read/64, error -71 [ 372.255075][T10334] syz.0.1387 (10334): drop_caches: 2 [ 372.295914][ T5623] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 372.394390][ T823] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 372.444155][ T5623] usb 4-1: Using ep0 maxpacket: 32 [ 372.446831][ T5623] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 372.446860][ T5623] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 372.446882][ T5623] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 372.446932][ T5623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 372.446946][ T5623] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 372.446961][ T5623] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 372.446987][ T5623] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 372.447003][ T5623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.452252][ T5623] usb 4-1: config 0 descriptor?? [ 372.544182][ T823] usb 3-1: Using ep0 maxpacket: 32 [ 372.547069][ T823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.565533][ T823] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 372.565569][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.565589][ T823] usb 3-1: Product: syz [ 372.565614][ T823] usb 3-1: Manufacturer: syz [ 372.565631][ T823] usb 3-1: SerialNumber: syz [ 372.572444][ T823] usb 3-1: config 0 descriptor?? [ 372.589642][ T823] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 372.594342][ T6565] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 372.769760][ T5623] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 95 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 372.802532][T10352] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1395'. [ 372.814164][ T6565] usb 1-1: Using ep0 maxpacket: 16 [ 372.816487][ T6565] usb 1-1: config 73 has an invalid interface number: 24 but max is 0 [ 372.816518][ T6565] usb 1-1: config 73 has no interface number 0 [ 372.816554][ T6565] usb 1-1: config 73 interface 24 has no altsetting 0 [ 372.819762][ T6565] usb 1-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.09 [ 372.819794][ T6565] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.819815][ T6565] usb 1-1: Product: syz [ 372.819831][ T6565] usb 1-1: Manufacturer: syz [ 372.819847][ T6565] usb 1-1: SerialNumber: syz [ 372.976426][T10341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.983147][T10341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.131063][ T6565] go7007 1-1:73.24: probe with driver go7007 failed with error -12 [ 373.172410][ T6565] usb 1-1: USB disconnect, device number 71 [ 373.177048][T10341] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1389'. [ 373.329880][ T5621] usb 4-1: USB disconnect, device number 95 [ 373.363875][ T5621] usblp0: removed [ 373.413035][ T823] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71 [ 373.413144][ T823] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71 [ 373.440290][ T823] usb 3-1: USB disconnect, device number 84 [ 373.791865][T10361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.792523][T10361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.004220][ T5621] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 374.157743][ T5621] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 374.157776][ T5621] usb 1-1: config 220 has an invalid descriptor of length 153, skipping remainder of the config [ 374.157799][ T5621] usb 1-1: config 220 has no interface number 2 [ 374.157878][ T5621] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 374.157907][ T5621] usb 1-1: config 220 interface 0 has no altsetting 0 [ 374.157927][ T5621] usb 1-1: config 220 interface 76 has no altsetting 0 [ 374.157946][ T5621] usb 1-1: config 220 interface 1 has no altsetting 0 [ 374.162512][ T5621] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 374.162545][ T5621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.162568][ T5621] usb 1-1: Product: syz [ 374.162584][ T5621] usb 1-1: Manufacturer: syz [ 374.162599][ T5621] usb 1-1: SerialNumber: syz [ 374.457320][ T5621] usb 1-1: selecting invalid altsetting 0 [ 374.462039][T10367] loop5: detected capacity change from 0 to 7 [ 374.483495][ T5621] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 374.483567][ T5621] uvcvideo 1-1:220.0: No valid video chain found. [ 374.488040][ T823] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 374.557339][T10367] Dev loop5: unable to read RDB block 7 [ 374.557372][T10367] loop5: AHDI p1 [ 374.557395][T10367] loop5: partition table partially beyond EOD, truncated [ 374.558883][ T5621] usb 1-1: selecting invalid altsetting 0 [ 374.558919][ T5621] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 374.568690][ T5621] usb 1-1: USB disconnect, device number 72 [ 374.635006][ T823] usb 3-1: Using ep0 maxpacket: 16 [ 374.637122][ T823] usb 3-1: config index 0 descriptor too short (expected 16456, got 72) [ 374.637151][ T823] usb 3-1: config 0 has an