last executing test programs: 8.135528839s ago: executing program 3 (id=1350): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25030000004c00018008000600050000001400040000000000000000000000ffffe00000011400040000000000"], 0x60}}, 0x40) 7.538535799s ago: executing program 3 (id=1354): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x800) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0401220c"], 0x7) 7.345048348s ago: executing program 3 (id=1356): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000640)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$lock(r3, 0x24, &(0x7f0000000000)={0x0, 0x1, 0x7fffffffffffffff, 0x9, r4}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102e0f71e100b800008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x51}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.980775447s ago: executing program 3 (id=1360): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="4c0000001200ff09ff3a150099a283ff04b8008000f0ffff0000000600401500240036001fc411a0b598bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab14e39ba9bf6c4387ea1b", 0x4c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5808, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xb9, @local, 0x6, 0x2}, 0x20) mount$bind(0x0, &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x2, @remote, 0x3}, 0x1c) 6.820147839s ago: executing program 3 (id=1362): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25030000004c00018008000600050000001400040000000000000000000000ffffe00000011400040000000000"], 0x60}}, 0x40) 6.105913753s ago: executing program 0 (id=1366): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x361, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0xc, 0x65, 0x33, 0x40, 0x106c, 0xa2de, 0x1c29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34f, 0x2, 0x5, 0x8, 0x20, 0x3, [{{0x9, 0x4, 0x32, 0xf, 0x2, 0xff, 0xfe, 0xff, 0x89, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0xbc}, [@feature_unit={0xb, 0x24, 0x6, 0x4, 0x4, 0x2, [0xc, 0x8], 0x7}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x6, 'r'}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x3, 0x6, 0x39fa, 0x8a, 0x55}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x6, 0x5, 0x1ff, 0xed, 0xf9}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x4, "7c49051e"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x4, 0x5, "6a856a"}]}], [{{0x9, 0x5, 0x0, 0x3, 0x10, 0x6, 0x32, 0x2}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x0, 0x7, 0xf}}]}}, {{0x9, 0x4, 0xd9, 0x3, 0xb, 0xff, 0xda, 0x13, 0x7, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2b, 0x3, 0x4, 0xa, "f5a9b3"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x27, 0xe, "86"}]}], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x2, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xfff3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x9, 0x89}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x8, 0x6, 0x2}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0xa, 0xfd, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x8}]}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0xa, 0x5, 0x4, [@generic={0xf8, 0x1, "b5b3842c5974cb6db504b9ed0fe6cfec8501766f5a427017e948904f6518d3aab5c13983785a8c914dc32ce6977569b38f34007c194d380a76ea5aee22d1d33d9c652d3082a2605c38dde48974ccb54998a0d8f2293c57e10cdb72219e41fb1fb786399a5fcc9f3d32cfc51fb1f5449825c8fa8507b2ba7fd05116dbaa34a9a1c0930fb5d5cfb8dd50c9064a5579d714e0bd40d514c58715fdc8b521181b61f39542313189c937667b16e72d5d6e767b2e3da313b4fed29c5517c4784522856be0fa425bf0771b00ccc53307952d15799b56ce11bfe0a7d204337bc08c6894208940efa837be538fe8dec9b33d8ecac44a7e26b91ce3"}, @generic={0xdc, 0xd, "9b867f2c3711dbdfb196988dffeecd7732119c5cbc52c6a89ce757356a60aebe3477c294458eaefc5b158a78d9dc98488114f9446edb79210eae083bb80869d08f06e4e8e8b2aaccf9daa37703e00e09fd19ed1af8b4e1d9f192e93e699fd4fc8f70c5a00c3b63c57d29e04c601bf01b81739fdf126d7b2c89cf34f8978b9e1b3d92f04f4c09e0715fd437f6be8cee6a894d53b9368ce7c352625e4ecb60bcd270783e41754064a1e81c4360122e508fc4bf9ba33c99dae44275773c7bef376595a51d59ce1b84302e92f172165f9b408de910c0973b7acdda90"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0xff, 0x0, 0x6, [@generic={0x73, 0x22, "ae1303a2e02615063cef27f0c91fb489a88565cb3626d89d258c36e34694c27fdc34f693753df73eada79325f69905d0c7ad1bafb5e6d8895f21037c263d2269bab4b2d2dbdc1bd678ba3ff9ced43646b275878e120b295b7d23e3d3f1097bf66f92b3cd71475228ad46a697a22b7885a4"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x8, 0x9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xbb, 0x1000}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x3, 0x6, 0xf}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x2, 0x2, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x9, 0x3, 0xfe, [@generic={0x3, 0x2e, '\r'}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x0, 0x10, 0x10, 0x8}, 0xba, &(0x7f0000000040)={0x5, 0xf, 0xba, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xb, 0x79, 0x250}, @generic={0xa1, 0x10, 0x1e, "d7f228812e1089c40dfbc5949edc0202d937b91baca9b7c9be63d9ea67df4b4d350eb6d7bf7ba2b4dbacd6b6c6124b6a48ff900eb3b5afa275314ff31e4cc372f3ea5bdc953fac35cb9121db09c8a8e2ac3bbde1e0a925529865fbe6634257d172cdf0be4d5a5842b9c7ef49566cdcc8fa48220eef0aba20be472d13e7f5a2953d2b1d913507b3ad5d315d95087925f90d780168a22307c46c2af5ec6277"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x80, 0x2}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x44f}}, {0x9c, &(0x7f0000000a80)=@string={0x9c, 0x3, "2f6579f1699802c0a9cf05f0d4fbeaec35172086bb2f415eb2ab0429efe5e9e90a9529c33720e0570e9b36ee14b4034fcd330a2846042ada9ec00c9542f701059660b3271f15a44d8102baa258ba957508d3a0e4d5cb618f8f531d85dc668e1d6db6efc369aa9b57be8a536616af94e781b0fb74179dc5c0d9fef35533c610553e69637d0ea90786fe5e78d8c872acf321675025d2531cb88cd0"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x457}}, {0xa9, &(0x7f0000000b80)=@string={0xa9, 0x3, "f227bce30ac184c6dcb74c0bc90217efd5dfd51f76d7c202d37ad983f2ffd34245b6f06cdca551e7d44b5164267e940a81ba57a74228aeeae418f97bcefb7befc75d8f6f778f92944001a6d1b1beca84455f79e52fb7ba404ed40415a82188b276459c64553f8e56a44faff4c155ddd3fb1d0949b6a025078c2c4a2ae5d90f3453a87ceb9031503719c3f54f3ec852057866d43122740f32536a45b4a5421e8ea513bcf1ee7932"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x40b}}]}) 6.014249664s ago: executing program 3 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000f50a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) 5.738824144s ago: executing program 32 (id=1367): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000f50a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) 3.01519798s ago: executing program 0 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f0000000040)=""/113, 0x71}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/67, 0x43}], 0xa, 0x0, 0x8200}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x8, 0x0, 0x0) 1.894635224s ago: executing program 2 (id=1381): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x800) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0401220c"], 0x7) 1.785041783s ago: executing program 0 (id=1383): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r1, 0x4, 0x1, '('}, 0x9) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast1, 0x1, 0x2, 0x5, 0x5, 0x3, 0x7}, &(0x7f00000000c0)=0x20) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7d4a}, 0x18, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003a80)=ANY=[@ANYBLOB="883800003f000701feffffff02000000017c00000400f6000c00018006000600800a000064380280603819"], 0x3888}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f0000000000)={0x210a, r2}, 0x0) syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000008ac05420340000102030109022400010102609e0904000101030102fc0921800300012236040905810340004d0701"], 0x0) 1.680364557s ago: executing program 2 (id=1384): r0 = syz_usb_connect(0x5, 0x207, &(0x7f0000009a00)=ANY=[@ANYBLOB="12011003a9372540f30c1010db2601"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x361, &(0x7f0000000680)={{0x12, 0x1, 0x300, 0xc, 0x65, 0x33, 0x40, 0x106c, 0xa2de, 0x1c29, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x34f, 0x2, 0x5, 0x8, 0x20, 0x3, [{{0x9, 0x4, 0x32, 0xf, 0x2, 0xff, 0xfe, 0xff, 0x89, [@uac_control={{0xa, 0x24, 0x1, 0x4, 0xbc}, [@feature_unit={0xb, 0x24, 0x6, 0x4, 0x4, 0x2, [0xc, 0x8], 0x7}, @mixer_unit={0x6, 0x24, 0x4, 0x2, 0x6, 'r'}, @input_terminal={0xc, 0x24, 0x2, 0x3, 0x202, 0x3, 0x6, 0x39fa, 0x8a, 0x55}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x203, 0x6, 0x5, 0x1ff, 0xed, 0xf9}, @mixer_unit={0x9, 0x24, 0x4, 0x5, 0x4, "7c49051e"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x4, 0x5, "6a856a"}]}], [{{0x9, 0x5, 0x0, 0x3, 0x10, 0x6, 0x32, 0x2}}, {{0x9, 0x5, 0x5, 0xc, 0x200, 0x0, 0x7, 0xf}}]}}, {{0x9, 0x4, 0xd9, 0x3, 0xb, 0xff, 0xda, 0x13, 0x7, [@uac_as={[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x2b, 0x3, 0x4, 0xa, "f5a9b3"}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x9, 0x4, 0x27, 0xe, "86"}]}], [{{0x9, 0x5, 0xc, 0x0, 0x10, 0x2, 0x2, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x40}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x3, 0xfff3}]}}, {{0x9, 0x5, 0x0, 0x0, 0x20, 0x9, 0x89}}, {{0x9, 0x5, 0xb, 0x0, 0x8, 0x8, 0x6, 0x2}}, {{0x9, 0x5, 0x5, 0x4, 0x8, 0xa, 0xfd, 0x3}}, {{0x9, 0x5, 0x1, 0x0, 0x200, 0x1, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x2, 0x8}]}}, {{0x9, 0x5, 0x8, 0x8, 0x40, 0xa, 0x5, 0x4, [@generic={0xf8, 0x1, "b5b3842c5974cb6db504b9ed0fe6cfec8501766f5a427017e948904f6518d3aab5c13983785a8c914dc32ce6977569b38f34007c194d380a76ea5aee22d1d33d9c652d3082a2605c38dde48974ccb54998a0d8f2293c57e10cdb72219e41fb1fb786399a5fcc9f3d32cfc51fb1f5449825c8fa8507b2ba7fd05116dbaa34a9a1c0930fb5d5cfb8dd50c9064a5579d714e0bd40d514c58715fdc8b521181b61f39542313189c937667b16e72d5d6e767b2e3da313b4fed29c5517c4784522856be0fa425bf0771b00ccc53307952d15799b56ce11bfe0a7d204337bc08c6894208940efa837be538fe8dec9b33d8ecac44a7e26b91ce3"}, @generic={0xdc, 0xd, "9b867f2c3711dbdfb196988dffeecd7732119c5cbc52c6a89ce757356a60aebe3477c294458eaefc5b158a78d9dc98488114f9446edb79210eae083bb80869d08f06e4e8e8b2aaccf9daa37703e00e09fd19ed1af8b4e1d9f192e93e699fd4fc8f70c5a00c3b63c57d29e04c601bf01b81739fdf126d7b2c89cf34f8978b9e1b3d92f04f4c09e0715fd437f6be8cee6a894d53b9368ce7c352625e4ecb60bcd270783e41754064a1e81c4360122e508fc4bf9ba33c99dae44275773c7bef376595a51d59ce1b84302e92f172165f9b408de910c0973b7acdda90"}]}}, {{0x9, 0x5, 0xc, 0x8, 0x3ff, 0xff, 0x0, 0x6, [@generic={0x73, 0x22, "ae1303a2e02615063cef27f0c91fb489a88565cb3626d89d258c36e34694c27fdc34f693753df73eada79325f69905d0c7ad1bafb5e6d8895f21037c263d2269bab4b2d2dbdc1bd678ba3ff9ced43646b275878e120b295b7d23e3d3f1097bf66f92b3cd71475228ad46a697a22b7885a4"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x20, 0x8, 0x9, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xbb, 0x1000}]}}, {{0x9, 0x5, 0x5, 0x1, 0x3ff, 0x3, 0x6, 0xf}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x2, 0x2, 0x6}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x9, 0x3, 0xfe, [@generic={0x3, 0x2e, '\r'}]}}]}}]}}]}}, &(0x7f0000000c80)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x250, 0x5, 0x0, 0x10, 0x10, 0x8}, 0xba, &(0x7f0000000040)={0x5, 0xf, 0xba, 0x3, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x7, 0xb, 0x79, 0x250}, @generic={0xa1, 0x10, 0x1e, "d7f228812e1089c40dfbc5949edc0202d937b91baca9b7c9be63d9ea67df4b4d350eb6d7bf7ba2b4dbacd6b6c6124b6a48ff900eb3b5afa275314ff31e4cc372f3ea5bdc953fac35cb9121db09c8a8e2ac3bbde1e0a925529865fbe6634257d172cdf0be4d5a5842b9c7ef49566cdcc8fa48220eef0aba20be472d13e7f5a2953d2b1d913507b3ad5d315d95087925f90d780168a22307c46c2af5ec6277"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x4, 0x80, 0x2}]}, 0x7, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x424}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x340a}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x44f}}, {0x9c, &(0x7f0000000a80)=@string={0x9c, 0x3, "2f6579f1699802c0a9cf05f0d4fbeaec35172086bb2f415eb2ab0429efe5e9e90a9529c33720e0570e9b36ee14b4034fcd330a2846042ada9ec00c9542f701059660b3271f15a44d8102baa258ba957508d3a0e4d5cb618f8f531d85dc668e1d6db6efc369aa9b57be8a536616af94e781b0fb74179dc5c0d9fef35533c610553e69637d0ea90786fe5e78d8c872acf321675025d2531cb88cd0"}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x457}}, {0xa9, &(0x7f0000000b80)=@string={0xa9, 0x3, "f227bce30ac184c6dcb74c0bc90217efd5dfd51f76d7c202d37ad983f2ffd34245b6f06cdca551e7d44b5164267e940a81ba57a74228aeeae418f97bcefb7befc75d8f6f778f92944001a6d1b1beca84455f79e52fb7ba404ed40415a82188b276459c64553f8e56a44faff4c155ddd3fb1d0949b6a025078c2c4a2ae5d90f3453a87ceb9031503719c3f54f3ec852057866d43122740f32536a45b4a5421e8ea513bcf1ee7932"}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x40b}}]}) 1.531149875s ago: executing program 1 (id=1385): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25030000004c00018008000600050000001400040000000000000000000000ffffe00000011400040000000000"], 0x60}}, 0x40) 878.373078ms ago: executing program 1 (id=1386): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000400)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x19, {0xffffff80, 0xbbb, 0x7}}}}, 0x30}, 0x1, 0x0, 0x0, 0x4000100}, 0xc000) (fail_nth: 3) 746.255753ms ago: executing program 2 (id=1387): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03120000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c617374000000000400028008000340000001"], 0xe4}}, 0x20050800) 745.973895ms ago: executing program 1 (id=1388): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000004c0)={0x73622a85, 0x1101, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x68) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x1c, 0x0, &(0x7f0000000540)=[@free_buffer={0x40086303, r2}, @decrefs, @acquire], 0x0, 0x0, 0x0}) openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x200601, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) keyctl$join(0x1, &(0x7f0000000040)={'syz', 0x0}) r4 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SG_GET_VERSION_NUM(r4, 0x2284, &(0x7f0000000080)) r5 = dup3(r1, r0, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) r7 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b1848ea4b1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2871"], 0xe0}], 0x1}, 0x40040) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r6, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0xfffffffffffffffc}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 675.528724ms ago: executing program 2 (id=1389): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x421}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001a00)=""/4109, 0x100d}, {&(0x7f0000006080)=""/4085, 0xff5}, {&(0x7f0000000240)=""/112, 0x70}, {&(0x7f00000004c0)=""/68, 0x44}, {&(0x7f0000000100)=""/98, 0x62}, {&(0x7f00000003c0)=""/100, 0x64}, {&(0x7f00000007c0)=""/210, 0xd2}, {&(0x7f0000000440)=""/67, 0x43}], 0x9}, 0x4db}, {{0x0, 0x0, 0x0}, 0x8}], 0x7, 0x0, 0x0) 600.371094ms ago: executing program 1 (id=1390): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x114) (async, rerun: 32) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (rerun: 32) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x40002, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x6}}, './file0\x00'}) 512.998493ms ago: executing program 2 (id=1391): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)}], 0x1}, 0x800) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0401220c"], 0x7) 446.261999ms ago: executing program 1 (id=1392): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@dev, 0x9, r3}) sendmsg$802154_raw(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)="711f66f75d484e19874aa8041a5a23", 0xf}, 0x1, 0x0, 0x0, 0x20004040}, 0x4044014) recvmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x142, 0x0) 386.402704ms ago: executing program 2 (id=1393): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$uac1(0x0, 0xaa, 0x0, 0x0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000001c0)=ANY=[@ANYBLOB='`\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25030000004c00018008000600050000001400040000000000000000000000ffffe00000011400040000000000"], 0x60}}, 0x40) 343.804237ms ago: executing program 0 (id=1394): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], 0x6fd) 258.158489ms ago: executing program 1 (id=1395): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000024c0), r0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002500)={0x14, r1, 0xad0e41e9ad2f93a7, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000080}, 0x40000) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/110, 0x6e}, {&(0x7f0000000400)=""/238, 0xee}, {&(0x7f00000001c0)=""/34, 0x22}, {&(0x7f0000000180)=""/63, 0x3f}], 0x4, 0x7ff, 0x200) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x73, 0x9e, 0x61, 0x8, 0xfd9, 0x2c, 0x66b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0xd4, 0x40, 0x0, [{{0x9, 0x4, 0x65, 0x0, 0x0, 0xbe, 0x86, 0x6d, 0x1}}]}}]}}, 0x0) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x1fe, 0xfe, 0xe3, 0x6a, 0x10, 0x4b4, 0x931c, 0x2b4a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1, 0xd, 0x30, 0x6c, [{{0x9, 0x4, 0xdf, 0x6, 0x0, 0xd7, 0x2d, 0x27, 0x8}}]}}]}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$alg(r5, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18}, 