last executing test programs: 6m23.896403126s ago: executing program 1 (id=1115): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) process_madvise(r2, &(0x7f0000000240)=[{0x0}, {&(0x7f0000000080)="e4", 0x1}], 0x2, 0x3, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a010400000000000000000100000008000b40000000000900010073797a300000000024000480200001800700010072740000140002800800014000000015080002400000000414000000110001"], 0xd4}, 0x1, 0x0, 0x0, 0x24000000}, 0x8080) 6m23.803986143s ago: executing program 1 (id=1116): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000014000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c000280080004400000000408000740000000050800064000000001050002000000000008000340000000040900010073797a30000000000900020073797a32"], 0x94}}, 0x0) 6m23.78917248s ago: executing program 1 (id=1117): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x14, 0x11, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x14, 0x11, 0x1, 0x2000000, 0x0, {0x1}}}, 0xb8}}, 0x40) 6m23.748187774s ago: executing program 1 (id=1118): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, 0x0, 0x40000) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000300)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', r2, &(0x7f0000000740)='./file0/file0\x00', 0x221) umount2(&(0x7f0000000440)='./file0/file0\x00', 0x2) 6m23.637506462s ago: executing program 1 (id=1119): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000001c0)=0x2000) ioctl$SNDCTL_DSP_SETFMT(r2, 0x5001, 0x0) capset(&(0x7f00000000c0)={0x19980330}, &(0x7f0000000180)={0x401, 0x7ff, 0x9, 0x58, 0x1, 0x9}) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000000000)=""/128, 0x80}], 0x1, 0x0) 6m22.720112162s ago: executing program 1 (id=1125): socket(0xa, 0x3, 0x3a) pipe2(&(0x7f00000003c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000011000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 6m22.420348271s ago: executing program 32 (id=1125): socket(0xa, 0x3, 0x3a) pipe2(&(0x7f00000003c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000011000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 3.41535291s ago: executing program 3 (id=4323): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="0203fe020c00000000000000000000000300060000000000020000000000000000000000000000000220010000000000000009107fffffff030005003c00000002000000ac1414aa0000000000000000020008000800"], 0x60}, 0x1, 0x7}, 0x0) 3.271264337s ago: executing program 3 (id=4327): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 3.179861632s ago: executing program 3 (id=4328): r0 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000180)={0x1, 0x20303159, 0xf00, 0x0, 0x3, @discrete={0xfffffff7, 0x3}}) 3.10409501s ago: executing program 3 (id=4329): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000001280)={{0x2}, 0x0, [0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4000, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0xf447, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffa6b, 0x0, 0x3, 0x1, 0x0, 0x800, 0xffffffffffffffff, 0x4, 0x0, 0xba, 0xfffffffffffffdfc, 0x4, 0x40000000000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0xfffffffffffffffc, 0x8001, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x2000000, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff, 0xfffffffffffffffd, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x3, 0x5457d2ff, 0x0, 0x2, 0xfffffffffffffffd]}) 3.103646841s ago: executing program 3 (id=4330): fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000480)={0x1000, 0x9, 0x1, 0xfffffffa, 0x2}) (async) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000007c0)="81b641f1f3843704b65c06d1f9195c689efef2ed73e6e49b5d132f361f27858fae3d8a81b3bcdf4b73e39b2c1234f47f130989279ce10140885317a2cd553ec131725da209e7ada724b3b331bf334d6c429997227c7c5c50ed317ceba923dd1b7a393db4994936c6dd5d0fa65656ebfddcd7a82ec988324298134401b8ecac8a58f085b3e165df5bdd09ae61854a89dfa8599fdeb743b5f714957c459ccd4c788eff3aff4f1e94930bbbb6c42e8a87e257ac7d4ee9e6dd2b883a02db7584d69bd5a72cd9dd9964c2c9fe33fd2fccf0ae5953a6bc31f1be27", 0xd8}, {&(0x7f0000000380)="e7b499f9dcf7418477105685854940a0847aa87154f75f5789e9112edd9b13259344540daf147d085349440377d196565bea3ffb5ecf4ae3734c70b1fdddb4dfa61cee36ba90c79a80f6a6c97103b5bee864854e45ed0e2ac8ceb0b1a9ea42ff6578c290dad1b803db3b1699d57edca01a5368d661501fbb0480270f3f6cdeb6e33b3b149cd2abfc793d28c2699bbfe711cc6ce7368c", 0x96}, {&(0x7f00000002c0)="2b43c2c11e7fbc96a4ab2b9f619d6cf7b89538798a0327535519ed5f3ea9dbd762bd07a132c9d657ba205e", 0xffffff0a}], 0x3}, 0x24040881) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x2b) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netstat\x00') write$binfmt_script(r3, 0x0, 0x0) (async) syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000000040)=ANY=[@ANYRES16=r0], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000140)="baf80c66b810b5d78b66efbafc0c66edf00fc05ffd660f38de050f10640066b9160a00000f32d9900a00ba2000b0c0ee66b8010000000f01d90f01cbba200066b8771d000066ef", 0x47}], 0x1, 0xd, &(0x7f0000000300)=[@cstype3={0x5, 0x6}], 0x1) (async) syz_usbip_server_init(0x4) (async) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x496, &(0x7f0000000680)={0x0, 0xb70b, 0x3180, 0x8000, 0x40024f}, 0x0, 0x0) signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffc]}, 0x8) (async) read(r3, &(0x7f0000000c00)=""/386, 0x182) (async) r4 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0xa10001, 0x1, '\x00', @p_u16=&(0x7f00000005c0)}}) ioctl$VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045613, &(0x7f00000001c0)=0x6) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7100fcdbdf", @ANYRES32, @ANYBLOB="1c001d80010000800c0002008208000000000000f1"], 0x38}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x110}, 0x1, 0x7}, 0x0) (async) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000640)=ANY=[@ANYRES64]) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x6, 0x5, 0x10, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x8008, 0x6, 0x0, 0x0, 0x5, 0x0, 0x6f, 0x400], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000540)={&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f000000a000/0x1000)=nil, &(0x7f0000005000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f000000d000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f000000e000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000004c0)="a1d1f3e4aaa78ce21be08034cd190f271b", 0x11, r5}, 0x68) 2.263536215s ago: executing program 4 (id=4338): r0 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000180)={0x1, 0x20303159, 0xf00, 0x0, 0x3, @discrete={0xfffffff7, 0x3}}) 2.234166855s ago: executing program 4 (id=4339): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_test', 0x8a881, 0x180) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x1, 0x4000000000000ffd, 0x0, 0x0, 0x3, 0xc, "faf98317e5a1149989fc67be43ea6acc96e3a2503dc31c97214d58128bbad0099cebdc25f5ab60c9e69098c8b534464c516bdd8a0f350007000000000300", "32d8cc26f7061a74df2cfc06489f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x9]}}) 2.156909733s ago: executing program 0 (id=4340): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000004dc0), 0x41, 0x0) writev(r0, &(0x7f0000000700)=[{0x0, 0x20}, {&(0x7f0000000400)="be", 0x1}], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000000)="23000300010007", 0x7) 2.028034431s ago: executing program 0 (id=4342): prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="4000000031d00b529020db7940e23000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, 0x0) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) 2.001289703s ago: executing program 4 (id=4343): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x500, 0x0, 0x54}, 0x9c) 1.980688795s ago: executing program 2 (id=4344): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x800, 0xbbba, 0x0, 0x18, 0x0, {0x8000}, {0x0, 0xfffffffd, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x8000000}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4}) 1.83083191s ago: executing program 4 (id=4345): sendmsg$NFNL_MSG_ACCT_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x22000885) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x59, 0x77, 0xc, 0x40, 0x9c0, 0x203, 0xd332, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfa, 0x10, 0xc9}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) read(0xffffffffffffffff, &(0x7f00000001c0)=""/153, 0x99) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x0, './file0/file0\x00'}, 0x6e) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x5, 0x1, "be"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r2 = socket$caif_seqpacket(0x25, 0x5, 0x2) sendmsg(r2, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x20048000) syz_usb_connect$cdc_ecm(0x3, 0x5d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4b, 0x1, 0x1, 0x6f, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0xffff}, {0xd, 0x24, 0xf, 0x1, 0x1ff, 0xfffa, 0x7f, 0x3}, [@network_terminal={0x7, 0x24, 0xa, 0xfe, 0x80, 0xed, 0x75}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x4, 0x4, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x2, 0x7d}}, {{0x9, 0x5, 0x3, 0x2, 0x678, 0x0, 0x7, 0x2}}}}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x250, 0x2, 0x7, 0x75, 0xff, 0x9}, 0x12, &(0x7f00000002c0)={0x5, 0xf, 0x3a, 0x2, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x8, 0x1000}]}, 0x3, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42c}}, {0xde, &(0x7f0000000440)=@string={0xde, 0x3, "02c9c3bf321313c2713cc8edb2e028684510124c3329199f24a6c5fbfe17948428c3c59dee7d155c5ef94b75e7537d0c9f19be732f57e9be7a4cb15012fb8bc1e636fa11ad31ed97a31636d7fbb73b55000117e7d3edc444351a9ea453afec120ecd7abdfcfa1a8774af83d1eb812264722cf85f61ac22188e5a1ee18523997174542bc270593c38ee91d021163583bf97758c5d85f93c856d170fc6a881a8cef94bc613ceb6c814be13f4f5a1cf16e5bbb255133d57f9578123ff6fd89731adc6c767eb4d700e48613eb613372905c1ee0b60ace41fb0ff59504ea1"}}, {0x4, &(0x7f0000000340)=@string={0x0, 0x3, "11"}}]}) syz_usb_control_io(r0, 0x0, 0x0) 1.830375852s ago: executing program 2 (id=4346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x70, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @rand_addr=0x64010100}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x70}}, 0x0) (async, rerun: 64) pselect6(0xfffffeb1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) (async, rerun: 64) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$FS_IOC_READ_VERITY_METADATA(r2, 0x2284, &(0x7f00000000c0)={0x2, 0x2083, 0x0, 0x0}) (async) write$UHID_CREATE(r1, &(0x7f0000000100)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/169, 0xa9, 0x8, 0x0, 0xfffffbff, 0x986, 0x9}}, 0x120) write$UHID_CREATE(r1, &(0x7f0000000300)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000240)=""/165, 0xa5, 0x8, 0x1, 0x7, 0xa24, 0x9}}, 0x120) r3 = socket$inet6(0xa, 0x802, 0x88) (async) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r4, 0x4601, &(0x7f0000000040)={0x80, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x6f6}, {0x8, 0x8}, {0x1, 0xfffffffc}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x32, 0x0, 0x3, 0x6}) (async) sendto$inet6(r3, 0x0, 0x0, 0x4008840, &(0x7f0000000180)={0xa, 0x4e23, 0x8bd5, @dev={0xfe, 0x80, '\x00', 0x35}}, 0x1c) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async, rerun: 64) sendto$inet6(r3, &(0x7f0000000400)="17", 0x1, 0x40000, 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x6, 0x24, &(0x7f0000000880)={{0x12, 0x1, 0x300, 0x40, 0x8f, 0x4f, 0x10, 0x14aa, 0x221, 0x2d0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x81, 0x9, 0x30, 0x0, [{{0x9, 0x4, 0xf2, 0xfa, 0x0, 0xcf, 0xbe, 0x88, 0x2}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x429}}, {0xf1, &(0x7f0000000200)=@string={0xf1, 0x3, "0ce16748c4731e6b1a272d37d40a6d71786db247861f27a830c149636e05486a4e6613bdea1cf3f74e8a7dc4ab1bd2c66827fa21e175e85cf57babd319503dd6765b92da99ae6b8103c7b8000000980681394907eec90ee70ca32a4ab979e4b1857e46e195bf14a57496cb2d154018e610de7668b4d6609e9c94c74dcd096a8803752734813391a59dc5c125cd2f6057bce2bfb8c50b8e10db012d6a8ac0306403e270668c41a81a882e529c4b5f40b1fcb19cd63c6abbb8542c04e49ef3002c01cb76613c1362e3c3a70000000000000000000000000000000000000000000000cf4dc03f5f85cfafbf82e2c7686f"}}, {0x4, &(0x7f0000000040)=@lang_id={0x4, 0x3, 0x408}}, {0x15, &(0x7f00000000c0)=@string={0x15, 0x3, "6d41f8eec5a7712ebaa7749b08c32b569440af"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x100c}}]}) 1.463845574s ago: executing program 0 (id=4347): r0 = syz_open_dev$video(0x0, 0xa7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000180)={0x1, 0x20303159, 0xf00, 0x0, 0x3, @discrete={0xfffffff7, 0x3}}) 1.431098636s ago: executing program 0 (id=4348): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x327cf3e4, 0xfffffffffffffff9, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe, 0x8000, 0xd67, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xaff, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x404000000000000, 0x0, 0xcc, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xb, 0x8, 0x0, 0x0, 0x0, 0x7, 0xffffffff, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, 0x200000000, 0x3, 0x0, 0x8, 0xffffffffffffffff, 0x2, 0x2, 0x1000000000000000, 0x4, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8000, 0x7ff, 0x0, 0x9, 0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x2, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x9]}) 1.360007152s ago: executing program 0 (id=4349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0) listen(r1, 0x400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="0100a1201000"}) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xa7ba) listen(r2, 0xc78) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1.213333217s ago: executing program 4 (id=4350): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r1, 0x6, 0x11, 0x0, &(0x7f0000000080)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x400) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) listen(r3, 0xc78) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) listen(r7, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 1.159760922s ago: executing program 2 (id=4351): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000004dc0), 0x41, 0x0) writev(r0, &(0x7f0000000700)=[{0x0, 0x20}, {&(0x7f0000000400)="be", 0x1}], 0x2) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r1, &(0x7f0000000000)="23000300010007", 0x7) 1.06798955s ago: executing program 2 (id=4352): r0 = socket$igmp(0x2, 0x3, 0x2) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "d9298498abdba7f061bd1ca44c226af5160e961711a07760760beeab11e88509de7f1939e8abff005597c8ef039a5be42200", 0x38}, 0x60) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x11) (async) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="090100026a17d11008160e00b1ed0102464809021200011c0700fe0904"], 0xfffffffffffffffe) (async) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000040)=""/131, 0x83}], 0x1) (async) r4 = dup2(r3, r2) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000100)={r1}) accept$nfc_llcp(r5, &(0x7f00000001c0), &(0x7f0000000140)=0x60) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) (async) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_ifindex, @remote}, 0x10) (async) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) 1.06507859s ago: executing program 2 (id=4353): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x400) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xa7ba) listen(r2, 0xc78) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 539.868881ms ago: executing program 0 (id=4354): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x400) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0xa7ba) listen(r2, 0xc78) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r6, 0x0) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (fail_nth: 1) 256.828939ms ago: executing program 4 (id=4355): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x2, 0x70bd26, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc000}, 0x44081) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0xc, 0x6, 0x3, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040000}, 0x40) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x40, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x3ff}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xc, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c805}, 0x55) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_NAN(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r6, 0xcd9e2b71d87b7392, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x40c0) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000005c0), r0) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x68, r7, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x5}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x4}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5, 0x29, 0x1}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x11}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x7}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40004}, 0x40010) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r5) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, r8, 0x200, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x5}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000082}, 0x4000000) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x301002, 