last executing test programs: 3m26.640465831s ago: executing program 2 (id=539): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000700)={0x0, 0x0, 0x34}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0xc, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{r1}, &(0x7f0000000980), &(0x7f00000009c0)=r2}, 0x20) 3m26.527889814s ago: executing program 2 (id=541): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0xa, 0x801, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff, 0x1f2}) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$WPAN_SECURITY(r2, 0x0, 0x22, &(0x7f0000000140)=0x28262df73c041336, 0x4) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100, 0xfffffffffffffffd}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x100, 0x0, &(0x7f0000000640)=""/256}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000880)={0x2020}, 0x2020) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) accept4(r0, 0x0, 0x0, 0x0) 3m25.534403728s ago: executing program 2 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sec\x00', &(0x7f0000000180)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sec/tomoyo/exception_policy\x00', 0x2, 0x0) read$FUSE(r4, 0x0, 0x0) 3m24.623633871s ago: executing program 2 (id=544): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x11e, 0x20, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x27, 0x300, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @broadcast}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) r3 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r3, 0x29, 0x1e, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000300)={0x0, @adiantum, 0x0, @desc3}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) sendto$x25(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x20000094, &(0x7f0000000940), 0x12) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r5, 0x8922, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x44000) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="5254d1adacd6df2b5a86b1001234", 0x0, 0x40000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3m17.920607015s ago: executing program 2 (id=562): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) socket$key(0xf, 0x3, 0x2) syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 3m14.268379805s ago: executing program 2 (id=571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000740)={0x73622a85, 0x100, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f00000007c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f00000008c0)={@fd={0x66642a85, 0x0, r2, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x10f, 0x0, &(0x7f0000000ac0)=""/271}) 2m58.980783511s ago: executing program 32 (id=571): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000540)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000006c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000740)={0x73622a85, 0x100, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0x8, 0x0, &(0x7f00000007c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000800)={0x4c, 0x0, &(0x7f0000000840)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x0, &(0x7f00000008c0)={@fd={0x66642a85, 0x0, r2, 0x0, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x10f, 0x0, &(0x7f0000000ac0)=""/271}) 12.801447266s ago: executing program 1 (id=1027): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x9da, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x80, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000b40)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x1, 0x1, "9e"}, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 10.966927691s ago: executing program 3 (id=1029): r0 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000240)={0x20, 0x90069109b15ef6c8, 0x1e, "4d61501d0100000000000000100000000000800700000000000038040000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)=ANY=[@ANYBLOB="403f0100000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000580)=ANY=[@ANYBLOB="401605"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac3(0x0, 0x94, &(0x7f0000000700)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x5050, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x82, 0x3, 0x1, 0x8, 0x50, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x20, 0x30, 0x35}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1e, 0x5}, [@input_terminal={0x14, 0x24, 0x2, 0x2, 0x404, 0x6, 0x0, 0xfffffffb, 0x3, 0x80, 0x2, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x9, 0x6, {0xa, 0x25, 0x25, 0x10001, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x5, 0x7, 0x0, {0xa, 0x25, 0x25, 0x3, 0x0, 0x9}}}}}}}}]}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f00000006c0)=ANY=[@ANYBLOB="400cf202"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.173986211s ago: executing program 4 (id=1031): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000406a05125000000000000109022400010000e80b0904000001030002000921fd7f000122e30109058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x83, 0x1, "d2"}, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xe, {[@local=@item_4={0x3, 0x2, 0x2, "00c15100"}, @global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(0x0, 0xa, 0x62080) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000100)={0x1, 0x2, 0x10001, 0xfffff582, 0x652, 0x200}) 9.052727258s ago: executing program 1 (id=1033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="68000000010905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000003002c0004800800010000000001200002800c00", 0x4e}], 0x1}, 0x4004040) 9.000741409s ago: executing program 5 (id=1034): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140018800800014000000002070002"], 0x4c}}, 0x0) 8.96071962s ago: executing program 1 (id=1035): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./trace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)='7', 0x1) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write(r0, 0x0, 0x0) 8.868986002s ago: executing program 5 (id=1036): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]}) r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000240)={@loopback={0x200000000000000}}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.836622953s ago: executing program 1 (id=1037): r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x82002) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000340)=0xd0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000440)=0xd0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 8.729526846s ago: executing program 1 (id=1038): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) write(r1, 0x0, 0x0) write(r1, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x7, 0x0, 0x3, 0x6c4ba42, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xb4, 0x0, 0x8, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc, 0x3, 0x7fffffffffffffff, 0x2, 0x0, 0x8e665f0, 0x0, 0x92c, 0x3, 0x7f, 0x0, 0x1000, 0x4, 0x0, 0x0, 0x3, 0x7, 0x0, 0x0, 0x0, 0x0, 0x800, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5c8e, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffd, 0x9, 0x0, 0xfffffffffffffffb, 0x1, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x400000, 0x200, 0x0, 0x40000000000, 0x2000007ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x2, 0xfffffffffffffffe, 0x2, 0x1, 0x3, 0x10, 0x4000100000001]}) socket$kcm(0x21, 0x2, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) epoll_create1(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0xfffffffffffffffc, 0x1, 0x9}, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 8.632037288s ago: executing program 5 (id=1039): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) io_uring_setup(0x2e08, &(0x7f00000001c0)={0x0, 0x5acf, 0x40, 0xffffffff, 0x1f2}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x3ff, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffe}, 0x1c) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x22, &(0x7f0000000140)=0x28262df73c041336, 0x4) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000180)={0xaa, 0x1a5}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000340)={0x73622a85, 0x100, 0xfffffffffffffffd}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x100, 0x0, &(0x7f0000000640)=""/256}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000740)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000880)={0x2020}, 0x2020) 8.264373507s ago: executing program 5 (id=1041): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102000200070502020002000705830200020007050402"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000100)={0x20, 0xe, 0xf, "cf0d416510d44a33a84085a068b520"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) 7.811173828s ago: executing program 1 (id=1042): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="c60009"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001640)={0x24, 0x0, 0x0, &(0x7f0000001bc0)=ANY=[@ANYBLOB="002290"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340"], 0x0) syz_usb_control_io(r1, &(0x7f0000000200)={0x2c, &(0x7f00000000c0)={0x20, 0x3, 0x2, {0x2, 0x23}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 7.684720431s ago: executing program 4 (id=1043): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mnt\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt/trace_marker\x00', 0x1, 0x1a) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt/trace_pipe\x00', 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f00000002c0)=0x405, 0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='./sys_sec\x00', &(0x7f00000003c0)='securityfs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r3, &(0x7f0000000500)=[{&(0x7f0000000540)="94", 0xf000}, {0x0}], 0x2) pipe2$9p(0x0, 0x4000) shutdown(0xffffffffffffffff, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f00000005c0)=""/28, 0xfffffffffffffdee) write$tun(r4, 0x0, 0xffe) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f00000006c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x9, @empty, 0x9}, {0xa, 0x5, 0x13, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x848a}, 0xffffffffffffffff, 0x1}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r5, &(0x7f0000004740)={0x12, 0x6, 0xfa00, {0x0, 0xffffffffffffffff, r5}}, 0x18) mount$afs(&(0x7f0000000000)=ANY=[@ANYBLOB="2373797a313a73797a311b11fb4484385d510222"], &(0x7f0000000100)='./mnt/trace_pipe\x00', &(0x7f0000000180), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="666c6f6352aab3ab854b9b7f6175746f63656c6c2c666c6f636b3d64796e2c666c6f636b3d810000006c2c6613b9f057be333719c43a9d6c6f756b3d737472696319e307c8d5b393dc0e8b742c666c6f636b3d776f743d072e2c647374656d5f"]) read(r1, &(0x7f0000000740)=""/16384, 0x4000) write$binfmt_script(r0, 0x0, 0x0) 7.032626377s ago: executing program 3 (id=1044): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x22020400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 3.621152511s ago: executing program 3 (id=1045): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="68000000010905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000003002c0004800800010000000001200002800c00", 0x4e}], 0x1}, 0x4004040) 3.520631553s ago: executing program 4 (id=1047): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./trace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000800)='7', 0x1) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write(r0, 0x0, 0x0) 3.423853356s ago: executing program 3 (id=1048): r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x82002) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000340)=0xd0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000440)=0xd0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.358689817s ago: executing program 4 (id=1050): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$evdev(0x0, 0x2, 0x0) ioctl$EVIOCGMASK(r1, 0x80104592, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x1c, {[@global=@item_012={0x1, 0x1, 0x9, '#'}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "2502"}, @main=@item_4={0x3, 0x0, 0x8, "4492796d"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}]}}, 0x0}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) 3.307543089s ago: executing program 3 (id=1051): r0 = syz_open_dev$evdev(&(0x7f0000000200), 0x0, 0x101240) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0xfffffffffffffffe) 3.196810452s ago: executing program 3 (id=1052): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000780)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000140)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000001c0)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 1.768801087s ago: executing program 4 (id=1055): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) unshare(0x22020400) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x20000023896) 903.624268ms ago: executing program 4 (id=1057): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x2a, &(0x7f0000000700)=ANY=[@ANYBLOB], 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect$lan78xx(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231306e53f070c0000002a240283"], 0x0}, 0x0) 480.527288ms ago: executing program 0 (id=1059): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000140018800800014000000002070002"], 0x4c}}, 0x0) 412.35986ms ago: executing program 0 (id=1060): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./trace\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r1, &(0x7f0000000800)='7', 0x1) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) write(r0, 0x0, 0x0) 356.967931ms ago: executing program 0 (id=1061): r0 = syz_open_dev$cec(&(0x7f0000000300), 0x0, 0x82002) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000340)=0xd0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000440)=0xd0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 308.800892ms ago: executing program 0 (id=1062): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f000003d2c0)=@vmx={0x0, 0x0, 0x2080}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 160.805666ms ago: executing program 0 (id=1063): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x9}]}) openat$kvm(0xffffff9c, &(0x7f0000000180), 0x800, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x11, &(0x7f00000001c0)=0x8, 0x4) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x13, &(0x7f0000000240)={@loopback={0x200000000000000}}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=0x0}, 0x20) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f00000002c0)={[0xc45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0x3, 0x4002004c2, 0x803, 0x9, 0x0, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x240046}) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 160.379346ms ago: executing program 5 (id=1064): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x0, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f0000000300)=[0x0], 0x1, 0x0}) syz_open_dev$video4linux(&(0x7f0000000100), 0x5, 0x101783) r1 = syz_open_dev$sg(&(0x7f0000000500), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) capset(&(0x7f0000000680)={0x20080522}, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$SG_IO(r2, 0x2285, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000140), 0x181041, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0x18, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/blkio.throttle.write_iops_device\x00', 0x1, 0x0) socket$pptp(0x18, 0x1, 0x2) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x4, 0x202, 0x7d, 0xffffffffffffffff, 0x8000, 0x4, 0x1}, 0x0, &(0x7f0000000280)={0x3ff, 0x6, 0xffffffffffffffff, 0x800, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="093b258485fea9dc5416f09b00000004000000e27f000000", @ANYRES32=r5, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x17, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000094090100000002816500feffffff000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(r3, 0x0, 0x4048040) read(r0, 0x0, 0x0) 140.609796ms ago: executing program 0 (id=1065): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x6, 0x371, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x2) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_genetlink_get_family_id$ipvs(0x0, r0) syz_emit_vhci(&(0x7f0000001a40)=ANY=[@ANYBLOB], 0x6) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) mq_open(0x0, 0x800, 0x80, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {}, 0xfe}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r2, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 0s ago: executing program 5 (id=1066): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000180)={0x0, 0xa}, 0x0, 0x0}) kernel console output (not intermixed with test programs): c, idProduct=0262, bcdDevice= 0.40 [ 318.491011][ T4362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.513981][ T6422] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 318.551980][ T6403] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.561745][ T6403] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.570805][ T6403] device bridge_slave_0 entered promiscuous mode [ 318.705711][ T5059] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.855543][ T4291] Bluetooth: hci5: command 0x041b tx timeout [ 319.103841][ T6403] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.163925][ T6403] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.338834][ T6403] device bridge_slave_1 entered promiscuous mode [ 319.841751][ T4362] usbhid 5-1:1.0: can't add hid device: -71 [ 319.858257][ T4362] usbhid: probe of 5-1:1.0 failed with error -71 [ 319.923605][ T4362] usb 5-1: USB disconnect, device number 7 [ 320.468834][ T6403] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.660147][ T6403] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.936227][ T4291] Bluetooth: hci5: command 0x040f tx timeout [ 320.962065][ T6403] team0: Port device team_slave_0 added [ 321.113139][ T6403] team0: Port device team_slave_1 added [ 321.285553][ T4325] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 321.951752][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.978227][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.013096][ T6403] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.069340][ T4325] usb 2-1: config 0 has no interfaces? [ 322.084292][ T4325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 322.233765][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.309547][ T4325] usb 2-1: Product: syz [ 322.347043][ T4325] usb 2-1: Manufacturer: syz [ 322.377754][ T4325] usb 2-1: SerialNumber: syz [ 322.473226][ T4325] usb 2-1: config 0 descriptor?? [ 322.926312][ T6403] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.933525][ T6403] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.015386][ T4291] Bluetooth: hci5: command 0x0419 tx timeout [ 323.075219][ T6403] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.247270][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 323.314301][ T6470] netlink: 'syz.0.620': attribute type 2 has an invalid length. [ 323.437956][ T14] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 323.449585][ T14] usb 4-1: config 0 has no interface number 0 [ 323.474367][ T14] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 323.511921][ T14] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 323.532417][ T14] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 323.542806][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.558224][ T14] usb 4-1: Product: syz [ 323.563151][ T14] usb 4-1: Manufacturer: syz [ 323.571448][ T14] usb 4-1: SerialNumber: syz [ 323.582149][ T14] usb 4-1: config 0 descriptor?? [ 323.591482][ T6458] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 323.610306][ T14] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 323.643276][ T14] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 323.802935][ T4329] usb 2-1: USB disconnect, device number 10 [ 323.881151][ T6403] device hsr_slave_0 entered promiscuous mode [ 323.902684][ T6403] device hsr_slave_1 entered promiscuous mode [ 323.933088][ T6403] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 323.942502][ T6403] Cannot create hsr debugfs directory [ 324.078335][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.618'. [ 324.141034][ T4329] usb 4-1: USB disconnect, device number 10 [ 324.178821][ T4329] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 324.208562][ T4329] cyberjack 4-1:0.69: device disconnected [ 326.082689][ T6493] Error parsing options; rc = [-22] [ 326.938691][ T6403] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 327.599228][ T6403] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 327.773394][ T6403] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 327.928202][ T6403] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 328.641876][ T5059] device hsr_slave_0 left promiscuous mode [ 328.748684][ T5059] device hsr_slave_1 left promiscuous mode [ 328.844463][ T5059] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.941715][ T5059] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 329.113167][ T5059] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 329.215419][ T5059] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 329.385877][ T5059] device bridge_slave_1 left promiscuous mode [ 329.394318][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.430952][ T5059] device bridge_slave_0 left promiscuous mode [ 329.455453][ T5059] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.638829][ T5059] device veth1_macvtap left promiscuous mode [ 329.660977][ T5059] device veth0_macvtap left promiscuous mode [ 329.693184][ T5059] device veth1_vlan left promiscuous mode [ 329.712421][ T5059] device veth0_vlan left promiscuous mode [ 331.715292][ T6532] netlink: 'syz.4.631': attribute type 2 has an invalid length. [ 331.872092][ T6535] printk: console [ttyS0] disabled [ 331.910841][ T6535] printk: console [ttyS0] enabled [ 336.474791][ T6482] Set syz1 is full, maxelem 65536 reached [ 337.165727][ T4325] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 337.358079][ T4325] usb 2-1: device descriptor read/64, error -71 [ 337.635273][ T4325] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 337.845771][ T4325] usb 2-1: device descriptor read/64, error -71 [ 337.901691][ T5059] team0 (unregistering): Port device team_slave_1 removed [ 337.977918][ T4325] usb usb2-port1: attempt power cycle [ 338.881788][ T5059] team0 (unregistering): Port device team_slave_0 removed [ 339.069755][ T5059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.090837][ T5059] device bond_slave_1 left promiscuous mode [ 339.135237][ T4325] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 339.315560][ T4325] usb 2-1: device descriptor read/8, error -71 [ 339.328283][ T6569] netlink: 'syz.0.641': attribute type 2 has an invalid length. [ 339.358026][ T5059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.495600][ T5059] device bond_slave_0 left promiscuous mode [ 341.407282][ T4325] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 341.452435][ T6587] device-mapper: ioctl: only supply one of name or uuid, cmd(4) [ 341.475055][ T4325] usb 2-1: unable to get BOS descriptor or descriptor too short [ 341.492518][ T4325] usb 2-1: not running at top speed; connect to a high speed hub [ 341.511864][ T4325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.524848][ T5059] bond0 (unregistering): Released all slaves [ 341.537063][ T4325] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.579934][ T4325] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.598162][ T4325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.606540][ T4325] usb 2-1: Product: syz [ 341.610732][ T4325] usb 2-1: Manufacturer: syz [ 341.615719][ T4325] usb 2-1: SerialNumber: syz [ 341.701124][ T6576] tipc: Started in network mode [ 341.707119][ T6576] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 341.926950][ T6576] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 342.016183][ T26] audit: type=1800 audit(2000000213.549:18): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.646" name="idVendor" dev="configfs" ino=46170 res=0 errno=0 [ 342.149203][ T6576] tipc: Enabled bearer , priority 10 [ 342.282889][ T26] audit: type=1800 audit(2000000213.669:19): pid=6584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.646" name="idProduct" dev="configfs" ino=46177 res=0 errno=0 [ 343.063297][ T4325] usb 2-1: 0:2 : does not exist [ 343.196805][ T6403] 8021q: adding VLAN 0 to HW filter on device bond0 [ 344.106058][ T4325] usb 2-1: USB disconnect, device number 14 [ 344.178923][ T6403] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.373523][ T22] tipc: Node number set to 1 [ 344.381358][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 344.389023][ T6607] netlink: 'syz.4.653': attribute type 2 has an invalid length. [ 344.451944][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 344.456551][ T6556] udevd[6556]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.481137][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 344.491314][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 344.500794][ T5007] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.507923][ T5007] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.556767][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 344.587654][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 344.637648][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 345.785607][ T5012] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.793019][ T5012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.826751][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 345.846680][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 345.877292][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 345.913340][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 345.925351][ T14] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 345.942335][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 345.953986][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 345.986557][ T5063] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 346.016096][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 346.035840][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 346.049373][ T4277] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 346.086072][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 346.110838][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 346.127857][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 346.140841][ T6403] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 346.165766][ T14] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 255 [ 346.229670][ T14] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 346.249332][ T4277] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 346.333972][ T4277] usb 1-1: config 1 interface 0 has no altsetting 0 [ 346.375278][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.383337][ T14] usb 2-1: Product: syz [ 346.408791][ T4277] usb 1-1: string descriptor 0 read error: -22 [ 346.428541][ T4277] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 346.444433][ T14] usb 2-1: Manufacturer: syz [ 346.463249][ T14] usb 2-1: SerialNumber: syz [ 346.480919][ T4277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.510253][ T14] usb 2-1: config 0 descriptor?? [ 346.532413][ T6609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 346.585434][ T6609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 346.604189][ T6621] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 346.993679][ T6609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 347.035526][ T6609] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 348.578853][ T4277] usbhid 1-1:1.0: can't add hid device: -71 [ 348.598461][ T4277] usbhid: probe of 1-1:1.0 failed with error -71 [ 348.639566][ T4277] usb 1-1: USB disconnect, device number 9 [ 348.655485][ T14] Error reading MAC address [ 348.668081][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 348.694214][ T5012] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 348.702213][ T14] usb 2-1: USB disconnect, device number 15 [ 348.733024][ T6403] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 351.696402][ T6663] netlink: 'syz.3.663': attribute type 2 has an invalid length. [ 353.215611][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 353.246652][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.359250][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 353.390485][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.453615][ T6403] device veth0_vlan entered promiscuous mode [ 353.476197][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 353.515963][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 353.578994][ T6403] device veth1_vlan entered promiscuous mode [ 353.713186][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 353.742877][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 353.792041][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 353.841229][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.877531][ T6403] device veth0_macvtap entered promiscuous mode [ 353.907819][ T6403] device veth1_macvtap entered promiscuous mode [ 353.992167][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.062629][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.109234][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.160904][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.213730][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.266540][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 354.306936][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 354.568541][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.249482][ T6685] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 355.396118][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.406329][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 355.414591][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 355.564177][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 355.670587][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 355.831351][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.022972][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.151234][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.284033][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.294639][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.305246][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.315183][ T6403] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 356.330239][ T6403] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 356.341992][ T6403] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 356.350711][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 356.389291][ T6715] netlink: 'syz.4.673': attribute type 2 has an invalid length. [ 357.187165][ T4429] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 357.198174][ T6403] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.255244][ T6403] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.305223][ T6403] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.314536][ T6403] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.309949][ T6722] afs: Unknown parameter 'flocRª³«…K›autocell' [ 358.657012][ T6733] device-mapper: ioctl: Invalid ioctl structure: name t, dev f800 [ 358.713058][ T4963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.727898][ T4963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.744537][ T5007] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 358.782503][ T4963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.833000][ T4963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.843673][ T4963] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 359.299218][ T6752] netlink: 'syz.1.684': attribute type 2 has an invalid length. [ 362.198385][ T6773] input: syz0 as /devices/virtual/input/input26 [ 362.802806][ T6781] afs: Unknown parameter 'flocRª³«…K›autocell' [ 364.513212][ T6791] comedi comedi2: comedi_test: 320 microvolt, 1616 microsecond waveform attached [ 364.698270][ T6798] netlink: 'syz.5.695': attribute type 2 has an invalid length. [ 366.978582][ T6823] Error parsing options; rc = [-22] [ 367.457914][ T6828] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 370.068839][ T6841] netlink: 'syz.1.707': attribute type 2 has an invalid length. [ 373.825215][ T4329] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 374.066736][ T4329] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.123906][ T4329] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 374.210862][ T4329] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.292953][ T4329] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.346759][ T4329] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.378252][ T4329] usb 1-1: Product: syz [ 374.397481][ T4329] usb 1-1: Manufacturer: syz [ 374.402152][ T4329] usb 1-1: SerialNumber: syz [ 375.606620][ T4329] cdc_ncm 1-1:1.0: skipping garbage [ 376.077801][ T6899] netlink: 'syz.5.720': attribute type 2 has an invalid length. [ 376.610367][ T4329] cdc_ncm 1-1:1.0: bind() failure [ 376.619710][ T4329] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 376.665238][ T4329] cdc_ncm 1-1:1.1: bind() failure [ 376.881006][ T4325] usb 1-1: USB disconnect, device number 10 [ 378.938883][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.945570][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.687653][ T6956] netlink: 'syz.3.732': attribute type 2 has an invalid length. [ 383.328016][ T6992] FAULT_INJECTION: forcing a failure. [ 383.328016][ T6992] name failslab, interval 1, probability 0, space 0, times 0 [ 383.342785][ T6992] CPU: 0 PID: 6992 Comm: syz.3.745 Not tainted syzkaller #0 [ 383.350128][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 383.360200][ T6992] Call Trace: [ 383.363586][ T6992] [ 383.366634][ T6992] dump_stack_lvl+0x188/0x24e [ 383.371495][ T6992] ? show_regs_print_info+0x12/0x12 [ 383.376734][ T6992] ? load_image+0x410/0x410 [ 383.381275][ T6992] ? __might_sleep+0xd0/0xd0 [ 383.385950][ T6992] ? __lock_acquire+0x7ea0/0x7ea0 [ 383.391030][ T6992] should_fail_ex+0x390/0x4c0 [ 383.395804][ T6992] should_failslab+0x5/0x20 [ 383.400364][ T6992] slab_pre_alloc_hook+0x59/0x300 [ 383.405421][ T6992] kmem_cache_alloc+0x56/0x2f0 [ 383.410186][ T6992] ? security_inode_alloc+0x30/0x110 [ 383.415541][ T6992] security_inode_alloc+0x30/0x110 [ 383.420655][ T6992] inode_init_always+0x910/0xc90 [ 383.425622][ T6992] iget_locked+0x218/0x8c0 [ 383.430051][ T6992] kernfs_get_inode+0x4a/0x680 [ 383.434855][ T6992] ? down_read+0x1a8/0x2d0 [ 383.439365][ T6992] kernfs_get_tree+0x455/0x710 [ 383.444137][ T6992] sysfs_get_tree+0x42/0x110 [ 383.448790][ T6992] vfs_get_tree+0x88/0x270 [ 383.453278][ T6992] vfs_fsconfig_locked+0x22f/0x400 [ 383.458454][ T6992] __se_sys_fsconfig+0x69e/0x7e0 [ 383.463404][ T6992] ? __x64_sys_fsconfig+0xc0/0xc0 [ 383.468440][ T6992] ? lockdep_hardirqs_on+0x94/0x140 [ 383.473644][ T6992] ? __x64_sys_fsconfig+0x1c/0xc0 [ 383.478671][ T6992] do_syscall_64+0x4c/0xa0 [ 383.483089][ T6992] ? clear_bhb_loop+0x60/0xb0 [ 383.487833][ T6992] ? clear_bhb_loop+0x60/0xb0 [ 383.492528][ T6992] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 383.498424][ T6992] RIP: 0033:0x7ffb2859e1d9 [ 383.502924][ T6992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.522636][ T6992] RSP: 002b:00007ffb294cd028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 383.531145][ T6992] RAX: ffffffffffffffda RBX: 00007ffb28825fa0 RCX: 00007ffb2859e1d9 [ 383.539125][ T6992] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 383.547099][ T6992] RBP: 00007ffb28635888 R08: 0000000000000000 R09: 0000000000000000 [ 383.555071][ T6992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 383.563047][ T6992] R13: 00007ffb28826038 R14: 00007ffb28825fa0 R15: 00007ffc1e356be8 [ 383.571033][ T6992] [ 384.726071][ T7004] netlink: 'syz.3.746': attribute type 2 has an invalid length. [ 385.125418][ T4325] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 385.357222][ T4325] usb 2-1: Using ep0 maxpacket: 8 [ 385.365197][ T5379] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 385.387764][ T4325] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 385.525965][ T4325] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 385.730565][ T5379] usb 4-1: Using ep0 maxpacket: 8 [ 385.736755][ T4325] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 385.748571][ T4325] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 385.760109][ T4325] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 385.773502][ T5379] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.785272][ T4325] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 385.794338][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.802781][ T5379] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 385.812101][ T5379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.827692][ T5379] usb 4-1: config 0 descriptor?? [ 386.076190][ T4325] usb 2-1: usb_control_msg returned -32 [ 386.084926][ T5379] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 386.101198][ T4325] usbtmc 2-1:16.0: can't read capabilities [ 386.863483][ T5379] usb 4-1: USB disconnect, device number 11 [ 388.931807][ T5379] usb 2-1: USB disconnect, device number 16 [ 390.512321][ T7068] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 390.553055][ T7068] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 391.146282][ T7072] tmpfs: Bad value for 'mpol' [ 391.309592][ T7077] FAULT_INJECTION: forcing a failure. [ 391.309592][ T7077] name failslab, interval 1, probability 0, space 0, times 0 [ 391.390463][ T7077] CPU: 0 PID: 7077 Comm: syz.4.768 Not tainted syzkaller #0 [ 391.397821][ T7077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.407996][ T7077] Call Trace: [ 391.411300][ T7077] [ 391.414249][ T7077] dump_stack_lvl+0x188/0x24e [ 391.418960][ T7077] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 391.424622][ T7077] ? show_regs_print_info+0x12/0x12 [ 391.429845][ T7077] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 391.435549][ T7077] ? dump_stack+0x5/0x12 [ 391.439815][ T7077] ? __sanitizer_cov_trace_pc+0x4/0x60 [ 391.445342][ T7077] should_fail_ex+0x390/0x4c0 [ 391.450063][ T7077] should_failslab+0x5/0x20 [ 391.454586][ T7077] slab_pre_alloc_hook+0x59/0x300 [ 391.459635][ T7077] ? create_filter_start+0xc1/0x2c0 [ 391.465003][ T7077] __kmem_cache_alloc_node+0x4f/0x270 [ 391.470400][ T7077] ? __might_fault+0xa6/0x120 [ 391.475168][ T7077] ? create_filter_start+0xc1/0x2c0 [ 391.480390][ T7077] kmalloc_trace+0x26/0xe0 [ 391.484824][ T7077] create_filter_start+0xc1/0x2c0 [ 391.489881][ T7077] apply_event_filter+0x16c/0x590 [ 391.494934][ T7077] event_filter_write+0xce/0x140 [ 391.499893][ T7077] ? event_filter_read+0x270/0x270 [ 391.505026][ T7077] vfs_write+0x2dc/0x9a0 [ 391.509391][ T7077] ? file_end_write+0x250/0x250 [ 391.514272][ T7077] ? __fget_files+0x28/0x460 [ 391.518904][ T7077] ? __fget_files+0x3fc/0x460 [ 391.523615][ T7077] ? __fdget_pos+0x2ae/0x360 [ 391.528225][ T7077] ? ksys_write+0x70/0x260 [ 391.532668][ T7077] ksys_write+0x14d/0x260 [ 391.537034][ T7077] ? __ia32_sys_read+0x80/0x80 [ 391.541829][ T7077] ? lockdep_hardirqs_on+0x94/0x140 [ 391.547060][ T7077] do_syscall_64+0x4c/0xa0 [ 391.551508][ T7077] ? clear_bhb_loop+0x60/0xb0 [ 391.556214][ T7077] ? clear_bhb_loop+0x60/0xb0 [ 391.560914][ T7077] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 391.566828][ T7077] RIP: 0033:0x7efc8879e1d9 [ 391.571274][ T7077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.590902][ T7077] RSP: 002b:00007efc89641028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 391.599337][ T7077] RAX: ffffffffffffffda RBX: 00007efc88a25fa0 RCX: 00007efc8879e1d9 [ 391.607415][ T7077] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 391.615401][ T7077] RBP: 00007efc88835888 R08: 0000000000000000 R09: 0000000000000000 [ 391.623394][ T7077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.631387][ T7077] R13: 00007efc88a26038 R14: 00007efc88a25fa0 R15: 00007ffde97d77e8 [ 391.639396][ T7077] [ 393.515891][ T7093] netlink: 'syz.4.774': attribute type 29 has an invalid length. [ 393.524093][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 393.632345][ T7093] netlink: 'syz.4.774': attribute type 29 has an invalid length. [ 393.661015][ T7093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.774'. [ 393.855276][ T5379] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 394.071131][ T7107] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 394.085335][ T5379] usb 1-1: Using ep0 maxpacket: 16 [ 394.092772][ T5379] usb 1-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 394.114000][ T5379] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.117561][ T7107] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 394.146135][ T5379] usb 1-1: config 0 descriptor?? [ 394.172500][ T5379] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 394.869735][ T5379] gspca_sonixj: reg_w1 err -110 [ 395.276668][ T5379] sonixj: probe of 1-1:0.0 failed with error -110 [ 397.073924][ T7124] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 397.107747][ T7124] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 397.132864][ T7124] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 397.209773][ T7124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.780'. [ 397.777661][ T5804] usb 1-1: USB disconnect, device number 11 [ 398.535179][ T7141] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 399.681136][ T7151] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 399.758725][ T7151] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 400.697596][ T7159] ip_tables: iptables: counters copy to user failed while replacing table [ 402.050305][ T26] audit: type=1800 audit(2000000273.589:20): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.796" name="idProduct" dev="configfs" ino=47366 res=0 errno=0 [ 405.052859][ T7214] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 405.510760][ T7215] capability: warning: `syz.5.805' uses deprecated v2 capabilities in a way that may be insecure [ 406.225395][ T5379] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 406.415266][ T5379] usb 2-1: Using ep0 maxpacket: 8 [ 406.426263][ T5379] usb 2-1: config index 0 descriptor too short (expected 1307, got 27) [ 406.475294][ T5379] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 406.483476][ T5379] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 406.518005][ T5379] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 406.545359][ T5379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 406.593988][ T5379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 406.625434][ T5379] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 406.851350][ T7229] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 406.906083][ T7229] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 406.941095][ T7229] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 407.747121][ T5379] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 407.758898][ T5379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.767852][ T5379] usb 2-1: Product: syz [ 407.772035][ T5379] usb 2-1: Manufacturer: syz [ 407.776755][ T5379] usb 2-1: SerialNumber: syz [ 407.783087][ T5379] usb 2-1: config 0 descriptor?? [ 407.796900][ T5379] hub 2-1:0.0: bad descriptor, ignoring hub [ 407.814992][ T5379] hub: probe of 2-1:0.0 failed with error -5 [ 407.823611][ T5379] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input27 [ 407.947371][ T5379] input: failed to attach handler mousedev to device input27, error: -5 [ 408.036799][ T5379] usb 2-1: USB disconnect, device number 17 [ 410.505237][ T5379] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 410.718210][ T5379] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 410.746825][ T5379] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 411.936974][ T5379] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.005281][ T5379] usb 4-1: config 0 interface 0 has no altsetting 0 [ 412.025226][ T5379] usb 4-1: New USB device found, idVendor=046d, idProduct=c539, bcdDevice= 0.00 [ 412.050744][ T5379] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.062784][ T7271] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 412.076638][ T5379] usb 4-1: config 0 descriptor?? [ 412.095380][ T7242] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 412.409588][ T7277] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 412.458618][ T7277] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 412.495671][ T7277] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 413.361109][ T5379] usbhid 4-1:0.0: can't add hid device: -71 [ 413.375417][ T5379] usbhid: probe of 4-1:0.0 failed with error -71 [ 413.420133][ T5379] usb 4-1: USB disconnect, device number 12 [ 414.145234][ T5379] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 414.675398][ T5379] usb 4-1: Using ep0 maxpacket: 16 [ 414.706950][ T5379] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 414.725179][ T5379] usb 4-1: config 0 has no interface number 0 [ 414.733777][ T5379] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 414.763597][ T5379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.805302][ T5379] usb 4-1: Product: syz [ 414.815449][ T5379] usb 4-1: Manufacturer: syz [ 414.825380][ T5379] usb 4-1: SerialNumber: syz [ 414.842000][ T5379] usb 4-1: config 0 descriptor?? [ 414.874257][ T5379] hub 4-1:0.132: bad descriptor, ignoring hub [ 414.889458][ T5379] hub: probe of 4-1:0.132 failed with error -5 [ 414.911972][ T5379] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input28 [ 415.458789][ T7306] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 415.491356][ T7306] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 415.520714][ T7306] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 416.103585][ T5379] input: failed to attach handler mousedev to device input28, error: -2 [ 416.158024][ T5379] usb 4-1: USB disconnect, device number 13 [ 417.371122][ T7327] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 417.416182][ T7327] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 417.450102][ T7327] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 418.261990][ T4291] Bluetooth: hci5: command 0x0405 tx timeout [ 418.343227][ T26] audit: type=1326 audit(2000000289.879:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.4.834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8879e1d9 code=0x7ffc0000 [ 418.448037][ T26] audit: type=1326 audit(2000000289.919:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.4.834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8879e1d9 code=0x7ffc0000 [ 418.533227][ T26] audit: type=1326 audit(2000000289.919:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.4.834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8879e1d9 code=0x7ffc0000 [ 418.619573][ T26] audit: type=1326 audit(2000000289.919:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.4.834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7efc8879e1d9 code=0x7ffc0000 [ 418.655196][ T26] audit: type=1326 audit(2000000289.919:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.4.834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8879e1d9 code=0x7ffc0000 [ 418.774273][ T7340] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 419.427206][ T26] audit: type=1326 audit(2000000289.919:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.4.834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc8879e1d9 code=0x7ffc0000 [ 419.534313][ T26] audit: type=1326 audit(2000000289.919:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.4.834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7efc8879e1d9 code=0x7ffc0000 [ 419.947628][ T26] audit: type=1326 audit(2000000289.919:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7329 comm="syz.4.834" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7efc8879e1d9 code=0x7ffc0000 [ 420.498608][ T7355] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 422.323947][ T7373] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 422.884621][ T7375] netlink: 80 bytes leftover after parsing attributes in process `syz.4.844'. [ 423.362017][ T7380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.369829][ T7380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.522211][ T7380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.529995][ T7380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 425.650783][ T7389] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 427.063966][ T7415] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 427.070545][ T7415] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 427.078483][ T7415] vhci_hcd vhci_hcd.0: Device attached [ 427.355265][ T4363] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 428.335803][ T7416] vhci_hcd: connection reset by peer [ 428.343687][ T4963] vhci_hcd: stop threads [ 428.360411][ T4963] vhci_hcd: release socket [ 428.433012][ T4963] vhci_hcd: disconnect device [ 429.323351][ T7435] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 429.329931][ T7435] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 429.343580][ T7435] vhci_hcd vhci_hcd.0: Device attached [ 429.615364][ T4323] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 432.318258][ T7444] netlink: 'syz.4.854': attribute type 1 has an invalid length. [ 432.326909][ T7444] (unnamed net_device) (uninitialized): option mode: invalid value (10) [ 432.759639][ T7436] vhci_hcd: connection reset by peer [ 432.767942][ T11] vhci_hcd: stop threads [ 432.772253][ T11] vhci_hcd: release socket [ 432.851625][ T11] vhci_hcd: disconnect device [ 433.415379][ T4363] vhci_hcd: vhci_device speed not set [ 433.986661][ T7455] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 434.030148][ T7455] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 434.064341][ T7455] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 435.656408][ T4323] vhci_hcd: vhci_device speed not set [ 437.103942][ T7485] block2mtd: erasesize must be a divisor of device size [ 437.335472][ T4291] Bluetooth: hci5: command 0x0406 tx timeout [ 437.695287][ T3653] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 439.074452][ T7508] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 439.118697][ T7508] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 439.149096][ T7508] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 440.538155][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.544523][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.744724][ T3653] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 440.764351][ T3653] usb 1-1: can't read configurations, error -71 [ 444.316525][ T7592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.884'. [ 444.707223][ T7602] netlink: 36 bytes leftover after parsing attributes in process `syz.5.886'. [ 444.753091][ T7602] FAULT_INJECTION: forcing a failure. [ 444.753091][ T7602] name failslab, interval 1, probability 0, space 0, times 0 [ 444.811883][ T7602] CPU: 0 PID: 7602 Comm: syz.5.886 Not tainted syzkaller #0 [ 444.819243][ T7602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 444.829491][ T7602] Call Trace: [ 444.832783][ T7602] [ 444.835737][ T7602] dump_stack_lvl+0x188/0x24e [ 444.840448][ T7602] ? show_regs_print_info+0x12/0x12 [ 444.845683][ T7602] ? load_image+0x410/0x410 [ 444.850197][ T7602] ? __might_sleep+0xd0/0xd0 [ 444.854782][ T7602] ? __lock_acquire+0x7ea0/0x7ea0 [ 444.859812][ T7602] should_fail_ex+0x390/0x4c0 [ 444.864496][ T7602] should_failslab+0x5/0x20 [ 444.869000][ T7602] slab_pre_alloc_hook+0x59/0x300 [ 444.874035][ T7602] ? is_bpf_text_address+0x22/0x2a0 [ 444.879339][ T7602] kmem_cache_alloc+0x56/0x2f0 [ 444.884117][ T7602] ? __alloc_file+0x25/0x230 [ 444.888710][ T7602] __alloc_file+0x25/0x230 [ 444.893146][ T7602] alloc_empty_file+0x90/0x180 [ 444.897942][ T7602] path_openat+0x11c/0x2f10 [ 444.902478][ T7602] ? kasan_set_track+0x60/0x70 [ 444.907338][ T7602] ? verify_lock_unused+0x140/0x140 [ 444.912536][ T7602] ? do_sys_openat2+0xdd/0x4f0 [ 444.917301][ T7602] ? __x64_sys_openat+0x135/0x160 [ 444.922330][ T7602] ? do_syscall_64+0x4c/0xa0 [ 444.926945][ T7602] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.933015][ T7602] ? do_filp_open+0x420/0x420 [ 444.937708][ T7602] do_filp_open+0x1ee/0x420 [ 444.942311][ T7602] ? vfs_tmpfile+0x470/0x470 [ 444.946913][ T7602] ? _raw_spin_unlock+0x24/0x40 [ 444.951773][ T7602] ? alloc_fd+0x590/0x640 [ 444.956114][ T7602] do_sys_openat2+0x14b/0x4f0 [ 444.960840][ T7602] ? do_sys_open+0xe0/0xe0 [ 444.965362][ T7602] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 444.971373][ T7602] ? lock_chain_count+0x20/0x20 [ 444.976241][ T7602] __x64_sys_openat+0x135/0x160 [ 444.981101][ T7602] do_syscall_64+0x4c/0xa0 [ 444.985526][ T7602] ? clear_bhb_loop+0x60/0xb0 [ 444.990208][ T7602] ? clear_bhb_loop+0x60/0xb0 [ 444.994893][ T7602] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 445.000795][ T7602] RIP: 0033:0x7f743e75ea0e [ 445.005209][ T7602] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 445.024817][ T7602] RSP: 002b:00007f743f708ef8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 445.033234][ T7602] RAX: ffffffffffffffda RBX: 00007f743f7096c0 RCX: 00007f743e75ea0e [ 445.041206][ T7602] RDX: 0000000000000000 RSI: 00007f743e834a5a RDI: ffffffffffffff9c [ 445.049170][ T7602] RBP: 00007f743e835888 R08: 0000000000000000 R09: 0000000000000000 [ 445.057136][ T7602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 445.065136][ T7602] R13: 0000000000000000 R14: 00007f743ea25fa0 R15: 00007ffc9ec87378 [ 445.073145][ T7602] [ 445.168261][ T7609] device syzkaller0 entered promiscuous mode [ 445.875237][ T4363] usb 4-1: new low-speed USB device number 14 using dummy_hcd [ 446.719307][ T7634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.892'. [ 446.853184][ T4363] usb 4-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 447.073489][ T4363] usb 4-1: config 1 interface 0 has no altsetting 0 [ 447.085758][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.0.891'. [ 447.172813][ T4363] usb 4-1: string descriptor 0 read error: -22 [ 447.183018][ T4363] usb 4-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 447.259797][ T7641] Driver unsupported XDP return value 0 on prog (id 65) dev N/A, expect packet loss! [ 447.265165][ T4363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.426733][ T7624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 449.081468][ T4363] usbhid 4-1:1.0: can't add hid device: -71 [ 449.110412][ T4363] usbhid: probe of 4-1:1.0 failed with error -71 [ 