invalid interface number: 125 but max is 1 [ 374.637173][ T823] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.637194][ T823] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 374.637217][ T823] usb 3-1: config 0 has no interface number 0 [ 374.639811][ T823] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 374.639840][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.639862][ T823] usb 3-1: Product: syz [ 374.639878][ T823] usb 3-1: Manufacturer: syz [ 374.639894][ T823] usb 3-1: SerialNumber: syz [ 374.683634][ T823] usb 3-1: config 0 descriptor?? [ 374.927720][ T823] usb 3-1: USB disconnect, device number 85 [ 375.081085][T10376] tmpfs: Bad value for 'mpol' [ 375.264247][ T5621] usb 4-1: new full-speed USB device number 96 using dummy_hcd [ 375.390158][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.390818][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.415409][ T5621] usb 4-1: not running at top speed; connect to a high speed hub [ 375.416520][ T5621] usb 4-1: config 5 has an invalid interface number: 104 but max is 0 [ 375.416548][ T5621] usb 4-1: config 5 has no interface number 0 [ 375.416597][ T5621] usb 4-1: config 5 interface 104 altsetting 255 endpoint 0xD has invalid wMaxPacketSize 0 [ 375.416615][ T5621] usb 4-1: config 5 interface 104 altsetting 255 endpoint 0x7 has invalid maxpacket 1024, setting to 64 [ 375.416632][ T5621] usb 4-1: config 5 interface 104 altsetting 255 endpoint 0x5 has invalid maxpacket 1536, setting to 64 [ 375.416652][ T5621] usb 4-1: config 5 interface 104 altsetting 255 has an invalid descriptor for endpoint zero, skipping [ 375.416666][ T5621] usb 4-1: config 5 interface 104 has no altsetting 0 [ 375.419804][ T5621] usb 4-1: string descriptor 0 read error: -22 [ 375.419920][ T5621] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=40.d3 [ 375.419935][ T5621] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.484176][ T823] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 375.535055][T10372] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 375.541060][ T5621] usb 4-1: selecting invalid altsetting 1 [ 375.541085][ T5621] catc 4-1:5.104: Can't set altsetting 1. [ 375.541152][ T5621] catc 4-1:5.104: probe with driver catc failed with error -5 [ 375.638306][ T823] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 64, setting to 0 [ 375.638339][ T823] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 40, changing to 4 [ 375.638356][ T823] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 0 [ 375.641599][ T823] usb 1-1: string descriptor 0 read error: -22 [ 375.642786][ T823] usb 1-1: New USB device found, idVendor=0499, idProduct=500d, bcdDevice= 0.40 [ 375.642804][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.700838][ T823] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.701228][ T823] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 375.711786][ T823] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.712322][ T823] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 375.718660][ T823] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 375.800664][ T5706] usb 4-1: USB disconnect, device number 96 [ 375.925111][ T823] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 375.991967][T10388] loop5: detected capacity change from 0 to 7 [ 375.992902][T10388] Dev loop5: unable to read RDB block 7 [ 375.992931][T10388] loop5: AHDI p1 [ 375.992952][T10388] loop5: partition table partially beyond EOD, truncated [ 376.705786][ T5621] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 376.869850][ T5621] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 376.869885][ T5621] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 376.869907][ T5621] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 376.869962][ T5621] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 376.869992][ T5621] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 376.873853][ T5621] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 376.873888][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 376.873911][ T5621] usb 3-1: Product: syz [ 376.873927][ T5621] usb 3-1: Manufacturer: syz [ 376.999379][ T5621] cdc_wdm 3-1:1.0: skipping garbage [ 376.999403][ T5621] cdc_wdm 3-1:1.0: skipping garbage [ 377.074921][ T5621] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 377.075004][ T5621] cdc_wdm 3-1:1.0: Unknown control protocol [ 377.198129][T10397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.199861][T10397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.261527][T10413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.263841][T10413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.399086][ T5621] libceph: connect (1)[c::]:6789 error -101 [ 377.399690][ T5621] libceph: mon0 (1)[c::]:6789 connect error [ 377.516965][ T5621] libceph: connect (1)[c::]:6789 error -101 [ 377.517119][ T5621] libceph: mon0 (1)[c::]:6789 connect error [ 377.881031][ T5621] libceph: connect (1)[c::]:6789 error -101 [ 377.882513][ T5621] libceph: mon0 (1)[c::]:6789 connect error [ 378.244382][ T5623] usb 1-1: USB disconnect, device number 73 [ 378.386933][ T5621] libceph: connect (1)[c::]:6789 error -101 [ 378.392121][ T5621] libceph: mon0 (1)[c::]:6789 connect error [ 378.421667][T10429] loop5: detected capacity change from 0 to 7 [ 378.423945][T10429] Dev loop5: unable to read RDB block 7 [ 378.436821][T10429] loop5: AHDI p1 [ 378.436854][T10429] loop5: partition table partially beyond EOD, truncated [ 378.765223][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.765349][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.406379][ T5623] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 379.536947][ T823] usb 3-1: USB disconnect, device number 86 [ 379.566415][ T5623] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 379.566452][ T5623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 379.566479][ T5623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 379.573209][ T5623] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 379.573245][ T5623] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.573267][ T5623] usb 1-1: Product: syz [ 379.573283][ T5623] usb 1-1: Manufacturer: syz [ 379.573301][ T5623] usb 1-1: SerialNumber: syz [ 379.661953][ T5623] usb 1-1: config 0 descriptor?? [ 379.663385][T10441] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 379.686461][ T5623] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input35 [ 379.910359][ T5819] usb 1-1: USB disconnect, device number 74 [ 379.910437][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 380.032358][ T5623] libceph: connect (1)[c::]:6789 error -101 [ 380.032606][ T5623] libceph: mon0 (1)[c::]:6789 connect error [ 380.220476][T10413] ceph: No mds server is up or the cluster is laggy [ 380.304215][ T5623] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 380.460732][ T5623] usb 4-1: Using ep0 maxpacket: 16 [ 380.463465][ T5623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.463518][ T5623] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 380.463545][ T5623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.537110][ T5623] usb 4-1: config 0 descriptor?? [ 380.716539][T10454] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 380.716539][T10454] program syz.2.1428 not setting count and/or reply_len properly [ 380.981769][T10450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.986905][T10450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.032145][ T5623] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 381.080106][ T823] libceph: connect (1)[c::]:6789 error -101 [ 381.080311][ T823] libceph: mon0 (1)[c::]:6789 connect error [ 382.004099][ T823] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 382.160952][T10482] binder: 10479:10482 ioctl c0306201 200000000640 returned -22 [ 382.224056][ T823] usb 3-1: Using ep0 maxpacket: 32 [ 382.225175][T10481] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.265441][ T823] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 382.265476][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.265499][ T823] usb 3-1: Product: syz [ 382.265515][ T823] usb 3-1: Manufacturer: syz [ 382.265530][ T823] usb 3-1: SerialNumber: syz [ 382.268438][T10481] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.312930][ T823] usb 3-1: config 0 descriptor?? [ 382.524332][T10471] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 382.923359][ T823] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 382.923390][ T823] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 383.213517][ T823] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 383.234641][ T823] usb 3-1: USB disconnect, device number 87 [ 383.571997][T10501] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.597826][T10501] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.821600][T10501] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1437'. [ 384.170802][T10509] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1437'. [ 384.220532][ T823] usb 4-1: USB disconnect, device number 97 [ 384.775689][T10517] binder: 10516:10517 ioctl c0306201 200000001a80 returned -14 [ 384.804319][ T5819] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 384.958150][ T5819] usb 3-1: not running at top speed; connect to a high speed hub [ 384.959782][ T5819] usb 3-1: config 1 interface 0 altsetting 32 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 384.959819][ T5819] usb 3-1: config 1 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 384.959850][ T5819] usb 3-1: config 1 interface 0 has no altsetting 0 [ 384.963177][ T5819] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 384.963206][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.963229][ T5819] usb 3-1: Product: Щ [ 384.963246][ T5819] usb 3-1: Manufacturer: 챊텏궆鮾쿠緇ꏆㅿ측ꗱ鰼暨潤燄ꇾ襕㉩Ḓ情伝桔瓬庎쪢㫤䠄Ꜥ웝﷫₯⩋軩ㆅ⧓ꥷꟲ㒆斕膕枙툭䳊罅⁂빠㭹烌㆘厫뤄⨡䠡쐕㢣韏ꎁ뻕荞ꉐ큚趝鄑히箆 [ 