last executing test programs: 4.523525459s ago: executing program 0 (id=684): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) eventfd2(0x7e, 0x80800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x4000ff, 0x2, r2}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x2}) 4.428283519s ago: executing program 0 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x400, 0xffff7fff, 0xa31, 0xffffffff, 0x1, "aba8b5828b1b57af9a2b44f4321aece3b7bdfe"}) poll(&(0x7f0000000080)=[{r2, 0x2404}], 0x1, 0xb77) r3 = socket(0x14, 0x2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000000), 0x1f, 0x0, &(0x7f0000000080)="496509481f539a89f0bc0d1cdd00c0e64d1aafb1a6792b643ac9d4ee10d53b"}) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) sendmsg$kcm(r3, &(0x7f0000000800)={&(0x7f0000000140)=@caif=@util={0x25, "c8067c9d5e27765f6e4e9768f8d208b4"}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="ca52f426a6cc7f3ffecc7124ab90098f76", 0x11}, {&(0x7f0000000200)="008e866bfda4e08e7c1f0c24cd5c89668ba3e81ea1d26fe837514c05abb31f8aa3e6b47aee4d2ee612e7653247cffc024904a1072493dde7250417d4aeec46680ac57faf8bd64e4d1c6870c3d12f66efbfcfe2440bf5547582f6d44319949cc7b9f9449be359d8c693ae1d792052f30a9ce7abd6bffb93cffff7d794a840a76ee72d8c934fa476162be0f310e8f36c460485e14c0cd1dddb32363b9d9a67f80f55e27282c6eb9b18e8c52598e1ce09ee3c7a15710611f44b3dbfd45796b85b4f2355d22efc89b75d968cba4939133a25ef55b73e97d150b4fbf39f73", 0xdc}, {&(0x7f0000000300)="b31310f5d40dd8184e293b9a7ae0aa32fb28768573da2aa6ea6adb1f779cf1e6569a144917356f63c49b4984998343f9291d4b74efec0da6bb31e4b74322d4495220ce4e9647522d72b1618415ed93efb94dab98380c75d391322503bc77443c7982b5d1c52590f4e8be1b75a745acb90b8526a9196ca6ee0a8f135741c46dc0c3075daa6b886fec6ba2310cb72267d8d4e8dcac0ee684af851ee47885bdb7472a4ac2a3764101a2b294db8a00d4a6b14db74b37a3f7ba2bbd7f41af938665d76f97d56daf1858c1fa41f0623a1301e8a2307fdf", 0xd4}, {&(0x7f0000000400)="3c428d9b2e9c4a567626ae09279f79236da0e3e91868692b3430ac30ff", 0x1d}, {&(0x7f0000000440)="7c29a438a5d98d746e0a4b5389a8250ab307842dadf901e861a0ce3656fb3ba595d37da1e150a11caa4bc647c0eb7d234afa84f3ccdb84b9cee616806264c7e615ddf0ff844e6d7253cf65b72ad8df624e0625369a5fa63f3e12353a82c92a9f1a34ee4ec0ab8b4d023e50b5a36b41c01fdec9aa37cd0f6c6ae24502f5d09196b59f78c8abecf36f88b9990c92a7bd4c346b299b37259d4dd34c67ef7c4b3ef75823bcef37b76b42f27bba9c579b5c146ac16c8416c054baba902febcac8091fe9c8b7abb038ed1a0ebb1337fbc37a45084825ef0480c2ec54963e791a78a56dcd44f115347ccfafc8a19b741ac2cb83e4d0f0ab154fef3d", 0xf8}, {&(0x7f0000000540)="59e0e79a0df26d98bb7ec0a810", 0xd}, {&(0x7f0000000580)="38c34f8d1d0ea80a97498dcdf9ba72902d9f957a02e5e63ebfca4861f9f8b68241b91ce7d7be7d98a23ac21fab0be6c6dbb8c6fc716f87b9594a6394df08f23ce9af5eed7e44ac6aaa48bd61a89743241cf6c1a92f164afac5aa0a1e7af2", 0x5e}, {&(0x7f0000000600)="0f90a242ee446f88c9a056be482ab5d6297e96e7ab89bae822d4bef5c205f78e1a2a3ff55b50e9fd622e2f", 0x2b}, {&(0x7f0000000640)="050efb7eb46408664fe1de5af9e7a0f31ab585c39e6b6909844104244b5bfc3f2653d4631030a69de770418d0490333d4500b1f058fe07a8e32c53f5e5a62694e2bd5067696850975b7d31c9ed83af5cf4e8e5a2e891d86f76fdcd57e4a784b17e488300477a0902b46930d3073668aad6b1d021e93dc0874822bb5367595e526795dbbb09b9da8ee9b92acff3a4685147fdddb7ed3bfd26d7a1fade4a499b293661b3643a", 0xa5}], 0x9, &(0x7f00000007c0)}, 0x84) 2.672734161s ago: executing program 1 (id=695): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x4}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) userfaultfd(0x801) syz_usb_disconnect(r0) 1.711864625s ago: executing program 2 (id=700): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0b", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2d1c676f9bc65b73166f7f970b0bfd8e7483069aa1cb0503ac2bbda84b3d15157540b548a6b1442d0cc109d122aa0f73ecf3a7cf3f4473283ebbe5b6703d8f6925f3e19c640377641f82b736445d8e8158088e3daad6130084f7701fead76cd040390a89f323f0a2fc373a9d23356f10d1bf273d203f45ca6df387c2674ce490b182837b13ac80c82dc0574dafd1a0f192a7a13c", 0x94}, {&(0x7f0000000680)="d8091c3899c9dd2f8ca88c93c9bf70d50c4411c0159f312a5b5058f2ac1b1115a7d11a20ef3ec02ebdc57f357cec84dcf38214008810b9295e6243621c6195464392b9e5807850083670c9", 0x4b}, {&(0x7f00000007c0)="765813074c91e0eb62eb4a87e0ada3e985df0d3db9b174912ac03056c09e9038ba2dc06a866cc111585f1edcad4a9d23ae2c0f6f9fda4e396aff55c185dd3156ac4d60949ff62af7763c1b6674972dd3ac73f523802684ba424567624900b6c587812a3e7f940be94095e9cdf9bb510d04b3589e2758043f45841e072299be9b8c821ca8d2c8304140343bdb30f5abeb4c2a10e3536cca4cdc83dab05cf86bf2dc2339e86ebb24bec2daaeed7c88caf9656b410a89089f925db88e52743282643fbd45ea8141aa5f7d1e9925a1c337118e10cc5c594da3422e8902eb3ff16f3098", 0xe1}, {&(0x7f0000000900)="5b4655e461a352d50e996c5dc25c40e87a4540678797ef163616dd0f194de0827b93b71ab2e12ab7c066823381a449f40dd24d3dcb7c2b1cc976d906adb182dc5d0aa952fb9284952466d6942f054cc73528c7dfb6e7b9482b973133aa106ae051e596bcfe0dc3f247ccec02a93b503a57043846ed881fa7a1c0a01ac462c599acf8fd2a1ed2869020ea7b62c7a2820b7008c24d20115649d3660d429648fe6c05c33df43ef1fa058fdbc58da69bf6b8d33d776fd8ff6564bcbc0b524e0493b195b9cf0a9c18a9dcfca35fa7b4fc1b3bedeb8332fb9d4d28bc8c0d0c7d06db9e779b79f1281b51610e0dcc51", 0xec}, {&(0x7f00000018c0)="16b7a38edfae", 0x6}], 0x5, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000c40)="f472c662283b3ddad5db74dbba9c2c8c37b2fd3a5b2d61eeccb44a814ed12c36aa79d3308ca687134d835ef13816c8d207c58a0569c81802b63b2b9161a26b8559a8b955b1f93996c67c3baf998ae229023181ccf0115b98f8bb6635081689c08d565ce9554db14abb94b1d81a", 0x6d}, {0x0}], 0x2}}], 0x4, 0x400a090) 1.711418755s ago: executing program 3 (id=701): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="41000000010001", 0x7) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@handle={0x73682a85, 0x110b, 0x3}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 1.665028746s ago: executing program 2 (id=702): pipe(0x0) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 1.619155109s ago: executing program 3 (id=703): r0 = dup(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x401}, &(0x7f0000000300)=0x8) 1.583089438s ago: executing program 2 (id=704): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x7, 0x204000) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x20}, 0x10) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000200)={0x3e}) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x3) write$uinput_user_dev(r3, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1], [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x127]}, 0x45c) ioctl$UI_DEV_CREATE(r3, 0x5501) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000040)={0x3, 0xffffffff, 0x138}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000300)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xf) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x4c831, 0xffffffffffffffff, 0x0) 1.491669489s ago: executing program 3 (id=705): r0 = socket$kcm(0xa, 0x4, 0x3a) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi1\x00', 0x6d0c80, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000440)={0xa, 0x4e23, 0x2, @mcast1, 0x7}, 0x1c) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, &(0x7f00000002c0)='%', 0x300000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, 0x0, &(0x7f00000000c0)) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYRES64=r3], 0x64}}, 0x0) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600), 0x4) sendto$inet(r5, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000780)=""/4077, 0xfed}], 0x1, 0x0, 0x0, 0x407006}, 0x10144) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000280)={{0x1, 0x1, 0xd, r4}, './file0\x00'}) ioctl$DRM_IOCTL_AGP_ENABLE(r7, 0x40086432, &(0x7f00000002c0)=0x8) sendmsg$SEG6_CMD_SET_TUNSRC(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000540)={&(0x7f0000001780)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES64=0x0, @ANYRESHEX=r4], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000084) r8 = socket$inet6(0xa, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000000)={'ip6_vti0\x00', 0x0}) setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000500)={0x0, 0x1, 0x6, @multicast}, 0x10) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8bcd", 0xffe3}], 0x1, 0x0, 0x0, 0x900}, 0x60) sendto$inet(r5, &(0x7f0000000300)="4473533ad9b5b63209074628d981cc799c53d767321d88cbae58608a5dd895af5125b93ea23fe616c932864f8fd24e2b31019448e2a0278d7715ddc3c1776a83f4c568dd7c792888c4d935f35bf679cb1799f84e801a5a12b2497106d3ab682aea1637ded1a41939c9c80a7be189600b9b45c0e87f7881096905fe90606e48e6616cdbe01519993ddb3a5f999d770a7b731c96682dec675bbe440a4617776cfd4ca2bbd237d95e9b91ad57dad1a28a1e4e59ba1f5a7104aa92a1c235a4a88bfad03d4509e564e5f7fedb26163a0f893f36dc6c7e704ffeed", 0xd8, 0x8001, &(0x7f00000005c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1.185203801s ago: executing program 0 (id=706): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/key-users\x00', 0x0, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000080)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0xe88, 0x9}}) socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0xa, 0x300) socket(0x10, 0x3, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, 0x0, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x8000000000000001, 0x1c1280) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000140)={0x80, 0x6, 0x4, 0x1}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0x2}}, './file0\x00'}) cachestat(r5, &(0x7f0000000100)={0x5, 0x1}, &(0x7f0000000140), 0x0) syz_usb_connect(0x5, 0x27, 0x0, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0x7, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r7], 0x7) 1.116591347s ago: executing program 1 (id=707): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f00000001c0)=0x13) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000001c0)={0xffff, 0x1}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r2 = socket(0x2, 0x80000, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) r3 = accept$unix(r2, 0x0, &(0x7f0000000180)) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e2}, 0x6e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) 815.579058ms ago: executing program 1 (id=708): arch_prctl$ARCH_SET_GS(0x1001, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) recvmmsg(r1, &(0x7f0000003440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/4092, 0xffc}, {&(0x7f00000013c0)=""/251, 0xfb}], 0x2}, 0x5}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000000240)=""/111, 0x6f}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000040)=""/165, 0xa5}, {&(0x7f0000002d00)=""/127, 0x7f}, {&(0x7f0000002d80)=""/208, 0xd0}, {&(0x7f0000002e80)=""/251, 0xfb}, {&(0x7f0000002f80)=""/245, 0xf5}], 0x7}, 0x81}], 0x4, 0x40012032, 0x0) 693.107224ms ago: executing program 1 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0xffffffff}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) 692.705324ms ago: executing program 2 (id=710): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x18, r1, 0x1, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}]}) ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r1}) (fail_nth: 6) 645.76858ms ago: executing program 2 (id=711): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0b", 0x85}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)="2d1c676f9bc65b73166f7f970b0bfd8e7483069aa1cb0503ac2bbda84b3d15157540b548a6b1442d0cc109d122aa0f73ecf3a7cf3f4473283ebbe5b6703d8f6925f3e19c640377641f82b736445d8e8158088e3daad6130084f7701fead76cd040390a89f323f0a2fc373a9d23356f10d1bf273d203f45ca6df387c2674ce490b182837b13ac80c82dc0574dafd1a0f192a7a13c", 0x94}, {&(0x7f0000000680)="d8091c3899c9dd2f8ca88c93c9bf70d50c4411c0159f312a5b5058f2ac1b1115a7d11a20ef3ec02ebdc57f357cec84dcf38214008810b9295e6243621c6195464392b9e5807850083670c9", 0x4b}, {&(0x7f00000007c0)="765813074c91e0eb62eb4a87e0ada3e985df0d3db9b174912ac03056c09e9038ba2dc06a866cc111585f1edcad4a9d23ae2c0f6f9fda4e396aff55c185dd3156ac4d60949ff62af7763c1b6674972dd3ac73f523802684ba424567624900b6c587812a3e7f940be94095e9cdf9bb510d04b3589e2758043f45841e072299be9b8c821ca8d2c8304140343bdb30f5abeb4c2a10e3536cca4cdc83dab05cf86bf2dc2339e86ebb24bec2daaeed7c88caf9656b410a89089f925db88e52743282643fbd45ea8141aa5f7d1e9925a1c337118e10cc5c594da3422e8902eb3ff16f3098", 0xe1}, {&(0x7f0000000900)="5b4655e461a352d50e996c5dc25c40e87a4540678797ef163616dd0f194de0827b93b71ab2e12ab7c066823381a449f40dd24d3dcb7c2b1cc976d906adb182dc5d0aa952fb9284952466d6942f054cc73528c7dfb6e7b9482b973133aa106ae051e596bcfe0dc3f247ccec02a93b503a57043846ed881fa7a1c0a01ac462c599acf8fd2a1ed2869020ea7b62c7a2820b7008c24d20115649d3660d429648fe6c05c33df43ef1fa058fdbc58da69bf6b8d33d776fd8ff6564bcbc0b524e0493b195b9cf0a9c18a9dcfca35fa7b4fc1b3bedeb8332fb9d4d28bc8c0d0c7d06db9e779b79f1281b51610e0dcc51", 0xec}, {&(0x7f00000018c0)="16b7a38edfae", 0x6}], 0x5, &(0x7f0000000b80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @empty}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000000c40)="f472c662283b3ddad5db74dbba9c2c8c37b2fd3a5b2d61eeccb44a814ed12c36aa79d3308ca687134d835ef13816c8d207c58a0569c81802b63b2b9161a26b8559a8b955b1f93996c67c3baf998ae229023181ccf0115b98f8bb6635081689c08d565ce9554db14abb94b1d81a", 0x6d}, {0x0}], 0x2}}], 0x4, 0x400a090) 594.644267ms ago: executing program 1 (id=712): pipe(0x0) r0 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) 412.24905ms ago: executing program 0 (id=713): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="41000000010001", 0x7) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000580)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x0, 0x8000000000}, @flat=@handle={0x73682a85, 0x110b, 0x3}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) 411.015788ms ago: executing program 2 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r1, 0x215eb000) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000040)={0x400, 0xffff7fff, 0xa31, 0xffffffff, 0x1, "aba8b5828b1b57af9a2b44f4321aece3b7bdfe"}) poll(&(0x7f0000000080)=[{r2, 0x2404}], 0x1, 0xb77) r3 = socket(0x14, 0x2, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x98}, 0x1c) bind$inet6(r5, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f00000000c0)={0x1, 0x0, 0x1000, 0x0, &(0x7f0000000000), 0x1f, 0x0, &(0x7f0000000080)="496509481f539a89f0bc0d1cdd00c0e64d1aafb1a6792b643ac9d4ee10d53b"}) syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582"], 0x0) sendmsg$kcm(r3, &(0x7f0000000800)={&(0x7f0000000140)=@caif=@util={0x25, "c8067c9d5e27765f6e4e9768f8d208b4"}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)="ca52f426a6cc7f3ffecc7124ab90098f76", 0x11}, {&(0x7f0000000200)="008e866bfda4e08e7c1f0c24cd5c89668ba3e81ea1d26fe837514c05abb31f8aa3e6b47aee4d2ee612e7653247cffc024904a1072493dde7250417d4aeec46680ac57faf8bd64e4d1c6870c3d12f66efbfcfe2440bf5547582f6d44319949cc7b9f9449be359d8c693ae1d792052f30a9ce7abd6bffb93cffff7d794a840a76ee72d8c934fa476162be0f310e8f36c460485e14c0cd1dddb32363b9d9a67f80f55e27282c6eb9b18e8c52598e1ce09ee3c7a15710611f44b3dbfd45796b85b4f2355d22efc89b75d968cba4939133a25ef55b73e97d150b4fbf39f73", 0xdc}, {&(0x7f0000000300)="b31310f5d40dd8184e293b9a7ae0aa32fb28768573da2aa6ea6adb1f779cf1e6569a144917356f63c49b4984998343f9291d4b74efec0da6bb31e4b74322d4495220ce4e9647522d72b1618415ed93efb94dab98380c75d391322503bc77443c7982b5d1c52590f4e8be1b75a745acb90b8526a9196ca6ee0a8f135741c46dc0c3075daa6b886fec6ba2310cb72267d8d4e8dcac0ee684af851ee47885bdb7472a4ac2a3764101a2b294db8a00d4a6b14db74b37a3f7ba2bbd7f41af938665d76f97d56daf1858c1fa41f0623a1301e8a2307fdf", 0xd4}, {&(0x7f0000000400)="3c428d9b2e9c4a567626ae09279f79236da0e3e91868692b3430ac30ff", 0x1d}, {&(0x7f0000000440)="7c29a438a5d98d746e0a4b5389a8250ab307842dadf901e861a0ce3656fb3ba595d37da1e150a11caa4bc647c0eb7d234afa84f3ccdb84b9cee616806264c7e615ddf0ff844e6d7253cf65b72ad8df624e0625369a5fa63f3e12353a82c92a9f1a34ee4ec0ab8b4d023e50b5a36b41c01fdec9aa37cd0f6c6ae24502f5d09196b59f78c8abecf36f88b9990c92a7bd4c346b299b37259d4dd34c67ef7c4b3ef75823bcef37b76b42f27bba9c579b5c146ac16c8416c054baba902febcac8091fe9c8b7abb038ed1a0ebb1337fbc37a45084825ef0480c2ec54963e791a78a56dcd44f115347ccfafc8a19b741ac2cb83e4d0f0ab154fef3d", 0xf8}, {&(0x7f0000000540)="59e0e79a0df26d98bb7ec0a810", 0xd}, {&(0x7f0000000580)="38c34f8d1d0ea80a97498dcdf9ba72902d9f957a02e5e63ebfca4861f9f8b68241b91ce7d7be7d98a23ac21fab0be6c6dbb8c6fc716f87b9594a6394df08f23ce9af5eed7e44ac6aaa48bd61a89743241cf6c1a92f164afac5aa0a1e7af2", 0x5e}, {&(0x7f0000000600)="0f90a242ee446f88c9a056be482ab5d6297e96e7ab89bae822d4bef5c205f78e1a2a3ff55b50e9fd622e2f", 0x2b}, {&(0x7f0000000640)="050efb7eb46408664fe1de5af9e7a0f31ab585c39e6b6909844104244b5bfc3f2653d4631030a69de770418d0490333d4500b1f058fe07a8e32c53f5e5a62694e2bd5067696850975b7d31c9ed83af5cf4e8e5a2e891d86f76fdcd57e4a784b17e488300477a0902b46930d3073668aad6b1d021e93dc0874822bb5367595e526795dbbb09b9da8ee9b92acff3a4685147fdddb7ed3bfd26d7a1fade4a499b293661b3643a", 0xa5}], 0x9, &(0x7f00000007c0)}, 0x84) 352.341134ms ago: executing program 3 (id=715): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x401}, &(0x7f0000000300)=0x8) 314.643521ms ago: executing program 3 (id=716): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCSSOFTCAR(r0, 0x5412, &(0x7f00000001c0)=0x13) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f00000001c0)={0xffff, 0x1}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) r2 = socket(0x2, 0x80000, 0x67) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) r3 = accept$unix(r2, &(0x7f0000000000), 0x0) sendto$unix(r3, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e2}, 0x6e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, 