449.161176][ T4363] usb 4-1: USB disconnect, device number 14 [ 449.291424][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz.4.905'. [ 449.468458][ T7683] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 450.275991][ T7695] netlink: 28 bytes leftover after parsing attributes in process `syz.3.909'. [ 450.365867][ T7699] netlink: 100 bytes leftover after parsing attributes in process `syz.4.911'. [ 450.927138][ T7703] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 451.933035][ T7712] sctp: [Deprecated]: syz.3.914 (pid 7712) Use of int in max_burst socket option deprecated. [ 451.933035][ T7712] Use struct sctp_assoc_value instead [ 452.115361][ T4363] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 452.227828][ T7724] netlink: 8 bytes leftover after parsing attributes in process `syz.5.918'. [ 452.311136][ T4363] usb 1-1: config 1 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 452.340125][ T4363] usb 1-1: config 1 interface 0 has no altsetting 0 [ 452.368351][ T4363] usb 1-1: string descriptor 0 read error: -22 [ 452.374661][ T4363] usb 1-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice= 0.40 [ 452.415227][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.437284][ T7711] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 452.540415][ T7736] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 453.238295][ T4329] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 453.457020][ T4329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.480994][ T4329] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 453.495903][ T4329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.526958][ T4329] usb 4-1: config 0 descriptor?? [ 453.575410][ T5804] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 453.595183][ T4323] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 453.665654][ T4363] usbhid 1-1:1.0: can't add hid device: -71 [ 453.682142][ T4363] usbhid: probe of 1-1:1.0 failed with error -71 [ 453.694012][ T4363] usb 1-1: USB disconnect, device number 14 [ 453.756563][ T4329] usbhid 4-1:0.0: can't add hid device: -71 [ 453.762952][ T4329] usbhid: probe of 4-1:0.0 failed with error -71 [ 453.775794][ T5804] usb 2-1: Using ep0 maxpacket: 8 [ 453.790460][ T5804] usb 2-1: unable to get BOS descriptor or descriptor too short [ 453.795322][ T4323] usb 6-1: Using ep0 maxpacket: 32 [ 453.800113][ T4329] usb 4-1: USB disconnect, device number 15 [ 453.824079][ T5804] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 16 [ 453.827051][ T4323] usb 6-1: config 0 has an invalid interface number: 20 but max is 0 [ 453.841238][ T5804] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 453.844923][ T4323] usb 6-1: config 0 has no interface number 0 [ 453.864048][ T4323] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 453.874814][ T4323] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 453.879806][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.886482][ T4323] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 453.897317][ T5804] usb 2-1: Product: syz [ 453.911805][ T5804] usb 2-1: Manufacturer: syz [ 453.918867][ T5804] usb 2-1: SerialNumber: syz [ 453.931404][ T4323] usb 6-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 453.934962][ T7737] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 453.957376][ T4323] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.989377][ T4323] usb 6-1: Product: syz [ 453.993996][ T4323] usb 6-1: Manufacturer: syz [ 454.002035][ T4323] usb 6-1: SerialNumber: syz [ 454.016174][ T4323] usb 6-1: config 0 descriptor?? [ 454.022406][ T7739] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 454.155203][ T4325] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 454.182021][ T7737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.193950][ T7737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.222442][ T5804] usb 2-1: MIDIStreaming interface descriptor not found [ 454.238509][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.267329][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.294010][ T5804] usb 2-1: USB disconnect, device number 18 [ 454.329946][ T4329] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 454.335252][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 454.344703][ T4325] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 454.355735][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.371015][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.401978][ T4325] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 454.427011][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.440582][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 454.450878][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.459794][ T4325] usb 5-1: Product: syz [ 454.464040][ T4325] usb 5-1: Manufacturer: syz [ 454.469184][ T4325] usb 5-1: SerialNumber: syz [ 454.483845][ T4325] usb 5-1: config 0 descriptor?? [ 454.490398][ T7757] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 454.499906][ T4325] hub 5-1:0.0: bad descriptor, ignoring hub [ 454.506346][ T4325] hub: probe of 5-1:0.0 failed with error -5 [ 454.516021][ T4329] usb 4-1: Using ep0 maxpacket: 32 [ 454.537153][ T4329] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.557588][ T4329] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 454.569419][ T4329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.581135][ T4329] usb 4-1: config 0 descriptor?? [ 454.592748][ T4329] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 454.605744][ T4329] ldusb 4-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 454.676280][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.685429][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.694958][ T7739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.723892][ T7739] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.835174][ T5804] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 454.936247][ T4323] usb-storage 6-1:0.20: USB Mass Storage device detected [ 454.946430][ T4323] usb-storage 6-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 455.015773][ T5804] usb 2-1: Using ep0 maxpacket: 16 [ 455.024119][ T5804] usb 2-1: unable to get BOS descriptor or descriptor too short [ 455.033095][ T5804] usb 2-1: config 159 has an invalid interface number: 195 but max is 0 [ 455.045258][ T5804] usb 2-1: config 159 has no interface number 0 [ 455.051755][ T5804] usb 2-1: config 159 interface 195 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 455.062022][ T5804] usb 2-1: config 159 interface 195 has no altsetting 0 [ 455.071436][ T5804] usb 2-1: New USB device found, idVendor=17e9, idProduct=b889, bcdDevice=ec.5c [ 455.080655][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.088774][ T5804] usb 2-1: Product: syz [ 455.093078][ T5804] usb 2-1: Manufacturer: syz [ 455.099743][ T5804] usb 2-1: SerialNumber: syz [ 455.107808][ T7737] raw-gadget.7 gadget.1: fail, usb_ep_enable returned -22 [ 455.143123][ T4323] scsi host1: usb-storage 6-1:0.20 [ 455.158805][ T7757] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 455.174028][ T4323] usb 6-1: USB disconnect, device number 2 [ 455.359580][ T7757] usb 5-1: device firmware changed [ 455.373489][ T4325] usb 5-1: USB disconnect, device number 8 [ 455.619280][ T4363] usb 4-1: USB disconnect, device number 16 [ 455.655345][ T4325] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 455.784909][ T5804] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 455.855278][ T4325] usb 5-1: Using ep0 maxpacket: 32 [ 455.863107][ T4325] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 456.022926][ T4325] usb 5-1: string descriptor 0 read error: -22 [ 456.087209][ T4325] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 456.134193][ T5804] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 456.143080][ T4363] ldusb 4-1:0.0: LD USB Device #1 now disconnected [ 456.169996][ T5804] [drm] Initialized udl 0.0.1 20120220 for 2-1:159.195 on minor 2 [ 456.178064][ T5804] [drm] Initialized udl on minor 2 [ 456.181714][ T4325] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 456.253503][ T4325] usb 5-1: config 0 descriptor?? [ 456.293590][ T7774] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 456.338453][ T4325] hub 5-1:0.0: bad descriptor, ignoring hub [ 456.344523][ T4325] hub: probe of 5-1:0.0 failed with error -5 [ 456.362162][ T5804] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 456.383874][ T5804] udl 2-1:159.195: [drm] Cannot find any crtc or sizes [ 456.393996][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.930'. [ 456.431561][ T7665] udevd[7665]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 456.459494][ T5804] usb 2-1: USB disconnect, device number 19 [ 456.487332][ T4329] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 456.519555][ T4329] udl 2-1:159.195: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 456.546216][ T4329] udl 2-1:159.195: [drm] Cannot find any crtc or sizes [ 456.695350][ T4323] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 456.711044][ T4325] usb 5-1: USB disconnect, device number 9 [ 456.895238][ T4323] usb 6-1: Using ep0 maxpacket: 8 [ 456.902071][ T4323] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 456.910584][ T4323] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 456.922390][ T4323] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 456.934019][ T4323] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.948967][ T4323] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.962903][ T4323] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 456.975222][ T5804] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 456.976482][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.178038][ T5804] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 457.262081][ T7812] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 457.325163][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.641952][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.828682][ T5804] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 457.846700][ T4323] usb 6-1: GET_CAPABILITIES returned 0 [ 457.853866][ T4323] usbtmc 6-1:16.0: can't read capabilities [ 457.863394][ T5804] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 457.880681][ T5804] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 458.121157][ T7790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.262037][ T7790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 458.382749][ T7790] usbtmc 6-1:16.0: usbtmc488_ioctl_trigger returned -71 [ 458.390742][ T5804] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice= 1.00 [ 458.400104][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 458.406869][ T4325] usb 6-1: USB disconnect, device number 3 [ 458.408237][ T5804] usb 1-1: Product: syz [ 458.418236][ T5804] usb 1-1: Manufacturer: syz [ 458.549150][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 458.647720][ T7798] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 458.669608][ T7831] FAULT_INJECTION: forcing a failure. [ 458.669608][ T7831] name failslab, interval 1, probability 0, space 0, times 0 [ 458.673878][ T5804] dvb_ttusb_budget: ttusb_init_controller: error [ 458.702941][ T7831] CPU: 1 PID: 7831 Comm: syz.3.945 Not tainted syzkaller #0 [ 458.710332][ T7831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 458.710477][ T5804] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 458.720394][ T7831] Call Trace: [ 458.720453][ T7831] [ 458.720464][ T7831] dump_stack_lvl+0x188/0x24e [ 458.720498][ T7831] ? show_regs_print_info+0x12/0x12 [ 458.720520][ T7831] ? load_image+0x410/0x410 [ 458.720540][ T7831] ? __might_sleep+0xd0/0xd0 [ 458.754701][ T7831] ? __lock_acquire+0x7ea0/0x7ea0 [ 458.759804][ T7831] should_fail_ex+0x390/0x4c0 [ 458.764526][ T7831] should_failslab+0x5/0x20 [ 458.769142][ T7831] slab_pre_alloc_hook+0x59/0x300 [ 458.774198][ T7831] ? __kmem_cache_alloc_node+0x19d/0x270 [ 458.780033][ T7831] ? create_filter_start+0x15c/0x2c0 [ 458.785340][ T7831] __kmem_cache_alloc_node+0x4f/0x270 [ 458.790723][ T7831] ? create_filter_start+0x15c/0x2c0 [ 458.796115][ T7831] kmalloc_trace+0x26/0xe0 [ 458.800549][ T7831] create_filter_start+0x15c/0x2c0 [ 458.805762][ T7831] apply_event_filter+0x16c/0x590 [ 458.810802][ T7831] event_filter_write+0xce/0x140 [ 458.816100][ T7831] ? event_filter_read+0x270/0x270 [ 458.821212][ T7831] vfs_write+0x2dc/0x9a0 [ 458.825466][ T7831] ? file_end_write+0x250/0x250 [ 458.830328][ T7831] ? __fget_files+0x28/0x460 [ 458.834927][ T7831] ? __fget_files+0x3fc/0x460 [ 458.839804][ T7831] ? __fdget_pos+0x2ae/0x360 [ 458.844442][ T7831] ? ksys_write+0x70/0x260 [ 458.848966][ T7831] ksys_write+0x14d/0x260 [ 458.853306][ T7831] ? __ia32_sys_read+0x80/0x80 [ 458.858080][ T7831] ? lockdep_hardirqs_on+0x94/0x140 [ 458.863292][ T7831] do_syscall_64+0x4c/0xa0 [ 458.867712][ T7831] ? clear_bhb_loop+0x60/0xb0 [ 458.872407][ T7831] ? clear_bhb_loop+0x60/0xb0 [ 458.877138][ T7831] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 458.883249][ T7831] RIP: 0033:0x7ffb2859e1d9 [ 458.887669][ T7831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 458.907897][ T7831] RSP: 002b:00007ffb294cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 458.916317][ T7831] RAX: ffffffffffffffda RBX: 00007ffb28825fa0 RCX: 00007ffb2859e1d9 [ 458.924292][ T7831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 458.932268][ T7831] RBP: 00007ffb28635888 R08: 0000000000000000 R09: 0000000000000000 [ 458.940270][ T7831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 458.948249][ T7831] R13: 00007ffb28826038 R14: 00007ffb28825fa0 R15: 00007ffc1e356be8 [ 458.956259][ T7831] [ 458.987868][ T7798] mmap: syz.0.933 (7798) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 459.139845][ T5804] DVB: Unable to find symbol cx22700_attach() [ 459.292439][ T5804] DVB: Unable to find symbol tda10046_attach() [ 459.308355][ T5804] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 459.336482][ T5804] usb 1-1: USB disconnect, device number 15 [ 459.531946][ T7851] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 459.547077][ T4325] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 459.745813][ T4325] usb 4-1: Using ep0 maxpacket: 32 [ 459.759942][ T4325] usb 4-1: unable to get BOS descriptor or descriptor too short [ 459.892254][ T4325] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 460.099329][ T4325] usb 4-1: config 8 has 1 interface, different from the descriptor's value: 3 [ 460.496381][ T4325] usb 4-1: New USB device found, idVendor=0499, idProduct=101b, bcdDevice=bf.f4 [ 460.561468][ T4325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.585165][ T4325] usb 4-1: Product: syz [ 460.590160][ T4325] usb 4-1: Manufacturer: syz [ 460.602889][ T4325] usb 4-1: SerialNumber: syz [ 460.731933][ T7873] netlink: 44 bytes leftover after parsing attributes in process `syz.5.959'. [ 460.748482][ T7870] FAULT_INJECTION: forcing a failure. [ 460.748482][ T7870] name failslab, interval 1, probability 0, space 0, times 0 [ 460.829685][ T7870] CPU: 1 PID: 7870 Comm: syz.1.958 Not tainted syzkaller #0 [ 460.837139][ T7870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 460.847226][ T7870] Call Trace: [ 460.850529][ T7870] [ 460.853497][ T7870] dump_stack_lvl+0x188/0x24e [ 460.854422][ T7876] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 460.858199][ T7870] ? show_regs_print_info+0x12/0x12 [ 460.871856][ T7870] ? load_image+0x410/0x410 [ 460.876403][ T7870] ? __might_sleep+0xd0/0xd0 [ 460.881050][ T7870] ? __lock_acquire+0x7ea0/0x7ea0 [ 460.886122][ T7870] should_fail_ex+0x390/0x4c0 [ 460.890867][ T7870] should_failslab+0x5/0x20 [ 460.895401][ T7870] slab_pre_alloc_hook+0x59/0x300 [ 460.900477][ T7870] ? __kmem_cache_alloc_node+0x19d/0x270 [ 460.906160][ T7870] ? create_filter_start+0x15c/0x2c0 [ 460.911507][ T7870] __kmem_cache_alloc_node+0x4f/0x270 [ 460.916919][ T7870] ? create_filter_start+0x15c/0x2c0 [ 460.922239][ T7870] kmalloc_trace+0x26/0xe0 [ 460.926691][ T7870] create_filter_start+0x15c/0x2c0 [ 460.931848][ T7870] apply_event_filter+0x16c/0x590 [ 460.936914][ T7870] event_filter_write+0xce/0x140 [ 460.941861][ T7870] ? event_filter_read+0x270/0x270 [ 460.946976][ T7870] vfs_write+0x2dc/0x9a0 [ 460.951230][ T7870] ? file_end_write+0x250/0x250 [ 460.956083][ T7870] ? __fget_files+0x28/0x460 [ 460.960680][ T7870] ? __fget_files+0x3fc/0x460 [ 460.965436][ T7870] ? __fdget_pos+0x2ae/0x360 [ 460.970114][ T7870] ? ksys_write+0x70/0x260 [ 460.974642][ T7870] ksys_write+0x14d/0x260 [ 460.978997][ T7870] ? __ia32_sys_read+0x80/0x80 [ 460.983778][ T7870] ? lockdep_hardirqs_on+0x94/0x140 [ 460.988995][ T7870] do_syscall_64+0x4c/0xa0 [ 460.993417][ T7870] ? clear_bhb_loop+0x60/0xb0 [ 460.998240][ T7870] ? clear_bhb_loop+0x60/0xb0 [ 461.002943][ T7870] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 461.008852][ T7870] RIP: 0033:0x7f5bacf9e1d9 [ 461.013306][ T7870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.032922][ T7870] RSP: 002b:00007f5bade2f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 461.041363][ T7870] RAX: ffffffffffffffda RBX: 00007f5bad225fa0 RCX: 00007f5bacf9e1d9 [ 461.049344][ T7870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 461.057319][ T7870] RBP: 00007f5bad035888 R08: 0000000000000000 R09: 0000000000000000 [ 461.065286][ T7870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.073341][ T7870] R13: 00007f5bad226038 R14: 00007f5bad225fa0 R15: 00007fff746fb678 [ 461.081327][ T7870] [ 461.263215][ T4325] snd-usb-audio: probe of 4-1:8.0 failed with error -2 [ 461.370191][ T4325] usb 4-1: USB disconnect, device number 17 [ 461.434956][ T7759] udevd[7759]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.718314][ T7899] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 462.357567][ T4363] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 462.545661][ T4363] usb 1-1: Using ep0 maxpacket: 16 [ 462.557802][ T7910] netlink: 44 bytes leftover after parsing attributes in process `syz.5.971'. [ 462.567179][ T4363] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 462.624421][ T4363] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 463.413966][ T4363] usb 1-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 