384.963276][ T5819] usb 3-1: SerialNumber: 퐰㽈皣髚員持᫸߈孥ᔪ໪꽇ꮺ뎸庈낀ꃔ芵㛓巏뮈쬉㔡琦ઘ璒쌎질뻵콩殪뇾愃ꔦ᠘隘姜良㙈ㅽ㖮쥃嶵ﻯ咖쒗灯प渧늅ฟ⸌㱣撄瀧껠려꧜踢掉慵禣訷㋖譄⹺៴칄馎䷾꽃盜潮ဩ謍⏹耀窯ᣭ筳乓慗룲癄涌䊯ꦥ蕕栵˦侯ڷ豈鳛Ꝣ [ 384.986760][T10521] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 385.054316][ T823] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 385.221784][T10531] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 385.221784][T10531] program syz.1.1444 not setting count and/or reply_len properly [ 385.224423][T10521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.254933][T10521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.277691][ T823] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 385.277718][ T823] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 385.280873][ T823] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 385.280896][ T823] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.280951][ T823] usb 4-1: Product: syz [ 385.280961][ T823] usb 4-1: Manufacturer: syz [ 385.280971][ T823] usb 4-1: SerialNumber: syz [ 385.371978][ T5819] usb 3-1: USB disconnect, device number 88 [ 385.391690][ T823] usb 4-1: config 0 descriptor?? [ 385.421763][ T823] streamzap 4-1:0.0: streamzap_probe: endpoint attributes don't match xfer 0200 [ 385.537818][T10536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.538862][T10536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.652304][ T823] usb 4-1: USB disconnect, device number 98 [ 385.684256][ T6565] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 385.689436][T10541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.690177][T10541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.697183][T10541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.699377][T10541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.702863][T10541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.703444][T10541] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.834423][ T6565] usb 1-1: Using ep0 maxpacket: 8 [ 385.838607][ T6565] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 385.838672][ T6565] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.838697][ T6565] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.838724][ T6565] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.838751][ T6565] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.838798][ T6565] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.838825][ T6565] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.158075][ T6565] usb 1-1: GET_CAPABILITIES returned e [ 386.158133][ T6565] usbtmc 1-1:16.0: can't read capabilities [ 386.395885][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.426625][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.475067][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.475159][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.475234][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.475308][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.484420][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.484507][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.484571][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.484838][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.484912][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.484976][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.485260][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.485325][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.485388][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.490351][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 386.564217][ T823] usb 1-1: USB disconnect, device number 75 [ 387.086262][ T823] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 387.134337][ T32] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 387.254357][ T823] usb 1-1: Using ep0 maxpacket: 16 [ 387.259632][ T823] usb 1-1: unable to get BOS descriptor or descriptor too short [ 387.261044][ T823] usb 1-1: config 14 has an invalid interface number: 39 but max is 0 [ 387.261075][ T823] usb 1-1: config 14 has no interface number 0 [ 387.261138][ T823] usb 1-1: config 14 interface 39 has no altsetting 0 [ 387.263514][ T823] usb 1-1: New USB device found, idVendor=0734, idProduct=043b, bcdDevice=ee.91 [ 387.263544][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.263565][ T823] usb 1-1: Product: syz [ 387.263581][ T823] usb 1-1: Manufacturer: syz [ 387.263594][ T823] usb 1-1: SerialNumber: syz [ 387.275169][ T32] usb 4-1: device descriptor read/64, error -71 [ 387.405917][T10575] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 387.405917][T10575] program syz.2.1459 not setting count and/or reply_len properly [ 387.509541][ T823] gspca_main: spca506-2.14.0 probing 0734:043b [ 387.524195][ T32] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 387.664744][ T32] usb 4-1: device descriptor read/64, error -71 [ 387.702623][ T823] usb 1-1: USB disconnect, device number 76 [ 387.774938][ T32] usb usb4-port1: attempt power cycle [ 387.884308][ T5819] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 388.035387][ T5819] usb 3-1: Using ep0 maxpacket: 8 [ 388.040737][ T5819] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.040791][ T5819] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.049241][ T5819] usb 3-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 388.049274][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.049294][ T5819] usb 3-1: Product: syz [ 388.049308][ T5819] usb 3-1: Manufacturer: syz [ 388.049322][ T5819] usb 3-1: SerialNumber: syz [ 388.069605][ T5819] usb 3-1: config 0 descriptor?? [ 388.076844][T10584] Bluetooth: MGMT ver 1.23 [ 388.089475][ T5819] radioshark2 3-1:0.0: Invalid radioSHARK2 device [ 388.089512][ T5819] radioshark2 3-1:0.0: probe with driver radioshark2 failed with error -22 [ 388.090080][ T5819] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 388.124147][ T32] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 388.145990][ T32] usb 4-1: device descriptor read/8, error -71 [ 388.275792][T10581] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 388.278382][T10581] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 388.299474][ T5819] usb 3-1: USB disconnect, device number 89 [ 388.324512][ T823] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 388.394942][ T32] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 388.425486][ T32] usb 4-1: device descriptor read/8, error -71 [ 388.454224][ T823] usb 1-1: device descriptor read/64, error -71 [ 388.534573][ T32] usb usb4-port1: unable to enumerate USB device [ 388.704351][ T823] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 388.836850][ T823] usb 1-1: device descriptor read/64, error -71 [ 388.879093][T10593] loop5: detected capacity change from 0 to 7 [ 388.889966][T10593] Dev loop5: unable to read RDB block 7 [ 388.889995][T10593] loop5: AHDI p1 [ 388.890014][T10593] loop5: partition table partially beyond EOD, truncated [ 388.944750][ T823] usb usb1-port1: attempt power cycle [ 389.135801][T10598] netlink: 'syz.2.1467': attribute type 21 has an invalid length. [ 389.135907][T10598] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1467'. [ 389.255276][T10600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.255924][T10600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.261350][T10600] trusted_key: syz.1.1466 sent an empty control message without MSG_MORE. [ 389.267260][T10600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.267880][T10600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.305048][ T823] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 389.325754][ T823] usb 1-1: device descriptor read/8, error -71 [ 389.330865][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1468'. [ 389.338865][T10602] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 389.369419][T10602] VFS: Can't find a romfs filesystem on dev nullb0. [ 389.369419][T10602] [ 389.564207][ T823] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 389.585056][ T823] usb 1-1: device descriptor read/8, error -71 [ 389.614172][ T5819] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 389.704911][ T823] usb usb1-port1: unable to enumerate USB device [ 389.775433][ T5819] usb 3-1: Using ep0 maxpacket: 32 [ 389.779034][ T5819] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 389.779066][ T5819] usb 3-1: config 0 has no interface number 0 [ 389.779117][ T5819] usb 3-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 389.781564][ T5819] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 389.781597][ T5819] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.781619][ T5819] usb 3-1: Product: syz [ 389.781634][ T5819] usb 3-1: Manufacturer: syz [ 389.781650][ T5819] usb 3-1: SerialNumber: syz [ 389.821650][ T5819] usb 3-1: config 0 descriptor?? [ 389.831652][ T5819] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 389.831935][ T5819] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 390.089642][T10615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1472'. [ 390.395692][T10619] loop5: detected capacity change from 0 to 7 [ 390.397062][T10619] Dev loop5: unable to read RDB block 7 [ 390.397084][T10619] loop5: AHDI p1 [ 390.397096][T10619] loop5: partition table partially beyond EOD, truncated [ 390.483748][T10621] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 390.483748][T10621] program syz.1.1474 not setting count and/or reply_len properly [ 390.605457][ T5819] usb 3-1: USB disconnect, device number 90 [ 390.641272][T10623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.650732][T10623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.696324][T10623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.347354][T10648] tmpfs: Bad value for 'mpol' [ 391.373127][T10649] tmpfs: Bad value for 'mpol' [ 391.401924][T10652] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 