0x0) ioctl$SNDCTL_SEQ_GETTIME(r9, 0x80045113, &(0x7f0000000880)) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000000940)={0xa00000, 0xa, 0x7, 0xffffffffffffffff, 0x0, &(0x7f0000000900)={0xa00964, 0x3, '\x00', @string=&(0x7f00000008c0)}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r9, 0xd000943d, &(0x7f0000000980)={0x3, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x0, "e47076c33c128d"}) ioctl$BTRFS_IOC_INO_LOOKUP(r9, 0xd0009412, &(0x7f0000001980)={r10, 0x200}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x34, r1, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000002b80)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002b40)={&(0x7f0000002ac0)={0x64, r8, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2}}}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x800, {0x4, 0x3, 0x8, 0x9}}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x40, 0x1, 0x0, 0x0, {0xdf, 0xd, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, 0x6, 0x9, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x0) openat$cgroup_freezer_state(r9, &(0x7f0000002bc0), 0x2, 0x0) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000002c40), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000002c80)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000002d80)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002cc0)={0x4c, r11, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004000}, 0x18) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r9, &(0x7f0000002fc0)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002e00)={0x150, r8, 0x108, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x65, 0x2b}}}}, [@NL80211_ATTR_NAN_FUNC={0x30, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x57}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0xe0}, @NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0x4}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa, 0x8, @broadcast}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0xf8}]}, @NL80211_ATTR_NAN_FUNC={0x100, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}, @NL80211_NAN_FUNC_TX_MATCH_FILTER={0xe0, 0xe, 0x0, 0x1, [{0x15, 0x0, "f1e94250b51bcb8966b1b1542e03fe83e4"}, {0x75, 0x0, "639053d1cd31136c31b7b2e71c885bd34aabc0a329cf5ef5933ff29df9244062f5bedefc78454560e08fcf21d9fc530a7bd6774d9c593925834d3fcb454d852abe54428f8c8b1427df85f0436fdfe72823b08dca5676b024a364ff2ea1ac4e5d8096ef738815d1b68857d54753bceb3945"}, {0x4a, 0x0, "67e2b659020f7c919f9ce2fe63e3675c5ac5b6ecfd98d1a12e11a3cf4476fa73b145e312c8af45c0ce53a84345b04b36168dd5ca58499c440fbca726401f7258dedb4e3e3044"}]}, @NL80211_NAN_FUNC_FOLLOW_UP_DEST={0xa}, @NL80211_NAN_FUNC_CLOSE_RANGE={0x4}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x10}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x404c000}, 0xc004) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000030c0)={&(0x7f0000003000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003080)={&(0x7f0000003040)={0x20, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r13 = openat$cgroup(r9, &(0x7f0000003100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r13, &(0x7f0000003140)='cpu.stat\x00', 0x0, 0x0) 115.130959ms ago: executing program 2 (id=4356): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, 0x0) 0s ago: executing program 3 (id=4357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a30"], 0xd8}, 0x1, 0x500000000000000}, 0x0) kernel console output (not intermixed with test programs): 0] ? inet_send_prepare+0x5c/0x270 [ 509.671488][T15980] ? inet6_sendmsg+0xe4/0x120 [ 509.671510][T15980] __sock_sendmsg+0xe5/0x270 [ 509.671526][T15980] sock_write_iter+0x279/0x360 [ 509.671540][T15980] ? __pfx_sock_write_iter+0x10/0x10 [ 509.671558][T15980] ? bpf_lsm_file_permission+0x9/0x20 [ 509.671568][T15980] ? security_file_permission+0x75/0x290 [ 509.671587][T15980] vfs_write+0x5c9/0xb30 [ 509.671600][T15980] ? __pfx_sock_write_iter+0x10/0x10 [ 509.671613][T15980] ? __pfx_vfs_write+0x10/0x10 [ 509.671628][T15980] ? __fget_files+0x2a/0x420 [ 509.671644][T15980] ksys_write+0x145/0x250 [ 509.671656][T15980] ? __pfx_ksys_write+0x10/0x10 [ 509.671667][T15980] ? do_syscall_64+0xbe/0xfa0 [ 509.671678][T15980] do_syscall_64+0xfa/0xfa0 [ 509.671686][T15980] ? lockdep_hardirqs_on+0x9c/0x150 [ 509.671700][T15980] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.671710][T15980] ? clear_bhb_loop+0x60/0xb0 [ 509.671721][T15980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 509.671731][T15980] RIP: 0033:0x7f7ce8d8efc9 [ 509.671741][T15980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 509.671750][T15980] RSP: 002b:00007f7ce9cb5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 509.671761][T15980] RAX: ffffffffffffffda RBX: 00007f7ce8fe5fa0 RCX: 00007f7ce8d8efc9 [ 509.671769][T15980] RDX: 0000000000001006 RSI: 0000200000000680 RDI: 0000000000000008 [ 509.671776][T15980] RBP: 00007f7ce9cb5090 R08: 0000000000000000 R09: 0000000000000000 [ 509.671782][T15980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 509.671788][T15980] R13: 00007f7ce8fe6038 R14: 00007f7ce8fe5fa0 R15: 00007fff8583e258 [ 509.671805][T15980] [ 510.112256][ T5879] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 510.182441][ T5932] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 510.202933][ T5932] usb 1-1: device descriptor read/8, error -71 [ 510.272461][ T5879] usb 5-1: Using ep0 maxpacket: 32 [ 510.280573][ T5879] usb 5-1: config 0 interface 0 altsetting 237 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 510.296880][ T5879] usb 5-1: config 0 interface 0 altsetting 237 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.309226][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 510.317967][ T5879] usb 5-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 510.329136][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.341957][ T5879] usb 5-1: config 0 descriptor?? [ 510.442438][ T5932] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 510.464634][ T5932] usb 1-1: device descriptor read/8, error -71 [ 510.492428][ T798] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 510.574886][ T5932] usb usb1-port1: unable to enumerate USB device [ 510.652415][ T798] usb 4-1: Using ep0 maxpacket: 16 [ 510.660603][ T798] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 510.670582][ T798] usb 4-1: config 0 has no interface number 0 [ 510.677963][ T798] usb 4-1: config 0 interface 104 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 510.689918][ T798] usb 4-1: config 0 interface 104 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 510.701943][ T798] usb 4-1: config 0 interface 104 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 510.719353][ T798] usb 4-1: New USB device found, idVendor=5032, idProduct=0bc6, bcdDevice=2b.e5 [ 510.730906][ T798] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.740883][ T798] usb 4-1: Product: syz [ 510.745967][ T798] usb 4-1: Manufacturer: syz [ 510.751614][ T798] usb 4-1: SerialNumber: syz [ 510.765000][ T5879] apple 0003:05AC:027C.0039: hidraw0: USB HID v0.07 Device [HID 05ac:027c] on usb-dummy_hcd.4-1/input0 [ 510.765904][ T798] usb 4-1: config 0 descriptor?? [ 510.814893][ T798] dvb-usb: found a 'GRAND - USB2.0 DVB-T adapter' in cold state, will try to load a firmware [ 510.849279][ T798] usb 4-1: Direct firmware load for dvb-usb-dibusb-6.0.0.8.fw failed with error -2 [ 510.861035][ T798] usb 4-1: Falling back to sysfs fallback for: dvb-usb-dibusb-6.0.0.8.fw [ 510.921057][ T30] kauditd_printk_skb: 57 callbacks suppressed [ 510.921075][ T30] audit: type=1326 audit(1761298766.843:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15988 comm="syz.2.3654" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fed6d18efc9 code=0x0 [ 510.957789][T15970] fuse: Unknown parameter '0000000000000000000001100000000000000000003' [ 510.970597][ T5879] usb 5-1: USB disconnect, device number 8 [ 511.024887][T15990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 511.036322][T15990] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 511.765385][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 511.791408][T16000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 511.924080][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.937543][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 511.949428][ T10] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 511.960456][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.976963][ T10] usb 5-1: config 0 descriptor?? [ 512.092406][ T5879] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 512.184643][T15993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.195139][T15993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.205405][T15993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.219108][T15993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.231270][T15993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.242058][T15993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.253290][T15993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.266114][T15993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.275764][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.289870][T15993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.300159][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.301983][T15993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.312289][ T5879] usb 1-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 512.332587][ T5879] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.344623][ T5879] usb 1-1: config 0 descriptor?? [ 512.535840][ T10] cm6533_jd 0003:0D8C:0022.003A: item fetching failed at offset 3/5 [ 512.546055][ T10] cm6533_jd 0003:0D8C:0022.003A: parse failed [ 512.554097][ T10] cm6533_jd 0003:0D8C:0022.003A: probe with driver cm6533_jd failed with error -22 [ 512.735290][ T10] usb 5-1: USB disconnect, device number 9 [ 512.766493][ T5879] hid (null): global environment stack underflow [ 512.779877][ T5879] stadia 0003:18D1:9400.003B: global environment stack underflow [ 512.789367][ T5879] stadia 0003:18D1:9400.003B: item 0 1 1 11 parsing failed [ 512.798595][ T5879] stadia 0003:18D1:9400.003B: parse failed [ 512.805815][ T5879] stadia 0003:18D1:9400.003B: probe with driver stadia failed with error -22 [ 512.971358][T16002] efs: device does not support 512 byte blocks [ 512.979266][T16002] device does not support 512 byte blocks [ 512.979266][T16002] [ 512.991836][ T5832] usb 1-1: USB disconnect, device number 62 [ 513.489846][T16018] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 513.685101][T16026] kthread_run failed with err -4 [ 514.172827][ T5879] usb 1-1: new full-speed USB device number 63 using dummy_hcd [ 514.334439][ T5879] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 514.351026][ T5879] usb 1-1: config 0 has no interface number 0 [ 514.359372][ T5879] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 514.374942][ T5879] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 514.391668][ T5879] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 514.406113][ T5879] usb 1-1: config 0 interface 2 has no altsetting 0 [ 514.417388][ T5879] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 514.428554][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.442987][ T5879] usb 1-1: Product: syz [ 514.448012][ T5879] usb 1-1: Manufacturer: syz [ 514.454180][ T5879] usb 1-1: SerialNumber: syz [ 514.471434][ T5879] usb 1-1: config 0 descriptor?? [ 514.479267][T16043] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 514.497878][T16043] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 514.645345][T16072] FAULT_INJECTION: forcing a failure. [ 514.645345][T16072] name failslab, interval 1, probability 0, space 0, times 0 [ 514.661231][T16072] CPU: 1 UID: 0 PID: 16072 Comm: syz.2.3686 Not tainted syzkaller #0 PREEMPT(full) [ 514.661257][T16072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 514.661268][T16072] Call Trace: [ 514.661276][T16072] [ 514.661284][T16072] dump_stack_lvl+0x189/0x250 [ 514.661310][T16072] ? __pfx____ratelimit+0x10/0x10 [ 514.661335][T16072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.661356][T16072] ? __pfx__printk+0x10/0x10 [ 514.661375][T16072] ? rcu_is_watching+0x15/0xb0 [ 514.661394][T16072] ? trace_fib_table_lookup+0x85/0x200 [ 514.661424][T16072] should_fail_ex+0x414/0x560 [ 514.661453][T16072] should_failslab+0xa8/0x100 [ 514.661473][T16072] kmem_cache_alloc_noprof+0x88/0x700 [ 514.661496][T16072] ? dst_alloc+0x105/0x170 [ 514.661517][T16072] ? fib_lookup+0x76/0x440 [ 514.661543][T16072] dst_alloc+0x105/0x170 [ 514.661570][T16072] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 514.661604][T16072] ? ip_route_output_key_hash+0xc1/0x280 [ 514.661637][T16072] ip_route_output_key_hash+0x174/0x280 [ 514.661664][T16072] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 514.661686][T16072] ? is_bpf_text_address+0x26/0x2b0 [ 514.661714][T16072] ? __asan_memset+0x22/0x50 [ 514.661740][T16072] ip_route_output_flow+0x2a/0x150 [ 514.661766][T16072] ip_tunnel_xmit+0x96b/0x2390 [ 514.661789][T16072] ? ip_tunnel_xmit+0x150/0x2390 [ 514.661821][T16072] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 514.661838][T16072] ? netif_skb_features+0xa69/0x1540 [ 514.661859][T16072] ? validate_xmit_xfrm+0xbf/0x1160 [ 514.661890][T16072] ? __pfx_validate_xmit_xfrm+0x10/0x10 [ 514.661915][T16072] ? __pfx_netif_skb_features+0x10/0x10 [ 514.661945][T16072] ipip_tunnel_xmit+0x328/0x4b0 [ 514.661971][T16072] dev_hard_start_xmit+0x2d7/0x830 [ 514.662009][T16072] __dev_queue_xmit+0x172a/0x3740 [ 514.662047][T16072] ? __dev_queue_xmit+0x284/0x3740 [ 514.662079][T16072] ? __pfx___dev_queue_xmit+0x10/0x10 [ 514.662106][T16072] ? read_seqbegin+0x122/0x250 [ 514.662120][T16072] ? neigh_connected_output+0x1ea/0x460 [ 514.662137][T16072] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.662163][T16072] ? read_seqbegin+0x1ac/0x250 [ 514.662180][T16072] ? __pfx_read_seqbegin+0x10/0x10 [ 514.662214][T16072] ? neigh_connected_output+0x3b6/0x460 [ 514.662250][T16072] ip_finish_output2+0xd40/0x1160 [ 514.662280][T16072] ? ip_copy_metadata+0x850/0xfc0 [ 514.662306][T16072] ? ip_finish_output2+0x452/0x1160 [ 514.662332][T16072] ? __pfx_ip_finish_output2+0x10/0x10 [ 514.662357][T16072] ? ip_fraglist_prepare+0x3d0/0x5d0 [ 514.662386][T16072] ip_do_fragment+0x1121/0x1770 [ 514.662418][T16072] ? __pfx_ip_finish_output2+0x10/0x10 [ 514.662454][T16072] ip_output+0x29f/0x450 [ 514.662477][T16072] ? ip_output+0x5b/0x450 [ 514.662500][T16072] ip_send_skb+0x74/0x100 [ 514.662524][T16072] udp_send_skb+0xaf1/0x14c0 [ 514.662561][T16072] udp_sendmsg+0x195a/0x2170 [ 514.662593][T16072] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 514.662620][T16072] ? __pfx_udp_sendmsg+0x10/0x10 [ 514.662652][T16072] ? __pfx_process_measurement+0x10/0x10 [ 514.662674][T16072] ? tomoyo_check_open_permission+0x16a/0x3b0 [ 514.662723][T16072] ? __lock_acquire+0xab9/0xd20 [ 514.662767][T16072] udpv6_sendmsg+0xc1c/0x2510 [ 514.662799][T16072] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 514.662828][T16072] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 514.662859][T16072] ? __pfx___might_resched+0x10/0x10 [ 514.662894][T16072] ? aa_sk_perm+0x81c/0x950 [ 514.662926][T16072] ? inet_send_prepare+0x5c/0x270 [ 514.662949][T16072] ? inet6_sendmsg+0xe4/0x120 [ 514.662973][T16072] __sock_sendmsg+0xe5/0x270 [ 514.663002][T16072] sock_write_iter+0x279/0x360 [ 514.663027][T16072] ? __pfx_sock_write_iter+0x10/0x10 [ 514.663061][T16072] ? bpf_lsm_file_permission+0x9/0x20 [ 514.663079][T16072] ? security_file_permission+0x75/0x290 [ 514.663112][T16072] vfs_write+0x5c9/0xb30 [ 514.663137][T16072] ? __pfx_sock_write_iter+0x10/0x10 [ 514.663159][T16072] ? __pfx_vfs_write+0x10/0x10 [ 514.663190][T16072] ? __fget_files+0x2a/0x420 [ 514.663220][T16072] ksys_write+0x145/0x250 [ 514.663242][T16072] ? __pfx_ksys_write+0x10/0x10 [ 514.663264][T16072] ? do_syscall_64+0xbe/0xfa0 [ 514.663285][T16072] do_syscall_64+0xfa/0xfa0 [ 514.663300][T16072] ? lockdep_hardirqs_on+0x9c/0x150 [ 514.663323][T16072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.663341][T16072] ? clear_bhb_loop+0x60/0xb0 [ 514.663363][T16072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.663380][T16072] RIP: 0033:0x7fed6d18efc9 [ 514.663397][T16072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.663413][T16072] RSP: 002b:00007fed6dfe4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 514.663433][T16072] RAX: ffffffffffffffda RBX: 00007fed6d3e5fa0 RCX: 00007fed6d18efc9 [ 514.663447][T16072] RDX: 0000000000001006 RSI: 0000200000000680 RDI: 0000000000000008 [ 514.663459][T16072] RBP: 00007fed6dfe4090 R08: 0000000000000000 R09: 0000000000000000 [ 514.663470][T16072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 514.663481][T16072] R13: 00007fed6d3e6038 R14: 00007fed6d3e5fa0 R15: 00007ffc84221368 [ 514.663513][T16072] [ 515.272132][ T5879] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 515.545837][T16082] dvmrp5: entered allmulticast mode [ 515.619468][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3692'. [ 515.622876][T16082] vlan0: left allmulticast mode [ 515.652523][T16082] veth0_vlan: left allmulticast mode [ 515.659059][T16082] dvmrp5: left allmulticast mode [ 515.911749][T16103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.932479][T16103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.015313][T16106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 