463.474118][ T4363] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.475353][ T7919] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 463.525917][ T4363] usb 1-1: Product: syz [ 463.550504][ T4363] usb 1-1: Manufacturer: syz [ 463.599719][ T4363] usb 1-1: SerialNumber: syz [ 463.645301][ T4325] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 463.781331][ T4363] usb 1-1: config 0 descriptor?? [ 463.945334][ T4325] usb 4-1: Using ep0 maxpacket: 8 [ 463.990176][ T4325] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 464.008168][ T4363] appledisplay 1-1:0.0: Could not find int-in endpoint [ 464.037186][ T4325] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 464.038191][ T4363] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 464.129240][ T4325] usb 4-1: config 0 interface 0 has no altsetting 0 [ 464.157416][ T4325] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 464.166681][ T4325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.204561][ T4325] usb 4-1: config 0 descriptor?? [ 465.353719][ T3653] usb 1-1: USB disconnect, device number 16 [ 465.399904][ T7925] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 465.441373][ T7925] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 465.524083][ T7935] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 465.921672][ T7944] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 466.025876][ T4325] input: HID 05ac:0265 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:0265.0004/input/input29 [ 466.592996][ T4325] magicmouse 0003:05AC:0265.0004: input,hiddev0,hidraw0: USB HID v0.01 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0 [ 466.602281][ T4363] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 466.843666][ T4363] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.870995][ T4363] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 466.938086][ T4363] usb 6-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 466.972506][ T4363] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 466.997146][ T4363] usb 6-1: Product: syz [ 467.012856][ T4363] usb 6-1: Manufacturer: syz [ 467.267121][ T4363] usb 6-1: USB disconnect, device number 4 [ 468.342513][ T4329] usb 4-1: USB disconnect, device number 18 [ 468.453955][ T7964] netlink: 44 bytes leftover after parsing attributes in process `syz.1.984'. [ 468.595545][ T4323] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 468.630806][ T7973] afs: Unknown parameter 'flocRª³«…K›autocell' [ 468.650397][ T4325] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 468.840687][ T4323] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 468.849844][ T4325] usb 6-1: Using ep0 maxpacket: 16 [ 468.860470][ T4325] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 468.895585][ T4323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.948714][ T4325] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping [ 468.976125][ T4323] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 469.049218][ T4323] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 469.066424][ T4325] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 469.132204][ T4325] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 469.159989][ T4323] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 469.210597][ T4325] usb 6-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 469.244442][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 469.275493][ T4329] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 469.277719][ T4323] usb 1-1: Product: syz [ 469.299624][ T4323] usb 1-1: Manufacturer: syz [ 469.322960][ T4325] usb 6-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 469.413596][ T4325] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.424864][ T4323] cdc_wdm 1-1:1.0: skipping garbage [ 469.432172][ T4323] cdc_wdm 1-1:1.0: skipping garbage [ 469.439565][ T4325] usb 6-1: Product: syz [ 469.450669][ T4325] usb 6-1: Manufacturer: syz [ 469.456752][ T4323] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 469.463255][ T4325] usb 6-1: SerialNumber: syz [ 469.470687][ T4323] cdc_wdm 1-1:1.0: Unknown control protocol [ 469.495828][ T4325] usb 6-1: config 0 descriptor?? [ 469.501585][ T7963] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 469.570427][ T4325] iuu_phoenix 6-1:0.0: required endpoints missing [ 469.585237][ T4329] usb 4-1: Using ep0 maxpacket: 16 [ 469.595555][ T4329] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 469.618604][ T4329] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.633550][ T4329] usb 4-1: Product: syz [ 469.641499][ T4329] usb 4-1: Manufacturer: syz [ 469.641576][ T4325] usb 1-1: USB disconnect, device number 17 [ 469.648364][ T4329] usb 4-1: SerialNumber: syz [ 469.652668][ T4329] usb 4-1: config 0 descriptor?? [ 469.681369][ T4329] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 469.771688][ T7985] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 470.023855][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.142073][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.251469][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.285529][ T4325] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 470.375971][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.422434][ T4329] usb 4-1: Detected FT-X [ 470.429951][ T7963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.439026][ T4329] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 470.451749][ T7963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.518570][ T4363] usb 6-1: USB disconnect, device number 5 [ 470.537205][ T4325] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 470.561531][ T4325] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 470.585159][ T4325] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 470.594864][ T4325] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 470.785760][ T7988] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 471.419739][ T7988] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 471.428655][ T7988] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 471.574948][ T4325] usb 1-1: string descriptor 0 read error: -71 [ 471.591298][ T4325] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 471.623378][ T4325] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 471.706258][ T4325] usb 1-1: can't set config #1, error -71 [ 471.722133][ T4329] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 471.744832][ T4325] usb 1-1: USB disconnect, device number 18 [ 471.911772][ T4323] usb 4-1: USB disconnect, device number 19 [ 471.918670][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 471.939298][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz.0.999'. [ 471.976622][ T4323] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 471.998975][ T4323] ftdi_sio 4-1:0.0: device disconnected [ 472.087556][ T4362] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 472.296541][ T4362] usb 5-1: Using ep0 maxpacket: 32 [ 472.308782][ T4362] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 472.317378][ T4362] usb 5-1: config 0 has no interface number 0 [ 472.428836][ T4362] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 472.438449][ T4362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.458558][ T8014] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 472.473464][ T4362] usb 5-1: Product: syz [ 472.478085][ T4362] usb 5-1: Manufacturer: syz [ 472.483184][ T4362] usb 5-1: SerialNumber: syz [ 473.085727][ T4363] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 473.136803][ T4362] usb 5-1: config 0 descriptor?? [ 473.147002][ T4362] smsc95xx v2.0.0 [ 473.766167][ T8020] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 473.865955][ T8020] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 473.965975][ T8020] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 474.135382][ T4363] usb 1-1: Using ep0 maxpacket: 8 [ 474.142390][ T4363] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.154266][ T4363] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 474.167464][ T4363] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 474.185538][ T4329] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 474.194614][ T4363] usb 1-1: config 0 interface 0 has no altsetting 0 [ 474.204902][ T4363] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 474.225268][ T4363] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.248227][ T4363] usb 1-1: config 0 descriptor?? [ 474.255866][ T8004] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 474.258544][ T4362] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 474.284427][ T4362] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 474.365302][ T4329] usb 6-1: Using ep0 maxpacket: 8 [ 474.372894][ T4329] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 474.382532][ T4329] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 474.394087][ T4329] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 474.410324][ T4329] usb 6-1: config 250 has no interface number 0 [ 474.417153][ T5804] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 474.431796][ T4329] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 474.444730][ T4329] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 474.462923][ T4329] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 36 [ 474.486595][ T4329] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 474.506049][ T4329] usb 6-1: config 250 interface 228 has no altsetting 0 [ 474.506458][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.523605][ T4329] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 474.542302][ T4329] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 474.542437][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.554101][ T4329] usb 6-1: Product: syz [ 474.570483][ T4329] usb 6-1: SerialNumber: syz [ 474.598602][ T4329] hub 6-1:250.228: bad descriptor, ignoring hub [ 474.610937][ T4329] hub: probe of 6-1:250.228 failed with error -5 [ 474.645437][ T5804] usb 2-1: Using ep0 maxpacket: 32 [ 474.654721][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 474.672371][ T5804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 474.683882][ T5804] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 474.700258][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.726155][ T5804] usb 2-1: config 0 descriptor?? [ 474.801914][ T4329] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 6 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 474.843261][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.855938][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.880165][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.897003][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.909694][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.926543][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.950157][ T8004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.966534][ T8004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.990350][ T8031] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 475.117303][ C0] usblp0: nonzero read bulk status received: -71 [ 475.124915][ T4363] input: HID 1b1c:1b3e as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1B1C:1B3E.0005/input/input30 [ 475.148108][ T5804] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 475.166539][ T5804] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 475.180178][ T4363] corsair 0003:1B1C:1B3E.0005: input,hidraw0: USB HID v0.00 Joystick [HID 1b1c:1b3e] on usb-dummy_hcd.0-1/input0 [ 475.193402][ T5804] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 475.209622][ T5804] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 475.222302][ T5804] koneplus 0003:1E7D:2D51.0006: unknown main item tag 0x0 [ 475.232932][ T5804] koneplus 0003:1E7D:2D51.0006: hidraw1: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 475.541340][ T22] usb 6-1: USB disconnect, device number 6 [ 475.578109][ T5804] usb 2-1: USB disconnect, device number 20 [ 475.603185][ T4363] usb 1-1: USB disconnect, device number 19 [ 475.697331][ T22] usblp0: removed [ 475.791850][ T8035] fido_id[8035]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 475.864709][ T8036] fido_id[8036]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 475.940127][ T8042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1011'. [ 475.951819][ T8042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1011'. [ 476.488489][ T8055] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 476.537280][ T8055] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 476.570776][ T8055] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 477.464237][ T8062] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 477.686920][ T4362] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 477.734850][ T4362] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 477.817228][ T4362] usb 5-1: USB disconnect, device number 10 [ 478.023508][ T8071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1022'. [ 478.054232][ T8071] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1022'. [ 478.315456][ T4362] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 478.517017][ T4362] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 478.525807][ T4362] usb 5-1: config 0 has no interface number 0 [ 478.532330][ T4362] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 478.545171][ T22] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 478.545326][ T4363] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 478.557315][ T4362] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 478.570075][ T4362] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.578173][ T4362] usb 5-1: Product: syz [ 478.582533][ T4362] usb 5-1: Manufacturer: syz [ 478.587733][ T4362] usb 5-1: SerialNumber: syz [ 478.594166][ T4362] usb 5-1: config 0 descriptor?? [ 478.604702][ T4362] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 478.635323][ T5804] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 478.735245][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 478.742632][ T22] usb 1-1: unable to get BOS descriptor or descriptor too short [ 478.752178][ T22] usb 1-1: config 1 interface 0 altsetting 35 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.757060][ T4363] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 478.775984][ T22] usb 1-1: config 1 interface 0 has no altsetting 0 [ 478.787293][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 478.791590][ T4363] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 478.809923][ T4363] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 478.819841][ T4363] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.822185][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.832913][ T4363] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 478.850857][ T22] usb 1-1: Product: syz [ 478.855892][ T22] usb 1-1: Manufacturer: syz [ 478.856719][ T5804] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 478.860549][ T22] usb 1-1: SerialNumber: syz [ 478.895670][ T4363] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.905031][ T5804] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.920023][ T5804] usb 2-1: config 0 interface 0 has no altsetting 0 [ 478.929618][ T5804] usb 2-1: New USB device found, idVendor=09da, idProduct=0006, bcdDevice= 0.00 [ 478.939020][ T5804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.949526][ T5804] usb 2-1: config 0 descriptor?? [ 478.979657][ T8086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 478.989852][ T8086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.126825][ T22] usb 1-1: USB disconnect, device number 20 [ 479.455150][ T8089] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 479.464999][ T8089] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 479.487316][ T8089] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 480.149327][ T5804] input: HID 09da:0006 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:09DA:0006.0007/input/input31 [ 480.253933][ T5804] a4tech 0003:09DA:0006.0007: input,hiddev1,hidraw0: USB HID v0.00 Device [HID 09da:0006] on usb-dummy_hcd.1-1/input0 [ 480.563337][ T4363] gud 6-1:1.0: Failed to get connectors (error=-71) [ 480.571382][ T4363] gud: probe of 6-1:1.0 failed with error -71 [ 480.613762][ T4363] usb 6-1: USB disconnect, device number 7 [ 480.859369][ C1] usb 5-1: yurex_control_callback - control failed: -2 [ 480.888235][ T5804] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 480.908113][ T4362] usb 5-1: USB disconnect, device number 11 [ 480.928262][ T4362] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 481.076632][ T5804] usb 1-1: not running at top speed; connect to a high speed hub [ 481.090954][ T5804] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 481.111940][ T5804] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 481.126578][ T5804] usb 1-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 481.135993][ T5804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.145498][ T5804] usb 1-1: Product: syz [ 481.149642][ T22] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 481.150472][ T5804] usb 1-1: Manufacturer: syz [ 481.163449][ T5804] usb 1-1: SerialNumber: syz [ 481.186710][ T5804] oti6858 1-1:1.0: oti6858 converter detected [ 481.207144][ T5804] usb 1-1: oti6858 converter now attached to ttyUSB0 [ 481.336331][ T8103] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 481.366468][ T4362] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 481.384156][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 481.411888][ T22] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 481.482615][ T22] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 481.549134][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.572679][ T22] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 481.641905][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 481.676017][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.712612][ T4362] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 481.761912][ T22] usb 4-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 481.829994][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.878001][ T4362] usb 5-1: New USB device found, idVendor=056a, idProduct=5012, bcdDevice= 0.00 [ 481.891570][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.915595][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.939470][ T5804] usb 1-1: USB disconnect, device number 21 [ 481.940353][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.960075][ T5804] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 481.979084][ T32] usb 2-1: USB disconnect, device number 21 [ 481.980137][ T5804] oti6858 1-1:1.0: device disconnected [ 482.013514][ T4362] usb 5-1: config 0 descriptor?? [ 482.170301][ T8107] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1034'. [ 482.501376][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.522209][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.531960][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.555363][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.584987][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.820701][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.832141][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.842037][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.849932][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.858560][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.866291][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.874040][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.883734][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.891884][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.902810][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.913337][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.924558][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.933172][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.943087][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.951192][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.967267][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.974459][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.981622][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.988777][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 482.995809][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.002848][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.010785][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.020312][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.032449][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 483.042254][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.052796][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.062665][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.071289][ T22] [drm] Initialized gud 1.0.0 20200422 for 4-1:1.0 on minor 2 [ 483.084280][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.091537][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.098864][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.106303][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.113592][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.120727][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.127957][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.135202][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.142400][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.150577][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.157788][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.165923][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.173365][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.180613][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.187713][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.194796][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.202678][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.209802][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.217604][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.225171][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.232563][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.239572][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.246614][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.256280][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.300969][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.311419][ T22] gud 4-1:1.0: [drm] fb1: guddrmfb frame buffer device [ 483.319411][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.338591][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x2 [ 483.345959][ T22] usb 4-1: USB disconnect, device number 20 [ 483.364457][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.381105][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.388644][ T4362] wacom 0003:056A:5012.0008: ignoring exceeding usage max [ 483.398331][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.406927][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.414460][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.421781][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.429048][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.436641][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.443717][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.464304][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.477927][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.504223][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.519425][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.535007][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.562310][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.593195][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.625378][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.632903][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.653225][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.665997][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.690791][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.709320][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.726705][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.733981][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.757876][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.782255][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.823209][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.866734][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.913723][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 483.953923][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.001805][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.043898][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.094721][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.135853][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.173673][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.224739][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.255173][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.262211][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.269970][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.277989][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.285022][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.294728][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.305059][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.312283][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.319440][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.326851][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.334279][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.387281][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.395400][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.447276][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.454492][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.516038][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.523011][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.602422][ T8133] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 484.615148][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.622944][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.630501][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.637908][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.645176][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.652764][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.660000][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.667193][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.674662][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.682227][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.689961][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.701942][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.717372][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.752237][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.769460][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.797319][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.831823][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.847510][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.855663][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.863035][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.870930][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.878456][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.886362][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.893757][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.901938][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.949402][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 484.986747][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.002898][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.042734][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.052454][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.060317][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.075899][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.082884][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.091133][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.134460][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.141797][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.148989][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.155933][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.162861][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.170052][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.177405][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.184523][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.191863][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.198800][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.205933][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.213439][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.220967][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.227924][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.234909][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.242035][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.249294][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.256742][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.263636][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.271662][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.279144][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.286213][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.293333][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.300371][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.307400][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.315453][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.322515][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.329934][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.337488][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.344483][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.351717][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.358788][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.366101][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.373511][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.380631][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.387740][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.396265][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.403559][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.411761][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.419963][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.427172][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.434126][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.443742][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.451133][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.458907][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.465930][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.473369][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.482585][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.489747][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.496896][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.504325][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.511645][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.519356][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.527226][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.534466][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.541647][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.551983][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.560438][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.567367][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.574341][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.581996][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.589014][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.596175][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.603418][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.610583][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.618337][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.626708][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.634367][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.641806][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.648957][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.656682][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.663966][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.671219][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.678886][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.686375][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.694743][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.704691][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.712940][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.720281][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.728597][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.736223][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.743131][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.750277][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.757501][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.764616][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.771763][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.778751][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.785713][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.792722][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.800192][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.807303][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.814240][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.821734][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.829965][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.837788][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.846499][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.854022][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.861314][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.868307][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.875399][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.882714][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.889739][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.896808][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.903716][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.911022][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.918030][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.925292][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.933875][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.941040][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.948082][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x2 [ 485.955040][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.962186][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.969238][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.976429][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.983527][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.990737][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 