0x4000484) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r5) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0x300, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4048859}, 0x10) 123.778709ms ago: executing program 0 (id=1396): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x300, 0x48, 0x0) 0s ago: executing program 0 (id=1397): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r1, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) writev(r0, &(0x7f0000002140)=[{&(0x7f0000002100)="11e30fc0b980167eb291e84fecadc29c6a77db71a704af", 0x17}], 0x1) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000002180), &(0x7f00000021c0)=0x14, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000002200)={'virt_wifi0\x00'}) r5 = openat$cgroup_procs(r0, &(0x7f0000002240)='tasks\x00', 0x2, 0x0) r6 = openat$cgroup_pressure(r0, &(0x7f0000002280)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f00000022c0)={'some', 0x20, 0x4, 0x20, 0xd7d8}, 0x2f) pipe2(&(0x7f0000002300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80080) r9 = syz_open_dev$sndpcmc(&(0x7f0000002340), 0x2, 0x20000) quotactl_fd$Q_SETQUOTA(r9, 0xffffffff80000801, r3, &(0x7f0000002380)={0x14ee0aad, 0x5, 0x1, 0x3, 0x9, 0x4, 0x1, 0xfffffffffffffff7, 0x7}) ioctl$HIDIOCSFLAG(r7, 0x4004480f, &(0x7f0000002400)=0x2) fcntl$setpipe(r0, 0x407, 0x8) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000002440)={{0x86cc, 0x1d}, 0x100, './file0\x00'}) splice(r5, &(0x7f0000002580)=0x3, r6, &(0x7f00000025c0)=0x4, 0x9, 0x8) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r10, 0x5608) fcntl$F_GET_FILE_RW_HINT(r9, 0x40d, &(0x7f0000002600)) r11 = geteuid() setreuid(r3, r11) sendmsg$rds(r8, &(0x7f0000002840)={&(0x7f0000002640)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10, &(0x7f0000002800)=[{&(0x7f0000002680)=""/211, 0xd3}, {&(0x7f0000002780)=""/73, 0x49}], 0x2, 0x0, 0x0, 0x20000080}, 0x4c090) r12 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000002880), 0x101000, 0x0) ioctl$SNDCTL_TMR_START(r12, 0x5402) openat$cgroup_pressure(r8, &(0x7f00000028c0)='memory.pressure\x00', 0x2, 0x0) write$binfmt_elf64(r7, &(0x7f0000002900)={{0x7f, 0x45, 0x4c, 0x46, 0x9, 0x8, 0x4, 0x7, 0x930, 0x2, 0x3e, 0x4, 0x29d, 0x40, 0x1b4, 0x2, 0x6, 0x38, 0x1, 0xfc, 0x7, 0x9e3}, [{0x60000000, 0x96e, 0x3, 0xfffffffffffff000, 0x2, 0x401, 0x3ff}], "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", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x1578) write$FUSE_BMAP(r7, &(0x7f0000003e80)={0x18, 0x0, r2, {0x1}}, 0x18) mount_setattr(r7, &(0x7f0000003ec0)='./file0\x00', 0x8100, &(0x7f0000003f00)={0x80, 0x0, 0x90000, {r7}}, 0x20) readv(r12, &(0x7f00000042c0)=[{&(0x7f0000003f40)=""/155, 0x9b}, {&(0x7f0000004000)=""/168, 0xa8}, {&(0x7f00000040c0)=""/75, 0x4b}, {&(0x7f0000004140)=""/86, 0x56}, {&(0x7f00000041c0)=""/63, 0x3f}, {&(0x7f0000004200)=""/179, 0xb3}], 0x6) kernel console output (not intermixed with test programs): -22 [ 152.313085][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.333344][ T7471] binder: 7466:7471 ioctl c0306201 200000000300 returned -22 [ 152.347008][ T7471] binder: BINDER_SET_CONTEXT_MGR already set [ 152.348199][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.359626][ T7471] binder: 7466:7471 ioctl 4018620d 200000000040 returned -16 [ 152.365209][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.373788][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.382666][ T7471] binder: 7466:7471 ioctl c0306201 200000000540 returned -14 [ 152.383803][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.402218][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.407632][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.413049][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.428593][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.433905][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.449892][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.458940][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.464253][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.469711][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.475006][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.485320][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.490624][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 152.498755][ T9] gspca_vc032x: Unknown sensor... [ 152.503950][ T9] vc032x 4-1:9.48: probe with driver vc032x failed with error -22 [ 152.555636][ T9] usb 4-1: USB disconnect, device number 36 [ 152.875893][ T7486] binder: 7484:7486 unknown command 0 [ 152.889424][ T7486] binder: 7484:7486 ioctl c0306201 200000000080 returned -22 [ 153.151146][ T7492] binder: 7491:7492 unknown command 0 [ 153.165743][ T7492] binder: 7491:7492 ioctl c0306201 200000000080 returned -22 [ 153.313521][ T7496] netlink: 624 bytes leftover after parsing attributes in process `syz.3.636'. [ 153.534522][ T7504] openvswitch: netlink: Key 8 has unexpected len 2 expected 40 [ 153.572812][ T7506] netlink: 48 bytes leftover after parsing attributes in process `syz.3.641'. [ 153.673410][ T7510] binder: 7508:7510 unknown command 0 [ 153.679645][ T7510] binder: 7508:7510 ioctl c0306201 200000000080 returned -22 [ 154.088088][ T24] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 154.247296][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 154.257884][ T24] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 154.269922][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 154.279419][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.287551][ T24] usb 3-1: Product: syz [ 154.291716][ T24] usb 3-1: Manufacturer: syz [ 154.296396][ T24] usb 3-1: SerialNumber: syz [ 154.308611][ T5925] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 154.469446][ T5925] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 154.478797][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.486858][ T5925] usb 4-1: Product: syz [ 154.491023][ T5925] usb 4-1: Manufacturer: syz [ 154.495827][ T5925] usb 4-1: SerialNumber: syz [ 154.511099][ T5925] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 154.542747][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 154.911704][ T7534] binder: 7533:7534 unknown command 0 [ 154.920688][ T7534] binder: 7533:7534 ioctl c0306201 200000000080 returned -22 [ 155.145280][ T24] usb 3-1: reset high-speed USB device number 32 using dummy_hcd [ 155.175084][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.185950][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.215984][ T1217] usb 4-1: USB disconnect, device number 37 [ 155.284679][ T7541] netlink: 'syz.0.657': attribute type 10 has an invalid length. [ 155.298541][ T7541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.318393][ T7541] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 155.327743][ T24] usb 3-1: device firmware changed [ 155.340128][ T24] usb 3-1: USB disconnect, device number 32 [ 155.383286][ T7542] binder: 7540:7542 unknown command 3176036 [ 155.392373][ T7542] binder: 7540:7542 ioctl c0306201 200000000080 returned -22 [ 155.495363][ T24] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 155.648353][ T24] usb 3-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 155.660894][ T24] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 155.675204][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.683295][ T24] usb 3-1: Product: я [ 155.687454][ T24] usb 3-1: Manufacturer: 㐊 [ 155.692065][ T24] usb 3-1: SerialNumber: 支顩쀂쾩ﯔ᜵蘠⾻幁ꮲ⤄锊쌩‷埠鬎됔伃㏍⠊ц삞锌ԁ悖➳ᔟ䶤ʁꊺ멘疕팈쯕轡厏蔝曜ᶎ뙭쏯ꩩ垛誾晓꼖낁瓻鴗샅ﻙ嗳옳唐椾絣ꤎ蘇廾狈朡═叒렜킌 [ 155.805533][ T9] usb 4-1: Service connection timeout for: 256 [ 155.811735][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 155.822005][ T9] ath9k_htc: Failed to initialize the device [ 155.837478][ T1217] usb 4-1: ath9k_htc: USB layer deinitialized [ 155.939987][ T7548] binder: 7547:7548 unknown command 0 [ 155.948602][ T7548] binder: 7547:7548 ioctl c0306201 200000000080 returned -22 [ 155.961212][ T7548] binder_alloc: 7547: binder_alloc_buf size 4120 failed, no address space [ 155.970306][ T7548] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 156.147901][ T7555] binder: 7554:7555 unknown command 0 [ 156.153396][ T7555] binder: 7554:7555 ioctl c0306201 200000000080 returned -22 [ 156.279274][ T7560] process 'syz.3.665' launched './file1' with NULL argv: empty string added [ 156.554707][ T7566] netlink: 48 bytes leftover after parsing attributes in process `syz.0.668'. [ 156.563882][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 156.716920][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 156.723790][ T24] usb 3-1: USB disconnect, device number 33 [ 156.736467][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 156.754967][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 156.774732][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 156.790305][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 156.799472][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.809418][ T9] usb 4-1: Product: syz [ 156.813666][ T9] usb 4-1: Manufacturer: syz [ 156.818726][ T9] usb 4-1: SerialNumber: syz [ 156.827890][ T9] usb 4-1: config 0 descriptor?? [ 156.895434][ T1919] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 157.024676][ T7580] binder: 7579:7580 unknown command 0 [ 157.030625][ T7580] binder: 7579:7580 ioctl c0306201 200000000080 returned -22 [ 157.042486][ T9] adutux 4-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 157.059880][ T1919] usb 1-1: config 0 interface 0 has no altsetting 0 [ 157.077180][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 157.084999][ T1919] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 157.107677][ T1919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.134431][ T7582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.675'. [ 157.144123][ T1919] usb 1-1: config 0 descriptor?? [ 157.147490][ T7582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.675'. [ 157.242871][ T7560] usb 4-1: Couldn't submit interrupt_out_urb -90 [ 157.252562][ T5918] usb 4-1: USB disconnect, device number 38 [ 157.265228][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 157.279418][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.290437][ T24] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 157.301701][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.312144][ T24] usb 3-1: config 0 descriptor?? [ 157.726755][ T24] usbhid 3-1:0.0: can't add hid device: -71 [ 157.745670][ T24] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 157.766596][ T24] usb 3-1: USB disconnect, device number 34 [ 158.005287][ T1217] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 158.157449][ T1217] usb 2-1: unable to get BOS descriptor or descriptor too short [ 158.166871][ T1217] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 158.171368][ T1919] video4linux radio48: keene_cmd_set failed (-71) [ 158.181454][ T1217] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 158.192710][ T1919] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 158.205283][ T1217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.210795][ T1919] usb 1-1: USB disconnect, device number 36 [ 158.213286][ T1217] usb 2-1: Product: syz [ 158.213303][ T1217] usb 2-1: Manufacturer: syz [ 158.213318][ T1217] usb 2-1: SerialNumber: syz [ 158.815457][ T9] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 158.899496][ T7631] binder: 7630:7631 unknown command 0 [ 158.904989][ T7631] binder: 7630:7631 ioctl c0306201 200000000080 returned -22 [ 158.976889][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 158.983890][ T9] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.986651][ T7635] binder: BINDER_SET_CONTEXT_MGR already set [ 158.998613][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 159.001102][ T7635] binder: 7634:7635 ioctl 4018620d 200000000040 returned -16 [ 159.009057][ T9] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 159.031090][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.048309][ T9] usb 3-1: config 0 descriptor?? [ 159.328549][ T1919] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 159.345336][ T1217] usb 2-1: reset high-speed USB device number 36 using dummy_hcd [ 159.461175][ T9] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 159.468850][ T9] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 159.476504][ T9] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 159.484300][ T9] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 159.491872][ T9] nzxt-smart2 0003:1E71:2009.0011: unknown main item tag 0x0 [ 159.502726][ T1217] usb 2-1: device firmware changed [ 159.505350][ T1919] usb 1-1: Using ep0 maxpacket: 32 [ 159.515554][ T9] nzxt-smart2 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 159.534289][ T1217] usb 2-1: USB disconnect, device number 36 [ 159.540913][ T1919] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.564477][ T1919] usb 1-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 159.593553][ T1919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.616910][ T1919] usb 1-1: config 0 descriptor?? [ 159.666421][ C0] usb 3-1: input irq status -75 received [ 159.685342][ T1217] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 159.850023][ T1217] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 159.863165][ T1217] usb 2-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 159.875889][ T7618] netlink: 40 bytes leftover after parsing attributes in process `syz.2.680'. [ 159.893952][ T9] usb 3-1: USB disconnect, device number 35 [ 159.908605][ T1217] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.923563][ T1217] usb 2-1: Product: я [ 159.932104][ T1217] usb 2-1: Manufacturer: 㐊 [ 159.939115][ T1217] usb 2-1: SerialNumber: 支顩쀂쾩ﯔ᜵蘠⾻幁ꮲ⤄锊쌩‷埠鬎됔伃㏍⠊ц삞锌ԁ悖➳ᔟ䶤ʁꊺ멘疕팈쯕轡厏蔝曜ᶎ뙭쏯ꩩ垛誾晓꼖낁瓻鴗샅ﻙ嗳옳唐椾絣ꤎ蘇廾狈朡═叒렜킌 [ 160.042776][ T1919] usbhid 1-1:0.0: can't add hid device: -71 [ 160.049302][ T1919] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 160.066052][ T1919] usb 1-1: USB disconnect, device number 37 [ 160.345325][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 160.495962][ T24] usb 4-1: too many configurations: 173, using maximum allowed: 8 [ 160.507488][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 160.515065][ T24] usb 4-1: can't read configurations, error -61 [ 160.561453][ T7653] binder: 7652:7653 unknown command 0 [ 160.567366][ T7653] binder: 7652:7653 ioctl c0306201 200000000080 returned -22 [ 160.624696][ T7655] binder: 7654:7655 unknown command 0 [ 160.630298][ T7655] binder: 7654:7655 ioctl c0306201 200000000080 returned -22 [ 160.633416][ T7657] binder: BINDER_SET_CONTEXT_MGR already set [ 160.647192][ T24] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 160.647706][ T7657] binder: 7656:7657 ioctl 4018620d 200000000040 returned -16 [ 160.806069][ T24] usb 4-1: too many configurations: 173, using maximum allowed: 8 [ 160.832066][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 160.856830][ T24] usb 4-1: can't read configurations, error -61 [ 160.877628][ T24] usb usb4-port1: attempt power cycle [ 160.891871][ T7664] netlink: 'syz.0.698': attribute type 1 has an invalid length. [ 160.972441][ T1217] usb 2-1: USB disconnect, device number 37 [ 161.027925][ T7670] netlink: 36 bytes leftover after parsing attributes in process `syz.2.701'. [ 161.162804][ T7677] binder: 7676:7677 unknown command 0 [ 161.169762][ T7677] binder: 7676:7677 ioctl c0306201 200000000080 returned -22 [ 161.219755][ T24] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 161.281512][ T24] usb 4-1: too many configurations: 173, using maximum allowed: 8 [ 161.294234][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 161.302391][ T24] usb 4-1: can't read configurations, error -61 [ 161.435724][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 161.467744][ T24] usb 4-1: too many configurations: 173, using maximum allowed: 8 [ 161.479603][ T7688] netlink: 'syz.2.709': attribute type 10 has an invalid length. [ 161.480692][ T24] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 161.496034][ T5911] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 161.498978][ T7688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.510139][ T24] usb 4-1: can't read configurations, error -61 [ 161.520441][ T24] usb usb4-port1: unable to enumerate USB device [ 161.522096][ T7688] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 161.606905][ T7688] binder: 7687:7688 unknown command 3176036 [ 161.613027][ T7688] binder: 7687:7688 ioctl c0306201 200000000080 returned -22 [ 161.655294][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 161.667337][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.678395][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 161.688243][ T5911] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 161.697456][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.708220][ T5911] usb 2-1: config 0 descriptor?? [ 161.925241][ T1217] usb 1-1: new low-speed USB device number 38 using dummy_hcd [ 162.075240][ T1217] usb 1-1: Invalid ep0 maxpacket: 16 [ 162.133154][ T5911] savu 0003:1E7D:2D5A.0012: ignoring exceeding usage max [ 162.143624][ T5911] savu 0003:1E7D:2D5A.0012: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 162.208148][ T1217] usb 1-1: new low-speed