516.026115][T16106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 516.450597][T16119] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 516.946672][ T5832] usb 1-1: USB disconnect, device number 63 [ 517.143602][T16147] batadv_slave_0: entered promiscuous mode [ 517.156325][T16146] batadv_slave_0: left promiscuous mode [ 517.481047][T16156] FAULT_INJECTION: forcing a failure. [ 517.481047][T16156] name failslab, interval 1, probability 0, space 0, times 0 [ 517.496216][T16156] CPU: 1 UID: 0 PID: 16156 Comm: syz.4.3722 Not tainted syzkaller #0 PREEMPT(full) [ 517.496239][T16156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 517.496249][T16156] Call Trace: [ 517.496258][T16156] [ 517.496266][T16156] dump_stack_lvl+0x189/0x250 [ 517.496292][T16156] ? __pfx____ratelimit+0x10/0x10 [ 517.496316][T16156] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.496334][T16156] ? __pfx__printk+0x10/0x10 [ 517.496354][T16156] ? rcu_is_watching+0x15/0xb0 [ 517.496371][T16156] ? trace_fib_table_lookup+0x85/0x200 [ 517.496388][T16156] should_fail_ex+0x414/0x560 [ 517.496404][T16156] should_failslab+0xa8/0x100 [ 517.496416][T16156] kmem_cache_alloc_noprof+0x88/0x700 [ 517.496430][T16156] ? dst_alloc+0x105/0x170 [ 517.496442][T16156] ? fib_lookup+0x76/0x440 [ 517.496464][T16156] dst_alloc+0x105/0x170 [ 517.496478][T16156] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 517.496496][T16156] ? ip_route_output_key_hash+0xc1/0x280 [ 517.496511][T16156] ip_route_output_key_hash+0x174/0x280 [ 517.496523][T16156] ? udp_send_skb+0xaf1/0x14c0 [ 517.496532][T16156] ? udp_sendmsg+0x195a/0x2170 [ 517.496541][T16156] ? udpv6_sendmsg+0xc1c/0x2510 [ 517.496555][T16156] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 517.496568][T16156] ? do_syscall_64+0xfa/0xfa0 [ 517.496581][T16156] ? __asan_memset+0x22/0x50 [ 517.496596][T16156] ip_route_output_flow+0x2a/0x150 [ 517.496611][T16156] ip_tunnel_xmit+0x96b/0x2390 [ 517.496624][T16156] ? ip_tunnel_xmit+0x150/0x2390 [ 517.496646][T16156] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 517.496660][T16156] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 517.496677][T16156] ipip_tunnel_xmit+0x328/0x4b0 [ 517.496691][T16156] dev_hard_start_xmit+0x2d7/0x830 [ 517.496713][T16156] __dev_queue_xmit+0x172a/0x3740 [ 517.496734][T16156] ? __dev_queue_xmit+0x284/0x3740 [ 517.496751][T16156] ? __pfx___dev_queue_xmit+0x10/0x10 [ 517.496765][T16156] ? read_seqbegin+0x122/0x250 [ 517.496774][T16156] ? neigh_connected_output+0x1ea/0x460 [ 517.496783][T16156] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.496797][T16156] ? read_seqbegin+0x1ac/0x250 [ 517.496806][T16156] ? __pfx_read_seqbegin+0x10/0x10 [ 517.496822][T16156] ? neigh_connected_output+0x3b6/0x460 [ 517.496839][T16156] ip_finish_output2+0xd40/0x1160 [ 517.496857][T16156] ? ip_copy_metadata+0x850/0xfc0 [ 517.496870][T16156] ? ip_finish_output2+0x452/0x1160 [ 517.496885][T16156] ? __pfx_ip_finish_output2+0x10/0x10 [ 517.496899][T16156] ? ip_fraglist_prepare+0x3d0/0x5d0 [ 517.496917][T16156] ip_do_fragment+0x1121/0x1770 [ 517.496937][T16156] ? __pfx_ip_finish_output2+0x10/0x10 [ 517.496956][T16156] ip_output+0x29f/0x450 [ 517.496970][T16156] ? ip_output+0x5b/0x450 [ 517.496983][T16156] ip_send_skb+0x74/0x100 [ 517.496997][T16156] udp_send_skb+0xaf1/0x14c0 [ 517.497017][T16156] udp_sendmsg+0x195a/0x2170 [ 517.497034][T16156] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 517.497048][T16156] ? __pfx_udp_sendmsg+0x10/0x10 [ 517.497061][T16156] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.497078][T16156] ? rcu_is_watching+0x15/0xb0 [ 517.497089][T16156] ? __schedule+0x17da/0x4d60 [ 517.497116][T16156] udpv6_sendmsg+0xc1c/0x2510 [ 517.497132][T16156] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 517.497149][T16156] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 517.497165][T16156] ? __pfx___might_resched+0x10/0x10 [ 517.497183][T16156] ? aa_sk_perm+0x81c/0x950 [ 517.497200][T16156] ? inet_send_prepare+0x5c/0x270 [ 517.497212][T16156] ? inet6_sendmsg+0xe4/0x120 [ 517.497225][T16156] __sock_sendmsg+0xe5/0x270 [ 517.497240][T16156] sock_write_iter+0x279/0x360 [ 517.497254][T16156] ? __pfx_sock_write_iter+0x10/0x10 [ 517.497272][T16156] ? bpf_lsm_file_permission+0x9/0x20 [ 517.497283][T16156] ? security_file_permission+0x75/0x290 [ 517.497301][T16156] vfs_write+0x5c9/0xb30 [ 517.497315][T16156] ? __pfx_sock_write_iter+0x10/0x10 [ 517.497327][T16156] ? __pfx_vfs_write+0x10/0x10 [ 517.497347][T16156] ? __fget_files+0x2a/0x420 [ 517.497377][T16156] ksys_write+0x145/0x250 [ 517.497398][T16156] ? __pfx_ksys_write+0x10/0x10 [ 517.497420][T16156] ? do_syscall_64+0xbe/0xfa0 [ 517.497440][T16156] do_syscall_64+0xfa/0xfa0 [ 517.497457][T16156] ? lockdep_hardirqs_on+0x9c/0x150 [ 517.497471][T16156] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.497481][T16156] ? clear_bhb_loop+0x60/0xb0 [ 517.497493][T16156] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.497503][T16156] RIP: 0033:0x7fe2be38efc9 [ 517.497513][T16156] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.497522][T16156] RSP: 002b:00007fe2bf200038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 517.497534][T16156] RAX: ffffffffffffffda RBX: 00007fe2be5e5fa0 RCX: 00007fe2be38efc9 [ 517.497542][T16156] RDX: 0000000000001006 RSI: 0000200000000680 RDI: 0000000000000008 [ 517.497549][T16156] RBP: 00007fe2bf200090 R08: 0000000000000000 R09: 0000000000000000 [ 517.497555][T16156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 517.497561][T16156] R13: 00007fe2be5e6038 R14: 00007fe2be5e5fa0 R15: 00007ffeba327c18 [ 517.497577][T16156] [ 518.386967][T16171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3728'. [ 518.482479][ T5832] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 518.645163][ T5832] usb 1-1: config 0 has an invalid interface number: 255 but max is 0 [ 518.655098][ T5832] usb 1-1: config 0 has no interface number 0 [ 518.662593][ T5832] usb 1-1: New USB device found, idVendor=0733, idProduct=0401, bcdDevice=ad.7d [ 518.673459][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.684772][ T5832] usb 1-1: config 0 descriptor?? [ 518.697824][ T5832] gspca_main: spca501-2.14.0 probing 0733:0401 [ 518.712561][ T5879] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 518.852624][ T5879] usb 5-1: device descriptor read/64, error -71 [ 518.896144][ T5832] gspca_spca501: reg write: error -71 [ 518.904892][ T5832] spca501 1-1:0.255: Reg write failed for 0x00,0xaa,0x00 [ 518.914887][ T5832] spca501 1-1:0.255: probe with driver spca501 failed with error -22 [ 518.934068][ T5832] usb 1-1: USB disconnect, device number 64 [ 519.093856][ T5879] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 519.232444][ T5879] usb 5-1: device descriptor read/64, error -71 [ 519.342722][ T5879] usb usb5-port1: attempt power cycle [ 519.682443][ T5879] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 519.702888][ T5879] usb 5-1: device descriptor read/8, error -71 [ 519.822662][ T5832] usb 1-1: new full-speed USB device number 65 using dummy_hcd [ 519.941631][T16194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.952267][ T5879] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 519.953457][T16194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.983244][ T5879] usb 5-1: device descriptor read/8, error -71 [ 519.994599][ T5832] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 520.009487][ T5832] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 520.020460][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.030791][ T5832] usb 1-1: Product: syz [ 520.035868][ T5832] usb 1-1: Manufacturer: syz [ 520.041454][ T5832] usb 1-1: SerialNumber: syz [ 520.045631][T16195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 520.059434][T16195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 520.093467][ T5879] usb usb5-port1: unable to enumerate USB device [ 520.254540][ T5832] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 520.262771][ T5832] cdc_ncm 1-1:1.0: bind() failure [ 520.272214][ T5832] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 520.280423][ T5832] cdc_ncm 1-1:1.1: bind() failure [ 520.290043][ T5832] usb 1-1: USB disconnect, device number 65 [ 521.442431][ T5892] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 521.603977][ T5892] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 521.616295][ T5892] usb 1-1: config 16 interface 0 altsetting 75 has an endpoint descriptor with address 0xBB, changing to 0x8B [ 521.630573][ T5892] usb 1-1: config 16 interface 0 altsetting 75 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 521.644123][ T5892] usb 1-1: config 16 interface 0 altsetting 75 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 521.659779][ T5892] usb 1-1: config 16 interface 0 has no altsetting 0 [ 521.668224][ T5892] usb 1-1: New USB device found, idVendor=15c2, idProduct=0036, bcdDevice=bb.7a [ 521.679181][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.898863][ T5892] usb 1-1: string descriptor 0 read error: -71 [ 521.910681][ C0] imon 1-1:16.0: imon usb_rx_callback_intf0: status(-71) [ 521.922421][ T5892] input: iMON Panel, Knob and Mouse(15c2:0036) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:16.0/input/input72 [ 521.950526][ T5892] imon:send_packet: packet tx failed (-71) [ 521.982507][ T5892] imon 1-1:16.0: panel buttons/knobs setup failed [ 522.042407][ T5892] rc_core: IR keymap rc-imon-pad not found [ 522.049431][ T5892] Registered IR keymap rc-empty [ 522.056284][ T5892] imon 1-1:16.0: Looks like you're trying to use an IR protocol this device does not support [ 522.068537][ T5892] imon 1-1:16.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 522.081553][ T5892] imon:send_packet: packet tx failed (-71) [ 522.112533][ T5892] imon 1-1:16.0: remote input dev register failed [ 522.121665][ T5892] imon 1-1:16.0: imon_init_intf0: rc device setup failed [ 522.206350][ T5892] imon 1-1:16.0: unable to initialize intf0, err 0 [ 522.214864][ T5892] imon:imon_probe: failed to initialize context! [ 522.222547][ T5892] imon 1-1:16.0: unable to register, err -19 [ 522.237375][ T5892] usb 1-1: USB disconnect, device number 66 [ 522.461417][T16218] netlink: 'syz.4.3748': attribute type 12 has an invalid length. [ 522.471027][T16218] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3748'. [ 522.881051][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3758'. [ 522.906441][T16239] 9p: Unknown uid 00000000004294967295 [ 523.115960][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3763'. [ 523.269247][T16258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.283066][T16258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.297615][T16258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.309118][T16258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.532446][ T5892] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 523.699354][ T5892] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 523.710754][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.735869][ T5892] usb 1-1: config 0 descriptor?? [ 523.750120][ T5892] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 523.906420][T16275] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 524.096629][T16290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3780'. [ 524.098566][T16291] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 524.156779][ T5892] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 524.173247][ T5892] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 524.186593][ T5892] usb 1-1: media controller created [ 524.214666][ T5892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 524.241684][ T5892] gp8psk_fe: Frontend attached [ 524.249493][ T5892] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 524.262202][ T5892] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 524.533291][ T5932] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 524.622240][T16299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.633714][T16299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.645229][ T5892] gp8psk: usb in 137 operation failed. [ 524.651960][ T5892] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 524.663638][ T5892] gp8psk: found Genpix USB device pID = 203 (hex) [ 524.695845][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.709260][ T5932] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.721042][ T5932] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 524.732195][ T5932] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.745178][ T5932] usb 5-1: config 0 descriptor?? [ 524.934013][T16301] netlink: 1030 bytes leftover after parsing attributes in process `syz.2.3784'. [ 524.945807][T16301] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 524.959229][T16301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 524.969704][T16301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.163091][ T5932] hid_parser_main: 22 callbacks suppressed [ 525.163114][ T5932] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 525.178614][ T5932] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 525.187048][ T5932] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 525.195854][ T5932] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 525.204294][ T5932] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 525.212769][ T5932] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 525.221091][ T5932] cp2112 0003:10C4:EA90.003C: unknown main item tag 0x0 [ 525.231317][ T5932] cp2112 0003:10C4:EA90.003C: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 525.360704][ T5932] cp2112 0003:10C4:EA90.003C: Part Number: 0x00 Device Version: 0x00 [ 525.662843][T16308] netlink: 'syz.2.3787': attribute type 11 has an invalid length. [ 525.672460][T16308] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3787'. [ 525.686601][T16309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.698222][T16309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.710486][T16308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.721723][T16308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.763242][ T5932] cp2112 0003:10C4:EA90.003C: error setting SMBus config [ 525.773514][ T5932] cp2112 0003:10C4:EA90.003C: probe with driver cp2112 failed with error -71 [ 525.788071][ T5932] usb 5-1: USB disconnect, device number 14 [ 526.346340][ T5932] usb 1-1: USB disconnect, device number 67 [ 526.504412][ T5932] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 526.577290][T16324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.591419][T16324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.595186][T16316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3790'. [ 526.614284][T16316] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3790'. [ 526.658539][T16324] kvm: kvm [16323]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 526.673584][T16324] kvm: kvm [16323]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 526.685683][T16324] kvm: kvm [16323]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 526.685815][T16324] kvm: kvm [16323]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 526.689095][T16324] kvm: kvm [16323]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 526.689377][T16324] kvm: kvm [16323]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 526.689508][T16324] kvm: kvm [16323]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 526.693956][T16324] kvm: kvm [16323]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010004) = 0x8000 [ 526.761296][T16324] kvm: kvm [16323]: vcpu0, guest rIP: 0x9048 Unhandled WRMSR(0xc0010000) = 0x8000 [ 526.779713][T16324] kvm: kvm [16323]: vcpu0, guest rIP: 0x8028 Unhandled WRMSR(0xc0010002) = 0x8000 [ 527.273910][T16331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3796'. [ 527.663736][T16348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.675969][T16348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.692695][ T5932] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 527.844306][ T5932] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 527.855318][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.867495][ T5932] usb 1-1: config 0 descriptor?? [ 527.878154][ T5932] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 528.247815][T16358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.258540][T16358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.279309][ T5932] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 528.291380][ T5932] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 528.301933][ T5932] usb 1-1: media controller created [ 528.316170][ T5932] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 528.338048][ T5932] gp8psk_fe: Frontend attached [ 528.344001][ T5932] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 528.353702][ T5932] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 528.688756][T16340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.705298][T16340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.720648][ T5932] gp8psk: usb in 137 operation failed. [ 528.728160][ T5932] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 528.740597][ T5932] gp8psk: found Genpix USB device pID = 203 (hex) [ 528.802726][ T5932] usb 1-1: USB disconnect, device number 68 [ 528.955017][ T5932] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 529.128523][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 529.139576][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 529.152758][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 529.173823][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 529.192840][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 529.330766][T16375] kvm: user requested TSC rate below hardware speed [ 529.671432][T16386] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 529.684955][T16386] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 529.804921][T16003] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.936736][T16003] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.032873][ T5913] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 530.035655][T16369] chnl_net:caif_netlink_parms(): no params data found [ 530.089392][T16003] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.160195][T16003] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.220351][T16369] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.232504][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 530.249742][ T5913] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 530.260880][T16369] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.271365][ T5913] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 530.280936][ T5913] usb 1-1: can't read configurations, error -61 [ 530.288717][T16369] bridge_slave_0: entered allmulticast mode [ 530.298902][T16369] bridge_slave_0: entered promiscuous mode [ 530.310624][T16369] bridge0: port 2(bridge_slave_1) entered blocking state [ 530.325298][T16369] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.334209][T16369] bridge_slave_1: entered allmulticast mode [ 530.343454][T16369] bridge_slave_1: entered promiscuous mode [ 530.422401][ T5913] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 530.438832][T16369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 530.453390][T16369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 530.557857][T16369] team0: Port device team_slave_0 added [ 530.594011][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 530.608797][ T5913] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 530.631787][T16369] team0: Port device team_slave_1 added [ 530.649027][ T5913] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 530.672204][ T5913] usb 1-1: can't read configurations, error -61 [ 530.691476][ T5913] usb usb1-port1: attempt power cycle [ 530.787249][T16369] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.787269][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.787293][T16369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.789274][T16369] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.789290][T16369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 530.789313][T16369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.861103][T16003] bridge_slave_1: left allmulticast mode [ 530.861129][T16003] bridge_slave_1: left promiscuous mode [ 530.861349][T16003] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.868050][T16003] bridge_slave_0: left allmulticast mode [ 530.976992][T16003] bridge_slave_0: left promiscuous mode [ 530.985705][T16003] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.052600][ T5913] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 531.064350][T16397] netlink: 294 bytes leftover after parsing attributes in process `syz.3.3821'. [ 531.075576][T16397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.113594][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 531.130872][ T5913] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 531.183432][ T5913] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 531.208606][ T5913] usb 1-1: can't read configurations, error -61 [ 531.262476][ T5148] Bluetooth: hci0: command tx timeout [ 531.366670][ T5913] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 531.420968][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 531.431675][ T5913] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 531.463510][ T5913] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 531.474531][ T5913] usb 1-1: can't read configurations, error -61 [ 531.498690][ T5913] usb usb1-port1: unable to enumerate USB device [ 531.696514][T16374] Set syz1 is full, maxelem 65536 reached [ 531.842577][T16003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.885565][T16003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.916485][T16408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.927651][T16003] bond0 (unregistering): (slave team0): Releasing backup interface [ 531.928907][T16408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.980518][T16003] bond0 (unregistering): Released all slaves [ 532.057537][ T1041] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 532.074923][T16369] hsr_slave_0: entered promiscuous mode [ 532.083921][T16369] hsr_slave_1: entered promiscuous mode [ 532.485748][T16430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3831'. [ 532.580781][T16435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.594866][T16435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.610225][T16003] hsr_slave_0: left promiscuous mode [ 532.610265][T16435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.630736][T16436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 532.633504][T16435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.651933][T16003] hsr_slave_1: left promiscuous mode [ 532.653662][T16436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 532.668390][T16003] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.691230][T16003] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.715205][T16003] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.729861][T16003] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.795883][T16003] veth1_macvtap: left promiscuous mode [ 532.819330][T16003] veth0_macvtap: left promiscuous mode [ 532.834511][T16003] veth1_vlan: left promiscuous mode [ 532.843034][T16003] veth0_vlan: left promiscuous mode [ 533.275572][ T5932] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 533.325189][T16003] team0 (unregistering): Port device team_slave_1 removed [ 533.332514][ T5148] Bluetooth: hci0: command tx timeout [ 533.375089][T16003] team0 (unregistering): Port device team_slave_0 removed [ 533.449317][ T5932] usb 1-1: config 150 has an invalid interface number: 204 but max is 2 [ 533.460951][ T5932] usb 1-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 533.473797][ T5932] usb 1-1: config 150 has no interface number 0 [ 533.481371][ T5932] usb 1-1: config 150 interface 204 has no altsetting 0 [ 533.494213][ T5932] usb 1-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 533.505286][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.515064][ T5932] usb 1-1: Product: syz [ 533.520066][ T5932] usb 1-1: Manufacturer: syz [ 533.525832][ T5932] usb 1-1: SerialNumber: syz [ 533.914899][ T5932] xr_serial 1-1:150.204: skipping garbage [ 533.944168][ T5932] xr_serial 1-1:150.204: xr_serial converter detected [ 534.223199][T16466] syzkaller1: entered promiscuous mode [ 534.230185][T16466] syzkaller1: entered allmulticast mode [ 534.465548][T16369] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 534.483507][T16369] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 534.507537][T16369] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 534.536280][T16369] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 534.579457][T16449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.611626][T16449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.647131][T16486] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 534.657653][ T5932] xr_serial ttyUSB0: Failed to set reg 0x0d: -71 [ 534.665763][ T5932] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 534.678429][T16486] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 534.722706][ T5932] usb 1-1: USB disconnect, device number 73 [ 534.742288][ T5932] xr_serial 1-1:150.204: device disconnected [ 534.822955][T16369] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.850668][T16369] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.868087][ T8951] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.876651][ T8951] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.894359][ T2912] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.902903][ T2912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.167754][T16369] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.415112][ T5148] Bluetooth: hci0: command tx timeout [ 535.556584][T16520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 535.571429][T16520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 535.638853][T16369] veth0_vlan: entered promiscuous mode [ 535.665947][T16369] veth1_vlan: entered promiscuous mode [ 535.711950][T16369] veth0_macvtap: entered promiscuous mode [ 535.725683][T16369] veth1_macvtap: entered promiscuous mode [ 535.775517][T16369] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.793614][T16369] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.823067][ T8951] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.834649][ T8951] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.848222][ T8951] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.859139][ T8951] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.953127][T16003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 535.979723][T16003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.007052][ T5872] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 536.020676][T16003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.031440][T16003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.165495][ T5872] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 536.186070][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.197470][T16540] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 536.212541][ T5872] usb 1-1: config 0 descriptor?? [ 536.229136][ T5872] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 536.552566][ T5832] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 536.629348][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 536.641342][ T5872] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 536.651884][ T5872] usb 1-1: media controller created [ 536.666083][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 536.687283][ T5872] gp8psk_fe: Frontend attached [ 536.693644][ T5872] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 536.703489][ T5872] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 536.715754][ T5832] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 536.742361][ T5832] usb 5-1: config 0 has no interface number 0 [ 536.749701][ T5832] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 536.776671][ T5832] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 536.790174][ T5832] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 536.804340][ T5832] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 536.817929][ T5832] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 536.832068][ T5832] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 536.842706][T16526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 536.848331][ T5832] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 536.865107][T16526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 536.869084][ T5832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.887737][ T5872] gp8psk: usb in 138 operation failed. [ 536.887754][ T5872] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 536.887767][ T5872] gp8psk: found Genpix USB device pID = 203 (hex) [ 536.912630][ T5832] usb 5-1: config 0 descriptor?? [ 536.921575][T16543] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 536.930798][T16543] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 536.944252][ T5832] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 536.947920][ T5879] usb 1-1: USB disconnect, device number 74 [ 537.017264][ T5879] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 537.151426][T16543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.162469][T16543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.178551][ T5932] usb 5-1: USB disconnect, device number 15 [ 537.193236][ T5932] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 537.308066][T16552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 537.319219][T16552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 537.346794][T16552] ptrace attach of "./syz-executor exec"[12462] was attempted by ""[16552] [ 537.493571][ T5148] Bluetooth: hci0: command tx timeout [ 537.603691][T16558] tmpfs: Unknown parameter 'mpoóËMöÌVŽ‹&$Š&²l' [ 537.625190][T16558] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3857'. [ 538.112400][ T5872] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 538.274536][ T5872] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 538.285492][ T5872] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.297436][ T5872] usb 5-1: config 0 descriptor?? [ 538.306820][ T5872] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 538.691171][T16577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3866'. [ 538.719660][T16572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.730923][T16572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.748106][ T5872] gp8psk: usb in 137 operation failed. [ 538.756324][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 538.756938][ T5872] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 538.756987][ T5872] usb 5-1: media controller created [ 538.764140][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 538.777834][ T5872] gp8psk_fe: Frontend attached [ 538.777892][ T5872] usb 5-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 538.778459][ T5872] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 538.830466][ T5872] gp8psk: usb in 138 operation failed. [ 538.866762][ T5872] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 538.879416][ T5872] gp8psk: found Genpix USB device pID = 203 (hex) [ 538.893061][ T5872] usb 5-1: USB disconnect, device number 16 [ 538.939068][ T5872] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 539.122433][ T5892] usb 1-1: new full-speed USB device number 75 using dummy_hcd [ 539.284498][ T5892] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 539.309052][ T5892] usb 1-1: New USB device found, idVendor=07b0, idProduct=0006, bcdDevice=c6.10 [ 539.320275][ T5892] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.330158][ T5892] usb 1-1: Product: syz [ 539.336816][ T5892] usb 1-1: Manufacturer: syz [ 539.344213][ T5892] usb 1-1: SerialNumber: syz [ 539.486628][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3871'. [ 539.497766][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3871'. [ 539.509350][T16588] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3871'. [ 539.772517][ T5879] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 539.932418][ T5879] usb 5-1: Using ep0 maxpacket: 8 [ 539.941006][ T5879] usb 5-1: config 0 interface 0 altsetting 247 endpoint 0x81 has an invalid bInterval 202, changing to 11 [ 539.954850][ T5879] usb 5-1: config 0 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 539.971705][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 539.983800][ T5879] usb 5-1: New USB device found, idVendor=2179, idProduct=0053, bcdDevice= 0.00 [ 539.995636][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.011463][ T5879] usb 5-1: config 0 descriptor?? [ 540.230020][T16587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 540.257095][T16587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 540.471256][ T5879] uclogic 0003:2179:0053.003D: interface is invalid, ignoring [ 541.934976][ T5892] HFC-S_USB 1-1:252.0: probe with driver HFC-S_USB failed with error -5 [ 541.985464][ T5892] usb 1-1: USB disconnect, device number 75 [ 542.283520][T16649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.314314][T16649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.395617][T16649] nbd1: detected capacity change from 0 to 127 [ 542.418682][T16654] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3879'. [ 542.443481][T16654] block nbd0: reconnected socket [ 542.457196][T16654] nbd: socks must be embedded in a SOCK_ITEM attr [ 542.470875][ T5913] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 542.495222][ T5148] block nbd1: Receive control failed (result -104) [ 542.495998][ T5841] block nbd0: Receive control failed (result -32) [ 542.563397][T16660] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 542.574762][T16660] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.660111][ T5913] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 542.682497][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.706524][ T5913] usb 1-1: config 0 descriptor?? [ 542.721568][ T8951] bridge_slave_1: left allmulticast mode [ 542.738769][ T8951] bridge_slave_1: left promiscuous mode [ 542.754975][ T5913] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 542.773190][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.795161][ T8951] bridge_slave_0: left allmulticast mode [ 542.802009][ T8951] bridge_slave_0: left promiscuous mode [ 