0x0) 262.973164ms ago: executing program 1 (id=717): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000024917720042322023f77010203010902120001000010000904"], 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f00000004c0)={{0x6, @rose, 0x4}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) listen(r3, 0x80) accept$netrom(r3, 0x0, 0x0) writev(r1, &(0x7f0000000240)=[{&(0x7f00000005c0)="c800b66cf7e6a5", 0xff57}, {&(0x7f0000000140)="e2b5de1b04c03054271995b320812ed7ded5ec71d0c57c5f11366f435a79a10e509bdfc4425719a03d2647f06c09e0a6dfc63acef45296e824c5c25945387c1840340d7203c4bc7f6228a7b0388ba698f8e8bb15ee5762f41d1f8953e00ef286a2426181912541e43bb71a016fd7cffaccd2cf79da80b0c67a87e82dfa52ac31dac584f37ebe1a25c62d9b55b678598cf69428a806b8fc096bb97053e0099600d4bc78e717b612c96807e519cb7300"/188, 0xbc}, {&(0x7f0000000300)="1c7e6b9e688e6270cf440480946456f950e37af773e53874c663dd2a336df10d2d1187d48719ed7fd17ca09b6bdaa49710183eb991f93aef84adb0a2dad9bb05b690e65758d5c66e64d6fdd07ce5771e98a47f7756a093c6e8b0fbf8cb95f4f6df7f227ef95f7f5f56b2e239c2e17453daf057527e74136084dba4b9572f8e4f383e8bc24757e5b7c0f1c45fcf0308bc40cb43c41a47e18b7b4bc100a4ebe7d2bfd31fc526da97e4b202fe79ddce36ec2f00627d3b86c3fa66bcbf6ec036aef16e0c4f39b441abda436dd5e85adfdd0720a51c91106b737750335c2697", 0xdd}], 0x3) syz_usb_disconnect(r0) 144.249431ms ago: executing program 0 (id=718): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') read$FUSE(r1, &(0x7f0000000440)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x4}, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a180000000c0a010400000000000000000200000804000380240000000c0a0101000000000000000005000002e3eb010073797a31000000000400035d140001000000010000000000000000000a00000a6ee5"], 0x64}, 0x1, 0x0, 0x0, 0x40050}, 0x4000000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r4, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) open_tree(r1, &(0x7f0000000100)='./file0\x00', 0xc9800) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008040}, 0x40000) 112.74265ms ago: executing program 3 (id=719): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x5) accept4$netrom(r1, &(0x7f0000000100)={{0x3, @rose}, [@remote, @remote, @remote, @null, @null, @rose, @netrom]}, 0x0, 0x6040000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 0s ago: executing program 0 (id=720): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004898b610c2154500201f0102030109021b0001000500ea09040002018c78fd00090582f3c6"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r1, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x10}) syz_usb_control_io(r1, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x880, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x400000f1, 0x0, 0x9}]}) kernel console output (not intermixed with test programs): e0' with NULL argv: empty string added [ 112.895498][ T6393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.922555][ T6393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.935319][ T43] usb 3-1: USB disconnect, device number 6 [ 113.130597][ T6408] netlink: 4 bytes leftover after parsing attributes in process `syz.3.157'. [ 113.328356][ T5958] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 113.472965][ T6427] program syz.0.163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.488044][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 113.499147][ T5958] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 113.499172][ T5958] usb 2-1: config 0 has no interface number 0 [ 113.499216][ T5958] usb 2-1: config 0 interface 184 has no altsetting 0 [ 113.553167][ T5958] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 113.553196][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.553215][ T5958] usb 2-1: Product: syz [ 113.553230][ T5958] usb 2-1: Manufacturer: syz [ 113.553244][ T5958] usb 2-1: SerialNumber: syz [ 113.635432][ T5958] usb 2-1: config 0 descriptor?? [ 113.990484][ T37] audit: type=1326 audit(1776285682.675:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6442 comm="syz.0.168" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c3875c819 code=0x0 [ 114.262305][ T6450] FAULT_INJECTION: forcing a failure. [ 114.262305][ T6450] name failslab, interval 1, probability 0, space 0, times 0 [ 114.262342][ T6450] CPU: 1 UID: 0 PID: 6450 Comm: syz.3.171 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 114.262368][ T6450] Tainted: [L]=SOFTLOCKUP [ 114.262375][ T6450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 114.262385][ T6450] Call Trace: [ 114.262393][ T6450] [ 114.262401][ T6450] dump_stack_lvl+0xe8/0x150 [ 114.262425][ T6450] should_fail_ex+0x46b/0x600 [ 114.262456][ T6450] should_failslab+0xa8/0x100 [ 114.262483][ T6450] __kmalloc_noprof+0xdf/0x7b0 [ 114.262504][ T6450] ? drm_atomic_state_init+0xa1/0x3b0 [ 114.262530][ T6450] drm_atomic_state_init+0xa1/0x3b0 [ 114.262552][ T6450] drm_atomic_state_alloc+0xbc/0x100 [ 114.262573][ T6450] drm_client_modeset_commit_atomic+0x122/0x7e0 [ 114.262608][ T6450] ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10 [ 114.262646][ T6450] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 114.262667][ T6450] ? lockdep_hardirqs_on+0x7a/0x110 [ 114.262688][ T6450] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 114.262709][ T6450] ? drm_client_modeset_commit_locked+0x4c/0x4d0 [ 114.262735][ T6450] drm_client_modeset_commit_locked+0xce/0x4d0 [ 114.262763][ T6450] drm_fb_helper_pan_display+0x3ea/0xbe0 [ 114.262793][ T6450] fb_pan_display+0x39e/0x680 [ 114.262817][ T6450] ? __pfx_drm_fb_helper_pan_display+0x10/0x10 [ 114.262839][ T6450] bit_update_start+0x4c/0x1e0 [ 114.262857][ T6450] fbcon_switch+0x127e/0x2040 [ 114.262891][ T6450] ? __pfx_fbcon_switch+0x10/0x10 [ 114.262926][ T6450] ? __pfx_hide_cursor+0x10/0x10 [ 114.262944][ T6450] ? is_console_locked+0x9/0x20 [ 114.262959][ T6450] ? set_origin+0x346/0x480 [ 114.262976][ T6450] redraw_screen+0x586/0xec0 [ 114.262991][ T6450] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 114.263013][ T6450] ? __pfx_redraw_screen+0x10/0x10 [ 114.263032][ T6450] ? tty_do_resize+0xf5/0x140 [ 114.263053][ T6450] vc_do_resize+0x1010/0x1540 [ 114.263088][ T6450] ? __pfx_vc_do_resize+0x10/0x10 [ 114.263102][ T6450] ? save_fpregs_to_fpstate+0x17a/0x210 [ 114.263129][ T6450] ? kernel_fpu_begin_mask+0x2da/0x3c0 [ 114.263156][ T6450] fbcon_do_set_font+0xa15/0x13c0 [ 114.263197][ T6450] fbcon_set_font+0x698/0x950 [ 114.263227][ T6450] con_font_op+0xbee/0xfa0 [ 114.263252][ T6450] ? __pfx_con_font_op+0x10/0x10 [ 114.263272][ T6450] ? __might_fault+0xaf/0x130 [ 114.263294][ T6450] ? __might_fault+0xaf/0x130 [ 114.263332][ T6450] vt_ioctl+0x1bb6/0x20c0 [ 114.263353][ T6450] ? __pfx_vt_ioctl+0x10/0x10 [ 114.263380][ T6450] ? __fget_files+0x2a/0x420 [ 114.263401][ T6450] ? __fget_files+0x3a6/0x420 [ 114.263417][ T6450] ? __fget_files+0x2a/0x420 [ 114.263443][ T6450] tty_ioctl+0x92e/0xde0 [ 114.263462][ T6450] ? __pfx_tty_ioctl+0x10/0x10 [ 114.263480][ T6450] __se_sys_ioctl+0xff/0x170 [ 114.263502][ T6450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.263518][ T6450] do_syscall_64+0x15f/0xf80 [ 114.263538][ T6450] ? trace_irq_disable+0x3b/0x140 [ 114.263554][ T6450] ? clear_bhb_loop+0x40/0x90 [ 114.263573][ T6450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.263588][ T6450] RIP: 0033:0x7fe1afd5c819 [ 114.263603][ T6450] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.263615][ T6450] RSP: 002b:00007fe1adfae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.263631][ T6450] RAX: ffffffffffffffda RBX: 00007fe1affd5fa0 RCX: 00007fe1afd5c819 [ 114.263642][ T6450] RDX: 0000200000000180 RSI: 0000000000004b72 RDI: 0000000000000003 [ 114.263651][ T6450] RBP: 00007fe1adfae090 R08: 0000000000000000 R09: 0000000000000000 [ 114.263660][ T6450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 114.263669][ T6450] R13: 00007fe1affd6038 R14: 00007fe1affd5fa0 R15: 00007fffe76ed238 [ 114.263695][ T6450] [ 114.665784][ T6439] orangefs_mount: mount request failed with -4 [ 114.995992][ T43] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 115.080435][ T5958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 115.080463][ T5958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 115.086059][ T5958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 115.086084][ T5958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 115.086102][ T5958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 115.086118][ T5958] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 115.086354][ T5958] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 115.138959][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 115.141998][ T43] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 115.142022][ T43] usb 4-1: config 0 has no interface number 0 [ 115.142064][ T43] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 115.145775][ T43] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 115.145800][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.145818][ T43] usb 4-1: Product: syz [ 115.145831][ T43] usb 4-1: Manufacturer: syz [ 115.145845][ T43] usb 4-1: SerialNumber: syz [ 115.263080][ T5958] usb 2-1: USB disconnect, device number 7 [ 115.276134][ T43] usb 4-1: config 0 descriptor?? [ 115.277454][ T6455] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 115.488935][ T6455] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 116.168476][ T5153] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 116.298315][ T5153] usb 2-1: device descriptor read/64, error -71 [ 116.548331][ T5153] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.678395][ T5153] usb 2-1: device descriptor read/64, error -71 [ 116.791201][ T5153] usb usb2-port1: attempt power cycle [ 116.858469][ T32] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.008338][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 117.010030][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.010052][ T32] usb 3-1: config 0 has no interfaces? [ 117.158297][ T5153] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 117.178791][ T5153] usb 2-1: device descriptor read/8, error -71 [ 117.418300][ T5153] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 117.439841][ T5153] usb 2-1: device descriptor read/8, error -71 [ 117.549040][ T5153] usb usb2-port1: unable to enumerate USB device [ 117.939662][ T43] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 117.941028][ T43] asix 4-1:0.188: probe with driver asix failed with error -71 [ 117.999345][ T43] usb 4-1: USB disconnect, device number 15 [ 118.638673][ T43] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 118.798454][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 118.804570][ T43] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 118.804594][ T43] usb 4-1: config 0 has no interface number 0 [ 118.805023][ T43] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 118.816149][ T43] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 118.816176][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.816195][ T43] usb 4-1: Product: syz [ 118.816578][ T43] usb 4-1: Manufacturer: syz [ 118.816594][ T43] usb 4-1: SerialNumber: syz [ 118.876705][ T43] usb 4-1: config 0 descriptor?? [ 118.877813][ T6524] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 119.089690][ T6524] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 119.682704][ T32] usb 3-1: string descriptor 0 read error: -71 [ 119.683293][ T32] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 119.683318][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.720422][ T32] usb 3-1: config 0 descriptor?? [ 119.755813][ T32] usb 3-1: can't set config #0, error -71 [ 119.801603][ T32] usb 3-1: USB disconnect, device number 7 [ 119.881652][ T6539] netlink: 'syz.0.196': attribute type 4 has an invalid length. [ 119.977557][ T6546] netlink: 'syz.0.199': attribute type 10 has an invalid length. [ 120.115414][ T6524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.116380][ T6524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.198270][ T32] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 120.265772][ T6546] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 120.362203][ T32] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 120.362233][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.362535][ T32] usb 3-1: Product: syz [ 120.362553][ T32] usb 3-1: Manufacturer: syz [ 120.362622][ T32] usb 3-1: SerialNumber: syz [ 120.383494][ T32] usb 3-1: config 0 descriptor?? [ 120.505779][ T6549] netlink: 88 bytes leftover after parsing attributes in process `syz.0.200'. [ 120.522122][ T43] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 120.522499][ T43] asix 4-1:0.188: probe with driver asix failed with error -71 [ 120.565737][ T43] usb 4-1: USB disconnect, device number 16 [ 120.713771][ T32] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 121.170838][ T5873] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 121.318744][ T5873] usb 2-1: Using ep0 maxpacket: 16 [ 121.331070][ T5873] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 121.331097][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.331116][ T5873] usb 2-1: Product: syz [ 121.331130][ T5873] usb 2-1: Manufacturer: syz [ 121.331144][ T5873] usb 2-1: SerialNumber: syz [ 121.354198][ T5873] r8152-cfgselector 2-1: Unknown version 0x0000 [ 121.354221][ T5873] r8152-cfgselector 2-1: config 0 descriptor?? [ 121.485356][ T5958] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 121.652962][ T5958] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 121.652998][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.653016][ T5958] usb 4-1: Product: syz [ 121.653029][ T5958] usb 4-1: Manufacturer: syz [ 121.653043][ T5958] usb 4-1: SerialNumber: syz [ 121.704549][ T5958] usb 4-1: config 0 descriptor?? [ 121.800347][ T819] r8152-cfgselector 2-1: USB disconnect, device number 12 [ 121.989019][ T32] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 122.004499][ T32] usb 3-1: USB disconnect, device number 8 [ 122.034052][ T5958] usb 4-1: USB disconnect, device number 17 [ 122.554218][ T6578] FAULT_INJECTION: forcing a failure. [ 122.554218][ T6578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 122.554263][ T6578] CPU: 1 UID: 0 PID: 6578 Comm: syz.3.211 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 122.554289][ T6578] Tainted: [L]=SOFTLOCKUP [ 122.554295][ T6578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 122.554307][ T6578] Call Trace: [ 122.554314][ T6578] [ 122.554322][ T6578] dump_stack_lvl+0xe8/0x150 [ 122.554355][ T6578] should_fail_ex+0x46b/0x600 [ 122.554380][ T6578] _copy_to_iter+0x589/0x17d0 [ 122.554412][ T6578] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 122.554433][ T6578] ? __pfx__copy_to_iter+0x10/0x10 [ 122.554450][ T6578] ? rt_spin_lock+0x1e0/0x400 [ 122.554472][ T6578] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 122.554500][ T6578] __skb_datagram_iter+0xf8/0x980 [ 122.554521][ T6578] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 122.554548][ T6578] skb_copy_datagram_iter+0xb5/0x240 [ 122.554569][ T6578] netlink_recvmsg+0x2c3/0xa50 [ 122.554602][ T6578] ? __pfx_netlink_recvmsg+0x10/0x10 [ 122.554632][ T6578] ? __lock_acquire+0x6b5/0x2cf0 [ 122.554661][ T6578] ? aa_sock_msg_perm+0x122/0x200 [ 122.554684][ T6578] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 122.554700][ T6578] ? security_socket_recvmsg+0x7e/0x2c0 [ 122.554723][ T6578] ? __pfx_netlink_recvmsg+0x10/0x10 [ 122.554746][ T6578] sock_recvmsg+0x172/0x1b0 [ 122.554770][ T6578] ____sys_recvmsg+0x1f2/0x4b0 [ 122.554797][ T6578] ? __pfx_____sys_recvmsg+0x10/0x10 [ 122.554827][ T6578] ? import_iovec+0x73/0xa0 [ 122.554850][ T6578] ___sys_recvmsg+0x215/0x590 [ 122.554874][ T6578] ? __pfx____sys_recvmsg+0x10/0x10 [ 122.554896][ T6578] ? __fget_files+0x2a/0x420 [ 122.554931][ T6578] ? __fget_files+0x3a6/0x420 [ 122.554959][ T6578] do_recvmmsg+0x33a/0x800 [ 122.554985][ T6578] ? __pfx_do_recvmmsg+0x10/0x10 [ 122.555016][ T6578] ? rt_mutex_slowunlock+0x1cb/0x300 [ 122.555050][ T6578] __x64_sys_recvmmsg+0x198/0x250 [ 122.555072][ T6578] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 122.555100][ T6578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.555121][ T6578] do_syscall_64+0x15f/0xf80 [ 122.555145][ T6578] ? trace_irq_disable+0x3b/0x140 [ 122.555165][ T6578] ? clear_bhb_loop+0x40/0x90 [ 122.555188][ T6578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.555206][ T6578] RIP: 0033:0x7fe1afd5c819 [ 122.555228][ T6578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.555243][ T6578] RSP: 002b:00007fe1adfae028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 122.555270][ T6578] RAX: ffffffffffffffda RBX: 00007fe1affd5fa0 RCX: 00007fe1afd5c819 [ 122.555283][ T6578] RDX: 0000000000000001 RSI: 0000200000002b00 RDI: 0000000000000003 [ 122.555295][ T6578] RBP: 00007fe1adfae090 R08: 0000000000000000 R09: 0000000000000000 [ 122.555306][ T6578] R10: 0000000000000102 R11: 0000000000000246 R12: 0000000000000001 [ 122.555318][ T6578] R13: 00007fe1affd6038 R14: 00007fe1affd5fa0 R15: 00007fffe76ed238 [ 122.555346][ T6578] [ 122.638312][ T32] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 122.790291][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 122.792634][ T32] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 122.792750][ T32] usb 2-1: config 0 has no interface number 0 [ 122.792794][ T32] usb 2-1: config 0 interface 184 has