last executing test programs: 12.180101834s ago: executing program 1 (id=352): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x2}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.684437787s ago: executing program 1 (id=363): io_uring_setup(0x675, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b020000000000010902"], 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[], 0x0) 6.575109615s ago: executing program 1 (id=382): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/syzkaller0/queues/tx-0/xps_cpus\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/syzkaller0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) write(r3, &(0x7f0000000500)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/syzkaller0/queues/tx-1/xps_cpus\x00', 0x2, 0x0) write(r4, &(0x7f0000000500)='1', 0x1) 6.549737875s ago: executing program 0 (id=384): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000040154220a9055015bbe4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.435237629s ago: executing program 1 (id=386): syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f0009"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket(0x10, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32, @ANYBLOB="3d000e008000000008021100000008021100000008021100"], 0x7c}}, 0x39db77225c63fa4c) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x20502, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc4abbf0a4a40694b}, 0x90) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x0, 0x0, 0x1, 0x2}) creat(&(0x7f0000000100)='./file0\x00', 0x7a) 4.701458582s ago: executing program 3 (id=391): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.557217236s ago: executing program 3 (id=392): ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) set_mempolicy(0x4005, 0x0, 0xa) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0xfffffffffffffdf3, 0x2) ioctl$AUTOFS_IOC_FAIL(r1, 0x4c80, 0xffffffe4) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, 0x0) 4.520988757s ago: executing program 1 (id=393): io_uring_setup(0x675, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b020000000000010902"], 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[], 0x0) 4.147019676s ago: executing program 3 (id=395): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setuid(0xee01) bind$bt_hci(r0, &(0x7f0000000c80)={0x1f, 0x1}, 0x6) 4.113761417s ago: executing program 3 (id=396): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x900, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) 4.062945779s ago: executing program 0 (id=397): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKROSET(r0, 0x125d, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, 0xffffffffffffffff, 0xf154a000) setns(0xc9, 0x0) r1 = socket(0xa, 0x2, 0x5) shutdown(r1, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 3.283226498s ago: executing program 0 (id=398): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x925, 0x8888, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x24, "", [{{0x9, 0x4, 0x0, 0x5, 0xfe, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x3e, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x0, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0022180000000501150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 2.902774088s ago: executing program 3 (id=399): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x3b9, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) 2.746973662s ago: executing program 3 (id=400): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000004c0)={0x34, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x2}, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.42718075s ago: executing program 4 (id=403): syz_usb_connect$uac2(0x3, 0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="120100020000002082052500400001020301090271000301f81005080b020001052008090400000001012000092401fdff0a11004708240a00000b7f0009"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={0x0, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x8000) socket(0x10, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x404000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB, @ANYRES32, @ANYBLOB="3d000e008000000008021100000008021100000008021100"], 0x7c}}, 0x39db77225c63fa4c) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x80882) openat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000040), 0x21, 0x40000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x20502, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x101000, 0x110) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0xc4abbf0a4a40694b}, 0x90) r3 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x0, 0x0, 0x1, 0x2}) creat(&(0x7f0000000100)='./file0\x00', 0x7a) 1.312166678s ago: executing program 1 (id=413): syz_usb_connect(0x2, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0xfffffffe, 0x1e5}, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000380), 0x3, 0xbc01) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r0, 0x80dc5521, &(0x7f0000000000)=""/138) 1.191020691s ago: executing program 2 (id=415): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x2, 0x2, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000003f80)={0x2020}, 0x2020) 1.118568582s ago: executing program 0 (id=416): r0 = fanotify_init(0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x3, {0x0, 0x1}}, 0x18) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x200000f, 0x31, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r5, &(0x7f0000000180)="0b032211e0ff25000200475400f6a13bb10000a8880088484803", 0x1e0ff, 0x0, &(0x7f0000000140)={0x11, 0x0, r6}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x28, r7, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5, 0xb, 0x1}]}, 0x28}}, 0x44080) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.049905085s ago: executing program 2 (id=417): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x400) ioctl$FE_GET_INFO(r0, 0x80a86f3d, &(0x7f0000000380)) 939.201647ms ago: executing program 2 (id=418): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x20000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'multiq3\x00', [0x140, 0x2, 0x0, 0x7, 0x1, 0x10000, 0x6, 0x6, 0x3, 0xc52d, 0x3, 0x10, 0xf8, 0x4, 0x4ce, 0x9e9c, 0x101, 0x400, 0x6, 0x8, 0x8000004, 0x0, 0x80000a, 0x9, 0x40006, 0x200000, 0xae, 0x100000, 0x8, 0xe, 0x8]}) 939.014487ms ago: executing program 2 (id=419): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) 694.663693ms ago: executing program 2 (id=420): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f00000000c0)='7', 0x1) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="141bdf000060"], 0xb2) 279.401554ms ago: executing program 4 (id=421): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x22102, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000900)=0x15) ioctl(r0, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c20)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xf9) 235.201125ms ago: executing program 0 (id=422): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x8, @empty, 0x2}, 0x1c) listen(r2, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) 234.997775ms ago: executing program 0 (id=423): io_uring_setup(0x675, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x1000, 0x16d3, 0x5, 0x180, 0x2000000000000004, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x2, 0x4, 0xfffffffbfffffffe, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0x25000, 0x4000}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r3, 0x301, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xc0}, 0x24008080) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2, 0x0, 0x0, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201510100000010da092b020000000000010902"], 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[], 0x0) 221.537385ms ago: executing program 2 (id=424): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x480d0}, 0x48040) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x38, 0x40fff, 0x2000000003fffc, 0x180, 0x2, 0x0, 0xf1, 0x0, 0x7fffffffffffe, 0x9, 0x4005, 0x8, 0x0, 0x43, 0xfffffffffffffffd, 0xbdb], 0xdddd0000, 0x1c6017}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 178.995956ms ago: executing program 4 (id=425): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) mkdirat(r0, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) unlink(&(0x7f00000002c0)='./config/nvmet/ports/1/subsystems/testsubsys\x00') 79.300349ms ago: executing program 4 (id=426): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000003d00)=[{&(0x7f0000000880)=""/144, 0x90}, {&(0x7f00000009c0)=""/204, 0xcc}, {&(0x7f0000004580)=""/4136, 0x1028}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f00000027c0)=""/4096, 0x1000}, {&(0x7f00000037c0)=""/98, 0x62}, {&(0x7f0000003840)=""/43, 0x2b}, {&(0x7f0000003880)=""/38, 0x26}, {&(0x7f00000038c0)=""/208, 0xd0}, {&(0x7f00000039c0)=""/246, 0xf6}, {&(0x7f0000003ac0)=""/113, 0x71}, {&(0x7f0000003b40)=""/162, 0xa2}, {&(0x7f0000003c00)=""/193, 0xc1}], 0xd}, 0x1000}], 0x1, 0x40000100, 0x0) 48.528119ms ago: executing program 4 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001180)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x218018, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./proc/net/can/rcvlist_all\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/4096, 0x1000) 0s ago: executing program 4 (id=428): r0 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001f00), 0x0, 0x8082) ioctl$EVIOCGID(r1, 0x5421, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x541442) write(0x1, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x9, 0xc9}}}, 0x6) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r2, 0x40505412, &(0x7f0000000240)={0x6, 0xfffffffb, 0x80, 0x0, 0x6}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) open_tree(0xffffffffffffffff, 0x0, 0x1) write(r2, &(0x7f00000002c0)="b0463e800b3c78b1c2d14d428004e60920794c4cc78a06c57284af98c44bcca1fb4990bb64b4e5e72dd6065a41f5703a5a810b61dbb36a2920f68bc10c8217354e11c35f0bbf9e6067604e10cc13039aac7b4cb1d5d89fad275adf3833bca74f95355b5fd7c6986ef60e006a09f749eb920655ae63f7e45fdf0ea52efc20e7f822779005e711908b26314e65fb173d09840aea796b0872c5bc481c90107b90d8d2932bc2ca7c0351c22a28a8c65ff9d990be64c71f79", 0xb6) mount(0x0, 0x0, &(0x7f0000000040)='proc\x00', 0x8000, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r3, 0x114, 0xa, &(0x7f0000000440)=ANY=[@ANYBLOB="030000884232"], 0x4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x44) unshare(0x44000800) kernel console output (not intermixed with test programs): 03] [ 89.765628][ T4707] device syzkaller0 entered promiscuous mode [ 89.774753][ T4705] sctp: [Deprecated]: syz.0.134 (pid 4705) Use of int in max_burst socket option deprecated. [ 89.774753][ T4705] Use struct sctp_assoc_value instead [ 89.885240][ T7] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 89.896510][ T7] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 89.915321][ T7] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 89.929790][ T7] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 89.943261][ T7] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 89.955620][ T7] mcp2221 0003:04D8:00DD.0002: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 89.976656][ T4711] capability: warning: `syz.0.137' uses deprecated v2 capabilities in a way that may be insecure [ 90.101718][ C0] usb 4-1: input irq status -75 received [ 90.144313][ T4230] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 90.162176][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.189167][ T4230] usb 5-1: Product: syz [ 90.201124][ T4230] usb 5-1: Manufacturer: syz [ 90.212070][ T4230] usb 5-1: SerialNumber: syz [ 90.221934][ T4229] usb 2-1: unable to get BOS descriptor or descriptor too short [ 90.237225][ T4229] usb 2-1: no configurations [ 90.243070][ T4229] usb 2-1: can't read configurations, error -22 [ 90.335130][ T4243] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 90.350040][ T1111] usb 4-1: USB disconnect, device number 5 [ 90.391791][ T7] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 90.434617][ T4721] jffs2: notice: (4721) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 90.712242][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 90.771888][ T4243] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 90.771939][ T7] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 90.791772][ T4243] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 90.799785][ T7] usb 1-1: config 0 has no interface number 0 [ 90.810562][ T7] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 90.830347][ T7] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 90.860125][ T7] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 90.877394][ T7] usb 1-1: config 0 interface 2 has no altsetting 0 [ 91.017760][ T4243] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 91.041997][ T7] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 91.051691][ T4243] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.052321][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.059721][ T4243] usb 3-1: Product: syz [ 91.088312][ T7] usb 1-1: Product: syz [ 91.092604][ T7] usb 1-1: Manufacturer: syz [ 91.093703][ T4243] usb 3-1: Manufacturer: syz [ 91.097216][ T7] usb 1-1: SerialNumber: syz [ 91.127480][ T4243] usb 3-1: SerialNumber: syz [ 91.133581][ T7] usb 1-1: config 0 descriptor?? [ 91.172149][ T4715] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 91.190113][ T4715] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 91.203309][ T4243] kobil_sct 3-1:1.0: KOBIL USB smart card terminal converter detected [ 91.222428][ T4243] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 91.269745][ T4726] page:ffffea0001510000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54400 [ 91.321182][ T4726] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 91.328890][ T4726] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 91.358358][ T4726] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 91.376372][ T4726] page dumped because: unmovable page [ 91.408643][ T4726] page_owner tracks the page as allocated [ 91.418757][ T4726] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x102cc2(GFP_HIGHUSER|__GFP_NOWARN), pid 1111, ts 90347889279, free_ts 23910456367 [ 91.463746][ T4726] get_page_from_freelist+0x24f6/0x2670 [ 91.472519][ T4726] __alloc_pages+0x1ee/0x480 [ 91.478874][ T4726] __vmalloc_node_range+0x4b1/0x8b0 [ 91.484760][ T4726] vmalloc+0x75/0x80 [ 91.489149][ T4726] kcov_remote_start+0x2fa/0x5e0 [ 91.495433][ T4726] hub_event+0x153/0x5260 [ 91.499883][ T4726] process_one_work+0x867/0xff0 [ 91.505240][ T4726] worker_thread+0xad7/0x12a0 [ 91.510178][ T4726] kthread+0x42e/0x520 [ 91.514878][ T4726] ret_from_fork+0x1f/0x30 [ 91.519346][ T4726] page last free stack trace: [ 91.524703][ T4726] free_unref_page_prepare+0x637/0x6c0 [ 91.530299][ T4726] free_unref_page+0x8f/0x2a0 [ 91.548936][ T4726] free_contig_range+0x96/0xf0 [ 91.560511][ T4726] destroy_args+0xef/0xa00 [ 91.577541][ T4197] Bluetooth: Wrong link type (-71) [ 91.580892][ T7] usb 1-1: USB disconnect, device number 5 [ 91.590355][ T4726] debug_vm_pgtable+0x321/0x380 [ 91.599735][ T4726] do_one_initcall+0x272/0x730 [ 91.607628][ T4726] do_initcall_level+0x13d/0x1f0 [ 91.617176][ T4726] do_initcalls+0x4b/0x90 [ 91.625444][ T4726] kernel_init_freeable+0x3d5/0x560 [ 91.630715][ T4726] kernel_init+0x19/0x1b0 [ 91.647115][ T4726] ret_from_fork+0x1f/0x30 [ 91.698901][ T4330] udevd[4330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.744014][ T4732] device syzkaller0 entered promiscuous mode [ 92.091910][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 92.241841][ T21] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 92.301761][ T7] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 92.341793][ T4174] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.431777][ T1111] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 92.541794][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 92.581942][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -32 [ 92.631984][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -32 [ 92.671911][ T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 92.831866][ T7] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 92.834214][ T1111] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 92.842639][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.859448][ T7] usb 1-1: Product: syz [ 92.863784][ T7] usb 1-1: Manufacturer: syz [ 92.867451][ T1111] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 92.868665][ T7] usb 1-1: SerialNumber: syz [ 92.884476][ T1111] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 92.889903][ T7] usb 1-1: config 0 descriptor?? [ 92.900773][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.933989][ T7] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 93.055052][ T4226] usb 3-1: USB disconnect, device number 5 [ 93.078472][ T4226] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 93.087682][ T4751] zero sized request [ 93.101427][ T4226] kobil_sct 3-1:1.0: device disconnected [ 93.121820][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 93.166690][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 93.193857][ T4229] usb 4-1: USB disconnect, device number 6 [ 93.195099][ T4756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.207464][ T4756] IPv6: NLM_F_CREATE should be set when creating new route [ 93.207602][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 93.214776][ T4756] IPv6: NLM_F_CREATE should be set when creating new route [ 93.214798][ T4756] IPv6: NLM_F_CREATE should be set when creating new route [ 93.261967][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 93.289806][ T4758] device syzkaller0 entered promiscuous mode [ 93.296261][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 93.316132][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 93.330316][ T4230] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 93.346271][ T4230] lan78xx: probe of 5-1:1.0 failed with error -71 [ 93.368412][ T4230] usb 5-1: USB disconnect, device number 5 [ 93.570565][ T4767] FAULT_INJECTION: forcing a failure. [ 93.570565][ T4767] name fail_futex, interval 1, probability 0, space 0, times 1 [ 93.584808][ T4767] CPU: 1 PID: 4767 Comm: syz.2.161 Not tainted syzkaller #0 [ 93.592160][ T4767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.602256][ T4767] Call Trace: [ 93.605587][ T4767] [ 93.608548][ T4767] dump_stack_lvl+0x188/0x250 [ 93.613252][ T4767] ? verify_lock_unused+0x140/0x140 [ 93.618457][ T4767] ? show_regs_print_info+0x20/0x20 [ 93.623681][ T4767] ? load_image+0x410/0x410 [ 93.628186][ T4767] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 93.634110][ T4767] ? _raw_spin_unlock+0x40/0x40 [ 93.638981][ T4767] should_fail+0x383/0x4b0 [ 93.643404][ T4767] get_futex_key+0x1a1/0x12d0 [ 93.648093][ T4767] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.654080][ T4767] ? futex_wait_restart+0x250/0x250 [ 93.659283][ T4767] ? lock_chain_count+0x20/0x20 [ 93.664141][ T4767] futex_wait_setup+0x4b/0x520 [ 93.668910][ T4767] ? lockdep_hardirqs_on+0x94/0x140 [ 93.674128][ T4767] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 93.680041][ T4767] futex_wait+0x22f/0x680 [ 93.684374][ T4767] ? __lock_acquire+0x13b3/0x7d40 [ 93.689404][ T4767] ? do_futex+0x12b0/0x12b0 [ 93.693936][ T4767] ? verify_lock_unused+0x140/0x140 [ 93.699138][ T4767] ? verify_lock_unused+0x140/0x140 [ 93.704355][ T4767] do_futex+0xdc2/0x12b0 [ 93.708626][ T4767] ? vfs_write+0xaa6/0xd70 [ 93.713072][ T4767] ? futex_exit_release+0x1c0/0x1c0 [ 93.718302][ T4767] ? __context_tracking_exit+0x4c/0x80 [ 93.723776][ T4767] __se_sys_futex+0x389/0x420 [ 93.728461][ T4767] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 93.734451][ T4767] ? __x64_sys_futex+0xf0/0xf0 [ 93.739225][ T4767] ? __x64_sys_futex+0x1d/0xf0 [ 93.743994][ T4767] do_syscall_64+0x4c/0xa0 [ 93.748931][ T4767] ? clear_bhb_loop+0x30/0x80 [ 93.753746][ T4767] ? clear_bhb_loop+0x30/0x80 [ 93.758454][ T4767] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 93.764360][ T4767] RIP: 0033:0x7fa3115f7199 [ 93.768781][ T4767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.788498][ T4767] RSP: 002b:00007fa30f84f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 93.796924][ T4767] RAX: ffffffffffffffda RBX: 00007fa31187efa8 RCX: 00007fa3115f7199 [ 93.804928][ T4767] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa31187efa8 [ 93.812914][ T4767] RBP: 00007fa31187efa0 R08: 0000000000000000 R09: 0000000000000000 [ 93.820950][ T4767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.828961][ T4767] R13: 00007fa31187f038 R14: 00007fffb6953270 R15: 00007fffb6953358 [ 93.836968][ T4767] [ 94.183936][ T4243] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 94.252580][ T4174] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 94.421774][ T4226] Bluetooth: hci0: command 0x0406 tx timeout [ 94.572127][ T4243] usb 5-1: not running at top speed; connect to a high speed hub [ 94.672210][ T4174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 94.683416][ T4243] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.693786][ T4174] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.705616][ T4243] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.716519][ T4243] usb 5-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 6 [ 94.729671][ T4243] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 94.739119][ T4243] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.783862][ T4243] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 94.801458][ T4243] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 94.812373][ T4243] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 94.820360][ T4243] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 94.838969][ T4243] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 94.882384][ T4174] usb 4-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 94.897381][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.921008][ T4174] usb 4-1: Product: syz [ 94.931056][ T4174] usb 4-1: Manufacturer: syz [ 94.940441][ T4174] usb 4-1: SerialNumber: syz [ 95.003350][ T4174] kobil_sct 4-1:1.0: KOBIL USB smart card terminal converter detected [ 95.044647][ T4174] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB2 [ 95.071870][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 95.079663][ T21] usb 2-1: no configurations [ 95.091842][ T21] usb 2-1: can't read configurations, error -22 [ 95.120561][ T4787] device syzkaller0 entered promiscuous mode [ 95.175187][ T7] gspca_zc3xx: reg_r err -32 [ 95.264746][ T4243] usb 5-1: USB disconnect, device number 6 [ 95.284208][ T4243] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 95.310276][ T4243] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 95.330502][ T4243] keyspan 5-1:1.0: device disconnected [ 95.354650][ T4795] CIFS: Attempting to mount \\127.0.0.1\share [ 95.361197][ T4795] CIFS: VFS: No username specified [ 95.436991][ T4802] comedi comedi0: dt2801: I/O port conflict (0x3,2) [ 95.801998][ T7] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 95.808490][ T7] gspca_zc3xx: probe of 1-1:0.0 failed with error -32 [ 95.827447][ T4811] hub 6-0:1.0: USB hub found [ 95.832932][ T4811] hub 6-0:1.0: 1 port detected [ 95.941304][ T4817] device syzkaller0 entered promiscuous mode [ 95.992019][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 96.012136][ T21] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 96.231826][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 96.312176][ T4226] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 96.511974][ T7] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 96.521311][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.529996][ T7] usb 3-1: Product: syz [ 96.534530][ T7] usb 3-1: Manufacturer: syz [ 96.539264][ T7] usb 3-1: SerialNumber: syz [ 96.548485][ T7] usb 3-1: config 0 descriptor?? [ 96.553826][ T4226] usb 5-1: Using ep0 maxpacket: 32 [ 96.671983][ T4226] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 96.681251][ T4226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.698368][ T4226] usb 5-1: config 0 descriptor?? [ 96.744377][ T4226] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 96.811828][ T7] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 97.001834][ T4243] usb 4-1: USB disconnect, device number 7 [ 97.026250][ T4243] kobil ttyUSB2: KOBIL USB smart card terminal converter now disconnected from ttyUSB2 [ 97.053853][ T4243] kobil_sct 4-1:1.0: device disconnected [ 97.083511][ T4229] usb 1-1: USB disconnect, device number 6 [ 97.352641][ T7] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 97.375515][ T7] usb 3-1: USB disconnect, device number 6 [ 97.406950][ T4837] kvm: pic: non byte read [ 97.413029][ T4837] kvm: pic: non byte read [ 97.631824][ T4243] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 98.031997][ T4243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.043237][ T4243] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.053476][ T4243] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 98.062876][ T4243] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.079065][ T4243] usb 1-1: config 0 descriptor?? [ 98.161906][ T4232] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 98.271941][ T4226] gspca_vc032x: reg_w err -71 [ 98.276848][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.282900][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.288362][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.294247][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.299608][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.305532][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.310845][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.316944][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.322531][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.327966][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.336347][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.342029][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.347348][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.353033][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.358358][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.364089][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.369411][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.375198][ T4226] gspca_vc032x: I2c Bus Busy Wait 00 [ 98.380603][ T4226] gspca_vc032x: Unknown sensor... [ 98.385931][ T4230] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 98.393555][ T4226] vc032x: probe of 5-1:0.0 failed with error -22 [ 98.403272][ T4226] usb 5-1: USB disconnect, device number 7 [ 98.521971][ T4232] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 98.538816][ T4232] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 98.561865][ T21] usb 2-1: unable to get BOS descriptor or descriptor too short [ 98.569613][ T21] usb 2-1: no configurations [ 98.576884][ T4243] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 98.590474][ T4243] cm6533_jd 0003:0D8C:0022.0003: item fetching failed at offset 4/5 [ 98.599405][ T21] usb 2-1: can't read configurations, error -22 [ 98.612515][ T4243] cm6533_jd 0003:0D8C:0022.0003: parse failed [ 98.618823][ T4243] cm6533_jd: probe of 0003:0D8C:0022.0003 failed with error -22 [ 98.631421][ T21] usb usb2-port1: attempt power cycle [ 98.643171][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 98.668570][ T4854] bond0: option arp_interval: invalid value (P) [ 98.676227][ T4854] bond0: option arp_interval: allowed values 0 - 2147483647 [ 98.702069][ T4232] usb 3-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 0.00 [ 98.714678][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.723290][ T4232] usb 3-1: Product: syz [ 98.727897][ T4232] usb 3-1: Manufacturer: syz [ 98.733953][ T4232] usb 3-1: SerialNumber: syz [ 98.783343][ T4232] kobil_sct 3-1:1.0: KOBIL USB smart card terminal converter detected [ 98.788838][ T4230] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.807044][ T4230] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.819170][ T4232] usb 3-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 98.840382][ T4232] usb 1-1: USB disconnect, device number 7 [ 98.993399][ T4230] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 99.006162][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.014694][ T4230] usb 4-1: Product: syz [ 99.018883][ T4230] usb 4-1: Manufacturer: syz [ 99.023854][ T4230] usb 4-1: SerialNumber: syz [ 99.405643][ T4230] usb 4-1: USB disconnect, device number 8 [ 99.631735][ T4232] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 99.675528][ T4682] udevd[4682]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.696981][ T4174] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.781753][ T21] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 99.871876][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 99.991800][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.002675][ T21] usb 2-1: config index 0 descriptor too short (expected 1060, got 36) [ 100.011071][ T4232] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 100.020498][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.036174][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.044909][ T21] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.055694][ T21] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 100.069622][ T4232] usb 5-1: config 0 descriptor?? [ 100.074908][ T4174] usb 1-1: config index 0 descriptor too short (expected 65183, got 72) [ 100.084143][ T21] usb 2-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 100.093329][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.111558][ T21] usb 2-1: config 0 descriptor?? [ 100.116728][ T4243] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 100.126377][ T4232] pwc: Askey VC010 type 2 USB webcam detected. [ 100.252017][ T4174] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 100.261577][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.274881][ T4174] usb 1-1: Product: syz [ 100.279086][ T4174] usb 1-1: Manufacturer: syz [ 100.285474][ T4174] usb 1-1: SerialNumber: syz [ 100.551819][ T4232] pwc: recv_control_msg error -32 req 02 val 2b00 [ 100.591811][ T4232] pwc: recv_control_msg error -32 req 02 val 2700 [ 100.631789][ T4232] pwc: recv_control_msg error -32 req 02 val 2c00 [ 100.671823][ T4232] pwc: recv_control_msg error -32 req 04 val 1000 [ 100.712009][ T4232] pwc: recv_control_msg error -32 req 04 val 1300 [ 100.751912][ T4232] pwc: recv_control_msg error -32 req 04 val 1400 [ 100.791822][ T4232] pwc: recv_control_msg error -32 req 02 val 2000 [ 100.832323][ T4232] pwc: recv_control_msg error -32 req 02 val 2100 [ 100.874105][ T4232] pwc: recv_control_msg error -32 req 04 val 1500 [ 100.883927][ T7] usb 3-1: USB disconnect, device number 7 [ 100.906298][ T7] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 100.919548][ T7] kobil_sct 3-1:1.0: device disconnected [ 100.922716][ T4232] pwc: recv_control_msg error -32 req 02 val 2500 [ 100.961944][ T4174] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 100.972114][ T4232] pwc: recv_control_msg error -32 req 02 val 2400 [ 101.011863][ T4232] pwc: recv_control_msg error -32 req 02 val 2600 [ 101.271889][ T4232] pwc: recv_control_msg error -71 req 02 val 2800 [ 101.278647][ T21] sony 0003:1345:3008.0004: can't set operational mode: step 2 [ 101.286624][ T21] sony 0003:1345:3008.0004: Failed to set controller into operational mode [ 101.304771][ T4232] pwc: recv_control_msg error -71 req 04 val 1100 [ 101.317411][ T21] sony 0003:1345:3008.0004: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.1-1/input0 [ 101.329605][ T21] sony 0003:1345:3008.0004: failed to claim input [ 101.336310][ T4232] pwc: recv_control_msg error -71 req 04 val 1200 [ 101.349527][ T4232] pwc: Registered as video103. [ 101.358433][ T21] usb 2-1: USB disconnect, device number 10 [ 101.365714][ T4232] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9 [ 101.377783][ T4226] usb 1-1: USB disconnect, device number 8 [ 101.384169][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 101.407607][ T4232] usb 5-1: USB disconnect, device number 8 [ 101.517679][ T4881] fido_id[4881]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 101.791835][ T7] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x92, skipping [ 101.812578][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 101.981925][ T7] usb 3-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=9e.7f [ 101.991173][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.011725][ T7] usb 3-1: Product: syz [ 102.015955][ T7] usb 3-1: Manufacturer: syz [ 102.020556][ T7] usb 3-1: SerialNumber: syz [ 102.031928][ T4174] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 102.043185][ T4174] ath9k_htc: Failed to initialize the