last executing test programs: 4.334469189s ago: executing program 3 (id=1355): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@private0, 0x0}, &(0x7f0000000080)=0xfffffffffffffdb7) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000000c0)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020081000401a80001625db338ee5eebfffd035c0461c1d67f6f94007134cf6efb803fa007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x6, @mcast2, 0x2}], 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$PTRACE_GETSIGMASK(0x420a, r5, 0x8, &(0x7f0000000100)) sendmsg$netlink(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000076001f030000000000000000047af2ef91c6796cfc128f44a35e3e8e2e84b8e48b7172aa13c4d4"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_io_uring_setup(0x5793, &(0x7f0000000340)={0x0, 0xca23, 0x2000, 0x1, 0x195}, &(0x7f0000000080), &(0x7f0000ff4000), &(0x7f0000000000)) sendmsg$netlink(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=ANY=[], 0x20}], 0x1, 0x0, 0x0, 0x4004000}, 0xc080) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000000c0)=ANY=[@ANYRES16=r0], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) 3.87539798s ago: executing program 3 (id=1362): r0 = syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000240)=ANY=[@ANYBLOB="40010400000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000006c0)={0x34, &(0x7f00000004c0)={0x40, 0x15, 0x24, "412ef739d96b59a387bd3022d1124c4df033df292041ee2a5b94d183d15b689df4ca0fdd"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x9}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f0000000640)={0x40, 0xa0, 0x4, 0x7934af8e}, &(0x7f0000000680)={0xc0, 0xa2, 0x2f, "c5f660e2bff7365bdec5817d1f5a9ea0c7fac3027c825c84578442a0c009679dff5f10933b03c3cb44d2a0a13d91d0"}}) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000006c0), 0x1a0001) syz_usb_control_io(r0, &(0x7f0000000900)={0x2c, &(0x7f0000000700)={0x40, 0x1, 0xf4, {0xf4, 0x1, "0820ec2506361f055e7d63a03d11f7cf6fea083d4d77887676d699136917a6485b782e7a51bf1f6b131dd3945f02fb6260be531e51034d1e9c36823bf042dd94b905f6a03a1b759d51ff4be918fcbbdcf0f2de95a0b395447ab6590e5746c905dc618d10b0f4548738cb1fe9a04b97ab3f02e445ce5b519c4ec52558305475cb30534f3fa57886320dc9146300a4b3f58c855bce03a6bdfc9492b60d50465bce93828421b675c828b639fd04452ba4c991b78a71b43c4b02c28fc28de1ee1087051467fcedbecd6b0f9a799b9119de0b48eef56dcbb8d4e7cb6f1eb74d9656484a96be0c524771de2c0acbc91d739913bfa8"}}, &(0x7f0000000800)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}, &(0x7f0000000840)={0x0, 0xf, 0xc, {0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x1, 0x6, 0xfff9}]}}, &(0x7f0000000880)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x10, 0x3, 0x1, "f2a1e517", "a737016b"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x40, 0x9, 0xfd, 0x2, 0x1}}}, &(0x7f0000000d40)={0x84, &(0x7f0000000940)={0x20, 0x0, 0x21, "6c5d83796f8770cdfb38bc15cb9b642aa88d9aed1bcd1330de5c176541370f818d"}, &(0x7f0000000980)={0x0, 0xa, 0x1, 0x80}, &(0x7f00000009c0)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000a00)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0xc0, 0x1}}, &(0x7f0000000a80)={0x40, 0x7, 0x2, 0x59}, &(0x7f0000000ac0)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000000b00)={0x40, 0xb, 0x2, "c75f"}, &(0x7f0000000b40)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000b80)={0x40, 0x13, 0x6, @local}, &(0x7f0000000bc0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, &(0x7f0000000c00)={0x40, 0x19, 0x2, "0b98"}, &(0x7f0000000c40)={0x40, 0x1a, 0x2, 0x80}, &(0x7f0000000c80)={0x40, 0x1c, 0x1, 0x6}, &(0x7f0000000cc0)={0x40, 0x1e, 0x1, 0x80}, &(0x7f0000000d00)={0x40, 0x21, 0x1, 0x80}}) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000340)={0x14, 0x0, 0x0}, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0x16, 0x74, "44047f36eb49ae76f49d622d2b4edd1d8a7e658c5b725ec50bb81476d387320f2cc61015d063ee990c49cb8240e482896803df19c875d5e744247a0146a29f0b86a5a88ebe4cf89463001e8913d95b9e59fb598bee7469eb1176b58efb3c98ca8b8b9c196f50bc26ed4d8c5987f5707f9b5d729d"}, 0x0, 0x0}) 1.875428324s ago: executing program 2 (id=1405): syz_open_dev$ttys(0xc, 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x11, 0x3, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000920030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r2], 0xc4}}, 0x40000) 1.842847642s ago: executing program 2 (id=1407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2981000e0086dd6d002008009c11ff20010000000000000000000040000001ff0200000000000000000000000000014f194e21"], 0xd6) 1.751656977s ago: executing program 2 (id=1409): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000200)={0x203, 0xa, 0x7}) ioctl$KDENABIO(0xffffffffffffffff, 0x4b36) r1 = socket$inet6(0xa, 0xa, 0x400054) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x1ff, @local, 0xfffffff7}, 0x1c) 1.671905143s ago: executing program 3 (id=1412): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x303}, '\r\x00', "8a36c47a9c625dfaf08ace81c5f4ffff", "f8ffffff", "362d3017f069109d"}, 0x28) 1.607433229s ago: executing program 2 (id=1414): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000000000000000000fc020000000000000000000000000001fe8000000001a800000000000000003a00000000000000000a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011000a0101010000000000000000000000007f000001000000020000000000000000fc020000000000000000000000000001000000000000000000000000000000013c040000000000000a000a000a010101776c0000000000000000000020010000000000000000000000000000ac141439000000000000000000000000fc0200000000000000000000000000003c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.607073471s ago: executing program 2 (id=1415): getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, 0x0, &(0x7f00000001c0)=0x54) r0 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) (async) r1 = userfaultfd(0x80001) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="f0000000100007000000000000000000ff020000000000000000000000000001"], 0xf0}}, 0x0) (async, rerun: 64) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x40000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x200000000000000}, 0xfffffffc}}, 0xb8}, 0x1, 0x0, 0x0, 0x40800}, 0x2c040010) (async, rerun: 32) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b800000014000100feffffff00004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000000000ffffffffffffff00000000000000000000000000000000000000000000000200"/112], 0xb8}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) (async) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000140)={&(0x7f000008f000/0x1000)=nil, 0x1000}) (async, rerun: 32) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 32) sendmsg$802154_raw(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)="b808a7c1b7694ecd5410a1ae5c", 0xd}, 0x1, 0x0, 0x0, 0x4000088}, 0x401c8c0) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r4, 0x8982, &(0x7f0000000180)) (async) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0xb, "b9c148966712052688c8cc"}, &(0x7f0000000100)=0x2f) r5 = memfd_secret(0x0) (async) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="040e0a060e04"], 0xd) ioctl$IOCTL_VMCI_SET_NOTIFY(r5, 0x7cb, &(0x7f0000000000)={0x4, 0x1, 0x4}) (async) connect$pppl2tp(r5, &(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, r5, 0x2, 0x4, 0x2, 0x1, {0xa, 0x4e20, 0xa9, @remote, 0x1}}}, 0x3a) (async, rerun: 64) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (rerun: 64) ioctl$IOCTL_VMCI_VERSION2(r6, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r6, 0x7a0, &(0x7f0000000000)={@my=0x1}) (async) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae03, 0x60) (async) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000540)={{@my=0x0, 0x2}, 0x81, 0x6, 0xffffffff, 0x3e}) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r6, 0x7b0, &(0x7f0000000080)={@my=0x1, 0x4}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5393, &(0x7f00000001c0)) 1.446007042s ago: executing program 3 (id=1417): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x7, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@CTA_MARK={0xfffffffffffffdf7, 0x8, 0x1, 0x0, 0x402}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40810}, 0x4) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000030040000002b011002ff000300"], 0x28}, 0x4004004) 1.347508175s ago: executing program 3 (id=1418): r0 = syz_open_dev$video4linux(&(0x7f0000000180), 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576"], 0x110}}, 0x48800) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000280)={0x0, @src_change}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000040)=0x5, 0x4) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7fffffff, 0x10}, &(0x7f00000000c0)=0xc) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020100030a00000000000000000000000300050000000000020000000000000000000000000000000200100000000000ffffffff00000000030006000000000002"], 0x50}}, 0x0) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f00000003c0)={0x0, 0x2, 0x2}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000240)={0x0, 0x0, 0x9, 0x20, 0x4, 0x100}) ioctl$sock_bt_hidp_HIDPGETCONNINFO(0xffffffffffffffff, 0x800448d3, &(0x7f0000000400)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x89, 0xfb6, 0x1e, 0x384, "8c71f28c020e668144ca769d72f75a3b96202be8dd847e79d64514e21494d19547a17a1f33eea00a3d78f8acee839c28cc5b30aedc523ea70f9662b9e233ad2611814fc0242db676dad808bcff95c8fff2426a61af8d7db8acd3371e3b7e42a853a0f1448f46077a0bc80b91713b116470637cef0749bfeaa026f2dfaa8e60f2"}) 1.347230441s ago: executing program 2 (id=1419): syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000100)}) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x3, 0x9, 0x5}}, 0x28) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r1, 0x10c, 0x2, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) sendmmsg$inet(r2, &(0x7f0000000fc0), 0x0, 0x400c001) (async) sendmmsg$inet(r2, &(0x7f0000000fc0), 0x0, 0x400c001) r3 = socket$kcm(0x2b, 0x1, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r7, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f00000000c0)=ANY=[@ANYBLOB="a57e20ebb66a4dbb856ab0800867e32a5b0bf2027004b634de358a6fd24ea11c9c0f32b71aa858514d05d3fb83db"], 0x0) 1.163615618s ago: executing program 1 (id=1422): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000000)={0x0, 0xa, 0xcf, {0xcf, 0x6, "81fcae8f5b96853c210b1dbfabaf9ff31e8e27ed2861f4967983dd762bfb0457ea433f1c56906dfbca182b5d23142adc6384567f7ecb4352e3d1468d12960ab64846b080a1bdf5891dfaa34a1312685a44a7acc5e98532bd5e1dee4d6b49a1dbbe9534742365ca3f86c283be2fe45d1b5e3d036e22eef1d51f21cb6035979f7f182ce1d84bc5199908e19b4f872a259f7e123f11b2555c75d0ed364aeebb87070baa1512dfd052a044c3bfbc2614326a116aafa15279ace214fb2ad687f50a49de132beb941459dcaea7abac48"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4ff}}, &(0x7f0000000140)={0x0, 0x22, 0x8, {[@local=@item_012={0x2, 0x2, 0x4, "d4a6"}, @main=@item_4={0x3, 0x0, 0xc, "63338bcf"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffe, 0x9, 0x1, {0x22, 0x829}}}}, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)={0x40, 0xe, 0xd3, "bf4e92b7477e17ce1b0c77aa9e19733042b92837290b13cb580d402165835c552a41bd2bfc0d5ab3e3db43eae8bfd2716ebabc336dd2337f183a4e9f792a574ec303598557f13ccb95ac7607ff14eba732de26da4027235dcff915423e92913431e15c03808369bee916ce70a794ba40c28813a7b1e06dfbe95353124c508fb0d3791aa278ff09b52c90f22ab8719b736edbd28838b55bd3e0a150d62320b9a3634957404af118e60cae06c2ab08198f285a6be7e325cf19b021aca97fab5235886cc3c3ae3b6c43e105d69b17a840286a98f0"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000440)={0x20, 0x1, 0x76, "749eca3bcbdd1a3b3f51977e4d4d147af4e1e60b1f570bb31d39c291ab7a775ba8ae2cf81ab9cae298965d012eb046eaf6b66b303545f2ee0a675f070554ba25839a3acb8d6813ca7e4365dc28e355ebbf218330e170e398993b1ca2ed7897cb0ad310f34dbfd68bf0cb978c69b8a10444ff0815b288"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x80}}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000b80)={0x34, &(0x7f0000000980)={0x0, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.125504206s ago: executing program 1 (id=1423): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3) write$uinput_user_dev(r0, &(0x7f0000001740)={'syz1\x00', {}, 0x0, [0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) write$uinput_user_dev(r0, &(0x7f0000000900)={'syz0\x00', {0xb, 0x6, 0x7, 0x6}, 0x46, [0x8, 0x5, 0x3, 0x5, 0x7fffffff, 0x7, 0x200, 0x2, 0x5, 0x2, 0x80000001, 0x10, 0x0, 0x8c, 0x8001, 0x2, 0x5, 0x3, 0x544, 0x7, 0x5, 0x5, 0x9, 0xb, 0x31, 0xbdd, 0x2, 0x4, 0x5, 0x8, 0x2, 0xc0, 0xfffffffc, 0x1, 0x3, 0x9, 0x0, 0x2, 0x0, 0x3, 0xb, 0x0, 0x2, 0x5, 0x4, 0x8, 0x4, 0x6, 0x6, 0x6, 0xfffffffe, 0x1, 0xfffffff8, 0x1, 0xe, 0x1d5, 0x7f, 0x800, 0x5, 0xb, 0x8, 0x9, 0xf777, 0x1], [0x2, 0x4, 0xe2e0, 0x4, 0x48, 0x1, 0x100, 0x7, 0x1, 0xd8, 0x7, 0xfffffffb, 0xdde4, 0x9, 0x997, 0x9, 0x5, 0xc2, 0x400, 0x9, 0x1ff, 0x1, 0x4, 0xffffff00, 0x0, 0x400, 0x7, 0xff4, 0x3, 0x2, 0x642b, 0x6, 0x7, 0x0, 0x8, 0xfffffcac, 0xa8, 0x8000003, 0x2, 0x6, 0xf6c, 0x5, 0x1, 0x1, 0xd0607a8, 0x7f, 0x3, 0xb411, 0x7, 0x0, 0x1, 0xdec, 0xffff, 0x2, 0x7, 0x0, 0x4, 0x10001, 0x27d, 0x5, 0xffff7fff, 0x400, 0x6, 0x3], [0x3, 0x3, 0x4, 0x9, 0x0, 0xfb4, 0xce, 0x5, 0x6, 0x9b, 0x8, 0xc, 0x5, 0x4, 0x5, 0x8, 0x5fc, 0x400, 0x10001, 0x9, 0x3, 0x7, 0x9, 0x77659fd3, 0x5, 0x9, 0x2, 0xd2, 0x4, 0x8, 0x3, 0x5, 0x99, 0x1, 0x7, 0x9, 0x9, 0x9136, 0x80, 0xa8, 0x9, 0x0, 0x1, 0x6, 0xffffffff, 0x6, 0xeb1, 0xf9, 0x81, 0x9, 0x40, 0x2, 0x7, 0x8000, 0x0, 0x1, 0x4, 0x6, 0x6, 0x6f7, 0x1000, 0x6, 0xfffffec4, 0x5], [0x1, 0x2fe, 0x140, 0x800, 0xd, 0x401, 0x7fff, 0x5, 0x6d, 0xff, 0xc, 0x3, 0x5, 0x2, 0xff, 0x8, 0x4, 0x7ff, 0x9, 0x8, 0x7, 0xfffffffd, 0xd, 0x8fb, 0x1, 0x2, 0x80, 0xcf8e, 0x0, 0x5, 0x1, 0x10001, 0x65c, 0x1, 0x5, 0x0, 0x6, 0x28000000, 0xff, 0x1000, 0x9c7, 0x0, 0x101, 0x0, 0x1, 0xfa8, 0x8, 0x2000000, 0xffff, 0x7fffffff, 0x3, 0x9, 0x0, 0x91fe, 0x42, 0x7, 0x8, 0x4, 0x7, 0x9, 0x111a5ebb, 0x7, 0x8, 0x6]}, 0x45c) 1.060482167s ago: executing program 1 (id=1425): syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000540)=ANY=[@ANYBLOB="12f66dd41c2c57f809ec7f007c4f0c500110030000001099042a10400001020701090260000301f140020904000000010100000a2401c0ff0a000201020904010000010200f73d000904010101010200000905010940000381040744f366d472c43681250104fe00000904020000010200000904"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000380)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_ep_write(r2, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x40, 0x6, 0x1, '\v'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r3, &(0x7f0000000480)=""/74, 0x49) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x5) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_mtu(r5, 0x0, 0xa, 0x0, 0x0) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000500)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, r7, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x40840) listen(r4, 0x0) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000002082057d004000010203010902600003010680070904000000010100000a2401a80f0a0002010209042100000102000009040101010102000104050100090402"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r6, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x48, r7, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20) 994.469074ms ago: executing program 1 (id=1427): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) accept4(r0, 0x0, 0x0, 0x800) (async) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000240), &(0x7f0000000540)=ANY=[@ANYBLOB="00fbb1040fe3b8af025f1a51de9a09298886fbbdbc857ba11c18664a1c53c0c3b66c7b30b0c48f5db5a94e6035f64f719672f802a58e2fbf38e163d2f030ddbd5e5da74345ce47fa76a5b4dbbf1f230d389ad3b938f450c99fdbed7d240ce27b800c2d8ede656bc65932e39eaf3e028a1e36c82c5384e36057f8cfa1ce6ceeaae36f31f05b27531d229103012aec9e06fdcfa4a018d9ef7e2a8057ce4057254bbbcb95a0db255e9b6b5bc7c32e337494041ad4429a2640b70890029e720f6db011d28bb17d165e77da98f039ce623edd09571b8fcf35e8077efccb3825b4"], 0xb1, 0x1) (async) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="600000000906050000000000000000000100000105000100070000003c00078008000640000000090c001840000000000000000908000a4003c3ac5d14c162d839441fbd75000010000c0018400000000000000400060004404e2200000500070004000000080009400000001094dbe412a025b31a32404b1183e2b671a3124cf9d8c35d6c3881a949007a889c622c5c458188985b36bf94abdbee10ee8ca17fbbeb69dec887b455a504265ed31e623ebdd19745e68bdbea8be4c4f6d5f5fe75c6652e773213e8064f66548fdf4a52f4d80ae5d11785264b495850509b6b7cbf80428f60143296e3491acd8f0ecc812bfa6f93d6eab1c47199746488941dbada7ab13932a0277eb78432fc77763a55900d44f9fb1ab6cbbeac395a4a96a79ccc3cbbe9d657d1ab83823e024901167e647810fcd49d6944a6090000000000000037"], 0x60}, 0x1, 0x0, 0x0, 0x41}, 0x2004c801) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, &(0x7f00000002c0)=0x9b) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000001c0), 0x20100, 0x0) ioctl$RTC_RD_TIME(r3, 0x80247009, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async, rerun: 32) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x108843, 0x55) (rerun: 32) fcntl$setlease(r5, 0x400, 0x1) close_range(r4, 0xffffffffffffffff, 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="f0"]) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x18, &(0x7f0000000100)=0xa, 0x4) recvmsg(r7, &(0x7f0000000400)={0x0, 0x12, &(0x7f00000002c0), 0x64}, 0x20) (async, rerun: 32) r8 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) (async, rerun: 64) r9 = accept4(r8, 0x0, 0x0, 0x800) (rerun: 64) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4", 0x1b}, {&(0x7f00000003c0)="e8700e444d", 0x5}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) recvmmsg$unix(r9, &(0x7f0000002300)=[{{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000800)=""/154, 0x9a}], 0x1}}], 0x1, 0x40002021, 0x0) (async) ioctl$RTC_UIE_ON(r6, 0x7003) (async, rerun: 64) ioctl$RTC_SET_TIME(r6, 0x4024700a, &(0x7f0000000280)={0x2b, 0x9, 0x0, 0x2, 0x6, 0x0, 0x6, 0x4}) (rerun: 64) 471.702677ms ago: executing program 3 (id=1438): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x410402, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000002800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40001}, 0x2004c000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='cgroup\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000080), 0xffffffffffffffff) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000180)="0f01ca0f01c266b844000f00d8440f20c03508000000440f22c00f230a0f01c436670f01c40fc7b395e3520db9a90200000f320f8c2a000000", 0x39}], 0x1, 0x20, &(0x7f00000002c0), 0x0) syz_usb_connect$uac3(0x3, 0x80, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000300000010"], 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/key-users\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0xf8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0x9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7f, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x2, 0x0, @ioapic={0xfec00000, 0x11, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xfc, 0x7f, 0x9, '\x00', 0x67}, {0x0, 0x5, 0xd4, '\x00', 0xff}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x2, 0xd5, 0xf1, '\x00', 0x8}, {0x3, 0x4, 0xc}, {0x7f, 0xd, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x80, '\x00', 0x5}, {0xff, 0x1, 0xfe, '\x00', 0x1}, {0xfe, 0x7, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0x2, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x7, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x9, 0x5, '\x00', 0xc}, {0x7, 0xe5, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4}]}}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="4f9d29a8131bf9ebaddef36fdbab473a1c2626a28b4133d858876e8f4dd78a23ec37b17342111234648d908471c8a9cf08e635975f4c2542c8ded54d2f2ce7234d76a768b0def2b2", 0x48}], 0x1}, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x406000, 0x0) ioctl$TUNGETVNETLE(r5, 0x800454dd, &(0x7f0000000140)) 227.422188ms ago: executing program 0 (id=1444): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x804) r2 = socket(0x10, 0x800, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r3 = fsopen(&(0x7f0000000040)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x28, r5, 0xacf5e67dd0b583a1, 0x0, 0x0, {{0x5}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x5d}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8810}, 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,\xc7', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r7, 0x7aa, &(0x7f0000000080)={{@hyper, 0x60}}) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2], 0x28}}, 0x0) 213.438895ms ago: executing program 0 (id=1445): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000001c0), &(0x7f0000000200), 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r3) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380)={[], 0x4000000000000000}, 0x0) 179.346959ms ago: executing program 0 (id=1446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2981000e0086dd6d00200000000000000000000000000001ff0200000000000000000000000007014f194e21009c907801"], 0xd6) 111.73916ms ago: executing program 0 (id=1447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r1, 0x0, 0x19, 0xffffffffffffffff, &(0x7f0000000000)=0x1) r2 = socket$inet6_sctp(0xa, 0x4, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000380)=0xbe, 0x4) r3 = dup(r2) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000780)={0x3, &(0x7f0000000700)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r3, 0x4010641c, &(0x7f0000000840)={r4, &(0x7f00000007c0)=""/69}) sendmsg$OSF_MSG_ADD(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x268}, 0x1, 0x0, 0x0, 0x54}, 0x80) recvfrom(r0, &(0x7f0000000000)=""/236, 0xec, 0x10000, 0x0, 0x0) pipe2$9p(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@private}}, &(0x7f0000000500)=0xe8) r7 = getegid() statx(0xffffffffffffffff, &(0x7f0000000540)='./file0\x00', 0x3100, 0x200, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000880)={'ip6gretap0\x00'}) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) prlimit64(0x0, 0x7, &(0x7f00000001c0), 0x0) mq_open(&(0x7f00000000c0)='${ \x00', 0x840, 0x8, 0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) write$nci(r9, &(0x7f0000000240)=ANY=[], 0xc) write$nci(r9, 0x0, 0x14) write$P9_RSTATu(r5, &(0x7f0000000680)={0x5d, 0x7d, 0x1, {{0x0, 0x43, 0xf, 0x3186, {0x80, 0x4, 0x1}, 0x128d0000, 0x81, 0x3, 0x6, 0x4, '\\)/%', 0x1, '#', 0x8, ',-E)\\\'-+', 0x3, ')%\\'}, 0x5, '$!][\x17', r6, r7, r8}}, 0x5d) 111.563702ms ago: executing program 0 (id=1448): pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xf3a, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='uid_map\x00') r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1e0101000000000000001f00000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x184}, 0x1, 0x0, 0x0, 0x10}, 0x0) 102.695278ms ago: executing program 1 (id=1449): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2981000e0086dd6d00200000000000000000000000000001ff0200000000010000000000"], 0xd6) 56.112261ms ago: executing program 0 (id=1450): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="20002abd7000fedbdf25420000bbce288c0008021100000100000a00060050505050505000000a0006005050505050cd04000000060008021100000100000a000600d0419fcd995400000a0006005050505050500000"], 0x5c}}, 0x24000800) (async) sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="20002abd7000fedbdf25420000bbce288c0008021100000100000a00060050505050505000000a0006005050505050cd04000000060008021100000100000a000600d0419fcd995400000a0006005050505050500000"], 0x5c}}, 0x24000800) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r1) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000006c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000000) (async) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x28, r6, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c004}, 0x4000000) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f00000000c0)={0x200001, 0x1, 0x0, "3b189831cb9c1d4fd54c60d1dd004dbb6cba09ca3420217017d0a3dad57650f5"}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="4d7e00000000fedbdf252a00000008002f00000000000c0005000202aaaaaaaaaaaa0a0001007770616e300000000600040002000000"], 0x3c}, 0x4, 0x700000000000000, 0x0, 0x2004c020}, 0x4004) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="4d7e00000000fedbdf252a00000008002f00000000000c0005000202aaaaaaaaaaaa0a0001007770616e300000000600040002000000"], 0x3c}, 0x4, 0x700000000000000, 0x0, 0x2004c020}, 0x4004) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f0000001680), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000000)=0x1000) 0s ago: executing program 1 (id=1451): r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000240)='.\x00', 0x60000526) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) inotify_add_watch(r0, &(0x7f0000005780)='./file0\x00', 0x44000001) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0xd8ffffffffffffff, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) kernel console output (not intermixed with test programs): 5] usb 2-1: USB disconnect, device number 25 [ 188.238245][ T5345] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.238276][ T5345] usb 1-1: config 0 has no interface number 0 [ 188.240616][ T5345] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 188.240645][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.240666][ T5345] usb 1-1: Product: syz [ 188.240680][ T5345] usb 1-1: Manufacturer: syz [ 188.240692][ T5345] usb 1-1: SerialNumber: syz [ 188.244180][ T5345] usb 1-1: config 0 descriptor?? [ 188.743163][ T5345] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 188.840481][ T5345] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 188.844338][ T5345] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 188.844411][ T5345] usb 1-1: media controller created [ 189.081431][ T5345] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 189.235288][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.636'. [ 189.291701][ T7560] netlink: 28 bytes leftover after parsing attributes in process `syz.3.634'. [ 189.321143][ T5345] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 189.382098][ T5345] usb 1-1: USB disconnect, device number 50 [ 189.460048][ T5765] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 189.506636][ T5935] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 189.649662][ T5765] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 189.649694][ T5765] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 189.649709][ T5765] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 189.653252][ T5765] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 189.653289][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.653310][ T5765] usb 2-1: Product: syz [ 189.653324][ T5765] usb 2-1: Manufacturer: syz [ 189.653339][ T5765] usb 2-1: SerialNumber: syz [ 189.662309][ T5765] usb 2-1: config 0 descriptor?? [ 189.673409][ T7559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.673527][ T7559] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 189.676526][ T5765] usb 2-1: ucan: probing device on interface #0 [ 189.744402][ T5935] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 189.744432][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.744508][ T5935] usb 3-1: Product: syz [ 189.744523][ T5935] usb 3-1: Manufacturer: syz [ 189.744536][ T5935] usb 3-1: SerialNumber: syz [ 189.775220][ T5935] usb 3-1: config 0 descriptor?? [ 189.925481][ T5765] usb 2-1: ucan: could not read protocol version, ret=0 [ 189.925498][ T5765] usb 2-1: ucan: probe failed; try to update the device firmware [ 190.003356][ T5935] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 190.036926][ T5699] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 190.189620][ T5699] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 190.189650][ T5699] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 190.192876][ T5699] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 190.192906][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.192927][ T5699] usb 1-1: Product: syz [ 190.192941][ T5699] usb 1-1: Manufacturer: syz [ 190.192957][ T5699] usb 1-1: SerialNumber: syz [ 190.267687][ T7576] netlink: 14 bytes leftover after parsing attributes in process `syz.3.641'. [ 190.860988][ T7561] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.888034][ T7561] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 190.914834][ T5935] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 190.920929][ T5935] usb 3-1: USB disconnect, device number 26 [ 192.278776][ T5720] usb 2-1: USB disconnect, device number 26 [ 192.617008][ T5345] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 192.670849][ T7603] netlink: 'syz.2.652': attribute type 8 has an invalid length. [ 192.770308][ T5699] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 192.780679][ T5345] usb 4-1: Using ep0 maxpacket: 16 [ 192.783308][ T5345] usb 4-1: unable to get BOS descriptor or descriptor too short [ 192.785163][ T5345] usb 4-1: config 1 has an invalid interface number: 78 but max is 0 [ 192.785188][ T5345] usb 4-1: config 1 has no interface number 0 [ 192.785230][ T5345] usb 4-1: config 1 interface 78 altsetting 93 bulk endpoint 0xE has invalid maxpacket 64 [ 192.785256][ T5345] usb 4-1: config 1 interface 78 has no altsetting 0 [ 192.795342][ T5345] usb 4-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice=df.57 [ 192.795374][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.795394][ T5345] usb 4-1: Product: syz [ 192.795408][ T5345] usb 4-1: Manufacturer: syz [ 192.795423][ T5345] usb 4-1: SerialNumber: syz [ 192.862217][ T7595] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 192.866401][ T5699] usb 1-1: USB disconnect, device number 51 [ 193.036822][ T6224] udevd[6224]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 193.149573][ T7611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.649'. [ 193.303816][ T5345] spcp8x5 4-1:1.78: SPCP8x5 converter detected [ 193.331669][ T5345] usb 4-1: SPCP8x5 converter now attached to ttyUSB0 [ 193.380203][ T38] audit: type=1804 audit(1779015462.907:4): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.655" name="bus" dev="ramfs" ino=18470 res=1 errno=0 [ 193.407380][ T5345] usb 4-1: USB disconnect, device number 35 [ 193.435097][ T5345] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 193.463290][ T5345] spcp8x5 4-1:1.78: device disconnected [ 193.633979][ T7621] binder: 7620:7621 ioctl c0306201 200000000180 returned -14 [ 193.786245][ T5765] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 193.950199][ T5765] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 193.950244][ T5765] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 193.950271][ T5765] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 193.977965][ T5765] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 193.977999][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.978019][ T5765] usb 1-1: Product: syz [ 193.978033][ T5765] usb 1-1: Manufacturer: syz [ 193.978127][ T5765] usb 1-1: SerialNumber: syz [ 194.016972][ T5765] usb 1-1: config 0 descriptor?? [ 194.017964][ T7617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.018135][ T7617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 194.024982][ T5765] usb 1-1: ucan: probing device on interface #0 [ 194.188019][ T7636] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 194.188858][ T7636] netlink: 224 bytes leftover after parsing attributes in process `syz.1.667'. [ 194.232505][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.232595][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.238184][ T5765] usb 1-1: ucan: device protocol version 0 is not supported [ 194.238209][ T5765] usb 1-1: ucan: probe failed; try to update the device firmware [ 194.300597][ T7641] loop2: detected capacity change from 0 to 7 [ 194.301336][ T752] lo_rw_aio(loop2) starting read with raw_refcnt=0x1, refcnt=2 [ 194.301637][ T7641] Dev loop2: unable to read RDB block 7 [ 194.301664][ T7641] loop2: AHDI p1 p2 [ 194.301690][ T7641] loop2: partition table partially beyond EOD, truncated [ 194.301910][ T7641] loop2: p1 size 150995456 extends beyond EOD, truncated [ 194.332278][ T5789] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 194.374942][ T6224] udevd[6224]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 194.528857][ T7647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.672'. [ 194.528995][ T7647] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 194.916410][ T5765] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 195.082386][ T5765] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 195.082420][ T5765] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.082440][ T5765] usb 2-1: Product: syz [ 195.082455][ T5765] usb 2-1: Manufacturer: syz [ 195.082469][ T5765] usb 2-1: SerialNumber: syz [ 195.115161][ T5765] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 195.308370][ T5345] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 195.728476][ T5699] usb 2-1: USB disconnect, device number 27 [ 196.386444][ T5345] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 196.387057][ T5345] ath9k_htc: Failed to initialize the device [ 196.463787][ T5699] usb 2-1: ath9k_htc: USB layer deinitialized [ 196.494679][ T7669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.505592][ T7669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.578374][ T5719] usb 1-1: USB disconnect, device number 52 [ 196.681794][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.683'. [ 196.866052][ T7682] netlink: 'syz.0.685': attribute type 4 has an invalid length. [ 196.964757][ T7686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.688'. [ 196.996951][ T7686] netlink: 36 bytes leftover after parsing attributes in process `syz.2.688'. [ 197.471411][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.0.693'. [ 197.555587][ T7708] netlink: 'syz.0.695': attribute type 16 has an invalid length. [ 197.555604][ T7708] netlink: 'syz.0.695': attribute type 3 has an invalid length. [ 197.555612][ T7708] netlink: 64066 bytes leftover after parsing attributes in process `syz.0.695'. [ 197.821083][ T5699] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 197.957598][ T5699] usb 1-1: device descriptor read/64, error -71 [ 198.166456][ T5621] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 198.206264][ T5699] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 198.282278][ T7728] netlink: 'syz.1.704': attribute type 10 has an invalid length. [ 198.285628][ T7728] team0: Device bond0 is up. Set it down before adding it as a team port [ 198.316214][ T5621] usb 4-1: Using ep0 maxpacket: 32 [ 198.319754][ T5621] usb 4-1: config 0 interface 0 has no altsetting 0 [ 198.319794][ T5621] usb 4-1: New USB device found, idVendor=05ac, idProduct=0324, bcdDevice= 0.00 [ 198.319818][ T5621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.357694][ T5699] usb 1-1: device descriptor read/64, error -71 [ 198.360873][ T5621] usb 4-1: config 0 descriptor?? [ 198.466863][ T5699] usb usb1-port1: attempt power cycle [ 198.469429][ T7731] comedi comedi3: comedi_config --init_data is deprecated [ 198.784340][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.785082][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.829877][ T5621] hid_parser_main: 11 callbacks suppressed [ 198.829903][ T5621] magicmouse 0003:05AC:0324.0006: unknown main item tag 0x0 [ 198.829937][ T5621] magicmouse 0003:05AC:0324.0006: unknown main item tag 0x0 [ 198.829967][ T5621] magicmouse 0003:05AC:0324.0006: unknown main item tag 0x0 [ 198.829996][ T5621] magicmouse 0003:05AC:0324.0006: unknown main item tag 0x0 [ 198.830024][ T5621] magicmouse 0003:05AC:0324.0006: unknown main item tag 0x0 [ 198.830052][ T5621] magicmouse 0003:05AC:0324.0006: unknown main item tag 0x0 [ 198.830081][ T5621] magicmouse 0003:05AC:0324.0006: unknown main item tag 0x0 [ 198.830108][ T5621] magicmouse 0003:05AC:0324.0006: unknown main item tag 0x0 [ 198.830137][ T5621] magicmouse 0003:05AC:0324.0006: unknown main item tag 0x0 [ 198.830165][ T5621] magicmouse 0003:05AC:0324.0006: unknown main item tag 0x0 [ 198.885912][ T5699] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 198.931549][ T5699] usb 1-1: device descriptor read/8, error -71 [ 198.932878][ T5621] magicmouse 0003:05AC:0324.0006: hidraw0: USB HID vff.ff Device [HID 05ac:0324] on usb-dummy_hcd.3-1/input0 [ 198.934053][ T5621] magicmouse 0003:05AC:0324.0006: magicmouse input not registered [ 198.964911][ T5621] magicmouse 0003:05AC:0324.0006: probe with driver magicmouse failed with error -12 [ 198.990569][ T7714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.993703][ T7714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.012843][ T7736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.013694][ T7736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.065961][ T5765] usb 4-1: USB disconnect, device number 36 [ 199.109146][ T7739] netlink: 20 bytes leftover after parsing attributes in process `syz.3.708'. [ 199.166246][ T5699] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 199.187304][ T5699] usb 1-1: device descriptor read/8, error -71 [ 199.298240][ T5699] usb usb1-port1: unable to enumerate USB device [ 199.736620][ T5935] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 199.896372][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 199.898507][ T5935] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 199.898536][ T5935] usb 3-1: config 0 has no interface number 0 [ 199.898581][ T5935] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 199.898602][ T5935] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 199.898615][ T5935] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 199.900803][ T5935] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 199.900832][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.900853][ T5935] usb 3-1: Product: syz [ 199.900868][ T5935] usb 3-1: Manufacturer: syz [ 199.900883][ T5935] usb 3-1: SerialNumber: syz [ 199.904702][ T5935] usb 3-1: config 0 descriptor?? [ 199.905863][ T7752] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 199.910752][ T5935] asix 3-1:0.34: probe with driver asix failed with error -22 [ 200.006978][ T5345] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 200.126280][ T5765] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 200.142567][ T7752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.143122][ T7752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.166566][ T5345] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 200.166598][ T5345] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 200.166619][ T5345] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 200.170055][ T5345] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 200.170086][ T5345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.170285][ T5345] usb 2-1: Product: syz [ 200.170512][ T5345] usb 2-1: Manufacturer: syz [ 200.170527][ T5345] usb 2-1: SerialNumber: syz [ 200.183697][ T5345] usb 2-1: config 0 descriptor?? [ 200.191223][ T7760] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 200.191648][ T7760] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 200.196985][ T5345] usb 2-1: ucan: probing device on interface #0 [ 200.243952][ T5935] usb 3-1: USB disconnect, device number 27 [ 200.316971][ T5765] usb 4-1: Using ep0 maxpacket: 32 [ 200.328621][ T5765] usb 4-1: unable to get BOS descriptor or descriptor too short [ 200.330106][ T5765] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.330156][ T5765] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.334166][ T5765] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 200.334243][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.334264][ T5765] usb 4-1: Product: syz [ 200.334279][ T5765] usb 4-1: Manufacturer: syz [ 200.334293][ T5765] usb 4-1: SerialNumber: syz [ 200.617112][ T5765] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 200.617186][ T5765] usb 4-1: MIDIStreaming interface descriptor not found [ 200.966250][ T5699] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 200.986323][ T5765] usb 4-1: USB disconnect, device number 37 [ 201.043933][ T7770] netlink: 'syz.2.720': attribute type 2 has an invalid length. [ 201.043958][ T7770] netlink: 132 bytes leftover after parsing attributes in process `syz.2.720'. [ 201.081241][ T5345] ucan 2-1:0.0 can0: registered device [ 201.082005][ T5345] ucan 2-1:0.0 can0: firmware string: D6Ivb-+N~e[r^ vӇ2,c I˂@䂉huD$zF Lc [ 201.131210][ T5699] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 201.131275][ T5699] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 201.131299][ T5699] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.215271][ T5699] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 201.317567][ T5345] usb 2-1: USB disconnect, device number 28 [ 201.427653][ T5623] Bluetooth: hci3: command 0x0406 tx timeout [ 201.429300][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 201.429937][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 201.438515][ T5617] Bluetooth: hci0: command 0x0406 tx timeout [ 201.804970][ T7779] netlink: 'syz.0.718': attribute type 37 has an invalid length. [ 202.227254][ T5699] stv0680 1-1:4.0: STV(e): camera ping failed!! [ 202.349663][ T5769] udevd[5769]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 202.430186][ T5699] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 202.430211][ T5699] stv0680 1-1:4.0: last error: 0, command = 0x0 [ 202.442624][ T7786] netlink: 14 bytes leftover after parsing attributes in process `syz.1.724'. [ 202.456813][ T5699] usb 1-1: USB disconnect, device number 57 [ 202.616669][ T5765] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 202.766170][ T5765] usb 4-1: Using ep0 maxpacket: 32 [ 202.768075][ T5765] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 202.768103][ T5765] usb 4-1: config 0 has no interface number 0 [ 202.768139][ T5765] usb 4-1: config 0 interface 184 has no altsetting 0 [ 202.770307][ T5765] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 202.770336][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.770349][ T5765] usb 4-1: Product: syz [ 202.770357][ T5765] usb 4-1: Manufacturer: syz [ 202.770366][ T5765] usb 4-1: SerialNumber: syz [ 202.782323][ T5765] usb 4-1: config 0 descriptor?? [ 202.925401][ T7795] netlink: 24 bytes leftover after parsing attributes in process `syz.1.728'. [ 203.233654][ T7803] FAULT_INJECTION: forcing a failure. [ 203.233654][ T7803] name failslab, interval 1, probability 0, space 0, times 0 [ 203.233688][ T7803] CPU: 0 UID: 0 PID: 7803 Comm: syz.2.732 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 203.233711][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.233724][ T7803] Call Trace: [ 203.233731][ T7803] [ 203.233740][ T7803] dump_stack_lvl+0xe8/0x150 [ 203.233769][ T7803] should_fail_ex+0x46b/0x600 [ 203.233801][ T7803] should_failslab+0xa8/0x100 [ 203.233831][ T7803] __kmalloc_noprof+0xdf/0x7b0 [ 203.233856][ T7803] ? kfree+0x4d/0x6c0 [ 203.233878][ T7803] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 203.233914][ T7803] tomoyo_realpath_from_path+0xe3/0x5d0 [ 203.233943][ T7803] ? tomoyo_domain+0xd7/0x130 [ 203.233966][ T7803] ? tomoyo_path_number_perm+0x219/0x630 [ 203.233992][ T7803] tomoyo_path_number_perm+0x246/0x630 [ 203.234019][ T7803] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 203.234044][ T7803] ? __lock_acquire+0x6b5/0x2d10 [ 203.234070][ T7803] ? do_raw_spin_lock+0x12b/0x2f0 [ 203.234125][ T7803] ? __fget_files+0x2a/0x420 [ 203.234150][ T7803] ? __fget_files+0x2a/0x420 [ 203.234171][ T7803] ? __fget_files+0x3a6/0x420 [ 203.234192][ T7803] ? __fget_files+0x2a/0x420 [ 203.234219][ T7803] security_file_ioctl+0xc3/0x2a0 [ 203.234245][ T7803] __se_sys_ioctl+0x47/0x170 [ 203.234272][ T7803] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.234293][ T7803] do_syscall_64+0x15f/0xf80 [ 203.234311][ T7803] ? trace_irq_disable+0x3b/0x140 [ 203.234337][ T7803] ? clear_bhb_loop+0x40/0x90 [ 203.234362][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.234383][ T7803] RIP: 0033:0x7f7ee2b4ce59 [ 203.234402][ T7803] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.234419][ T7803] RSP: 002b:00007f7ee0d9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 203.234447][ T7803] RAX: ffffffffffffffda RBX: 00007f7ee2dc5fa0 RCX: 00007f7ee2b4ce59 [ 203.234462][ T7803] RDX: 0000200000000600 RSI: 00000000c0306201 RDI: 0000000000000003 [ 203.234474][ T7803] RBP: 00007f7ee0d9e090 R08: 0000000000000000 R09: 0000000000000000 [ 203.234487][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.234499][ T7803] R13: 00007f7ee2dc6038 R14: 00007f7ee2dc5fa0 R15: 00007ffd6e8587e8 [ 203.234530][ T7803] [ 203.234562][ T7803] ERROR: Out of memory at tomoyo_realpath_from_path. [ 203.470142][ T5765] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 203.470175][ T5765] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 203.498680][ T5621] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 203.689346][ T5621] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 203.689378][ T5621] usb 1-1: config 0 has no interface number 0 [ 203.689423][ T5621] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 10 [ 203.716714][ T5621] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 203.716747][ T5621] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 203.716768][ T5621] usb 1-1: Product: syz [ 203.716783][ T5621] usb 1-1: Manufacturer: syz [ 203.716805][ T5621] usb 1-1: SerialNumber: syz [ 203.767665][ T5621] usb 1-1: config 0 descriptor?? [ 203.783813][ T5621] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 203.784182][ T5621] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 203.811451][ T5621] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 203.873734][ T5621] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 203.903792][ T5621] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 203.924077][ T5621] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 203.941532][ T5621] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 203.974546][ T5621] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 203.999821][ T5621] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 204.002205][ T5621] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 204.031171][ T5621] usb 1-1: USB disconnect, device number 58 [ 204.057835][ T5621] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 204.080485][ T5621] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 204.097220][ T5621] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 204.105387][ T5621] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 204.126816][ T5621] keyspan 1-1:0.107: device disconnected [ 204.517093][ T5765] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 204.517127][ T5765] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 204.517146][ T5765] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 204.517441][ T5765] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 204.572003][ T5765] usb 4-1: USB disconnect, device number 38 [ 204.743109][ T7825] binder: 7824:7825 ioctl c0306201 200000000180 returned -14 [ 205.460170][ T7843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.745'. [ 205.982250][ T5720] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 206.142827][ T5720] usb 3-1: unable to get BOS descriptor or descriptor too short [ 206.161559][ T5720] usb 3-1: config 114 has an invalid interface number: 240 but max is 0 [ 206.161589][ T5720] usb 3-1: config 114 has no interface number 0 [ 206.161642][ T5720] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 206.161668][ T5720] usb 3-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 206.161695][ T5720] usb 3-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 206.161720][ T5720] usb 3-1: config 114 interface 240 has no altsetting 0 [ 206.195348][ T5720] usb 3-1: string descriptor 0 read error: -22 [ 206.195494][ T5720] usb 3-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 206.195518][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.276546][ T7849] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.276706][ T7849] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 206.282468][ T5720] ir_usb 3-1:114.240: IR Dongle converter detected [ 206.489179][ T5720] usb 3-1: IRDA class descriptor not found, device not bound [ 206.546236][ T5765] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 206.616357][ T5345] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 206.717675][ T5765] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 206.717711][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.717731][ T5765] usb 4-1: Product: syz [ 206.717745][ T5765] usb 4-1: Manufacturer: syz [ 206.717756][ T5765] usb 4-1: SerialNumber: syz [ 206.744501][ T5765] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 206.784113][ T5935] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 206.787645][ T5345] usb 1-1: Using ep0 maxpacket: 32 [ 206.793693][ T5345] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 206.793723][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.793743][ T5345] usb 1-1: Product: syz [ 206.793758][ T5345] usb 1-1: Manufacturer: syz [ 206.793772][ T5345] usb 1-1: SerialNumber: syz [ 206.848962][ T5345] usb 1-1: config 0 descriptor?? [ 207.013443][ T7849] overlayfs: overlapping lowerdir path [ 207.194469][ T7867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.755'. [ 207.222932][ T5765] usb 3-1: USB disconnect, device number 28 [ 207.362785][ T5345] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: failure sending bit rate [ 207.362899][ T5345] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: probe with driver RobotFuzz Open Source InterFace, OSIF failed with error -71 [ 207.409284][ T7853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.410617][ T7853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.372696][ T5935] usb 4-1: Service connection timeout for: 256 [ 208.372715][ T5935] ath9k_htc 4-1:1.0: ath9k_htc: Unable to initialize HTC services [ 208.383118][ T5345] usb 1-1: USB disconnect, device number 59 [ 208.470848][ T5720] usb 4-1: USB disconnect, device number 39 [ 208.479121][ T5935] ath9k_htc: Failed to initialize the device [ 208.569161][ T5720] usb 4-1: ath9k_htc: USB layer deinitialized [ 208.886246][ T5621] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 209.038995][ T5621] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 209.039030][ T5621] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 209.039057][ T5621] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 209.041639][ T5621] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 209.041671][ T5621] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.041692][ T5621] usb 3-1: Product: syz [ 209.041707][ T5621] usb 3-1: Manufacturer: syz [ 209.041721][ T5621] usb 3-1: SerialNumber: syz [ 209.113973][ T5621] usb 3-1: config 0 descriptor?? [ 209.114725][ T7876] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.114832][ T7876] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 209.138666][ T5621] usb 3-1: ucan: probing device on interface #0 [ 209.331377][ T5621] usb 3-1: ucan: device protocol version 0 is not supported [ 209.331414][ T5621] usb 3-1: ucan: probe failed; try to update the device firmware [ 209.528087][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.765'. [ 209.609429][ T5935] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 209.811501][ T5935] usb 4-1: unable to get BOS descriptor or descriptor too short [ 209.817940][ T5935] usb 4-1: config 3 has an invalid interface number: 229 but max is 0 [ 209.817970][ T5935] usb 4-1: config 3 has no interface number 0 [ 209.818013][ T5935] usb 4-1: config 3 interface 229 has no altsetting 0 [ 209.821731][ T5935] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=34.10 [ 209.821762][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.821783][ T5935] usb 4-1: Product: syz [ 209.821797][ T5935] usb 4-1: Manufacturer: syz [ 209.821812][ T5935] usb 4-1: SerialNumber: syz [ 209.917631][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 209.917937][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.1.769'. [ 210.176029][ T5935] usb_ehset_test 4-1:3.229: probe with driver usb_ehset_test failed with error -32 [ 210.183315][ T5935] usb 4-1: USB disconnect, device number 40 [ 210.225854][ T7909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.770'. [ 211.492448][ T7943] netlink: 'syz.3.783': attribute type 10 has an invalid length. [ 211.492572][ T7943] team0: Device bond0 is up. Set it down before adding it as a team port [ 211.672626][ T5345] usb 3-1: USB disconnect, device number 29 [ 212.208286][ T5345] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 212.366515][ T5621] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 212.369150][ T5345] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 212.369184][ T5345] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 212.369211][ T5345] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 212.413085][ T5345] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 212.414085][ T5345] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.414109][ T5345] usb 3-1: Product: syz [ 212.414124][ T5345] usb 3-1: Manufacturer: syz [ 212.414139][ T5345] usb 3-1: SerialNumber: syz [ 212.437980][ T5345] usb 3-1: config 0 descriptor?? [ 212.438764][ T7955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.438876][ T7955] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 212.442015][ T5345] usb 3-1: ucan: probing device on interface #0 [ 212.556216][ T5621] usb 2-1: Using ep0 maxpacket: 16 [ 212.558318][ T5621] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.558369][ T5621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.558397][ T5621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 212.558418][ T5621] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 