no altsetting 0 [ 122.800219][ T32] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 122.800243][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.800261][ T32] usb 2-1: Product: syz [ 122.800275][ T32] usb 2-1: Manufacturer: syz [ 122.800288][ T32] usb 2-1: SerialNumber: syz [ 122.822415][ T32] usb 2-1: config 0 descriptor?? [ 122.868587][ T43] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 123.061707][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 123.070120][ T43] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 123.070136][ T43] usb 4-1: config 0 has no interface number 0 [ 123.077054][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 123.077070][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.077080][ T43] usb 4-1: Product: syz [ 123.077088][ T43] usb 4-1: Manufacturer: syz [ 123.077095][ T43] usb 4-1: SerialNumber: syz [ 123.128676][ T43] usb 4-1: config 0 descriptor?? [ 123.378355][ T5153] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 123.528404][ T5153] usb 3-1: Using ep0 maxpacket: 8 [ 123.547306][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 123.547334][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 123.547974][ T5153] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 123.547999][ T5153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.548018][ T5153] usb 3-1: Product: syz [ 123.549420][ T5153] usb 3-1: Manufacturer: syz [ 123.549436][ T5153] usb 3-1: SerialNumber: syz [ 123.568869][ T5153] usb 3-1: config 0 descriptor?? [ 123.840297][ T5153] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.885427][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.0.217'. [ 124.274901][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 124.274931][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 124.291903][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 124.291930][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 124.291998][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 124.292015][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 124.292399][ T32] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 124.420739][ T32] usb 2-1: USB disconnect, device number 13 [ 124.796852][ T6580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.815492][ T6580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.835284][ T43] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 124.835763][ T43] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 124.913446][ T43] usb 4-1: USB disconnect, device number 18 [ 125.218255][ T32] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 125.265403][ T5153] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 125.270636][ T5153] usb 3-1: USB disconnect, device number 9 [ 125.369843][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.369868][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 125.369889][ T32] usb 2-1: config 1 has no interface number 0 [ 125.369914][ T32] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 125.369927][ T32] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 125.369941][ T32] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 125.371999][ T32] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 125.372025][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.372036][ T32] usb 2-1: Product: syz [ 125.372044][ T32] usb 2-1: Manufacturer: syz [ 125.372051][ T32] usb 2-1: SerialNumber: syz [ 125.386876][ T6603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 125.667357][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.682368][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.899717][ T6603] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.110166][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.111747][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.115279][ T6603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.116384][ T6603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.365288][ T5958] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 126.393887][ T32] cdc_ncm 2-1:1.1: bind() failure [ 126.520891][ T5958] usb 4-1: not running at top speed; connect to a high speed hub [ 126.522362][ T5958] usb 4-1: config 2 has an invalid interface number: 193 but max is 3 [ 126.522386][ T5958] usb 4-1: config 2 has an invalid interface number: 195 but max is 3 [ 126.522418][ T5958] usb 4-1: config 2 has an invalid interface number: 96 but max is 3 [ 126.522429][ T5958] usb 4-1: config 2 has an invalid interface number: 48 but max is 3 [ 126.522438][ T5958] usb 4-1: config 2 contains an unexpected descriptor of type 0x1, skipping [ 126.522448][ T5958] usb 4-1: config 2 has an invalid interface number: 209 but max is 3 [ 126.522461][ T5958] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 126.522477][ T5958] usb 4-1: config 2 has 5 interfaces, different from the descriptor's value: 4 [ 126.522496][ T5958] usb 4-1: config 2 has no interface number 0 [ 126.522518][ T5958] usb 4-1: config 2 has no interface number 1 [ 126.522532][ T5958] usb 4-1: config 2 has no interface number 2 [ 126.522547][ T5958] usb 4-1: config 2 has no interface number 3 [ 126.522563][ T5958] usb 4-1: config 2 has no interface number 4 [ 126.522624][ T5958] usb 4-1: config 2 interface 195 altsetting 247 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 126.522639][ T5958] usb 4-1: config 2 interface 195 altsetting 247 has an endpoint descriptor with address 0xF8, changing to 0x88 [ 126.522653][ T5958] usb 4-1: config 2 interface 195 altsetting 247 endpoint 0x88 has invalid maxpacket 54083, setting to 64 [ 126.522667][ T5958] usb 4-1: config 2 interface 195 altsetting 247 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 126.522680][ T5958] usb 4-1: config 2 interface 195 altsetting 247 has a duplicate endpoint with address 0x1, skipping [ 126.522692][ T5958] usb 4-1: config 2 interface 195 altsetting 247 endpoint 0x8 has invalid maxpacket 1544, setting to 64 [ 126.522705][ T5958] usb 4-1: config 2 interface 195 altsetting 247 has an invalid descriptor for endpoint zero, skipping [ 126.522715][ T5958] usb 4-1: config 2 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 126.522727][ T5958] usb 4-1: config 2 interface 195 altsetting 247 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 126.522741][ T5958] usb 4-1: config 2 interface 195 altsetting 247 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 126.522753][ T5958] usb 4-1: config 2 interface 195 altsetting 247 has a duplicate endpoint with address 0x9, skipping [ 126.522765][ T5958] usb 4-1: config 2 interface 195 altsetting 247 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 126.522779][ T5958] usb 4-1: config 2 interface 195 altsetting 247 has a duplicate endpoint with address 0xE, skipping [ 126.522790][ T5958] usb 4-1: config 2 interface 195 altsetting 247 has a duplicate endpoint with address 0x8, skipping [ 126.522801][ T5958] usb 4-1: config 2 interface 195 altsetting 247 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 126.522829][ T5958] usb 4-1: config 2 interface 96 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 126.522839][ T5958] usb 4-1: config 2 interface 96 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 16 [ 126.522859][ T5958] usb 4-1: config 2 interface 48 altsetting 121 has an invalid descriptor for endpoint zero, skipping [ 126.522869][ T5958] usb 4-1: config 2 interface 48 altsetting 121 has a duplicate endpoint with address 0x3, skipping [ 126.522880][ T5958] usb 4-1: config 2 interface 48 altsetting 121 has a duplicate endpoint with address 0x3, skipping [ 126.522891][ T5958] usb 4-1: config 2 interface 48 altsetting 121 has 3 endpoint descriptors, different from the interface descriptor's value: 17 [ 126.522904][ T5958] usb 4-1: too many endpoints for config 2 interface 209 altsetting 43: 205, using maximum allowed: 30 [ 126.522927][ T5958] usb 4-1: config 2 interface 209 altsetting 43 has a duplicate endpoint with address 0x5, skipping [ 126.522938][ T5958] usb 4-1: config 2 interface 209 altsetting 43 has a duplicate endpoint with address 0x7, skipping [ 126.522949][ T5958] usb 4-1: config 2 interface 209 altsetting 43 has an endpoint descriptor with address 0x6E, changing to 0xE [ 126.522960][ T5958] usb 4-1: config 2 interface 209 altsetting 43 has a duplicate endpoint with address 0xE, skipping [ 126.522971][ T5958] usb 4-1: config 2 interface 209 altsetting 43 has an invalid descriptor for endpoint zero, skipping [ 126.522982][ T5958] usb 4-1: config 2 interface 209 altsetting 43 has a duplicate endpoint with address 0xE, skipping [ 126.522993][ T5958] usb 4-1: config 2 interface 209 altsetting 43 has an invalid descriptor for endpoint zero, skipping [ 126.523003][ T5958] usb 4-1: config 2 interface 209 altsetting 43 has an invalid descriptor for endpoint zero, skipping [ 126.523013][ T5958] usb 4-1: config 2 interface 209 altsetting 43 has a duplicate endpoint with address 0xF, skipping [ 126.523024][ T5958] usb 4-1: config 2 interface 209 altsetting 43 has 8 endpoint descriptors, different from the interface descriptor's value: 205 [ 126.523037][ T5958] usb 4-1: config 2 interface 193 has no altsetting 0 [ 126.523046][ T5958] usb 4-1: config 2 interface 195 has no altsetting 0 [ 126.523054][ T5958] usb 4-1: config 2 interface 96 has no altsetting 0 [ 126.523063][ T5958] usb 4-1: config 2 interface 48 has no altsetting 0 [ 126.523072][ T5958] usb 4-1: config 2 interface 209 has no altsetting 0 [ 126.548336][ T5958] usb 4-1: New USB device found, idVendor=19d2, idProduct=0153, bcdDevice=39.99 [ 126.548364][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.548382][ T5958] usb 4-1: Product: Ⰺ [ 126.548396][ T5958] usb 4-1: Manufacturer: ⫊䋺矟抴ުೞᮜ筘蕥뇗⏆ዄꓺຄ꼝阤啢쾼颬靀탯ꁴ꼬列꽮ꓛዯ箭式ﻠ׹蝬篵곂꺐᜴붸氠싐㸂詃褧둝娻揌届雪倿뗽㡳ࢶ먔䭪멻옲㴃䏭Ћ샭䡨㑈甡벅䔌ꎊ忐흉㽱岤펝闦숚衡ᴒ䒻颹줣Ꮖ鸹⃽ॐ䏮븶缰䠃￤ꤹჭ㿛ꛅ䛘뎥喈⡿诗땻㎓ᨾ鏒㠛ꎱ榤፫⛁劼뼄 [ 126.548425][ T5958] usb 4-1: SerialNumber: 鑁ᓁĵ魼᭓₴暍夘翛Ḵ䲓㚽縐ǭ깹믳쐽쥩沞欖疂匬ʨø墊斱蓱㒣禔酒脥┎邪綾⟚㇡䊳패둍鬪翗醘喼跑ᰜ㔑蓋궪믢硠⯕垏䓻ᬹ着잒瞂揫㘇붫띪ꊌ䠟뻛 [ 126.642353][ T6610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.807911][ T32] usb 2-1: USB disconnect, device number 14 [ 127.352848][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.353940][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.385070][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.386053][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.548313][ T5881] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 127.603998][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.606174][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.633178][ T5958] option 4-1:2.193: GSM modem (1-port) converter detected [ 127.713227][ T5881] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 127.713257][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.713276][ T5881] usb 3-1: Product: syz [ 127.713290][ T5881] usb 3-1: Manufacturer: syz [ 127.713305][ T5881] usb 3-1: SerialNumber: syz [ 127.731546][ T5958] usb 4-1: USB disconnect, device number 19 [ 127.741021][ T5881] usb 3-1: config 0 descriptor?? [ 127.789382][ T5958] option 4-1:2.193: device disconnected [ 127.899478][ T6639] netlink: 'syz.0.233': attribute type 29 has an invalid length. [ 127.900602][ T6639] netlink: 'syz.0.233': attribute type 29 has an invalid length. [ 127.951010][ T5881] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 128.438274][ T32] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 128.588328][ T32] usb 4-1: Using ep0 maxpacket: 8 [ 128.607227][ T32] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 128.607255][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.607274][ T32] usb 4-1: Product: syz [ 128.607294][ T32] usb 4-1: Manufacturer: syz [ 128.607309][ T32] usb 4-1: SerialNumber: syz [ 128.627835][ T32] usb 4-1: config 0 descriptor?? [ 128.866999][ T32] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 129.187183][ T5881] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 129.204114][ T5881] usb 3-1: USB disconnect, device number 10 [ 129.349320][ T6664] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 129.349345][ T6664] netlink: 'syz.1.241': attribute type 1 has an invalid length. [ 129.773231][ T4357] wlan1: Trigger new scan to find an IBSS to join [ 130.359501][ T43] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 130.411651][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 130.444186][ T32] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 130.453229][ T32] usb 4-1: USB disconnect, device number 20 [ 130.499181][ T43] usb 3-1: device descriptor read/64, error -71 [ 130.738362][ T43] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 130.769977][ T37] audit: type=1326 audit(1776285699.475:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6681 comm="syz.1.248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda0359c819 code=0x0 [ 130.868339][ T43] usb 3-1: device descriptor read/64, error -71 [ 130.893457][ T6685] overlay: filesystem on ./file0 not supported as upperdir [ 130.981770][ T43] usb usb3-port1: attempt power cycle [ 131.328290][ T43] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 131.348729][ T43] usb 3-1: device descriptor read/8, error -71 [ 131.588292][ T43] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 131.610366][ T43] usb 3-1: device descriptor read/8, error -71 [ 131.718569][ T43] usb usb3-port1: unable to enumerate USB device [ 131.771183][ T6699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.771742][ T6699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.998313][ T43] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 132.113346][ T6707] capability: warning: `syz.0.257' uses deprecated v2 capabilities in a way that may be insecure [ 132.148232][ T43] usb 4-1: Using ep0 maxpacket: 32 [ 132.150319][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 132.150343][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 132.152431][ T43] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=d2.a2 [ 132.152457][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.152470][ T43] usb 4-1: Product: syz [ 132.152477][ T43] usb 4-1: Manufacturer: syz [ 132.152484][ T43] usb 4-1: SerialNumber: syz [ 132.155465][ T43] usb 4-1: config 0 descriptor?? [ 132.171662][ T43] keyspan 4-1:0.0: Keyspan 1 port adapter converter detected [ 132.171891][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 87 [ 132.171960][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 132.174246][ T43] keyspan 4-1:0.0: unsupported endpoint type 0 [ 132.174326][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 132.174401][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 132.174474][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 132.174552][ T43] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 132.185602][ T43] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 132.358835][ T43] usb 4-1: USB disconnect, device number 21 [ 132.400133][ T43] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 132.400901][ T43] keyspan 4-1:0.0: device disconnected [ 132.743956][ T67] wlan1: Trigger new scan to find an IBSS to join [ 132.761362][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.761414][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.823656][ T6713] overlayfs: failed to resolve './file1': -2 [ 132.851721][ C1] sd 0:0:1:0: [sda] tag#6479 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 132.851779][ C1] sd 0:0:1:0: [sda] tag#6479 CDB: Write(6) 0a 00 00 00 00 00 00 00 fe 80 00 00 [ 133.126780][ T5140] Bluetooth: hci1: Malformed Event: 0x02 [ 133.258267][ T5881] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 133.390651][ T6728] fuse: Bad value for 'fd' [ 133.425938][ T5881] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 133.426046][ T5881] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.441122][ T5881] usb 2-1: config 0 descriptor?? [ 133.492635][ T5881] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 133.566148][ T6728] netlink: 8 bytes leftover after parsing attributes in process `syz.3.266'. [ 133.683721][ T5881] gp8psk: usb in 128 operation failed. [ 133.723918][ T5881] gp8psk: usb in 146 operation failed. [ 133.723930][ T5881] gp8psk: failed to get FW version [ 133.724210][ T5881] gp8psk: usb in 149 operation failed. [ 133.724217][ T5881] gp8psk: failed to get FPGA version [ 133.724537][ T5881] gp8psk: usb in 138 operation failed. [ 133.724563][ T5881] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 133.724599][ T5881] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 133.746460][ T5881] usb 2-1: USB disconnect, device number 15 [ 134.121091][ T818] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 134.169205][ T5140] Bluetooth: hci1: Invalid handle: 0xffff > 0x0eff [ 134.248343][ T818] usb 4-1: device descriptor read/64, error -71 [ 134.488583][ T818] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 134.618318][ T818] usb 4-1: device descriptor read/64, error -71 [ 134.620681][ T6768] fuse: fd is not a fuse device [ 134.728836][ T818] usb usb4-port1: attempt power cycle [ 135.038345][ T5873] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 135.070308][ T818] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 135.090595][ T818] usb 4-1: device descriptor read/8, error -71 [ 135.195038][ T5873] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 135.195067][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.195086][ T5873] usb 2-1: Product: syz [ 135.195100][ T5873] usb 2-1: Manufacturer: syz [ 135.195114][ T5873] usb 