USB device number 39 using dummy_hcd [ 162.365295][ T1217] usb 1-1: Invalid ep0 maxpacket: 16 [ 162.371157][ T1217] usb usb1-port1: attempt power cycle [ 162.386537][ T5925] usb 2-1: USB disconnect, device number 38 [ 162.726858][ T1217] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 162.755758][ T1217] usb 1-1: Invalid ep0 maxpacket: 16 [ 162.885503][ T1217] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 162.906709][ T1217] usb 1-1: Invalid ep0 maxpacket: 16 [ 162.920598][ T1217] usb usb1-port1: unable to enumerate USB device [ 163.004949][ T7710] binder: 7706:7710 unknown command 0 [ 163.004972][ T7710] binder: 7706:7710 ioctl c0306201 200000000080 returned -22 [ 163.111766][ T7713] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 163.527557][ T7736] binder: 7734:7736 unknown command 0 [ 163.532981][ T7736] binder: 7734:7736 ioctl c0306201 200000000080 returned -22 [ 163.772348][ T7749] binder: 7748:7749 unknown command 0 [ 163.777922][ T7749] binder: 7748:7749 ioctl c0306201 200000000080 returned -22 [ 163.787692][ T7749] binder_alloc: 7748: binder_alloc_buf size 4120 failed, no address space [ 163.797232][ T7749] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 163.857346][ T1919] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 163.934689][ T7755] capability: warning: `syz.1.737' uses 32-bit capabilities (legacy support in use) [ 163.952180][ T7755] program syz.1.737 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.030653][ T1919] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 164.043890][ T1919] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.058260][ T1919] usb 3-1: config 0 has no interface number 0 [ 164.064554][ T1919] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 164.072129][ T7758] binder: 7757:7758 unknown command 0 [ 164.074491][ T1919] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 0 [ 164.090197][ T1919] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 164.097577][ T7758] binder: 7757:7758 ioctl c0306201 200000000080 returned -22 [ 164.106252][ T1919] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 164.120226][ T1919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.128622][ T1919] usb 3-1: Product: syz [ 164.133031][ T1919] usb 3-1: Manufacturer: syz [ 164.138105][ T1919] usb 3-1: SerialNumber: syz [ 164.146753][ T1919] usb 3-1: config 0 descriptor?? [ 164.154565][ T1919] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 164.176261][ T1919] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 164.195829][ T1919] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 164.260762][ T7755] netlink: 'syz.1.737': attribute type 11 has an invalid length. [ 164.269559][ T7755] netlink: 244 bytes leftover after parsing attributes in process `syz.1.737'. [ 164.412033][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.422164][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.431724][ T7762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.442078][ T7762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.525218][ T1919] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 164.675313][ T1919] usb 2-1: Using ep0 maxpacket: 32 [ 164.684382][ T1919] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 164.694979][ T1919] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 164.703867][ T1919] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 164.714036][ T1919] usb 2-1: config 1 has no interface number 0 [ 164.723340][ T1919] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 164.748709][ T1919] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 164.776503][ T1919] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 164.796495][ T1919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.826764][ T1919] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 165.021089][ T7782] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.021801][ T1919] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 165.453484][ T5911] usb 2-1: USB disconnect, device number 39 [ 165.469737][ T5911] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 165.515376][ T1919] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 165.675232][ T1919] usb 4-1: device descriptor read/64, error -71 [ 165.917344][ T1919] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 166.056003][ T1919] usb 4-1: device descriptor read/64, error -71 [ 166.177917][ T1919] usb usb4-port1: attempt power cycle [ 166.260009][ T7807] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 166.285392][ T24] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 166.368463][ T7810] netlink: 68 bytes leftover after parsing attributes in process `syz.1.758'. [ 166.449073][ T24] usb 1-1: unable to get BOS descriptor or descriptor too short [ 166.460124][ T24] usb 1-1: config 2 has an invalid interface number: 254 but max is 0 [ 166.468712][ T24] usb 1-1: config 2 has no interface number 0 [ 166.479276][ T24] usb 1-1: New USB device found, idVendor=04cb, idProduct=0109, bcdDevice=c1.88 [ 166.488588][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.497121][ T24] usb 1-1: Product: syz [ 166.501678][ T24] usb 1-1: Manufacturer: syz [ 166.506637][ T24] usb 1-1: SerialNumber: syz [ 166.515436][ T1919] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 166.548635][ T1919] usb 4-1: device descriptor read/8, error -71 [ 166.633973][ T7816] tipc: Failed to remove unknown binding: 66,1,1/0:3779645955/3779645957 [ 166.643177][ T7816] tipc: Failed to remove unknown binding: 66,1,1/0:3779645955/3779645957 [ 166.661174][ T5925] usb 3-1: USB disconnect, device number 36 [ 166.688608][ T5925] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 166.700844][ T5925] cyberjack 3-1:0.69: device disconnected [ 166.738796][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.748736][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.770207][ T24] gspca_main: finepix-2.14.0 probing 04cb:0109 [ 166.796125][ T1919] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 166.825694][ T24] usb 1-1: USB disconnect, device number 42 [ 166.858616][ T1919] usb 4-1: device descriptor read/8, error -71 [ 166.981108][ T1919] usb usb4-port1: unable to enumerate USB device [ 167.114727][ T7831] netlink: 68 bytes leftover after parsing attributes in process `syz.1.767'. [ 167.365299][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 167.465504][ T1919] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 167.517116][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 167.526531][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.541156][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 167.552076][ T24] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 167.562280][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.573783][ T24] usb 3-1: config 0 descriptor?? [ 167.616534][ T1919] usb 2-1: Using ep0 maxpacket: 16 [ 167.637647][ T1919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9 [ 167.650357][ T1919] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024 [ 167.661688][ T1919] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 167.674554][ T1919] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 167.683858][ T1919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.700693][ T1919] usb 2-1: config 0 descriptor?? [ 167.708303][ T7837] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 167.988850][ T24] kone 0003:1E7D:2CED.0013: unknown main item tag 0x0 [ 167.995974][ T24] kone 0003:1E7D:2CED.0013: unknown main item tag 0x0 [ 168.002917][ T24] kone 0003:1E7D:2CED.0013: unknown main item tag 0x0 [ 168.009860][ T24] kone 0003:1E7D:2CED.0013: unknown main item tag 0x0 [ 168.017910][ T24] kone 0003:1E7D:2CED.0013: unknown main item tag 0x0 [ 168.028354][ T24] kone 0003:1E7D:2CED.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 168.122825][ T1919] hid (null): unknown global tag 0xd [ 168.132859][ T1919] shield 0003:0955:7214.0014: unknown global tag 0xd [ 168.139684][ T1919] shield 0003:0955:7214.0014: item 0 0 1 13 parsing failed [ 168.147826][ T1919] shield 0003:0955:7214.0014: Parse failed [ 168.153731][ T1919] shield 0003:0955:7214.0014: probe with driver shield failed with error -22 [ 168.186251][ T24] kone 0003:1E7D:2CED.0013: couldn't init struct kone_device [ 168.194960][ T24] kone 0003:1E7D:2CED.0013: couldn't install mouse [ 168.204374][ T24] kone 0003:1E7D:2CED.0013: probe with driver kone failed with error -5 [ 168.220326][ T24] usb 3-1: USB disconnect, device number 37 [ 168.333761][ T5918] usb 2-1: USB disconnect, device number 40 [ 168.544002][ T7860] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.610813][ T7864] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 168.975802][ T7884] netlink: 48 bytes leftover after parsing attributes in process `syz.1.787'. [ 169.003259][ T7883] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.127466][ T24] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 169.170402][ T7892] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 169.315674][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 169.345997][ T24] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 169.385470][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 169.393704][ T24] usb 1-1: config 0 has no interface number 0 [ 169.395399][ T5925] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 169.401719][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 169.416784][ T24] usb 1-1: config 0 has no interface number 0 [ 169.424204][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 169.435392][ T24] usb 1-1: config 0 has no interface number 0 [ 169.442967][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 169.453751][ T24] usb 1-1: config 0 has no interface number 0 [ 169.461941][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 169.472290][ T24] usb 1-1: config 0 has no interface number 0 [ 169.483266][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 169.496367][ T24] usb 1-1: config 0 has no interface number 0 [ 169.503594][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 169.513245][ T24] usb 1-1: config 0 has no interface number 0 [ 169.522052][ T24] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 169.533662][ T24] usb 1-1: config 0 has no interface number 0 [ 169.543806][ T24] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 169.554833][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.555228][ T5925] usb 3-1: Using ep0 maxpacket: 32 [ 169.570527][ T24] usb 1-1: Product: syz [ 169.570668][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.586312][ T5925] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.587073][ T24] usb 1-1: Manufacturer: syz [ 169.596451][ T5925] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 169.610251][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 169.619530][ T5925] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.621794][ T24] usb 1-1: SerialNumber: syz [ 169.635426][ T24] usb 1-1: config 0 descriptor?? [ 169.650113][ T24] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 169.661095][ T5925] usb 3-1: config 0 descriptor?? [ 169.785374][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 169.796451][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9 [ 169.811322][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024 [ 169.823519][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 169.836572][ T9] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 169.845725][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.858038][ T24] etas_es58x 1-1:0.2: could not parse product info: '424242424242' [ 169.862734][ T9] usb 2-1: config 0 descriptor?? [ 169.872911][ T7900] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 170.097985][ T5925] kone 0003:1E7D:2CED.0015: unknown main item tag 0x0 [ 170.118650][ T5925] kone 0003:1E7D:2CED.0015: unknown main item tag 0x0 [ 170.138888][ T5925] kone 0003:1E7D:2CED.0015: unknown main item tag 0x0 [ 170.162673][ T5925] kone 0003:1E7D:2CED.0015: unknown main item tag 0x0 [ 170.180358][ T5925] kone 0003:1E7D:2CED.0015: unknown main item tag 0x0 [ 170.196181][ T5925] kone 0003:1E7D:2CED.0015: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.2-1/input0 [ 170.299060][ T9] hid (null): unknown global tag 0xd [ 170.307136][ T5925] kone 0003:1E7D:2CED.0015: couldn't init struct kone_device [ 170.314586][ T5925] kone 0003:1E7D:2CED.0015: couldn't install mouse [ 170.329086][ T9] shield 0003:0955:7214.0016: unknown global tag 0xd [ 170.348979][ T9] shield 0003:0955:7214.0016: item 0 0 1 13 parsing failed [ 170.362033][ T5925] kone 0003:1E7D:2CED.0015: probe with driver kone failed with error -5 [ 170.374534][ T9] shield 0003:0955:7214.0016: Parse failed [ 170.381822][ T7922] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.397653][ T9] shield 0003:0955:7214.0016: probe with driver shield failed with error -22 [ 170.411835][ T5925] usb 3-1: USB disconnect, device number 38 [ 170.518666][ T1919] usb 2-1: USB disconnect, device number 41 [ 170.670530][ T7932] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 170.755060][ C0] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0x0061. [ 170.766225][ C0] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 170.774210][ C0] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG [ 170.782600][ C0] etas_es58x 1-1:0.2: es58x_check_rx_urb: Expected sequence 0xFECA for start of frame but got 0xC7D8. [ 170.783015][ T5531] etas_es58x 1-1:0.2 can0: bit-timing not yet defined [ 170.793565][ C0] etas_es58x 1-1:0.2: es58x_split_urb_try_recovery: Recovery failed [ 170.793584][ C0] etas_es58x 1-1:0.2: es58x_split_urb() returned error -EBADMSG [ 171.019924][ C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 171.029128][ C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 171.038295][ C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 171.047437][ C0] etas_es58x 1-1:0.2 can0: es58x_write_bulk_callback: error -EPROTO [ 171.055483][ C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 171.055641][ T5531] etas_es58x 1-1:0.2 can0: es58x_open: Could not open the network device: -EINVAL [ 171.064643][ C0] etas_es58x 1-1:0.2: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 171.085668][ T5925] usb 1-1: USB disconnect, device number 43 [ 171.094929][ T5925] etas_es58x 1-1:0.2: Disconnecting syz syz [ 171.247557][ T7945] binder: 7944:7945 unknown command 0 [ 171.293513][ T7945] binder: 7944:7945 ioctl c0306201 200000000080 returned -22 [ 171.302551][ T7949] binder: BINDER_SET_CONTEXT_MGR already set [ 171.317877][ T7949] binder: 7944:7949 ioctl 4018620d 200000000040 returned -16 [ 171.366010][ T7951] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 171.533172][ T7958] netlink: 36 bytes leftover after parsing attributes in process `syz.3.811'. [ 171.738883][ T7968] netlink: 'syz.0.814': attribute type 17 has an invalid length. [ 171.761102][ T7970] FAULT_INJECTION: forcing a failure. [ 171.761102][ T7970] name failslab, interval 1, probability 0, space 0, times 0 [ 171.808034][ T7970] CPU: 0 UID: 0 PID: 7970 Comm: syz.3.816 Not tainted syzkaller #0 PREEMPT(full) [ 171.808061][ T7970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 171.808073][ T7970] Call Trace: [ 171.808081][ T7970] [ 171.808089][ T7970] dump_stack_lvl+0x189/0x250 [ 171.808114][ T7970] ? __pfx____ratelimit+0x10/0x10 [ 171.808142][ T7970] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.808161][ T7970] ? __pfx__printk+0x10/0x10 [ 171.808195][ T7970] ? __pfx___might_resched+0x10/0x10 [ 171.808222][ T7970] should_fail_ex+0x414/0x560 [ 171.808251][ T7970] should_failslab+0xa8/0x100 [ 171.808284][ T7970] __kmalloc_noprof+0xcb/0x7f0 [ 171.808302][ T7970] ? kfree+0x4d/0x6d0 [ 171.808317][ T7970] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 171.808353][ T7970] tomoyo_realpath_from_path+0xe3/0x5d0 [ 171.808384][ T7970] ? tomoyo_domain+0xd9/0x130 [ 171.808408][ T7970] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 171.808433][ T7970] tomoyo_path_number_perm+0x1e8/0x5a0 [ 171.808461][ T7970] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 171.808527][ T7970] ? __fget_files+0x2a/0x420 [ 171.808558][ T7970] ? __fget_files+0x3a0/0x420 [ 171.808582][ T7970] ? __fget_files+0x2a/0x420 [ 171.808611][ T7970] security_file_ioctl+0xcb/0x2d0 [ 171.808638][ T7970] __se_sys_ioctl+0x47/0x170 [ 171.808661][ T7970] do_syscall_64+0xfa/0xfa0 [ 171.808688][ T7970] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.808717][ T7970] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.808736][ T7970] ? clear_bhb_loop+0x60/0xb0 [ 171.808760][ T7970] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.808778][ T7970] RIP: 0033:0x7fc14c38eba9 [ 171.808796][ T7970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.808813][ T7970] RSP: 002b:00007fc14d304038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 171.808833][ T7970] RAX: ffffffffffffffda RBX: 00007fc14c5d5fa0 RCX: 00007fc14c38eba9 [ 171.808848][ T7970] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 171.808860][ T7970] RBP: 00007fc14d304090 R08: 0000000000000000 R09: 0000000000000000 [ 171.808872][ T7970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.808884][ T7970] R13: 00007fc14c5d6038 R14: 00007fc14c5d5fa0 R15: 00007ffe24923c58 [ 