device [ 102.052520][ T7] usb 3-1: config 0 descriptor?? [ 102.059171][ T4226] usb 1-1: ath9k_htc: USB layer deinitialized [ 102.093787][ T7] redrat3 3-1:0.0: Couldn't find all endpoints [ 102.171894][ T4232] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 102.250398][ T4896] FAULT_INJECTION: forcing a failure. [ 102.250398][ T4896] name failslab, interval 1, probability 0, space 0, times 0 [ 102.263773][ T4896] CPU: 0 PID: 4896 Comm: syz.1.214 Not tainted syzkaller #0 [ 102.271117][ T4896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.281212][ T4896] Call Trace: [ 102.284643][ T4896] [ 102.287610][ T4896] dump_stack_lvl+0x188/0x250 [ 102.292338][ T4896] ? show_regs_print_info+0x20/0x20 [ 102.297573][ T4896] ? load_image+0x410/0x410 [ 102.302120][ T4896] ? __might_sleep+0xf0/0xf0 [ 102.306745][ T4896] ? __lock_acquire+0x7d40/0x7d40 [ 102.311787][ T4896] should_fail+0x383/0x4b0 [ 102.316257][ T4896] should_failslab+0x5/0x20 [ 102.320789][ T4896] slab_pre_alloc_hook+0x51/0xc0 [ 102.325766][ T4896] __kmalloc+0x6b/0x340 [ 102.330053][ T4896] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 102.335831][ T4896] tomoyo_realpath_from_path+0xed/0x5e0 [ 102.341435][ T4896] tomoyo_mount_permission+0x3b8/0x9b0 [ 102.346948][ T4896] ? ____kasan_slab_free+0xd5/0x110 [ 102.352180][ T4896] ? slab_free_freelist_hook+0xec/0x170 [ 102.357819][ T4896] ? tomoyo_get_name+0x520/0x520 [ 102.362876][ T4896] security_sb_mount+0x83/0xb0 [ 102.367692][ T4896] path_mount+0xb8/0xfe0 [ 102.371991][ T4896] ? user_path_at_empty+0x13e/0x190 [ 102.377240][ T4896] __se_sys_mount+0x2e3/0x3d0 [ 102.382009][ T4896] ? __x64_sys_mount+0xc0/0xc0 [ 102.386824][ T4896] ? lockdep_hardirqs_on+0x94/0x140 [ 102.392061][ T4896] ? __x64_sys_mount+0x1c/0xc0 [ 102.396875][ T4896] do_syscall_64+0x4c/0xa0 [ 102.401344][ T4896] ? clear_bhb_loop+0x30/0x80 [ 102.406166][ T4896] ? clear_bhb_loop+0x30/0x80 [ 102.410895][ T4896] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.416812][ T4896] RIP: 0033:0x7f10fe652199 [ 102.421255][ T4896] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.440880][ T4896] RSP: 002b:00007f10fc8aa028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 102.449338][ T4896] RAX: ffffffffffffffda RBX: 00007f10fe8d9fa0 RCX: 00007f10fe652199 [ 102.457330][ T4896] RDX: 0000200000000080 RSI: 0000200000000040 RDI: 0000000000000000 [ 102.465328][ T4896] RBP: 00007f10fe6e98e0 R08: 0000000000000000 R09: 0000000000000000 [ 102.473312][ T4896] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.481424][ T4896] R13: 00007f10fe8da038 R14: 00007f10fe8d9fa0 R15: 00007fff86762498 [ 102.489582][ T4896] [ 102.496118][ T4896] ERROR: Out of memory at tomoyo_realpath_from_path. [ 102.574421][ T21] usb 3-1: USB disconnect, device number 8 [ 102.641741][ T4226] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 102.652039][ T4232] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 102.660746][ T4232] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 102.742233][ T4232] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 102.751406][ T4232] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 102.759627][ T4232] usb 5-1: Manufacturer: syz [ 102.766719][ T4232] usb 5-1: config 0 descriptor?? [ 102.841843][ T4231] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 102.871887][ T4232] rc_core: IR keymap rc-hauppauge not found [ 102.877874][ T4232] Registered IR keymap rc-empty [ 102.882230][ T4226] usb 1-1: Using ep0 maxpacket: 8 [ 102.889512][ T4232] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 102.901727][ T4232] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input10 [ 102.932446][ T4243] usb 4-1: unable to get BOS descriptor or descriptor too short [ 102.940214][ T4243] usb 4-1: no configurations [ 102.945300][ T4243] usb 4-1: can't read configurations, error -22 [ 103.002065][ T4226] usb 1-1: config index 0 descriptor too short (expected 1060, got 36) [ 103.010420][ T4226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.054300][ T4232] usb 5-1: USB disconnect, device number 9 [ 103.068885][ T4226] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.087414][ T4226] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.118570][ T4226] usb 1-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 103.145648][ T4226] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.170866][ T4226] usb 1-1: config 0 descriptor?? [ 103.332266][ T4231] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.349056][ T4231] usb 2-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 103.358875][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.552076][ T4232] wiimote 0005:057E:0330.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 103.588662][ T4232] wiimote 0005:057E:0330.0005: New device registered [ 103.652672][ T4906] wiimote 0005:057E:0330.0005: Device removed [ 103.886312][ T4231] wacom 0003:056A:033B.0007: Unknown device_type for 'HID 056a:033b'. Assuming pen. [ 103.929246][ T4231] wacom 0003:056A:033B.0007: hidraw0: USB HID v1.11 Device [HID 056a:033b] on usb-dummy_hcd.1-1/input0 [ 103.961513][ T4231] input: Wacom Intuos S 2 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/0003:056A:033B.0007/input/input12 [ 103.977036][ T4232] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 104.049289][ T4914] gadgetfs: bound to dummy_udc driver [ 104.092534][ T4243] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 104.111799][ T4226] sony 0003:1345:3008.0006: can't set operational mode: step 1 [ 104.129798][ T4226] sony 0003:1345:3008.0006: Failed to set controller into operational mode [ 104.176228][ T4226] sony 0003:1345:3008.0006: hiddev0,hidraw1: USB HID v80.00 Joystick [HID 1345:3008] on usb-dummy_hcd.0-1/input0 [ 104.192130][ C1] wacom 0003:056A:033B.0007: Event data for report 2 was too short (9 vs 0) [ 104.208769][ T4226] sony 0003:1345:3008.0006: failed to claim input [ 104.266732][ T4226] usb 1-1: USB disconnect, device number 9 [ 104.314133][ T4918] fido_id[4918]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 104.392158][ T4232] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.394936][ T4230] usb 2-1: USB disconnect, device number 11 [ 104.415307][ T4232] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 104.427893][ T4232] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.446482][ T4232] usb 5-1: config 0 descriptor?? [ 104.507225][ T4232] pwc: Askey VC010 type 2 USB webcam detected. [ 104.532034][ T4243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.543282][ T4243] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.553729][ T4243] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 104.563077][ T4243] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.575231][ T4243] usb 4-1: config 0 descriptor?? [ 104.741783][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 104.921799][ T4232] pwc: recv_control_msg error -32 req 02 val 2b00 [ 104.931747][ T4174] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 104.971997][ T4232] pwc: recv_control_msg error -32 req 02 val 2700 [ 105.011875][ T4232] pwc: recv_control_msg error -32 req 02 val 2c00 [ 105.051907][ T4232] pwc: recv_control_msg error -32 req 04 val 1000 [ 105.064406][ T4243] pyra 0003:1E7D:2CF6.0008: unknown main item tag 0x2 [ 105.078746][ T4243] pyra 0003:1E7D:2CF6.0008: unexpected long global item [ 105.086833][ T4243] pyra 0003:1E7D:2CF6.0008: parse failed [ 105.096276][ T4232] pwc: recv_control_msg error -32 req 04 val 1300 [ 105.106990][ T4243] pyra: probe of 0003:1E7D:2CF6.0008 failed with error -22 [ 105.151881][ T4232] pwc: recv_control_msg error -32 req 04 val 1400 [ 105.155928][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 105.175879][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 105.187215][ T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 105.201789][ T4232] pwc: recv_control_msg error -32 req 02 val 2000 [ 105.204258][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.226556][ T7] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 105.237584][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.242379][ T4232] pwc: recv_control_msg error -32 req 02 val 2100 [ 105.269238][ T4243] usb 4-1: USB disconnect, device number 10 [ 105.301824][ T4232] pwc: recv_control_msg error -32 req 04 val 1500 [ 105.321910][ T21] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 105.348089][ T4232] pwc: recv_control_msg error -32 req 02 val 2500 [ 105.391860][ T4232] pwc: recv_control_msg error -32 req 02 val 2400 [ 105.431857][ T4232] pwc: recv_control_msg error -32 req 02 val 2600 [ 105.691904][ T4232] pwc: recv_control_msg error -71 req 02 val 2800 [ 105.711978][ T4232] pwc: recv_control_msg error -71 req 04 val 1100 [ 105.722110][ T21] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 105.734730][ T21] usb 2-1: can't read configurations, error -61 [ 105.751853][ T4232] pwc: recv_control_msg error -71 req 04 val 1200 [ 105.769177][ T4232] pwc: Registered as video103. [ 105.796607][ T4232] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input15 [ 105.856152][ T4232] usb 5-1: USB disconnect, device number 10 [ 105.891895][ T21] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 106.017508][ T7] gud 3-1:1.0: Unexpected status OK for failed transfer [ 106.031813][ T7] gud 3-1:1.0: Failed to get properties (error=-32) [ 106.047941][ T7] gud: probe of 3-1:1.0 failed with error -32 [ 106.216154][ T4243] usb 3-1: USB disconnect, device number 9 [ 106.301981][ T21] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 106.318333][ T21] usb 2-1: can't read configurations, error -61 [ 106.334315][ T21] usb usb2-port1: attempt power cycle [ 106.712042][ T4948] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 106.751808][ T21] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 106.971836][ T21] usb 2-1: device descriptor read/8, error -71 [ 107.272861][ T21] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 107.286303][ T4957] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 107.391943][ T21] usb 2-1: device descriptor read/8, error -71 [ 107.513776][ T21] usb usb2-port1: unable to enumerate USB device [ 107.742611][ T4174] usb 1-1: unable to get BOS descriptor or descriptor too short [ 107.757874][ T4174] usb 1-1: no configurations [ 107.772094][ T4174] usb 1-1: can't read configurations, error -22 [ 107.826044][ T4230] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 107.961848][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 108.121886][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 108.211808][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 108.291849][ T4230] usb 4-1: config 2 has an invalid interface number: 31 but max is 0 [ 108.306669][ T4230] usb 4-1: config 2 has no interface number 0 [ 108.313156][ T4230] usb 4-1: config 2 interface 31 has no altsetting 0 [ 108.331880][ T21] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 108.355564][ T21] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 108.376304][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 108.501993][ T4230] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 108.511105][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.530043][ T4230] usb 4-1: Product: syz [ 108.540287][ T4230] usb 4-1: Manufacturer: syz [ 108.542127][ T4231] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 108.546133][ T4230] usb 4-1: SerialNumber: syz [ 108.553623][ T21] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 108.587054][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.609391][ T21] usb 3-1: Product: syz [ 108.631845][ T21] usb 3-1: Manufacturer: syz [ 108.651786][ T21] usb 3-1: SerialNumber: syz [ 108.679882][ T21] usb 3-1: config 0 descriptor?? [ 108.688543][ T4174] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 108.706706][ T4992] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.851775][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 108.961865][ T4174] usb 1-1: Using ep0 maxpacket: 8 [ 109.161988][ T4231] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 109.171790][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.179820][ T4231] usb 5-1: Product: syz [ 109.191769][ T4231] usb 5-1: Manufacturer: syz [ 109.196789][ T4231] usb 5-1: SerialNumber: syz [ 109.217844][ T4231] usb 5-1: config 0 descriptor?? [ 109.269666][ T4231] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 109.292073][ T4174] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 109.328189][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.346759][ T4174] usb 1-1: Product: syz [ 109.360483][ T4174] usb 1-1: Manufacturer: syz [ 109.365725][ T4174] usb 1-1: SerialNumber: syz [ 109.381300][ T4174] usb 1-1: config 0 descriptor?? [ 109.389688][ T146] Bluetooth: Frame is too long (len 18, expected len 4) [ 109.641954][ T4174] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -71 [ 109.649456][ T4174] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 109.667849][ T4174] usb 1-1: USB disconnect, device number 11 [ 109.747715][ T21] usb 3-1: USB disconnect, device number 10 [ 109.832005][ T4230] ch9200: probe of 4-1:2.31 failed with error -22 [ 109.849888][ T4230] usb 4-1: USB disconnect, device number 11 [ 110.139679][ T5020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.251'. [ 110.197430][ T146] block nbd0: Receive control failed (result -1) [ 110.311742][ T4226] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 110.721815][ T4226] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 110.751744][ T4226] usb 2-1: can't read configurations, error -61 [ 110.921780][ T4226] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 111.214751][ T5037] FAULT_INJECTION: forcing a failure. [ 111.214751][ T5037] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 111.229631][ T5037] CPU: 1 PID: 5037 Comm: syz.3.258 Not tainted syzkaller #0 [ 111.236992][ T5037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 111.247092][ T5037] Call Trace: [ 111.250413][ T5037] [ 111.253377][ T5037] dump_stack_lvl+0x188/0x250 [ 111.258133][ T5037] ? show_regs_print_info+0x20/0x20 [ 111.263366][ T5037] ? load_image+0x410/0x410 [ 111.267918][ T5037] ? uncharge_page+0x490/0x490 [ 111.272728][ T5037] should_fail+0x383/0x4b0 [ 111.277211][ T5037] prepare_alloc_pages+0x1e3/0x5b0 [ 111.282372][ T5037] __alloc_pages+0x11b/0x480 [ 111.287005][ T5037] ? zone_statistics+0x170/0x170 [ 111.292025][ T5037] ? rcu_lock_acquire+0x30/0x30 [ 111.296924][ T5037] ? alloc_pages+0x452/0x560 [ 111.301547][ T5037] __get_free_pages+0x8/0x30 [ 111.306169][ T5037] __tlb_remove_page_size+0x1f2/0x3f0 [ 111.311584][ T5037] unmap_page_range+0xfcf/0x2410 [ 111.316596][ T5037] unmap_vmas+0x131/0x250 [ 111.320970][ T5037] ? unmap_page_range+0x2410/0x2410 [ 111.322604][ T4226] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 111.326213][ T5037] ? __mutex_lock_common+0x435/0x2400 [ 111.339188][ T5037] ? exit_mm_release+0x16/0x30 [ 111.343996][ T5037] exit_mmap+0x3b9/0x640 [ 111.348288][ T5037] ? vm_brk+0x20/0x20 [ 111.352326][ T5037] ? uprobe_clear_state+0x2f6/0x460 [ 111.357569][ T5037] __mmput+0x115/0x390 [ 111.361678][ T5037] exit_mm+0x632/0x7b0 [ 111.365775][ T5037] ? perf_pmu_migrate_context+0xb70/0xb70 [ 111.371538][ T5037] ? do_exit+0x2110/0x2110 [ 111.371924][ T4226] usb 2-1: can't read configurations, error -61 [ 111.376007][ T5037] ? __ia32_sys_timer_delete+0x40/0x40 [ 111.376033][ T5037] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 111.376072][ T5037] ? tty_audit_exit+0x149/0x1f0 [ 111.376119][ T5037] do_exit+0x5b8/0x2110 [ 111.376158][ T5037] ? put_task_struct+0x80/0x80 [ 111.407144][ T5037] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 111.413173][ T5037] ? _raw_spin_lock_irq+0xb7/0xf0 [ 111.418249][ T5037] do_group_exit+0x12c/0x2f0 [ 111.422881][ T5037] ? lockdep_hardirqs_on+0x94/0x140 [ 111.424642][ T4226] usb usb2-port1: attempt power cycle [ 111.428123][ T5037] get_signal+0x7eb/0x12e0 [ 111.437962][ T5037] arch_do_signal_or_restart+0xe6/0x12a0 [ 111.443656][ T5037] ? futex_exit_release+0x1c0/0x1c0 [ 111.448897][ T5037] ? get_sigframe_size+0x10/0x10 [ 111.453876][ T5037] ? __context_tracking_exit+0x4c/0x80 [ 111.459425][ T5037] ? exit_to_user_mode_loop+0x3b/0x130 [ 111.464962][ T5037] exit_to_user_mode_loop+0x9e/0x130 [ 111.470299][ T5037] exit_to_user_mode_prepare+0xee/0x180 [ 111.475876][ T5037] syscall_exit_to_user_mode+0x16/0x40 [ 111.481455][ T5037] do_syscall_64+0x58/0xa0 [ 111.485911][ T5037] ? clear_bhb_loop+0x30/0x80 [ 111.490625][ T5037] ? clear_bhb_loop+0x30/0x80 [ 111.495343][ T5037] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 111.501283][ T5037] RIP: 0033:0x7feff481b199 [ 111.505729][ T5037] Code: Unable to access opcode bytes at RIP 0x7feff481b16f. [ 111.513119][ T5037] RSP: 002b:00007feff2a730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 111.521585][ T5037] RAX: 0000000000000001 RBX: 00007feff4aa2fa8 RCX: 00007feff481b199 [ 111.529584][ T5037] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feff4aa2fac [ 111.537614][ T5037] RBP: 00007feff4aa2fa0 R08: 0009cf95d339d016 R09: 0000000000000000 [ 111.545615][ T5037] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 111.553620][ T5037] R13: 00007feff4aa3038 R14: 00007fff677c0f20 R15: 00007fff677c1008 [ 111.561640][ T5037] [ 111.567710][ T4231] gspca_ov534_9: reg_r err -71 [ 111.871834][ T4226] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 111.961928][ T4231] gspca_ov534_9: Unknown sensor 0000 [ 111.962006][ T4231] ov534_9: probe of 5-1:0.0 failed with error -22 [ 111.967097][ T4226] usb 2-1: device descriptor read/8, error -71 [ 111.998365][ T4231] usb 5-1: USB disconnect, device number 11 [ 112.107693][ T4230] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 112.127305][ T4230] Bluetooth: hci2: Injecting HCI hardware error event [ 112.149317][ T4197] Bluetooth: hci2: hardware error 0x00 [ 112.191939][ T4174] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 112.261830][ T4226] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 112.302461][ T5050] netlink: 32 bytes leftover after parsing attributes in process `syz.3.264'. [ 112.351961][ T4226] usb 2-1: device descriptor read/8, error -71 [ 112.447430][ T4230] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 112.461815][ T4231] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 112.472808][ T4226] usb usb2-port1: unable to enumerate USB device [ 112.602025][ T4174] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.743688][ T4174] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice= 0.00 [ 112.753111][ T4231] usb 5-1: Using ep0 maxpacket: 16 [ 112.761946][ T4174] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 112.776689][ T4174] usb 1-1: Product: syz [ 112.781042][ T4174] usb 1-1: Manufacturer: syz [ 112.811897][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.822416][ T4230] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 112.831502][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.843197][ T4230] usb 3-1: config 0 descriptor?? [ 112.845559][ T4174] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 112.884145][ T4230] pwc: Askey VC010 type 2 USB webcam detected. [ 113.082319][ T4231] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 113.105148][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.113388][ T4231] usb 5-1: Product: syz [ 113.117598][ T4231] usb 5-1: Manufacturer: syz [ 113.122940][ T4231] usb 5-1: SerialNumber: syz [ 113.138887][ T4231] usb 5-1: config 0 descriptor?? [ 113.283993][ T4174] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 113.303210][ T4174] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 113.316061][ T4174] usb 1-1: media controller created [ 113.322086][ T4230] pwc: recv_control_msg error -32 req 02 val 2b00 [ 113.337083][ T4174] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.361795][ T4230] pwc: recv_control_msg error -32 req 02 val 2700 [ 113.401874][ T4230] pwc: recv_control_msg error -32 req 02 val 2c00 [ 113.441955][ T4230] pwc: recv_control_msg error -32 req 04 val 1000 [ 113.471895][ T4232] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 113.481780][ T4230] pwc: recv_control_msg error -32 req 04 val 1300 [ 113.521775][ T4230] pwc: recv_control_msg error -32 req 04 val 1400 [ 113.561835][ T4230] pwc: recv_control_msg error -32 req 02 val 2000 [ 113.571791][ T4226] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 113.602100][ T4230] pwc: recv_control_msg error -32 req 02 val 2100 [ 113.622040][ T4231] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 113.633378][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.642265][ T4230] pwc: recv_control_msg error -32 req 04 val 1500 [ 113.672166][ T4231] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 113.680364][ T4231] usb 5-1: media controller created [ 113.682225][ T4230] pwc: recv_control_msg error -32 req 02 val 2500 [ 113.704627][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.731841][ T4230] pwc: recv_control_msg error -32 req 02 val 2400 [ 113.741755][ T4232] usb 2-1: Using ep0 maxpacket: 8 [ 113.771905][ T4230] pwc: recv_control_msg error -32 req 02 val 2600 [ 113.811804][ T4226] usb 4-1: Using ep0 maxpacket: 32 [ 113.841997][ T4231] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 113.850289][ T4231] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 113.901882][ T4232] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.912143][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.921996][ T4232] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.931981][ T4232] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.932967][ T4226] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.945015][ T4232] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.945045][ T4232] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.031875][ T4230] pwc: recv_control_msg error -71 req 02 val 2800 [ 114.053890][ T7] usb 5-1: USB disconnect, device number 12 [ 114.061894][ T4230] pwc: recv_control_msg error -71 req 04 val 1100 [ 114.081843][ T4230] pwc: recv_control_msg error -71 req 04 val 1200 [ 114.095530][ T4230] pwc: Registered as video103. [ 114.101190][ T4230] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input16 [ 114.113108][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 114.133984][ T4226] usb 4-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 114.149746][ T4230] usb 3-1: USB disconnect, device number 11 [ 114.155900][ T4226] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.170319][ T4226] usb 4-1: Product: syz [ 114.177172][ T4226] usb 4-1: Manufacturer: syz [ 114.189032][ T4226] usb 4-1: SerialNumber: syz [ 114.198097][ T4226] usb 4-1: config 0 descriptor?? [ 114.214346][ T4232] usb 2-1: GET_CAPABILITIES returned 0 [ 114.225030][ T4232] usbtmc 2-1:16.0: can't read capabilities [ 114.250874][ T4226] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 114.420456][ T4232] usb 2-1: USB disconnect, device number 20 [ 114.911789][ T4230] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 114.933611][ T4232] usb 1-1: USB disconnect, device number 12 [ 115.151860][ T4230] usb 5-1: Using ep0 maxpacket: 32 [ 115.281844][ T4230] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 115.301956][ T4230] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 115.381870][ T4232] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 115.462106][ T4230] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 115.478129][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.486590][ T4230] usb 5-1: Product: syz [ 115.490798][ T4230] usb 5-1: Manufacturer: syz [ 115.491952][ T4174] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 115.506581][ T4230] usb 5-1: SerialNumber: syz [ 115.641721][ T4232] usb 1-1: Using ep0 maxpacket: 32 [ 115.661758][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 115.771902][ T4232] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.780143][ T4232] usb 1-1: config 0 has no interface number 0 [ 115.782745][ T4226] gspca_sunplus: reg_w_1 err -71 [ 115.795317][ T4226] sunplus: probe of 4-1:0.0 failed with error -71 [ 115.801870][ T4232] usb 1-1: config 0 interface 184 has no altsetting 0 [ 115.824523][ T4226] usb 4-1: USB disconnect, device number 12 [ 115.915844][ T4230] usb 5-1: USB disconnect, device number 13 [ 115.971993][ T4174] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 115.984105][ T4174] usb 2-1: can't read configurations, error -61 [ 115.992304][ T4232] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 116.005279][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.016505][ T4232] usb 1-1: Product: syz [ 116.020720][ T4232] usb 1-1: Manufacturer: syz [ 116.031062][ T4232] usb 1-1: SerialNumber: syz [ 116.032264][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.047947][ T4232] usb 1-1: config 0 descriptor?? [ 116.063233][ T7] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.103103][ T4232] smsc75xx v1.0.0 [ 116.141935][ T4174] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 116.153055][ T4682] udevd[4682]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.241832][ T7] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 116.250948][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.259434][ T7] usb 3-1: Product: syz [ 116.264140][ T7] usb 3-1: Manufacturer: syz [ 116.268764][ T7] usb 3-1: SerialNumber: syz [ 116.361811][ T4174] usb 2-1: device descriptor read/64, error -71 [ 116.491930][ T4174] usb usb2-port1: attempt power cycle [ 116.634391][ T7] usb 3-1: USB disconnect, device number 12 [ 116.696841][ T4330] udevd[4330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 116.762001][ T4232] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 116.773850][ T4232] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 116.901842][ T4231] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 116.921858][ T4174] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 117.011833][ T4174] usb 2-1: device descriptor read/8, error -71 [ 117.086777][ T5102] FAULT_INJECTION: forcing a failure. [ 117.086777][ T5102] name failslab, interval 1, probability 0, space 0, times 0 [ 117.102672][ T5102] CPU: 1 PID: 5102 Comm: syz.2.285 Not tainted syzkaller #0 [ 117.110017][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.120191][ T5102] Call Trace: [ 117.123512][ T5102] [ 117.126477][ T5102] dump_stack_lvl+0x188/0x250 [ 117.131194][ T5102] ? show_regs_print_info+0x20/0x20 [ 117.136456][ T5102] ? load_image+0x410/0x410 [ 117.141019][ T5102] ? __might_sleep+0xf0/0xf0 [ 117.145728][ T5102] ? __lock_acquire+0x7d40/0x7d40 [ 117.150800][ T5102] should_fail+0x383/0x4b0 [ 117.155271][ T5102] should_failslab+0x5/0x20 [ 117.159811][ T5102] slab_pre_alloc_hook+0x51/0xc0 [ 117.164798][ T5102] ? snd_timer_instance_new+0x66/0x210 [ 117.170303][ T5102] __kmalloc_track_caller+0x69/0x330 [ 117.175632][ T5102] ? snd_timer_instance_new+0x66/0x210 [ 117.181255][ T5102] kstrdup+0x32/0x70 [ 117.185196][ T5102] snd_timer_instance_new+0x66/0x210 [ 117.190657][ T5102] snd_seq_timer_open+0x237/0x600 [ 117.195758][ T5102] ? snd_seq_timer_set_skew+0xd0/0xd0 [ 117.201236][ T5102] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 117.207186][ T5102] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 117.213127][ T5102] ? _raw_spin_unlock+0x40/0x40 [ 117.218049][ T5102] ? snd_seq_timer_defaults+0x31/0x530 [ 117.223556][ T5102] snd_seq_queue_alloc+0x3b3/0x740 [ 117.228727][ T5102] snd_seq_ioctl_create_queue+0x7b/0x320 [ 117.234399][ T5102] ? snd_seq_ioctl_unsubscribe_port+0x6d0/0x6d0 [ 117.240689][ T5102] snd_seq_oss_open+0x622/0xf00 [ 117.245592][ T5102] ? snd_seq_oss_delete_client+0x50/0x50 [ 117.251342][ T5102] ? __mutex_lock_common+0x435/0x2400 [ 117.256776][ T5102] ? mutex_lock_io_nested+0x60/0x60 [ 117.262023][ T5102] ? snd_seq_oss_process_event+0x2910/0x2910 [ 117.268040][ T5102] ? async_call_lookup_ports+0x10/0x10 [ 117.273544][ T5102] ? do_raw_spin_unlock+0x11d/0x230 [ 117.278782][ T5102] odev_open+0x63/0x90 [ 117.282865][ T5102] chrdev_open+0x585/0x5f0 [ 117.287320][ T5102] ? cd_forget+0x160/0x160 [ 117.291775][ T5102] ? fsnotify_perm+0x3a7/0x560 [ 117.296577][ T5102] ? cd_forget+0x160/0x160 [ 117.301025][ T5102] do_dentry_open+0x7f7/0xf90 [ 117.305870][ T5102] ? vfs_open+0x2b/0x80 [ 117.310101][ T5102] path_openat+0x2718/0x2fb0 [ 117.314800][ T5102] ? __kasan_slab_alloc+0xa9/0xc0 [ 117.319884][ T5102] ? do_filp_open+0x400/0x400 [ 117.324643][ T5102] do_filp_open+0x1df/0x400 [ 117.329190][ T5102] ? vfs_tmpfile+0x300/0x300 [ 117.333845][ T5102] ? _raw_spin_unlock+0x24/0x40 [ 117.338747][ T5102] ? alloc_fd+0x59e/0x650 [ 117.343106][ T5102] do_sys_openat2+0x14b/0x500 [ 117.347824][ T5102] ? __lock_acquire+0x7d40/0x7d40 [ 117.352887][ T5102] ? do_sys_open+0xe0/0xe0 [ 117.357345][ T5102] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 117.363363][ T5102] ? lock_chain_count+0x20/0x20 [ 117.368251][ T5102] __x64_sys_openat+0x135/0x160 [ 117.373151][ T5102] do_syscall_64+0x4c/0xa0 [ 117.377613][ T5102] ? clear_bhb_loop+0x30/0x80 [ 117.382326][ T5102] ? clear_bhb_loop+0x30/0x80 [ 117.387039][ T5102] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 117.392958][ T5102] RIP: 0033:0x7fa3115f7199 [ 117.397456][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.417096][ T5102] RSP: 002b:00007fa30f84f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 117.425595][ T5102] RAX: ffffffffffffffda RBX: 00007fa31187efa0 RCX: 00007fa3115f7199 [ 117.433600][ T5102] RDX: 0000000000000000 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 117.441695][ T5102] RBP: 00007fa31168e8e0 R08: 0000000000000000 R09: 0000000000000000 [ 117.449701][ T5102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.457716][ T5102] R13: 00007fa31187f038 R14: 00007fa31187efa0 R15: 00007fffb6953358 [ 117.465757][ T5102] [ 117.622123][ T4174] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 117.641854][ T4231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 117.652194][ T4231] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 117.661255][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.671313][ T4231] usb 5-1: config 0 descriptor?? [ 117.714481][ T4231] pwc: Askey VC010 type 2 USB webcam detected. [ 117.731835][ T4174] usb 2-1: device descriptor read/8, error -71 [ 117.771788][ T21] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 117.862155][ T4174] usb usb2-port1: unable to enumerate USB device [ 118.052006][ T4232] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 118.063224][ T4232] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 118.073635][ T4232] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 118.083360][ T4232] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 118.093949][ T4232] usb 1-1: USB disconnect, device number 13 [ 118.152604][ T4231] pwc: recv_control_msg error -32 req 02 val 2b00 [ 118.181905][ T21] usb 3-1: unable to get BOS descriptor or descriptor too short [ 118.191919][ T4231] pwc: recv_control_msg error -32 req 02 val 2700 [ 118.238344][ T4231] pwc: recv_control_msg error -32 req 02 val 2c00 [ 118.261994][ T21] usb 3-1: config index 0 descriptor too short (expected 40744, got 96) [ 118.270673][ T21] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 118.281042][ T21] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 118.290467][ T4231] pwc: recv_control_msg error -32 req 04 val 1000 [ 118.297291][ T21] usb 3-1: too many endpoints for config 1 interface 1 altsetting 1: 226, using maximum allowed: 30 [ 118.308675][ T21] usb 3-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0xBA, skipping [ 118.319467][ T21] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 118.330744][ T21] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 118.340597][ T4231] pwc: recv_control_msg error -32 req 04 val 1300 [ 118.347639][ T21] usb 3-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 226 [ 118.391243][ T5111] netlink: 'syz.1.289': attribute type 39 has an invalid length. [ 118.392357][ T4231] pwc: recv_control_msg error -32 req 04 val 1400 [ 118.442075][ T4231] pwc: recv_control_msg error -32 req 02 val 2000 [ 118.481986][ T4231] pwc: recv_control_msg error -32 req 02 val 2100 [ 118.521986][ T21] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 118.531216][ T4231] pwc: recv_control_msg error -32 req 04 val 1500 [ 118.537891][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.546038][ T21] usb 3-1: Product: syz [ 118.550476][ T21] usb 3-1: Manufacturer: syz [ 118.555330][ T21] usb 3-1: SerialNumber: syz [ 118.571826][ T4231] pwc: recv_control_msg error -32 req 02 val 2500 [ 118.611900][ T4231] pwc: recv_control_msg error -32 req 02 val 2400 [ 118.624604][ T5117] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2812553464 (22500427712 ns) > initial count (17799498648 ns). Using initial count to start timer. [ 118.652110][ T4231] pwc: recv_control_msg error -32 req 02 val 2600 [ 118.871888][ T7] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 118.911864][ T4231] pwc: recv_control_msg error -71 req 02 val 2800 [ 