last executing test programs: 1m36.068713402s ago: executing program 2 (id=1196): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi0\x00', 0x40000, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x5, 0x2f00, 0x2a1a, 0x4, 0x6, 0x800afa3, 0x7f, 0x8, 0x5855, 0x2, 0x9, 0x9, 0x2f00, 0x9, 0x6, 0x2, 0x6f48, 0x4, 0x2, 0xa, 0x5, 0x7, 0x1003, 0x7fff, 0x2000003, 0xe69, 0x1, 0x4, 0x4086, 0xffffffff, 0x6f5]}) 1m35.97052512s ago: executing program 2 (id=1197): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_remote_port\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0x1111111111111111,lpwwpn=0x2222222222222222', 0x6c) 1m35.766798387s ago: executing program 2 (id=1202): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_driver={0x0, 0x80805513, 0x0}) r1 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0d05604, &(0x7f00000001c0)={0x1, @vbi={0x8, 0x9, 0x9, 0x20493859, [0x7, 0xad], [0x401, 0x2], 0x13a}}) 1m35.65943439s ago: executing program 2 (id=1204): ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f0000000200)={0xc17e, 0x353, "d629c095598fc70d8e554cdfe9951f418d04c225aa86aed0be6479f7222c7a96", 0x6, 0x8000000, 0x7, 0x40}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x81) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004380)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) statx(0xffffffffffffff9c, &(0x7f0000002180)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x200, 0x81}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0x6, 0x9, 0x8, 0x1, 0x1, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0xfffffffe, r2, r3, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r0, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000002040)={{0x1, 0x1, 0x18, r0, {0x9}}, './bus/file0\x00'}) write$FUSE_INTERRUPT(r0, &(0x7f0000002200)={0x10, 0x0, r4}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x81001f, 0x0) 1m34.769294582s ago: executing program 2 (id=1210): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x400000f5, 0x0, 0x5}]}) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x300001c) 1m34.619874369s ago: executing program 2 (id=1211): r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040443322029dacb9be97e720140904000000"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x4, 0x8e], 0xb2e}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r7, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000010000400009040000020300000009210100ff0122090009058103000000000000010000000ccc056e9d9ea1940000"], 0x0) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) lseek(r10, 0x8, 0x4) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x3}, @local=@item_012={0x2, 0x2, 0x1, "f9e5"}, @local=@item_012={0x1, 0x2, 0x4, 'O'}, @global=@item_4={0x3, 0x1, 0x0, "fa545610"}, @local=@item_4={0x3, 0x2, 0x8, "fa11aef3"}]}}, 0x0}, 0x0) r11 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r11, &(0x7f00000003c0)=""/255, 0xff, 0x2, &(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="2420e6897d000000", @ANYRES16=r6, @ANYBLOB="11042abd7000fddbdf251400000008000300", @ANYRES32=r8, @ANYBLOB="08001d00", @ANYRES32=r12, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000228bd7000fedbdf25110000000500120001000000050012008100000005001200090000000c000600030000000000000008000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="0500120073000000"], 0x50}, 0x1, 0x0, 0x0, 0x20048005}, 0x8044004) 1m34.143890052s ago: executing program 32 (id=1211): r0 = syz_usb_connect(0x0, 0x57, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040443322029dacb9be97e720140904000000"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0xffffffff, [0x4, 0x8e], 0xb2e}, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) pwrite64(r7, &(0x7f00000002c0)="8c", 0x1, 0x7fffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r9 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000010000400009040000020300000009210100ff0122090009058103000000000000010000000ccc056e9d9ea1940000"], 0x0) r10 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) lseek(r10, 0x8, 0x4) syz_usb_control_io$hid(r9, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x14, {[@local=@item_4={0x3, 0x2, 0x3}, @local=@item_012={0x2, 0x2, 0x1, "f9e5"}, @local=@item_012={0x1, 0x2, 0x4, 'O'}, @global=@item_4={0x3, 0x1, 0x0, "fa545610"}, @local=@item_4={0x3, 0x2, 0x8, "fa11aef3"}]}}, 0x0}, 0x0) r11 = socket$l2tp(0x2, 0x2, 0x73) recvfrom$l2tp(r11, &(0x7f00000003c0)=""/255, 0xff, 0x2, &(0x7f00000004c0)={0x2, 0x0, @empty}, 0x10) r12 