2-1: SerialNumber: syz [ 135.235239][ T5873] usb 2-1: config 0 descriptor?? [ 135.358351][ T818] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 135.386507][ T818] usb 4-1: device descriptor read/8, error -71 [ 135.443439][ T5873] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 135.490511][ T818] usb usb4-port1: unable to enumerate USB device [ 135.658339][ T5881] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 135.768591][ T1369] wlan1: Trigger new scan to find an IBSS to join [ 135.798334][ T5881] usb 3-1: device descriptor read/64, error -71 [ 136.048422][ T5881] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 136.180678][ T5881] usb 3-1: device descriptor read/64, error -71 [ 136.232918][ T6822] netlink: 60 bytes leftover after parsing attributes in process `syz.0.282'. [ 136.298938][ T5881] usb usb3-port1: attempt power cycle [ 136.660003][ T5881] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 136.664200][ T5873] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 136.678902][ T5881] usb 3-1: device descriptor read/8, error -71 [ 136.698717][ T1369] wlan1: Creating new IBSS network, BSSID 8e:4b:55:16:64:c7 [ 136.703109][ T5873] usb 2-1: USB disconnect, device number 16 [ 136.918390][ T5881] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 136.938993][ T5881] usb 3-1: device descriptor read/8, error -71 [ 137.013600][ T6847] netlink: 12 bytes leftover after parsing attributes in process `syz.0.286'. [ 137.048952][ T5881] usb usb3-port1: unable to enumerate USB device [ 137.278293][ T5958] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 137.367643][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz.1.288'. [ 137.440768][ T5958] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 137.440794][ T5958] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 137.440812][ T5958] usb 4-1: config 220 has no interface number 2 [ 137.440876][ T5958] usb 4-1: config 220 interface 1 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 137.440896][ T5958] usb 4-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 137.440923][ T5958] usb 4-1: config 220 interface 0 has no altsetting 0 [ 137.440941][ T5958] usb 4-1: config 220 interface 76 has no altsetting 0 [ 137.440959][ T5958] usb 4-1: config 220 interface 1 has no altsetting 0 [ 137.452397][ T5958] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 137.452433][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.452451][ T5958] usb 4-1: Product: syz [ 137.452465][ T5958] usb 4-1: Manufacturer: syz [ 137.452479][ T5958] usb 4-1: SerialNumber: syz [ 137.793359][ T5958] usb 4-1: selecting invalid altsetting 0 [ 137.793794][ T5958] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 137.793823][ T5958] uvcvideo 4-1:220.0: No valid video chain found. [ 137.842620][ T5958] usb 4-1: selecting invalid altsetting 0 [ 137.842642][ T5958] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 137.860583][ T5958] usb 4-1: USB disconnect, device number 26 [ 138.778271][ T5958] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 138.878316][ T5881] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 138.905245][ T6880] netlink: 16 bytes leftover after parsing attributes in process `syz.3.299'. [ 138.953738][ T5958] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.953764][ T5958] usb 3-1: config 0 has no interfaces? [ 138.953792][ T5958] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 138.953815][ T5958] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.972820][ T5958] usb 3-1: config 0 descriptor?? [ 139.034952][ T5881] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.034981][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.035002][ T5881] usb 2-1: Product: syz [ 139.035016][ T5881] usb 2-1: Manufacturer: syz [ 139.035029][ T5881] usb 2-1: SerialNumber: syz [ 139.048531][ T5881] usb 2-1: config 0 descriptor?? [ 139.216708][ T5873] usb 3-1: USB disconnect, device number 19 [ 139.275145][ T5881] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.142235][ T6892] netlink: 24 bytes leftover after parsing attributes in process `syz.3.302'. [ 140.358279][ T5153] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 140.486542][ T5881] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 140.504680][ T5881] usb 2-1: USB disconnect, device number 17 [ 140.520029][ T5153] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.520053][ T5153] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 140.524862][ T5153] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 140.524897][ T5153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.524916][ T5153] usb 3-1: Product: syz [ 140.524927][ T5153] usb 3-1: Manufacturer: syz [ 140.524940][ T5153] usb 3-1: SerialNumber: syz [ 140.578851][ T5873] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 140.600522][ T5153] usb 3-1: 0:1 : does not exist [ 140.728538][ T5873] usb 4-1: Using ep0 maxpacket: 8 [ 140.743231][ T5873] usb 4-1: config 2 has an invalid interface number: 152 but max is 0 [ 140.743256][ T5873] usb 4-1: config 2 has no interface number 0 [ 140.743283][ T5873] usb 4-1: config 2 interface 152 has no altsetting 0 [ 140.745580][ T5873] usb 4-1: New USB device found, idVendor=0bda, idProduct=8155, bcdDevice=c3.4d [ 140.745606][ T5873] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.745625][ T5873] usb 4-1: Product: syz [ 140.745676][ T5873] usb 4-1: Manufacturer: syz [ 140.745684][ T5873] usb 4-1: SerialNumber: syz [ 140.806877][ T5153] usb 3-1: 3:0: failed to get current value for ch 0 (-32) [ 140.821809][ T5873] r8152-cfgselector 4-1: Unknown version 0x0000 [ 140.866994][ T5153] usb 3-1: unit 0 not found! [ 141.047917][ T6901] netlink: 756 bytes leftover after parsing attributes in process `syz.1.306'. [ 141.107771][ T6894] netlink: 72 bytes leftover after parsing attributes in process `syz.2.303'. [ 141.131950][ T5873] r8152 4-1:2.152: Expected endpoints are not found [ 141.158760][ T5873] r8152-cfgselector 4-1: USB disconnect, device number 27 [ 141.229672][ T5153] usb 3-1: USB disconnect, device number 20 [ 142.048355][ T5881] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 142.120450][ T5958] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 142.211805][ T5881] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 142.211833][ T5881] usb 3-1: config 0 has no interface number 0 [ 142.239517][ T5881] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 142.239545][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.239565][ T5881] usb 3-1: Product: syz [ 142.239579][ T5881] usb 3-1: Manufacturer: syz [ 142.239593][ T5881] usb 3-1: SerialNumber: syz [ 142.288213][ T5881] usb 3-1: config 0 descriptor?? [ 142.300920][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 142.349792][ T5958] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 142.349823][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.349896][ T5958] usb 2-1: Product: syz [ 142.349911][ T5958] usb 2-1: Manufacturer: syz [ 142.349925][ T5958] usb 2-1: SerialNumber: syz [ 142.436126][ T5958] usb 2-1: config 0 descriptor?? [ 142.453922][ T5958] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 142.453986][ T5958] dvb-usb: bulk message failed: -22 (4/0) [ 142.453995][ T5958] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 142.454108][ T5958] dvb-usb: bulk message failed: -22 (5/0) [ 142.454117][ T5958] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 142.582448][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.584397][ T5958] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 142.584546][ T5958] usb 2-1: media controller created [ 142.751094][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 142.766355][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.900779][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 142.915739][ T9] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 142.915764][ T9] usb 4-1: config 0 has no interface number 0 [ 142.915886][ T9] usb 4-1: config 0 interface 184 has no altsetting 0 [ 142.922688][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 142.922715][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.922783][ T9] usb 4-1: Product: syz [ 142.922797][ T9] usb 4-1: Manufacturer: syz [ 142.922810][ T9] usb 4-1: SerialNumber: syz [ 143.060002][ T9] usb 4-1: config 0 descriptor?? [ 143.265232][ T5958] usb 2-1: selecting invalid altsetting 3 [ 143.265252][ T5958] ttusb2: set interface to alts=3 failed [ 143.374959][ T5881] uvcvideo 3-1:0.64: Found UVC 0.08 device syz (046d:0823) [ 143.375116][ T5881] uvcvideo 3-1:0.64: No valid video chain found. [ 143.385750][ T5958] DVB: Unable to find symbol tda10086_attach() [ 143.387738][ T5958] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 143.394374][ T5958] dvb-usb: bulk message failed: -22 (4/0) [ 143.394391][ T5958] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 143.394557][ T5958] dvb-usb: bulk message failed: -22 (5/0) [ 143.394571][ T5958] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 143.394684][ T5958] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 143.403445][ T5881] usb 3-1: USB disconnect, device number 21 [ 143.481018][ T5958] usb 2-1: USB disconnect, device number 18 [ 143.786762][ T5958] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 143.934635][ T6948] netlink: 184 bytes leftover after parsing attributes in process `syz.0.320'. [ 144.142401][ T5958] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 144.278514][ T5958] usb 2-1: device descriptor read/64, error -71 [ 144.491875][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 144.491894][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 144.539113][ T5958] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 144.678702][ T5958] usb 2-1: device descriptor read/64, error -71 [ 144.697055][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 144.697084][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 144.697103][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 144.697121][ T9] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 144.697401][ T9] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 144.718948][ T9] usb 4-1: USB disconnect, device number 28 [ 144.816060][ T5958] usb usb2-port1: attempt power cycle [ 144.862439][ T6963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.948500][ T5881] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 145.102464][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.102496][ T5881] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.102534][ T5881] usb 3-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 145.102558][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.121588][ T5881] usb 3-1: config 0 descriptor?? [ 145.321341][ T6975] netlink: 4 bytes leftover after parsing attributes in process `syz.1.327'. [ 145.482709][ T6982] 9p: Bad value for 'rfdno' [ 145.603709][ T5881] kye 0003:0458:5016.0004: control desc unexpectedly large [ 145.631479][ T5881] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0004/input/input11 [ 145.868648][ T5881] input: HID 0458:5016 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5016.0004/input/input12 [ 145.898546][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 146.045129][ T6996] netlink: 4 bytes leftover after parsing attributes in process `syz.1.334'. [ 146.063944][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 146.066602][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 146.066626][ T9] usb 4-1: config 0 has no interfaces? [ 146.076921][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 146.076960][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.076978][ T9] usb 4-1: Product: syz [ 146.076991][ T9] usb 4-1: Manufacturer: syz [ 146.077005][ T9] usb 4-1: SerialNumber: syz [ 146.088386][ T5140] Bluetooth: hci0: command 0x2016 tx timeout [ 146.179744][ T9] usb 4-1: config 0 descriptor?? [ 146.228630][ T5881] kye 0003:0458:5016.0004: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.2-1/input0 [ 146.324305][ T6999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 146.737677][ C1] kye 0003:0458:5016.0004: usb_submit_urb(ctrl) failed: -1 [ 147.118274][ T43] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 147.274665][ T43] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 147.274690][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.274701][ T43] usb 2-1: Product: syz [ 147.274708][ T43] usb 2-1: Manufacturer: syz [ 147.274715][ T43] usb 2-1: SerialNumber: syz [ 147.311875][ T43] usb 2-1: config 0 descriptor?? [ 147.517774][ T43] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 147.618602][ T5153] usb 4-1: USB disconnect, device number 29 [ 147.660649][ T9] usb 3-1: USB disconnect, device number 22 [ 148.170575][ T5140] Bluetooth: hci0: command 0x2016 tx timeout [ 148.688335][ T5873] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 148.842185][ T7029] tipc: Enabling of bearer rejected, failed to enable media [ 148.911299][ T7030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.925656][ T7030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.079722][ T5873] usb 4-1: unable to get BOS descriptor or descriptor too short [ 149.082142][ T5873] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 149.082174][ T5873] usb 4-1: can't read configurations, error -71 [ 149.152502][ T43] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 149.165138][ T43] usb 2-1: USB disconnect, device number 22 [ 149.628249][ T5958] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 149.798198][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 149.799447][ T5958] usb 3-1: too many configurations: 10, using maximum allowed: 8 [ 149.801166][ T5958] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 149.801189][ T5958] usb 3-1: config 4 has no interface number 0 [ 149.801240][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 149.801267][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 149.801292][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 149.801365][ T5958] usb 3-1: config 4 interface 38 has no altsetting 0 [ 149.803178][ T5958] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 149.803201][ T5958] usb 3-1: config 4 has no interface number 0 [ 149.803238][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 149.803252][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 149.803266][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 149.803277][ T5958] usb 3-1: config 4 interface 38 has no altsetting 0 [ 149.804265][ T5958] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 149.804288][ T5958] usb 3-1: config 4 has no interface number 0 [ 149.804329][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 149.804345][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 149.804359][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 149.804370][ T5958] usb 3-1: config 4 interface 38 has no altsetting 0 [ 149.805503][ T5958] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 149.805526][ T5958] usb 3-1: config 4 has no interface number 0 [ 149.805568][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 149.805588][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 149.805602][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 149.805612][ T5958] usb 3-1: config 4 interface 38 has no altsetting 0 [ 149.806595][ T5958] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 149.806617][ T5958] usb 3-1: config 4 has no interface number 0 [ 149.806676][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 149.806694][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 149.806707][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 149.806718][ T5958] usb 3-1: config 4 interface 38 has no altsetting 0 [ 149.807850][ T5958] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 149.807875][ T5958] usb 3-1: config 4 has no interface number 0 [ 149.807908][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 149.807922][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 149.807936][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 149.807947][ T5958] usb 3-1: config 4 interface 38 has no altsetting 0 [ 149.871567][ T5958] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 149.871583][ T5958] usb 3-1: config 4 has no interface number 0 [ 149.871609][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 149.871632][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 149.871658][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 149.871679][ T5958] usb 3-1: config 4 interface 38 has no altsetting 0 [ 149.898897][ T5958] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 149.898924][ T5958] usb 3-1: config 4 has no interface number 0 [ 149.898957][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 149.898979][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0xB has an invalid bInterval 142, changing to 11 [ 149.898992][ T5958] usb 3-1: config 4 interface 38 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 149.899004][ T5958] usb 3-1: config 4 interface 38 has no altsetting 0 [ 149.923379][ T5958] usb 3-1: New USB device found, idVendor=0421, idProduct=042f, bcdDevice=a2.ed [ 149.923396][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.923407][ T5958] usb 3-1: Product: syz [ 149.923414][ T5958] usb 3-1: Manufacturer: syz [ 149.923421][ T5958] usb 3-1: SerialNumber: syz [ 150.118224][ T5873] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 150.268280][ T5873] usb 