118.931774][ T4231] pwc: recv_control_msg error -71 req 04 val 1100 [ 118.951797][ T4231] pwc: recv_control_msg error -71 req 04 val 1200 [ 118.959701][ T4231] pwc: Registered as video103. [ 118.964794][ T21] usb 3-1: 1:1: cannot set freq 48000 to ep 0x1 [ 118.971849][ T4226] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 118.982925][ T4231] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input17 [ 119.011967][ T4231] usb 5-1: USB disconnect, device number 14 [ 119.024793][ T21] usb 3-1: USB disconnect, device number 13 [ 119.153311][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 119.241993][ T4226] usb 2-1: Using ep0 maxpacket: 32 [ 119.293269][ T4330] udevd[4330]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.382233][ T4226] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.398696][ T4226] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 119.467403][ T7] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 119.476946][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.485080][ T7] usb 1-1: Product: syz [ 119.489560][ T7] usb 1-1: Manufacturer: syz [ 119.494557][ T7] usb 1-1: SerialNumber: syz [ 119.509541][ T7] usb 1-1: config 0 descriptor?? [ 119.526798][ T5130] ./dev/sda1: Can't open blockdev [ 119.584264][ T7] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 119.605861][ T4226] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 119.625506][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.649997][ T4226] usb 2-1: Product: syz [ 119.660564][ T4226] usb 2-1: Manufacturer: syz [ 119.669103][ T4226] usb 2-1: SerialNumber: syz [ 119.691802][ T21] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 119.921852][ T4174] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 120.000298][ T5152] autofs4:pid:5152:autofs_fill_super: called with bogus options [ 120.062007][ T21] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 120.082201][ T21] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 120.127671][ T4226] usb 2-1: USB disconnect, device number 25 [ 120.264739][ T21] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 120.285410][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.294226][ T4174] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 120.321826][ T4174] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.332615][ T21] usb 3-1: Product: syz [ 120.336816][ T21] usb 3-1: Manufacturer: syz [ 120.342037][ T4174] usb 4-1: config 0 has no interfaces? [ 120.347626][ T21] usb 3-1: SerialNumber: syz [ 120.355201][ T4174] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 120.373337][ T4174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.402645][ T4174] usb 4-1: config 0 descriptor?? [ 120.466911][ T5155] ieee802154 phy0 wpan0: encryption failed: -22 [ 120.596025][ T5161] FAULT_INJECTION: forcing a failure. [ 120.596025][ T5161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 120.610581][ T5161] CPU: 1 PID: 5161 Comm: syz.1.303 Not tainted syzkaller #0 [ 120.617944][ T5161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 120.628045][ T5161] Call Trace: [ 120.631406][ T5161] [ 120.634459][ T5161] dump_stack_lvl+0x188/0x250 [ 120.639187][ T5161] ? show_regs_print_info+0x20/0x20 [ 120.644436][ T5161] ? load_image+0x410/0x410 [ 120.648995][ T5161] ? __lock_acquire+0x7d40/0x7d40 [ 120.654076][ T5161] should_fail+0x383/0x4b0 [ 120.658555][ T5161] _copy_from_user+0x2e/0x170 [ 120.663287][ T5161] load_msg+0x205/0x380 [ 120.667489][ T5161] do_msgsnd+0x1a1/0x10e0 [ 120.671855][ T5161] ? __might_sleep+0xf0/0xf0 [ 120.676483][ T5161] ? __might_fault+0xb7/0x110 [ 120.681208][ T5161] ? __lock_acquire+0x7d40/0x7d40 [ 120.686264][ T5161] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 120.692289][ T5161] ? ksys_msgsnd+0xa0/0xa0 [ 120.696761][ T5161] ? __might_fault+0xb3/0x110 [ 120.701497][ T5161] ? __x64_sys_msgsnd+0xe5/0x110 [ 120.706488][ T5161] do_syscall_64+0x4c/0xa0 [ 120.710959][ T5161] ? clear_bhb_loop+0x30/0x80 [ 120.715679][ T5161] ? clear_bhb_loop+0x30/0x80 [ 120.720429][ T5161] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 120.726359][ T5161] RIP: 0033:0x7f10fe652199 [ 120.730814][ T5161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 120.750461][ T5161] RSP: 002b:00007f10fc8aa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 120.758930][ T5161] RAX: ffffffffffffffda RBX: 00007f10fe8d9fa0 RCX: 00007f10fe652199 [ 120.766952][ T5161] RDX: 0000000000000008 RSI: 0000200000000580 RDI: 0000000000000000 [ 120.774966][ T5161] RBP: 00007f10fe6e98e0 R08: 0000000000000000 R09: 0000000000000000 [ 120.782971][ T5161] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 120.791007][ T5161] R13: 00007f10fe8da038 R14: 00007f10fe8d9fa0 R15: 00007fff86762498 [ 120.799046][ T5161] [ 120.942195][ T21] usb 3-1: Cannot retrieve CPort count: -110 [ 120.948312][ T21] usb 3-1: Cannot retrieve CPort count: -110 [ 120.965011][ T21] es2_ap_driver: probe of 3-1:1.0 failed with error -110 [ 121.302058][ T7] gspca_ov534_9: reg_r err -71 [ 121.331782][ T21] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 121.524569][ T5179] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 121.533280][ T5179] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 121.676470][ T7] gspca_ov534_9: Unknown sensor 0000 [ 121.676541][ T7] ov534_9: probe of 1-1:0.0 failed with error -22 [ 121.694180][ T7] usb 1-1: USB disconnect, device number 14 [ 121.701925][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.726013][ T21] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 121.753192][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.799519][ T21] usb 5-1: config 0 descriptor?? [ 121.858201][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 122.186725][ T4232] usb 3-1: USB disconnect, device number 14 [ 122.251834][ T7] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 122.281847][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 122.321801][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 122.362604][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 122.411949][ T21] pwc: recv_control_msg error -32 req 04 val 1000 [ 122.451813][ T21] pwc: recv_control_msg error -32 req 04 val 1300 [ 122.491824][ T21] pwc: recv_control_msg error -32 req 04 val 1400 [ 122.531756][ T21] pwc: recv_control_msg error -32 req 02 val 2000 [ 122.531763][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 122.591832][ T21] pwc: recv_control_msg error -32 req 02 val 2100 [ 122.631769][ T21] pwc: recv_control_msg error -32 req 04 val 1500 [ 122.642846][ T4174] usb 4-1: string descriptor 0 read error: -71 [ 122.661158][ T4174] usb 4-1: USB disconnect, device number 13 [ 122.671743][ T21] pwc: recv_control_msg error -32 req 02 val 2500 [ 122.679882][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 122.711808][ T21] pwc: recv_control_msg error -32 req 02 val 2400 [ 122.718419][ T7] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 122.718524][ T4232] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 122.752535][ T21] pwc: recv_control_msg error -32 req 02 val 2600 [ 122.921972][ T7] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 122.947854][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.966595][ T7] usb 1-1: Product: syz [ 122.977377][ T7] usb 1-1: Manufacturer: syz [ 122.991246][ T7] usb 1-1: SerialNumber: syz [ 123.011916][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 123.041934][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 123.066623][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 123.086932][ T21] pwc: Registered as video103. [ 123.098336][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 123.112110][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.133656][ T4232] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.170733][ T21] usb 5-1: USB disconnect, device number 15 [ 123.191819][ T4232] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 123.222184][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.268957][ T4232] usb 3-1: config 0 descriptor?? [ 123.472750][ T7] usb 1-1: USB disconnect, device number 15 [ 123.520313][ T5212] FAULT_INJECTION: forcing a failure. [ 123.520313][ T5212] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 123.533870][ T5212] CPU: 1 PID: 5212 Comm: syz.1.322 Not tainted syzkaller #0 [ 123.541189][ T5212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.553521][ T5212] Call Trace: [ 123.556835][ T5212] [ 123.560532][ T5212] dump_stack_lvl+0x188/0x250 [ 123.565962][ T5212] ? show_regs_print_info+0x20/0x20 [ 123.572230][ T5212] ? load_image+0x410/0x410 [ 123.576902][ T5212] ? mark_lock+0x94/0x320 [ 123.581674][ T5212] should_fail+0x383/0x4b0 [ 123.586133][ T5212] prepare_alloc_pages+0x1e3/0x5b0 [ 123.591290][ T5212] __alloc_pages+0x11b/0x480 [ 123.596318][ T5212] ? zone_statistics+0x170/0x170 [ 123.601306][ T5212] ? rcu_lock_acquire+0x30/0x30 [ 123.606197][ T5212] ? alloc_pages+0x452/0x560 [ 123.611248][ T5212] __get_free_pages+0x8/0x30 [ 123.616989][ T5212] __tlb_remove_page_size+0x1f2/0x3f0 [ 123.622404][ T5212] unmap_page_range+0xfcf/0x2410 [ 123.627411][ T5212] unmap_vmas+0x131/0x250 [ 123.631776][ T5212] ? unmap_page_range+0x2410/0x2410 [ 123.637254][ T5212] ? __mutex_lock_common+0x435/0x2400 [ 123.644153][ T5212] ? exit_mm_release+0x16/0x30 [ 123.648971][ T5212] exit_mmap+0x3b9/0x640 [ 123.653253][ T5212] ? vm_brk+0x20/0x20 [ 123.657282][ T5212] ? uprobe_clear_state+0x2f6/0x460 [ 123.662533][ T5212] __mmput+0x115/0x390 [ 123.666627][ T5212] exit_mm+0x632/0x7b0 [ 123.670733][ T5212] ? perf_pmu_migrate_context+0xb70/0xb70 [ 123.676490][ T5212] ? do_exit+0x2110/0x2110 [ 123.680930][ T5212] ? __ia32_sys_timer_delete+0x40/0x40 [ 123.686437][ T5212] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 123.691934][ T5212] ? tty_audit_exit+0x149/0x1f0 [ 123.696821][ T5212] do_exit+0x5b8/0x2110 [ 123.701012][ T5212] ? put_task_struct+0x80/0x80 [ 123.705809][ T5212] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 123.711827][ T5212] ? _raw_spin_lock_irq+0xb7/0xf0 [ 123.716977][ T5212] do_group_exit+0x12c/0x2f0 [ 123.721596][ T5212] ? lockdep_hardirqs_on+0x94/0x140 [ 123.726832][ T5212] get_signal+0x7eb/0x12e0 [ 123.731301][ T5212] arch_do_signal_or_restart+0xe6/0x12a0 [ 123.736989][ T5212] ? futex_exit_release+0x1c0/0x1c0 [ 123.742224][ T5212] ? get_sigframe_size+0x10/0x10 [ 123.747198][ T5212] ? __context_tracking_exit+0x4c/0x80 [ 123.752713][ T5212] ? exit_to_user_mode_loop+0x3b/0x130 [ 123.758215][ T5212] exit_to_user_mode_loop+0x9e/0x130 [ 123.763617][ T5212] exit_to_user_mode_prepare+0xee/0x180 [ 123.769198][ T5212] syscall_exit_to_user_mode+0x16/0x40 [ 123.774732][ T5212] do_syscall_64+0x58/0xa0 [ 123.779178][ T5212] ? clear_bhb_loop+0x30/0x80 [ 123.783891][ T5212] ? clear_bhb_loop+0x30/0x80 [ 123.788605][ T5212] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 123.794533][ T5212] RIP: 0033:0x7f10fe652199 [ 123.798983][ T5212] Code: Unable to access opcode bytes at RIP 0x7f10fe65216f. [ 123.806370][ T5212] RSP: 002b:00007f10fc8aa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.814846][ T5212] RAX: 0000000000000001 RBX: 00007f10fe8d9fa8 RCX: 00007f10fe652199 [ 123.822844][ T5212] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10fe8d9fac [ 123.830858][ T5212] RBP: 00007f10fe8d9fa0 R08: 001bb139b6eb316a R09: 0000000000000000 [ 123.838907][ T5212] R10: 000000000000007c R11: 0000000000000246 R12: 0000000000000000 [ 123.846906][ T5212] R13: 00007f10fe8da038 R14: 00007fff867623b0 R15: 00007fff86762498 [ 123.854928][ T5212] [ 124.009058][ T5220] FAULT_INJECTION: forcing a failure. [ 124.009058][ T5220] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 124.018168][ T5223] FAULT_INJECTION: forcing a failure. [ 124.018168][ T5223] name failslab, interval 1, probability 0, space 0, times 0 [ 124.022731][ T5220] CPU: 0 PID: 5220 Comm: syz.0.326 Not tainted syzkaller #0 [ 124.043136][ T5220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.053227][ T5220] Call Trace: [ 124.056529][ T5220] [ 124.059483][ T5220] dump_stack_lvl+0x188/0x250 [ 124.064190][ T5220] ? show_regs_print_info+0x20/0x20 [ 124.069427][ T5220] ? load_image+0x410/0x410 [ 124.073955][ T5220] should_fail+0x383/0x4b0 [ 124.078393][ T5220] prepare_alloc_pages+0x1e3/0x5b0 [ 124.083526][ T5220] __alloc_pages+0x11b/0x480 [ 124.088143][ T5220] ? zone_statistics+0x170/0x170 [ 124.093102][ T5220] ? rcu_lock_acquire+0x30/0x30 [ 124.097974][ T5220] ? alloc_pages+0x452/0x560 [ 124.102584][ T5220] __get_free_pages+0x8/0x30 [ 124.107191][ T5220] __tlb_remove_page_size+0x1f2/0x3f0 [ 124.112616][ T5220] unmap_page_range+0xfcf/0x2410 [ 124.117601][ T5220] unmap_vmas+0x131/0x250 [ 124.121949][ T5220] ? unmap_page_range+0x2410/0x2410 [ 124.127165][ T5220] ? __mutex_lock_common+0x435/0x2400 [ 124.132564][ T5220] ? exit_mm_release+0x16/0x30 [ 124.137355][ T5220] exit_mmap+0x3b9/0x640 [ 124.141621][ T5220] ? vm_brk+0x20/0x20 [ 124.145660][ T5220] ? uprobe_clear_state+0x2f6/0x460 [ 124.150882][ T5220] __mmput+0x115/0x390 [ 124.154972][ T5220] exit_mm+0x632/0x7b0 [ 124.159060][ T5220] ? perf_pmu_migrate_context+0xb70/0xb70 [ 124.164808][ T5220] ? do_exit+0x2110/0x2110 [ 124.169236][ T5220] ? __ia32_sys_timer_delete+0x40/0x40 [ 124.174712][ T5220] ? hrtimer_try_to_cancel+0x3d6/0x420 [ 124.180218][ T5220] ? tty_audit_exit+0x149/0x1f0 [ 124.185089][ T5220] do_exit+0x5b8/0x2110 [ 124.189267][ T5220] ? put_task_struct+0x80/0x80 [ 124.194049][ T5220] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 124.200073][ T5220] ? _raw_spin_lock_irq+0xb7/0xf0 [ 124.205115][ T5220] do_group_exit+0x12c/0x2f0 [ 124.209715][ T5220] ? lockdep_hardirqs_on+0x94/0x140 [ 124.214934][ T5220] get_signal+0x7eb/0x12e0 [ 124.219465][ T5220] arch_do_signal_or_restart+0xe6/0x12a0 [ 124.225121][ T5220] ? __lock_acquire+0x7d40/0x7d40 [ 124.230164][ T5220] ? __rwlock_init+0x140/0x140 [ 124.234963][ T5220] ? futex_exit_release+0x1c0/0x1c0 [ 124.240191][ T5220] ? get_sigframe_size+0x10/0x10 [ 124.245157][ T5220] ? __context_tracking_exit+0x4c/0x80 [ 124.250643][ T5220] ? exit_to_user_mode_loop+0x3b/0x130 [ 124.256133][ T5220] exit_to_user_mode_loop+0x9e/0x130 [ 124.261427][ T5220] exit_to_user_mode_prepare+0xee/0x180 [ 124.266987][ T5220] syscall_exit_to_user_mode+0x16/0x40 [ 124.272460][ T5220] do_syscall_64+0x58/0xa0 [ 124.276889][ T5220] ? clear_bhb_loop+0x30/0x80 [ 124.281578][ T5220] ? clear_bhb_loop+0x30/0x80 [ 124.286280][ T5220] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.292242][ T5220] RIP: 0033:0x7f119447d199 [ 124.296764][ T5220] Code: Unable to access opcode bytes at RIP 0x7f119447d16f. [ 124.304139][ T5220] RSP: 002b:00007f11926d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 124.312570][ T5220] RAX: 0000000000000001 RBX: 00007f1194704fa8 RCX: 00007f119447d199 [ 124.320555][ T5220] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1194704fac [ 124.328540][ T5220] RBP: 00007f1194704fa0 R08: 0038e6083ffd4a50 R09: 0000000000000000 [ 124.336616][ T5220] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 124.344697][ T5220] R13: 00007f1194705038 R14: 00007fffae53b170 R15: 00007fffae53b258 [ 124.352804][ T5220] [ 124.360263][ T5223] CPU: 0 PID: 5223 Comm: syz.4.327 Not tainted syzkaller #0 [ 124.367630][ T5223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 124.377743][ T5223] Call Trace: [ 124.381047][ T5223] [ 124.383995][ T5223] dump_stack_lvl+0x188/0x250 [ 124.388707][ T5223] ? show_regs_print_info+0x20/0x20 [ 124.394135][ T5223] ? load_image+0x410/0x410 [ 124.398660][ T5223] ? __might_sleep+0xf0/0xf0 [ 124.403270][ T5223] ? __lock_acquire+0x7d40/0x7d40 [ 124.408330][ T5223] should_fail+0x383/0x4b0 [ 124.412769][ T5223] should_failslab+0x5/0x20 [ 124.417287][ T5223] slab_pre_alloc_hook+0x51/0xc0 [ 124.422243][ T5223] __kmalloc+0x6b/0x340 [ 124.426411][ T5223] ? sock_kmalloc+0x92/0xf0 [ 124.430932][ T5223] sock_kmalloc+0x92/0xf0 [ 124.435270][ T5223] __ipv6_sock_mc_join+0x44e/0x7e0 [ 124.440412][ T5223] ipv6_mcast_join_leave+0x19f/0x230 [ 124.445728][ T5223] ? compat_ipv6_mcast_join_leave+0x230/0x230 [ 124.451825][ T5223] ? __local_bh_enable_ip+0x136/0x1c0 [ 124.457220][ T5223] ? _local_bh_enable+0xa0/0xa0 [ 124.462089][ T5223] ipv6_setsockopt+0x9a6/0x3cc0 [ 124.466988][ T5223] ? finish_lock_switch+0x12d/0x290 [ 124.472257][ T5223] ? ipv6_update_options+0x400/0x400 [ 124.477575][ T5223] ? __schedule+0x11cb/0x4350 [ 124.482281][ T5223] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 124.488305][ T5223] ? futex_wait_queue_me+0x16e/0x440 [ 124.493623][ T5223] ? __might_sleep+0xf0/0xf0 [ 124.498253][ T5223] ? __lock_acquire+0x7d40/0x7d40 [ 124.503306][ T5223] ? mark_lock+0x94/0x320 [ 124.507679][ T5223] ? __lock_acquire+0x12df/0x7d40 [ 124.512737][ T5223] ? __lock_acquire+0x13b3/0x7d40 [ 124.517807][ T5223] ? verify_lock_unused+0x140/0x140 [ 124.523043][ T5223] ? aa_label_sk_perm+0x3e6/0x540 [ 124.528103][ T5223] ? aa_sk_perm+0x910/0x910 [ 124.532638][ T5223] ? __might_sleep+0xf0/0xf0 [ 124.537245][ T5223] ? rcu_lock_release+0x9/0x20 [ 124.542040][ T5223] tcp_setsockopt+0x229/0x1e60 [ 124.546834][ T5223] ? aa_sk_perm+0x7dc/0x910 [ 124.551353][ T5223] ? tcp_set_window_clamp+0x1a0/0x1a0 [ 124.556743][ T5223] ? aa_af_perm+0x340/0x340 [ 124.561278][ T5223] ? __fget_files+0x402/0x470 [ 124.565978][ T5223] ? aa_sock_opt_perm+0x74/0x100 [ 124.570941][ T5223] ? sock_common_setsockopt+0x32/0xb0 [ 124.576420][ T5223] ? sock_common_recvmsg+0x1c0/0x1c0 [ 124.581740][ T5223] __sys_setsockopt+0x2bf/0x3d0 [ 124.586623][ T5223] __x64_sys_setsockopt+0xb1/0xc0 [ 124.591674][ T5223] do_syscall_64+0x4c/0xa0 [ 124.596107][ T5223] ? clear_bhb_loop+0x30/0x80 [ 124.600800][ T5223] ? clear_bhb_loop+0x30/0x80 [ 124.605492][ T5223] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 124.611434][ T5223] RIP: 0033:0x7f9e81702199 [ 124.615874][ T5223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 124.635586][ T5223] RSP: 002b:00007f9e7f95a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 124.644022][ T5223] RAX: ffffffffffffffda RBX: 00007f9e81989fa0 RCX: 00007f9e81702199 [ 124.652017][ T5223] RDX: 000000000000002a RSI: 0000000000000029 RDI: 0000000000000004 [ 124.660005][ T5223] RBP: 00007f9e817998e0 R08: 0000000000000088 R09: 0000000000000000 [ 124.667985][ T5223] R10: 0000200000fca000 R11: 0000000000000246 R12: 0000000000000000 [ 124.675990][ T5223] R13: 00007f9e8198a038 R14: 00007f9e81989fa0 R15: 00007ffec8210848 [ 124.683994][ T5223] [ 124.689069][ T4232] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 124.721895][ T4232] cm6533_jd 0003:0D8C:0022.0009: unknown main item tag 0x0 [ 124.735200][ T4277] udevd[4277]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.743344][ T4232] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0009/input/input19 [ 124.819727][ T4232] cm6533_jd 0003:0D8C:0022.0009: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 124.952034][ T4229] usb 3-1: USB disconnect, device number 15 [ 125.026075][ T5238] fido_id[5238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 125.058329][ T5244] loop5: detected capacity change from 0 to 7 [ 125.079703][ T4277] loop5: [POWERTEC] p1 p2 [ 125.086685][ T4277] loop5: p1 start 791543808 is beyond EOD, truncated [ 125.094193][ T4277] loop5: p2 start 114 is beyond EOD, truncated [ 125.118125][ T5244] loop5: [POWERTEC] p1 p2 [ 125.123828][ T5244] loop5: p1 start 791543808 is beyond EOD, truncated [ 125.137579][ T5244] loop5: p2 start 114 is beyond EOD, truncated [ 125.251736][ T4232] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 125.541818][ T7] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 125.622438][ T4232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.658167][ T4232] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 125.671854][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.706219][ T4232] usb 1-1: config 0 descriptor?? [ 125.764688][ T4232] pwc: Askey VC010 type 2 USB webcam detected. [ 125.800446][ T4229] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 125.933151][ T7] usb 4-1: config index 0 descriptor too short (expected 8192, got 36) [ 125.951783][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.971694][ T7] usb 4-1: config 0 has no interfaces? [ 125.977272][ T7] usb 4-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 126.001721][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.020404][ T7] usb 4-1: config 0 descriptor?? [ 126.041875][ T21] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 126.053378][ T4230] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 126.082109][ T4229] usb 3-1: Using ep0 maxpacket: 32 [ 126.201972][ T4232] pwc: recv_control_msg error -32 req 02 val 2b00 [ 126.241853][ T4232] pwc: recv_control_msg error -32 req 02 val 2700 [ 126.262422][ T4229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.273492][ T4229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.282140][ T4232] pwc: recv_control_msg error -32 req 02 val 2c00 [ 126.321795][ T4232] pwc: recv_control_msg error -32 req 04 val 1000 [ 126.361950][ T4232] pwc: recv_control_msg error -32 req 04 val 1300 [ 126.401805][ T4232] pwc: recv_control_msg error -32 req 04 val 1400 [ 126.412059][ T21] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.435628][ T21] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.442830][ T4232] pwc: recv_control_msg error -32 req 02 val 2000 [ 126.451987][ T4230] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.457721][ T21] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 126.465086][ T4229] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 126.484818][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.497978][ T4229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.502325][ T4232] pwc: recv_control_msg error -32 req 02 val 2100 [ 126.517497][ T4229] usb 3-1: Product: syz [ 126.523391][ T21] usb 2-1: config 0 descriptor?? [ 126.532138][ T4229] usb 3-1: Manufacturer: syz [ 126.541877][ T4229] usb 3-1: SerialNumber: syz [ 126.561925][ T4232] pwc: recv_control_msg error -32 req 04 val 1500 [ 126.611845][ T4232] pwc: recv_control_msg error -32 req 02 val 2500 [ 126.651835][ T4232] pwc: recv_control_msg error -32 req 02 val 2400 [ 126.661992][ T4230] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 126.671072][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 126.691732][ T4230] usb 5-1: Product: syz [ 126.692004][ T4232] pwc: recv_control_msg error -32 req 02 val 2600 [ 126.695948][ T4230] usb 5-1: Manufacturer: syz [ 126.695966][ T4230] usb 5-1: SerialNumber: syz [ 126.905517][ T4229] usb 3-1: USB disconnect, device number 16 [ 126.971927][ T4232] pwc: recv_control_msg error -71 req 02 val 2800 [ 126.984192][ T4230] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 126.992377][ T4232] pwc: recv_control_msg error -71 req 04 val 1100 [ 127.016678][ T21] input: HID 04f2:1421 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04F2:1421.000A/input/input20 [ 127.030063][ T4232] pwc: recv_control_msg error -71 req 04 val 1200 [ 127.037949][ T4232] pwc: Registered as video103. [ 127.047215][ T4232] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21 [ 127.123183][ T4232] usb 1-1: USB disconnect, device number 16 [ 127.131153][ T21] chicony 0003:04F2:1421.000A: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.1-1/input0 [ 127.154877][ T4303] udevd[4303]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.203132][ T4174] usb 5-1: USB disconnect, device number 16 [ 127.242245][ T23] usb 2-1: USB disconnect, device number 26 [ 127.272872][ T4174] usblp0: removed [ 127.351088][ T5254] fido_id[5254]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 127.392134][ T7] usb 4-1: string descriptor 0 read error: -71 [ 127.419095][ T7] usb 4-1: USB disconnect, device number 14 [ 127.445919][ T5256] FAULT_INJECTION: forcing a failure. [ 127.445919][ T5256] name failslab, interval 1, probability 0, space 0, times 0 [ 127.460793][ T5256] CPU: 0 PID: 5256 Comm: syz.3.340 Not tainted syzkaller #0 [ 127.468149][ T5256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.478244][ T5256] Call Trace: [ 127.481577][ T5256] [ 127.484679][ T5256] dump_stack_lvl+0x188/0x250 [ 127.489407][ T5256] ? show_regs_print_info+0x20/0x20 [ 127.494653][ T5256] ? load_image+0x410/0x410 [ 127.499204][ T5256] ? __might_sleep+0xf0/0xf0 [ 127.503834][ T5256] ? __lock_acquire+0x7d40/0x7d40 [ 127.508920][ T5256] ? debug_object_init+0x10/0x10 [ 127.513930][ T5256] should_fail+0x383/0x4b0 [ 127.518398][ T5256] should_failslab+0x5/0x20 [ 127.522942][ T5256] slab_pre_alloc_hook+0x51/0xc0 [ 127.527931][ T5256] ? __d_alloc+0x27/0x6d0 [ 127.532421][ T5256] kmem_cache_alloc+0x3d/0x280 [ 127.537240][ T5256] __d_alloc+0x27/0x6d0 [ 127.541516][ T5256] ? d_alloc_pseudo+0xe/0x70 [ 127.546140][ T5256] d_alloc_pseudo+0x19/0x70 [ 127.550686][ T5256] alloc_file_pseudo+0xe0/0x200 [ 127.555574][ T5256] ? alloc_empty_file_noaccount+0x80/0x80 [ 127.561352][ T5256] ? alloc_fd+0x59e/0x650 [ 127.565734][ T5256] sock_alloc_file+0xb3/0x240 [ 127.570459][ T5256] __sys_socket+0x11d/0x170 [ 127.575017][ T5256] __x64_sys_socket+0x76/0x80 [ 127.579740][ T5256] do_syscall_64+0x4c/0xa0 [ 127.584209][ T5256] ? clear_bhb_loop+0x30/0x80 [ 127.588924][ T5256] ? clear_bhb_loop+0x30/0x80 [ 127.593645][ T5256] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 127.599581][ T5256] RIP: 0033:0x7feff481b199 [ 127.604031][ T5256] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.623676][ T5256] RSP: 002b:00007feff2a73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 127.632312][ T5256] RAX: ffffffffffffffda RBX: 00007feff4aa2fa0 RCX: 00007feff481b199 [ 127.640346][ T5256] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 0000000000000018 [ 127.648405][ T5256] RBP: 00007feff48b28e0 R08: 0000000000000000 R09: 0000000000000000 [ 127.656590][ T5256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.664623][ T5256] R13: 00007feff4aa3038 R14: 00007feff4aa2fa0 R15: 00007fff677c1008 [ 127.672670][ T5256] [ 127.771543][ T5264] device syzkaller1 entered promiscuous mode [ 127.892426][ T5273] comedi comedi0: Minor 14 could not be opened [ 127.924152][ T5275] FAULT_INJECTION: forcing a failure. [ 127.924152][ T5275] name failslab, interval 1, probability 0, space 0, times 0 [ 127.954604][ T5275] CPU: 0 PID: 5275 Comm: syz.1.348 Not tainted syzkaller #0 [ 127.961956][ T5275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 127.972187][ T5275] Call Trace: [ 127.975481][ T5275] [ 127.978428][ T5275] dump_stack_lvl+0x188/0x250 [ 127.983135][ T5275] ? show_regs_print_info+0x20/0x20 [ 127.988360][ T5275] ? load_image+0x410/0x410 [ 127.992897][ T5275] ? __might_sleep+0xf0/0xf0 [ 127.997510][ T5275] ? __lock_acquire+0x7d40/0x7d40 [ 128.002564][ T5275] should_fail+0x383/0x4b0 [ 128.007003][ T5275] should_failslab+0x5/0x20 [ 128.011520][ T5275] slab_pre_alloc_hook+0x51/0xc0 [ 128.016473][ T5275] ? anon_vma_fork+0xea/0x520 [ 128.021169][ T5275] kmem_cache_alloc+0x3d/0x280 [ 128.025951][ T5275] anon_vma_fork+0xea/0x520 [ 128.030494][ T5275] ? copy_mm+0x8b6/0x13d0 [ 128.034840][ T5275] ? dup_userfaultfd+0xa7/0x5e0 [ 128.039715][ T5275] copy_mm+0x9df/0x13d0 [ 128.043899][ T5275] ? copy_signal+0x610/0x610 [ 128.048510][ T5275] ? __init_rwsem+0x11e/0x160 [ 128.053207][ T5275] ? copy_signal+0x501/0x610 [ 128.057841][ T5275] copy_process+0x17a7/0x3e70 [ 128.062580][ T5275] ? __pidfd_prepare+0x140/0x140 [ 128.067555][ T5275] ? verify_lock_unused+0x140/0x140 [ 128.072784][ T5275] kernel_clone+0x23f/0x990 [ 128.077310][ T5275] ? create_io_thread+0x180/0x180 [ 128.082399][ T5275] __x64_sys_clone+0x19a/0x210 [ 128.087187][ T5275] ? __ia32_sys_vfork+0x130/0x130 [ 128.092241][ T5275] ? lockdep_hardirqs_on+0x94/0x140 [ 128.097461][ T5275] do_syscall_64+0x4c/0xa0 [ 128.101903][ T5275] ? clear_bhb_loop+0x30/0x80 [ 128.106695][ T5275] ? clear_bhb_loop+0x30/0x80 [ 128.111409][ T5275] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 128.117351][ T5275] RIP: 0033:0x7f10fe652199 [ 128.121782][ T5275] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.141401][ T5275] RSP: 002b:00007f10fc8a9fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 128.149850][ T5275] RAX: ffffffffffffffda RBX: 00007f10fe8d9fa0 RCX: 00007f10fe652199 [ 128.157933][ T5275] RDX: 0000200000001040 RSI: 00002000000003a0 RDI: 00000000a0000600 [ 128.165924][ T5275] RBP: 00007f10fe6e98e0 R08: 0000200000000480 R09: 0000200000000480 [ 128.173920][ T5275] R10: 0000200000000440 R11: 0000000000000206 R12: 0000000000000000 [ 128.181917][ T5275] R13: 00007f10fe8da038 R14: 00007f10fe8d9fa0 R15: 00007fff86762498 [ 128.189948][ T5275] [ 128.203364][ T4229] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 128.371929][ T7] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 128.379884][ T4226] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 128.491836][ T4230] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 128.541735][ T4174] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 128.602114][ T4229] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.612864][ T4229] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 128.622007][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.631836][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 128.638691][ T4229] usb 1-1: config 0 descriptor?? [ 128.685113][ T4229] pwc: Askey VC010 type 2 USB webcam detected. [ 128.763811][ T7] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.774145][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 128.882269][ T4230] usb 3-1: config index 0 descriptor too short (expected 8192, got 36) [ 128.894177][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.902312][ T4174] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.907283][ T4230] usb 3-1: config 0 has no interfaces? [ 128.920251][ T4230] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 128.926646][ T4174] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 128.931933][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.947086][ T4226] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 128.949776][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.957366][ T4226] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.972871][ T7] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 128.991219][ T4230] usb 3-1: config 0 descriptor?? [ 128.993355][ T4174] usb 2-1: config 0 descriptor?? [ 128.997526][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.009806][ T4226] usb 5-1: Product: syz [ 129.014420][ T4226] usb 5-1: Manufacturer: syz [ 129.019037][ T4226] usb 5-1: SerialNumber: syz [ 129.023999][ T7] usb 4-1: Product: syz [ 129.028209][ T7] usb 4-1: Manufacturer: syz [ 129.033146][ T7] usb 4-1: SerialNumber: syz [ 129.054458][ T4174] pwc: Askey VC010 type 2 USB webcam detected. [ 129.142060][ T4229] pwc: recv_control_msg error -32 req 02 val 2b00 [ 129.191830][ T4229] pwc: recv_control_msg error -32 req 02 val 2700 [ 129.241891][ T4229] pwc: recv_control_msg error -32 req 02 val 2c00 [ 129.292081][ T4230] usb 3-1: string descriptor 0 read error: -71 [ 129.302231][ T4229] pwc: recv_control_msg error -32 req 04 val 1000 [ 129.315767][ T4230] usb 3-1: USB disconnect, device number 17 [ 129.341908][ T4229] pwc: recv_control_msg error -32 req 04 val 1300 [ 129.398409][ T4229] pwc: recv_control_msg error -32 req 04 val 1400 [ 129.411683][ T7] usb 4-1: USB disconnect, device number 15 [ 129.451829][ T4229] pwc: recv_control_msg error -32 req 02 val 2000 [ 129.491851][ T4174] pwc: recv_control_msg error -32 req 02 val 2b00 [ 129.492527][ T4229] pwc: recv_control_msg error -32 req 02 val 2100 [ 129.541789][ T4174] pwc: recv_control_msg error -32 req 02 val 2700 [ 129.581779][ T4174] pwc: recv_control_msg error -32 req 02 val 2c00 [ 129.622521][ T4174] pwc: recv_control_msg error -32 req 04 val 1000 [ 129.654579][ T4303] udevd[4303]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.662229][ T4174] pwc: recv_control_msg error -32 req 04 val 1300 [ 129.721945][ T4174] pwc: recv_control_msg error -32 req 04 val 1400 [ 129.761913][ T4174] pwc: recv_control_msg error -32 req 02 val 2000 [ 129.771914][ T4229] pwc: recv_control_msg error -71 req 02 val 2500 [ 129.791883][ T4229] pwc: recv_control_msg error -71 req 02 val 2400 [ 129.801820][ T4174] pwc: recv_control_msg error -32 req 02 val 2100 [ 129.812098][ T4229] pwc: recv_control_msg error -71 req 02 val 2600 [ 129.831881][ T4229] pwc: recv_control_msg error -71 req 02 val 2900 [ 129.841963][ T4174] pwc: recv_control_msg error -32 req 04 val 1500 [ 129.851966][ T4229] pwc: recv_control_msg error -71 req 02 val 2800 [ 129.872511][ T4229] pwc: recv_control_msg error -71 req 04 val 1100 [ 129.881751][ T4174] pwc: recv_control_msg error -32 req 02 val 2500 [ 129.921785][ T4174] pwc: recv_control_msg error -32 req 02 val 2400 [ 129.929380][ T4229] pwc: recv_control_msg error -71 req 04 val 1200 [ 129.952056][ T4226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 129.962428][ T4174] pwc: recv_control_msg error -32 req 02 val 2600 [ 129.965227][ T4229] pwc: Registered as video103. [ 129.980985][ T4226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 129.991546][ T4229] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 130.008416][ T4226] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 130.028873][ T4226] lan78xx: probe of 5-1:1.0 failed with error -71 [ 130.038021][ T4229] usb 1-1: USB disconnect, device number 17 [ 130.074364][ T4226] usb 5-1: USB disconnect, device number 17 [ 130.221767][ T4174] pwc: recv_control_msg error -71 req 02 val 2800 [ 130.241860][ T4174] pwc: recv_control_msg error -71 req 04 val 1100 [ 130.271723][ T4174] pwc: recv_control_msg error -71 req 04 val 1200 [ 130.289480][ T4174] pwc: Registered as video103. [ 130.300888][ T4174] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input23 [ 130.344478][ T4174] usb 2-1: USB disconnect, device number 27 [ 130.681796][ T4230] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 130.971803][ T4230] usb 1-1: Using ep0 maxpacket: 32 [ 131.051927][ T4174] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 131.198122][ T4229] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 131.342129][ T4232] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 131.361912][ T4230] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 131.381291][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.399289][ T4230] usb 1-1: Product: syz [ 131.417978][ T4230] usb 1-1: Manufacturer: syz [ 131.423015][ T4174] usb 5-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 131.424021][ T4230] usb 1-1: SerialNumber: syz [ 131.435791][ T4174] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 131.462579][ T4230] usb 1-1: config 0 descriptor?? [ 131.591927][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 131.598526][ T4229] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 131.612171][ T4174] usb 5-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 131.624773][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.629029][ T4229] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.643590][ T4174] usb 5-1: Product: syz [ 131.653495][ T4174] usb 5-1: Manufacturer: syz [ 131.661700][ T4229] usb 2-1: config 0 has no interfaces? [ 131.662989][ T4174] usb 5-1: SerialNumber: syz [ 131.674046][ T4229] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 131.701683][ T4229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.710158][ T4174] usb 5-1: config 0 descriptor?? [ 131.715589][ T4232] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.736075][ T4232] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.740080][ T4229] usb 2-1: config 0 descriptor?? [ 131.785214][ T4174] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 131.921987][ T4232] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 131.935622][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.944156][ T4232] usb 3-1: Product: syz [ 131.948358][ T4232] usb 3-1: Manufacturer: syz [ 131.953493][ T4232] usb 3-1: SerialNumber: syz [ 131.992170][ T4230] airspy 1-1:0.0: Board ID: 00 [ 131.997074][ T4230] airspy 1-1:0.0: Firmware version: [ 132.029204][ T5319] udc-core: couldn't find an available UDC or it's busy [ 132.051745][ T5319] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 132.329981][ T5337] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 132.342121][ T5337] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 132.404228][ T4232] usb 3-1: USB disconnect, device number 18 [ 132.431854][ T4230] airspy 1-1:0.0: usb_control_msg() failed -71 request 0e [ 132.443914][ T4230] airspy 1-1:0.0: Registered as swradio24 [ 132.457239][ T4230] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 132.496201][ T4230] usb 1-1: USB disconnect, device number 18 [ 132.611290][ T5346] FAULT_INJECTION: forcing a failure. [ 132.611290][ T5346] name failslab, interval 1, probability 0, space 0, times 0 [ 132.624977][ T5346] CPU: 1 PID: 5346 Comm: syz.3.373 Not tainted syzkaller #0 [ 132.632287][ T5346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 132.642368][ T5346] Call Trace: [ 132.645671][ T5346] [ 132.648615][ T5346] dump_stack_lvl+0x188/0x250 [ 132.653316][ T5346] ? show_regs_print_info+0x20/0x20 [ 132.658539][ T5346] ? load_image+0x410/0x410 [ 132.663062][ T5346] should_fail+0x383/0x4b0 [ 132.667496][ T5346] should_failslab+0x5/0x20 [ 132.672016][ T5346] slab_pre_alloc_hook+0x51/0xc0 [ 132.676975][ T5346] ? __sigqueue_alloc+0x3a6/0x4b0 [ 132.682016][ T5346] kmem_cache_alloc+0x3d/0x280 [ 132.686815][ T5346] __sigqueue_alloc+0x3a6/0x4b0 [ 132.691680][ T5346] __send_signal+0x223/0xd40 [ 132.696288][ T5346] do_notify_parent+0xa90/0xc90 [ 132.701164][ T5346] ? trace_signal_generate+0x1c0/0x1c0 [ 132.706647][ T5346] ? __lock_acquire+0x7d40/0x7d40 [ 132.711726][ T5346] release_task+0x1190/0x15f0 [ 132.716440][ T5346] ? do_exit+0x14e2/0x2110 [ 132.720870][ T5346] ? delayed_put_task_struct+0x260/0x260 [ 132.726531][ T5346] ? _raw_write_lock_irq+0xb7/0xf0 [ 132.731664][ T5346] ? _raw_write_lock_irqsave+0x100/0x100 [ 132.737316][ T5346] ? _raw_write_unlock_irq+0x1f/0x40 [ 132.742618][ T5346] ? lockdep_hardirqs_on+0x94/0x140 [ 132.747839][ T5346] do_exit+0x14e2/0x2110 [ 132.752118][ T5346] ? put_task_struct+0x80/0x80 [ 132.756902][ T5346] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 132.762910][ T5346] ? _raw_spin_lock_irq+0xb7/0xf0 [ 132.767948][ T5346] do_group_exit+0x12c/0x2f0 [ 132.772542][ T5346] ? lockdep_hardirqs_on+0x94/0x140 [ 132.777781][ T5346] get_signal+0x7eb/0x12e0 [ 132.782238][ T5346] arch_do_signal_or_restart+0xe6/0x12a0 [ 132.787906][ T5346] ? futex_exit_release+0x1c0/0x1c0 [ 132.793126][ T5346] ? get_sigframe_size+0x10/0x10 [ 132.798100][ T5346] ? __context_tracking_exit+0x4c/0x80 [ 132.803611][ T5346] ? exit_to_user_mode_loop+0x3b/0x130 [ 132.809084][ T5346] exit_to_user_mode_loop+0x9e/0x130 [ 132.814377][ T5346] exit_to_user_mode_prepare+0xee/0x180 [ 132.819961][ T5346] syscall_exit_to_user_mode+0x16/0x40 [ 132.825429][ T5346] do_syscall_64+0x58/0xa0 [ 132.829873][ T5346] ? clear_bhb_loop+0x30/0x80 [ 132.834560][ T5346] ? clear_bhb_loop+0x30/0x80 [ 132.839245][ T5346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 132.845170][ T5346] RIP: 0033:0x7feff481b199 [ 132.849597][ T5346] Code: Unable to access opcode bytes at RIP 0x7feff481b16f. [ 132.857001][ T5346] RSP: 002b:00007feff2a730e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 132.865460][ T5346] RAX: 0000000000000001 RBX: 00007feff4aa2fa8 RCX: 00007feff481b199 [ 132.873448][ T5346] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007feff4aa2fac [ 132.881438][ T5346] RBP: 00007feff4aa2fa0 R08: 002075ee5f0113b2 R09: 0000000000000000 [ 132.889418][ T5346] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 132.897394][ T5346] R13: 00007feff4aa3038 R14: 00007fff677c0f20 R15: 00007fff677c1008 [ 132.905416][ T5346] [ 132.910462][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.916888][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.972987][ T4303] udevd[4303]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.229676][ T5351] bonding: bond0 is being deleted... [ 133.236177][ T4226] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 133.342198][ T4174] gspca_sunplus: reg_r err -71 [ 133.347109][ T4174] sunplus: probe of 5-1:0.0 failed with error -71 [ 133.377720][ T4174] usb 5-1: USB disconnect, device number 18 [ 133.399426][ T5351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 133.438642][ T5351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 133.479489][ T5351] bond0 (unregistering): Released all slaves [ 133.631350][ T5360] ucma_write: process 140 (syz.0.379) changed security contexts after opening file descriptor, this is not allowed. [ 133.650658][ T4226] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.660916][ T4226] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 133.688394][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.703375][ T4226] usb 4-1: config 0 descriptor?? [ 133.744528][ T4226] pwc: Askey VC010 type 2 USB webcam detected. [ 133.761924][ T4232] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 133.861879][ T4229] usb 2-1: string descriptor 0 read error: -71 [ 133.883975][ T4229] usb 2-1: USB disconnect, device number 28 [ 134.121883][ T4232] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.133070][ T4232] usb 3-1: New USB device found, idVendor=0a12, idProduct=0002, bcdDevice=10.00 [ 134.142225][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.172654][ T4226] pwc: recv_control_msg error -32 req 02 val 2b00 [ 134.182252][ T23] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 134.211912][ T4226] pwc: recv_control_msg error -32 req 02 val 2700 [ 134.222038][ T4174] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 134.251924][ T4226] pwc: recv_control_msg error -32 req 02 val 2c00 [ 134.291845][ T4226] pwc: recv_control_msg error -32 req 04 val 1000 [ 134.341884][ T4226] pwc: recv_control_msg error -32 req 04 val 1300 [ 134.391826][ T4229] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 134.399647][ T4226] pwc: recv_control_msg error -32 req 04 val 1400 [ 134.412715][ T4232] usb 3-1: USB disconnect, device number 19 [ 134.422224][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 134.452051][ T4226] pwc: recv_control_msg error -32 req 02 val 2000 [ 134.502236][ T4226] pwc: recv_control_msg error -32 req 02 val 2100 [ 134.551911][ T4226] pwc: recv_control_msg error -32 req 04 val 1500 [ 134.582944][ T4174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 134.594689][ T4174] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 134.602101][ T4226] pwc: recv_control_msg error -32 req 02 val 2500 [ 134.651812][ T4226] pwc: recv_control_msg error -32 req 02 val 2400 [ 134.671805][ T4229] usb 2-1: Using ep0 maxpacket: 32 [ 134.702073][ T4226] pwc: recv_control_msg error -32 req 02 val 2600 [ 134.702087][ T23] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 134.717938][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.726395][ T23] usb 1-1: Product: syz [ 134.730628][ T23] usb 1-1: Manufacturer: syz [ 134.735415][ T23] usb 1-1: SerialNumber: syz [ 134.750241][ T23] usb 1-1: config 0 descriptor?? [ 134.762071][ T4174] usb 5-1: New USB device found, idVendor=0846, idProduct=1001, bcdDevice= 1.00 [ 134.771164][ T4174] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.779632][ T4174] usb 5-1: Product: syz [ 134.783949][ T4174] usb 5-1: Manufacturer: syz [ 134.788595][ T4174] usb 5-1: SerialNumber: syz [ 134.795807][ T23] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 134.812023][ T4229] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 134.822729][ T4229] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 134.963796][ T4226] pwc: recv_control_msg error -71 req 02 val 2800 [ 134.992166][ T4226] pwc: recv_control_msg error -71 req 04 val 1100 [ 135.011974][ T4226] pwc: recv_control_msg error -71 req 04 val 1200 [ 135.020087][ T4226] pwc: Registered as video103. [ 135.026803][ T4226] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input24 [ 135.036808][ T4229] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 135.046148][ T4229] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.059037][ T4226] usb 4-1: USB disconnect, device number 16 [ 135.065417][ T4229] usb 2-1: Product: syz [ 135.069623][ T4229] usb 2-1: Manufacturer: syz [ 135.076127][ T4229] usb 2-1: SerialNumber: syz [ 135.092463][ T4174] kaweth 5-1:1.0: Firmware present in device. [ 135.281801][ T4174] kaweth 5-1:1.0: Statistics collection: 0 [ 135.287762][ T4174] kaweth 5-1:1.0: Multicast filter limit: 0 [ 135.293927][ T4174] kaweth 5-1:1.0: MTU: 0 [ 135.298209][ T4174] kaweth 5-1:1.0: Read MAC address 00:00:00:00:00:00 [ 135.440654][ T4229] usb 2-1: USB disconnect, device number 29 [ 135.482429][ T4682] udevd[4682]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.498580][ T4232] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 135.721830][ T4174] kaweth 5-1:1.0: Error setting SOFS wait [ 135.727961][ T4174] kaweth: probe of 5-1:1.0 failed with error -5 [ 135.750908][ T4174] usb 5-1: USB disconnect, device number 19 [ 135.883195][ T23] gspca_ov534_9: reg_w failed -71 [ 135.903101][ T4232] usb 3-1: unable to get BOS descriptor or descriptor too short [ 135.949105][ T5395] FAULT_INJECTION: forcing a failure. [ 135.949105][ T5395] name failslab, interval 1, probability 0, space 0, times 0 [ 135.969717][ T4232] usb 3-1: not running at top speed; connect to a high speed hub [ 135.978635][ T5395] CPU: 1 PID: 5395 Comm: syz.3.392 Not tainted syzkaller #0 [ 135.985966][ T5395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 135.996051][ T5395] Call Trace: [ 135.999368][ T5395] [ 136.002329][ T5395] dump_stack_lvl+0x188/0x250 [ 136.007053][ T5395] ? show_regs_print_info+0x20/0x20 [ 136.012307][ T5395] ? load_image+0x410/0x410 [ 136.016868][ T5395] ? __lock_acquire+0x7d40/0x7d40 [ 136.022024][ T5395] should_fail+0x383/0x4b0 [ 136.026489][ T5395] should_failslab+0x5/0x20 [ 136.031038][ T5395] slab_pre_alloc_hook+0x51/0xc0 [ 136.036018][ T5395] ? mempool_free+0x320/0x320 [ 136.040738][ T5395] ? mempool_init_node+0x1e5/0x480 [ 136.045994][ T5395] kmem_cache_alloc+0x3d/0x280 [ 136.050791][ T5395] ? mempool_free+0x320/0x320 [ 136.055532][ T5395] mempool_init_node+0x1e5/0x480 [ 136.060516][ T5395] ? mempool_alloc_slab+0x60/0x60 [ 136.065586][ T5395] ? mempool_free+0x320/0x320 [ 136.070297][ T5395] mempool_init+0x36/0x50 [ 136.074680][ T5395] bioset_init+0x282/0x6d0 [ 136.079136][ T5395] blk_alloc_queue+0xaf/0x580 [ 136.083856][ T5395] __blk_mq_alloc_disk+0x43/0x150 [ 136.088942][ T5395] ? loop_add+0x263/0x890 [ 136.093320][ T5395] loop_add+0x288/0x890 [ 136.097530][ T5395] loop_control_ioctl+0x124/0x550 [ 136.102605][ T5395] ? xor_init+0x60/0x60 [ 136.106803][ T5395] ? bpf_lsm_file_ioctl+0x5/0x10 [ 136.111768][ T5395] ? security_file_ioctl+0x7c/0xa0 [ 136.116914][ T5395] ? xor_init+0x60/0x60 [ 136.121108][ T5395] __se_sys_ioctl+0xfa/0x170 [ 136.125754][ T5395] do_syscall_64+0x4c/0xa0 [ 136.130207][ T5395] ? clear_bhb_loop+0x30/0x80 [ 136.134921][ T5395] ? clear_bhb_loop+0x30/0x80 [ 136.139644][ T5395] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 136.145576][ T5395] RIP: 0033:0x7feff481b199 [ 136.150027][ T5395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 136.169672][ T5395] RSP: 002b:00007feff2a73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 136.178144][ T5395] RAX: ffffffffffffffda RBX: 00007feff4aa2fa0 RCX: 00007feff481b199 [ 136.186169][ T5395] RDX: 00000000ffffffe4 RSI: 0000000000004c80 RDI: 0000000000000004 [ 136.194210][ T5395] RBP: 00007feff48b28e0 R08: 0000000000000000 R09: 0000000000000000 [ 136.202230][ T5395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 136.210250][ T5395] R13: 00007feff4aa3038 R14: 00007feff4aa2fa0 R15: 00007fff677c1008 [ 136.218253][ T5395] [ 136.271869][ T4232] usb 3-1: config 38 has an invalid interface number: 233 but max is 0 [ 136.290433][ T4232] usb 3-1: config 38 has no interface number 0 [ 136.310370][ T4232] usb 3-1: config 38 interface 233 has no altsetting 0 [ 136.491955][ T4232] usb 3-1: New USB device found, idVendor=10b8, idProduct=1f9c, bcdDevice=cf.68 [ 136.502545][ T23] gspca_ov534_9: Unknown sensor 0000 [ 136.502613][ T23] ov534_9: probe of 1-1:0.0 failed with error -22 [ 136.519705][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.539375][ T23] usb 1-1: USB disconnect, device number 19 [ 136.551089][ T4232] usb 3-1: Product: syz [ 136.561782][ T4229] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 136.566357][ T4232] usb 3-1: Manufacturer: syz [ 136.589096][ T4232] usb 3-1: SerialNumber: syz [ 136.601997][ T4226] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 136.942034][ T4229] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.991881][ T4226] usb 2-1: config index 0 descriptor too short (expected 8192, got 36) [ 137.010430][ T4226] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.021031][ T4226] usb 2-1: config 0 has no interfaces? [ 137.031085][ T4226] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 137.050632][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.078239][ T4226] usb 2-1: config 0 descriptor?? [ 137.092098][ T4229] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 137.095925][ T4232] dvb-usb: found a 'DiBcom TFE8096P reference design' in warm state. [ 137.109449][ T4229] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 137.133143][ T4232] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 137.152897][ T4229] usb 5-1: Product: syz [ 137.157153][ T4229] usb 5-1: Manufacturer: syz [ 137.182045][ T4232] dvbdev: DVB: registering new adapter (DiBcom TFE8096P reference design) [ 137.201008][ T4232] usb 3-1: media controller created [ 137.213195][ T4232] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 137.236622][ T4229] usb 5-1: selecting invalid altsetting 1 [ 137.258251][ T4229] dvb_ttusb_budget: ttusb_init_controller: error [ 137.266147][ T4229] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 137.347784][ T4232] DVB: Unable to find symbol dib8000_attach() [ 137.355629][ T4232] dvb-usb: no frontend was attached by 'DiBcom TFE8096P reference design' [ 137.367189][ T5403] udc-core: couldn't find an available UDC or it's busy [ 137.408326][ T4229] DVB: Unable to find symbol cx22700_attach() [ 137.414736][ T5403] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 137.481799][ T13] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 137.491796][ T4232] rc_core: IR keymap rc-dib0700-rc5 not found [ 137.497913][ T4232] Registered IR keymap rc-empty [ 137.505813][ T4229] DVB: Unable to find symbol tda10046_attach() [ 137.512388][ T4229] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 137.519437][ T4232] dvb-usb: could not initialize remote control. [ 137.539034][ T4232] dvb-usb: DiBcom TFE8096P reference design successfully initialized and connected. [ 137.548929][ T4229] usb 5-1: USB disconnect, device number 20 [ 137.584391][ T4232] usb 3-1: USB disconnect, device number 20 [ 137.613467][ T4232] dvb-usb: DiBcom TFE8096P reference design successfully deinitialized and disconnected. [ 137.877664][ T13] usb 1-1: too many endpoints for config 0 interface 0 altsetting 5: 254, using maximum allowed: 30 [ 137.909524][ T13] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 137.937489][ T13] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 137.951776][ T13] usb 1-1: config 0 interface 0 has no altsetting 0 [ 137.958428][ T13] usb 1-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00 [ 138.010630][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.016788][ T23] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 138.048432][ T13] usb 1-1: config 0 descriptor?? [ 138.341837][ T4232] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 138.392084][ T23] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.410682][ T23] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 138.430472][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.459884][ T23] usb 4-1: config 0 descriptor?? [ 138.514149][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 138.543484][ T13] input: HID 0925:8888 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0925:8888.000B/input/input26 [ 138.601723][ T4232] usb 5-1: Using ep0 maxpacket: 32 [ 138.646195][ T13] smartjoyplus 0003:0925:8888.000B: input,hidraw0: USB HID v0.00 Joystick [HID 0925:8888] on usb-dummy_hcd.0-1/input0 [ 138.679433][ T13] smartjoyplus 0003:0925:8888.000B: no output reports found [ 138.722451][ T4232] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.747431][ T4232] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 138.750336][ T13] usb 1-1: USB disconnect, device number 20 [ 138.922137][ T5442] fido_id[5442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 138.941749][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 138.951952][ T4232] usb 5-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 138.966539][ T4232] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.981582][ T4232] usb 5-1: Product: syz [ 138.990665][ T4232] usb 5-1: Manufacturer: syz [ 138.995742][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 139.005767][ T4232] usb 5-1: SerialNumber: syz [ 139.041783][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 139.063883][ T4226] usb 2-1: string descriptor 0 read error: -71 [ 139.091472][ T4226] usb 2-1: USB disconnect, device number 30 [ 139.092238][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 139.142151][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 139.191850][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 139.231864][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 139.271877][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 139.311840][ T23] pwc: recv_control_msg error -32 req 04 val 1500 [ 139.357529][ T23] pwc: recv_control_msg error -32 req 02 val 2500 [ 139.401822][ T23] pwc: recv_control_msg error -32 req 02 val 2400 [ 139.413482][ T4232] usb 5-1: USB disconnect, device number 21 [ 139.441887][ T23] pwc: recv_control_msg error -32 req 02 val 2600 [ 139.611747][ T4226] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 139.653492][ T4682] udevd[4682]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.747914][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 139.767048][ T5469] sg_write: data in/out 24540/136 bytes for SCSI command 0x0-- guessing data in; [ 139.767048][ T5469] program syz.2.420 not setting count and/or reply_len properly [ 139.784277][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 139.784498][ T5469] FAULT_INJECTION: forcing a failure. [ 139.784498][ T5469] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.802201][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 139.812069][ T23] pwc: Registered as video103. [ 139.815525][ T5469] CPU: 0 PID: 5469 Comm: syz.2.420 Not tainted syzkaller #0 [ 139.824200][ T5469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 139.828505][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 139.834293][ T5469] Call Trace: [ 139.834304][ T5469] [ 139.834312][ T5469] dump_stack_lvl+0x188/0x250 [ 139.834343][ T5469] ? show_regs_print_info+0x20/0x20 [ 139.834366][ T5469] ? load_image+0x410/0x410 [ 139.834390][ T5469] ? __lock_acquire+0x7d40/0x7d40 [ 139.834421][ T5469] should_fail+0x383/0x4b0 [ 139.874013][ T5469] copy_page_from_iter+0x33a/0x760 [ 139.879191][ T5469] blk_rq_map_user_iov+0x1509/0x1b70 [ 139.884532][ T5469] ? blk_rq_append_bio+0x550/0x550 [ 139.889698][ T5469] ? memset+0x1e/0x40 [ 139.893740][ T5469] ? import_single_range+0x1aa/0x2a0 [ 139.899072][ T5469] blk_rq_map_user+0x14c/0x1e0 [ 139.901416][ T23] usb 4-1: USB disconnect, device number 17 [ 139.903866][ T5469] ? sg_common_write+0xa50/0x1c10 [ 139.903903][ T5469] ? blk_rq_unmap_user+0x5a0/0x5a0 [ 139.903925][ T5469] ? vprintk_emit+0xa7/0x150 [ 139.903945][ T5469] ? mutex_unlock+0x10/0x10 [ 139.903975][ T5469] ? sg_common_write+0x55c/0x1c10 [ 139.934327][ T5469] sg_common_write+0x109f/0x1c10 [ 139.939328][ T5469] ? sg_add_request+0x690/0x690 [ 139.944268][ T5469] ? load_image+0x410/0x410 [ 139.948812][ T5469] ? __might_fault+0xb3/0x110 [ 139.953532][ T5469] ? _copy_from_user+0x111/0x170 [ 139.958517][ T5469] sg_write+0xac0/0xe90 [ 139.962740][ T5469] ? _raw_spin_unlock+0x40/0x40 [ 139.967636][ T5469] ? sg_read+0x1420/0x1420 [ 139.972119][ T5469] ? end_current_label_crit_section+0x14b/0x170 [ 139.978406][ T5469] ? common_file_perm+0x171/0x1c0 [ 139.983476][ T5469] ? fsnotify_perm+0x5d/0x560 [ 139.988208][ T5469] ? security_file_permission+0x75/0xa0 [ 139.993829][ T5469] ? sg_read+0x1420/0x1420 [ 139.998284][ T5469] vfs_write+0x304/0xd70 [ 140.002573][ T5469] ? file_end_write+0x250/0x250 [ 140.007474][ T5469] ? __fget_files+0x402/0x470 [ 140.012214][ T5469] ? __fdget_pos+0x1e2/0x370 [ 140.016852][ T5469] ? ksys_write+0x70/0x260 [ 140.021302][ T5469] ksys_write+0x153/0x260 [ 140.025692][ T5469] ? __ia32_sys_read+0x80/0x80 [ 140.030501][ T5469] ? lockdep_hardirqs_on+0x94/0x140 [ 140.035748][ T5469] do_syscall_64+0x4c/0xa0 [ 140.040205][ T5469] ? clear_bhb_loop+0x30/0x80 [ 140.044927][ T5469] ? clear_bhb_loop+0x30/0x80 [ 140.049690][ T5469] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.055629][ T5469] RIP: 0033:0x7fa3115f7199 [ 140.060079][ T5469] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.079739][ T5469] RSP: 002b:00007fa30f84f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 140.088198][ T5469] RAX: ffffffffffffffda RBX: 00007fa31187efa0 RCX: 00007fa3115f7199 [ 140.096209][ T5469] RDX: 00000000000000b2 RSI: 0000200000000040 RDI: 0000000000000003 [ 140.104232][ T5469] RBP: 00007fa31168e8e0 R08: 0000000000000000 R09: 0000000000000000 [ 140.112234][ T5469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.120256][ T5469] R13: 00007fa31187f038 R14: 00007fa31187efa0 R15: 00007fffb6953358 [ 140.128292][ T5469] [ 140.482080][ T4226] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 140.491205][ T4226] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 140.507661][ T4197] [ 140.510046][ T4197] ====================================================== [ 140.517080][ T4197] WARNING: possible circular locking dependency detected [ 140.521741][ T4226] usb 2-1: Product: syz [ 140.524126][ T4197] syzkaller #0 Not tainted [ 140.528289][ T4226] usb 2-1: Manufacturer: syz [ 140.532700][ T4197] ------------------------------------------------------ [ 140.532709][ T4197] kworker/u5:5/4197 is trying to acquire lock: [ 140.532719][ T4197] ffffffff8d5b4408 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_security_cfm+0x95/0x780 [ 140.559726][ T4197] [ 140.559726][ T4197] but task is already holding lock: [ 140.567122][ T4197] ffffffff8d594a88 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0 [ 140.575157][ T4226] usb 2-1: SerialNumber: syz [ 140.576996][ T4197] [ 140.576996][ T4197] which lock already depends on the new lock. [ 140.576996][ T4197] [ 140.577004][ T4197] [ 140.577004][ T4197] the existing dependency chain (in reverse order) is: [ 140.577011][ T4197] [ 140.577011][ T4197] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 140.608852][ T4197] __mutex_lock_common+0x1e5/0x2400 [ 140.614614][ T4197] mutex_lock_nested+0x17/0x20 [ 140.619921][ T4197] hci_remote_features_evt+0x5d9/0xa10 [ 140.622911][ T4226] usb 2-1: config 0 descriptor?? [ 140.625933][ T4197] hci_event_packet+0x600/0x1310 [ 140.636362][ T4197] hci_rx_work+0x255/0xa10 [ 140.641335][ T4197] process_one_work+0x867/0xff0 [ 140.646739][ T4197] worker_thread+0xad7/0x12a0 [ 140.651975][ T4197] kthread+0x42e/0x520 [ 140.656598][ T4197] ret_from_fork+0x1f/0x30 [ 140.661575][ T4197] [ 140.661575][ T4197] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 140.668917][ T4197] __mutex_lock_common+0x1e5/0x2400 [ 140.674679][ T4197] mutex_lock_nested+0x17/0x20 [ 140.680002][ T4197] l2cap_chan_connect+0xfb/0xe20 [ 140.685493][ T4197] l2cap_sock_connect+0x5a3/0x770 [ 140.691080][ T4197] kernel_connect+0x11c/0x180 [ 140.696322][ T4197] rfcomm_dlc_open+0x600/0x10c0 [ 140.701741][ T4197] rfcomm_sock_connect+0x2e9/0x600 [ 140.707525][ T4197] __sys_connect+0x3cb/0x450 [ 140.712771][ T4197] __x64_sys_connect+0x76/0x80 [ 140.718088][ T4197] do_syscall_64+0x4c/0xa0 [ 140.723056][ T4197] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 140.729554][ T4197] [ 140.729554][ T4197] -> #0 (rfcomm_mutex){+.+.}-{3:3}: [ 140.737003][ T4197] __lock_acquire+0x38f7/0x7d40 [ 140.742416][ T4197] lock_acquire+0x19f/0x400 [ 140.747477][ T4197] __mutex_lock_common+0x1e5/0x2400 [ 140.753236][ T4197] mutex_lock_nested+0x17/0x20 [ 140.758559][ T4197] rfcomm_security_cfm+0x95/0x780 [ 140.764132][ T4197] hci_auth_complete_evt+0x388/0xbb0 [ 140.769978][ T4197] hci_event_packet+0x701/0x1310 [ 140.775472][ T4197] hci_rx_work+0x255/0xa10 [ 140.780435][ T4197] process_one_work+0x867/0xff0 [ 140.785864][ T4197] worker_thread+0xad7/0x12a0 [ 140.791082][ T4197] kthread+0x42e/0x520 [ 140.795686][ T4197] ret_from_fork+0x1f/0x30 [ 140.800652][ T4197] [ 140.800652][ T4197] other info that might help us debug this: [ 140.800652][ T4197] [ 140.810912][ T4197] Chain exists of: [ 140.810912][ T4197] rfcomm_mutex --> &hdev->lock --> hci_cb_list_lock [ 140.810912][ T4197] [ 140.823495][ T4197] Possible unsafe locking scenario: [ 140.823495][ T4197] [ 140.830984][ T4197] CPU0 CPU1 [ 140.836381][ T4197] ---- ---- [ 140.841767][ T4197] lock(hci_cb_list_lock); [ 140.846301][ T4197] lock(&hdev->lock); [ 140.852918][ T4197] lock(hci_cb_list_lock); [ 140.859980][ T4197] lock(rfcomm_mutex); [ 140.864162][ T4197] [ 140.864162][ T4197] *** DEADLOCK *** [ 140.864162][ T4197] [ 140.872332][ T4197] 4 locks held by kworker/u5:5/4197: [ 140.877633][ T4197] #0: ffff888074b77138 ((wq_completion)hci4#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 140.887972][ T4197] #1: ffffc90002fefd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 140.899321][ T4197] #2: ffff88801eb28478 (&hdev->lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0xbc/0xbb0 [ 140.909114][ T4197] #3: ffffffff8d594a88 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_auth_complete_evt+0x308/0xbb0 [ 140.919525][ T4197] [ 140.919525][ T4197] stack backtrace: [ 140.925481][ T4197] CPU: 1 PID: 4197 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 140.933058][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 140.943144][ T4197] Workqueue: hci4 hci_rx_work [ 140.947873][ T4197] Call Trace: [ 140.951172][ T4197] [ 140.954122][ T4197] dump_stack_lvl+0x188/0x250 [ 140.958835][ T4197] ? load_image+0x410/0x410 [ 140.963370][ T4197] ? show_regs_print_info+0x20/0x20 [ 140.968606][ T4197] ? print_circular_bug+0x12b/0x1a0 [ 140.973831][ T4197] check_noncircular+0x2f8/0x400 [ 140.978801][ T4197] ? print_deadlock_bug+0x5d0/0x5d0 [ 140.984036][ T4226] usb 2-1: USB disconnect, device number 31 [ 140.984035][ T4197] ? lockdep_lock+0xf1/0x1f0 [ 140.984068][ T4197] ? mark_lock+0x94/0x320 [ 140.998923][ T4197] ? _find_first_zero_bit+0xd1/0xf0 [ 141.004177][ T4197] __lock_acquire+0x38f7/0x7d40 [ 141.009077][ T4197] ? verify_lock_unused+0x140/0x140 [ 141.014328][ T4197] lock_acquire+0x19f/0x400 [ 141.018859][ T4197] ? rfcomm_security_cfm+0x95/0x780 [ 141.024091][ T4197] ? __might_sleep+0xf0/0xf0 [ 141.028726][ T4197] ? read_lock_is_recursive+0x10/0x10 [ 141.034131][ T4197] __mutex_lock_common+0x1e5/0x2400 [ 141.039360][ T4197] ? rfcomm_security_cfm+0x95/0x780 [ 141.044592][ T4197] ? rcu_lock_release+0x20/0x20 [ 141.049463][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 141.054697][ T4197] ? rfcomm_security_cfm+0x95/0x780 [ 141.059961][ T4197] ? mutex_lock_io_nested+0x60/0x60 [ 141.065181][ T4197] ? l2cap_security_cfm+0x12b4/0x1340 [ 141.070591][ T4197] ? kmem_cache_free+0x14c/0x210 [ 141.075560][ T4197] ? l2cap_disconn_cfm+0xc0/0xc0 [ 141.080633][ T4197] mutex_lock_nested+0x17/0x20 [ 141.085470][ T4197] rfcomm_security_cfm+0x95/0x780 [ 141.090518][ T4197] ? rfcomm_send_msc+0x340/0x340 [ 141.095595][ T4197] ? rfcomm_send_msc+0x340/0x340 [ 141.100575][ T4197] hci_auth_complete_evt+0x388/0xbb0 [ 141.105901][ T4197] ? hci_disconn_complete_evt+0xae0/0xae0 [ 141.111673][ T4197] ? lock_chain_count+0x20/0x20 [ 141.116566][ T4197] ? __rwlock_init+0x140/0x140 [ 141.121374][ T4197] hci_event_packet+0x701/0x1310 [ 141.126351][ T4197] ? _raw_spin_unlock+0x40/0x40 [ 141.131250][ T4197] ? rcu_lock_release+0x20/0x20 [ 141.136163][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 141.141424][ T4197] hci_rx_work+0x255/0xa10 [ 141.145897][ T4197] process_one_work+0x867/0xff0 [ 141.150816][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 141.156492][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 141.161811][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 141.166854][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 141.172426][ T4197] ? wq_worker_running+0x97/0x170 [ 141.177494][ T4197] worker_thread+0xad7/0x12a0 [ 141.182247][ T4197] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 141.188183][ T4197] kthread+0x42e/0x520 [ 141.192285][ T4197] ? rcu_lock_release+0x20/0x20 [ 141.197167][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 141.201817][ T4197] ret_from_fork+0x1f/0x30 [ 141.206284][ T4197] [ 141.281717][ T4232] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 141.641890][ T4232] usb 1-1: config index 0 descriptor too short (expected 8192, got 36) [ 141.652581][ T4232] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.663950][ T4232] usb 1-1: config 0 has no interfaces? [ 141.669526][ T4232] usb 1-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 141.680953][ T4232] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.695038][ T4232] usb 1-1: config 0 descriptor?? [ 141.933726][ T5483] udc-core: couldn't find an available UDC or it's busy [ 141.940851][ T5483] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 142.491854][ T4232] usb 1-1: string descriptor 0 read error: -71 [ 142.499480][ T4232] usb 1-1: USB disconnect, device number 21 [ 147.301885][ T4226] Bluetooth: hci4: command 0x0406 tx timeout