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="2420e6897d000000", @ANYRES16=r6, @ANYBLOB="11042abd7000fddbdf251400000008000300", @ANYRES32=r8, @ANYBLOB="08001d00", @ANYRES32=r12, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="000228bd7000fedbdf25110000000500120001000000050012008100000005001200090000000c000600030000000000000008000300", @ANYRES32=r8, @ANYBLOB="08000300", @ANYRES32=r13, @ANYBLOB="0500120073000000"], 0x50}, 0x1, 0x0, 0x0, 0x20048005}, 0x8044004) 6.320697704s ago: executing program 3 (id=1573): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4}) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x4}) (async) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f00000000c0)={0x4}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) r5 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) (async) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x3, @loopback, 0xe7d6}, 0x1c) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x24, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x24}}, 0x18) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) (async) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) (async) r8 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x1, 0x0) write$P9_RWRITE(r8, 0x0, 0x0) (async) write$P9_RWRITE(r8, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) write(r7, &(0x7f00000003c0)='1', 0x1) socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) write$make_it_fail(r7, &(0x7f0000000040)='0\x00', 0x2) 5.749171678s ago: executing program 3 (id=1575): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 4.611892327s ago: executing program 1 (id=1580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0x9, {0xae, 0x0, 0x1d, 0x10010f}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) msgget$private(0x0, 0x5) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffc, 0x3, 0x2, 0x401}) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x400000) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x6a38) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000900)=0x15) ioctl(r5, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c30)=0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c50)=0xf9) 4.337827312s ago: executing program 3 (id=1581): mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='bfs\x00', 0x800600, 0x0) 4.137511848s ago: executing program 3 (id=1583): socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$kcm(0x10, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.885248567s ago: executing program 0 (id=1585): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$EVIOCSABS20(0xffffffffffffffff, 0x401845e0, &(0x7f0000000080)={0x4, 0x6, 0xfffffffc, 0x5, 0x7f, 0xc6ad}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @empty}], 0x10) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000040)={0x0, 0x5}, 0x8) sendmsg$inet_sctp(r1, &(0x7f0000000140)={&(0x7f0000000980)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4000891) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0xb001, 0xff03, 0x3f0, 0x110, 0x110, 0x220, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@arp={@local, @multicast1, 0xffffff00, 0x0, 0xb, 0x0, {@mac=@local, {[0xff, 0xff, 0xff, 0x0, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x7, 0x1c8, 0xf, 0x6, 0x0, 0xfff7, 'veth0_to_hsr\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x29a}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, 0x2}}}, {{@arp={@local, @multicast2, 0x0, 0xffffff00, 0xb, 0xf, {@empty, {[0x0, 0xff]}}, {@empty, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0xfff6, 0x85, 0x200, 0x103, 0x7fe, 0x6, 'veth1_vlan\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x8}, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @loopback, @local, 0x1, 0xffffffff}}}, {{@arp={@broadcast, @broadcast, 0x0, 0x0, 0x5, 0xf, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, {[0xff, 0xff, 0x0, 0x100, 0xff]}}, {@mac=@local, {[0x0, 0xff, 0xff]}}, 0xfff8, 0x7, 0x8, 0x9, 0x7fff, 0x5, 'syzkaller0\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x0, 0x164}, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x7f, 0x7}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x440) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0xe9, 0x9, 0x7}]}, 0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f00000002c0)={0x0, 0x3, 0x7fff}, 0x8) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000180)=0x4) 3.540732424s ago: executing program 1 (id=1587): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000000a0a0101"], 0x14}, 0x1, 0xa6ff, 0x0, 0x4048014}, 0x4000) 3.321910228s ago: executing program 1 (id=1588): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240500012700006cdc02010111240201010200000000000000000200000924030201010001"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0}) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/4097, 0x1001}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f00000001c0)=""/172, 0xac}, {&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f0000004b00)=""/4098, 0x1002}, {&(0x7f0000004ac0)=""/41, 0x29}], 0x7}, 0x19}], 0x3, 0x0, 0x0) write$P9_RWRITE(0xffffffffffffffff, &(0x7f0000000040)={0xb, 0x77, 0x2, 0x5}, 0xb) 3.313695783s ago: executing program 0 (id=1589): sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) sched_getattr(r1, &(0x7f00000001c0)={0x38}, 0x38, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) creat(&(0x7f0000000000)='./file0\x00', 0x180) (async) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x180) ioctl$FIBMAP(r3, 0x1, &(0x7f0000000080)=0x1b5) getsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, 0x0, &(0x7f0000000180)) syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) (async) r4 = syz_open_dev$video(&(0x7f00000000c0), 0x7, 0x8100) ioctl$VIDIOC_S_FMT(r4, 0xc0d05640, &(0x7f00000006c0)={0x1, @pix={0x4, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x9, 0xfeedcafe, 0xe7, 0xffffff80, 0x1}}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='cdg', 0x3) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 2.625470631s ago: executing program 4 (id=1591): bind$alg(0xffffffffffffffff, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) mq_open(&(0x7f0000000100)='&\x00', 0x40, 0x100, 0x0) r1 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0) 2.62351045s ago: executing program 3 (id=1592): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x0) recvmmsg(r0, &(0x7f0000002e80)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001bc0)=""/4097, 0x1001}, {&(0x7f0000000180)=""/33, 0x21}, {&(0x7f0000000380)=""/201, 0xc9}, {&(0x7f0000000a40)=""/103, 0x67}, {&(0x7f0000004b00)=""/4098, 0x1002}, {&(0x7f0000004ac0)=""/41, 0x29}], 0x6}, 0x19}], 0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000180081064e81f782db4cb904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600200002000000000000fb8000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a70000090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100100040fad95667e006dcdf63951f0f49e119c849ea6e5a0fc55e05000000214d6102d6dcbf33fb5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6cc00000000010000000001000000", 0xd8}], 0x1}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dir\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dir\x00', &(0x7f0000000080)='cifs\x00', 0x0, &(0x7f00000000c0)='vers=2.0,sec=none,ip=127.0.0.1,port=20000,nodfs,username=root,password=root\x00') ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x891b, &(0x7f0000002280)={'lo\x00', {0x2, 0x4e23, @loopback}}) 2.241014158s ago: executing program 3 (id=1593): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x0, 0x12, 0x1, "84"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000740)={0x20, 0x3, 0x1, 'T'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, &(0x7f0000000000)={0x20, 0x24, 0x39, {0x39, 0x24, "39278e202de6de68b5b932c832e37f9d1d9b7f6be36f1018116aa66043a9e7c520924adb6555fe38ed051d866367af826b3c0db803d242"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x408}}, &(0x7f0000000080)={0x0, 0x22, 0xc, {[@local=@item_012={0x1, 0x2, 0x0, "d4"}, @local=@item_4={0x3, 0x2, 0xa, "da546fec"}, @global=@item_4={0x3, 0x1, 0x6, "1bc6b3af"}]}}, &(0x7f00000000c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x6, 0xd, 0x1, {0x22, 0x8fd}}}}, &(0x7f00000004c0)={0x2c, &(0x7f0000000200)={0x0, 0x17, 0xc7, "5ede83a4b4d32bc366ea2212920812598487b8b0fe8e7ad2906896c2a7722b6f58ad97ed9f5f09b8352bdde11ad6fe3578b11aa4a2cb6fc8df8a031dd3e1fe215d109c17e24e827403b29031582b12656fc8663f11a107e355cb6e965da29e6d81f858bb5795dbe5649c2c468fc199443e84d1e1b86088f03cca8c609ab2d887b43a61810ed3bdf0e0d24210121891b91acac510abbe219385be22f7c9d5e2e0684da9057a198c80cd995197e2f30a9eff6c16cf2598c42d46f92e28cf0255b0aa58789e717426"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x47}, &(0x7f00000003c0)={0x20, 0x1, 