485.997808][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.004905][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.011900][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.018843][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.025782][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.033412][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.040403][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.047736][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.055788][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.064015][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.071089][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.078176][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.085362][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.092453][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.099388][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.106380][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.113311][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.120351][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.127323][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.135244][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.142362][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.149371][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.156338][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.163234][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.170326][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.177625][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.184601][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.192079][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.199220][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.206922][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.213942][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.221199][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.229114][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x2 [ 486.237645][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0xd [ 486.244794][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.252352][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.259543][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.266476][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.274121][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.281394][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.288369][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.295605][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.302532][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.309595][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.317010][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.325301][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.332433][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.340407][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.347502][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.354432][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.361557][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.369008][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.376532][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.383452][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.391117][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.398207][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.405387][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.412296][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.420089][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.427110][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.434031][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.442096][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.449064][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.457003][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.464196][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.473915][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.481213][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.488367][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.495411][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.502323][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.509412][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.516362][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.523861][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.530922][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.538130][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.545995][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.552946][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.560089][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.567190][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.574203][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.581185][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.590812][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.598179][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.605213][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.612240][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.619404][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.626490][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.633394][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.640369][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.648475][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.655659][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.662656][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.669589][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.676707][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.684064][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.691055][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.698084][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.705000][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.712210][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.719253][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.726388][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.733306][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.740692][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.748968][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.756480][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.763436][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.770514][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.779188][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.786888][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.795239][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.802986][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.810111][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.817079][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.824009][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.831145][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.838143][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.845573][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.854162][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.861742][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.868751][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.875709][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.882706][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.889736][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.896745][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.903641][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.910946][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.917990][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.924899][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.931840][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.940208][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.948317][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.959222][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.966583][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.973569][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.980534][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.987551][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 486.994481][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.001597][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.009320][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.016408][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.023953][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.032251][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.040348][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.049596][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.058421][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.065931][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.072856][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.079851][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.086938][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.093841][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.100890][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.107914][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.114973][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.122241][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.129348][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.136292][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.143209][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.150302][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.159933][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.166908][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.173828][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.180847][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.187810][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.194723][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.201783][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.209023][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.216011][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.223538][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.230682][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.237618][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.244671][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.251638][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.259074][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.266715][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.273738][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.280828][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.287788][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.294800][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.301773][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.308831][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.315776][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.322755][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.329761][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.337007][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.344639][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.351647][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.358851][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.366939][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.374378][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.381503][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.388443][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.395675][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.402764][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.409937][ T4362] wacom 0003:056A:5012.0008: unknown main item tag 0x0 [ 487.418963][ T4362] wacom: probe of 0003:056A:5012.0008 failed with error -22 [ 487.434749][ T4362] usb 5-1: USB disconnect, device number 12 [ 487.479335][ T8126] afs: Unknown parameter 'flocRª³«…K›autocell' [ 487.663867][ T8143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1046'. [ 487.847217][ T4363] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 487.875189][ T4323] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 488.045572][ T4363] usb 2-1: Using ep0 maxpacket: 32 [ 488.054052][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 488.065510][ T4363] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 488.075356][ T4362] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 488.075734][ T4363] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 488.087981][ T4323] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 488.093648][ T4363] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.112115][ T4323] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 488.120867][ T4363] usb 2-1: config 0 descriptor?? [ 488.126643][ T4323] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 488.141149][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.147175][ T4363] hub 2-1:0.0: USB hub found [ 488.165835][ T4323] usb 6-1: probing VID:PID(0424:012C) [ 488.173136][ T4323] usb 6-1: vub300 testing BULK IN EndPoint(0) 81 [ 488.175742][ T5804] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 488.186061][ T4323] usb 6-1: vub300 testing BULK OUT EndPoint(1) 02 [ 488.199462][ T4323] usb 6-1: vub300 testing BULK IN EndPoint(2) 83 [ 488.206002][ T4323] usb 6-1: vub300 testing BULK OUT EndPoint(3) 04 [ 488.212562][ T4323] usb 6-1: vub300 LARGE packets using EndPoints 02 81 04 83 [ 488.296815][ T4362] usb 5-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 488.306194][ T22] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 488.314154][ T4362] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.324660][ T4362] usb 5-1: config 0 descriptor?? [ 488.350981][ T4363] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 488.371250][ T5804] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 488.382380][ T5804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.390944][ T5804] usb 4-1: Product: syz [ 488.395364][ T5804] usb 4-1: Manufacturer: syz [ 488.400156][ T5804] usb 4-1: SerialNumber: syz [ 488.407769][ T5804] usb 4-1: config 0 descriptor?? [ 488.518012][ T22] usb 1-1: not running at top speed; connect to a high speed hub [ 488.527774][ T22] usb 1-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 488.555336][ T22] usb 1-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 488.564563][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.573662][ T22] usb 1-1: Product: syz [ 488.578139][ T4323] usb 6-1: operating_mode = IRQs 4-bit 48 MHz with 512 byte USB packets [ 488.586708][ T22] usb 1-1: Manufacturer: syz [ 488.592030][ T22] usb 1-1: SerialNumber: syz [ 488.620173][ T5804] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 488.748193][ T4362] hackrf 5-1:0.0: usb_control_msg() failed -71 request 0f [ 488.757145][ T4363] hid-generic 0003:046D:C31C.0009: unknown main item tag 0x0 [ 488.757423][ T4362] hackrf 5-1:0.0: Could not detect board [ 488.771299][ T4362] hackrf: probe of 5-1:0.0 failed with error -71 [ 488.778883][ T4323] usb 6-1: USB vub300 remote SDIO host controller[0]connected with SD/SDIO card inserted [ 488.782234][ T4363] hid-generic 0003:046D:C31C.0009: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.1-1/input0 [ 488.791126][ T4362] usb 5-1: USB disconnect, device number 13 [ 488.837889][ T22] usb 1-1: USB disconnect, device number 22 [ 489.531960][ T8171] genirq: Flags mismatch irq 7. 00000000 (ttyS3) vs. 00000000 (pcl816) [ 490.195505][ T8139] usb 2-1: reset high-speed USB device number 22 using dummy_hcd [ 490.337759][ T5379] usb 6-1: USB disconnect, device number 8 [ 490.346905][ T32] usb 6-1: SET_CLOCK_SPEED 200kHz failed with retval=-19 [ 490.519570][ T5804] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 490.541981][ T5804] usb 4-1: USB disconnect, device number 21 [ 490.597120][ T5379] USB vub300 remote SDIO host controller[0] now disconnected [ 490.650375][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1059'. [ 490.855472][ T4323] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 491.095009][ T4323] usb 5-1: Using ep0 maxpacket: 16 [ 491.265592][ C1] [ 491.268083][ C1] ================================ [ 491.273192][ C1] WARNING: inconsistent lock state [ 491.279037][ C1] syzkaller #0 Not tainted [ 491.283459][ C1] -------------------------------- [ 491.289168][ C1] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 491.296362][ C1] syz.0.1065/8194 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 491.302680][ C1] ffff88807313c648 ((work_completion)(&(&host->detect)->work)){+.?.}-{0:0}, at: __flush_work+0x109/0xac0 [ 491.314064][ C1] {SOFTIRQ-ON-W} state was registered at: [ 491.319889][ C1] lock_acquire+0x1bc/0x4a0 [ 491.324480][ C1] process_one_work+0x7ec/0x1160 [ 491.329590][ C1] worker_thread+0xaf5/0x12a0 [ 491.334347][ C1] kthread+0x29d/0x330 [ 491.338501][ C1] ret_from_fork+0x1f/0x30 [ 491.343042][ C1] irq event stamp: 106756 [ 491.347873][ C1] hardirqs last enabled at (106756): [] __cancel_work_timer+0x36a/0x560 [ 491.358640][ C1] hardirqs last disabled at (106755): [] try_to_grab_pending+0xfa/0x890 [ 491.368825][ C1] softirqs last enabled at (106652): [] __irq_exit_rcu+0x13b/0x230 [ 491.378542][ C1] softirqs last disabled at (106657): [] __irq_exit_rcu+0x13b/0x230 [ 491.388827][ C1] [ 491.388827][ C1] other info that might help us debug this: [ 491.396879][ C1] Possible unsafe locking scenario: [ 491.396879][ C1] [ 491.404702][ C1] CPU0 [ 491.408280][ C1] ---- [ 491.412714][ C1] lock((work_completion)(&(&host->detect)->work)); [ 491.419749][ C1] [ 491.423200][ C1] lock((work_completion)(&(&host->detect)->work)); [ 491.430068][ C1] [ 491.430068][ C1] *** DEADLOCK *** [ 491.430068][ C1] [ 491.438810][ C1] 1 lock held by syz.0.1065/8194: [ 491.443828][ C1] #0: ffffc900001e0bc0 ((&vub300->inactivity_timer)){+.-.