4-1: Using ep0 maxpacket: 16 [ 150.274035][ T5873] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 150.274057][ T5873] usb 4-1: config 0 has no interface number 0 [ 150.274098][ T5873] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.274122][ T5873] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.274157][ T5873] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 150.274186][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.281701][ T5873] usb 4-1: config 0 descriptor?? [ 150.402456][ T7042] netlink: 100 bytes leftover after parsing attributes in process `syz.2.350'. [ 150.402540][ T7042] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 150.462335][ T7047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.490642][ T7047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.645663][ T5958] rndis_host 3-1:4.38: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 150.694512][ T5958] usb 3-1: USB disconnect, device number 23 [ 151.059701][ T32] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 151.093546][ T5958] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 151.176735][ T5873] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71 [ 151.176789][ T5873] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71 [ 151.176815][ T5873] uclogic 0003:28BD:0071.0005: pen probing failed: -71 [ 151.176835][ T5873] uclogic 0003:28BD:0071.0005: failed probing parameters: -71 [ 151.176906][ T5873] uclogic 0003:28BD:0071.0005: probe with driver uclogic failed with error -71 [ 151.192956][ T5873] usb 4-1: USB disconnect, device number 31 [ 151.232916][ T32] usb 2-1: Using ep0 maxpacket: 16 [ 151.241356][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.241386][ T32] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.241422][ T32] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 151.241444][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.264666][ T5958] usb 3-1: unable to get BOS descriptor or descriptor too short [ 151.271598][ T5958] usb 3-1: config 4 has an invalid interface number: 138 but max is 0 [ 151.271623][ T5958] usb 3-1: config 4 has no interface number 0 [ 151.271653][ T5958] usb 3-1: config 4 interface 138 has no altsetting 0 [ 151.322171][ T5958] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8 [ 151.322199][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.322218][ T5958] usb 3-1: Product: syz [ 151.322232][ T5958] usb 3-1: Manufacturer: syz [ 151.322246][ T5958] usb 3-1: SerialNumber: syz [ 151.324097][ T32] usb 2-1: config 0 descriptor?? [ 151.619577][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 151.619978][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 151.651581][ T5958] catc 3-1:4.138: Can't set altsetting 1. [ 151.651645][ T5958] catc 3-1:4.138: probe with driver catc failed with error -5 [ 151.675343][ T5958] usb 3-1: USB disconnect, device number 24 [ 151.967788][ T7057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.979171][ T7057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 152.284388][ T32] usb 2-1: string descriptor 0 read error: -71 [ 152.315664][ T32] usb 2-1: Max retries (5) exceeded reading string descriptor 200 [ 152.315741][ T32] letsketch 0003:6161:4D15.0006: probe with driver letsketch failed with error -32 [ 152.331086][ T32] usb 2-1: USB disconnect, device number 23 [ 152.448295][ T5958] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 152.598255][ T5958] usb 3-1: Using ep0 maxpacket: 8 [ 152.599328][ T7068] can0: slcan on ptm0. [ 152.619732][ T7068] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 152.626037][ T5958] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 152.626062][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 152.626082][ T5958] usb 3-1: Product: syz [ 152.626094][ T5958] usb 3-1: Manufacturer: syz [ 152.626107][ T5958] usb 3-1: SerialNumber: syz [ 152.675622][ T5958] usb 3-1: config 0 descriptor?? [ 152.687246][ T7071] netlink: 92 bytes leftover after parsing attributes in process `syz.1.357'. [ 152.687272][ T7071] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 152.693846][ T7071] netlink: 64 bytes leftover after parsing attributes in process `syz.1.357'. [ 152.716000][ T5958] gspca_main: sq905-2.14.0 probing 2770:9120 [ 152.955454][ T5958] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71) [ 152.955547][ T5958] sq905 3-1:0.0: probe with driver sq905 failed with error -71 [ 153.034415][ T5958] usb 3-1: USB disconnect, device number 25 [ 153.035246][ T7067] can0 (unregistered): slcan off ptm0. [ 153.583720][ T7095] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.608460][ T5153] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 154.739399][ T5153] usb 2-1: device descriptor read/64, error -71 [ 154.918923][ T43] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 154.978242][ T5153] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 155.078319][ T43] usb 3-1: Using ep0 maxpacket: 16 [ 155.080405][ T43] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.080462][ T43] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 155.080484][ T43] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 155.081848][ T43] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 155.081874][ T43] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 155.081893][ T43] usb 3-1: Manufacturer: syz [ 155.095823][ T43] usb 3-1: config 0 descriptor?? [ 155.118510][ T5153] usb 2-1: device descriptor read/64, error -71 [ 155.235855][ T5153] usb usb2-port1: attempt power cycle [ 155.311715][ T43] usb 3-1: USB disconnect, device number 26 [ 155.328374][ T5958] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 155.484230][ T5958] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 155.484260][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.484280][ T5958] usb 4-1: Product: syz [ 155.484294][ T5958] usb 4-1: Manufacturer: syz [ 155.484308][ T5958] usb 4-1: SerialNumber: syz [ 155.530411][ T5958] usb 4-1: config 0 descriptor?? [ 155.579908][ T5153] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 155.600561][ T5153] usb 2-1: device descriptor read/8, error -71 [ 155.743106][ T5958] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 155.853243][ T5153] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 155.906971][ T5153] usb 2-1: device descriptor read/8, error -71 [ 156.100524][ T5153] usb usb2-port1: unable to enumerate USB device [ 156.831689][ T9] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 157.008255][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 157.017070][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 157.017093][ T9] usb 3-1: config 0 has no interface number 0 [ 157.017120][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 157.046020][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 157.046046][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.046057][ T9] usb 3-1: Product: syz [ 157.046104][ T9] usb 3-1: Manufacturer: syz [ 157.046113][ T9] usb 3-1: SerialNumber: syz [ 157.057822][ T9] usb 3-1: config 0 descriptor?? [ 157.366517][ T5958] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 157.405483][ T5958] usb 4-1: USB disconnect, device number 32 [ 157.460879][ T60] Bluetooth: Frame is too long (len 97, expected len 16) [ 157.998366][ T5958] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 158.171526][ T5958] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 158.174421][ T5958] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 158.174447][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.174467][ T5958] usb 2-1: Product: syz [ 158.174550][ T5958] usb 2-1: Manufacturer: syz [ 158.174564][ T5958] usb 2-1: SerialNumber: syz [ 158.205552][ T5958] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 158.495232][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 158.495287][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 158.696764][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 158.696795][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 158.696815][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 158.697209][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 158.698758][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 158.726800][ T9] usb 3-1: USB disconnect, device number 27 [ 159.050009][ T7171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.057750][ T7171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.062764][ T5958] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 159.148272][ T43] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 159.185483][ T9] usb 2-1: USB disconnect, device number 28 [ 159.298965][ T43] usb 4-1: Using ep0 maxpacket: 16 [ 159.301122][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.301172][ T43] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 159.301194][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 159.302593][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 159.302620][ T43] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 159.302639][ T43] usb 4-1: Manufacturer: syz [ 159.330137][ T7190] netlink: 'syz.0.391': attribute type 11 has an invalid length. [ 159.385172][ T43] usb 4-1: config 0 descriptor?? [ 159.404011][ T7192] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 159.536491][ T7200] tmpfs: Bad value for 'size' [ 159.629315][ T7202] netlink: 'syz.2.397': attribute type 21 has an invalid length. [ 159.629383][ T7202] netlink: 156 bytes leftover after parsing attributes in process `syz.2.397'. [ 159.629463][ T7202] netlink: 4 bytes leftover after parsing attributes in process `syz.2.397'. [ 159.636572][ T9] usb 4-1: USB disconnect, device number 33 [ 160.348314][ T43] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 160.520493][ T43] usb 3-1: unable to get BOS descriptor or descriptor too short [ 160.521607][ T43] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 160.521631][ T43] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 160.523722][ T43] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 160.523749][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.523761][ T43] usb 3-1: Product: syz [ 160.523769][ T43] usb 3-1: Manufacturer: syz [ 160.523776][ T43] usb 3-1: SerialNumber: syz [ 160.799963][ T43] usb 3-1: USB disconnect, device number 28 [ 160.888421][ T60] Bluetooth: hci0: command 0x2016 tx timeout [ 161.769852][ T7253] misc userio: No port type given on /dev/userio [ 161.913911][ T7257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.413'. [ 161.913942][ T7257] netlink: 2 bytes leftover after parsing attributes in process `syz.3.413'. [ 161.914944][ T7257] netlink: 4 bytes leftover after parsing attributes in process `syz.3.413'. [ 162.054126][ T7265] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 162.512872][ T7286] netlink: 24 bytes leftover after parsing attributes in process `syz.2.424'. [ 162.518595][ T5153] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 162.598304][ T9] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 162.698854][ T5153] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 162.698882][ T5153] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 162.698900][ T5153] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 162.698928][ T5153] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.698942][ T5153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 162.698956][ T5153] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 162.705274][ T5153] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 162.705297][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 162.705308][ T5153] usb 4-1: Product: syz [ 162.705316][ T5153] usb 4-1: Manufacturer: syz [ 162.790396][ T7279] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 162.793393][ T5153] cdc_wdm 4-1:1.0: skipping garbage [ 162.793409][ T5153] cdc_wdm 4-1:1.0: skipping garbage [ 162.849717][ T5153] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 162.849749][ T5153] cdc_wdm 4-1:1.0: Unknown control protocol [ 162.855386][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 162.855403][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.855413][ T9] usb 2-1: Product: syz [ 162.855421][ T9] usb 2-1: Manufacturer: syz [ 162.855429][ T9] usb 2-1: SerialNumber: syz [ 162.902876][ T9] usb 2-1: config 0 descriptor?? [ 163.024904][ T7296] netlink: 187320 bytes leftover after parsing attributes in process `syz.2.428'. [ 163.055221][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 163.055446][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 163.059888][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 163.059908][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 163.060123][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 163.060138][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 163.060341][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 163.060356][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 163.060563][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 163.060578][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 163.060794][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 163.060808][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 163.061015][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 163.061032][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 163.061236][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 163.061250][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 163.061456][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 163.061470][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 163.061671][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 163.061686][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 163.213136][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 163.245007][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 163.250970][ T7297] kAFS: unable to lookup cell '' [ 163.305739][ T43] usb 4-1: USB disconnect, device number 34 [ 163.538355][ T5881] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 163.728285][ T5881] usb 3-1: Using ep0 maxpacket: 16 [ 163.730729][ T5881] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.731885][ T5881] usb 3-1: config 1 interface 0 has no altsetting 0 [ 163.735017][ T5881] usb 3-1: string descriptor 0 read error: -22 [ 163.735149][ T5881] usb 3-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 163.735162][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.273291][ T7310] netlink: 1 bytes leftover after parsing attributes in process `syz.3.433'. [ 164.330863][ T5881] vrc2 0003:07C0:1125.0007: fixing up VRC-2 report descriptor [ 164.804014][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 164.813821][ T9] usb 2-1: USB disconnect, device number 29 [ 164.822738][ T5881] input: HID 07c0:1125 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/0003:07C0:1125.0007/input/input13 [ 164.959881][ T5881] vrc2 0003:07C0:1125.0007: input,hidraw0: USB HID vff.7f Joystick [HID 07c0:1125] on usb-dummy_hcd.2-1/input0 [ 164.996316][ T5881] usb 3-1: USB disconnect, device number 29 [ 165.040191][ T7318] Bluetooth: MGMT ver 1.23 [ 165.068911][ T5958] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 165.072633][ T7318] comedi comedi3: dt2801: I/O base address or length out of range [ 165.242524][ T7319] fido_id[7319]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 165.243602][ T5958] usb 4-1: config 0 interface 0 has no altsetting 0 [ 165.243639][ T5958] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 165.243663][ T5958] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.260115][ T5958] usb 4-1: config 0 descriptor?? [ 165.414330][ T7321] netlink: 56 bytes leftover after parsing attributes in process `syz.1.438'. [ 165.566677][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 165.571002][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 165.579621][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 165.579997][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 165.580118][ T5958] usb 4-1: string descriptor 0 read error: -32 [ 165.646306][ T5958] usbhid 4-1:0.0: can't add hid device: -71 [ 165.646374][ T5958] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 165.668762][ T5958] usb 4-1: USB disconnect, device number 35 [ 166.303780][ T7329] binder: BINDER_SET_CONTEXT_MGR already set [ 166.303793][ T7329] binder: 7317:7329 ioctl 4018620d 200000000040 returned -16 [ 166.561580][ T7335] netlink: 'syz.3.442': attribute type 11 has an invalid length. [ 166.565119][ T7335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.442'. [ 167.015076][ T7347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.446'. [ 167.088940][ T7352] netlink: 'syz.3.447': attribute type 32 has an invalid length. [ 167.129001][ T5140] Bluetooth: hci0: command 0x2016 tx timeout [ 167.129065][ T60] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 167.698319][ T5153] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 167.853044][ T5153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.853079][ T5153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.879041][ T5153] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 167.879071][ T5153] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 167.879089][ T5153] usb 4-1: Manufacturer: syz [ 167.916893][ T5153] usb 4-1: config 0 descriptor?? [ 168.168346][ T43] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 