391.401924][T10652] program syz.1.1483 not setting count and/or reply_len properly [ 391.592825][T10659] sg_write: data in/out 479232/136 bytes for SCSI command 0x0-- guessing data in; [ 391.592825][T10659] program syz.3.1485 not setting count and/or reply_len properly [ 391.722629][T10659] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 392.004255][ T32] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 392.175647][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 392.202679][ T32] usb 3-1: unable to get BOS descriptor or descriptor too short [ 392.202781][ T32] usb 3-1: too many configurations: 123, using maximum allowed: 8 [ 392.214211][ T32] usb 3-1: config 5 has an invalid interface number: 3 but max is 2 [ 392.214241][ T32] usb 3-1: config 5 has an invalid interface number: 186 but max is 2 [ 392.214261][ T32] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 392.214281][ T32] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 392.214301][ T32] usb 3-1: config 5 has no interface number 0 [ 392.214317][ T32] usb 3-1: config 5 has no interface number 1 [ 392.214366][ T32] usb 3-1: config 5 interface 3 has no altsetting 0 [ 392.214384][ T32] usb 3-1: config 5 interface 186 has no altsetting 0 [ 392.225811][ T32] usb 3-1: config 5 has an invalid interface number: 3 but max is 2 [ 392.225847][ T32] usb 3-1: config 5 has an invalid interface number: 186 but max is 2 [ 392.225867][ T32] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 392.225886][ T32] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 392.225907][ T32] usb 3-1: config 5 has no interface number 0 [ 392.225923][ T32] usb 3-1: config 5 has no interface number 1 [ 392.225965][ T32] usb 3-1: config 5 interface 3 has no altsetting 0 [ 392.225983][ T32] usb 3-1: config 5 interface 186 has no altsetting 0 [ 392.228488][ T32] usb 3-1: config 5 has an invalid interface number: 3 but max is 2 [ 392.228513][ T32] usb 3-1: config 5 has an invalid interface number: 186 but max is 2 [ 392.228532][ T32] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 392.228550][ T32] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 392.228570][ T32] usb 3-1: config 5 has no interface number 0 [ 392.228586][ T32] usb 3-1: config 5 has no interface number 1 [ 392.228628][ T32] usb 3-1: config 5 interface 3 has no altsetting 0 [ 392.228644][ T32] usb 3-1: config 5 interface 186 has no altsetting 0 [ 392.231705][ T32] usb 3-1: config 5 has an invalid interface number: 3 but max is 2 [ 392.231729][ T32] usb 3-1: config 5 has an invalid interface number: 186 but max is 2 [ 392.231750][ T32] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 392.231768][ T32] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 392.231788][ T32] usb 3-1: config 5 has no interface number 0 [ 392.231803][ T32] usb 3-1: config 5 has no interface number 1 [ 392.231853][ T32] usb 3-1: config 5 interface 3 has no altsetting 0 [ 392.231870][ T32] usb 3-1: config 5 interface 186 has no altsetting 0 [ 392.254809][ T32] usb 3-1: config 5 has an invalid interface number: 3 but max is 2 [ 392.254847][ T32] usb 3-1: config 5 has an invalid interface number: 186 but max is 2 [ 392.254870][ T32] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 392.254889][ T32] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 392.254909][ T32] usb 3-1: config 5 has no interface number 0 [ 392.254925][ T32] usb 3-1: config 5 has no interface number 1 [ 392.254968][ T32] usb 3-1: config 5 interface 3 has no altsetting 0 [ 392.254986][ T32] usb 3-1: config 5 interface 186 has no altsetting 0 [ 392.256207][ T32] usb 3-1: config 5 has an invalid interface number: 3 but max is 2 [ 392.256228][ T32] usb 3-1: config 5 has an invalid interface number: 186 but max is 2 [ 392.256247][ T32] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 392.256264][ T32] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 392.256283][ T32] usb 3-1: config 5 has no interface number 0 [ 392.256298][ T32] usb 3-1: config 5 has no interface number 1 [ 392.256338][ T32] usb 3-1: config 5 interface 3 has no altsetting 0 [ 392.256356][ T32] usb 3-1: config 5 interface 186 has no altsetting 0 [ 392.259759][ T32] usb 3-1: config 5 has an invalid interface number: 3 but max is 2 [ 392.259784][ T32] usb 3-1: config 5 has an invalid interface number: 186 but max is 2 [ 392.259803][ T32] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 392.259830][ T32] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 392.259850][ T32] usb 3-1: config 5 has no interface number 0 [ 392.259866][ T32] usb 3-1: config 5 has no interface number 1 [ 392.259910][ T32] usb 3-1: config 5 interface 3 has no altsetting 0 [ 392.259930][ T32] usb 3-1: config 5 interface 186 has no altsetting 0 [ 392.266123][ T32] usb 3-1: config 5 has an invalid interface number: 3 but max is 2 [ 392.266149][ T32] usb 3-1: config 5 has an invalid interface number: 186 but max is 2 [ 392.266169][ T32] usb 