542.828293][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.172703][T16647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.205680][T16647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.231797][ T5913] gp8psk: usb in 137 operation failed. [ 543.253392][ T5913] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 543.264872][T16677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.292256][T16677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.308384][ T5913] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 543.324213][ T5913] usb 1-1: media controller created [ 543.347521][T16677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 543.364790][ T5913] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 543.379021][T16677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 543.437118][ T5913] gp8psk_fe: Frontend attached [ 543.443563][ T5913] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 543.455131][ T5913] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 543.548579][ T5913] gp8psk: usb in 138 operation failed. [ 543.558105][ T5913] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 543.571903][ T5913] gp8psk: found Genpix USB device pID = 203 (hex) [ 543.598874][ T5913] usb 1-1: USB disconnect, device number 76 [ 543.699722][ T5913] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 543.808513][ T8951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.847600][ T8951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.885420][ T8951] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 544.007643][ T8951] bond0 (unregistering): Released all slaves [ 544.204206][T16699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.215742][T16699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.313217][ T5913] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 544.439103][ T8951] hsr_slave_0: left promiscuous mode [ 544.448654][ T8951] hsr_slave_1: left promiscuous mode [ 544.460408][ T5913] usb 1-1: device descriptor read/64, error -71 [ 544.460843][ T8951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.480943][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.491145][ T8951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.501430][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.529906][ T8951] veth1_macvtap: left promiscuous mode [ 544.536815][T16703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.538156][ T8951] veth0_macvtap: left promiscuous mode [ 544.551575][T16703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.554685][ T8951] veth1_vlan: left promiscuous mode [ 544.569207][ T8951] veth0_vlan: left promiscuous mode [ 544.577024][T16703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.589475][T16703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.658502][ T8951] pimreg (unregistering): left allmulticast mode [ 544.716775][ T5913] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 544.856872][T16708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.869427][T16708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 544.876015][ T5913] usb 1-1: device descriptor read/64, error -71 [ 544.885932][T16708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 544.889190][T16709] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3900'. [ 544.898305][T16708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.013038][ T5913] usb usb1-port1: attempt power cycle [ 545.035556][T16713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.048374][T16713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.259642][ T8951] team0 (unregistering): Port device team_slave_1 removed [ 545.302286][ T8951] team0 (unregistering): Port device team_slave_0 removed [ 545.352438][ T5913] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 545.383180][ T5913] usb 1-1: device descriptor read/8, error -71 [ 545.636147][ T5913] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 545.669651][ T5913] usb 1-1: device descriptor read/8, error -71 [ 545.742252][ T95] block nbd1: Connection timed out, retrying (0/1 alive) [ 545.755908][ T95] block nbd1: Connection timed out, retrying (0/1 alive) [ 545.765110][ T25] block nbd1: Dead connection, failed to find a fallback [ 545.777946][ T25] block nbd1: shutting down sockets [ 545.785171][ T95] block nbd1: Connection timed out, retrying (0/1 alive) [ 545.794288][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.807079][ T95] block nbd1: Connection timed out, retrying (0/1 alive) [ 545.815709][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 545.827081][ T25] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.838776][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 545.848546][ T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.859768][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 545.869354][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.880409][ T5913] usb usb1-port1: unable to enumerate USB device [ 545.888135][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 545.906157][ T9937] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.924412][ T9937] Buffer I/O error on dev nbd1, logical block 0, async page read [ 545.935852][ T9937] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.947051][ T9937] Buffer I/O error on dev nbd1, logical block 1, async page read [ 545.957427][ T9937] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.968574][ T9937] Buffer I/O error on dev nbd1, logical block 2, async page read [ 545.978146][ T9937] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 545.990603][ T9937] Buffer I/O error on dev nbd1, logical block 3, async page read [ 546.000502][ T9937] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.011660][ T9937] Buffer I/O error on dev nbd1, logical block 0, async page read [ 546.021146][ T9937] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 546.032280][ T9937] Buffer I/O error on dev nbd1, logical block 1, async page read [ 546.050050][ T9937] ldm_validate_partition_table(): Disk read failed. [ 546.069931][ T9937] Dev nbd1: unable to read RDB block 0 [ 546.079196][ T9937] nbd1: unable to read partition table [ 546.094051][ T9937] ldm_validate_partition_table(): Disk read failed. [ 546.104151][ T9937] Dev nbd1: unable to read RDB block 0 [ 546.120520][ T9937] nbd1: unable to read partition table [ 546.362448][T16730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.375565][T16730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 546.744997][T16732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 546.756178][T16732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.032383][T16736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.042811][T16736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.058969][T16736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.070995][T16736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.301104][T16743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3914'. [ 547.509492][T16750] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.519955][T16750] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.536563][T16749] dvmrp1: entered allmulticast mode [ 547.682033][T16754] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 547.849977][T16762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.860137][T16763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 547.860499][T16762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 547.876734][T16763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 548.170556][T16772] fuse: Bad value for 'rootmode' [ 548.189673][T16772] syzkaller1: entered promiscuous mode [ 548.196815][T16772] syzkaller1: entered allmulticast mode [ 548.352436][ T10] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 548.518493][ T10] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 548.531286][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.550076][ T10] usb 1-1: config 0 descriptor?? [ 548.559322][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 548.962573][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 548.974516][ T10] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 548.985312][ T10] usb 1-1: media controller created [ 549.004063][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 549.026278][ T10] gp8psk_fe: Frontend attached [ 549.032077][ T10] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 549.041829][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 549.171950][T16769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.176155][T16794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3935'. [ 549.188231][T16769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.210003][ T10] gp8psk: usb in 138 operation failed. [ 549.219640][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 549.233051][ T10] gp8psk: found Genpix USB device pID = 203 (hex) [ 549.254596][ T10] usb 1-1: USB disconnect, device number 81 [ 549.319975][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 549.590370][T16808] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.603592][T16808] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.650974][T16808] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 550.054580][T16804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.065452][T16804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.077601][T16804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 550.088208][T16804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.164220][T16841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.175144][T16841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.190490][T16841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.204094][T16841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.342467][ T10] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 551.411083][T16847] QAT: Invalid ioctl 1075883590 [ 551.417251][T16847] QAT: Invalid ioctl 1075883590 [ 551.423570][T16847] QAT: Invalid ioctl 1075883590 [ 551.429450][T16847] QAT: Invalid ioctl 1075883590 [ 551.435546][T16847] QAT: Invalid ioctl 1075883590 [ 551.441478][T16847] QAT: Invalid ioctl 1075883590 [ 551.447423][T16847] QAT: Invalid ioctl 1075883590 [ 551.453338][T16847] QAT: Invalid ioctl 1075883590 [ 551.459206][T16847] QAT: Invalid ioctl 1075883590 [ 551.465677][T16847] QAT: Invalid ioctl 1075883590 [ 551.503890][ T10] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 551.515719][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.543391][ T10] usb 1-1: config 0 descriptor?? [ 551.564709][ T10] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 551.602069][T16855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 551.603913][T16855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 551.833062][T16862] syzkaller1: entered promiscuous mode [ 551.839744][T16862] syzkaller1: entered allmulticast mode [ 551.849553][ T5841] Bluetooth: hci1: unexpected event for opcode 0x0c7d [ 551.963614][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 551.988312][ T10] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 551.999331][ T10] usb 1-1: media controller created [ 552.013985][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 552.039272][ T10] gp8psk_fe: Frontend attached [ 552.045527][ T10] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 552.055348][ T10] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 552.187270][T16837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.213771][T16837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.226589][ T10] gp8psk: usb in 138 operation failed. [ 552.233728][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 552.254130][ T10] gp8psk: found Genpix USB device pID = 203 (hex) [ 552.268930][ T10] usb 1-1: USB disconnect, device number 82 [ 552.358326][T16877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3968'. [ 552.417879][ T10] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 552.453242][T16881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3970'. [ 552.520814][T16881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.537647][T16881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 552.609293][T16889] loop7: detected capacity change from 0 to 7 [ 552.621486][ T9937] Dev loop7: unable to read RDB block 7 [ 552.628830][ T9937] loop7: AHDI p1 p2 [ 552.633767][ T9937] loop7: partition table partially beyond EOD, truncated [ 552.643152][ T9937] loop7: p1 start 1702000233 is beyond EOD, truncated [ 552.661878][T16889] Dev loop7: unable to read RDB block 7 [ 552.674554][T16889] loop7: AHDI p1 p2 [ 552.679276][T16889] loop7: partition table partially beyond EOD, truncated [ 552.688359][T16889] loop7: p1 start 1702000233 is beyond EOD, truncated [ 553.054246][T16912] netlink: 400 bytes leftover after parsing attributes in process `syz.2.3983'. [ 553.137795][T16916] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 553.634165][T16941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.662648][T16941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.719247][T16949] netlink: 'syz.0.3999': attribute type 12 has an invalid length. [ 553.802438][T16947] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 553.835857][T16947] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.021417][T16963] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4006'. [ 554.279507][T16972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.290769][T16972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.403315][T16976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.417636][T16976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.509762][T16980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.520969][T16980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 554.534401][T16980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 554.545612][T16980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.143733][T16992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4020'. [ 555.221096][T17001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.233234][T17001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.254317][T17001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 555.265095][T17001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 555.432549][ T10] usb 1-1: new full-speed USB device number 83 using dummy_hcd [ 555.593982][ T10] usb 1-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 555.608078][ T10] usb 1-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 555.618991][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.628602][ T10] usb 1-1: Product: syz [ 555.633658][ T10] usb 1-1: Manufacturer: syz [ 555.639215][ T10] usb 1-1: SerialNumber: syz [ 555.907654][T17010] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4017'. [ 555.922257][T17010] netlink: 'syz.0.4017': attribute type 4 has an invalid length. [ 556.311970][T17018] mkiss: ax0: crc mode is auto. [ 556.535754][T17027] IPVS: set_ctl: invalid protocol: 12 127.0.0.1:20004 [ 556.593381][T17030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.606026][T17030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.624759][T17030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.635812][T17030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 556.777883][T17032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4033'. [ 557.069437][T17039] dvmrp0: entered allmulticast mode [ 557.270164][T17049] netlink: zone id is out of range [ 557.276943][T17049] netlink: zone id is out of range [ 557.284780][T17049] netlink: zone id is out of range [ 557.291078][T17049] netlink: zone id is out of range [ 557.297814][T17049] netlink: zone id is out of range [ 557.305033][T17049] netlink: zone id is out of range [ 557.311311][T17049] netlink: zone id is out of range [ 557.325749][T17049] netlink: zone id is out of range [ 557.342176][T17049] netlink: zone id is out of range [ 557.349878][T17049] netlink: zone id is out of range [ 557.479421][T17055] efs: cannot read volume header [ 557.708902][T17067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.733115][T17067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.777894][T17067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.802083][T17067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.864172][T17074] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 558.033663][T17084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.045426][T17084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.140239][ T10] comedi comedi4: Wrong number of endpoints [ 558.154900][ T10] ni6501 1-1:5.0: driver 'ni6501' failed to auto-configure device. [ 558.168908][ T10] usb 1-1: USB disconnect, device number 83 [ 558.421727][T17098] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4062'. [ 558.435389][T17097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.445998][T17097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.615023][ T10] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 558.639101][ T5198] Dev loop6: unable to read RDB block 1 [ 558.645991][ T5198] loop6: unable to read partition table [ 558.655426][ T5198] loop6: partition table beyond EOD, truncated [ 558.682209][T17103] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4064'. [ 558.725142][T17105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 558.735848][T17105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 558.793865][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 