168.319096][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 168.336684][ T43] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.336709][ T43] usb 2-1: config 0 has no interfaces? [ 168.354493][ T43] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 168.354523][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.354542][ T43] usb 2-1: Product: syz [ 168.354556][ T43] usb 2-1: Manufacturer: syz [ 168.354570][ T43] usb 2-1: SerialNumber: syz [ 168.404346][ T43] usb 2-1: config 0 descriptor?? [ 168.499177][ C1] [drm:vkms_crtc_handle_vblank_timeout] *ERROR* vkms failure on handling vblank [ 168.525918][ T7378] netlink: 'syz.2.456': attribute type 39 has an invalid length. [ 168.545748][ T5153] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 168.545808][ T5153] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 168.545912][ T5153] uclogic 0003:256C:006D.0008: probe with driver uclogic failed with error -71 [ 168.578726][ T5153] usb 4-1: USB disconnect, device number 36 [ 168.802072][ T7383] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 168.858309][ T7378] hsr_slave_0 (unregistering): left promiscuous mode [ 168.898458][ T7368] tipc: Enabling not permitted [ 168.898484][ T7368] tipc: Enabling of bearer rejected, failed to enable media [ 168.898630][ T7385] lo: entered promiscuous mode [ 168.899532][ T7384] lo: left promiscuous mode [ 168.900519][ T9] usb 2-1: USB disconnect, device number 30 [ 169.116480][ T7390] befs: (nbd3): No write support. Marking filesystem read-only [ 169.116771][ T7390] befs: (nbd3): unable to read superblock [ 169.209344][ T4357] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 169.464857][ T7401] netlink: 172 bytes leftover after parsing attributes in process `syz.1.462'. [ 169.464914][ T7401] netlink: 48 bytes leftover after parsing attributes in process `syz.1.462'. [ 169.518276][ T5153] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 169.668254][ T5153] usb 4-1: Using ep0 maxpacket: 8 [ 169.672873][ T5153] usb 4-1: config 1 interface 0 has no altsetting 0 [ 169.688337][ T5153] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 169.688372][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.688393][ T5153] usb 4-1: Product: syz [ 169.688408][ T5153] usb 4-1: Manufacturer: syz [ 169.688423][ T5153] usb 4-1: SerialNumber: syz [ 170.191594][ T5153] usbhid 4-1:1.0: can't add hid device: -71 [ 170.191687][ T5153] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 170.213089][ T5153] usb 4-1: USB disconnect, device number 37 [ 170.358289][ T32] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 170.374711][ T7427] netlink: 4 bytes leftover after parsing attributes in process `syz.1.471'. [ 170.490907][ T32] usb 3-1: device descriptor read/64, error -71 [ 170.728403][ T32] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 170.860950][ T32] usb 3-1: device descriptor read/64, error -71 [ 170.968656][ T32] usb usb3-port1: attempt power cycle [ 171.248283][ T5881] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 171.308247][ T32] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 171.328824][ T32] usb 3-1: device descriptor read/8, error -71 [ 171.398542][ T5881] usb 4-1: Using ep0 maxpacket: 16 [ 171.401696][ T5881] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 171.401726][ T5881] usb 4-1: config 0 interface 0 has no altsetting 0 [ 171.415224][ T5881] usb 4-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 171.415251][ T5881] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.415270][ T5881] usb 4-1: Product: syz [ 171.415283][ T5881] usb 4-1: Manufacturer: syz [ 171.415297][ T5881] usb 4-1: SerialNumber: syz [ 171.441789][ T5881] usb 4-1: config 0 descriptor?? [ 171.545696][ T7452] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 171.598267][ T32] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 171.631052][ T32] usb 3-1: device descriptor read/8, error -71 [ 171.738558][ T32] usb usb3-port1: unable to enumerate USB device [ 172.048695][ T5881] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input14 [ 172.268403][ T5881] rc_core: IR keymap rc-imon-pad not found [ 172.268416][ T5881] Registered IR keymap rc-empty [ 172.268476][ T5881] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 172.268522][ T5881] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 172.300996][ T32] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 172.321529][ T5881] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 172.327983][ T5881] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15 [ 172.360245][ T5881] imon 4-1:0.0: iMON device (15c2:0041, intf0) on usb<4:38> initialized [ 172.470803][ T32] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 172.470834][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.477151][ T32] usb 2-1: config 0 descriptor?? [ 172.504028][ T32] cp210x 2-1:0.0: cp210x converter detected [ 172.568089][ T7450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.569363][ T7450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.851425][ T7462] trusted_key: syz.3.478 sent an empty control message without MSG_MORE. [ 172.908438][ T32] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 172.940337][ T32] usb 2-1: cp210x converter now attached to ttyUSB0 [ 172.943998][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 172.964071][ T5153] usb 4-1: USB disconnect, device number 38 [ 173.508267][ T32] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 173.631099][ T5881] usb 2-1: USB disconnect, device number 31 [ 173.647461][ T5881] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 173.668693][ T32] usb 3-1: config 0 has no interfaces? [ 173.668727][ T32] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 173.668744][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.694984][ T32] usb 3-1: config 0 descriptor?? [ 173.768418][ T5153] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 173.789201][ T5881] cp210x 2-1:0.0: device disconnected [ 173.914354][ T7464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.914896][ T7464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.920413][ T32] usb 3-1: USB disconnect, device number 34 [ 173.921857][ T5153] usb 4-1: Using ep0 maxpacket: 8 [ 173.954549][ T5153] usb 4-1: New USB device found, idVendor=0c45, idProduct=8003, bcdDevice=f9.64 [ 173.954576][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=67 [ 173.954595][ T5153] usb 4-1: Product: syz [ 173.954602][ T5153] usb 4-1: Manufacturer: syz [ 173.954611][ T5153] usb 4-1: SerialNumber: syz [ 173.962663][ T5153] usb 4-1: config 0 descriptor?? [ 173.975224][ T5153] gspca_main: sn9c2028-2.14.0 probing 0c45:8003 [ 174.175088][ T5153] gspca_sn9c2028: read1 error -32 [ 174.177040][ T7466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.181480][ T7466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.185415][ T5153] gspca_sn9c2028: read1 error -32 [ 174.394303][ T5153] usb 4-1: USB disconnect, device number 39 [ 174.525208][ T7479] FAULT_INJECTION: forcing a failure. [ 174.525208][ T7479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.525238][ T7479] CPU: 0 UID: 0 PID: 7479 Comm: syz.2.488 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 174.525258][ T7479] Tainted: [L]=SOFTLOCKUP [ 174.525263][ T7479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 174.525272][ T7479] Call Trace: [ 174.525279][ T7479] [ 174.525285][ T7479] dump_stack_lvl+0xe8/0x150 [ 174.525308][ T7479] should_fail_ex+0x46b/0x600 [ 174.525329][ T7479] _copy_from_user+0x2d/0xb0 [ 174.525347][ T7479] csum_and_copy_from_iter_full+0x1e7/0x1f00 [ 174.525387][ T7479] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 174.525411][ T7479] ? trace_kmalloc+0x2a/0xf0 [ 174.525433][ T7479] ip_generic_getfrag+0x149/0x2d0 [ 174.525447][ T7479] ? __kmalloc_node_track_caller_noprof+0x390/0x7e0 [ 174.525473][ T7479] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 174.525489][ T7479] ? __alloc_skb+0x4e5/0x7d0 [ 174.525506][ T7479] ? skb_put+0x11b/0x210 [ 174.525529][ T7479] __ip6_append_data+0x3902/0x3e90 [ 174.525568][ T7479] ? __pfx_raw6_getfrag+0x10/0x10 [ 174.525602][ T7479] ? __pfx___ip6_append_data+0x10/0x10 [ 174.525618][ T7479] ? ip6_setup_cork+0x544/0xf30 [ 174.525635][ T7479] ? ip6_append_data+0x1b7/0x280 [ 174.525653][ T7479] ip6_append_data+0x10f/0x280 [ 174.525676][ T7479] ? __pfx_raw6_getfrag+0x10/0x10 [ 174.525697][ T7479] rawv6_sendmsg+0x12d3/0x18e0 [ 174.525729][ T7479] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 174.525758][ T7479] ? aa_sk_perm+0x703/0x950 [ 174.525786][ T7479] ? __pfx_aa_sk_perm+0x10/0x10 [ 174.525811][ T7479] ? sock_rps_record_flow+0x19/0x350 [ 174.525828][ T7479] ? inet_sendmsg+0x2f4/0x370 [ 174.525840][ T7479] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.525856][ T7479] ____sys_sendmsg+0x7da/0x9c0 [ 174.525877][ T7479] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.525897][ T7479] ? import_iovec+0x73/0xa0 [ 174.525918][ T7479] ___sys_sendmsg+0x2a5/0x360 [ 174.525931][ T7479] ? __lock_acquire+0x6b5/0x2cf0 [ 174.525953][ T7479] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.525993][ T7479] ? __fget_files+0x2a/0x420 [ 174.526009][ T7479] ? __fget_files+0x3a6/0x420 [ 174.526033][ T7479] __x64_sys_sendmsg+0x1c3/0x2a0 [ 174.526051][ T7479] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 174.526073][ T7479] ? __pfx_ksys_write+0x10/0x10 [ 174.526100][ T7479] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.526117][ T7479] do_syscall_64+0x15f/0xf80 [ 174.526136][ T7479] ? trace_irq_disable+0x3b/0x140 [ 174.526153][ T7479] ? clear_bhb_loop+0x40/0x90 [ 174.526171][ T7479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.526185][ T7479] RIP: 0033:0x7f4f84bec819 [ 174.526199][ T7479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 174.526212][ T7479] RSP: 002b:00007f4f82e3e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 174.526231][ T7479] RAX: ffffffffffffffda RBX: 00007f4f84e65fa0 RCX: 00007f4f84bec819 [ 174.526241][ T7479] RDX: 0000000000000060 RSI: 0000200000000080 RDI: 0000000000000003 [ 174.526249][ T7479] RBP: 00007f4f82e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 174.526258][ T7479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 174.526266][ T7479] R13: 00007f4f84e66038 R14: 00007f4f84e65fa0 R15: 00007fffe0da8db8 [ 174.526288][ T7479] [ 175.088102][ T7490] input: syz0 as /devices/virtual/input/input16 [ 175.198259][ T9] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 175.358425][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 175.361008][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 175.361033][ T9] usb 2-1: config 0 has no interface number 0 [ 175.361092][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 175.381768][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 175.381795][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.381814][ T9] usb 2-1: Product: syz [ 175.381828][ T9] usb 2-1: Manufacturer: syz [ 175.381843][ T9] usb 2-1: SerialNumber: syz [ 175.433002][ T9] usb 2-1: config 0 descriptor?? [ 175.465197][ T7505] comedi comedi3: dt2801: I/O base address or length out of range [ 175.978422][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 175.978453][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 175.980591][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 175.980618][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 175.980637][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 175.980656][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 175.980957][ T9] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 176.070470][ T9] usb 2-1: USB disconnect, device number 32 [ 176.173935][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz.0.501'. [ 176.598295][ T9] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 176.760412][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 176.763700][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 176.763830][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 176.763854][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 176.810361][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 176.810384][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 176.810395][ T9] usb 4-1: Manufacturer: syz [ 176.814653][ T9] usb 4-1: config 0 descriptor?? [ 176.865000][ T7541] syz.2.507 (7541) used greatest stack depth: 17344 bytes left [ 176.996201][ T7549] FAULT_INJECTION: forcing a failure. [ 176.996201][ T7549] name failslab, interval 1, probability 0, space 0, times 0 [ 176.996224][ T7549] CPU: 1 UID: 0 PID: 7549 Comm: syz.2.510 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 176.996240][ T7549] Tainted: [L]=SOFTLOCKUP [ 176.996243][ T7549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 176.996250][ T7549] Call Trace: [ 176.996255][ T7549] [ 176.996259][ T7549] dump_stack_lvl+0xe8/0x150 [ 176.996275][ T7549] should_fail_ex+0x46b/0x600 [ 176.996290][ T7549] should_failslab+0xa8/0x100 [ 176.996310][ T7549] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 176.996327][ T7549] ? kobject_set_name_vargs+0x61/0x110 [ 176.996345][ T7549] kvasprintf+0xeb/0x1a0 [ 176.996361][ T7549] ? __pfx_kvasprintf+0x10/0x10 [ 176.996374][ T7549] ? rcu_is_watching+0x15/0xb0 [ 176.996389][ T7549] ? kfree+0x4d/0x6c0 [ 176.996402][ T7549] ? kvasprintf_const+0xe1/0x240 [ 176.996415][ T7549] kobject_set_name_vargs+0x61/0x110 [ 176.996432][ T7549] dev_set_name+0xe2/0x140 [ 176.996451][ T7549] ? __pfx_dev_set_name+0x10/0x10 [ 176.996467][ T7549] ? __init_waitqueue_head+0xae/0x160 [ 176.996481][ T7549] ? device_initialize+0x282/0x470 [ 176.996494][ T7549] iommufd_test+0x244a/0x6160 [ 176.996510][ T7549] ? __lock_acquire+0x6b5/0x2cf0 [ 176.996524][ T7549] ? __pfx_iommufd_test+0x10/0x10 [ 176.996538][ T7549] ? tomoyo_path_number_perm+0x219/0x630 [ 176.996563][ T7549] ? tomoyo_path_number_perm+0x219/0x630 [ 176.996581][ T7549] ? __might_fault+0xaf/0x130 [ 176.996596][ T7549] ? __might_fault+0xaf/0x130 [ 176.996619][ T7549] iommufd_fops_ioctl+0x4b8/0x5d0 [ 176.996634][ T7549] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 176.996649][ T7549] ? __fget_files+0x2a/0x420 [ 176.996664][ T7549] ? __fget_files+0x2a/0x420 [ 176.996677][ T7549] ? bpf_lsm_file_ioctl+0x9/0x20 [ 176.996689][ T7549] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 176.996703][ T7549] __se_sys_ioctl+0xff/0x170 [ 176.996718][ T7549] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.996729][ T7549] do_syscall_64+0x15f/0xf80 [ 176.996742][ T7549] ? trace_irq_disable+0x3b/0x140 [ 176.996754][ T7549] ? clear_bhb_loop+0x40/0x90 [ 176.996767][ T7549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.996778][ T7549] RIP: 0033:0x7f4f84bec819 [ 176.996788][ T7549] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 176.996802][ T7549] RSP: 002b:00007f4f82e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 176.996820][ T7549] RAX: ffffffffffffffda RBX: 00007f4f84e65fa0 RCX: 00007f4f84bec819 [ 176.996833][ T7549] RDX: 0000200000000180 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 176.996844][ T7549] RBP: 00007f4f82e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 176.996855][ T7549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.996865][ T7549] R13: 00007f4f84e66038 R14: 00007f4f84e65fa0 R15: 00007fffe0da8db8 [ 176.996891][ T7549] [ 177.037234][ T32] usb 4-1: USB disconnect, device number 40 [ 177.282353][ T7554] fuse: Unknown parameter '0x0000000000000004' [ 177.530773][ T5140] Bluetooth: hci0: command 0x2016 tx timeout [ 177.530836][ T60] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 177.937490][ T7582] netlink: 8 bytes leftover after parsing attributes in process `syz.3.523'. [ 178.378549][ T5153] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 178.508360][ T5153] usb 2-1: device descriptor read/64, error -71 [ 178.749103][ T5153] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 178.769380][ T7610] mmap: syz.3.534 (7610) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 178.878508][ T5153] usb 2-1: device descriptor read/64, error -71 [ 178.991798][ T5153] usb usb2-port1: attempt power cycle [ 179.009960][ T7620] comedi comedi3: dt2801: I/O base address or length out of range [ 179.028306][ T818] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 179.178311][ T818] usb 3-1: Using ep0 maxpacket: 16 [ 179.179915][ T818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.179964][ T818] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 179.179977][ T818] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 179.180983][ T818] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 179.181009][ T818] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 179.181028][ T818] usb 3-1: Manufacturer: syz [ 179.184559][ T818] usb 3-1: config 0 descriptor?? [ 179.331651][ T5153] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 179.350249][ T5153] usb 2-1: device descriptor read/8, error -71 [ 179.395550][ T32] usb 3-1: USB disconnect, device number 35 [ 179.588439][ T5153] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 179.612689][ T5153] usb 2-1: device descriptor read/8, error -71 [ 179.628499][ T818] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 179.718523][ T5153] usb usb2-port1: unable to enumerate USB device [ 179.778327][ T818] usb 4-1: Using ep0 maxpacket: 32 [ 179.781594][ T818] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 179.781619][ T818] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 179.781639][ T818] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 179.781661][ T818] usb 4-1: config 1 has no interface number 0 [ 179.781787][ T818] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 179.781815][ T818] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 179.781857][ T818] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 179.781879][ T818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.812272][ T818] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 180.082562][ T818] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 180.094777][ T7658] vxcan0: tx address claim with dest, not broadcast [ 180.156506][ T7660] netlink: 36 bytes leftover after parsing attributes in process `syz.2.551'. [ 180.446460][ T5153] usb 4-1: USB disconnect, device number 41 [ 180.450897][ T5153] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 180.519778][ T7675] comedi comedi3: dt2801: I/O base address or length out of range [ 181.048836][ T5140] Bluetooth: hci0: command 0x2016 tx timeout [ 181.048900][ T60] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 181.223117][ T7698] comedi comedi3: dt2801: I/O base address or length out of range [ 181.319713][ T5153] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 181.481098][ T5153] usb 3-1: Using ep0 maxpacket: 16 [ 181.482836][ T5153] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 181.482885][ T5153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 181.482907][ T5153] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 181.487516][ T5153] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 181.487542][ T5153] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 181.487563][ T5153] usb 3-1: Manufacturer: syz [ 181.517272][ T5153] usb 3-1: config 0 descriptor?? [ 181.531931][ T7706] netlink: 'syz.0.567': attribute type 2 has an invalid length. [ 181.645697][ T7711] overlayfs: failed to resolve './file2': -2 [ 181.779799][ T5873] usb 3-1: USB disconnect, device number 36 [ 181.954276][ T7722] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 182.258300][ T5873] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 182.418098][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 182.421477][ T5873] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 182.421501][ T5873] usb 2-1: config 0 has no interface number 0 [ 182.421544][ T5873] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 182.429076][ T5873] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 182.429102][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.429119][ T5873] usb 2-1: Product: syz [ 182.429133][ T5873] usb 2-1: Manufacturer: syz [ 182.429147][ T5873] usb 2-1: SerialNumber: syz [ 182.453920][ T5873] usb 2-1: config 0 descriptor?? [ 182.455947][ T7720] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.689044][ T7714] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 182.980704][ T7751] netlink: 32 bytes leftover after parsing attributes in process `syz.0.583'. [ 183.110137][ T5873] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 183.110398][ T5873] asix 2-1:0.188: probe with driver asix failed with error -71 [ 183.184611][ T5873] usb 2-1: USB disconnect, device number 37 [ 183.290893][ T60] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 183.300106][ T60] Bluetooth: hci0: command 0x2016 tx timeout [ 183.448396][ T5881] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 183.628307][ T5881] usb 3-1: Using ep0 maxpacket: 8 [ 183.633400][ T5881] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 183.633431][ T5881] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 183.633454][ T5881] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 183.633494][ T5881] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 183.633515][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.667282][ T5881] usbtmc 3-1:16.0: bulk endpoints not found [ 184.708264][ T9] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 184.868300][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 184.870261][ T9] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 184.875353][ T9] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40 [ 184.875379][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.875390][ T9] usb 4-1: Product: syz [ 184.875398][ T9] usb 4-1: Manufacturer: syz [ 184.875405][ T9] usb 4-1: SerialNumber: syz [ 184.924274][ T7774] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 185.131117][ T7774] Bluetooth: MGMT ver 1.23 [ 185.157841][ T9] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 185.157907][ T9] usb 4-1: MIDIStreaming interface descriptor not found [ 185.228486][ T9] usb 4-1: USB disconnect, device number 42 [ 185.334254][ T5947] udevd[5947]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.948296][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 186.056459][ T5153] usb 3-1: USB disconnect, device number 37 [ 186.059122][ T5958] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 186.114257][ T9] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 186.114288][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.114308][ T9] usb 2-1: Product: syz [ 186.114323][ T9] usb 2-1: Manufacturer: syz [ 186.114338][ T9] usb 2-1: SerialNumber: syz [ 186.124747][ T9] usb 2-1: config 0 descriptor?? [ 186.218308][ T5958] usb 4-1: Using ep0 maxpacket: 8 [ 186.221783][ T5958] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 186.221810][ T5958] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 186.224856][ T5958] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 186.224872][ T5958] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.224883][ T5958] usb 4-1: Product: syz [ 186.224891][ T5958] usb 4-1: Manufacturer: syz [ 186.224898][ T5958] usb 4-1: SerialNumber: syz [ 186.233622][ T5958] usb 4-1: config 0 descriptor?? [ 186.408346][ T5140] Bluetooth: hci0: command 0x2016 tx timeout [ 186.408405][ T60] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 186.542774][ T5958] usb 4-1: USB disconnect, device number 43 [ 186.553168][ T9] usb 2-1: Firmware version (0.0) predates our first public release. [ 186.553193][ T9] usb 2-1: Please update to version 0.2 or newer [ 186.768248][ T9] usb 2-1: Firmware: build ƪ䡟NS)pwK|j [ 186.768248][ T9] Ob6r&0!qW}ilVMdU-f:4flM=ܕ,󰖕7+ [ 187.183113][ T9] usb 2-1: USB disconnect, device number 38 [ 188.030075][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 188.162505][ T60] Bluetooth: hci0: unexpected event for opcode 0x0c58 [ 188.189042][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 188.191387][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.191418][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 188.194345][ T9] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 188.194371][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.194384][ T9] usb 2-1: Product: syz [ 188.194391][ T9] usb 2-1: Manufacturer: syz [ 188.194399][ T9] usb 2-1: SerialNumber: syz [ 188.207323][ T9] usb 2-1: config 0 descriptor?? [ 188.304631][ T7839] IPVS: set_ctl: invalid protocol: 214 127.0.0.1:20004 [ 188.398276][ T5153] usb 4-1: new low-speed USB device number 44 using dummy_hcd [ 188.529001][ T5153] usb 4-1: device descriptor read/64, error -71 [ 188.543409][ T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 188.768317][ T5153] usb 4-1: new low-speed USB device number 45 using dummy_hcd [ 188.819281][ T9] rc_core: IR keymap rc-imon-pad not found [ 188.819300][ T9] Registered IR keymap rc-empty [ 188.819372][ T9] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 188.820863][ T9] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 188.908371][ T5153] usb 4-1: device descriptor read/64, error -71 [ 188.912482][ T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 188.948396][ T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 188.956373][ T9] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:39> initialized [ 189.018637][ T5153] usb usb4-port1: attempt power cycle [ 189.122778][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.123378][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.279101][ C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 189.279713][ T5873] usb 2-1: USB disconnect, device number 39 [ 189.378295][ T5153] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 189.400485][ T5153] usb 4-1: device descriptor read/8, error -71 [ 189.618344][ T818] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 189.638248][ T5153] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 189.670032][ T5153] usb 4-1: device descriptor read/8, error -71 [ 189.768349][ T818] usb 3-1: Using ep0 maxpacket: 32 [ 189.776600][ T818] usb 3-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 189.776628][ T818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.776647][ T818] usb 3-1: Product: syz [ 189.776654][ T818] usb 3-1: Manufacturer: syz [ 189.776662][ T818] usb 3-1: SerialNumber: syz [ 189.778683][ T5153] usb usb4-port1: unable to enumerate USB device [ 189.790244][ T818] usb 3-1: config 0 descriptor?? [ 189.822605][ T818] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 189.822680][ T818] dvb-usb: bulk message failed: -22 (4/0) [ 189.822689][ T818] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 189.822762][ T818] dvb-usb: bulk message failed: -22 (5/0) [ 189.822774][ T818] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 189.855280][ T818] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 189.858526][ T818] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 189.858602][ T818] usb 3-1: media controller created [ 189.896250][ T818] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.970916][ T818] usb 3-1: selecting invalid altsetting 3 [ 189.970936][ T818] ttusb2: set interface to alts=3 failed [ 190.041640][ T818] DVB: Unable to find symbol tda10086_attach() [ 190.041656][ T818] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 190.042475][ T818] dvb-usb: bulk message failed: -22 (4/0) [ 190.042491][ T818] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 190.042611][ T818] dvb-usb: bulk message failed: -22 (5/0) [ 190.042625][ T818] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 190.042688][ T818] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 190.058861][ T818] usb 3-1: USB disconnect, device number 38 [ 190.164162][ T818] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 191.928689][ T5140] Bluetooth: hci0: command 0x2016 tx timeout [ 191.928735][ T60] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 192.019967][ T5958] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 192.133960][ T7902] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 192.168300][ T5958] usb 3-1: Using ep0 maxpacket: 16 [ 192.170183][ T5958] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 192.170214][ T5958] usb 3-1: config 0 interface 0 has no altsetting 0 [ 192.172333][ T5958] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 192.172360][ T5958] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.172373][ T5958] usb 3-1: Product: syz [ 192.172381][ T5958] usb 3-1: Manufacturer: syz [ 192.172388][ T5958] usb 3-1: SerialNumber: syz [ 192.175864][ T5958] usb 3-1: config 0 descriptor?? [ 192.395550][ T5958] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input19 [ 192.410043][ T5153] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 192.571446][ T5153] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 192.571472][ T5153] usb 4-1: config 0 has no interface number 0 [ 192.594150][ T5153] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 192.594179][ T5153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.594198][ T5153] usb 4-1: Product: syz [ 192.594211][ T5153] usb 4-1: Manufacturer: syz [ 192.594225][ T5153] usb 4-1: SerialNumber: syz [ 192.636160][ T5153] usb 4-1: config 0 descriptor?? [ 192.851984][ T9] usb 4-1: USB disconnect, device number 48 [ 192.882795][ T5958] rc_core: IR keymap rc-imon-pad not found [ 192.882815][ T5958] Registered IR keymap rc-empty [ 192.883126][ T5958] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 192.883144][ T5958] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 192.911525][ T5958] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 192.979399][ T5958] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input20 [ 192.990365][ T5958] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:39> initialized [ 193.065653][ T7902] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'. [ 193.111444][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.111917][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.209589][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803bfaec00: rx timeout, send abort [ 193.217688][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803bfaec00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 193.234995][ T7914] netlink: 60 bytes leftover after parsing attributes in process `syz.3.636'. [ 193.247409][ T7899] netlink: 'syz.3.636': attribute type 21 has an invalid length. [ 193.248444][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 193.254087][ T5923] usb 3-1: USB disconnect, device number 39 [ 193.578275][ T5153] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 193.728320][ T5153] usb 2-1: Using ep0 maxpacket: 16 [ 193.730195][ T5153] usb 2-1: config 1 has an invalid interface number: 105 but max is 0 [ 193.730220][ T5153] usb 2-1: config 1 has no interface number 0 [ 193.730263][ T5153] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 193.730289][ T5153] usb 2-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 193.730313][ T5153] usb 2-1: config 1 interface 105 has no altsetting 0 [ 193.732692][ T5153] usb 2-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 193.732719][ T5153] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 193.732740][ T5153] usb 2-1: Product: syz [ 193.732754][ T5153] usb 2-1: Manufacturer: syz [ 193.732768][ T5153] usb 2-1: SerialNumber: syz [ 193.800515][ T7915] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.800628][ T7915] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.098824][ T5153] aqc111 2-1:1.105: probe with driver aqc111 failed with error -71 [ 194.138815][ T5153] usb 2-1: USB disconnect, device number 40 [ 194.218364][ T1331] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.218422][ T1331] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.370576][ T5923] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 194.538348][ T5923] usb 3-1: Using ep0 maxpacket: 16 [ 194.541534][ T5923] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.541584][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 194.541602][ T5923] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 194.542816][ T5923] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 194.542848][ T5923] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 194.542863][ T5923] usb 3-1: Manufacturer: syz [ 194.553347][ T5923] usb 3-1: config 0 descriptor?? [ 194.768408][ T5958] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 194.817796][ T5923] usb 3-1: USB disconnect, device number 40 [ 194.918233][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 194.922290][ T5958] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 194.922316][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.922327][ T5958] usb 2-1: Product: syz [ 194.922335][ T5958] usb 2-1: Manufacturer: syz [ 194.922342][ T5958] usb 2-1: SerialNumber: syz [ 194.927240][ T5958] usb 2-1: config 0 descriptor?? [ 194.942008][ T5958] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 194.942105][ T5958] dvb-usb: bulk message failed: -22 (4/0) [ 194.942120][ T5958] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 194.942234][ T5958] dvb-usb: bulk message failed: -22 (5/0) [ 194.942247][ T5958] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 194.948058][ T5958] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 194.949586][ T5958] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 194.949635][ T5958] usb 2-1: media controller created [ 194.968262][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 194.995334][ T5958] usb 2-1: selecting invalid altsetting 3 [ 194.995351][ T5958] ttusb2: set interface to alts=3 failed [ 195.092776][ T5958] DVB: Unable to find symbol tda10086_attach() [ 195.092792][ T5958] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 195.095068][ T5958] dvb-usb: bulk message failed: -22 (4/0) [ 195.095086][ T5958] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 195.095206][ T5958] dvb-usb: bulk message failed: -22 (5/0) [ 195.095221][ T5958] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 195.095302][ T5958] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 195.194973][ T5958] usb 2-1: USB disconnect, device number 41 [ 195.229347][ T5958] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 195.847896][ T7971] 9p: Bad value for 'rfdno' [ 196.040087][ T7978] netlink: 68 bytes leftover after parsing attributes in process `syz.3.662'. [ 196.089176][ T818] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 196.218882][ T818] usb 3-1: device descriptor read/64, error -71 [ 196.253776][ T7929] Bluetooth: hci1: command 0x0406 tx timeout [ 196.253804][ T7929] Bluetooth: hci0: command 0x2016 tx timeout [ 196.253844][ T7930] Bluetooth: hci2: command 0x0406 tx timeout [ 196.458265][ T818] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 196.588321][ T818] usb 3-1: device descriptor read/64, error -71 [ 