212.558439][ T5621] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 212.559500][ T5621] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 212.559528][ T5621] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 212.559548][ T5621] usb 2-1: Manufacturer: syz [ 212.648101][ T5621] usb 2-1: config 0 descriptor?? [ 212.756433][ T5935] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 212.877697][ T5345] usb 3-1: ucan: failed to retrieve device info [ 212.877740][ T5345] usb 3-1: ucan: probe failed; try to update the device firmware [ 212.919765][ T5935] usb 4-1: Using ep0 maxpacket: 16 [ 212.923383][ T5935] usb 4-1: unable to get BOS descriptor or descriptor too short [ 212.924509][ T5935] usb 4-1: config 3 has an invalid interface number: 8 but max is 0 [ 212.924542][ T5935] usb 4-1: config 3 has no interface number 0 [ 212.924574][ T5935] usb 4-1: config 3 interface 8 has no altsetting 0 [ 212.947566][ T5935] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=ed.0e [ 212.947598][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.947618][ T5935] usb 4-1: Product: syz [ 212.947633][ T5935] usb 4-1: Manufacturer: syz [ 212.947648][ T5935] usb 4-1: SerialNumber: syz [ 213.016215][ T5621] rc_core: IR keymap rc-hauppauge not found [ 213.016236][ T5621] Registered IR keymap rc-empty [ 213.016408][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.031640][ T7970] netlink: 14 bytes leftover after parsing attributes in process `syz.0.792'. [ 213.036488][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.069186][ T5621] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 213.073483][ T5621] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 213.111809][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.126474][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.146353][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.166361][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.187336][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.207327][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.227057][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.250577][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.250759][ T7963] omfs: Invalid superblock (0) [ 213.259624][ T5699] usb 4-1: USB disconnect, device number 41 [ 213.266343][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.289768][ T5621] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 213.325479][ T5621] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 213.325532][ T5621] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 213.355784][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.787'. [ 213.373736][ T5935] usb 2-1: USB disconnect, device number 29 [ 213.902413][ T7981] binder: 7980:7981 ioctl 8028640c 200000023b80 returned -22 [ 213.914397][ T5345] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 213.925352][ T7981] netlink: 'syz.3.795': attribute type 39 has an invalid length. [ 214.015275][ T7985] loop2: detected capacity change from 0 to 7 [ 214.038276][ T752] lo_rw_aio(loop2) starting read with raw_refcnt=0x1, refcnt=2 [ 214.042992][ T7985] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 214.043220][ T7985] loop2: p1 start 1633771873 is beyond EOD, truncated [ 214.043242][ T7985] loop2: p2 start 1633771873 is beyond EOD, truncated [ 214.043259][ T7985] loop2: p3 start 1633771873 is beyond EOD, truncated [ 214.043273][ T7985] loop2: p4 start 1633771873 is beyond EOD, truncated [ 214.043287][ T7985] loop2: p5 start 1633771873 is beyond EOD, truncated [ 214.043302][ T7985] loop2: p6 start 1633771873 is beyond EOD, truncated [ 214.043317][ T7985] loop2: p7 start 1633771873 is beyond EOD, truncated [ 214.043333][ T7985] loop2: p8 start 3516083626 is beyond EOD, truncated [ 214.043349][ T7985] loop2: p9 start 2880397792 is beyond EOD, truncated [ 214.043364][ T7985] loop2: p10 start 3904933587 is beyond EOD, truncated [ 214.043379][ T7985] loop2: p11 start 1092672393 is beyond EOD, truncated [ 214.082894][ T5345] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 214.082932][ T5345] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 214.082958][ T5345] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 214.113556][ T6224] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 214.171441][ T5345] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 214.171475][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.171496][ T5345] usb 1-1: Product: syz [ 214.171512][ T5345] usb 1-1: Manufacturer: syz [ 214.171526][ T5345] usb 1-1: SerialNumber: syz [ 214.227350][ T5345] usb 1-1: config 0 descriptor?? [ 214.228153][ T7977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 214.228277][ T7977] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 214.263526][ T5345] usb 1-1: ucan: probing device on interface #0 [ 214.453930][ T5345] usb 1-1: ucan: device protocol version 0 is not supported [ 214.453957][ T5345] usb 1-1: ucan: probe failed; try to update the device firmware [ 214.934916][ T822] usb 3-1: USB disconnect, device number 30 [ 215.139964][ T7995] tipc: Started in network mode [ 215.139997][ T7995] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 215.140373][ T7995] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 215.178145][ T7990] netlink: 'syz.1.796': attribute type 2 has an invalid length. [ 215.178168][ T7990] netlink: 'syz.1.796': attribute type 8 has an invalid length. [ 215.178181][ T7990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.796'. [ 215.214137][ T7995] tipc: Enabled bearer , priority 10 [ 215.935641][ T8007] mmap: syz.2.804 (8007) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 216.167917][ T5935] tipc: Node number set to 1 [ 216.385245][ T8026] netlink: 'syz.1.809': attribute type 11 has an invalid length. [ 216.385269][ T8026] netlink: 224 bytes leftover after parsing attributes in process `syz.1.809'. [ 216.577026][ T5935] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 216.708845][ T5719] usb 1-1: USB disconnect, device number 60 [ 216.771321][ T5699] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 216.807234][ T5935] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 216.807269][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 216.807295][ T5935] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 216.824204][ T5935] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 216.824238][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.824258][ T5935] usb 3-1: Product: syz [ 216.824273][ T5935] usb 3-1: Manufacturer: syz [ 216.824288][ T5935] usb 3-1: SerialNumber: syz [ 216.881306][ T5935] usb 3-1: config 0 descriptor?? [ 216.882037][ T8024] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.882150][ T8024] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 216.921141][ T5935] usb 3-1: ucan: probing device on interface #0 [ 216.926278][ T5699] usb 2-1: Using ep0 maxpacket: 32 [ 216.931236][ T5699] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 216.931287][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.931308][ T5699] usb 2-1: Product: syz [ 216.931322][ T5699] usb 2-1: Manufacturer: syz [ 216.931337][ T5699] usb 2-1: SerialNumber: syz [ 216.973595][ T5699] usb 2-1: config 0 descriptor?? [ 217.019786][ T5699] usb 2-1: selecting invalid altsetting 3 [ 217.019811][ T5699] comedi comedi5: could not set alternate setting 3 in high speed [ 217.019829][ T5699] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 217.064810][ T5699] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 217.206200][ T5719] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 217.290843][ T5935] usb 3-1: ucan: failed to retrieve device info [ 217.290869][ T5935] usb 3-1: ucan: probe failed; try to update the device firmware [ 217.357099][ T5719] usb 1-1: Using ep0 maxpacket: 32 [ 217.364222][ T5719] usb 1-1: config 6 has an invalid interface number: 132 but max is 0 [ 217.364252][ T5719] usb 1-1: config 6 has no interface number 0 [ 217.364306][ T5719] usb 1-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 248, changing to 7 [ 217.364323][ T5719] usb 1-1: config 6 interface 132 has no altsetting 0 [ 217.399077][ T5719] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e [ 217.399109][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.399132][ T5719] usb 1-1: Product: syz [ 217.399140][ T5719] usb 1-1: Manufacturer: syz [ 217.399149][ T5719] usb 1-1: SerialNumber: syz [ 217.477783][ T5699] usb 2-1: USB disconnect, device number 30 [ 217.851169][ T8045] FAULT_INJECTION: forcing a failure. [ 217.851169][ T8045] name failslab, interval 1, probability 0, space 0, times 0 [ 217.851206][ T8045] CPU: 0 UID: 0 PID: 8045 Comm: syz.1.816 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.851228][ T8045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.851241][ T8045] Call Trace: [ 217.851248][ T8045] [ 217.851259][ T8045] dump_stack_lvl+0xe8/0x150 [ 217.851289][ T8045] should_fail_ex+0x46b/0x600 [ 217.851319][ T8045] should_failslab+0xa8/0x100 [ 217.851350][ T8045] __kmalloc_noprof+0xdf/0x7b0 [ 217.851378][ T8045] ? tomoyo_encode+0x28b/0x550 [ 217.851413][ T8045] tomoyo_encode+0x28b/0x550 [ 217.851448][ T8045] tomoyo_realpath_from_path+0x58d/0x5d0 [ 217.851489][ T8045] ? tomoyo_path_number_perm+0x219/0x630 [ 217.851516][ T8045] tomoyo_path_number_perm+0x246/0x630 [ 217.851545][ T8045] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 217.851571][ T8045] ? __lock_acquire+0x6b5/0x2d10 [ 217.851593][ T8045] ? do_raw_spin_lock+0x12b/0x2f0 [ 217.851651][ T8045] ? __fget_files+0x2a/0x420 [ 217.851677][ T8045] ? __fget_files+0x2a/0x420 [ 217.851698][ T8045] ? __fget_files+0x3a6/0x420 [ 217.851719][ T8045] ? __fget_files+0x2a/0x420 [ 217.851742][ T8045] security_file_ioctl+0xc3/0x2a0 [ 217.851769][ T8045] __se_sys_ioctl+0x47/0x170 [ 217.851796][ T8045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.851817][ T8045] do_syscall_64+0x15f/0xf80 [ 217.851836][ T8045] ? trace_irq_disable+0x3b/0x140 [ 217.851864][ T8045] ? clear_bhb_loop+0x40/0x90 [ 217.851888][ T8045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.851907][ T8045] RIP: 0033:0x7fbaa937ce59 [ 217.851926][ T8045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.851943][ T8045] RSP: 002b:00007fbaa75ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 217.851965][ T8045] RAX: ffffffffffffffda RBX: 00007fbaa95f5fa0 RCX: 00007fbaa937ce59 [ 217.851978][ T8045] RDX: 0000200000000600 RSI: 00000000c0306201 RDI: 0000000000000003 [ 217.851991][ T8045] RBP: 00007fbaa75ce090 R08: 0000000000000000 R09: 0000000000000000 [ 217.852003][ T8045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.852016][ T8045] R13: 00007fbaa95f6038 R14: 00007fbaa95f5fa0 R15: 00007ffd82bda338 [ 217.852045][ T8045] [ 217.852122][ T8045] ERROR: Out of memory at tomoyo_realpath_from_path. [ 218.385320][ T5719] usbtest 1-1:6.132: couldn't get endpoints, -22 [ 218.385490][ T5719] usbtest 1-1:6.132: probe with driver usbtest failed with error -22 [ 218.399935][ T5719] usb 1-1: USB disconnect, device number 61 [ 218.459956][ T5699] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 218.614276][ T5699] usb 2-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xCE, changing to 0x8E [ 218.614312][ T5699] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 999, setting to 64 [ 218.622673][ T5699] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 218.622706][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.622725][ T5699] usb 2-1: Product: syz [ 218.622740][ T5699] usb 2-1: Manufacturer: syz [ 218.622755][ T5699] usb 2-1: SerialNumber: syz [ 218.931603][ T8051] netlink: 128 bytes leftover after parsing attributes in process `syz.1.817'. [ 219.211008][ T5699] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.211066][ T5699] usb 2-1: MIDIStreaming interface descriptor not found [ 219.392151][ T822] usb 3-1: USB disconnect, device number 31 [ 219.459635][ T5699] usb 2-1: USB disconnect, device number 31 [ 219.501767][ T8061] netlink: 'syz.2.821': attribute type 8 has an invalid length. [ 219.753888][ T8064] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 220.679803][ T8084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.828'. [ 221.044230][ T8099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.834'. [ 221.047786][ T10] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 221.203708][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 221.203761][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 221.203779][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 221.226996][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 221.227030][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.227050][ T10] usb 3-1: Product: syz [ 221.227064][ T10] usb 3-1: Manufacturer: syz [ 221.227079][ T10] usb 3-1: SerialNumber: syz [ 221.249938][ T10] usb 3-1: config 0 descriptor?? [ 221.253174][ T8087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.253527][ T8087] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 221.266579][ T10] usb 3-1: ucan: probing device on interface #0 [ 221.705912][ T10] usb 3-1: ucan: failed to retrieve device info [ 221.705936][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 221.768706][ T8117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.840'. [ 221.906392][ T5699] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 221.955047][ T8121] binder: 8120:8121 ioctl c0306201 200000000640 returned -22 [ 222.058516][ T5699] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 222.058552][ T5699] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 222.058586][ T5699] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 222.062984][ T5699] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 222.063016][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.063038][ T5699] usb 2-1: Product: syz [ 222.063053][ T5699] usb 2-1: Manufacturer: syz [ 222.063068][ T5699] usb 2-1: SerialNumber: syz [ 222.077635][ T5699] usb 2-1: config 0 descriptor?? [ 222.078383][ T8115] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 222.078515][ T8115] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 222.085368][ T5699] usb 2-1: ucan: probing device on interface #0 [ 222.234793][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 222.721063][ T8141] netlink: 'syz.0.850': attribute type 10 has an invalid length. [ 222.751296][ T5699] ucan 2-1:0.0 can0: registered device [ 222.912148][ T5699] ucan 2-1:0.0 can0: firmware string: unknown [ 222.915891][ T5699] usb 2-1: USB disconnect, device number 32 [ 223.018403][ T8141] team0: Device bond0 is up. Set it down before adding it as a team port [ 223.516308][ T5719] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 223.577286][ T8152] netlink: 'syz.1.853': attribute type 4 has an invalid length. [ 223.577310][ T8152] netlink: 1 bytes leftover after parsing attributes in process `syz.1.853'. [ 223.666401][ T5719] usb 4-1: Using ep0 maxpacket: 32 [ 223.679293][ T5719] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 223.679325][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.693058][ T5719] usb 4-1: config 0 descriptor?? [ 223.741552][ T5719] as10x_usb: device has been detected [ 223.742492][ T5719] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 223.898774][ T822] usb 3-1: USB disconnect, device number 32 [ 223.974329][ T5719] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 224.138655][ T5935] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 224.269969][ T5719] as10x_usb: error during firmware upload part1 [ 224.270375][ T5719] Registered device nBox DVB-T Dongle [ 224.274788][ T5719] usb 4-1: USB disconnect, device number 42 [ 224.306275][ T5935] usb 2-1: Using ep0 maxpacket: 16 [ 224.308783][ T5935] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.310217][ T5935] usb 2-1: config 1 has an invalid interface number: 147 but max is 0 [ 224.310241][ T5935] usb 2-1: config 1 has no interface number 0 [ 224.310270][ T5935] usb 2-1: config 1 interface 147 has no altsetting 0 [ 224.313725][ T5935] usb 2-1: New USB device found, idVendor=0ca6, idProduct=a050, bcdDevice= 2.95 [ 224.313753][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.313774][ T5935] usb 2-1: Product: syz [ 224.313790][ T5935] usb 2-1: Manufacturer: syz [ 224.313805][ T5935] usb 2-1: SerialNumber: syz [ 224.374336][ T5719] Unregistered device nBox DVB-T Dongle [ 224.401627][ T5719] as10x_usb: device has been disconnected [ 224.486336][ T10] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 224.617734][ T5935] usb 2-1: USB disconnect, device number 33 [ 224.636231][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 224.638499][ T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 224.638524][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.641965][ T10] usb 1-1: config 0 descriptor?? [ 224.898286][ T10] hid_parser_main: 3 callbacks suppressed [ 224.898313][ T10] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0 [ 224.898346][ T10] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0 [ 224.898400][ T10] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0 [ 224.898429][ T10] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0 [ 224.898458][ T10] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0 [ 224.898486][ T10] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0 [ 224.898514][ T10] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0 [ 224.898538][ T10] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0 [ 224.898564][ T10] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0 [ 224.898592][ T10] hid-u2fzero 0003:10C4:8ACF.0007: unknown main item tag 0x0 [ 224.935364][ T10] hid-u2fzero 0003:10C4:8ACF.0007: hidraw0: USB HID v7f.fc Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 225.242914][ T10] hid-u2fzero 0003:10C4:8ACF.0007: U2F Zero LED initialised [ 225.243195][ T10] hid-u2fzero 0003:10C4:8ACF.0007: U2F Zero RNG initialised [ 225.260037][ T10] usb 1-1: USB disconnect, device number 62 [ 225.329030][ T8170] loop2: detected capacity change from 0 to 7 [ 225.338690][ T1415] lo_rw_aio(loop2) starting read with raw_refcnt=0x1, refcnt=2 [ 225.339024][ T8170] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 225.339723][ T8170] loop2: p1 start 1633771873 is beyond EOD, truncated [ 225.339746][ T8170] loop2: p2 start 1633771873 is beyond EOD, truncated [ 225.339772][ T8170] loop2: p3 start 1633771873 is beyond EOD, truncated [ 225.339789][ T8170] loop2: p4 start 1633771873 is beyond EOD, truncated [ 225.339806][ T8170] loop2: p5 start 1633771873 is beyond EOD, truncated [ 225.339822][ T8170] loop2: p6 start 1633771873 is beyond EOD, truncated [ 225.339839][ T8170] loop2: p7 start 1633771873 is beyond EOD, truncated [ 225.339855][ T8170] loop2: p8 start 3516083626 is beyond EOD, truncated [ 225.339872][ T8170] loop2: p9 start 2880397792 is beyond EOD, truncated [ 225.339888][ T8170] loop2: p10 start 3904933587 is beyond EOD, truncated [ 225.339905][ T8170] loop2: p11 start 1092672393 is beyond EOD, truncated [ 225.362482][ T6224] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 225.956255][ T5935] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 226.111928][ T5935] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 226.111962][ T5935] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 226.111987][ T5935] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 226.145319][ T5935] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 226.145356][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.145377][ T5935] usb 1-1: Product: syz [ 226.145393][ T5935] usb 1-1: Manufacturer: syz [ 226.145407][ T5935] usb 1-1: SerialNumber: syz [ 226.182843][ T5935] usb 1-1: config 0 descriptor?? [ 226.185260][ T8179] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.185360][ T8179] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 226.207428][ T5935] usb 1-1: ucan: probing device on interface #0 [ 226.279014][ T8185] tipc: Enabling of bearer rejected, already enabled [ 226.602760][ T5935] usb 1-1: ucan: failed to retrieve device info [ 226.602785][ T5935] usb 1-1: ucan: probe failed; try to update the device firmware [ 226.646413][ T5699] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 226.800723][ T5699] usb 2-1: config 2 has an invalid interface number: 39 but max is 0 [ 226.800755][ T5699] usb 2-1: config 2 has no interface number 0 [ 226.800799][ T5699] usb 2-1: config 2 interface 39 altsetting 9 endpoint 0x1 has invalid maxpacket 21312, setting to 1024 [ 226.800815][ T5699] usb 2-1: config 2 interface 39 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1024 [ 226.800829][ T5699] usb 2-1: config 2 interface 39 altsetting 9 bulk endpoint 0x82 has invalid maxpacket 8 [ 226.800843][ T5699] usb 2-1: config 2 interface 39 has no altsetting 0 [ 226.802981][ T5699] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0119, bcdDevice=e4.9a [ 226.803010][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.803029][ T5699] usb 2-1: Product: syz [ 226.803038][ T5699] usb 2-1: Manufacturer: syz [ 226.803046][ T5699] usb 2-1: SerialNumber: syz [ 226.843024][ T32] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 226.866287][ T8190] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 226.866401][ T8190] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 227.046781][ T32] usb 4-1: device descriptor read/64, error -71 [ 227.107523][ T5699] kvaser_usb 2-1:2.39: error -ENODEV: Cannot get usb endpoint(s) [ 227.126265][ T5699] usb 2-1: USB disconnect, device number 34 [ 227.131373][ T8196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.871'. [ 227.306759][ T32] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 227.446213][ T32] usb 4-1: device descriptor read/64, error -71 [ 227.526271][ T10] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 227.556563][ T32] usb usb4-port1: attempt power cycle [ 227.677976][ T10] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 227.678010][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.684768][ T10] usb 3-1: config 0 descriptor?? [ 227.714095][ T10] cp210x 3-1:0.0: cp210x converter detected [ 227.906278][ T32] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 227.935808][ T10] usb 3-1: cp210x converter now attached to ttyUSB0 [ 227.941984][ T32] usb 4-1: device descriptor read/8, error -71 [ 228.196216][ T32] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 228.216875][ T32] usb 4-1: device descriptor read/8, error -71 [ 228.337845][ T32] usb usb4-port1: unable to enumerate USB device [ 228.720500][ T10] usb 1-1: USB disconnect, device number 63 [ 228.955087][ T8220] binder: 8219:8220 ioctl c0306201 200000000180 returned -14 [ 229.226275][ T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 229.276184][ T32] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 229.376199][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 229.381589][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 229.381621][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.381641][ T10] usb 2-1: Product: syz [ 229.381653][ T10] usb 2-1: Manufacturer: syz [ 229.381661][ T10] usb 2-1: SerialNumber: syz [ 229.385640][ T10] usb 2-1: config 0 descriptor?? [ 229.415051][ T10] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 229.446562][ T32] usb 1-1: Using ep0 maxpacket: 32 [ 229.448382][ T32] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 229.448409][ T32] usb 1-1: config 0 has no interface number 0 [ 229.448455][ T32] usb 1-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 229.448479][ T32] usb 1-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 229.448503][ T32] usb 1-1: config 0 interface 12 has no altsetting 0 [ 229.450731][ T32] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 229.450759][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.450781][ T32] usb 1-1: Product: syz [ 229.450796][ T32] usb 1-1: Manufacturer: syz [ 229.450811][ T32] usb 1-1: SerialNumber: syz [ 229.455702][ T32] usb 1-1: config 0 descriptor?? [ 229.543527][ T32] f81534 1-1:0.12: unsupported endpoint max packet size [ 229.723135][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.725052][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.738337][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.740363][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.814088][ T8228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.865465][ T8228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.880252][ T32] usb 1-1: USB disconnect, device number 64 [ 230.256515][ T8232] netlink: 4 bytes leftover after parsing attributes in process `syz.3.883'. [ 230.450064][ T5699] usb 3-1: USB disconnect, device number 33 [ 230.582238][ T5699] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 230.667305][ T10] usb 2-1: clie_3_5_startup: get config number failed: -71 [ 230.667471][ T10] visor 2-1:0.0: probe with driver visor failed with error -71 [ 230.694419][ T10] usb 2-1: USB disconnect, device number 35 [ 230.726882][ T5789] __loop_clr_fd(loop0) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 230.766319][ T5699] cp210x 3-1:0.0: device disconnected [ 230.973952][ T8247] netlink: 'syz.2.888': attribute type 8 has an invalid length. [ 231.016414][ T32] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 231.184880][ T32] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 231.184915][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 231.184939][ T32] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 231.224259][ T32] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 231.224290][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.224309][ T32] usb 1-1: Product: syz [ 231.224321][ T32] usb 1-1: Manufacturer: syz [ 231.224333][ T32] usb 1-1: SerialNumber: syz [ 231.261481][ T32] usb 1-1: config 0 descriptor?? [ 231.262469][ T8242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 231.262590][ T8242] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 231.289114][ T32] usb 1-1: ucan: probing device on interface #0 [ 231.682840][ T32] usb 1-1: ucan: device reported invalid device info [ 231.682865][ T32] usb 1-1: ucan: probe failed; try to update the device firmware [ 231.719753][ T8259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.893'. [ 231.719877][ T8259] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 231.860247][ T8263] netlink: 8 bytes leftover after parsing attributes in process `syz.1.895'. [ 231.906338][ T5345] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 231.948474][ T8265] loop9: detected capacity change from 0 to 7 [ 231.949088][ T8265] buffer_io_error: 14 callbacks suppressed [ 231.949105][ T8265] Buffer I/O error on dev loop9, logical block 0, async page read [ 231.949214][ T8265] Buffer I/O error on dev loop9, logical block 0, async page read [ 231.949314][ T8265] Buffer I/O error on dev loop9, logical block 0, async page read [ 231.949418][ T8265] Buffer I/O error on dev loop9, logical block 0, async page read [ 231.949529][ T8265] Buffer I/O error on dev loop9, logical block 0, async page read [ 231.949636][ T8265] Buffer I/O error on dev loop9, logical block 0, async page read [ 231.949709][ T8265] Buffer I/O error on dev loop9, logical block 0, async page read [ 231.949759][ T8265] ldm_validate_partition_table(): Disk read failed. [ 231.949793][ T8265] Buffer I/O error on dev loop9, logical block 0, async page read [ 231.949890][ T8265] Buffer I/O error on dev loop9, logical block 0, async page read [ 231.949990][ T8265] Buffer I/O error on dev loop9, logical block 0, async page read [ 231.950102][ T8265] Dev loop9: unable to read RDB block 0 [ 231.950301][ T8265] loop9: unable to read partition table [ 231.950456][ T8265] loop9: partition table beyond EOD, truncated [ 231.950477][ T8265] loop_reread_partitions: partition scan of loop9 (7x~Sj̖P@?X) failed (rc=-5) [ 231.973115][ T8066] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 232.146225][ T5345] usb 4-1: Using ep0 maxpacket: 16 [ 232.152526][ T5345] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 232.152555][ T5345] usb 4-1: config 0 has no interface number 0 [ 232.152602][ T5345] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 232.152628][ T5345] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 232.175695][ T5345] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 232.175730][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.175752][ T5345] usb 4-1: Product: syz [ 232.175766][ T5345] usb 4-1: Manufacturer: syz [ 232.175782][ T5345] usb 4-1: SerialNumber: syz [ 232.248752][ T5345] usb 4-1: config 0 descriptor?? [ 232.253362][ T8257] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 232.253466][ T8257] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 232.471423][ T8257] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 232.471660][ T8257] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 232.595429][ T8282] netlink: 20 bytes leftover after parsing attributes in process `syz.1.902'. [ 232.895483][ T5345] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 232.895753][ T5345] asix 4-1:0.34: probe with driver asix failed with error -71 [ 232.935617][ T5345] usb 4-1: USB disconnect, device number 47 [ 233.396303][ T5345] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 233.560720][ T5345] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 233.560751][ T5345] usb 4-1: config 0 has no interface number 0 [ 233.560794][ T5345] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 233.563566][ T5345] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 233.563597][ T5345] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 233.563618][ T5345] usb 4-1: Product: syz [ 233.563633][ T5345] usb 4-1: Manufacturer: syz [ 233.563648][ T5345] usb 4-1: SerialNumber: syz [ 233.628359][ T5345] usb 4-1: config 0 descriptor?? [ 233.632725][ T5345] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 233.633086][ T5345] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 233.633160][ T5345] keyspan 4-1:0.107: unsupported endpoint type 0 [ 233.635856][ T5345] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 233.676188][ T32] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 233.680225][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.1.914'. [ 233.680929][ T5345] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 233.722964][ T5345] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 233.734769][ T5345] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 233.780401][ T5345] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 233.792593][ T5699] usb 1-1: USB disconnect, device number 65 [ 233.806458][ T32] usb 3-1: device descriptor read/64, error -71 [ 233.809000][ T5345] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 233.844717][ T5345] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 233.892384][ T5345] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 233.994902][ T5345] usb 4-1: USB disconnect, device number 48 [ 234.037933][ T5345] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 234.043519][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 234.043733][ T8321] netlink: 4 bytes leftover after parsing attributes in process `syz.0.917'. [ 234.066505][ T32] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 234.135693][ T5345] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 234.190265][ T5345] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 234.196261][ T32] usb 3-1: device descriptor read/64, error -71 [ 234.229225][ T5345] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 234.232971][ T5345] keyspan 4-1:0.107: device disconnected [ 234.309194][ T32] usb usb3-port1: attempt power cycle [ 234.436309][ T5699] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 234.521317][ T8330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.922'. [ 234.590505][ T5699] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 234.590547][ T5699] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 234.590573][ T5699] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 234.596272][ T5699] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 234.596303][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.596323][ T5699] usb 2-1: Product: syz [ 234.596338][ T5699] usb 2-1: Manufacturer: syz [ 234.596352][ T5699] usb 2-1: SerialNumber: syz [ 234.609133][ T5719] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 234.625920][ T5699] usb 2-1: config 0 descriptor?? [ 234.627801][ T8323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 234.628509][ T8323] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 234.646184][ T32] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 234.663545][ T5699] usb 2-1: ucan: probing device on interface #0 [ 234.681387][ T32] usb 3-1: device descriptor read/8, error -71 [ 234.766386][ T5719] usb 1-1: Using ep0 maxpacket: 16 [ 234.772697][ T5719] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 234.772725][ T5719] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 234.774877][ T5719] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice=4f.14 [ 234.774896][ T5719] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.774908][ T5719] usb 1-1: Product: syz [ 234.774916][ T5719] usb 1-1: Manufacturer: syz [ 234.774964][ T5719] usb 1-1: SerialNumber: syz [ 234.793677][ T5719] usb 1-1: config 0 descriptor?? [ 234.840956][ T8327] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 234.916618][ T32] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 234.936938][ T32] usb 3-1: device descriptor read/8, error -71 [ 235.048696][ T32] usb usb3-port1: unable to enumerate USB device [ 235.063462][ T5719] usb 1-1: USB disconnect, device number 66 [ 235.081193][ T5699] usb 2-1: ucan: failed to retrieve device info [ 235.081210][ T5699] usb 2-1: ucan: probe failed; try to update the device firmware [ 235.364684][ T8345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.928'. [ 235.365629][ T8345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.928'. [ 235.630863][ T8355] netlink: 'syz.3.933': attribute type 10 has an invalid length. [ 235.631221][ T8355] team0: Device bond0 is up. Set it down before adding it as a team port [ 235.735819][ T8359] cgroup2: Unknown parameter 'obj_user' [ 235.742407][ T8359] omfs: Invalid superblock (0) [ 235.798776][ T8361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.936'. [ 236.190612][ T5628] Bluetooth: hci2: unexpected event for opcode 0x4889 [ 236.907693][ T8384] program syz.2.945 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 237.179063][ T5719] usb 2-1: USB disconnect, device number 36 [ 237.262851][ T8392] loop2: detected capacity change from 0 to 7 [ 237.266048][ T1415] lo_rw_aio(loop2) starting read with raw_refcnt=0x1, refcnt=2 [ 237.281059][ T8392] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 237.281326][ T8392] loop2: p1 start 1633771873 is beyond EOD, truncated [ 237.281349][ T8392] loop2: p2 start 1633771873 is beyond EOD, truncated [ 237.281364][ T8392] loop2: p3 start 1633771873 is beyond EOD, truncated [ 237.281380][ T8392] loop2: p4 start 1633771873 is beyond EOD, truncated [ 237.281395][ T8392] loop2: p5 start 1633771873 is beyond EOD, truncated [ 237.281411][ T8392] loop2: p6 start 1633771873 is beyond EOD, truncated [ 237.281428][ T8392] loop2: p7 start 1633771873 is beyond EOD, truncated [ 237.281443][ T8392] loop2: p8 start 3516083626 is beyond EOD, truncated [ 237.281458][ T8392] loop2: p9 start 2880397792 is beyond EOD, truncated [ 237.281473][ T8392] loop2: p10 start 3904933587 is beyond EOD, truncated [ 237.281489][ T8392] loop2: p11 start 1092672393 is beyond EOD, truncated [ 237.345236][ T9] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 237.407451][ T8066] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 237.505022][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 237.505054][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.505074][ T9] usb 3-1: Product: syz [ 237.505090][ T9] usb 3-1: Manufacturer: syz [ 237.505104][ T9] usb 3-1: SerialNumber: syz [ 237.539066][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.0.951'. [ 237.553550][ T9] usb 3-1: config 0 descriptor?? [ 237.801861][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 238.045096][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 238.069744][ T9] usb 3-1: USB disconnect, device number 38 [ 238.197480][ T5699] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 238.239184][ T8418] input: syz1 as /devices/virtual/input/input22 [ 238.348776][ T5699] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 238.348811][ T5699] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 238.348837][ T5699] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 238.354321][ T5699] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 238.354355][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.354377][ T5699] usb 1-1: Product: syz [ 238.354392][ T5699] usb 1-1: Manufacturer: syz [ 238.354408][ T5699] usb 1-1: SerialNumber: syz [ 238.483468][ T5699] usb 1-1: config 0 descriptor?? [ 238.485223][ T8411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.488327][ T8411] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 238.522614][ T5699] usb 1-1: ucan: probing device on interface #0 [ 238.713342][ T32] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 238.827982][ T8434] tipc: Enabling of bearer rejected, already enabled [ 238.925604][ T5699] usb 1-1: ucan: failed to retrieve device info [ 238.925629][ T5699] usb 1-1: ucan: probe failed; try to update the device firmware [ 239.841881][ T8475] netlink: 'syz.2.974': attribute type 3 has an invalid length. [ 239.859344][ T32] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 240.018282][ T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 240.018318][ T32] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 240.018333][ T32] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 240.020605][ T32] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 240.020634][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.020655][ T32] usb 4-1: Product: syz [ 240.020669][ T32] usb 4-1: Manufacturer: syz [ 240.020678][ T32] usb 4-1: SerialNumber: syz [ 240.024655][ T32] usb 4-1: config 0 descriptor?? [ 240.025932][ T8460] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.026050][ T8460] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 240.029024][ T32] usb 4-1: ucan: probing device on interface #0 [ 240.096052][ T9] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 240.247214][ T9] usb 3-1: device descriptor read/64, error -71 [ 240.422731][ T8485] netlink: 14 bytes leftover after parsing attributes in process `syz.1.975'. [ 240.453020][ T32] usb 4-1: ucan: device reported invalid device info [ 240.453036][ T32] usb 4-1: ucan: probe failed; try to update the device firmware [ 240.488521][ T9] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 240.616253][ T9] usb 3-1: device descriptor read/64, error -71 [ 240.727570][ T9] usb usb3-port1: attempt power cycle [ 240.910355][ T8499] ieee802154 phy0 wpan0: encryption failed: -22 [ 240.911036][ T5699] usb 1-1: USB disconnect, device number 67 [ 241.066387][ T9] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 241.087163][ T9] usb 3-1: device descriptor read/8, error -71 [ 241.279520][ T8509] binder: 8508:8509 ioctl c0189372 200000000180 returned -22 [ 241.328766][ T9] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 241.347483][ T9] usb 3-1: device descriptor read/8, error -71 [ 241.399425][ T8513] binder: 8512:8513 ioctl c0306201 200000000180 returned -14 [ 241.456891][ T9] usb usb3-port1: unable to enumerate USB device [ 241.776316][ T32] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 241.929087][ T32] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 241.929122][ T32] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 241.929149][ T32] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 241.931352][ T32] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 241.931381][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.931402][ T32] usb 1-1: Product: syz [ 241.931417][ T32] usb 1-1: Manufacturer: syz [ 241.931430][ T32] usb 1-1: SerialNumber: syz [ 241.935803][ T32] usb 1-1: config 0 descriptor?? [ 241.959178][ T8519] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 241.959302][ T8519] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 241.969180][ T32] usb 1-1: ucan: probing device on interface #0 [ 242.063011][ T8528] loop2: detected capacity change from 0 to 7 [ 242.063940][ T13] lo_rw_aio(loop2) starting read with raw_refcnt=0x1, refcnt=2 [ 242.064145][ T8528] Dev loop2: unable to read RDB block 7 [ 242.064170][ T8528] loop2: AHDI p1 p2 [ 242.064195][ T8528] loop2: partition table partially beyond EOD, truncated [ 242.076451][ T8528] loop2: p1 size 150995456 extends beyond EOD, truncated [ 242.118726][ T5789] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 242.153075][ T6224] udevd[6224]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 242.396989][ T32] usb 1-1: ucan: failed to retrieve device info [ 242.397013][ T32] usb 1-1: ucan: probe failed; try to update the device firmware [ 242.511330][ T5699] usb 4-1: USB disconnect, device number 50 [ 242.563356][ T8533] 9pnet_fd: Insufficient options for proto=fd [ 242.802550][ T8540] netlink: 'syz.1.998': attribute type 8 has an invalid length. [ 243.008970][ T5345] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 243.168731][ T5345] usb 4-1: unable to get BOS descriptor or descriptor too short [ 243.169950][ T5345] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 243.172320][ T5345] usb 4-1: New USB device found, idVendor=4644, idProduct=800f, bcdDevice= 0.40 [ 243.172349][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.172369][ T5345] usb 4-1: Product: syz [ 243.172384][ T5345] usb 4-1: Manufacturer: syz [ 243.172399][ T5345] usb 4-1: SerialNumber: syz [ 243.396308][ T32] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 243.424990][ T5345] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 243.425026][ T5345] usb 4-1: MIDIStreaming interface descriptor not found [ 243.521391][ T5345] usb 4-1: USB disconnect, device number 51 [ 243.573592][ T32] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.573612][ T32] usb 3-1: config 0 has no interfaces? [ 243.573631][ T32] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 243.573644][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.585525][ T8067] udevd[8067]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.617104][ T32] usb 3-1: config 0 descriptor?? [ 243.622304][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 243.766220][ T9] usb 2-1: device descriptor read/64, error -71 [ 244.006593][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 244.146339][ T9] usb 2-1: device descriptor read/64, error -71 [ 244.256692][ T9] usb usb2-port1: attempt power cycle [ 244.540125][ T822] usb 1-1: USB disconnect, device number 68 [ 244.607124][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 244.616646][ T5345] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 244.636972][ T9] usb 2-1: device descriptor read/8, error -71 [ 244.768010][ T5345] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 244.768045][ T5345] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 244.768068][ T5345] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 244.770368][ T5345] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 244.770399][ T5345] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.770420][ T5345] usb 4-1: Product: syz [ 244.770434][ T5345] usb 4-1: Manufacturer: syz [ 244.770442][ T5345] usb 4-1: SerialNumber: syz [ 244.774260][ T5345] usb 4-1: config 0 descriptor?? [ 244.784195][ T8562] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 244.784285][ T8562] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 244.861478][ T5345] usb 4-1: ucan: probing device on interface #0 [ 244.916208][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 244.937900][ T9] usb 2-1: device descriptor read/8, error -71 [ 245.046769][ T9] usb usb2-port1: unable to enumerate USB device [ 245.212597][ T5345] usb 4-1: ucan: device reported invalid device info [ 245.212614][ T5345] usb 4-1: ucan: probe failed; try to update the device firmware [ 245.483958][ T8568] loop9: detected capacity change from 0 to 7 [ 245.495554][ T8568] buffer_io_error: 14 callbacks suppressed [ 245.495573][ T8568] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.495677][ T8568] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.495774][ T8568] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.495868][ T8568] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.495997][ T8568] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.497336][ T8568] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.497544][ T8568] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.497611][ T8568] ldm_validate_partition_table(): Disk read failed. [ 245.497655][ T8568] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.497749][ T8568] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.497844][ T8568] Buffer I/O error on dev loop9, logical block 0, async page read [ 245.497997][ T8568] Dev loop9: unable to read RDB block 0 [ 245.498254][ T8568] loop9: unable to read partition table [ 245.498463][ T8568] loop9: partition table beyond EOD, truncated [ 245.500241][ T8568] loop_reread_partitions: partition scan of loop9 (7x~Sj̖P@?X) failed (rc=-5) [ 245.604929][ T8066] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 245.866251][ T5345] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 245.956541][ T10] usb 3-1: USB disconnect, device number 43 [ 246.016206][ T5345] usb 1-1: Using ep0 maxpacket: 32 [ 246.021670][ T5345] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 246.021703][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.021721][ T5345] usb 1-1: Product: syz [ 246.021732][ T5345] usb 1-1: Manufacturer: syz [ 246.021740][ T5345] usb 1-1: SerialNumber: syz [ 246.031875][ T5345] usb 1-1: config 0 descriptor?? [ 246.504953][ T5345] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 246.504995][ T5345] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 246.546054][ T8569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 246.786981][ T5345] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 246.796224][ T5345] usb 1-1: USB disconnect, device number 69 [ 246.926260][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 247.101094][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 247.101128][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 247.101156][ T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 247.106860][ T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 247.106894][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.106914][ T10] usb 2-1: Product: syz [ 247.106928][ T10] usb 2-1: Manufacturer: syz [ 247.106943][ T10] usb 2-1: SerialNumber: syz [ 247.120954][ T10] usb 2-1: config 0 descriptor?? [ 247.123679][ T8586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 247.123971][ T8586] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 247.134042][ T10] usb 2-1: ucan: probing device on interface #0 [ 247.450985][ T822] usb 4-1: USB disconnect, device number 52 [ 247.542238][ T10] usb 2-1: ucan: failed to retrieve device info [ 247.542263][ T10] usb 2-1: ucan: probe failed; try to update the device firmware [ 247.575237][ T8599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 247.639595][ T8601] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1019'. [ 247.646889][ T5345] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 247.753905][ T8605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1021'. [ 247.807661][ T5345] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 247.807686][ T5345] usb 1-1: config 0 has no interfaces? [ 247.807716][ T5345] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 247.807733][ T5345] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.830498][ T5345] usb 1-1: config 0 descriptor?? [ 247.879898][ T5935] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 248.026448][ T5935] usb 3-1: Using ep0 maxpacket: 16 [ 248.028672][ T5935] usb 3-1: unable to get BOS descriptor or descriptor too short [ 248.029807][ T5935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.029831][ T5935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 248.029880][ T5935] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.029904][ T5935] usb 3-1: No eUSB2 isoc ep 129 companion for config 1 interface 0 altsetting 0 [ 248.032810][ T5935] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 248.032838][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.032855][ T5935] usb 3-1: Product: syz [ 248.032863][ T5935] usb 3-1: Manufacturer: syz [ 248.032871][ T5935] usb 3-1: SerialNumber: syz [ 248.335805][ T5935] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 248.335854][ T5935] cdc_ncm 3-1:1.0: bind() failure [ 248.389151][ T5935] usb 3-1: USB disconnect, device number 44 [ 248.549211][ T5345] usb 1-1: USB disconnect, device number 70 [ 248.786404][ T5935] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 248.919412][ T5935] usb 3-1: device descriptor read/64, error -71 [ 248.956243][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 248.966241][ T5345] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 249.116269][ T5345] usb 1-1: Using ep0 maxpacket: 8 [ 249.119025][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 249.119059][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 249.119086][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 249.119305][ T5345] usb 1-1: config 6 has an invalid interface number: 213 but max is 1 [ 249.119326][ T5345] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 249.119343][ T5345] usb 1-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 249.119363][ T5345] usb 1-1: config 6 has no interface number 0 [ 249.119405][ T5345] usb 1-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 249.119539][ T5345] usb 1-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 249.119557][ T5345] usb 1-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 249.119583][ T5345] usb 1-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 249.147155][ T5345] usb 1-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 249.147189][ T5345] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 249.147210][ T5345] usb 1-1: Manufacturer: syz [ 249.147224][ T5345] usb 1-1: SerialNumber: syz [ 249.148153][ T9] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 249.148179][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.148199][ T9] usb 4-1: Product: syz [ 249.148214][ T9] usb 4-1: Manufacturer: syz [ 249.148229][ T9] usb 4-1: SerialNumber: syz [ 249.156679][ T5935] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 249.292416][ T5935] usb 3-1: device descriptor read/64, error -71 [ 249.318901][ T9] usb 4-1: config 0 descriptor?? [ 249.320893][ T8617] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 249.321077][ T8617] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 249.344480][ T9] usb 4-1: ucan: probing device on interface #0 [ 249.397816][ T5935] usb usb3-port1: attempt power cycle [ 249.527576][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.529285][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.538201][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.539129][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.541327][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.542186][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.544240][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.545061][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.549985][ T8615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.550933][ T8615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.618556][ T5345] em28xx 1-1:6.213: New device syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 249.618683][ T5345] em28xx 1-1:6.213: Audio interface 213 found (Vendor Class) [ 249.676788][ T10] usb 2-1: USB disconnect, device number 41 [ 249.731208][ T9] usb 4-1: ucan: device reported invalid device info [ 249.731234][ T9] usb 4-1: ucan: probe failed; try to update the device firmware [ 249.738529][ T5345] em28xx 1-1:6.213: unknown em28xx chip ID (0) [ 249.739030][ T5345] em28xx 1-1:6.213: Config register raw data: 0xfffffffb [ 249.739443][ T5345] em28xx 1-1:6.213: AC97 chip type couldn't be determined [ 249.739460][ T5345] em28xx 1-1:6.213: No AC97 audio processor [ 249.746841][ T5935] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 249.767104][ T5935] usb 3-1: device descriptor read/8, error -71 [ 249.833426][ T5345] usb 1-1: USB disconnect, device number 71 [ 249.846453][ T5345] em28xx 1-1:6.213: Disconnecting em28xx [ 249.975793][ T822] usb 4-1: USB disconnect, device number 53 [ 250.006282][ T5935] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 250.030736][ T5935] usb 3-1: device descriptor read/8, error -71 [ 250.066013][ T5345] em28xx 1-1:6.213: Freeing device [ 250.136470][ T5935] usb usb3-port1: unable to enumerate USB device [ 250.466272][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 250.627080][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 250.641376][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 250.644682][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 250.644713][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.644733][ T10] usb 2-1: Product: syz [ 250.644749][ T10] usb 2-1: Manufacturer: syz [ 250.644764][ T10] usb 2-1: SerialNumber: syz [ 250.736281][ T10] usb 2-1: config 0 descriptor?? [ 250.745156][ T10] smsc95xx 2-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 250.745434][ T10] smsc95xx 2-1:0.0: probe with driver smsc95xx failed with error -22 [ 250.842992][ T8649] netlink: 'syz.2.1038': attribute type 10 has an invalid length. [ 