558.804236][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.818073][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 558.828974][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 558.839163][ T10] usb 1-1: Manufacturer: syz [ 558.847030][ T10] usb 1-1: config 0 descriptor?? [ 558.923502][ T10] rc_core: IR keymap rc-hauppauge not found [ 558.923523][ T10] Registered IR keymap rc-empty [ 558.924711][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 558.926144][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input74 [ 559.033360][T17112] loop5: detected capacity change from 0 to 7 [ 559.062342][T17112] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 559.068731][T17112] loop5: partition table partially beyond EOD, truncated [ 559.077539][T17112] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 559.120764][ T9937] udevd[9937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 559.427847][T17123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.441573][T17123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.461758][T17123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.475475][T17123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.480590][ T5892] usb 1-1: USB disconnect, device number 84 [ 559.502990][T17123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.524505][T17123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.113143][T17132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.127031][T17132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.629173][T17147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 560.639802][T17147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 560.659558][T17147] netlink: 'syz.2.4082': attribute type 21 has an invalid length. [ 560.671166][T17147] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4082'. [ 561.052402][ T5892] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 561.103506][T17170] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.114486][T17170] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 561.125639][T17170] tipc: Can't bind to reserved service type 0 [ 561.212382][ T5892] usb 1-1: Using ep0 maxpacket: 8 [ 561.222016][ T5892] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.236901][ T5892] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 561.248274][ T5892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.279157][ T5892] usb 1-1: config 0 descriptor?? [ 561.300289][ T5892] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 561.941421][T17203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 561.972823][T17203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.075145][T17210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4096'. [ 562.129622][T17214] tmpfs: Bad value for 'mpol' [ 562.219242][T17218] loop5: detected capacity change from 0 to 7 [ 562.241056][T17218] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 562.247520][T17218] loop5: partition table partially beyond EOD, truncated [ 562.256824][T17218] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 562.384231][T17221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.395862][ T9937] udevd[9937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 562.407688][T17221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.445267][T17221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.465151][T17221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.778982][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.786999][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.866888][T17235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.877429][T17235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 562.894052][T17235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 562.905403][T17235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.073030][T17238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.087023][T17238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.101978][T17238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.114372][T17238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.328400][T17249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.353185][T17251] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 563.355552][T17246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 563.590312][T17260] netlink: 188 bytes leftover after parsing attributes in process `syz.2.4118'. [ 564.130615][T17274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.144948][T17274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.168270][T17274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.180188][T17274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.187078][ T5832] usb 1-1: USB disconnect, device number 85 [ 564.785290][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4128'. [ 564.976485][T17296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 564.986959][T17298] loop5: detected capacity change from 0 to 7 [ 564.996016][T17296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 564.997506][T17298] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 565.013526][T17298] loop5: partition table partially beyond EOD, truncated [ 565.022262][T17298] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 565.060381][ T9937] udevd[9937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 565.534526][ T5832] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 565.705377][ T5832] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 565.716432][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.729068][ T5832] usb 1-1: config 0 descriptor?? [ 565.743167][ T5832] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 566.149953][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 566.161953][ T5832] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 566.172512][ T5832] usb 1-1: media controller created [ 566.186216][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 566.215085][ T5832] gp8psk_fe: Frontend attached [ 566.220878][ T5832] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 566.230852][ T5832] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 566.351605][T17308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 566.362206][T17308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 566.376920][ T5832] gp8psk: usb in 138 operation failed. [ 566.384399][ T5832] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 566.396077][ T5832] gp8psk: found Genpix USB device pID = 203 (hex) [ 566.410031][ T5832] usb 1-1: USB disconnect, device number 86 [ 566.527842][ T5832] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 567.219056][T17329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.230970][T17329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.382536][T17343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.393170][T17343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.404745][T17343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.417655][T17343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.911804][T17351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.922669][T17351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.944150][T17351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 567.955643][T17351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 567.982262][T17353] tmpfs: Unknown parameter 'grpquota_3' [ 568.145613][T17363] netlink: 'syz.0.4159': attribute type 12 has an invalid length. [ 568.155469][T17363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4159'. [ 568.529803][T17379] loop5: detected capacity change from 0 to 7 [ 568.548896][T17379] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 568.552413][ T5932] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 568.555964][T17379] loop5: partition table partially beyond EOD, truncated [ 568.573691][T17379] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 568.624024][ T9937] udevd[9937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 568.708248][T17383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.719352][T17383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.730112][T17383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.742059][T17383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.743790][ T5932] usb 1-1: unable to get BOS descriptor or descriptor too short [ 568.761756][ T5932] usb 1-1: not running at top speed; connect to a high speed hub [ 568.773408][ T5932] usb 1-1: config 13 has an invalid interface number: 220 but max is 0 [ 568.783611][ T5932] usb 1-1: config 13 has an invalid interface number: 73 but max is 0 [ 568.793455][ T5932] usb 1-1: config 13 has 2 interfaces, different from the descriptor's value: 1 [ 568.804359][ T5932] usb 1-1: config 13 has no interface number 0 [ 568.811751][ T5932] usb 1-1: config 13 has no interface number 1 [ 568.819245][ T5932] usb 1-1: config 13 interface 220 altsetting 5 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 568.832622][ T5932] usb 1-1: config 13 interface 220 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 568.848463][ T5932] usb 1-1: too many endpoints for config 13 interface 73 altsetting 59: 49, using maximum allowed: 30 [ 568.861656][ T5932] usb 1-1: config 13 interface 73 altsetting 59 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 568.875160][ T5932] usb 1-1: config 13 interface 73 altsetting 59 has a duplicate endpoint with address 0x6, skipping [ 568.888163][ T5932] usb 1-1: config 13 interface 73 altsetting 59 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 568.901473][ T5932] usb 1-1: config 13 interface 73 altsetting 59 has an invalid descriptor for endpoint zero, skipping [ 568.914691][ T5932] usb 1-1: config 13 interface 73 altsetting 59 has 5 endpoint descriptors, different from the interface descriptor's value: 49 [ 568.930594][ T5932] usb 1-1: config 13 interface 220 has no altsetting 0 [ 568.939845][ T5932] usb 1-1: config 13 interface 73 has no altsetting 0 [ 568.948669][ T5932] usb 1-1: language id specifier not provided by device, defaulting to English [ 568.960969][ T5932] usb 1-1: New USB device found, idVendor=0cde, idProduct=0027, bcdDevice=6b.ab [ 568.971891][ T5932] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.981952][ T5932] usb 1-1: Product: syz [ 568.986979][ T5932] usb 1-1: Manufacturer: syz [ 568.992541][ T5932] usb 1-1: SerialNumber: syz [ 569.481131][T17397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.495789][T17397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.514932][T17397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.525551][T17397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.977962][ T5932] carl9170 1-1:13.73: probe with driver carl9170 failed with error -22 [ 569.996378][ T5932] usb 1-1: USB disconnect, device number 87 [ 570.091277][T17414] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 570.257590][T17423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.268648][T17423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.269188][T17422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.295605][T17422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.467040][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 570.477527][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 570.872440][ T5832] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 571.045531][ T5832] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 571.045552][ T5832] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 571.047377][ T5832] usb 1-1: config 0 descriptor?? [ 571.051069][ T5832] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 571.410593][T17441] netlink: 'syz.2.4192': attribute type 12 has an invalid length. [ 571.420547][T17441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4192'. [ 571.451860][ T5832] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 571.464072][ T5832] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 571.474727][ T5832] usb 1-1: media controller created [ 571.489486][ T5832] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 571.507625][ T5832] gp8psk_fe: Frontend attached [ 571.507674][ T5832] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 571.507839][ T5832] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 571.658788][T17433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.671064][T17433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.682814][ T5832] gp8psk: usb in 138 operation failed. [ 571.684953][T17445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 571.689387][ T5832] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 571.689403][ T5832] gp8psk: found Genpix USB device pID = 203 (hex) [ 571.719049][T17445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 571.739032][ T5932] usb 1-1: USB disconnect, device number 88 [ 571.784977][ T5932] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 572.291932][T17450] loop5: detected capacity change from 0 to 7 [ 572.318720][T17450] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 572.325689][T17450] loop5: partition table partially beyond EOD, truncated [ 572.337019][T17450] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 572.381104][ T9937] udevd[9937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 573.035110][ T798] dvb-usb: did not find the firmware file 'dvb-usb-dibusb-6.0.0.8.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 573.076623][ T798] dvb_usb_dibusb_mc 4-1:0.104: probe with driver dvb_usb_dibusb_mc failed with error -110 [ 573.113053][ T798] usb 4-1: USB disconnect, device number 74 [ 573.454857][T17471] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 573.454910][T17471] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 573.458651][T17471] fuse: blksize only supported for fuseblk [ 573.630135][T17475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.630510][T17475] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 573.728592][T17481] netlink: 'syz.4.4209': attribute type 10 has an invalid length. [ 573.739363][T17481] bridge0: port 3(netdevsim0) entered blocking state [ 573.753417][T17481] bridge0: port 3(netdevsim0) entered disabled state [ 573.761805][T17481] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 573.774782][T17481] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 573.785496][T17481] bridge0: port 3(netdevsim0) entered blocking state [ 573.793719][T17481] bridge0: port 3(netdevsim0) entered forwarding state [ 573.962052][T17499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 573.990714][T17499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 574.362516][ T5832] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 574.533796][ T5832] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 574.546058][ T5832] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 574.557023][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.569506][ T5832] usb 4-1: config 0 descriptor?? [ 574.588022][ T5832] pwc: Askey VC010 type 2 USB webcam detected. [ 574.644959][T17521] netlink: 'syz.2.4225': attribute type 12 has an invalid length. [ 574.654923][T17521] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4225'. [ 574.855842][T17534] loop5: detected capacity change from 0 to 7 [ 574.880647][ T9937] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 574.889997][ T9937] loop5: partition table partially beyond EOD, truncated [ 574.899447][ T9937] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 574.929459][T17534] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 574.936859][T17534] loop5: partition table partially beyond EOD, truncated [ 574.946521][T17534] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 574.984003][ T9937] udevd[9937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 574.998992][ T5832] pwc: recv_control_msg error -32 req 02 val 2b00 [ 575.014777][ T9937] udevd[9937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 575.029021][ T5832] pwc: recv_control_msg error -32 req 02 val 2700 [ 575.054505][ T5832] pwc: recv_control_msg error -32 req 02 val 2c00 [ 575.065852][ T5832] pwc: recv_control_msg error -32 req 04 val 1000 [ 575.083764][ T5832] pwc: recv_control_msg error -32 req 04 val 1300 [ 575.093793][T17510] netlink: 'syz.3.4220': attribute type 16 has an invalid length. [ 575.113912][ T5872] usb 3-1: USB disconnect, device number 27 [ 575.124283][T17510] netlink: 'syz.3.4220': attribute type 25 has an invalid length. [ 575.136585][T17510] netlink: 64094 bytes leftover after parsing attributes in process `syz.3.4220'. [ 575.148263][ T798] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 575.165962][ T5832] pwc: recv_control_msg error -32 req 04 val 1400 [ 575.183465][ T5832] pwc: recv_control_msg error -32 req 02 val 2000 [ 575.196106][ T5832] pwc: recv_control_msg error -32 req 02 val 2100 [ 575.205029][ T5832] pwc: recv_control_msg error -32 req 04 val 1500 [ 575.219558][ T5832] pwc: recv_control_msg error -32 req 02 val 2500 [ 575.235292][ T5832] pwc: recv_control_msg error -32 req 02 val 2400 [ 575.275167][T17540] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 575.296894][T17540] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 575.330352][ T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 575.347976][ T5148] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 575.360542][ T5148] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 575.372456][ T5148] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 