171.808917][ T7970] [ 171.808925][ T7970] ERROR: Out of memory at tomoyo_realpath_from_path. [ 172.278260][ T7993] tipc: Enabling of bearer rejected, failed to enable media [ 172.325244][ T5925] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 172.498103][ T5925] usb 1-1: Using ep0 maxpacket: 16 [ 172.507010][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9 [ 172.528637][ T5925] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024 [ 172.566055][ T5925] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 172.593415][ T5925] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 172.603964][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.624204][ T5925] usb 1-1: config 0 descriptor?? [ 172.630042][ T7982] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 172.776002][ T8016] binder: 8015:8016 unknown command 0 [ 172.792351][ T8016] binder: 8015:8016 ioctl c0306201 200000000080 returned -22 [ 172.836281][ T8016] binder_alloc: 8015: binder_alloc_buf size 4120 failed, no address space [ 172.855425][ T8016] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 173.057026][ T5925] hid (null): unknown global tag 0xd [ 173.067399][ T8025] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 173.083665][ T5925] shield 0003:0955:7214.0017: unknown global tag 0xd [ 173.102358][ T5925] shield 0003:0955:7214.0017: item 0 0 1 13 parsing failed [ 173.110825][ T5925] shield 0003:0955:7214.0017: Parse failed [ 173.134324][ T5925] shield 0003:0955:7214.0017: probe with driver shield failed with error -22 [ 173.273394][ T1217] usb 1-1: USB disconnect, device number 44 [ 173.465470][ T1919] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 173.498124][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 173.623353][ T8046] binder: 8044:8046 unknown command 0 [ 173.635522][ T1919] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 173.649470][ T1919] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 173.671887][ T8046] binder: 8044:8046 ioctl c0306201 200000000080 returned -22 [ 173.685212][ T1919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 64 [ 173.699336][ T1919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 173.747570][ T1919] usb 3-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 173.785343][ T24] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 173.837715][ T1919] usb 3-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 173.900775][ T1919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.926201][ T1919] usb 3-1: Product: syz [ 173.930401][ T1919] usb 3-1: Manufacturer: syz [ 173.935004][ T1919] usb 3-1: SerialNumber: syz [ 173.990400][ T1919] usb 3-1: config 0 descriptor?? [ 174.003518][ T8010] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 174.016399][ T24] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 2 [ 174.028019][ T1919] iuu_phoenix 3-1:0.0: iuu_phoenix converter detected [ 174.039279][ T24] usb 4-1: config 8 interface 0 has no altsetting 0 [ 174.054178][ T24] usb 4-1: New USB device found, idVendor=1199, idProduct=68a2, bcdDevice=73.93 [ 174.075213][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.083236][ T24] usb 4-1: Product: syz [ 174.096828][ T1919] usb 3-1: iuu_phoenix converter now attached to ttyUSB0 [ 174.120402][ T24] usb 4-1: Manufacturer: syz [ 174.134042][ T24] usb 4-1: SerialNumber: syz [ 174.332012][ T8029] MPI: mpi too large (128872 bits) [ 174.381061][ T8065] netlink: 'syz.1.840': attribute type 21 has an invalid length. [ 174.399228][ T8010] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 174.407374][ T24] usb 4-1: USB disconnect, device number 47 [ 174.412494][ T8068] netlink: 'syz.1.840': attribute type 21 has an invalid length. [ 174.428145][ T8065] netlink: 128 bytes leftover after parsing attributes in process `syz.1.840'. [ 174.430947][ T8068] netlink: 128 bytes leftover after parsing attributes in process `syz.1.840'. [ 174.480472][ T1217] usb 3-1: USB disconnect, device number 39 [ 174.500353][ T1217] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 174.526476][ T1217] iuu_phoenix 3-1:0.0: device disconnected [ 174.825340][ T5925] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 174.977464][ T5925] usb 1-1: config 151 has an invalid interface number: 134 but max is 0 [ 174.990655][ T5925] usb 1-1: config 151 contains an unexpected descriptor of type 0x2, skipping [ 175.003156][ T5925] usb 1-1: config 151 has no interface number 0 [ 175.013811][ T5925] usb 1-1: config 151 interface 134 altsetting 166 endpoint 0x6 has an invalid bInterval 249, changing to 7 [ 175.025887][ T5925] usb 1-1: config 151 interface 134 altsetting 166 has a duplicate endpoint with address 0x6, skipping [ 175.037019][ T5925] usb 1-1: config 151 interface 134 altsetting 166 has an invalid descriptor for endpoint zero, skipping [ 175.049530][ T5925] usb 1-1: config 151 interface 134 altsetting 166 has an invalid descriptor for endpoint zero, skipping [ 175.060984][ T5925] usb 1-1: config 151 interface 134 altsetting 166 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 175.072463][ T5925] usb 1-1: config 151 interface 134 altsetting 166 has a duplicate endpoint with address 0x6, skipping [ 175.083595][ T5925] usb 1-1: config 151 interface 134 altsetting 166 endpoint 0xA has invalid wMaxPacketSize 0 [ 175.100691][ T5925] usb 1-1: config 151 interface 134 altsetting 166 has a duplicate endpoint with address 0x5, skipping [ 175.112801][ T5925] usb 1-1: config 151 interface 134 altsetting 166 has a duplicate endpoint with address 0x4, skipping [ 175.125027][ T5925] usb 1-1: config 151 interface 134 altsetting 166 has an endpoint descriptor with address 0x9D, changing to 0x8D [ 175.155215][ T5925] usb 1-1: config 151 interface 134 altsetting 166 endpoint 0x8D has invalid maxpacket 38053, setting to 64 [ 175.173462][ T5925] usb 1-1: config 151 interface 134 altsetting 166 has 14 endpoint descriptors, different from the interface descriptor's value: 13 [ 175.187621][ T5925] usb 1-1: config 151 interface 134 has no altsetting 0 [ 175.211555][ T5925] usb 1-1: New USB device found, idVendor=12d1, idProduct=1ec0, bcdDevice=f1.ea [ 175.229051][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.239035][ T5925] usb 1-1: Product: syz [ 175.243733][ T5925] usb 1-1: Manufacturer: syz [ 175.246197][ T1919] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 175.253510][ T5925] usb 1-1: SerialNumber: syz [ 175.263350][ T8078] binder: 8077:8078 unknown command 0 [ 175.269296][ T8071] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.275972][ T8078] binder: 8077:8078 ioctl c0306201 200000000080 returned -22 [ 175.372334][ T8083] netlink: 48 bytes leftover after parsing attributes in process `syz.1.847'. [ 175.417455][ T1919] usb 4-1: Using ep0 maxpacket: 32 [ 175.429632][ T1919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.453485][ T1919] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.470644][ T1919] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 175.480177][ T1919] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.491308][ T1919] usb 4-1: config 0 descriptor?? [ 175.491781][ T8071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 175.492194][ T8071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.755026][ T8096] netlink: 68 bytes leftover after parsing attributes in process `syz.2.852'. [ 175.771952][ T8097] netlink: 68 bytes leftover after parsing attributes in process `syz.1.853'. [ 175.858344][ T8100] binder: 8099:8100 unknown command 0 [ 175.863890][ T8100] binder: 8099:8100 ioctl c0306201 200000000080 returned -22 [ 175.906557][ T1919] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 175.926037][ T1919] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 175.943913][ T1919] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 175.958360][ T1919] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 175.961908][ T8102] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 175.966466][ T1919] kone 0003:1E7D:2CED.0018: unknown main item tag 0x0 [ 175.991362][ T1919] kone 0003:1E7D:2CED.0018: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 176.097921][ T1919] kone 0003:1E7D:2CED.0018: couldn't init struct kone_device [ 176.112333][ T1919] kone 0003:1E7D:2CED.0018: couldn't install mouse [ 176.147396][ T1919] kone 0003:1E7D:2CED.0018: probe with driver kone failed with error -5 [ 176.182043][ T1919] usb 4-1: USB disconnect, device number 48 [ 176.362723][ T8116] binder: 8115:8116 unknown command 0 [ 176.368458][ T8116] binder: 8115:8116 ioctl c0306201 200000000080 returned -22 [ 176.383471][ T8116] binder_alloc: 8115: binder_alloc_buf size 4120 failed, no address space [ 176.392581][ T8116] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 176.559549][ T8124] binder: 8123:8124 unknown command 0 [ 176.565103][ T8124] binder: 8123:8124 ioctl c0306201 200000000080 returned -22 [ 176.576156][ T8124] binder: 8123:8124 ioctl 4018620d 0 returned -22 [ 176.683005][ T8130] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 176.690523][ T8130] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 176.699603][ T8130] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 176.707398][ T8130] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 176.714472][ T8130] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 176.721462][ T8130] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 176.728482][ T8130] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 176.736747][ T8130] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 176.743224][ T8130] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 176.752214][ T8134] : renamed from bond_slave_0 (while UP) [ 176.758653][ T8130] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 176.766954][ T8130] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 176.780210][ T8130] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 177.035444][ T1217] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 177.144614][ T8150] netlink: 48 bytes leftover after parsing attributes in process `syz.2.874'. [ 177.201635][ T1217] usb 4-1: unable to get BOS descriptor or descriptor too short [ 177.211644][ T1217] usb 4-1: not running at top speed; connect to a high speed hub [ 177.233556][ T8152] binder: 8151:8152 unknown command 0 [ 177.236762][ T1217] usb 4-1: config 3 has an invalid interface number: 106 but max is 0 [ 177.241601][ T8152] binder: 8151:8152 ioctl c0306201 200000000080 returned -22 [ 177.258720][ T1217] usb 4-1: config 3 has no interface number 0 [ 177.264109][ T8152] binder: 8151:8152 ioctl 4018620d 0 returned -22 [ 177.271917][ T1217] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 177.283627][ T1217] usb 4-1: config 3 interface 106 altsetting 10 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 177.295364][ T1217] usb 4-1: config 3 interface 106 has no altsetting 0 [ 177.305314][ T1217] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a [ 177.315904][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.324444][ T1217] usb 4-1: Product: syz [ 177.330328][ T1217] usb 4-1: Manufacturer: syz [ 177.335017][ T1217] usb 4-1: SerialNumber: syz [ 177.347976][ T8137] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 177.355869][ T8137] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 177.573742][ T1217] kobil_sct 4-1:3.106: KOBIL USB smart card terminal converter detected [ 177.606522][ T1217] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 177.629711][ T5925] option 1-1:151.134: GSM modem (1-port) converter detected [ 177.657515][ T1217] usb 4-1: USB disconnect, device number 49 [ 177.687213][ T5925] usb 1-1: USB disconnect, device number 45 [ 177.720326][ T1217] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 177.734548][ T5925] option 1-1:151.134: device disconnected [ 177.756004][ T1217] kobil_sct 4-1:3.106: device disconnected [ 177.807881][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 177.856900][ T8174] binder: 8173:8174 unknown command 0 [ 177.862459][ T8174] binder: 8173:8174 ioctl c0306201 200000000080 returned -22 [ 177.872687][ T8174] binder: 8173:8174 ioctl 4018620d 0 returned -22 [ 177.882432][ T8172] netlink: 68 bytes leftover after parsing attributes in process `syz.2.884'. [ 177.951827][ T8176] netlink: 48 bytes leftover after parsing attributes in process `syz.0.886'. [ 177.975367][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 177.986629][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.012514][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.032961][ T9] usb 2-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00 [ 178.055828][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.090676][ T9] usb 2-1: config 0 descriptor?? [ 178.331240][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.345965][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.393067][ T8201] netlink: 68 bytes leftover after parsing attributes in process `syz.0.896'. [ 178.472912][ T8205] binder: 8203:8205 unknown command 0 [ 178.478495][ T8205] binder: 8203:8205 ioctl c0306201 200000000080 returned -22 [ 178.492696][ T8205] binder_alloc: 8203: binder_alloc_buf size 4120 failed, no address space [ 178.502235][ T8205] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 178.574616][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.586242][ T5925] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 178.593308][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.630789][ T8166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.640925][ T8166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.663190][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 178.679504][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 178.705870][ T9] usb 2-1: USB disconnect, device number 42 [ 178.757902][ T5925] usb 4-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 178.771349][ T5925] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.781930][ T5925] usb 4-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 178.798003][ T5925] usb 4-1: config 0 interface 0 has no altsetting 0 [ 178.814053][ T5925] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 178.833981][ T5925] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.860981][ T5925] usb 4-1: config 0 descriptor?? [ 178.941205][ T8221] netlink: 68 bytes leftover after parsing attributes in process `syz.2.907'. [ 179.289763][ T5925] hid-multitouch 0003:0EEF:72C4.0019: hidraw0: USB HID v0.00 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0 [ 179.358841][ T1919] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 179.495018][ T8197] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 179.503784][ T1919] usb 1-1: device descriptor read/64, error -71 [ 179.505012][ T5925] usb 4-1: USB disconnect, device number 50 [ 179.510226][ T5918] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 179.645258][ T5918] usb 2-1: device descriptor read/64, error -71 [ 179.745328][ T1919] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 179.875313][ T1919] usb 1-1: device descriptor read/64, error -71 [ 179.885568][ T5918] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 179.995873][ T1919] usb usb1-port1: attempt power cycle [ 180.015348][ T5918] usb 2-1: device descriptor read/64, error -71 [ 180.125613][ T5918] usb usb2-port1: attempt power cycle [ 180.326693][ T8254] binder: 8253:8254 unknown command 0 [ 180.332121][ T8254] binder: 8253:8254 ioctl c0306201 200000000080 returned -22 [ 180.339971][ T1919] usb 1-1: new full-speed USB device number 48 using dummy_hcd [ 180.342404][ T8254] binder_alloc: 8253: binder_alloc_buf size 4120 failed, no address space [ 180.357652][ T8254] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 180.372223][ T1919] usb 1-1: device descriptor read/8, error -71 [ 180.475434][ T5918] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 180.497081][ T5918] usb 2-1: device descriptor read/8, error -71 [ 180.564227][ T8264] netlink: 68 bytes leftover after parsing attributes in process `syz.2.926'. [ 180.615324][ T1919] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 180.637460][ T1919] usb 1-1: device descriptor read/8, error -71 [ 180.665444][ T24] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 180.691018][ T8270] netlink: 'syz.2.929': attribute type 10 has an invalid length. [ 180.700818][ T8270] macvlan0: entered promiscuous mode [ 180.706234][ T8270] macvlan0: entered allmulticast mode [ 180.714585][ T8270] veth1_vlan: entered allmulticast mode [ 180.722879][ T8270] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 180.735853][ T5918] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 180.745735][ T1919] usb usb1-port1: unable to enumerate USB device [ 180.755959][ T5918] usb 2-1: device descriptor read/8, error -71 [ 180.815346][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 180.822944][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.834250][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.844145][ T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 180.853617][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.864441][ T24] usb 4-1: config 0 descriptor?? [ 180.870146][ T5918] usb usb2-port1: unable to enumerate USB device [ 181.283650][ T24] kone 0003:1E7D:2CED.001A: unknown main item tag 0x0 [ 181.290846][ T24] kone 0003:1E7D:2CED.001A: unknown main item tag 0x0 [ 181.297861][ T24] kone 0003:1E7D:2CED.001A: unknown main item tag 0x0 [ 181.304866][ T24] kone 0003:1E7D:2CED.001A: unknown main item tag 0x0 [ 181.312878][ T24] kone 0003:1E7D:2CED.001A: unknown main item tag 0x0 [ 181.331306][ T24] kone 0003:1E7D:2CED.