3-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 392.266188][ T32] usb 3-1: config 5 has 2 interfaces, different from the descriptor's value: 3 [ 392.266209][ T32] usb 3-1: config 5 has no interface number 0 [ 392.266225][ T32] usb 3-1: config 5 has no interface number 1 [ 392.266266][ T32] usb 3-1: config 5 interface 3 has no altsetting 0 [ 392.266283][ T32] usb 3-1: config 5 interface 186 has no altsetting 0 [ 392.277491][ T32] usb 3-1: string descriptor 0 read error: -22 [ 392.277639][ T32] usb 3-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=7b.02 [ 392.277662][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.343709][ T32] usb 3-1: unknown number of interfaces: 2 [ 392.558611][ T32] usb 3-1: USB disconnect, device number 91 [ 392.845488][T10684] sg_write: data in/out 163804/186 bytes for SCSI command 0x0-- guessing data in; [ 392.845488][T10684] program syz.3.1492 not setting count and/or reply_len properly [ 392.930671][ T38] audit: type=1326 audit(1780874356.752:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10685 comm="syz.3.1493" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f98802ace59 code=0x0 [ 393.187097][T10691] usb usb7: usbfs: interface 0 claimed by hub while 'syz.1.1494' sets config #-6 [ 393.338967][T10693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.342679][T10693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.429530][T10682] =========================================[ 393.429530][T10682] ================================================================== [ 393.429552][T10682] BUG: KASAN: slab-use-after-free in clear_tfile_check_list+0x114/0x380 [ 393.429599][T10682] Read of size 8 at addr ffff88803db686e8 by task syz.0.1491/10682 [ 393.429634][T10682] [ 393.429659][T10682] CPU: 1 UID: 0 PID: 10682 Comm: syz.0.1491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 393.429702][T10682] Tainted: [L]=SOFTLOCKUP [ 393.429711][T10682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 393.429726][T10682] Call Trace: [ 393.429735][T10682] [ 393.429746][T10682] dump_stack_lvl+0xe8/0x150 [ 393.429776][T10682] print_address_description+0x55/0x1e0 [ 393.429823][T10682] ? clear_tfile_check_list+0x114/0x380 [ 393.429875][T10682] print_report+0x58/0x70 [ 393.429903][T10682] kasan_report+0x117/0x150 [ 393.429934][T10682] ? clear_tfile_check_list+0x114/0x380 [ 393.429977][T10682] clear_tfile_check_list+0x114/0x380 [ 393.430013][T10682] ? clear_tfile_check_list+0x22/0x380 [ 393.430048][T10682] do_epoll_ctl_file+0x8fd/0xed0 [ 393.430088][T10682] ? do_epoll_ctl_file+0xac3/0xed0 [ 393.430121][T10682] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 393.430153][T10682] ? __fget_files+0x3a6/0x420 [ 393.430179][T10682] ? __fget_files+0x2a/0x420 [ 393.430210][T10682] __se_sys_epoll_ctl+0x14e/0x210 [ 393.430243][T10682] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 393.430279][T10682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.430304][T10682] do_syscall_64+0x174/0x580 [ 393.430340][T10682] ? trace_irq_disable+0x3b/0x140 [ 393.430361][T10682] ? clear_bhb_loop+0x40/0x90 [ 393.430386][T10682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.430410][T10682] RIP: 0033:0x7f76b87ace59 [ 393.430430][T10682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.430451][T10682] RSP: 002b:00007f76b609e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 393.430476][T10682] RAX: ffffffffffffffda RBX: 00007f76b8a26360 RCX: 00007f76b87ace59 [ 393.430494][T10682] RDX: 000000000000000b RSI: 0000000000000001 RDI: 000000000000000e [ 393.430508][T10682] RBP: 00007f76b8842d6f R08: 0000000000000000 R09: 0000000000000000 [ 393.430524][T10682] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.430539][T10682] R13: 00007f76b8a263f8 R14: 00007f76b8a26360 R15: 00007fff5fed2da8 [ 393.430565][T10682] [ 393.430574][T10682] [ 393.430580][T10682] Allocated by task 10679: [ 393.430590][T10682] kasan_save_track+0x3e/0x80 [ 393.430614][T10682] __kasan_slab_alloc+0x6c/0x80 [ 393.430639][T10682] kmem_cache_alloc_noprof+0x33b/0x680 [ 393.430662][T10682] ep_insert+0x512/0x1820 [ 393.430688][T10682] do_epoll_ctl_file+0x8bb/0xed0 [ 393.430715][T10682] __se_sys_epoll_ctl+0x14e/0x210 [ 393.430741][T10682] do_syscall_64+0x174/0x580 [ 393.430771][T10682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.430790][T10682] [ 393.430794][T10682] Freed by task 10675: [ 393.430803][T10682] kasan_save_track+0x3e/0x80 [ 393.430824][T10682] kasan_save_free_info+0x46/0x50 [ 393.430862][T10682] __kasan_slab_free+0x5c/0x80 [ 393.430885][T10682] kmem_cache_free+0x187/0x6c0 [ 393.430909][T10682] eventpoll_release_file+0xc2/0x240 [ 393.430934][T10682] __fput+0x83c/0xa70 [ 393.430954][T10682] task_work_run+0x1d9/0x270 [ 393.430977][T10682] exit_to_user_mode_loop+0x193/0x680 [ 393.430999][T10682] do_syscall_64+0x353/0x580 [ 393.431028][T10682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.431047][T10682] [ 393.431052][T10682] The