196.700673][ T818] usb usb3-port1: attempt power cycle [ 196.969540][ T5153] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 197.038260][ T818] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 197.058802][ T818] usb 3-1: device descriptor read/8, error -71 [ 197.119216][ T5153] usb 4-1: Using ep0 maxpacket: 16 [ 197.124459][ T5153] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.124508][ T5153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 197.124531][ T5153] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 197.126705][ T5153] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 197.126732][ T5153] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 197.126753][ T5153] usb 4-1: Manufacturer: syz [ 197.145518][ T5153] usb 4-1: config 0 descriptor?? [ 197.298312][ T818] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 197.319395][ T818] usb 3-1: device descriptor read/8, error -71 [ 197.354874][ T5153] usb 4-1: USB disconnect, device number 49 [ 197.427767][ T8006] netlink: 68 bytes leftover after parsing attributes in process `syz.1.673'. [ 197.429569][ T818] usb usb3-port1: unable to enumerate USB device [ 197.678317][ T5958] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 197.828250][ T5958] usb 2-1: Using ep0 maxpacket: 32 [ 197.829866][ T5958] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 197.829897][ T5958] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8311, setting to 1024 [ 197.831464][ T5958] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 197.831489][ T5958] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 197.831500][ T5958] usb 2-1: Product: syz [ 197.831507][ T5958] usb 2-1: Manufacturer: syz [ 197.849796][ T5958] hub 2-1:4.0: USB hub found [ 198.038859][ T5958] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 198.409197][ T60] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 198.409449][ T60] Bluetooth: hci0: command 0x2016 tx timeout [ 198.628318][ T5923] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 198.802153][ T5923] usb 4-1: Using ep0 maxpacket: 32 [ 198.808011][ T5923] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 198.808040][ T5923] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.808062][ T5923] usb 4-1: Product: syz [ 198.808077][ T5923] usb 4-1: Manufacturer: syz [ 198.808093][ T5923] usb 4-1: SerialNumber: syz [ 198.864248][ T5923] usb 4-1: config 0 descriptor?? [ 198.895153][ T5923] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 198.895262][ T5923] dvb-usb: bulk message failed: -22 (4/0) [ 198.895279][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 198.895924][ T5923] dvb-usb: bulk message failed: -22 (5/0) [ 198.895940][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 198.962284][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 198.963144][ T5923] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 198.963203][ T5923] usb 4-1: media controller created [ 199.004335][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 199.040397][ T5923] usb 4-1: selecting invalid altsetting 3 [ 199.040418][ T5923] ttusb2: set interface to alts=3 failed [ 199.114998][ T5923] DVB: Unable to find symbol tda10086_attach() [ 199.115013][ T5923] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 199.115902][ T5923] dvb-usb: bulk message failed: -22 (4/0) [ 199.115920][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 199.116040][ T5923] dvb-usb: bulk message failed: -22 (5/0) [ 199.116054][ T5923] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 199.116118][ T5923] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 199.199564][ T5923] usb 4-1: USB disconnect, device number 50 [ 199.250396][ T5923] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 200.306639][ T8057] binder_alloc: 8056: binder_alloc_buf, no vma [ 200.469455][ T32] usb 2-1: USB disconnect, device number 42 [ 200.928322][ T32] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 201.078274][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 201.086911][ T32] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 201.086937][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.086956][ T32] usb 2-1: Product: syz [ 201.086970][ T32] usb 2-1: Manufacturer: syz [ 201.086984][ T32] usb 2-1: SerialNumber: syz [ 201.095595][ T32] usb 2-1: config 0 descriptor?? [ 201.107965][ T32] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 201.108059][ T32] dvb-usb: bulk message failed: -22 (4/0) [ 201.108073][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.108721][ T32] dvb-usb: bulk message failed: -22 (5/0) [ 201.108738][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.130066][ T32] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 201.131073][ T32] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 201.131130][ T32] usb 2-1: media controller created [ 201.151919][ T32] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 201.216381][ T32] usb 2-1: selecting invalid altsetting 3 [ 201.216400][ T32] ttusb2: set interface to alts=3 failed [ 201.218696][ T4357] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.274008][ T32] DVB: Unable to find symbol tda10086_attach() [ 201.274017][ T32] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 201.275258][ T32] dvb-usb: bulk message failed: -22 (4/0) [ 201.275269][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.275333][ T32] dvb-usb: bulk message failed: -22 (5/0) [ 201.275340][ T32] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 201.275374][ T32] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 201.391330][ T32] usb 2-1: USB disconnect, device number 43 [ 201.545326][ T32] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 201.683868][ T8086] binder_alloc: 8085: binder_alloc_buf, no vma [ 202.326529][ T8092] input: syz1 as /devices/virtual/input/input21 [ 202.331840][ T5820] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 202.332150][ T5820] Bluetooth: hci0: command 0x2016 tx timeout [ 202.663830][ T8115] FAULT_INJECTION: forcing a failure. [ 202.663830][ T8115] name failslab, interval 1, probability 0, space 0, times 0 [ 202.663852][ T8115] CPU: 1 UID: 0 PID: 8115 Comm: syz.2.710 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 202.663867][ T8115] Tainted: [L]=SOFTLOCKUP [ 202.663872][ T8115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 202.663878][ T8115] Call Trace: [ 202.663882][ T8115] [ 202.663887][ T8115] dump_stack_lvl+0xe8/0x150 [ 202.663903][ T8115] should_fail_ex+0x46b/0x600 [ 202.663918][ T8115] should_failslab+0xa8/0x100 [ 202.663934][ T8115] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 202.663951][ T8115] ? kobject_set_name_vargs+0x61/0x110 [ 202.663970][ T8115] kvasprintf+0xeb/0x1a0 [ 202.663986][ T8115] ? __pfx_kvasprintf+0x10/0x10 [ 202.663998][ T8115] ? rcu_is_watching+0x15/0xb0 [ 202.664014][ T8115] ? kfree+0x4d/0x6c0 [ 202.664027][ T8115] ? kvasprintf_const+0xe1/0x240 [ 202.664041][ T8115] kobject_set_name_vargs+0x61/0x110 [ 202.664059][ T8115] dev_set_name+0xe2/0x140 [ 202.664079][ T8115] ? __pfx_dev_set_name+0x10/0x10 [ 202.664094][ T8115] ? __init_waitqueue_head+0xae/0x160 [ 202.664109][ T8115] ? device_initialize+0x282/0x470 [ 202.664122][ T8115] iommufd_test+0x244a/0x6160 [ 202.664138][ T8115] ? __lock_acquire+0x6b5/0x2cf0 [ 202.664151][ T8115] ? __pfx_iommufd_test+0x10/0x10 [ 202.664165][ T8115] ? tomoyo_path_number_perm+0x219/0x630 [ 202.664182][ T8115] ? tomoyo_path_number_perm+0x219/0x630 [ 202.664200][ T8115] ? __might_fault+0xaf/0x130 [ 202.664215][ T8115] ? __might_fault+0xaf/0x130 [ 202.664238][ T8115] iommufd_fops_ioctl+0x4b8/0x5d0 [ 202.664253][ T8115] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 202.664268][ T8115] ? __fget_files+0x2a/0x420 [ 202.664283][ T8115] ? __fget_files+0x2a/0x420 [ 202.664296][ T8115] ? bpf_lsm_file_ioctl+0x9/0x20 [ 202.664308][ T8115] ? __pfx_iommufd_fops_ioctl+0x10/0x10 [ 202.664321][ T8115] __se_sys_ioctl+0xff/0x170 [ 202.664336][ T8115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.664348][ T8115] do_syscall_64+0x15f/0xf80 [ 202.664361][ T8115] ? trace_irq_disable+0x3b/0x140 [ 202.664373][ T8115] ? clear_bhb_loop+0x40/0x90 [ 202.664386][ T8115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.664396][ T8115] RIP: 0033:0x7f4f84bec819 [ 202.664407][ T8115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.664416][ T8115] RSP: 002b:00007f4f82e3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 202.664428][ T8115] RAX: ffffffffffffffda RBX: 00007f4f84e65fa0 RCX: 00007f4f84bec819 [ 202.664436][ T8115] RDX: 0000200000000740 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 202.664443][ T8115] RBP: 00007f4f82e3e090 R08: 0000000000000000 R09: 0000000000000000 [ 202.664449][ T8115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.664455][ T8115] R13: 00007f4f84e66038 R14: 00007f4f84e65fa0 R15: 00007fffe0da8db8 [ 202.664470][ T8115] [ 203.450111][ T43] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 203.473257][ T8138] [ 203.473268][ T8138] ====================================================== [ 203.473275][ T8138] WARNING: possible circular locking dependency detected [ 203.473290][ T8138] syzkaller #0 Tainted: G L [ 203.473301][ T8138] ------------------------------------------------------ [ 203.473308][ T8138] syz.3.719/8138 is trying to acquire lock: [ 203.473317][ T8138] ffff88805d9a5930 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x104/0xda0 [ 203.473372][ T8138] [ 203.473372][ T8138] but task is already holding lock: [ 203.473378][ T8138] ffff88805d9a5ed8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 203.473421][ T8138] [ 203.473421][ T8138] which lock already depends on the new lock. [ 203.473421][ T8138] [ 203.473428][ T8138] [ 203.473428][ T8138] the existing dependency chain (in reverse order) is: [ 203.473434][ T8138] [ 203.473434][ T8138] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 203.473463][ T8138] lock_sock_nested+0x41/0x130 [ 203.473485][ T8138] smc_listen_out+0x109/0x3e0 [ 203.473506][ T8138] process_scheduled_works+0xb68/0x1910 [ 203.473522][ T8138] worker_thread+0xa90/0x1040 [ 203.473536][ T8138] kthread+0x388/0x470 [ 203.473554][ T8138] ret_from_fork+0x514/0xb70 [ 203.473569][ T8138] ret_from_fork_asm+0x1a/0x30 [ 203.473586][ T8138] [ 203.473586][ T8138] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 203.473610][ T8138] __lock_acquire+0x15a5/0x2cf0 [ 203.473631][ T8138] lock_acquire+0x106/0x350 [ 203.473649][ T8138] __flush_work+0x6df/0xda0 [ 203.473667][ T8138] __cancel_work_sync+0xbe/0x110 [ 203.473690][ T8138] smc_clcsock_release+0x60/0xf0 [ 203.473712][ T8138] __smc_release+0x6a0/0x810 [ 203.473726][ T8138] smc_close_non_accepted+0xd5/0x1f0 [ 203.473744][ T8138] smc_close_active+0xb9b/0xf40 [ 203.473765][ T8138] __smc_release+0xa0/0x810 [ 203.473780][ T8138] smc_release+0x2eb/0x5a0 [ 203.473795][ T8138] sock_close+0xc3/0x240 [ 203.473813][ T8138] __fput+0x461/0xa70 [ 203.473831][ T8138] task_work_run+0x1d9/0x270 [ 203.473853][ T8138] exit_to_user_mode_loop+0xed/0x480 [ 203.473873][ T8138] do_syscall_64+0x33e/0xf80 [ 203.473894][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.473911][ T8138] [ 203.473911][ T8138] other info that might help us debug this: [ 203.473911][ T8138] [ 203.473918][ T8138] Possible unsafe locking scenario: [ 203.473918][ T8138] [ 203.473924][ T8138] CPU0 CPU1 [ 203.473929][ T8138] ---- ---- [ 203.473935][ T8138] lock(sk_lock-AF_SMC/1); [ 203.473952][ T8138] lock((work_completion)(&new_smc->smc_listen_work)); [ 203.473973][ T8138] lock(sk_lock-AF_SMC/1); [ 203.473990][ T8138] lock((work_completion)(&new_smc->smc_listen_work)); [ 203.474003][ T8138] [ 203.474003][ T8138] *** DEADLOCK *** [ 203.474003][ T8138] [ 203.474008][ T8138] 3 locks held by syz.3.719/8138: [ 203.474019][ T8138] #0: ffff88803fb92478 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 203.474067][ T8138] #1: ffff88805d9a5ed8 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x5a0 [ 203.474112][ T8138] #2: ffffffff8e3c8100 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x104/0xda0 [ 203.474156][ T8138] [ 203.474156][ T8138] stack backtrace: [ 203.474168][ T8138] CPU: 0 UID: 0 PID: 8138 Comm: syz.3.719 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 203.474193][ T8138] Tainted: [L]=SOFTLOCKUP [ 203.474200][ T8138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 203.474210][ T8138] Call Trace: [ 203.474217][ T8138] [ 203.474225][ T8138] dump_stack_lvl+0xe8/0x150 [ 203.474245][ T8138] print_circular_bug+0x2e1/0x300 [ 203.474273][ T8138] check_noncircular+0x12e/0x150 [ 203.474301][ T8138] __lock_acquire+0x15a5/0x2cf0 [ 203.474327][ T8138] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.474351][ T8138] ? __flush_work+0x104/0xda0 [ 203.474370][ T8138] lock_acquire+0x106/0x350 [ 203.474391][ T8138] ? __flush_work+0x104/0xda0 [ 203.474415][ T8138] ? __flush_work+0x104/0xda0 [ 203.474435][ T8138] __flush_work+0x6df/0xda0 [ 203.474454][ T8138] ? __flush_work+0x104/0xda0 [ 203.474473][ T8138] ? __flush_work+0x104/0xda0 [ 203.474494][ T8138] ? __pfx___flush_work+0x10/0x10 [ 203.474515][ T8138] ? __pfx_wq_barrier_func+0x10/0x10 [ 203.474540][ T8138] ? __cancel_work_sync+0x5c/0x110 [ 203.474563][ T8138] __cancel_work_sync+0xbe/0x110 [ 203.474586][ T8138] smc_clcsock_release+0x60/0xf0 [ 203.474610][ T8138] __smc_release+0x6a0/0x810 [ 203.474627][ T8138] ? lockdep_hardirqs_on+0x7a/0x110 [ 203.474650][ T8138] smc_close_non_accepted+0xd5/0x1f0 [ 203.474670][ T8138] smc_close_active+0xb9b/0xf40 [ 203.474692][ T8138] ? smc_close_active+0x420/0xf40 [ 203.474713][ T8138] ? __pfx_sock_def_readable+0x10/0x10 [ 203.474736][ T8138] __smc_release+0xa0/0x810 [ 203.474753][ T8138] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 203.474773][ T8138] smc_release+0x2eb/0x5a0 [ 203.474792][ T8138] sock_close+0xc3/0x240 [ 203.474813][ T8138] ? __pfx_sock_close+0x10/0x10 [ 203.474833][ T8138] __fput+0x461/0xa70 [ 203.474856][ T8138] task_work_run+0x1d9/0x270 [ 203.474881][ T8138] ? __pfx_task_work_run+0x10/0x10 [ 203.474907][ T8138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.474926][ T8138] exit_to_user_mode_loop+0xed/0x480 [ 203.474947][ T8138] ? rcu_is_watching+0x15/0xb0 [ 203.474979][ T8138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.474998][ T8138] do_syscall_64+0x33e/0xf80 [ 203.475020][ T8138] ? trace_irq_disable+0x3b/0x140 [ 203.475040][ T8138] ? clear_bhb_loop+0x40/0x90 [ 203.475061][ T8138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.475079][ T8138] RIP: 0033:0x7fe1afd5c819 [ 203.475095][ T8138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.475111][ T8138] RSP: 002b:00007fffe76ed398 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 203.475130][ T8138] RAX: 0000000000000000 RBX: 00007fe1affd7da0 RCX: 00007fe1afd5c819 [ 203.475143][ T8138] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 203.475154][ T8138] RBP: 00007fe1affd7da0 R08: 00007fe1affd6038 R09: 0000000000000000 [ 203.475167][ T8138] R10: 00000000003ffd4c R11: 0000000000000246 R12: 0000000000031c90 [ 203.475179][ T8138] R13: 00007fe1affd5fac R14: 00000000000319b8 R15: 00007fffe76ed4a0 [ 203.475199][ T8138] [ 203.598839][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 203.601864][ T43] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 203.601890][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.601909][ T43] usb 2-1: Product: syz [ 203.601922][ T43] usb 2-1: Manufacturer: syz [ 203.601936][ T43] usb 2-1: SerialNumber: syz [ 203.604873][ T43] usb 2-1: config 0 descriptor?? [ 203.613081][ T43] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 203.613137][ T43] dvb-usb: bulk message failed: -22 (4/0) [ 203.613151][ T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 203.613215][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 203.613228][ T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 203.617166][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 203.618399][ T43] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 203.618435][ T43] usb 2-1: media controller created [ 203.626875][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.635667][ T43] usb 2-1: selecting invalid altsetting 3 [ 203.635684][ T43] ttusb2: set interface to alts=3 failed [ 203.661307][ T43] DVB: Unable to find symbol tda10086_attach() [ 203.661319][ T43] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 203.661907][ T43] dvb-usb: bulk message failed: -22 (4/0) [ 203.661922][ T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 203.661989][ T43] dvb-usb: bulk message failed: -22 (5/0) [ 203.662001][ T43] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 203.662038][ T43] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 203.778229][ T32] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 203.813701][ T43] usb 2-1: USB disconnect, device number 44 [ 203.834930][ T43] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 203.930092][ T32] usb 3-1: Using ep0 maxpacket: 16 [ 203.936404][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.936442][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 203.936464][ T32] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 203.937728][ T32] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 203.937753][ T32] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 203.937771][ T32] usb 3-1: Manufacturer: syz [ 203.946191][ T32] usb 3-1: config 0 descriptor?? [ 204.151725][ T32] usb 3-1: USB disconnect, device number 45