575.381526][ T798] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 575.393724][ T798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 575.406263][ T5148] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 575.416745][ T798] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 575.416861][ T5148] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 575.437126][ T798] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 575.485915][ T798] usb 1-1: Manufacturer: syz [ 575.508423][ T5832] pwc: recv_control_msg error -32 req 02 val 2900 [ 575.528072][ T798] usb 1-1: config 0 descriptor?? [ 575.535789][ T5832] pwc: recv_control_msg error -71 req 02 val 2800 [ 575.549372][ T798] smsusb:smsusb_probe: board id=9, interface number 0 [ 575.564531][ T5832] pwc: recv_control_msg error -71 req 04 val 1100 [ 575.583004][ T5832] pwc: recv_control_msg error -71 req 04 val 1200 [ 575.591340][ T798] smsusb:smsusb_probe: Device initialized with return code -19 [ 575.611230][ T5832] pwc: Registered as video103. [ 575.623522][ T5832] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input75 [ 575.683144][ T5832] usb 4-1: USB disconnect, device number 75 [ 575.762452][ T5932] usb 1-1: USB disconnect, device number 89 [ 575.933722][T17541] chnl_net:caif_netlink_parms(): no params data found [ 576.116464][T17541] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.126180][T17541] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.135373][T17541] bridge_slave_0: entered allmulticast mode [ 576.145717][T17541] bridge_slave_0: entered promiscuous mode [ 576.156476][T17541] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.167131][T17541] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.175935][T17541] bridge_slave_1: entered allmulticast mode [ 576.187726][T17541] bridge_slave_1: entered promiscuous mode [ 576.239263][T17541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.257581][T17541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.375079][T17541] team0: Port device team_slave_0 added [ 576.386160][T17541] team0: Port device team_slave_1 added [ 576.422378][T17541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.422396][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.422418][T17541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.424054][T17541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 576.424070][T17541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 576.424084][T17541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.456887][T17541] hsr_slave_0: entered promiscuous mode [ 576.570019][T17541] hsr_slave_1: entered promiscuous mode [ 576.577877][T17541] debugfs: 'hsr0' already exists in 'hsr' [ 576.585016][T17541] Cannot create hsr debugfs directory [ 576.855493][ T8951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.970239][ T8951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.046461][ T8951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.119310][ T8951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 577.307371][ T8951] bridge_slave_1: left allmulticast mode [ 577.314546][ T8951] bridge_slave_1: left promiscuous mode [ 577.321359][ T8951] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.331635][ T8951] bridge_slave_0: left allmulticast mode [ 577.339200][ T8951] bridge_slave_0: left promiscuous mode [ 577.346829][ T8951] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.493641][ T5148] Bluetooth: hci3: command tx timeout [ 577.566597][ T8951] dvmrp1 (unregistering): left allmulticast mode [ 577.749186][ T8951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.805076][ T8951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.854967][ T8951] bond0 (unregistering): Released all slaves [ 578.226876][ T8951] hsr_slave_0: left promiscuous mode [ 578.235770][ T8951] hsr_slave_1: left promiscuous mode [ 578.244493][ T8951] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.253532][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.263301][ T8951] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.272198][ T8951] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.302058][ T8951] veth1_macvtap: left promiscuous mode [ 578.309023][ T8951] veth0_macvtap: left promiscuous mode [ 578.316336][ T8951] veth1_vlan: left promiscuous mode [ 578.322965][ T8951] veth0_vlan: left promiscuous mode [ 578.423254][ T8951] pim6reg (unregistering): left allmulticast mode [ 578.749577][ T8951] team0 (unregistering): Port device team_slave_1 removed [ 578.797918][ T8951] team0 (unregistering): Port device team_slave_0 removed [ 579.370506][T17541] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 579.395566][T17541] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 579.423910][T17541] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 579.445901][T17541] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 579.582618][ T5148] Bluetooth: hci3: command tx timeout [ 579.608635][T17541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 579.666937][T17541] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.699200][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.707822][ T1041] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.751432][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.760060][ T1041] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.826017][T17541] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 579.965484][T17541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 580.004594][T17541] veth0_vlan: entered promiscuous mode [ 580.019545][T17541] veth1_vlan: entered promiscuous mode [ 580.049652][T17541] veth0_macvtap: entered promiscuous mode [ 580.061239][T17541] veth1_macvtap: entered promiscuous mode [ 580.080351][T17541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.096565][T17541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 580.114212][ T2912] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.124985][ T2912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.137132][ T8951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.148661][ T8951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 580.214128][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.229208][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.253101][ T8951] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 580.262712][ T8951] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 580.369855][T17613] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 580.521454][T17619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.534577][T17619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 580.559453][T17619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 580.575954][T17619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.302140][T17656] netlink: 'syz.0.4259': attribute type 12 has an invalid length. [ 581.302156][T17656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4259'. [ 581.526252][T17670] loop5: detected capacity change from 0 to 7 [ 581.544069][T17670] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 581.550472][T17670] loop5: partition table partially beyond EOD, truncated [ 581.561492][T17670] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 581.631487][ T9937] udevd[9937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 581.653754][ T5148] Bluetooth: hci3: command tx timeout [ 581.742534][ T798] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 581.889458][T17686] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 581.904528][T17686] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 581.917586][ T798] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 581.931422][ T798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.949896][ T798] usb 1-1: config 0 descriptor?? [ 581.967357][ T798] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 582.363902][ T798] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 582.376111][ T798] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 582.386554][ T798] usb 1-1: media controller created [ 582.400239][ T798] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 582.423451][ T798] gp8psk_fe: Frontend attached [ 582.429278][ T798] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 582.439008][ T798] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 582.570481][T17666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 582.572166][T17666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 582.575119][ T798] gp8psk: usb in 138 operation failed. [ 582.575134][ T798] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 582.575149][ T798] gp8psk: found Genpix USB device pID = 203 (hex) [ 582.618475][ T5879] usb 1-1: USB disconnect, device number 90 [ 582.715819][ T5879] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 582.834204][T17706] syzkaller1: entered promiscuous mode [ 582.847677][T17706] syzkaller1: entered allmulticast mode [ 582.967667][ T30] audit: type=1326 audit(1761298838.893:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.4.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415198efc9 code=0x7fc00000 [ 582.994955][ T30] audit: type=1326 audit(1761298838.893:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.4.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415198efc9 code=0x7fc00000 [ 583.023162][ T30] audit: type=1326 audit(1761298838.893:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.4.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415198efc9 code=0x7fc00000 [ 583.050915][ T30] audit: type=1326 audit(1761298838.893:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.4.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415198efc9 code=0x7fc00000 [ 583.078764][ T30] audit: type=1326 audit(1761298838.893:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.4.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415198efc9 code=0x7fc00000 [ 583.106673][ T30] audit: type=1326 audit(1761298838.893:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.4.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415198efc9 code=0x7fc00000 [ 583.133646][ T30] audit: type=1326 audit(1761298838.893:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.4.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415198efc9 code=0x7fc00000 [ 583.160651][ T30] audit: type=1326 audit(1761298838.893:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.4.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415198efc9 code=0x7fc00000 [ 583.187773][ T30] audit: type=1326 audit(1761298838.893:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.4.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415198efc9 code=0x7fc00000 [ 583.215644][ T30] audit: type=1326 audit(1761298838.893:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17704 comm="syz.4.4282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f415198efc9 code=0x7fc00000 [ 583.419836][T17721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.439514][T17723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 583.450695][T17721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.460506][T17723] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 583.541482][T17730] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input76 [ 583.553099][T17732] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4292'. [ 583.581693][T17730] IPv6: syztnl0: Disabled Multicast RS [ 583.658699][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.659130][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.659589][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.660043][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.660484][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.660982][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.661371][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.661846][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.662259][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.664528][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.665068][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.665476][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.665918][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.666307][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.666694][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.667398][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.667816][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.668356][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.668769][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.669235][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.669691][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.670157][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.670631][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.671325][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.681176][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.682772][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.689096][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.689828][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.690638][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.691457][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.692708][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.694212][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.694909][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.695622][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.696381][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.697075][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.703613][T17738] overlay: filesystem on ./bus not supported as upperdir [ 583.772426][ T5148] Bluetooth: hci3: command tx timeout [ 584.021301][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.031480][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.032144][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.033006][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.033762][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.035340][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.036087][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.037004][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.038224][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.038962][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.039895][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.040852][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.041761][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.043499][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.044545][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.045428][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.046518][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.047409][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.048088][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.048810][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.049554][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.050216][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.050917][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.051650][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.052437][ T5879] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 584.055255][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.068327][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.077905][T17738] overlay: filesystem on ./bus not supported as upperdir [ 584.176576][T17751] loop5: detected capacity change from 0 to 7 [ 584.305261][ T798] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 584.327981][T17751] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 584.335154][T17751] loop5: partition table partially beyond EOD, truncated [ 584.337086][ T5879] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 584.344891][T17751] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 584.357552][ T5879] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.402035][ T9937] udevd[9937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 584.414900][ T5879] usb 4-1: config 0 descriptor?? [ 584.434595][ T5879] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 584.469909][T17755] bond0: Error: Cannot enslave bond to itself. [ 584.480356][T17756] bond0: Error: Cannot enslave bond to itself. [ 584.489405][ T798] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 584.509803][ T798] usb 1-1: config 1 has no interface number 1 [ 584.517440][ T798] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 584.540397][ T798] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 584.579295][ T798] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 584.597644][ T798] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 584.623987][ T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.628993][ T5879] gp8psk: usb in 128 operation failed. [ 584.641561][ T798] usb 1-1: Product: syz [ 584.648830][T17762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.659135][ T798] usb 1-1: Manufacturer: syz [ 584.665478][T17762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.666252][ T798] usb 1-1: SerialNumber: syz [ 584.863110][T17741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 584.873871][T17741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 584.885148][ T5879] gp8psk: usb in 146 operation failed. [ 584.891799][ T5879] gp8psk: failed to get FW version [ 584.904574][ T5879] gp8psk: usb in 149 operation failed. [ 584.911150][ T5879] gp8psk: failed to get FPGA version [ 584.918138][ T5879] gp8psk: usb in 138 operation failed. [ 584.924777][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 584.936645][ T5879] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 584.947144][ T5879] usb 4-1: media controller created [ 584.964215][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 584.986398][ T5879] gp8psk_fe: Frontend attached [ 584.992223][ T5879] usb 4-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 585.002004][ T5879] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 585.057674][ T5879] gp8psk: usb in 138 operation failed. [ 585.064346][ T5879] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 585.075797][ T5879] gp8psk: found Genpix USB device pID = 203 (hex) [ 585.087050][ T5879] usb 4-1: USB disconnect, device number 76 [ 585.099632][ T798] usb 1-1: 2:1 : format type 0 is detected, processed as PCM [ 585.154481][ T5879] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 585.408609][T17749] fuse: root generation should be zero [ 585.590717][T17776] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 585.629837][T17778] random: crng reseeded on system resumption [ 585.699946][T17779] Bluetooth: MGMT ver 1.23 [ 585.792477][ T5832] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 585.964211][ T5832] usb 3-1: config index 0 descriptor too short (expected 8028, got 92) [ 585.975092][ T5832] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.987598][ T5832] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 586.003771][ T5832] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 586.014878][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.025777][ T5832] usb 3-1: Product: syz [ 586.030806][ T5832] usb 3-1: Manufacturer: syz [ 586.036864][ T5832] usb 3-1: SerialNumber: syz [ 586.269770][ T798] usb 1-1: USB disconnect, device number 91 [ 586.325836][T14185] udevd[14185]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 586.855148][ T5832] cdc_ncm 3-1:1.0: SET_CRC_MODE failed [ 586.868923][ T5832] cdc_ncm 3-1:1.0: SET_NTB_FORMAT failed [ 586.898283][ T5832] cdc_ncm 3-1:1.0: bind() failure [ 586.910812][ T5832] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 586.920491][ T5832] cdc_ncm 3-1:1.1: bind() failure [ 586.945401][ T5832] usb 3-1: USB disconnect, device number 28 [ 587.112609][ T5872] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 587.318972][ T5872] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 587.342359][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.368137][ T5872] usb 1-1: config 0 descriptor?? [ 587.399097][ T5872] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 587.454786][T17807] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.472238][T17807] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.504711][T17806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.506845][T17813] random: crng reseeded on system resumption [ 587.519407][T17806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.598427][ T5872] gp8psk: usb in 128 operation failed. [ 587.814505][T17790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 587.826223][T17790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 587.836703][ T5872] gp8psk: usb in 146 operation failed. [ 587.843539][ T5872] gp8psk: failed to get FW version [ 587.873979][ T5872] gp8psk: usb in 149 operation failed. [ 587.880840][ T5872] gp8psk: failed to get FPGA version [ 587.887688][ T5872] gp8psk: usb in 138 operation failed. [ 587.894722][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 587.905920][ T5832] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 587.916716][ T5872] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 587.928142][ T5872] usb 1-1: media controller created [ 587.941578][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 587.962249][ T5872] gp8psk_fe: Frontend attached [ 587.968083][ T5872] usb 1-1: DVB: registering adapter 2 frontend 0 (Genpix DVB-S)... [ 587.977789][ T5872] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 588.022394][ T5872] gp8psk: usb in 138 operation failed. [ 588.028973][ T5872] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 588.040428][ T5872] gp8psk: found Genpix USB device pID = 203 (hex) [ 588.050608][ T5872] usb 1-1: USB disconnect, device number 92 [ 588.058053][ T5832] usb 4-1: device descriptor read/64, error -71 [ 588.125079][T17823] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4331'. [ 588.147785][ T5872] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 588.302419][ T5832] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 588.438518][ T5832] usb 4-1: device descriptor read/64, error -71 [ 588.562620][ T5832] usb usb4-port1: attempt power cycle [ 588.572089][T17847] loop5: detected capacity change from 0 to 7 [ 588.605227][ T9937] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 588.612775][ T9937] loop5: partition table partially beyond EOD, truncated [ 588.621255][T17850] random: crng reseeded on system resumption [ 588.631106][ T9937] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 588.662074][T17847] loop5: [CUMANA/ADFS] p1 [ADFS] p1 [ 588.671071][T17847] loop5: partition table partially beyond EOD, truncated [ 588.680650][T17847] loop5: p1 size 2989602745 extends beyond EOD, truncated [ 588.769258][ T9937] udevd[9937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 588.811449][ T9937] udevd[9937]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 588.889526][T17860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.904952][T17860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.915880][ T798] hid-generic 0008:0000:FFFFFBFF.003E: unknown main item tag 0x0 [ 588.926828][ T798] hid-generic 0008:0000:FFFFFBFF.003E: unknown main item tag 0x0 [ 588.929989][T17860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 588.949884][ T5832] usb 4-1: new full-speed USB device number 79 using dummy_hcd [ 588.958179][T17860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 588.961198][ T798] hid-generic 0008:0000:FFFFFBFF.003E: unknown main item tag 0x0 [ 588.978272][ T798] hid-generic 0008:0000:FFFFFBFF.003E: unknown main item tag 0x0 [ 588.989392][ T798] hid-generic 0008:0000:FFFFFBFF.003E: unknown main item tag 0x0 [ 588.998973][ T798] hid-generic 0008:0000:FFFFFBFF.003E: unknown main item tag 0x0 [ 589.008548][ T798] hid-generic 0008:0000:FFFFFBFF.003E: unknown main item tag 0x0 [ 589.018333][ T5832] usb 4-1: device descriptor read/8, error -71 [ 589.025940][ T798] hid-generic 0008:0000:FFFFFBFF.003E: unknown main item tag 0x0 [ 589.035275][ T798] hid-generic 0008:0000:FFFFFBFF.003E: unknown main item tag 0x0 [ 589.045241][ T798] hid-generic 0008:0000:FFFFFBFF.003E: unknown main item tag 0x0 [ 589.057257][ T798] hid-generic 0008:0000:FFFFFBFF.003E: hidraw0: HID v9.86 Device [syz0] on syz1 [ 589.098034][T17865] fido_id[17865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 589.262445][ T5832] usb 4-1: new full-speed USB device number 80 using dummy_hcd [ 589.283904][ T5832] usb 4-1: device descriptor read/8, error -71 [ 589.392760][ T5832] usb usb4-port1: unable to enumerate USB device [ 589.601874][T17880] random: crng reseeded on system resumption [ 590.279201][T17893] FAULT_INJECTION: forcing a failure. [ 590.279201][T17893] name failslab, interval 1, probability 0, space 0, times 0 [ 590.297496][T17893] CPU: 0 UID: 0 PID: 17893 Comm: syz.0.4354 Not tainted syzkaller #0 PREEMPT(full) [ 590.297522][T17893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 590.297534][T17893] Call Trace: [ 590.297542][T17893] [ 590.297551][T17893] dump_stack_lvl+0x189/0x250 [ 590.297583][T17893] ? __pfx____ratelimit+0x10/0x10 [ 590.297608][T17893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.297628][T17893] ? __pfx__printk+0x10/0x10 [ 590.297653][T17893] ? __pfx___might_resched+0x10/0x10 [ 590.297670][T17893] ? fs_reclaim_acquire+0x7d/0x100 [ 590.297700][T17893] should_fail_ex+0x414/0x560 [ 590.297727][T17893] should_failslab+0xa8/0x100 [ 590.297746][T17893] kmem_cache_alloc_node_noprof+0x8c/0x710 [ 590.297771][T17893] ? __alloc_skb+0x112/0x2d0 [ 590.297789][T17893] ? netlink_autobind+0xdb/0x300 [ 590.297813][T17893] __alloc_skb+0x112/0x2d0 [ 590.297835][T17893] netlink_sendmsg+0x5c6/0xb30 [ 590.297863][T17893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.297887][T17893] ? aa_sock_msg_perm+0xf1/0x1d0 [ 590.297909][T17893] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 590.297934][T17893] ? __pfx_netlink_sendmsg+0x10/0x10 [ 590.297954][T17893] __sock_sendmsg+0x21c/0x270 [ 590.297981][T17893] sock_write_iter+0x279/0x360 [ 590.298005][T17893] ? __pfx_sock_write_iter+0x10/0x10 [ 590.298049][T17893] do_iter_readv_writev+0x623/0x8c0 [ 590.298076][T17893] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 590.298095][T17893] ? common_file_perm+0x1b5/0x230 [ 590.298118][T17893] ? bpf_lsm_file_permission+0x9/0x20 [ 590.298136][T17893] ? security_file_permission+0x75/0x290 [ 590.298162][T17893] ? rw_verify_area+0x255/0x4d0 [ 590.298184][T17893] vfs_writev+0x31a/0x960 [ 590.298210][T17893] ? __lock_acquire+0xab9/0xd20 [ 590.298238][T17893] ? __pfx_vfs_writev+0x10/0x10 [ 590.298275][T17893] ? __fget_files+0x2a/0x420 [ 590.298299][T17893] ? __fget_files+0x3a0/0x420 [ 590.298318][T17893] ? __fget_files+0x2a/0x420 [ 590.298347][T17893] do_writev+0x14d/0x2d0 [ 590.298372][T17893] ? __pfx_do_writev+0x10/0x10 [ 590.298398][T17893] ? do_syscall_64+0xbe/0xfa0 [ 590.298416][T17893] do_syscall_64+0xfa/0xfa0 [ 590.298431][T17893] ? lockdep_hardirqs_on+0x9c/0x150 [ 590.298455][T17893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.298477][T17893] ? clear_bhb_loop+0x60/0xb0 [ 590.298499][T17893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.298517][T17893] RIP: 0033:0x7f12b3b8efc9 [ 590.298533][T17893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 590.298549][T17893] RSP: 002b:00007f12b49a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 590.298574][T17893] RAX: ffffffffffffffda RBX: 00007f12b3de6090 RCX: 00007f12b3b8efc9 [ 590.298588][T17893] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000b [ 590.298600][T17893] RBP: 00007f12b49a0090 R08: 0000000000000000 R09: 0000000000000000 [ 590.298611][T17893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.298622][T17893] R13: 00007f12b3de6128 R14: 00007f12b3de6090 R15: 00007ffc819cd2c8 [ 590.298652][T17893] [ 590.412526][ T798] ------------[ cut here ]------------ [ 590.671080][ T798] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 590.704492][ T798] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_wait_one_vblank+0x570/0x5b0, CPU#1: kworker/1:2/798 [ 590.718084][ T798] Modules linked in: [ 590.723688][ T798] CPU: 1 UID: 0 PID: 798 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 590.734901][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 590.747037][ T798] Workqueue: events drm_fb_helper_damage_work [ 590.754397][ T798] RIP: 0010:drm_wait_one_vblank+0x570/0x5b0 [ 590.761491][ T798] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 3a 2d e7 fc 4d 8b 2c 24 48 c7 c7 00 44 d4 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 81 73 44 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 590.785509][ T798] RSP: 0018:ffffc90003017840 EFLAGS: 00010246 [ 590.793167][ T798] RAX: 3eb3b2d6dda9a500 RBX: 1ffff110282f2c01 RCX: ffff888024013c80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 590.802816][ T798] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 590.812438][ T798] RBP: ffffc90003017928 R08: 0000000000000003 R09: 0000000000000004 [ 590.822006][ T798] R10: dffffc0000000000 R11: fffffbfff1bfa6c0 R12: ffff888141798000 [ 590.831619][ T798] R13: ffffffff8be6ee80 R14: 0000000000000000 R15: ffffffff8be89780 [ 590.841244][ T798] FS: 0000000000000000(0000) GS:ffff888125ddc000(0000) knlGS:0000000000000000 [ 590.852021][ T798] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 590.860310][ T798] CR2: 00007f12b499ff98 CR3: 000000007c48e000 CR4: 00000000003526f0 [ 590.869982][ T798] Call Trace: [ 590.873944][ T798] [ 590.877467][ T798] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 590.884347][ T798] ? __pfx_autoremove_wake_function+0x10/0x10 [ 590.892832][ T798] ? drm_vblank_get+0x150/0x270 [ 590.899056][ T798] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 590.906644][ T798] drm_fb_helper_damage_work+0xce/0x6c0 [ 590.913340][ T798] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 590.920734][ T798] ? _raw_spin_unlock_irq+0x23/0x50 [ 590.927030][ T798] ? process_scheduled_works+0x9ef/0x17b0 [ 590.934254][ T798] ? process_scheduled_works+0x9ef/0x17b0 [ 590.941140][ T798] process_scheduled_works+0xae1/0x17b0 [ 590.947988][ T798] ? __pfx_process_scheduled_works+0x10/0x10 [ 590.955268][ T798] worker_thread+0x8a0/0xda0 [ 590.960786][ T798] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 590.968441][ T798] ? __kthread_parkme+0x7b/0x200 [ 590.974416][ T798] kthread+0x711/0x8a0 [ 590.979317][ T798] ? __pfx_worker_thread+0x10/0x10 [ 590.985516][ T798] ? __pfx_kthread+0x10/0x10 [ 590.991402][ T798] ? _raw_spin_unlock_irq+0x23/0x50 [ 590.998010][ T798] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.004319][ T798] ? __pfx_kthread+0x10/0x10 [ 591.009831][ T798] ret_from_fork+0x4bc/0x870 [ 591.015485][ T798] ? __pfx_ret_from_fork+0x10/0x10 [ 591.021634][ T798] ? __switch_to_asm+0x39/0x70 [ 591.027396][ T798] ? __switch_to_asm+0x33/0x70 [ 591.033140][ T798] ? __pfx_kthread+0x10/0x10 [ 591.038649][ T798] ret_from_fork_asm+0x1a/0x30 [ 591.044422][ T798] [ 591.048051][ T798] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 591.056777][ T798] CPU: 1 UID: 0 PID: 798 Comm: kworker/1:2 Not tainted syzkaller #0 PREEMPT(full) [ 591.067909][ T798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 591.079974][ T798] Workqueue: events drm_fb_helper_damage_work [ 591.087266][ T798] Call Trace: [ 591.091204][ T798] [ 591.094746][ T798] dump_stack_lvl+0x99/0x250 [ 591.100269][ T798] ? __asan_memcpy+0x40/0x70 [ 591.105786][ T798] ? __pfx_dump_stack_lvl+0x10/0x10 [ 591.112018][ T798] ? __pfx__printk+0x10/0x10 [ 591.117526][ T798] vpanic+0x237/0x6d0 [ 591.122299][ T798] ? __pfx_vpanic+0x10/0x10 [ 591.127687][ T798] ? is_bpf_text_address+0x292/0x2b0 [ 591.134003][ T798] ? is_bpf_text_address+0x26/0x2b0 [ 591.140220][ T798] panic+0xb9/0xc0 [ 591.144663][ T798] ? __pfx_panic+0x10/0x10 [ 591.149949][ T798] ? ret_from_fork_asm+0x1a/0x30 [ 591.155956][ T798] __warn+0x334/0x4c0 [ 591.160702][ T798] ? drm_wait_one_vblank+0x570/0x5b0 [ 591.167022][ T798] ? drm_wait_one_vblank+0x570/0x5b0 [ 591.173339][ T798] report_bug+0x2be/0x4f0 [ 591.178514][ T798] ? drm_wait_one_vblank+0x570/0x5b0 [ 591.184953][ T798] ? drm_wait_one_vblank+0x570/0x5b0 [ 591.191272][ T798] ? drm_wait_one_vblank+0x572/0x5b0 [ 591.197591][ T798] handle_bug+0x84/0x160 [ 591.202662][ T798] exc_invalid_op+0x1a/0x50 [ 591.208048][ T798] asm_exc_invalid_op+0x1a/0x20 [ 591.213841][ T798] RIP: 0010:drm_wait_one_vblank+0x570/0x5b0 [ 591.220893][ T798] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 3a 2d e7 fc 4d 8b 2c 24 48 c7 c7 00 44 d4 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 81 73 44 fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 591.244436][ T798] RSP: 0018:ffffc90003017840 EFLAGS: 00010246 [ 591.251713][ T798] RAX: 3eb3b2d6dda9a500 RBX: 1ffff110282f2c01 RCX: ffff888024013c80 [ 591.261267][ T798] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 591.270811][ T798] RBP: ffffc90003017928 R08: 0000000000000003 R09: 0000000000000004 [ 591.280352][ T798] R10: dffffc0000000000 R11: fffffbfff1bfa6c0 R12: ffff888141798000 [ 591.289895][ T798] R13: ffffffff8be6ee80 R14: 0000000000000000 R15: ffffffff8be89780 [ 591.299458][ T798] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 591.306206][ T798] ? __pfx_autoremove_wake_function+0x10/0x10 [ 591.313480][ T798] ? drm_vblank_get+0x150/0x270 [ 591.319284][ T798] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 591.326751][ T798] drm_fb_helper_damage_work+0xce/0x6c0 [ 591.333386][ T798] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 591.340748][ T798] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.346962][ T798] ? process_scheduled_works+0x9ef/0x17b0 [ 591.353818][ T798] ? process_scheduled_works+0x9ef/0x17b0 [ 591.360662][ T798] process_scheduled_works+0xae1/0x17b0 [ 591.367426][ T798] ? __pfx_process_scheduled_works+0x10/0x10 [ 591.374596][ T798] worker_thread+0x8a0/0xda0 [ 591.380253][ T798] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 591.387831][ T798] ? __kthread_parkme+0x7b/0x200 [ 591.393737][ T798] kthread+0x711/0x8a0 [ 591.398601][ T798] ? __pfx_worker_thread+0x10/0x10 [ 591.404707][ T798] ? __pfx_kthread+0x10/0x10 [ 591.410196][ T798] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.416415][ T798] ? lockdep_hardirqs_on+0x9c/0x150 [ 591.422629][ T798] ? __pfx_kthread+0x10/0x10 [ 591.428111][ T798] ret_from_fork+0x4bc/0x870 [ 591.433613][ T798] ? __pfx_ret_from_fork+0x10/0x10 [ 591.439751][ T798] ? __switch_to_asm+0x39/0x70 [ 591.445466][ T798] ? __switch_to_asm+0x33/0x70 [ 591.451159][ T798] ? __pfx_kthread+0x10/0x10 [ 591.456650][ T798] ret_from_fork_asm+0x1a/0x30 [ 591.462358][ T798] [ 591.466241][ T798] Kernel Offset: disabled [ 591.471412][ T798] Rebooting in 86400 seconds..