buggy address belongs to the object at ffff88803db686e0 [ 393.431052][T10682] which belongs to the cache ep_head of size 16 [ 393.431070][T10682] The buggy address is located 8 bytes inside of [ 393.431070][T10682] freed 16-byte region [ffff88803db686e0, ffff88803db686f0) [ 393.431092][T10682] [ 393.431098][T10682] The buggy address belongs to the physical page: [ 393.431109][T10682] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88803db68760 pfn:0x3db68 [ 393.431129][T10682] memcg:ffff8880359be801 [ 393.431137][T10682] flags: 0x80000000000200(workingset|node=0|zone=1) [ 393.431155][T10682] page_type: f5(slab) [ 393.431174][T10682] raw: 0080000000000200 ffff888020ef7dc0 ffff888021aa3088 ffffea0000ef4c50 [ 393.431193][T10682] raw: ffff88803db68760 0000000800800021 00000000f5000000 ffff8880359be801 [ 393.431203][T10682] page dumped because: kasan: bad access detected [ 393.431212][T10682] page_owner tracks the page as allocated [ 393.431219][T10682] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4988, tgid 4988 (udevd), ts 38215992098, free_ts 0 [ 393.431255][T10682] post_alloc_hook+0x1f9/0x250 [ 393.431278][T10682] get_page_from_freelist+0x265c/0x26e0 [ 393.431307][T10682] __alloc_frozen_pages_noprof+0x18d/0x380 [ 393.431336][T10682] allocate_slab+0x74/0x5e0 [ 393.431362][T10682] refill_objects+0x33c/0x3d0 [ 393.431390][T10682] __pcs_replace_empty_main+0x373/0x720 [ 393.431422][T10682] kmem_cache_alloc_noprof+0x433/0x680 [ 393.431447][T10682] ep_insert+0x512/0x1820 [ 393.431472][T10682] do_epoll_ctl_file+0x8bb/0xed0 [ 393.431499][T10682] __se_sys_epoll_ctl+0x14e/0x210 [ 393.431528][T10682] do_syscall_64+0x174/0x580 [ 393.431567][T10682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.431588][T10682] page_owner free stack trace missing [ 393.431595][T10682] [ 393.431600][T10682] Memory state around the buggy address: [ 393.431612][T10682] ffff88803db68580: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 393.431629][T10682] ffff88803db68600: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 393.431643][T10682] >ffff88803db68680: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 393.431656][T10682] ^ [ 393.431670][T10682] ffff88803db68700: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 393.431685][T10682] ffff88803db68780: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 393.431697][T10682] ================================================================== [ 393.440579][T10682] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 393.440606][T10682] CPU: 1 UID: 0 PID: 10682 Comm: syz.0.1491 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 393.440641][T10682] Tainted: [L]=SOFTLOCKUP [ 393.440648][T10682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 393.440661][T10682] Call Trace: [ 393.440669][T10682] [ 393.440678][T10682] vpanic+0x56c/0xa60 [ 393.440712][T10682] ? __pfx_vpanic+0x10/0x10 [ 393.440740][T10682] ? __pfx___schedule+0x10/0x10 [ 393.440770][T10682] panic+0xc5/0xd0 [ 393.440797][T10682] ? __pfx_panic+0x10/0x10 [ 393.440824][T10682] ? preempt_schedule_thunk+0x16/0x40 [ 393.440867][T10682] ? clear_tfile_check_list+0x114/0x380 [ 393.440895][T10682] check_panic_on_warn+0x89/0xb0 [ 393.440918][T10682] ? clear_tfile_check_list+0x114/0x380 [ 393.440946][T10682] end_report+0x73/0x170 [ 393.440970][T10682] ? clear_tfile_check_list+0x114/0x380 [ 393.440996][T10682] kasan_report+0x128/0x150 [ 393.441022][T10682] ? clear_tfile_check_list+0x114/0x380 [ 393.441052][T10682] clear_tfile_check_list+0x114/0x380 [ 393.441080][T10682] ? clear_tfile_check_list+0x22/0x380 [ 393.441107][T10682] do_epoll_ctl_file+0x8fd/0xed0 [ 393.441135][T10682] ? do_epoll_ctl_file+0xac3/0xed0 [ 393.441162][T10682] ? __pfx_do_epoll_ctl_file+0x10/0x10 [ 393.441189][T10682] ? __fget_files+0x3a6/0x420 [ 393.441211][T10682] ? __fget_files+0x2a/0x420 [ 393.441235][T10682] __se_sys_epoll_ctl+0x14e/0x210 [ 393.441262][T10682] ? __pfx___se_sys_epoll_ctl+0x10/0x10 [ 393.441291][T10682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.441311][T10682] do_syscall_64+0x174/0x580 [ 393.441339][T10682] ? trace_irq_disable+0x3b/0x140 [ 393.441361][T10682] ? clear_bhb_loop+0x40/0x90 [ 393.441383][T10682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.441403][T10682] RIP: 0033:0x7f76b87ace59 [ 393.441422][T10682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.441440][T10682] RSP: 002b:00007f76b609e028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 393.441462][T10682] RAX: ffffffffffffffda RBX: 00007f76b8a26360 RCX: 00007f76b87ace59 [ 393.441477][T10682] RDX: 000000000000000b RSI: 0000000000000001 RDI: 000000000000000e [ 393.441489][T10682] RBP: 00007f76b8842d6f R08: 0000000000000000 R09: 0000000000000000 [ 393.441502][T10682] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.441515][T10682] R13: 00007f76b8a263f8 R14: 00007f76b8a26360 R15: 00007fff5fed2da8 [ 393.441536][T10682] [ 393.441685][T10682] Kernel Offset: disabled