250.843133][ T8649] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.859897][ T8649] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.902205][ T8652] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.1038'. [ 250.902347][ T8652] netlink: 4268 bytes leftover after parsing attributes in process `syz.2.1038'. [ 250.913433][ T8649] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 250.944520][ T5345] usb 2-1: USB disconnect, device number 42 [ 251.047245][ T822] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 251.199251][ T822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.199281][ T822] usb 4-1: config 0 has no interfaces? [ 251.199311][ T822] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 251.199334][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.205208][ T822] usb 4-1: config 0 descriptor?? [ 251.327379][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 251.490038][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 251.490062][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 251.490077][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 251.493486][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 251.493518][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.493538][ T10] usb 3-1: Product: syz [ 251.493547][ T10] usb 3-1: Manufacturer: syz [ 251.493555][ T10] usb 3-1: SerialNumber: syz [ 251.503695][ T10] usb 3-1: config 0 descriptor?? [ 251.546748][ T8658] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.546942][ T8658] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 251.552314][ T10] usb 3-1: ucan: probing device on interface #0 [ 251.952265][ T10] usb 3-1: ucan: device reported invalid device info [ 251.952292][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 252.156491][ T5345] usb 3-1: USB disconnect, device number 49 [ 253.107217][ T5345] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 253.259345][ T5345] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 253.259382][ T5345] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 253.259409][ T5345] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 253.262377][ T5345] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 253.262409][ T5345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.262431][ T5345] usb 2-1: Product: syz [ 253.262445][ T5345] usb 2-1: Manufacturer: syz [ 253.262461][ T5345] usb 2-1: SerialNumber: syz [ 253.343490][ T5345] usb 2-1: config 0 descriptor?? [ 253.345014][ T8724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.345147][ T8724] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 253.369072][ T5345] usb 2-1: ucan: probing device on interface #0 [ 253.567539][ T10] usb 4-1: USB disconnect, device number 54 [ 253.775309][ T5345] usb 2-1: ucan: device reported invalid device info [ 253.775333][ T5345] usb 2-1: ucan: probe failed; try to update the device firmware [ 253.857737][ T5935] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 254.022207][ T5935] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 254.022242][ T5935] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 254.022267][ T5935] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 254.022695][ T8776] binder: 8774:8776 ioctl c0306201 200000000180 returned -14 [ 254.025592][ T5935] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 254.025623][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.025644][ T5935] usb 3-1: Product: syz [ 254.025660][ T5935] usb 3-1: Manufacturer: syz [ 254.025675][ T5935] usb 3-1: SerialNumber: syz [ 254.109820][ T5935] usb 3-1: config 0 descriptor?? [ 254.110601][ T8758] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 254.110720][ T8758] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 254.136768][ T5935] usb 3-1: ucan: probing device on interface #0 [ 254.518791][ T5935] usb 3-1: ucan: failed to retrieve device info [ 254.518816][ T5935] usb 3-1: ucan: probe failed; try to update the device firmware [ 254.543240][ T5935] usb 3-1: USB disconnect, device number 50 [ 255.672931][ T1335] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.672989][ T1335] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.877668][ T10] usb 2-1: USB disconnect, device number 43 [ 256.226793][ T5935] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 256.298669][ T8803] netlink: 'syz.2.1109': attribute type 8 has an invalid length. [ 256.416220][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 256.419681][ T5935] usb 4-1: unable to get BOS descriptor or descriptor too short [ 256.421581][ T5935] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 256.424645][ T5935] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 256.424672][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.424692][ T5935] usb 4-1: Product: syz [ 256.424706][ T5935] usb 4-1: Manufacturer: syz [ 256.424722][ T5935] usb 4-1: SerialNumber: syz [ 256.436230][ T822] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 256.541724][ T8813] FAULT_INJECTION: forcing a failure. [ 256.541724][ T8813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 256.541752][ T8813] CPU: 0 UID: 0 PID: 8813 Comm: syz.0.1114 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 256.541776][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 256.541803][ T8813] Call Trace: [ 256.541812][ T8813] [ 256.541820][ T8813] dump_stack_lvl+0xe8/0x150 [ 256.541850][ T8813] should_fail_ex+0x46b/0x600 [ 256.541873][ T8813] _copy_to_user+0x31/0xb0 [ 256.541895][ T8813] simple_read_from_buffer+0xe1/0x170 [ 256.541914][ T8813] proc_fail_nth_read+0x1be/0x230 [ 256.541962][ T8813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.541991][ T8813] ? rw_verify_area+0x2ac/0x4e0 [ 256.542018][ T8813] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 256.542039][ T8813] vfs_read+0x212/0xa80 [ 256.542058][ T8813] ? __pfx_vfs_read+0x10/0x10 [ 256.542075][ T8813] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 256.542105][ T8813] ? lockdep_hardirqs_on+0x7a/0x110 [ 256.542135][ T8813] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 256.542165][ T8813] ? mutex_lock_nested+0x152/0x1d0 [ 256.542188][ T8813] ? fdget_pos+0x252/0x320 [ 256.542209][ T8813] ksys_read+0x156/0x270 [ 256.542226][ T8813] ? __pfx_ksys_read+0x10/0x10 [ 256.542241][ T8813] ? __pfx_binder_ioctl+0x10/0x10 [ 256.542274][ T8813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.542297][ T8813] do_syscall_64+0x15f/0xf80 [ 256.542318][ T8813] ? clear_bhb_loop+0x40/0x90 [ 256.542342][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.542362][ T8813] RIP: 0033:0x7f237796d68e [ 256.542374][ T8813] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 256.542385][ T8813] RSP: 002b:00007f2375c05fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.542399][ T8813] RAX: ffffffffffffffda RBX: 00007f2375c066c0 RCX: 00007f237796d68e [ 256.542407][ T8813] RDX: 000000000000000f RSI: 00007f2375c060a0 RDI: 0000000000000006 [ 256.542420][ T8813] RBP: 00007f2375c06090 R08: 0000000000000000 R09: 0000000000000000 [ 256.542433][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.542446][ T8813] R13: 00007f2377c26038 R14: 00007f2377c25fa0 R15: 00007fffe0240418 [ 256.542478][ T8813] [ 256.812560][ T5935] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 256.813039][ T5935] usb 4-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 256.813097][ T5935] usb 4-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 256.836205][ T822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.836236][ T822] usb 2-1: config 0 has no interfaces? [ 256.836267][ T822] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 256.836291][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.879551][ T5765] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 256.884880][ T8825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1120'. [ 256.888136][ T8825] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1120'. [ 256.892858][ T8825] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1120'. [ 256.928397][ T822] usb 2-1: config 0 descriptor?? [ 257.001678][ T5935] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 257.029798][ T5935] usb 4-1: USB disconnect, device number 55 [ 257.048183][ T8066] udevd[8066]: setting mode of /dev/bus/usb/004/055 to 020664 failed: No such file or directory [ 257.048326][ T8066] udevd[8066]: setting owner of /dev/bus/usb/004/055 to uid=0, gid=0 failed: No such file or directory [ 257.079635][ T5765] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 257.079668][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 257.079695][ T5765] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 257.085096][ T5765] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 257.085128][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.085147][ T5765] usb 3-1: Product: syz [ 257.085162][ T5765] usb 3-1: Manufacturer: syz [ 257.085177][ T5765] usb 3-1: SerialNumber: syz [ 257.095381][ T8066] udevd[8066]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.173955][ T5765] usb 3-1: config 0 descriptor?? [ 257.175234][ T8807] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 257.175352][ T8807] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 257.198052][ T5765] usb 3-1: ucan: probing device on interface #0 [ 257.434410][ T8841] loop9: detected capacity change from 0 to 7 [ 257.434962][ T8841] buffer_io_error: 14 callbacks suppressed [ 257.434977][ T8841] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.435905][ T8841] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.435993][ T8841] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.437793][ T8841] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.437932][ T8841] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.438060][ T8841] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.438157][ T8841] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.438223][ T8841] ldm_validate_partition_table(): Disk read failed. [ 257.438268][ T8841] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.438362][ T8841] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.438457][ T8841] Buffer I/O error on dev loop9, logical block 0, async page read [ 257.438604][ T8841] Dev loop9: unable to read RDB block 0 [ 257.438887][ T8841] loop9: unable to read partition table [ 257.466553][ T8841] loop9: partition table beyond EOD, truncated [ 257.466595][ T8841] loop_reread_partitions: partition scan of loop9 (7x~Sj̖P@?X) failed (rc=-5) [ 257.527847][ T6224] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 257.750207][ T8848] netlink: 'syz.3.1130': attribute type 10 has an invalid length. [ 257.750231][ T8848] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1130'. [ 257.819658][ T5765] ucan 3-1:0.0 can0: registered device [ 258.004305][ T5765] ucan 3-1:0.0 can0: firmware string: D6Ivb-+N~e[r^ vӇ2,c I˂@䂉huD$zF Lc [ 258.209132][ T10] usb 3-1: USB disconnect, device number 51 [ 258.608767][ T8879] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1141'. [ 258.904536][ T8889] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1142'. [ 258.974078][ T822] usb 2-1: USB disconnect, device number 44 [ 259.133198][ T8895] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 259.133226][ T8895] CIFS mount error: No usable UNC path provided in device string! [ 259.133226][ T8895] [ 259.133458][ T8895] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 259.148097][ T8895] dlm: non-version read from control device 0 [ 259.369938][ T10] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 259.539561][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 259.539701][ T10] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 259.539730][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 259.560553][ T10] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 259.560585][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.560604][ T10] usb 3-1: Product: syz [ 259.560619][ T10] usb 3-1: Manufacturer: syz [ 259.560634][ T10] usb 3-1: SerialNumber: syz [ 259.619397][ T10] usb 3-1: config 0 descriptor?? [ 259.620482][ T8897] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.620601][ T8897] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 259.646633][ T10] usb 3-1: ucan: probing device on interface #0 [ 259.851646][ T10] usb 3-1: ucan: could not read protocol version, ret=0 [ 259.851673][ T10] usb 3-1: ucan: probe failed; try to update the device firmware [ 260.068627][ T5935] usb 3-1: USB disconnect, device number 52 [ 261.073657][ T8972] netlink: 'syz.3.1165': attribute type 10 has an invalid length. [ 261.073784][ T8972] team0: Device bond0 is up. Set it down before adding it as a team port [ 261.313705][ T5935] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 261.433812][ T8992] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1180'. [ 261.471048][ T5935] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.471174][ T5935] usb 3-1: config 0 has no interfaces? [ 261.471207][ T5935] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 261.471232][ T5935] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.492082][ T5935] usb 3-1: config 0 descriptor?? [ 261.658200][ T9002] loop2: detected capacity change from 0 to 7 [ 261.658903][ T1418] lo_rw_aio(loop2) starting read with raw_refcnt=0x1, refcnt=2 [ 261.659086][ T9002] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 261.659302][ T9002] loop2: p1 start 1633771873 is beyond EOD, truncated [ 261.659324][ T9002] loop2: p2 start 1633771873 is beyond EOD, truncated [ 261.659341][ T9002] loop2: p3 start 1633771873 is beyond EOD, truncated [ 261.659357][ T9002] loop2: p4 start 1633771873 is beyond EOD, truncated [ 261.659372][ T9002] loop2: p5 start 1633771873 is beyond EOD, truncated [ 261.659387][ T9002] loop2: p6 start 1633771873 is beyond EOD, truncated [ 261.659404][ T9002] loop2: p7 start 1633771873 is beyond EOD, truncated [ 261.659421][ T9002] loop2: p8 start 3516083626 is beyond EOD, truncated [ 261.659446][ T9002] loop2: p9 start 2880397792 is beyond EOD, truncated [ 261.659463][ T9002] loop2: p10 start 3904933587 is beyond EOD, truncated [ 261.659480][ T9002] loop2: p11 start 1092672393 is beyond EOD, truncated [ 261.662115][ T9000] __loop_clr_fd(loop2) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 262.128347][ T10] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 262.278554][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 262.278588][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 262.278614][ T10] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 262.282187][ T10] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 262.282219][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.282241][ T10] usb 4-1: Product: syz [ 262.282256][ T10] usb 4-1: Manufacturer: syz [ 262.282271][ T10] usb 4-1: SerialNumber: syz [ 262.361078][ T10] usb 4-1: config 0 descriptor?? [ 262.367713][ T9013] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 262.367834][ T9013] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 262.389262][ T10] usb 4-1: ucan: probing device on interface #0 [ 262.542452][ T9043] bridge0: port 3(erspan0) entered blocking state [ 262.544378][ T9043] bridge0: port 3(erspan0) entered disabled state [ 262.545126][ T9043] erspan0: entered allmulticast mode [ 262.564786][ T9043] erspan0: entered promiscuous mode [ 262.602462][ T9043] bridge0: port 3(erspan0) entered blocking state [ 262.602648][ T9043] bridge0: port 3(erspan0) entered forwarding state [ 263.033410][ T10] ucan 4-1:0.0 can0: registered device [ 263.191056][ T10] ucan 4-1:0.0 can0: firmware string: unknown [ 263.213006][ T10] usb 4-1: USB disconnect, device number 56 [ 263.740808][ T10] usb 3-1: USB disconnect, device number 53 [ 264.305891][ T9130] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1242'. [ 264.696689][ T5935] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 264.846260][ T5935] usb 4-1: Using ep0 maxpacket: 32 [ 264.848825][ T5935] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 264.848853][ T5935] usb 4-1: config 0 has no interface number 0 [ 264.852259][ T5935] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 264.852290][ T5935] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.852311][ T5935] usb 4-1: Product: syz [ 264.852326][ T5935] usb 4-1: Manufacturer: syz [ 264.852341][ T5935] usb 4-1: SerialNumber: syz [ 264.919187][ T5935] usb 4-1: config 0 descriptor?? [ 265.328810][ T5935] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -61 [ 265.328844][ T5935] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 265.529984][ T5935] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 265.531746][ T5935] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 265.565558][ T5935] usb 4-1: USB disconnect, device number 57 [ 266.147872][ T5935] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 266.296254][ T5935] usb 3-1: Using ep0 maxpacket: 32 [ 266.299421][ T5935] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 266.299452][ T5935] usb 3-1: config 0 has no interface number 0 [ 266.299498][ T5935] usb 3-1: config 0 interface 12 has no altsetting 0 [ 266.304313][ T5935] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 266.304344][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.304364][ T5935] usb 3-1: Product: syz [ 266.304379][ T5935] usb 3-1: Manufacturer: syz [ 266.304393][ T5935] usb 3-1: SerialNumber: syz [ 266.372511][ T5935] usb 3-1: config 0 descriptor?? [ 266.667136][ T5935] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 266.667186][ T5935] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 266.667201][ T5935] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 266.667273][ T5935] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 266.743335][ T5935] usb 3-1: USB disconnect, device number 54 [ 267.720528][ T9221] netlink: 'syz.3.1286': attribute type 2 has an invalid length. [ 268.354397][ T9318] FAULT_INJECTION: forcing a failure. [ 268.354397][ T9318] name failslab, interval 1, probability 0, space 