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 181.463126][ T8278] netlink: 68 bytes leftover after parsing attributes in process `syz.2.932'. [ 181.491461][ T24] kone 0003:1E7D:2CED.001A: couldn't init struct kone_device [ 181.507000][ T24] kone 0003:1E7D:2CED.001A: couldn't install mouse [ 181.515968][ T24] kone 0003:1E7D:2CED.001A: probe with driver kone failed with error -5 [ 181.534612][ T8280] netlink: 48 bytes leftover after parsing attributes in process `syz.2.933'. [ 181.552012][ T24] usb 4-1: USB disconnect, device number 51 [ 182.064158][ T8292] binder: 8291:8292 unknown command 0 [ 182.069828][ T8292] binder: 8291:8292 ioctl c0306201 200000000080 returned -22 [ 182.435717][ T8307] tipc: Failed to remove unknown binding: 66,1,1/0:3760665593/3760665595 [ 182.444190][ T8307] tipc: Failed to remove unknown binding: 66,1,1/0:3760665593/3760665595 [ 182.490525][ T8310] FAULT_INJECTION: forcing a failure. [ 182.490525][ T8310] name failslab, interval 1, probability 0, space 0, times 0 [ 182.543675][ T8310] CPU: 1 UID: 0 PID: 8310 Comm: syz.3.946 Not tainted syzkaller #0 PREEMPT(full) [ 182.543701][ T8310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 182.543714][ T8310] Call Trace: [ 182.543722][ T8310] [ 182.543730][ T8310] dump_stack_lvl+0x189/0x250 [ 182.543764][ T8310] ? __pfx____ratelimit+0x10/0x10 [ 182.543792][ T8310] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.543810][ T8310] ? __pfx__printk+0x10/0x10 [ 182.543841][ T8310] ? __pfx___might_resched+0x10/0x10 [ 182.543865][ T8310] ? fs_reclaim_acquire+0x7d/0x100 [ 182.543893][ T8310] should_fail_ex+0x414/0x560 [ 182.543922][ T8310] should_failslab+0xa8/0x100 [ 182.543946][ T8310] __kmalloc_cache_noprof+0x6f/0x6f0 [ 182.543966][ T8310] ? trace_contention_end+0x39/0x120 [ 182.543989][ T8310] ? vhost_task_create+0xf6/0x290 [ 182.544021][ T8310] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 182.544050][ T8310] vhost_task_create+0xf6/0x290 [ 182.544075][ T8310] ? arch_stack_walk+0xfc/0x150 [ 182.544100][ T8310] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 182.544130][ T8310] ? __pfx_vhost_task_create+0x10/0x10 [ 182.544166][ T8310] ? __pfx_vhost_task_fn+0x10/0x10 [ 182.544220][ T8310] kvm_mmu_post_init_vm+0x14c/0x300 [ 182.544245][ T8310] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 182.544272][ T8310] ? __mutex_trylock_common+0x153/0x260 [ 182.544300][ T8310] ? __pfx___mutex_trylock_common+0x10/0x10 [ 182.544327][ T8310] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 182.544351][ T8310] ? rcu_is_watching+0x15/0xb0 [ 182.544375][ T8310] ? trace_contention_end+0x39/0x120 [ 182.544399][ T8310] ? look_up_lock_class+0x74/0x170 [ 182.544430][ T8310] ? register_lock_class+0x51/0x320 [ 182.544457][ T8310] ? __lock_acquire+0xab9/0xd20 [ 182.544509][ T8310] kvm_vcpu_ioctl+0x95c/0xe90 [ 182.544536][ T8310] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.544580][ T8310] ? __fget_files+0x2a/0x420 [ 182.544611][ T8310] ? __fget_files+0x3a0/0x420 [ 182.544634][ T8310] ? __fget_files+0x2a/0x420 [ 182.544663][ T8310] ? bpf_lsm_file_ioctl+0x9/0x20 [ 182.544692][ T8310] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 182.544710][ T8310] __se_sys_ioctl+0xfc/0x170 [ 182.544734][ T8310] do_syscall_64+0xfa/0xfa0 [ 182.544761][ T8310] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.544790][ T8310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.544809][ T8310] ? clear_bhb_loop+0x60/0xb0 [ 182.544833][ T8310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.544852][ T8310] RIP: 0033:0x7fc14c38eba9 [ 182.544876][ T8310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.544893][ T8310] RSP: 002b:00007fc14d304038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.544920][ T8310] RAX: ffffffffffffffda RBX: 00007fc14c5d5fa0 RCX: 00007fc14c38eba9 [ 182.544933][ T8310] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 182.544944][ T8310] RBP: 00007fc14d304090 R08: 0000000000000000 R09: 0000000000000000 [ 182.544957][ T8310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.544968][ T8310] R13: 00007fc14c5d6038 R14: 00007fc14c5d5fa0 R15: 00007ffe24923c58 [ 182.545003][ T8310] [ 183.061832][ T8327] binder: 8319:8327 ioctl f502 0 returned -22 [ 183.126274][ T24] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 183.133320][ T8331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.952'. [ 183.266107][ T24] usb 2-1: device descriptor read/64, error -71 [ 183.411788][ T8345] tipc: Failed to remove unknown binding: 66,1,1/0:311031867/311031869 [ 183.424581][ T8345] tipc: Failed to remove unknown binding: 66,1,1/0:311031867/311031869 [ 183.437234][ T8348] netlink: 68 bytes leftover after parsing attributes in process `syz.0.956'. [ 183.507790][ T24] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 183.534119][ T8350] netlink: 48 bytes leftover after parsing attributes in process `syz.2.958'. [ 183.646199][ T24] usb 2-1: device descriptor read/64, error -71 [ 183.685665][ T8354] FAULT_INJECTION: forcing a failure. [ 183.685665][ T8354] name failslab, interval 1, probability 0, space 0, times 0 [ 183.702291][ T8354] CPU: 1 UID: 0 PID: 8354 Comm: syz.0.960 Not tainted syzkaller #0 PREEMPT(full) [ 183.702319][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 183.702331][ T8354] Call Trace: [ 183.702339][ T8354] [ 183.702347][ T8354] dump_stack_lvl+0x189/0x250 [ 183.702371][ T8354] ? __pfx____ratelimit+0x10/0x10 [ 183.702398][ T8354] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.702417][ T8354] ? __pfx__printk+0x10/0x10 [ 183.702451][ T8354] ? __pfx___might_resched+0x10/0x10 [ 183.702472][ T8354] ? fs_reclaim_acquire+0x7d/0x100 [ 183.702501][ T8354] should_fail_ex+0x414/0x560 [ 183.702529][ T8354] should_failslab+0xa8/0x100 [ 183.702555][ T8354] kmem_cache_alloc_node_noprof+0x77/0x710 [ 183.702576][ T8354] ? dup_task_struct+0x52/0x830 [ 183.702607][ T8354] dup_task_struct+0x52/0x830 [ 183.702631][ T8354] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.702664][ T8354] copy_process+0x54b/0x3c00 [ 183.702719][ T8354] ? __pfx_copy_process+0x10/0x10 [ 183.702756][ T8354] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 183.702786][ T8354] vhost_task_create+0x1c4/0x290 [ 183.702810][ T8354] ? arch_stack_walk+0xfc/0x150 [ 183.702835][ T8354] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 183.702865][ T8354] ? __pfx_vhost_task_create+0x10/0x10 [ 183.702902][ T8354] ? __pfx_vhost_task_fn+0x10/0x10 [ 183.702946][ T8354] kvm_mmu_post_init_vm+0x14c/0x300 [ 183.702969][ T8354] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 183.702995][ T8354] ? __mutex_trylock_common+0x153/0x260 [ 183.703024][ T8354] ? __pfx___mutex_trylock_common+0x10/0x10 [ 183.703050][ T8354] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 183.703080][ T8354] ? rcu_is_watching+0x15/0xb0 [ 183.703104][ T8354] ? trace_contention_end+0x39/0x120 [ 183.703129][ T8354] ? look_up_lock_class+0x74/0x170 [ 183.703160][ T8354] ? register_lock_class+0x51/0x320 [ 183.703184][ T8354] ? __lock_acquire+0xab9/0xd20 [ 183.703235][ T8354] kvm_vcpu_ioctl+0x95c/0xe90 [ 183.703262][ T8354] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.703306][ T8354] ? __fget_files+0x2a/0x420 [ 183.703336][ T8354] ? __fget_files+0x3a0/0x420 [ 183.703360][ T8354] ? __fget_files+0x2a/0x420 [ 183.703389][ T8354] ? bpf_lsm_file_ioctl+0x9/0x20 [ 183.703418][ T8354] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 183.703437][ T8354] __se_sys_ioctl+0xfc/0x170 [ 183.703461][ T8354] do_syscall_64+0xfa/0xfa0 [ 183.703488][ T8354] ? lockdep_hardirqs_on+0x9c/0x150 [ 183.703517][ T8354] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.703536][ T8354] ? clear_bhb_loop+0x60/0xb0 [ 183.703560][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.703579][ T8354] RIP: 0033:0x7f7e9118eba9 [ 183.703596][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.703613][ T8354] RSP: 002b:00007f7e8f3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 183.703634][ T8354] RAX: ffffffffffffffda RBX: 00007f7e913d5fa0 RCX: 00007f7e9118eba9 [ 183.703649][ T8354] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 183.703662][ T8354] RBP: 00007f7e8f3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 183.703674][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.703686][ T8354] R13: 00007f7e913d6038 R14: 00007f7e913d5fa0 R15: 00007ffd23cfeff8 [ 183.703720][ T8354] [ 184.063604][ T24] usb usb2-port1: attempt power cycle [ 184.246015][ T8366] tipc: Failed to remove unknown binding: 66,1,1/0:1647030194/1647030196 [ 184.254486][ T8366] tipc: Failed to remove unknown binding: 66,1,1/0:1647030194/1647030196 [ 184.406726][ T24] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 184.425944][ T24] usb 2-1: device descriptor read/8, error -71 [ 184.606553][ T5925] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 184.665271][ T24] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 184.695973][ T24] usb 2-1: device descriptor read/8, error -71 [ 184.702463][ T8384] comedi comedi0: das16m1: I/O port conflict (0x7,16) [ 184.781293][ T5925] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 184.792988][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 184.809446][ T5925] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 184.816103][ T24] usb usb2-port1: unable to enumerate USB device [ 184.839912][ T5925] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 184.856003][ T5925] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.874355][ T5925] usb 4-1: Product: syz [ 184.879474][ T5925] usb 4-1: Manufacturer: syz [ 184.884086][ T5925] usb 4-1: SerialNumber: syz [ 184.901799][ T8388] tipc: Failed to remove unknown binding: 66,1,1/0:2227542403/2227542405 [ 184.912343][ T5925] usb 4-1: config 0 descriptor?? [ 184.920634][ T8388] tipc: Failed to remove unknown binding: 66,1,1/0:2227542403/2227542405 [ 184.944020][ T5925] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 185.133222][ T5925] usb 4-1: USB disconnect, device number 52 [ 185.244473][ T8395] netlink: 48 bytes leftover after parsing attributes in process `syz.2.979'. [ 186.245229][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 186.262503][ T8417] netlink: 'syz.0.987': attribute type 10 has an invalid length. [ 186.278239][ T8417] macvlan0: entered promiscuous mode [ 186.286282][ T8417] macvlan0: entered allmulticast mode [ 186.298654][ T5925] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 186.315416][ T8417] veth1_vlan: entered allmulticast mode [ 186.338856][ T8417] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 186.399505][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 186.413360][ T9] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 186.455448][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 186.464915][ T5925] usb 2-1: device descriptor read/64, error -71 [ 186.471449][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.489922][ T9] usb 4-1: Product: syz [ 186.494140][ T9] usb 4-1: Manufacturer: syz [ 186.501031][ T9] usb 4-1: SerialNumber: syz [ 186.548793][ T8424] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 186.733265][ T5925] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 186.864945][ T8432] vivid-000: disconnect [ 186.885275][ T5925] usb 2-1: device descriptor read/64, error -71 [ 186.995781][ T5925] usb usb2-port1: attempt power cycle [ 187.356992][ T5925] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 187.375446][ T9] usb 4-1: reset high-speed USB device number 53 using dummy_hcd [ 187.383944][ T5925] usb 2-1: device descriptor read/8, error -71 [ 187.548973][ T9] usb 4-1: device firmware changed [ 187.557390][ T9] usb 4-1: USB disconnect, device number 53 [ 187.634391][ T8441] netlink: 'syz.2.997': attribute type 10 has an invalid length. [ 187.642421][ T8441] veth1_vlan: left allmulticast mode [ 187.649536][ T5925] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 187.688609][ T5925] usb 2-1: device descriptor read/8, error -71 [ 187.699575][ T8432] vivid-000: reconnect [ 187.705247][ T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 187.795544][ T5925] usb usb2-port1: unable to enumerate USB device [ 187.869594][ T9] usb 4-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 187.882718][ T9] usb 4-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 187.891907][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.899990][ T9] usb 4-1: Product: я [ 187.904170][ T9] usb 4-1: Manufacturer: 㐊 [ 187.908810][ T9] usb 4-1: SerialNumber: 支顩쀂쾩ﯔ᜵蘠⾻幁ꮲ⤄锊쌩‷埠鬎됔伃㏍⠊ц삞锌ԁ悖➳ᔟ䶤ʁꊺ멘疕팈쯕轡厏蔝曜ᶎ뙭쏯ꩩ垛誾晓꼖낁瓻鴗샅ﻙ嗳옳唐椾絣ꤎ蘇廾狈朡═叒렜킌 [ 187.932425][ C0] vkms_vblank_simulate: vblank timer overrun [ 188.077566][ T5911] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 188.237328][ T5911] usb 1-1: too many endpoints for config 4 interface 0 altsetting 0: 101, using maximum allowed: 30 [ 188.248330][ T5911] usb 1-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x51, changing to 0x1 [ 188.259771][ T5911] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 188.270851][ T5911] usb 1-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 101 [ 188.284151][ T5911] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 188.293409][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.500965][ T8455] tmpfs: Invalid uid '0x00000000ffffffff' [ 188.543335][ T8447] block nbd0: Attempted send on invalid socket [ 188.550630][ T8447] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 188.564065][ T8447] hpfs: hpfs_map_sector(): read error [ 188.581205][ T5911] ath6kl: Failed to submit usb control message: -71 [ 188.595448][ T5911] ath6kl: unable to send the bmi data to the device: -71 [ 188.602507][ T5911] ath6kl: Unable to send get target info: -71 [ 188.616323][ T5911] ath6kl: Failed to init ath6kl core: -71 [ 188.628836][ T5911] ath6kl_usb 1-1:4.0: probe with driver ath6kl_usb failed with error -71 [ 188.656135][ T5911] usb 1-1: USB disconnect, device number 50 [ 188.744105][ T8464] netlink: 'syz.3.1006': attribute type 10 has an invalid length. [ 188.752943][ T8464] macvlan0: entered promiscuous mode [ 188.763915][ T8464] macvlan0: entered allmulticast mode [ 188.774275][ T8464] veth1_vlan: entered allmulticast mode [ 188.783247][ T8464] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 189.197454][ T9] usb 4-1: reset high-speed USB device number 54 using dummy_hcd [ 189.206757][ T9] usb 4-1: device reset changed ep0 maxpacket size! [ 189.222379][ T9] usb 4-1: USB disconnect, device number 54 [ 189.366940][ T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 189.385276][ T1919] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 189.396269][ T5911] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 189.525242][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 189.532390][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 189.541113][ T9] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 189.545272][ T1919] usb 1-1: Using ep0 maxpacket: 16 [ 189.556780][ T5911] usb 2-1: Using ep0 maxpacket: 8 [ 189.566638][ T9] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 189.569712][ T5911] usb 2-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d [ 189.575866][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.588315][ T5911] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.592785][ T9] usb 4-1: Product: syz [ 189.601268][ T1919] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 189.604902][ T9] usb 4-1: Manufacturer: syz [ 189.618628][ T9] usb 4-1: SerialNumber: syz [ 189.618849][ T1919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.631739][ T5911] usb 2-1: Product: syz [ 189.637353][ T5911] usb 2-1: Manufacturer: syz [ 189.642121][ T5911] usb 2-1: SerialNumber: syz [ 189.647513][ T1919] usb 1-1: Product: syz [ 189.651673][ T1919] usb 1-1: Manufacturer: syz [ 189.658171][ T1919] usb 1-1: SerialNumber: syz [ 189.663919][ T5911] usb 2-1: config 0 descriptor?? [ 189.676882][ T5911] gspca_main: sonixj-2.14.0 probing 0c45:614a [ 189.839765][ T9] usb 4-1: Cannot retrieve CPort count: 0 [ 189.845770][ T9] usb 4-1: Cannot retrieve CPort count: -5 [ 189.851623][ T9] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -5 [ 190.078313][ T9] usb 4-1: USB disconnect, device number 55 [ 190.092623][ T1919] cdc_ncm 1-1:1.0: bind() failure [ 190.110722][ T1919] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 190.128046][ T1919] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 190.137959][ T1919] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 190.158910][ T1919] usb 1-1: USB disconnect, device number 51 [ 190.208748][ T8489] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 190.340984][ T8495] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1021'. [ 190.899465][ T8523] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 190.922950][ T8523] infiniband sL2: RDMA CMA: cma_listen_on_dev, error -98 [ 190.964665][ T8521] netlink: 'syz.0.1027': attribute type 10 has an invalid length. [ 190.994714][ T8521] veth1_vlan: left allmulticast mode [ 191.312938][ T8539] netlink: 'syz.3.1033': attribute type 11 has an invalid length. [ 191.367488][ T8539] netlink: 'syz.3.1033': attribute type 25 has an invalid length. [ 191.377913][ T8539] netlink: 'syz.3.1033': attribute type 1 has an invalid length. [ 191.544756][ T8552] tc_dump_action: action bad kind [ 191.623968][ T8555] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1039'. [ 191.885456][ T9] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 192.051397][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 192.081827][ T1217] usb 2-1: USB disconnect, device number 55 [ 192.097238][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 192.108253][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.123676][ T9] usb 4-1: config 0 descriptor?? [ 192.131594][ T8558] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 192.189410][ T8577] netlink: 'syz.1.1049': attribute type 10 has an invalid length. [ 192.204039][ T8577] macvlan0: entered promiscuous mode [ 192.209955][ T8577] macvlan0: entered allmulticast mode [ 192.224237][ T8577] veth1_vlan: entered allmulticast mode [ 192.240091][ T8577] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 192.334174][ T8584] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1052'. [ 192.473575][ T8590] can0: slcan on ttyS3. [ 192.543837][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 192.560295][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 192.586962][ T9] usb 4-1: USB disconnect, device number 56 [ 192.715246][ T24] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 192.877046][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 192.910355][ T24] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 192.937147][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.970991][ T24] usb 2-1: config 0 descriptor?? [ 192.980308][ T8590] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 193.263155][ T8629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.283836][ T8590] can0 (unregistered): slcan off ttyS3. [ 193.290305][ T8629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.321471][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 193.332318][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 193.358591][ T24] usb 2-1: USB disconnect, device number 56 [ 193.535313][ T5911] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 193.695271][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 193.709926][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.741785][ T5911] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.764483][ T5911] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 193.783916][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.805127][ T5911] usb 4-1: config 0 descriptor?? [ 194.027204][ T8664] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1072'. [ 194.218746][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.231212][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.252557][ T5911] usbhid 4-1:0.0: can't add hid device: -71 [ 194.269568][ T5911] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 194.285370][ T9] usb 2-1: new full-speed USB device number 57 using dummy_hcd [ 194.290813][ T5911] usb 4-1: USB disconnect, device number 57 [ 194.496419][ T9] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 1455, setting to 64 [ 194.521943][ T9] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 194.542327][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 194.550905][ T9] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 194.585546][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.610228][ T9] usb 2-1: config 0 descriptor?? [ 194.626969][ T8667] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 194.853148][ T8667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.871721][ T8703] binder: 8701:8703 unknown command 0 [ 194.879684][ T8667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.881948][ T8703] binder: 8701:8703 ioctl c0306201 200000000080 returned -22 [ 194.895267][ T5911] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 194.911881][ T8703] binder_alloc: 8701: binder_alloc_buf size 4120 failed, no address space [ 194.922144][ T8703] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 195.035360][ T5911] usb 1-1: device descriptor read/64, error -71 [ 195.214859][ T8719] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1085'. [ 195.238627][ T1217] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 195.275609][ T5911] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 195.277668][ T8721] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1086'. [ 195.309302][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 195.319616][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 195.330053][ T9] usb 2-1: USB disconnect, device number 57 [ 195.387620][ T1217] usb 4-1: device descriptor read/64, error -71 [ 195.407150][ T5911] usb 1-1: device descriptor read/64, error -71 [ 195.516576][ T5911] usb usb1-port1: attempt power cycle [ 195.645362][ T1217] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 195.775257][ T1217] usb 4-1: device descriptor read/64, error -71 [ 195.856101][ T5911] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 195.896563][ T1217] usb usb4-port1: attempt power cycle [ 195.900905][ T5911] usb 1-1: device descriptor read/8, error -71 [ 195.912395][ T8727] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1089'. [ 196.069977][ T8735] netlink: 19 bytes leftover after parsing attributes in process `syz.1.1093'. [ 196.124188][ T8738] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 196.150260][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.157780][ T5911] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 196.166415][ T8738] CIFS mount error: No usable UNC path provided in device string! [ 196.166415][ T8738] [ 196.178769][ T8738] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 196.188800][ T5911] usb 1-1: device descriptor read/8, error -71 [ 196.273587][ T1217] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 196.291327][ T5879] Bluetooth: hci3: command 0x0406 tx timeout [ 196.300874][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 196.303198][ T5872] Bluetooth: hci1: command 0x0406 tx timeout [ 196.306959][ T5187] Bluetooth: hci2: command 0x0406 tx timeout [ 196.307356][ T5911] usb usb1-port1: unable to enumerate USB device [ 196.316914][ T1217] usb 4-1: device descriptor read/8, error -71 [ 196.575536][ T1217] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 196.597244][ T1217] usb 4-1: device descriptor read/8, error -71 [ 196.645436][ T9] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 196.706784][ T1217] usb usb4-port1: unable to enumerate USB device [ 196.795327][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 196.802057][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9 [ 196.813143][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024 [ 196.824314][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 196.837181][ T9] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 196.846329][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.858209][ T9] usb 2-1: config 0 descriptor?? [ 196.863874][ T8744] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 197.274978][ T9] hid (null): unknown global tag 0xd [ 197.284193][ T9] shield 0003:0955:7214.001B: unknown global tag 0xd [ 197.290975][ T9] shield 0003:0955:7214.001B: item 0 0 1 13 parsing failed [ 197.298670][ T9] shield 0003:0955:7214.001B: Parse failed [ 197.304506][ T9] shield 0003:0955:7214.001B: probe with driver shield failed with error -22 [ 197.484079][ T9] usb 2-1: USB disconnect, device number 58 [ 197.622102][ T8746] binder: 8745:8746 ioctl c0306201 0 returned -14 [ 197.779923][ T8751] befs: (nullb0): invalid magic header [ 198.065738][ T1919] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 198.232650][ T1919] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.264991][ T1919] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 198.275705][ T1919] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.284825][ T1919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.301207][ T8764] netlink: 'syz.1.1106': attribute type 13 has an invalid length. [ 198.301751][ T8753] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 198.317825][ T8764] macvtap0: entered promiscuous mode [ 198.329802][ T8764] macvtap0: refused to change device tx_queue_len [ 198.333703][ T1919] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 198.624411][ T8753] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1100'. [ 198.684019][ T1217] usb 1-1: USB disconnect, device number 56 [ 198.784119][ T8779] FAULT_INJECTION: forcing a failure. [ 198.784119][ T8779] name failslab, interval 1, probability 0, space 0, times 0 [ 198.797564][ T8779] CPU: 0 UID: 0 PID: 8779 Comm: syz.3.1112 Not tainted syzkaller #0 PREEMPT(full) [ 198.797591][ T8779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 198.797603][ T8779] Call Trace: [ 198.797611][ T8779] [ 198.797619][ T8779] dump_stack_lvl+0x189/0x250 [ 198.797643][ T8779] ? __pfx____ratelimit+0x10/0x10 [ 198.797670][ T8779] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.797689][ T8779] ? __pfx__printk+0x10/0x10 [ 198.797723][ T8779] ? __pfx___might_resched+0x10/0x10 [ 198.797744][ T8779] ? fs_reclaim_acquire+0x7d/0x100 [ 198.797772][ T8779] should_fail_ex+0x414/0x560 [ 198.797801][ T8779] should_failslab+0xa8/0x100 [ 198.797823][ T8779] __kmalloc_noprof+0xcb/0x7f0 [ 198.797840][ T8779] ? tomoyo_encode+0x28b/0x550 [ 198.797872][ T8779] tomoyo_encode+0x28b/0x550 [ 198.797904][ T8779] tomoyo_realpath_from_path+0x58d/0x5d0 [ 198.797934][ T8779] ? tomoyo_domain+0xd9/0x130 [ 198.797958][ T8779] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 198.797983][ T8779] tomoyo_path_number_perm+0x1e8/0x5a0 [ 198.798011][ T8779] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 198.798077][ T8779] ? __fget_files+0x2a/0x420 [ 198.798105][ T8779] ? __fget_files+0x3a0/0x420 [ 198.798129][ T8779] ? __fget_files+0x2a/0x420 [ 198.798155][ T8779] security_file_ioctl+0xcb/0x2d0 [ 198.798180][ T8779] __se_sys_ioctl+0x47/0x170 [ 198.798203][ T8779] do_syscall_64+0xfa/0xfa0 [ 198.798230][ T8779] ? lockdep_hardirqs_on+0x9c/0x150 [ 198.798256][ T8779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.798275][ T8779] ? clear_bhb_loop+0x60/0xb0 [ 198.798298][ T8779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.798317][ T8779] RIP: 0033:0x7fc14c38eba9 [ 198.798334][ T8779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.798351][ T8779] RSP: 002b:00007fc14d304038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 198.798371][ T8779] RAX: ffffffffffffffda RBX: 00007fc14c5d5fa0 RCX: 00007fc14c38eba9 [ 198.798386][ T8779] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 198.798397][ T8779] RBP: 00007fc14d304090 R08: 0000000000000000 R09: 0000000000000000 [ 198.798409][ T8779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.798419][ T8779] R13: 00007fc14c5d6038 R14: 00007fc14c5d5fa0 R15: 00007ffe24923c58 [ 198.798452][ T8779] [ 198.798473][ T8779] ERROR: Out of memory at tomoyo_realpath_from_path. [ 199.101814][ T9] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 199.148486][ T8786] syzkaller1: entered promiscuous mode [ 199.154015][ T8786] syzkaller1: entered allmulticast mode [ 199.258558][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 199.269412][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 59, changing to 9 [ 199.282544][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9765, setting to 1024 [ 199.293734][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 199.310495][ T9] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 199.320032][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.344896][ T9] usb 2-1: config 0 descriptor?? [ 199.350891][ T8775] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 199.453519][ T8794] binder: 8793:8794 unknown command 0 [ 199.459408][ T8794] binder: 8793:8794 ioctl c0306201 200000000080 returned -22 [ 199.469590][ T8794] binder_alloc: 8793: binder_alloc_buf size 4120 failed, no address space [ 199.481220][ T8794] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 199.546243][ T8798] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1120'. [ 199.766763][ T9] hid (null): unknown global tag 0xd [ 199.786714][ T9] shield 0003:0955:7214.001C: unknown global tag 0xd [ 199.793552][ T9] shield 0003:0955:7214.001C: item 0 0 1 13 parsing failed [ 199.802261][ T9] shield 0003:0955:7214.001C: Parse failed [ 199.812480][ T9] shield 0003:0955:7214.001C: probe with driver shield failed with error -22 [ 199.817523][ T5911] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 199.959338][ T8820] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 199.982886][ T1919] usb 2-1: USB disconnect, device number 59 [ 199.996148][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 200.017662][ T5911] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 200.030310][ T5911] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 200.042392][ T5911] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 200.053047][ T5911] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 200.062089][ T5911] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 200.071248][ T5911] usb 4-1: config 0 has no interface number 0 [ 200.077424][ T5911] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 200.088639][ T5911] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 200.099065][ T5911] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 200.109027][ T5911] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.122197][ T5911] usb 4-1: config 0 interface 125 has no altsetting 0 [ 200.129152][ T5911] usb 4-1: config 0 interface 125 has no altsetting 2 [ 200.149559][ T5911] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 200.159835][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.170071][ T8825] netlink: 'syz.0.1132': attribute type 10 has an invalid length. [ 200.170706][ T5911] usb 4-1: Product: syz [ 200.182976][ T5877] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 200.193031][ T5911] usb 4-1: Manufacturer: syz [ 200.197749][ T5911] usb 4-1: SerialNumber: syz [ 200.213690][ T5911] usb 4-1: config 0 descriptor?? [ 200.228230][ T5911] usb 4-1: selecting invalid altsetting 2 [ 200.489909][ T5918] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 200.640886][ C1] usb 4-1: async_complete: urb error -71 [ 200.646682][ C1] usb 4-1: async_complete: urb error -71 [ 200.652447][ C1] usb 4-1: async_complete: urb error -71 [ 200.659073][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.665239][ T5911] get_1284_register: usb error -71 [ 200.670978][ T5911] uss720 4-1:0.125: probe with driver uss720 failed with error -71 [ 200.689375][ T5911] usb 4-1: USB disconnect, device number 62 [ 200.695461][ T5918] usb 1-1: Using ep0 maxpacket: 16 [ 200.718173][ T5918] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 200.736149][ T5918] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.747945][ T5918] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 200.767863][ T5918] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 200.785335][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.803698][ T5918] usb 1-1: Product: syz [ 200.808212][ T5918] usb 1-1: Manufacturer: syz [ 200.812820][ T5918] usb 1-1: SerialNumber: syz [ 201.288392][ T8850] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1133'. [ 201.340791][ T5918] usb 1-1: 0:2 : does not exist [ 201.527325][ T9] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 201.665221][ T9] usb 2-1: device descriptor read/64, error -71 [ 201.811358][ T8872] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1147'. [ 201.857269][ T8874] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1148'. [ 201.870835][ T8875] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1148'. [ 201.905436][ T9] usb 2-1: new low-speed USB device number 61 using dummy_hcd [ 202.055465][ T9] usb 2-1: device descriptor read/64, error -71 [ 202.158993][ T5918] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 202.178731][ T9] usb usb2-port1: attempt power cycle [ 202.186428][ T5918] usb 1-1: USB disconnect, device number 57 [ 202.265664][ T1217] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 202.435229][ T1217] usb 4-1: Using ep0 maxpacket: 32 [ 202.441646][ T1217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.452633][ T1217] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.475102][ T1217] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 202.485575][ T1217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.498616][ T1217] usb 4-1: config 0 descriptor?? [ 202.525564][ T9] usb 2-1: new low-speed USB device number 62 using dummy_hcd [ 202.556073][ T9] usb 2-1: device descriptor read/8, error -71 [ 202.795311][ T9] usb 2-1: new low-speed USB device number 63 using dummy_hcd [ 202.818375][ T9] usb 2-1: device descriptor read/8, error -71 [ 202.912352][ T1217] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 202.919404][ T1217] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 202.927007][ T9] usb usb2-port1: unable to enumerate USB device [ 202.933445][ T1217] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 202.940966][ T1217] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 202.947827][ T1217] kone 0003:1E7D:2CED.001D: unknown main item tag 0x0 [ 202.957512][ T1217] kone 0003:1E7D:2CED.001D: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0 [ 202.975531][ T5918] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 203.111697][ T1217] kone 0003:1E7D:2CED.001D: couldn't init struct kone_device [ 203.131243][ T1217] kone 0003:1E7D:2CED.001D: couldn't install mouse [ 203.131276][ T5918] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.141423][ T1217] kone 0003:1E7D:2CED.001D: probe with driver kone failed with error -5 [ 203.178001][ T1217] usb 4-1: USB disconnect, device number 63 [ 203.178028][ T5918] usb 1-1: config 0 has no interface number 0 [ 203.194104][ T5918] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 203.206846][ T5918] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.214943][ T5918] usb 1-1: Product: syz [ 203.220937][ T5918] usb 1-1: Manufacturer: syz [ 203.228828][ T5918] usb 1-1: SerialNumber: syz [ 203.241325][ T5918] usb 1-1: config 0 descriptor?? [ 203.453028][ T5918] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 203.468548][ T5918] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 203.479138][ T5918] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 203.488131][ T5918] usb 1-1: media controller created [ 203.508802][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 203.662645][ T5918] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 203.675270][ T5877] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 203.727622][ T8912] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1164'. [ 203.734625][ T5918] usb 1-1: USB disconnect, device number 58 [ 204.056586][ T8927] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1170'. [ 204.138817][ T5877] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 204.431611][ T8950] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 204.470243][ T9] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 204.615589][ T8959] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1183'. [ 204.638198][ T5877] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 204.645423][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 204.669005][ T9] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 204.701202][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe [ 204.728315][ T9] usb 4-1: New USB device strings: Mfr=1, Product=18, SerialNumber=3 [ 204.751567][ T9] usb 4-1: Product: syz [ 204.762863][ T9] usb 4-1: Manufacturer: syz [ 204.775607][ T9] usb 4-1: SerialNumber: syz [ 204.830925][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 204.995916][ T5911] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 204.998222][ T8972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.012367][ T8972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.025475][ T12] usb 4-1: Failed to submit usb control message: -71 [ 205.044690][ T1217] usb 4-1: USB disconnect, device number 64 [ 205.045266][ T12] usb 4-1: unable to send the bmi data to the device: -71 [ 205.070126][ T12] usb 4-1: unable to get target info from device [ 205.083506][ T12] usb 4-1: could not get target info (-71) [ 205.092072][ T12] usb 4-1: could not probe fw (-71) [ 205.172894][ T5911] usb 1-1: Using ep0 maxpacket: 16 [ 205.185051][ T5911] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 205.202624][ T5911] usb 1-1: config 0 has no interface number 0 [ 205.210376][ T5911] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 205.221303][ T5911] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 205.234080][ T5911] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 205.243484][ T5911] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.252478][ T5911] usb 1-1: Product: syz [ 205.257312][ T5911] usb 1-1: Manufacturer: syz [ 205.268284][ T5911] usb 1-1: SerialNumber: syz [ 205.276634][ T5911] usb 1-1: config 0 descriptor?? [ 205.285670][ T8963] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.292942][ T8963] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.304373][ T8982] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.490659][ T5877] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 205.508090][ T8963] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.518673][ T8963] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 205.613845][ T8991] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1195'. [ 205.738224][ T5911] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 205.770792][ T5911] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 205.796784][ T5911] asix 1-1:0.251: probe with driver asix failed with error -5 [ 205.973248][ T5877] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 206.199916][ T9022] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:0 [ 206.268574][ T9026] mmap: syz.3.1206 (9026) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 206.368273][ T9030] binder: 9029:9030 unknown command 0 [ 206.380304][ T9030] binder: 9029:9030 ioctl c0306201 200000000080 returned -22 [ 206.399869][ T9030] binder_alloc: 9029: binder_alloc_buf size 4120 failed, no address space [ 206.417563][ T9030] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 206.486589][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1213'. [ 206.509658][ T9034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1213'. [ 206.802415][ T9042] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1217'. [ 206.884530][ T9044] binder: BINDER_SET_CONTEXT_MGR already set [ 206.890796][ T9044] binder: 9043:9044 ioctl 4018620d 200000000040 returned -16 [ 207.175470][ T1217] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 207.274729][ T30] audit: type=1326 audit(1757505392.069:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.3.1224" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc14c38eba9 code=0x0 [ 207.347493][ T1217] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.358681][ T1217] usb 2-1: New USB device found, idVendor=056e, idProduct=019b, bcdDevice= 0.00 [ 207.367839][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.385899][ T1217] usb 2-1: config 0 descriptor?? [ 207.600425][ T9047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.609207][ T9047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.762415][ T9] usb 1-1: USB disconnect, device number 59 [ 207.832175][ T1217] elecom 0003:056E:019B.001E: item fetching failed at offset 5/7 [ 207.848307][ T1217] elecom 0003:056E:019B.001E: probe with driver elecom failed with error -22 [ 208.023573][ T1217] usb 2-1: USB disconnect, device number 64 [ 208.155208][ T9] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 208.191399][ T9072] binder: 9071:9072 unknown command 0 [ 208.197525][ T9072] binder: 9071:9072 ioctl c0306201 200000000080 returned -22 [ 208.213589][ T9072] sp0: Synchronizing with TNC [ 208.295445][ T9] usb 1-1: device descriptor read/64, error -71 [ 208.310057][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1229'. [ 208.319430][ T9074] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1229'. [ 208.563043][ T9] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 208.705278][ T9] usb 1-1: device descriptor read/64, error -71 [ 208.815602][ T9] usb usb1-port1: attempt power cycle [ 208.855383][ T5911] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 208.929327][ T9087] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 208.941777][ T9087] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 208.953559][ T9087] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 209.005399][ T5911] usb 2-1: Using ep0 maxpacket: 32 [ 209.012720][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.024599][ T5911] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 209.036293][ T5911] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 209.045800][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.058368][ T5911] usb 2-1: config 0 descriptor?? [ 209.115412][ T1217] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 209.165382][ T9] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 209.195969][ T9] usb 1-1: device descriptor read/8, error -71 [ 209.265238][ T1217] usb 4-1: Using ep0 maxpacket: 16 [ 209.274640][ T1217] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 209.283809][ T1217] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.291857][ T1217] usb 4-1: Product: syz [ 209.296123][ T1217] usb 4-1: Manufacturer: syz [ 209.300714][ T1217] usb 4-1: SerialNumber: syz [ 209.309144][ T1217] usb 4-1: config 0 descriptor?? [ 209.435504][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 209.465871][ T9] usb 1-1: device descriptor read/8, error -71 [ 209.480487][ T5911] kone 0003:1E7D:2CED.001F: unknown global tag 0xe [ 209.487284][ T5911] kone 0003:1E7D:2CED.001F: item 0 2 1 14 parsing failed [ 209.494901][ T5911] kone 0003:1E7D:2CED.001F: parse failed [ 209.500788][ T5911] kone 0003:1E7D:2CED.001F: probe with driver kone failed with error -22 [ 209.535587][ T1217] usb_8dev 4-1:0.0 can0: sending command message failed [ 209.544233][ T1217] usb_8dev 4-1:0.0 can0: can't get firmware version [ 209.575553][ T9] usb usb1-port1: unable to enumerate USB device [ 209.605595][ T1217] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22 [ 209.619960][ T1217] usb 4-1: USB disconnect, device number 65 [ 209.680798][ T1919] usb 2-1: USB disconnect, device number 65 [ 210.456393][ T9116] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1244'. [ 210.836632][ T9140] sp0: Synchronizing with TNC [ 210.935764][ T9140] autofs: Bad value for 'fd' [ 211.243337][ T9160] netlink: 'syz.1.1264': attribute type 10 has an invalid length. [ 211.279972][ T9160] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 211.300152][ T9160] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 211.306944][ T9160] syzkaller0: persist enabled [ 211.312109][ T9160] syzkaller0: tun_chr_ioctl cmd 35108 [ 211.318790][ T9160] syzkaller0: tun_chr_ioctl cmd 1074025675 [ 211.324797][ T9160] syzkaller0: persist enabled [ 211.385248][ T1919] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 211.426008][ T5933] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 211.545309][ T1919] usb 1-1: Using ep0 maxpacket: 8 [ 211.569801][ T1919] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 211.588394][ T1919] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 211.605979][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 211.608431][ T1919] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 211.626108][ T1919] usb 1-1: Product: syz [ 211.630801][ T1919] usb 1-1: Manufacturer: syz [ 211.635504][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.635535][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 211.635575][ T5933] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 211.635598][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.680258][ T5933] usb 4-1: config 0 descriptor?? [ 211.698797][ T1919] usb 1-1: SerialNumber: syz [ 211.885611][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1273'. [ 211.922316][ T9154] netlink: 'syz.0.1261': attribute type 4 has an invalid length. [ 211.939817][ T9154] netlink: 'syz.0.1261': attribute type 4 has an invalid length. [ 211.957507][ T9154] Invalid source name [ 211.961720][ T9154] UBIFS error (pid: 9154): cannot open "./file0", error -22 [ 211.962714][ T1919] usb 1-1: Invalid connection information received from device [ 212.124096][ T5933] hid-rmi 0003:06CB:81A7.0020: unknown main item tag 0x0 [ 212.140728][ T5933] hid-rmi 0003:06CB:81A7.0020: unknown main item tag 0x0 [ 212.150150][ T5933] hid-rmi 0003:06CB:81A7.0020: unknown main item tag 0x0 [ 212.165361][ T5933] hid-rmi 0003:06CB:81A7.0020: unknown main item tag 0x0 [ 212.179998][ T5933] hid-rmi 0003:06CB:81A7.0020: unknown main item tag 0x0 [ 212.182303][ T1919] usb 1-1: USB disconnect, device number 64 [ 212.187177][ T5933] hid-rmi 0003:06CB:81A7.0020: unknown main item tag 0x0 [ 212.209380][ T5933] hid-rmi 0003:06CB:81A7.0020: unknown main item tag 0x0 [ 212.229562][ T5933] hid-rmi 0003:06CB:81A7.0020: unknown main item tag 0x0 [ 212.239118][ T5933] hid-rmi 0003:06CB:81A7.0020: unknown main item tag 0x0 [ 212.247045][ T5933] hid-rmi 0003:06CB:81A7.0020: unknown main item tag 0x0 [ 212.267424][ T5933] hid-rmi 0003:06CB:81A7.0020: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0 [ 212.479853][ T5877] Bluetooth: hci2: unexpected event for opcode 0x0c5a [ 212.492198][ T5933] usb 4-1: USB disconnect, device number 66 [ 212.535567][ T5911] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 212.661888][ T5877] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 212.687239][ T5911] usb 2-1: Using ep0 maxpacket: 16 [ 212.694200][ T5911] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.716554][ T5911] usb 2-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 212.725888][ T5911] usb 2-1: New USB device strings: Mfr=0, Product=8, SerialNumber=0 [ 212.734004][ T5911] usb 2-1: Product: syz [ 212.741237][ T5911] usb 2-1: config 0 descriptor?? [ 212.751964][ T5911] gspca_main: spca501-2.14.0 probing 0000:0000 [ 212.949342][ T5911] gspca_spca501: reg write: error -71 [ 212.961166][ T5911] spca501 2-1:0.0: Reg write failed for 0x02,0x0f,0x05 [ 212.969020][ T5911] spca501 2-1:0.0: probe with driver spca501 failed with error -22 [ 212.979554][ T5911] usb 2-1: USB disconnect, device number 66 [ 213.126085][ T5877] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 213.174919][ T9219] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1288'. [ 213.386117][ T9229] binder: 9228:9229 unknown command 0 [ 213.391559][ T9229] binder: 9228:9229 ioctl c0306201 200000000080 returned -22 [ 213.417425][ T9229] binder_alloc: 9228: binder_alloc_buf size 4120 failed, no address space [ 213.426601][ T9229] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 213.535779][ T5877] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 213.560911][ T9239] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1295'. [ 213.653135][ T9245] tc_dump_action: action bad kind [ 213.678640][ T9246] binder: 9240:9246 unknown command 0 [ 213.685011][ T9246] binder: 9240:9246 ioctl c0306201 200000000080 returned -22 [ 213.874387][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1303'. [ 213.895344][ T1919] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 213.938207][ T9258] netlink: 'syz.0.1303': attribute type 3 has an invalid length. [ 214.086690][ T5877] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 214.094707][ T1919] usb 4-1: config 0 has an invalid interface number: 93 but max is 0 [ 214.106470][ T1919] usb 4-1: config 0 has no interface number 0 [ 214.115930][ T1919] usb 4-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 214.125021][ T1919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.136374][ T1919] usb 4-1: Product: syz [ 214.140589][ T1919] usb 4-1: Manufacturer: syz [ 214.145355][ T1919] usb 4-1: SerialNumber: syz [ 214.152813][ T1919] usb 4-1: config 0 descriptor?? [ 214.187002][ T9266] binder: 9265:9266 unknown command 0 [ 214.192575][ T9266] binder: 9265:9266 ioctl c0306201 200000000080 returned -22 [ 214.206364][ T9266] binder_alloc: 9265: binder_alloc_buf size 4120 failed, no address space [ 214.221621][ T9266] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 214.292413][ T9272] binder: 9271:9272 unknown command 0 [ 214.300940][ T9272] binder: 9271:9272 ioctl c0306201 200000000080 returned -22 [ 214.360535][ T1919] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 214.387810][ T1919] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 214.399245][ T1919] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 214.410711][ T1919] usb 4-1: media controller created [ 214.420164][ T1919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.481808][ T1919] DVB: Unable to find symbol dib7000p_attach() [ 214.492212][ T1919] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 214.504400][ T1919] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 214.532813][ T1919] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 214.557518][ T1919] usb 4-1: media controller created [ 214.577716][ T1919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 214.589036][ T5877] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 214.601304][ T1919] dib0700: the master dib7090 has to be initialized first [ 214.611472][ T1919] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 214.694219][ T1919] rc_core: IR keymap rc-dib0700-rc5 not found [ 214.705798][ T1919] Registered IR keymap rc-empty [ 214.711477][ T1919] dvb-usb: could not initialize remote control. [ 214.725055][ T1919] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 214.740074][ T1919] usb 4-1: USB disconnect, device number 67 [ 214.834890][ T1919] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 214.959658][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'. [ 215.012923][ T9299] netlink: 830 bytes leftover after parsing attributes in process `syz.0.1322'. [ 215.030805][ T9299] binder: 9298:9299 unknown command 0 [ 215.036324][ T9299] binder: 9298:9299 ioctl c0306201 200000000080 returned -22 [ 215.126109][ T5877] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 