}-{0:0}, at: call_timer_fn+0xcf/0x670 [ 491.454390][ C1] [ 491.454390][ C1] stack backtrace: [ 491.460288][ C1] CPU: 1 PID: 8194 Comm: syz.0.1065 Not tainted syzkaller #0 [ 491.467656][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 491.477891][ C1] Call Trace: [ 491.481184][ C1] [ 491.484051][ C1] dump_stack_lvl+0x188/0x24e [ 491.488735][ C1] ? show_regs_print_info+0x12/0x12 [ 491.493936][ C1] ? unwind_get_return_address+0x49/0x80 [ 491.499715][ C1] valid_state+0x13b/0x1d0 [ 491.504142][ C1] mark_lock_irq+0xa9/0x900 [ 491.508668][ C1] ? stack_trace_save+0xa6/0xf0 [ 491.513621][ C1] ? save_trace+0xbb0/0xbb0 [ 491.518131][ C1] ? save_trace+0x5a/0xbb0 [ 491.522552][ C1] mark_lock+0x208/0x320 [ 491.526794][ C1] __lock_acquire+0xdf3/0x7ea0 [ 491.531572][ C1] ? verify_lock_unused+0x140/0x140 [ 491.536809][ C1] ? __lock_acquire+0x7ea0/0x7ea0 [ 491.541844][ C1] ? debug_object_assert_init+0x1ed/0x300 [ 491.547644][ C1] lock_acquire+0x1bc/0x4a0 [ 491.552150][ C1] ? __flush_work+0x109/0xac0 [ 491.556825][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 491.562245][ C1] ? read_lock_is_recursive+0x10/0x10 [ 491.567727][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 491.573626][ C1] ? _raw_spin_unlock+0x40/0x40 [ 491.578601][ C1] ? slab_free_freelist_hook+0x133/0x1b0 [ 491.584234][ C1] ? kobject_put+0x25c/0x450 [ 491.590408][ C1] ? vub300_inactivity_timer_expired+0x190/0x3e0 [ 491.597936][ C1] ? call_timer_fn+0x1ac/0x670 [ 491.602824][ C1] ? __flush_work+0x109/0xac0 [ 491.607806][ C1] __flush_work+0x122/0xac0 [ 491.612335][ C1] ? __flush_work+0x109/0xac0 [ 491.617047][ C1] ? flush_work+0x20/0x20 [ 491.621386][ C1] ? __timer_delete+0x6c/0x220 [ 491.626578][ C1] ? mark_lock+0x94/0x320 [ 491.630907][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 491.637148][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 491.642445][ C1] ? lock_chain_count+0x20/0x20 [ 491.647321][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 491.652758][ C1] ? __cancel_work_timer+0x36a/0x560 [ 491.658420][ C1] __cancel_work_timer+0x3f4/0x560 [ 491.663564][ C1] ? cancel_work_sync+0x20/0x20 [ 491.668594][ C1] ? kobject_put+0x25c/0x450 [ 491.673367][ C1] ? __kmem_cache_free+0xb6/0x200 [ 491.678670][ C1] ? kobject_put+0x41d/0x450 [ 491.683513][ C1] mmc_free_host+0x15/0x40 [ 491.688394][ C1] call_timer_fn+0x1ac/0x670 [ 491.693124][ C1] ? kref_get+0x70/0x70 [ 491.697447][ C1] ? call_timer_fn+0xcf/0x670 [ 491.702423][ C1] ? __run_timers+0x810/0x810 [ 491.707734][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 491.712961][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 491.718185][ C1] ? kref_get+0x70/0x70 [ 491.722454][ C1] __run_timers+0x56c/0x810 [ 491.727092][ C1] ? detach_timer+0x350/0x350 [ 491.731961][ C1] ? lock_chain_count+0x20/0x20 [ 491.737695][ C1] run_timer_softirq+0x63/0xf0 [ 491.742475][ C1] handle_softirqs+0x291/0x910 [ 491.747414][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 491.752603][ C1] ? do_softirq+0x210/0x210 [ 491.758092][ C1] ? hrtimer_interrupt+0x775/0x980 [ 491.764312][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 491.769529][ C1] __irq_exit_rcu+0x13b/0x230 [ 491.774216][ C1] ? irq_exit_rcu+0x20/0x20 [ 491.778828][ C1] irq_exit_rcu+0x5/0x20 [ 491.783584][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 491.789530][ C1] [ 491.792487][ C1] [ 491.795419][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 491.801512][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 491.808087][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ff c7 1a f7 65 8b 05 c0 77 c4 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 491.828792][ C1] RSP: 0018:ffffc9000dc5f860 EFLAGS: 00000206 [ 491.834889][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 16d61f9925b5f900 [ 491.843568][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001 [ 491.851544][ C1] RBP: ffffc9000dc5f8f0 R08: ffffffff97cd63c3 R09: 1ffffffff2f9ac78 [ 491.860205][ C1] R10: dffffc0000000000 R11: fffffbfff2f9ac79 R12: dffffc0000000000 [ 491.868173][ C1] R13: ffffc9000dc5f920 R14: ffffffff97cd63c0 R15: 1ffff92001b8bf0c [ 491.876333][ C1] ? _raw_spin_unlock+0x40/0x40 [ 491.881184][ C1] ? __debug_object_init+0xed/0x440 [ 491.886499][ C1] schedule_timeout+0x12d/0x2d0 [ 491.891351][ C1] ? console_conditional_schedule+0x40/0x40 [ 491.897517][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 491.903907][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 491.909135][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 491.914431][ C1] ? snd_rawmidi_write+0x36a/0xb90 [ 491.919733][ C1] snd_rawmidi_write+0x3b6/0xb90 [ 491.924679][ C1] ? aa_file_perm+0x112/0xf00 [ 491.929439][ C1] ? snd_rawmidi_read+0x6d0/0x6d0 [ 491.934468][ C1] ? do_task_dead+0xd0/0xd0 [ 491.939173][ C1] ? __might_fault+0xa6/0x120 [ 491.943986][ C1] ? end_current_label_crit_section+0x14b/0x170 [ 491.950381][ C1] ? common_file_perm+0x171/0x1c0 [ 491.955500][ C1] ? fsnotify_perm+0x5a/0x550 [ 491.960316][ C1] ? security_file_permission+0x75/0xa0 [ 491.965901][ C1] do_iter_write+0x4a4/0xb10 [ 491.970538][ C1] ? vfs_iter_write+0xa0/0xa0 [ 491.975253][ C1] ? __import_iovec+0x306/0x510 [ 491.980173][ C1] ? import_iovec+0x6f/0xa0 [ 491.984702][ C1] do_writev+0x27b/0x480 [ 491.989095][ C1] ? do_readv+0x460/0x460 [ 491.993475][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 491.999667][ C1] ? lock_chain_count+0x20/0x20 [ 492.004532][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 492.009728][ C1] do_syscall_64+0x4c/0xa0 [ 492.014142][ C1] ? clear_bhb_loop+0x60/0xb0 [ 492.018817][ C1] ? clear_bhb_loop+0x60/0xb0 [ 492.023521][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.029433][ C1] RIP: 0033:0x7f8eb839e1d9 [ 492.033854][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.053658][ C1] RSP: 002b:00007f8eb9273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 492.062218][ C1] RAX: ffffffffffffffda RBX: 00007f8eb8625fa0 RCX: 00007f8eb839e1d9 [ 492.070460][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000008 [ 492.078451][ C1] RBP: 00007f8eb8435888 R08: 0000000000000000 R09: 0000000000000000 [ 492.086444][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.094427][ C1] R13: 00007f8eb8626038 R14: 00007f8eb8625fa0 R15: 00007fff13dddcc8 [ 492.102597][ C1] [ 492.109615][ C1] ------------[ cut here ]------------ [ 492.115304][ C1] do not call blocking ops when !TASK_RUNNING; state=1 set at [] snd_rawmidi_write+0x36a/0xb90 [ 492.128210][ C1] WARNING: CPU: 1 PID: 8194 at kernel/sched/core.c:9897 __might_sleep+0xa2/0xd0 [ 492.137407][ C1] Modules linked in: [ 492.141601][ C1] CPU: 1 PID: 8194 Comm: syz.0.1065 Not tainted syzkaller #0 [ 492.149113][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.159776][ C1] RIP: 0010:__might_sleep+0xa2/0xd0 [ 492.165161][ C1] Code: 5d e9 52 00 00 00 c6 05 9b 07 92 0d 01 48 89 fb 48 c7 c7 a0 ad 8b 8a 41 89 f6 89 ee 48 89 ca e8 54 59 f3 ff 48 89 df 44 89 f6 <0f> 0b eb c9 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 77 ff ff ff 49 [ 492.186832][ C1] RSP: 0018:ffffc900001e0850 EFLAGS: 00010246 [ 492.192947][ C1] RAX: 16d61f9925b5f900 RBX: ffffffff8a8b4cc0 RCX: ffff888076775a00 [ 492.201078][ C1] RDX: 0000000000000100 RSI: 0000000000000bc5 RDI: ffffffff8a8b4cc0 [ 492.209914][ C1] RBP: 0000000000000001 R08: ffffc900001e04c7 R09: 1ffff9200003c098 [ 492.219716][ C1] R10: dffffc0000000000 R11: fffff5200003c099 R12: ffff88807313c628 [ 492.228144][ C1] R13: dffffc0000000000 R14: 0000000000000bc5 R15: dffffc0000000000 [ 492.236911][ C1] FS: 00007f8eb92736c0(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 492.245892][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.252699][ C1] CR2: 0000200000001000 CR3: 0000000027c66000 CR4: 00000000003506e0 [ 492.261168][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 492.269986][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 492.278022][ C1] Call Trace: [ 492.281352][ C1] [ 492.284228][ C1] ? __flush_work+0x109/0xac0 [ 492.289344][ C1] __flush_work+0x142/0xac0 [ 492.293892][ C1] ? flush_work+0x20/0x20 [ 492.298363][ C1] ? __timer_delete+0x6c/0x220 [ 492.303209][ C1] ? mark_lock+0x94/0x320 [ 492.307677][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 492.313732][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 492.319076][ C1] ? lock_chain_count+0x20/0x20 [ 492.323986][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 492.329326][ C1] ? __cancel_work_timer+0x36a/0x560 [ 492.334670][ C1] __cancel_work_timer+0x3f4/0x560 [ 492.339951][ C1] ? cancel_work_sync+0x20/0x20 [ 492.345434][ C1] ? kobject_put+0x25c/0x450 [ 492.350400][ C1] ? __kmem_cache_free+0xb6/0x200 [ 492.355559][ C1] ? kobject_put+0x41d/0x450 [ 492.360189][ C1] mmc_free_host+0x15/0x40 [ 492.364731][ C1] call_timer_fn+0x1ac/0x670 [ 492.369470][ C1] ? kref_get+0x70/0x70 [ 492.374049][ C1] ? call_timer_fn+0xcf/0x670 [ 492.379087][ C1] ? __run_timers+0x810/0x810 [ 492.384006][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 492.389527][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 492.394829][ C1] ? kref_get+0x70/0x70 [ 492.399220][ C1] __run_timers+0x56c/0x810 [ 492.403943][ C1] ? detach_timer+0x350/0x350 [ 492.409276][ C1] ? lock_chain_count+0x20/0x20 [ 492.414294][ C1] run_timer_softirq+0x63/0xf0 [ 492.419369][ C1] handle_softirqs+0x291/0x910 [ 492.424302][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 492.429230][ C1] ? do_softirq+0x210/0x210 [ 492.433947][ C1] ? hrtimer_interrupt+0x775/0x980 [ 492.439327][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 492.444634][ C1] __irq_exit_rcu+0x13b/0x230 [ 492.449351][ C1] ? irq_exit_rcu+0x20/0x20 [ 492.454072][ C1] irq_exit_rcu+0x5/0x20 [ 492.458624][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 492.464389][ C1] [ 492.467355][ C1] [ 492.470388][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 492.476549][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 492.483369][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ff c7 1a f7 65 8b 05 c0 77 c4 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 492.503060][ C1] RSP: 0018:ffffc9000dc5f860 EFLAGS: 00000206 [ 492.509162][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 16d61f9925b5f900 [ 492.517262][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001 [ 492.525371][ C1] RBP: ffffc9000dc5f8f0 R08: ffffffff97cd63c3 R09: 1ffffffff2f9ac78 [ 492.533378][ C1] R10: dffffc0000000000 R11: fffffbfff2f9ac79 R12: dffffc0000000000 [ 492.541426][ C1] R13: ffffc9000dc5f920 R14: ffffffff97cd63c0 R15: 1ffff92001b8bf0c [ 492.549935][ C1] ? _raw_spin_unlock+0x40/0x40 [ 492.556964][ C1] ? __debug_object_init+0xed/0x440 [ 492.562292][ C1] schedule_timeout+0x12d/0x2d0 [ 492.567366][ C1] ? console_conditional_schedule+0x40/0x40 [ 492.574255][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 492.580288][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 492.585557][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 492.590875][ C1] ? snd_rawmidi_write+0x36a/0xb90 [ 492.596060][ C1] snd_rawmidi_write+0x3b6/0xb90 [ 492.601593][ C1] ? aa_file_perm+0x112/0xf00 [ 492.606499][ C1] ? snd_rawmidi_read+0x6d0/0x6d0 [ 492.612261][ C1] ? do_task_dead+0xd0/0xd0 [ 492.616814][ C1] ? __might_fault+0xa6/0x120 [ 492.621534][ C1] ? end_current_label_crit_section+0x14b/0x170 [ 492.628275][ C1] ? common_file_perm+0x171/0x1c0 [ 492.633529][ C1] ? fsnotify_perm+0x5a/0x550 [ 492.638420][ C1] ? security_file_permission+0x75/0xa0 [ 492.644039][ C1] do_iter_write+0x4a4/0xb10 [ 492.648698][ C1] ? vfs_iter_write+0xa0/0xa0 [ 492.653586][ C1] ? __import_iovec+0x306/0x510 [ 492.658765][ C1] ? import_iovec+0x6f/0xa0 [ 492.663432][ C1] do_writev+0x27b/0x480 [ 492.668854][ C1] ? do_readv+0x460/0x460 [ 492.673483][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 492.679723][ C1] ? lock_chain_count+0x20/0x20 [ 492.684785][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 492.690713][ C1] do_syscall_64+0x4c/0xa0 [ 492.695268][ C1] ? clear_bhb_loop+0x60/0xb0 [ 492.700088][ C1] ? clear_bhb_loop+0x60/0xb0 [ 492.705251][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.711632][ C1] RIP: 0033:0x7f8eb839e1d9 [ 492.716092][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.737153][ C1] RSP: 002b:00007f8eb9273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 492.746634][ C1] RAX: ffffffffffffffda RBX: 00007f8eb8625fa0 RCX: 00007f8eb839e1d9 [ 492.754870][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000008 [ 492.763268][ C1] RBP: 00007f8eb8435888 R08: 0000000000000000 R09: 0000000000000000 [ 492.771666][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.779716][ C1] R13: 00007f8eb8626038 R14: 00007f8eb8625fa0 R15: 00007fff13dddcc8 [ 492.788124][ C1] [ 492.791199][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 492.798629][ C1] CPU: 1 PID: 8194 Comm: syz.0.1065 Not tainted syzkaller #0 [ 492.806181][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 492.816512][ C1] Call Trace: [ 492.819809][ C1] [ 492.822827][ C1] dump_stack_lvl+0x188/0x24e [ 492.827565][ C1] ? memcpy+0x3c/0x60 [ 492.831573][ C1] ? show_regs_print_info+0x12/0x12 [ 492.836778][ C1] ? load_image+0x410/0x410 [ 492.841412][ C1] panic+0x2d3/0x710 [ 492.845347][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 492.849872][ C1] __warn+0x2f8/0x4f0 [ 492.853857][ C1] ? __might_sleep+0xa2/0xd0 [ 492.858560][ C1] ? __might_sleep+0xa2/0xd0 [ 492.863169][ C1] report_bug+0x2ba/0x4f0 [ 492.867618][ C1] ? __might_sleep+0xa2/0xd0 [ 492.872237][ C1] handle_bug+0x3a/0x70 [ 492.876416][ C1] exc_invalid_op+0x16/0x40 [ 492.881103][ C1] asm_exc_invalid_op+0x16/0x20 [ 492.885967][ C1] RIP: 0010:__might_sleep+0xa2/0xd0 [ 492.891170][ C1] Code: 5d e9 52 00 00 00 c6 05 9b 07 92 0d 01 48 89 fb 48 c7 c7 a0 ad 8b 8a 41 89 f6 89 ee 48 89 ca e8 54 59 f3 ff 48 89 df 44 89 f6 <0f> 0b eb c9 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 77 ff ff ff 49 [ 492.910887][ C1] RSP: 0018:ffffc900001e0850 EFLAGS: 00010246 [ 492.916967][ C1] RAX: 16d61f9925b5f900 RBX: ffffffff8a8b4cc0 RCX: ffff888076775a00 [ 492.924978][ C1] RDX: 0000000000000100 RSI: 0000000000000bc5 RDI: ffffffff8a8b4cc0 [ 492.933218][ C1] RBP: 0000000000000001 R08: ffffc900001e04c7 R09: 1ffff9200003c098 [ 492.941193][ C1] R10: dffffc0000000000 R11: fffff5200003c099 R12: ffff88807313c628 [ 492.949374][ C1] R13: dffffc0000000000 R14: 0000000000000bc5 R15: dffffc0000000000 [ 492.957361][ C1] ? __flush_work+0x109/0xac0 [ 492.962047][ C1] __flush_work+0x142/0xac0 [ 492.966564][ C1] ? flush_work+0x20/0x20 [ 492.970910][ C1] ? __timer_delete+0x6c/0x220 [ 492.975697][ C1] ? mark_lock+0x94/0x320 [ 492.980058][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 492.986048][ C1] ? mod_delayed_work_on+0x1b0/0x1b0 [ 492.991345][ C1] ? lock_chain_count+0x20/0x20 [ 492.996289][ C1] ? kasan_quarantine_put+0xd4/0x210 [ 493.001593][ C1] ? __cancel_work_timer+0x36a/0x560 [ 493.006888][ C1] __cancel_work_timer+0x3f4/0x560 [ 493.012061][ C1] ? cancel_work_sync+0x20/0x20 [ 493.017018][ C1] ? kobject_put+0x25c/0x450 [ 493.021741][ C1] ? __kmem_cache_free+0xb6/0x200 [ 493.026786][ C1] ? kobject_put+0x41d/0x450 [ 493.032639][ C1] mmc_free_host+0x15/0x40 [ 493.037630][ C1] call_timer_fn+0x1ac/0x670 [ 493.042246][ C1] ? kref_get+0x70/0x70 [ 493.046492][ C1] ? call_timer_fn+0xcf/0x670 [ 493.051626][ C1] ? __run_timers+0x810/0x810 [ 493.056437][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 493.061843][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 493.067132][ C1] ? kref_get+0x70/0x70 [ 493.071968][ C1] __run_timers+0x56c/0x810 [ 493.076522][ C1] ? detach_timer+0x350/0x350 [ 493.081555][ C1] ? lock_chain_count+0x20/0x20 [ 493.086754][ C1] run_timer_softirq+0x63/0xf0 [ 493.091524][ C1] handle_softirqs+0x291/0x910 [ 493.098189][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 493.103069][ C1] ? do_softirq+0x210/0x210 [ 493.107587][ C1] ? hrtimer_interrupt+0x775/0x980 [ 493.112719][ C1] ? irqtime_account_irq+0xb2/0x1b0 [ 493.117990][ C1] __irq_exit_rcu+0x13b/0x230 [ 493.122761][ C1] ? irq_exit_rcu+0x20/0x20 [ 493.127302][ C1] irq_exit_rcu+0x5/0x20 [ 493.131563][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 493.137227][ C1] [ 493.140214][ C1] [ 493.143168][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 493.149155][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120 [ 493.155841][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 ff c7 1a f7 65 8b 05 c0 77 c4 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 493.175456][ C1] RSP: 0018:ffffc9000dc5f860 EFLAGS: 00000206 [ 493.181558][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 16d61f9925b5f900 [ 493.189624][ C1] RDX: dffffc0000000000 RSI: ffffffff8a8c19a0 RDI: 0000000000000001 [ 493.197720][ C1] RBP: ffffc9000dc5f8f0 R08: ffffffff97cd63c3 R09: 1ffffffff2f9ac78 [ 493.205715][ C1] R10: dffffc0000000000 R11: fffffbfff2f9ac79 R12: dffffc0000000000 [ 493.213705][ C1] R13: ffffc9000dc5f920 R14: ffffffff97cd63c0 R15: 1ffff92001b8bf0c [ 493.221700][ C1] ? _raw_spin_unlock+0x40/0x40 [ 493.226575][ C1] ? __debug_object_init+0xed/0x440 [ 493.231882][ C1] schedule_timeout+0x12d/0x2d0 [ 493.236738][ C1] ? console_conditional_schedule+0x40/0x40 [ 493.242653][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 493.248748][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 493.253939][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 493.259168][ C1] ? snd_rawmidi_write+0x36a/0xb90 [ 493.264305][ C1] snd_rawmidi_write+0x3b6/0xb90 [ 493.269266][ C1] ? aa_file_perm+0x112/0xf00 [ 493.273980][ C1] ? snd_rawmidi_read+0x6d0/0x6d0 [ 493.279028][ C1] ? do_task_dead+0xd0/0xd0 [ 493.283552][ C1] ? __might_fault+0xa6/0x120 [ 493.288236][ C1] ? end_current_label_crit_section+0x14b/0x170 [ 493.294495][ C1] ? common_file_perm+0x171/0x1c0 [ 493.299522][ C1] ? fsnotify_perm+0x5a/0x550 [ 493.304240][ C1] ? security_file_permission+0x75/0xa0 [ 493.309809][ C1] do_iter_write+0x4a4/0xb10 [ 493.315285][ C1] ? vfs_iter_write+0xa0/0xa0 [ 493.319978][ C1] ? __import_iovec+0x306/0x510 [ 493.326414][ C1] ? import_iovec+0x6f/0xa0 [ 493.330935][ C1] do_writev+0x27b/0x480 [ 493.335199][ C1] ? do_readv+0x460/0x460 [ 493.339529][ C1] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 493.345595][ C1] ? lock_chain_count+0x20/0x20 [ 493.350549][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 493.355785][ C1] do_syscall_64+0x4c/0xa0 [ 493.360281][ C1] ? clear_bhb_loop+0x60/0xb0 [ 493.364973][ C1] ? clear_bhb_loop+0x60/0xb0 [ 493.369892][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.375793][ C1] RIP: 0033:0x7f8eb839e1d9 [ 493.380207][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.399813][ C1] RSP: 002b:00007f8eb9273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 493.408330][ C1] RAX: ffffffffffffffda RBX: 00007f8eb8625fa0 RCX: 00007f8eb839e1d9 [ 493.416325][ C1] RDX: 0000000000000002 RSI: 0000200000000840 RDI: 0000000000000008 [ 493.424307][ C1] RBP: 00007f8eb8435888 R08: 0000000000000000 R09: 0000000000000000 [ 493.432357][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.440688][ C1] R13: 00007f8eb8626038 R14: 00007f8eb8625fa0 R15: 00007fff13dddcc8 [ 493.448702][ C1] [ 493.451979][ C1] Kernel Offset: disabled [ 493.456317][ C1] Rebooting in 86400 seconds..