0, times 0 [ 268.354432][ T9318] CPU: 1 UID: 0 PID: 9318 Comm: syz.0.1325 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 268.354456][ T9318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 268.354467][ T9318] Call Trace: [ 268.354474][ T9318] [ 268.354483][ T9318] dump_stack_lvl+0xe8/0x150 [ 268.354512][ T9318] should_fail_ex+0x46b/0x600 [ 268.354543][ T9318] should_failslab+0xa8/0x100 [ 268.354573][ T9318] __kmalloc_noprof+0xdf/0x7b0 [ 268.354599][ T9318] ? kfree+0x4d/0x6c0 [ 268.354621][ T9318] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.354657][ T9318] tomoyo_realpath_from_path+0xe3/0x5d0 [ 268.354688][ T9318] ? tomoyo_domain+0xd7/0x130 [ 268.354714][ T9318] ? tomoyo_path_number_perm+0x219/0x630 [ 268.354740][ T9318] tomoyo_path_number_perm+0x246/0x630 [ 268.354769][ T9318] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 268.354793][ T9318] ? __lock_acquire+0x6b5/0x2d10 [ 268.354824][ T9318] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.354882][ T9318] ? __fget_files+0x2a/0x420 [ 268.354909][ T9318] ? __fget_files+0x2a/0x420 [ 268.354930][ T9318] ? __fget_files+0x3a6/0x420 [ 268.354952][ T9318] ? __fget_files+0x2a/0x420 [ 268.354982][ T9318] security_file_ioctl+0xc3/0x2a0 [ 268.355010][ T9318] __se_sys_ioctl+0x47/0x170 [ 268.355039][ T9318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.355060][ T9318] do_syscall_64+0x15f/0xf80 [ 268.355079][ T9318] ? trace_irq_disable+0x3b/0x140 [ 268.355107][ T9318] ? clear_bhb_loop+0x40/0x90 [ 268.355131][ T9318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.355152][ T9318] RIP: 0033:0x7f23779ace59 [ 268.355170][ T9318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 268.355187][ T9318] RSP: 002b:00007f2375bc4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 268.355208][ T9318] RAX: ffffffffffffffda RBX: 00007f2377c26180 RCX: 00007f23779ace59 [ 268.355223][ T9318] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007 [ 268.355236][ T9318] RBP: 00007f2375bc4090 R08: 0000000000000000 R09: 0000000000000000 [ 268.355249][ T9318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 268.355261][ T9318] R13: 00007f2377c26218 R14: 00007f2377c26180 R15: 00007fffe0240418 [ 268.355292][ T9318] [ 268.397703][ T9313] netlink: 'syz.3.1326': attribute type 39 has an invalid length. [ 268.420929][ T9318] ERROR: Out of memory at tomoyo_realpath_from_path. [ 268.536204][ T5935] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 268.711833][ T5935] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 268.711868][ T5935] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.760526][ T5935] usb 2-1: config 0 descriptor?? [ 268.775028][ T5935] cp210x 2-1:0.0: cp210x converter detected [ 268.962742][ T5935] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 268.962774][ T5935] cp210x 2-1:0.0: querying part number failed [ 268.990679][ T5935] usb 2-1: cp210x converter now attached to ttyUSB0 [ 269.104734][ T38] audit: type=1800 audit(1779015538.587:5): pid=9326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.3.1330" name="/" dev="sockfs" ino=26175 res=0 errno=0 [ 269.170203][ T9316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.172382][ T9316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.174583][ T5935] usb 2-1: USB disconnect, device number 45 [ 269.243041][ T5935] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 269.243850][ T5935] cp210x 2-1:0.0: device disconnected [ 269.534634][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.534651][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.534745][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.534753][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.534844][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.534853][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.534954][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.534963][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.535057][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.535074][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.535180][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.535189][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.535282][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.535290][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.535394][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.535402][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.535495][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.535503][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.535596][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.535604][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.535698][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.535706][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.535808][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.535816][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.577390][ T9349] binder_alloc: binder_alloc_mmap_handler: 9348 200000ffd000-200001000000 already mapped failed -16 [ 269.577790][ T9349] binder_alloc: binder_alloc_mmap_handler: 9348 200000ffd000-200001000000 already mapped failed -16 [ 269.577954][ T9349] binder_alloc: binder_alloc_mmap_handler: 9348 200000ffd000-200001000000 already mapped failed -16 [ 269.578107][ T9349] binder_alloc: binder_alloc_mmap_handler: 9348 200000ffd000-200001000000 already mapped failed -16 [ 269.581727][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.581739][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.581843][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.581851][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.581964][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.581973][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.582061][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.582069][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.582158][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.582167][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.582255][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.582263][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.582361][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.582370][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.582458][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.582466][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.582554][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.582570][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.582655][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.582663][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.582756][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.582765][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.582853][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.582862][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.582950][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.582958][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.583047][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.583055][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.591137][ T9349] binder_alloc: binder_alloc_mmap_handler: 9348 200000ffd000-200001000000 already mapped failed -16 [ 269.597992][ T9350] binder: BINDER_SET_CONTEXT_MGR already set [ 269.598005][ T9350] binder: 9348:9350 ioctl 4018620d 200000004a80 returned -16 [ 269.747771][ T5765] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 269.989153][ T5765] usb 1-1: Using ep0 maxpacket: 16 [ 269.992259][ T5765] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.992310][ T5765] usb 1-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00 [ 269.992334][ T5765] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.042512][ T5765] usb 1-1: config 0 descriptor?? [ 270.270487][ T5765] usb 1-1: string descriptor 0 read error: -71 [ 270.285117][ T5765] usbhid 1-1:0.0: can't add hid device: -22 [ 270.285231][ T5765] usbhid 1-1:0.0: probe with driver usbhid failed with error -22 [ 270.313988][ T5765] usb 1-1: USB disconnect, device number 72 [ 270.524745][ T9380] 9pnet_fd: Insufficient options for proto=fd [ 270.525578][ T9380] sctp: [Deprecated]: syz.1.1350 (pid 9380) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.525578][ T9380] Use struct sctp_sack_info instead [ 270.874415][ T9401] netlink: 'syz.3.1355': attribute type 21 has an invalid length. [ 270.874444][ T9401] IPv6: NLM_F_CREATE should be specified when creating new route [ 270.875027][ T9401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 270.875045][ T9401] IPv6: NLM_F_CREATE should be set when creating new route [ 270.904034][ T9401] IPv6: NLM_F_CREATE should be set when creating new route [ 270.904070][ T9401] IPv6: NLM_F_CREATE should be set when creating new route [ 271.606247][ T5765] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 271.760182][ T5765] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 271.760219][ T5765] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 271.760246][ T5765] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 271.799099][ T5765] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 271.799133][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.799152][ T5765] usb 4-1: Product: syz [ 271.799167][ T5765] usb 4-1: Manufacturer: syz [ 271.799182][ T5765] usb 4-1: SerialNumber: syz [ 271.805801][ T5765] usb 4-1: config 0 descriptor?? [ 271.806673][ T9422] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 271.806789][ T9422] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 271.861368][ T5765] usb 4-1: ucan: probing device on interface #0 [ 272.481096][ T5765] ucan 4-1:0.0 can0: registered device [ 272.628593][ T5765] ucan 4-1:0.0 can0: firmware string: D6Ivb-+N~e[r^ vӇ2,c I˂@䂉huD$zF Lc [ 272.834334][ T5719] usb 4-1: USB disconnect, device number 58 [ 273.053571][ T5628] Bluetooth: hci3: unexpected event for opcode 0x007f [ 273.577306][ T9529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.584506][ T9529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.841989][ T9544] nftables ruleset with unbound set [ 274.136287][ T5719] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 274.266767][ T5719] usb 3-1: device descriptor read/64, error -71 [ 274.507361][ T5719] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 274.639910][ T5719] usb 3-1: device descriptor read/64, error -71 [ 274.723294][ T9595] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1441'. [ 274.747343][ T5719] usb usb3-port1: attempt power cycle [ 274.916293][ T5765] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 275.067150][ T5765] usb 4-1: Using ep0 maxpacket: 16 [ 275.082733][ T5765] usb 4-1: unable to get BOS descriptor or descriptor too short [ 275.082828][ T5765] usb 4-1: no configurations [ 275.082842][ T5765] usb 4-1: can't read configurations, error -22 [ 275.086805][ T5719] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 275.106982][ T5719] usb 3-1: device descriptor read/8, error -71 [ 275.118946][ T9614] ------------[ cut here ]------------ [ 275.118958][ T9614] kcov->t != t [ 275.118973][ T9614] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: syz.0.1450/9614 [ 275.119018][ T9614] Modules linked in: [ 275.119037][ T9614] CPU: 1 UID: 0 PID: 9614 Comm: syz.0.1450 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 275.119065][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.119078][ T9614] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 275.119108][ T9614] Code: 10 00 00 48 8b bb 90 00 00 00 e8 a6 31 58 00 48 89 df 5b 41 5e 41 5f e9 c9 ed 5d 00 7c 1c 5b 41 5e 41 5f e9 bd 48 72 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 1b df 70 09 48 89 df be 03 00 [ 275.119128][ T9614] RSP: 0018:ffffc90005a67d20 EFLAGS: 00010202 [ 275.119139][ T9614] RAX: 2695f53e6b62a900 RBX: ffff888035a4b600 RCX: 0000000000000000 [ 275.119149][ T9614] RDX: 000000004f210036 RSI: ffffffff8baa6d40 RDI: 00000000ffffffff [ 275.119158][ T9614] RBP: ffffc90005a67e78 R08: ffffffff8b35f9d0 R09: ffffffff8e1c8240 [ 275.119167][ T9614] R10: dffffc0000000000 R11: fffffbfff1f59a7f R12: dffffc0000000000 [ 275.119176][ T9614] R13: 0000000000000000 R14: ffff888035a4b608 R15: ffff888020f65c40 [ 275.119185][ T9614] FS: 0000555577621500(0000) GS:ffff888125dc7000(0000) knlGS:0000000000000000 [ 275.119196][ T9614] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 275.119204][ T9614] CR2: 00007f23779fa540 CR3: 000000001c2aa000 CR4: 00000000003526f0 [ 275.119216][ T9614] Call Trace: [ 275.119222][ T9614] [ 275.119229][ T9614] do_exit+0x150/0x22c0 [ 275.119243][ T9614] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.119265][ T9614] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 275.119284][ T9614] ? reacquire_held_locks+0x104/0x190 [ 275.119307][ T9614] ? rt_spin_lock+0x1e0/0x400 [ 275.119334][ T9614] ? __pfx_do_exit+0x10/0x10 [ 275.119349][ T9614] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 275.119369][ T9614] ? rt_spin_unlock+0x160/0x200 [ 275.119385][ T9614] do_group_exit+0x21b/0x2d0 [ 275.119399][ T9614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.119412][ T9614] __x64_sys_exit_group+0x3f/0x40 [ 275.119425][ T9614] x64_sys_call+0x221a/0x2240 [ 275.119441][ T9614] do_syscall_64+0x15f/0xf80 [ 275.119452][ T9614] ? trace_irq_disable+0x3b/0x140 [ 275.119469][ T9614] ? clear_bhb_loop+0x40/0x90 [ 275.119483][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.119496][ T9614] RIP: 0033:0x7f23779ace59 [ 275.119508][ T9614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.119518][ T9614] RSP: 002b:00007fffe0240758 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 275.119531][ T9614] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f23779ace59 [ 275.119539][ T9614] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.119547][ T9614] RBP: 00007fffe02407bc R08: 0000000000000000 R09: 00000000000927c0 [ 275.119555][ T9614] R10: 00007f2377c26038 R11: 0000000000000246 R12: 000000000000019d [ 275.119563][ T9614] R13: 00000000000927c0 R14: 0000000000043162 R15: 00007fffe0240810 [ 275.119580][ T9614] [ 275.119592][ T9614] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 275.119601][ T9614] CPU: 1 UID: 0 PID: 9614 Comm: syz.0.1450 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 275.119615][ T9614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 275.119622][ T9614] Call Trace: [ 275.119627][ T9614] [ 275.119632][ T9614] vpanic+0x56c/0xa60 [ 275.119650][ T9614] ? __pfx__printk+0x10/0x10 [ 275.119663][ T9614] ? __pfx_vpanic+0x10/0x10 [ 275.119679][ T9614] ? is_bpf_text_address+0x292/0x2b0 [ 275.119692][ T9614] ? is_bpf_text_address+0x26/0x2b0 [ 275.119708][ T9614] panic+0xc5/0xd0 [ 275.119724][ T9614] ? __pfx_panic+0x10/0x10 [ 275.119755][ T9614] __warn+0x315/0x4c0 [ 275.119771][ T9614] ? kcov_task_exit+0xf5/0x160 [ 275.119800][ T9614] ? kcov_task_exit+0xf5/0x160 [ 275.119817][ T9614] __report_bug+0x29a/0x540 [ 275.119832][ T9614] ? kcov_task_exit+0xf5/0x160 [ 275.119847][ T9614] ? __pfx___report_bug+0x10/0x10 [ 275.119861][ T9614] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 275.119878][ T9614] ? rt_spin_lock+0x1e0/0x400 [ 275.119894][ T9614] ? rt_spin_lock+0x1e0/0x400 [ 275.119910][ T9614] ? kcov_task_exit+0xf5/0x160 [ 275.119926][ T9614] report_bug+0x16a/0x220 [ 275.119938][ T9614] ? kcov_task_exit+0xf5/0x160 [ 275.119953][ T9614] ? kcov_task_exit+0xf7/0x160 [ 275.119968][ T9614] handle_bug+0x9c/0x200 [ 275.119982][ T9614] exc_invalid_op+0x1a/0x50 [ 275.119995][ T9614] asm_exc_invalid_op+0x1a/0x20 [ 275.120008][ T9614] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 275.120028][ T9614] Code: 10 00 00 48 8b bb 90 00 00 00 e8 a6 31 58 00 48 89 df 5b 41 5e 41 5f e9 c9 ed 5d 00 7c 1c 5b 41 5e 41 5f e9 bd 48 72 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 1b df 70 09 48 89 df be 03 00 [ 275.120055][ T9614] RSP: 0018:ffffc90005a67d20 EFLAGS: 00010202 [ 275.120068][ T9614] RAX: 2695f53e6b62a900 RBX: ffff888035a4b600 RCX: 0000000000000000 [ 275.120078][ T9614] RDX: 000000004f210036 RSI: ffffffff8baa6d40 RDI: 00000000ffffffff [ 275.120087][ T9614] RBP: ffffc90005a67e78 R08: ffffffff8b35f9d0 R09: ffffffff8e1c8240 [ 275.120097][ T9614] R10: dffffc0000000000 R11: fffffbfff1f59a7f R12: dffffc0000000000 [ 275.120106][ T9614] R13: 0000000000000000 R14: ffff888035a4b608 R15: ffff888020f65c40 [ 275.120119][ T9614] ? rt_spin_lock+0x1e0/0x400 [ 275.120138][ T9614] do_exit+0x150/0x22c0 [ 275.120150][ T9614] ? lockdep_hardirqs_on+0x7a/0x110 [ 275.120168][ T9614] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 275.120187][ T9614] ? reacquire_held_locks+0x104/0x190 [ 275.120201][ T9614] ? rt_spin_lock+0x1e0/0x400 [ 275.120215][ T9614] ? __pfx_do_exit+0x10/0x10 [ 275.120227][ T9614] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 275.120250][ T9614] ? rt_spin_unlock+0x160/0x200 [ 275.120266][ T9614] do_group_exit+0x21b/0x2d0 [ 275.120280][ T9614] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.120295][ T9614] __x64_sys_exit_group+0x3f/0x40 [ 275.120325][ T9614] x64_sys_call+0x221a/0x2240 [ 275.120366][ T9614] do_syscall_64+0x15f/0xf80 [ 275.120385][ T9614] ? trace_irq_disable+0x3b/0x140 [ 275.120414][ T9614] ? clear_bhb_loop+0x40/0x90 [ 275.120439][ T9614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.120451][ T9614] RIP: 0033:0x7f23779ace59 [ 275.120464][ T9614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 275.120474][ T9614] RSP: 002b:00007fffe0240758 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 275.120488][ T9614] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f23779ace59 [ 275.120497][ T9614] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 275.120504][ T9614] RBP: 00007fffe02407bc R08: 0000000000000000 R09: 00000000000927c0 [ 275.120513][ T9614] R10: 00007f2377c26038 R11: 0000000000000246 R12: 000000000000019d [ 275.120521][ T9614] R13: 00000000000927c0 R14: 0000000000043162 R15: 00007fffe0240810 [ 275.120539][ T9614] [ 275.120811][ T9614] Kernel Offset: disabled