215.168525][ T9307] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1326'. [ 215.494117][ T5877] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 215.568929][ T9332] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1338'. [ 215.648713][ T9336] binder: 9335:9336 unknown command 0 [ 215.654206][ T9336] binder: 9335:9336 ioctl c0306201 200000000080 returned -22 [ 215.674202][ T9337] sctp: [Deprecated]: syz.0.1337 (pid 9337) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.674202][ T9337] Use struct sctp_sack_info instead [ 215.933697][ T9334] infiniband syz2: set active [ 215.939626][ T9334] infiniband syz2: added bond_slave_0 [ 215.974260][ T9334] RDS/IB: syz2: added [ 215.979185][ T9334] smc: adding ib device syz2 with port count 1 [ 215.985805][ T9334] smc: ib device syz2 port 1 has no pnetid [ 216.456464][ T9347] netlink: 'syz.1.1343': attribute type 10 has an invalid length. [ 216.484765][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.492571][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.529656][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.537097][ T9347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.544635][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.552656][ T9347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.573671][ T5877] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 216.590912][ T9347] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 217.610795][ T5877] Bluetooth: hci2: unexpected event for opcode 0x0c22 [ 218.111721][ T5933] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 218.295989][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 218.306564][ T5933] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 218.314856][ T5933] usb 1-1: config 0 has no interface number 0 [ 218.340428][ T5933] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 218.351620][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.371768][ T5933] usb 1-1: Product: syz [ 218.388796][ T5933] usb 1-1: Manufacturer: syz [ 218.397820][ T5933] usb 1-1: SerialNumber: syz [ 218.415328][ T5933] usb 1-1: config 0 descriptor?? [ 218.442721][ T5933] smsc95xx v2.0.0 [ 218.675406][ T1919] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 218.721227][ T5877] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 218.784631][ T3522] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.815812][ T1919] usb 2-1: device descriptor read/64, error -71 [ 218.903714][ T5933] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 218.935257][ T5933] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 218.958684][ T3522] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.976678][ T5933] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 219.013578][ T5933] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 219.039283][ T5933] usb 1-1: USB disconnect, device number 65 [ 219.056411][ T1919] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 219.078833][ T3522] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.205344][ T1919] usb 2-1: device descriptor read/64, error -71 [ 219.214835][ T3522] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.330324][ T1919] usb usb2-port1: attempt power cycle [ 219.405567][ T5933] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 219.455427][ T3522] bridge_slave_1: left allmulticast mode [ 219.461420][ T3522] bridge_slave_1: left promiscuous mode [ 219.488130][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.537376][ T3522] bridge_slave_0: left allmulticast mode [ 219.543084][ T3522] bridge_slave_0: left promiscuous mode [ 219.565337][ T5933] usb 1-1: device descriptor read/64, error -71 [ 219.565543][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.673523][ T9412] netlink: 'syz.2.1369': attribute type 10 has an invalid length. [ 219.688026][ T1919] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 219.754609][ T1919] usb 2-1: device descriptor read/8, error -71 [ 219.830588][ T5933] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 219.985362][ T5933] usb 1-1: device descriptor read/64, error -71 [ 220.034841][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 220.052273][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 220.062841][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 220.077062][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 220.089219][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 220.106795][ T5933] usb usb1-port1: attempt power cycle [ 220.477181][ T5933] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 220.504810][ T3522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.519612][ T5933] usb 1-1: device descriptor read/8, error -71 [ 220.539114][ T3522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.565280][ T3522] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 220.584730][ T3522] veth1_vlan: left allmulticast mode [ 220.596029][ T3522] bond0 (unregistering): Released all slaves [ 220.597917][ T1919] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 220.640175][ T9412] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.647986][ T9412] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.648762][ T1919] usb 2-1: device descriptor read/8, error -71 [ 220.701495][ T9412] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.708802][ T9412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.716386][ T9412] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.723529][ T9412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.785382][ T5933] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 220.788782][ T1919] usb usb2-port1: unable to enumerate USB device [ 220.802795][ T9412] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 220.813547][ T5933] usb 1-1: device descriptor read/8, error -71 [ 220.845656][ T5876] Bluetooth: hci3: command 0x0406 tx timeout [ 220.932777][ T5933] usb usb1-port1: unable to enumerate USB device [ 220.959015][ T9427] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1370'. [ 221.542168][ T5877] Bluetooth: hci0: unexpected event for opcode 0x0c22 [ 221.784821][ T3522] hsr_slave_0: left promiscuous mode [ 221.820926][ T3522] hsr_slave_1: left promiscuous mode [ 221.830090][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.843621][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.860975][ T3522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.884401][ T3522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.909930][ T3522] veth1_macvtap: left promiscuous mode [ 221.916094][ T3522] veth0_macvtap: left promiscuous mode [ 221.921646][ T3522] veth1_vlan: left promiscuous mode [ 221.927184][ T3522] veth0_vlan: left promiscuous mode [ 222.135268][ T5877] Bluetooth: hci2: command tx timeout [ 222.308548][ T3522] team0 (unregistering): Port device team_slave_1 removed [ 222.340181][ T3522] team0 (unregistering): Port device team_slave_0 removed [ 222.462169][ T9460] FAULT_INJECTION: forcing a failure. [ 222.462169][ T9460] name failslab, interval 1, probability 0, space 0, times 0 [ 222.478953][ T9460] CPU: 1 UID: 0 PID: 9460 Comm: syz.1.1378 Not tainted syzkaller #0 PREEMPT(full) [ 222.478978][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 222.478990][ T9460] Call Trace: [ 222.478997][ T9460] [ 222.479004][ T9460] dump_stack_lvl+0x189/0x250 [ 222.479025][ T9460] ? __pfx____ratelimit+0x10/0x10 [ 222.479051][ T9460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.479068][ T9460] ? __pfx__printk+0x10/0x10 [ 222.479098][ T9460] ? __pfx___might_resched+0x10/0x10 [ 222.479117][ T9460] ? fs_reclaim_acquire+0x7d/0x100 [ 222.479143][ T9460] should_fail_ex+0x414/0x560 [ 222.479180][ T9460] should_failslab+0xa8/0x100 [ 222.479203][ T9460] kmem_cache_alloc_node_noprof+0x77/0x710 [ 222.479221][ T9460] ? __alloc_skb+0x112/0x2d0 [ 222.479246][ T9460] ? netlink_autobind+0xdb/0x300 [ 222.479267][ T9460] __alloc_skb+0x112/0x2d0 [ 222.479297][ T9460] netlink_sendmsg+0x5c6/0xb30 [ 222.479322][ T9460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.479341][ T9460] ? aa_sock_msg_perm+0xf1/0x1d0 [ 222.479369][ T9460] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 222.479392][ T9460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.479409][ T9460] __sock_sendmsg+0x219/0x270 [ 222.479435][ T9460] ____sys_sendmsg+0x505/0x830 [ 222.479459][ T9460] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.479487][ T9460] ? import_iovec+0x74/0xa0 [ 222.479507][ T9460] ___sys_sendmsg+0x21f/0x2a0 [ 222.479528][ T9460] ? __pfx____sys_sendmsg+0x10/0x10 [ 222.479582][ T9460] ? __fget_files+0x2a/0x420 [ 222.479604][ T9460] ? __fget_files+0x3a0/0x420 [ 222.479637][ T9460] __x64_sys_sendmsg+0x19b/0x260 [ 222.479658][ T9460] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 222.479686][ T9460] ? __pfx_ksys_write+0x10/0x10 [ 222.479711][ T9460] ? do_syscall_64+0xbe/0xfa0 [ 222.479741][ T9460] do_syscall_64+0xfa/0xfa0 [ 222.479765][ T9460] ? lockdep_hardirqs_on+0x9c/0x150 [ 222.479791][ T9460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.479809][ T9460] ? clear_bhb_loop+0x60/0xb0 [ 222.479831][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.479848][ T9460] RIP: 0033:0x7f2b2478eba9 [ 222.479865][ T9460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.479890][ T9460] RSP: 002b:00007f2b256ac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.479910][ T9460] RAX: ffffffffffffffda RBX: 00007f2b249d5fa0 RCX: 00007f2b2478eba9 [ 222.479924][ T9460] RDX: 000000000000c000 RSI: 0000200000000100 RDI: 0000000000000004 [ 222.479936][ T9460] RBP: 00007f2b256ac090 R08: 0000000000000000 R09: 0000000000000000 [ 222.479947][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.479957][ T9460] R13: 00007f2b249d6038 R14: 00007f2b249d5fa0 R15: 00007ffd3ef3cd88 [ 222.479988][ T9460] [ 222.754038][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.227817][ T5877] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 223.258110][ T9415] chnl_net:caif_netlink_parms(): no params data found [ 223.346206][ T9475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.626722][ T5933] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 223.634462][ T9415] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.666038][ T9415] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.673441][ T9415] bridge_slave_0: entered allmulticast mode [ 223.688192][ T9415] bridge_slave_0: entered promiscuous mode [ 223.697396][ T9415] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.704807][ T9415] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.715534][ T9415] bridge_slave_1: entered allmulticast mode [ 223.733122][ T9415] bridge_slave_1: entered promiscuous mode [ 223.806497][ T5933] usb 1-1: Using ep0 maxpacket: 8 [ 223.818450][ T5933] usb 1-1: config 1 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 77, changing to 10 [ 223.834389][ T9415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.848672][ T5933] usb 1-1: config 1 interface 0 has no altsetting 0 [ 223.860971][ T9415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.877066][ T5933] usb 1-1: New USB device found, idVendor=05ac, idProduct=0342, bcdDevice= 0.40 [ 223.890030][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.899407][ T5933] usb 1-1: Product: syz [ 223.903712][ T5933] usb 1-1: Manufacturer: syz [ 223.908712][ T5933] usb 1-1: SerialNumber: syz [ 223.932154][ T9415] team0: Port device team_slave_0 added [ 223.942585][ T9415] team0: Port device team_slave_1 added [ 223.981954][ T9415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.989214][ T9415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.016486][ T9415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.029733][ T9415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.036869][ T9415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.063055][ T9415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.148835][ T5933] usbhid 1-1:1.0: can't add hid device: -71 [ 224.154202][ T9415] hsr_slave_0: entered promiscuous mode [ 224.163346][ T5933] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 [ 224.180565][ T9415] hsr_slave_1: entered promiscuous mode [ 224.197259][ T9415] debugfs: 'hsr0' already exists in 'hsr' [ 224.203014][ T9415] Cannot create hsr debugfs directory [ 224.205832][ T5933] usb 1-1: USB disconnect, device number 70 [ 224.219213][ T5877] Bluetooth: hci2: command tx timeout [ 224.397997][ T9506] binder: 9505:9506 ioctl c0306201 2000000003c0 returned -14 [ 224.408125][ T9506] binder: 9505:9506 ioctl c0306201 200000000180 returned -14 [ 224.632222][ T5877] Bluetooth: hci1: unexpected event for opcode 0x0c22 [ 224.971975][ T9415] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.986862][ T9415] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 225.014463][ T9415] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 225.025476][ T9] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 225.040987][ T9415] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 225.098730][ T9536] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000b2: 0000 [#1] SMP KASAN PTI [ 225.098757][ T9536] KASAN: null-ptr-deref in range [0x0000000000000590-0x0000000000000597] [ 225.098777][ T9536] CPU: 1 UID: 0 PID: 9536 Comm: syz.0.1397 Not tainted syzkaller #0 PREEMPT(full) [ 225.098801][ T9536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 225.098814][ T9536] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 225.098844][ T9536] Code: e8 52 5e cf fc 49 c7 07 00 00 00 00 eb 0e e8 84 56 6b fc eb 05 e8 7d 56 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 2e 5d cf fc 4d 8b 3e 4d 85 ff 74 [ 225.098872][ T9536] RSP: 0018:ffffc90019c5f9e0 EFLAGS: 00010206 [ 225.098893][ T9536] RAX: ffffffff8554a6c3 RBX: 0000000000000000 RCX: 0000000000080000 [ 225.098906][ T9536] RDX: ffffc9000c439000 RSI: 000000000000038e RDI: 000000000000038f [ 225.098918][ T9536] RBP: ffffc90019c5fa90 R08: ffffffff8fe50ccf R09: 1ffffffff1fca199 [ 225.098934][ T9536] R10: dffffc0000000000 R11: fffffbfff1fca19a R12: 00000000000000b2 [ 225.098949][ T9536] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a274bd0 [ 225.098966][ T9536] FS: 00007f7e8f3f66c0(0000) GS:ffff8881258b1000(0000) knlGS:0000000000000000 [ 225.098985][ T9536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.099000][ T9536] CR2: 000000110c31541a CR3: 0000000033b3a000 CR4: 00000000003526f0 [ 225.099020][ T9536] Call Trace: [ 225.099028][ T9536] [ 225.099037][ T9536] ? vt_disallocate_all+0x3b/0xe0 [ 225.099063][ T9536] ? __pfx_vc_deallocate+0x10/0x10 [ 225.099087][ T9536] ? is_console_locked+0x9/0x20 [ 225.099112][ T9536] vt_disallocate_all+0x60/0xe0 [ 225.099159][ T9536] vt_ioctl+0x1adc/0x1f20 [ 225.099184][ T9536] ? __pfx_vt_ioctl+0x10/0x10 [ 225.099213][ T9536] ? __fget_files+0x2a/0x420 [ 225.099241][ T9536] ? tty_jobctrl_ioctl+0x369/0xb70 [ 225.099265][ T9536] ? __fget_files+0x3a0/0x420 [ 225.099291][ T9536] ? __fget_files+0x2a/0x420 [ 225.099318][ T9536] tty_ioctl+0x926/0xde0 [ 225.099347][ T9536] ? __pfx_tty_ioctl+0x10/0x10 [ 225.099374][ T9536] __se_sys_ioctl+0xfc/0x170 [ 225.099395][ T9536] do_syscall_64+0xfa/0xfa0 [ 225.099425][ T9536] ? lockdep_hardirqs_on+0x9c/0x150 [ 225.099454][ T9536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.099474][ T9536] ? clear_bhb_loop+0x60/0xb0 [ 225.099500][ T9536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.099520][ T9536] RIP: 0033:0x7f7e9118eba9 [ 225.099537][ T9536] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.099556][ T9536] RSP: 002b:00007f7e8f3f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.099578][ T9536] RAX: ffffffffffffffda RBX: 00007f7e913d5fa0 RCX: 00007f7e9118eba9 [ 225.099595][ T9536] RDX: 0000000000000000 RSI: 0000000000005608 RDI: 0000000000000006 [ 225.099609][ T9536] RBP: 00007f7e91211e19 R08: 0000000000000000 R09: 0000000000000000 [ 225.099622][ T9536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.099635][ T9536] R13: 00007f7e913d6038 R14: 00007f7e913d5fa0 R15: 00007ffd23cfeff8 [ 225.099659][ T9536] [ 225.099667][ T9536] Modules linked in: [ 225.099708][ T9536] ---[ end trace 0000000000000000 ]--- [ 225.099929][ T9536] RIP: 0010:vc_deallocate+0x303/0x3e0 [ 225.099959][ T9536] Code: e8 52 5e cf fc 49 c7 07 00 00 00 00 eb 0e e8 84 56 6b fc eb 05 e8 7d 56 6b fc 31 db 4c 8d b3 90 05 00 00 4d 89 f4 49 c1 ec 03 <43> 80 3c 2c 00 74 08 4c 89 f7 e8 2e 5d cf fc 4d 8b 3e 4d 85 ff 74 [ 225.099977][ T9536] RSP: 0018:ffffc90019c5f9e0 EFLAGS: 00010206 [ 225.099994][ T9536] RAX: ffffffff8554a6c3 RBX: 0000000000000000 RCX: 0000000000080000 [ 225.100007][ T9536] RDX: ffffc9000c439000 RSI: 000000000000038e RDI: 000000000000038f [ 225.100021][ T9536] RBP: ffffc90019c5fa90 R08: ffffffff8fe50ccf R09: 1ffffffff1fca199 [ 225.100037][ T9536] R10: dffffc0000000000 R11: fffffbfff1fca19a R12: 00000000000000b2 [ 225.100050][ T9536] R13: dffffc0000000000 R14: 0000000000000590 R15: ffffffff9a274bd0 [ 225.100065][ T9536] FS: 00007f7e8f3f66c0(0000) GS:ffff8881257b1000(0000) knlGS:0000000000000000 [ 225.100081][ T9536] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 225.100096][ T9536] CR2: 000000110c230000 CR3: 0000000033b3a000 CR4: 00000000003526f0 [ 225.100115][ T9536] Kernel panic - not syncing: Fatal exception [ 225.100359][ T9536] Kernel Offset: disabled