0xb6, "5e9e8b379b08b4d44011a2203688b2f6e6e1d5d601c6d09d6b5b301a830e4929b9dbd0e552ee634f32ba216b1a7a95fbf7ebc64ee96164f1e382b5988bae01da2bce28031dadecb4114810573bd6d9568f12cf6d53f667e395fbec1f75b1f76bfc5913f8f4b3eeeea5e7a47bffc362cdda9baa808249b5f23be5ebadf2e34c9933331eae34870e8acdc05aafe21d731a42c0080ca6a1bf1577966f374ad597b5511daf0e20777bd9262261115551188eb34df23075fb"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x4}}) 2.17821703s ago: executing program 0 (id=1594): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x80400, 0x0) poll(&(0x7f0000000240)=[{r0, 0x310}], 0x1, 0x6) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c7fffffff700"/40}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_NAME={0x8, 0x1, 'LED\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0xb0}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0xfffffffe, 0x0, 0x1, 0x1f4}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c85, 0x20, 0x3, 0x3aa, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x4003ffff, 0x338, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 2.088826617s ago: executing program 1 (id=1595): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$video(&(0x7f0000000280), 0x101, 0xab02) ioctl$VIDIOC_S_CROP(r1, 0x4014563c, &(0x7f0000000100)={0x9, {0xae, 0x0, 0x1d, 0x10010f}}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0) msgget$private(0x0, 0x5) ioctl$OCFS2_IOC_UNRESVSP(r2, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffc, 0x3, 0x2, 0x401}) r3 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x400000) ioctl$NBD_SET_SIZE(r3, 0xab02, 0x6a38) r4 = epoll_create1(0x0) fcntl$dupfd(r4, 0x2, 0xffffffffffffffff) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000900)=0x15) ioctl(r5, 0x404c4701, &(0x7f0000000a00)="01000000000000000000000001000000010000000a0000000000000040000000400000000100000001") ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c00)=0xf9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c10)=0x3) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c30)=0x1) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c40)=0x1c) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000c50)=0xf9) 1.168963769s ago: executing program 0 (id=1596): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) close(0x3) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0xa, {0x8, 0xfffffffe, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x6000, 0xfffffffc, r3, r4, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r5, 0x0, 0x0) write(r0, &(0x7f0000000000)='\"', 0x1) 1.120059257s ago: executing program 4 (id=1597): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) unshare(0x64000600) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, 0x0}, 0x4010) r4 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r4, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) socket(0x2, 0xa, 0x300) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x1, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10) write$tun(r1, &(0x7f00000003c0)={@val={0xa, 0x9000}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x38, 0x3a, 0xff, @remote, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x7, 0x6, "0d98c5", 0x1000, 0x2f, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x39}, [@fragment={0x2b, 0x0, 0x92, 0x1, 0x0, 0x9, 0x65}]}}}}}}}}, 0x72) unshare(0x200) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f0000000000)={[{@subsystem='hugetlb'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]}) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000040)={0x1, 0x0, 0x5}) ioctl$KVM_IOEVENTFD(r7, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc06, 0xeeef0000, 0x2, 0xffffffffffffffff, 0x19}) 978.702538ms ago: executing program 0 (id=1598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000280)={0x28, r1, 0x15, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x875a8d33276653aa}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) bind$packet(r6, &(0x7f0000000200)={0x11, 0x0, r5, 0x1, 0x3, 0x6, @remote}, 0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000600)={'ip6_vti0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x4, 0x0, 0xe, 0x8, 0x18, @local, @mcast1, 0x8, 0x10, 0xffffffff, 0x1}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000640)={@empty, @loopback, 0x0}, &(0x7f00000006c0)=0xc) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000003400)=ANY=[@ANYBLOB="70010000", @ANYRES16=r1, @ANYBLOB="00022dbd7000fcdbdf250f0000001100018008000100", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32=r5, @ANYBLOB="900001801400020070696d72656731000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000001400020076657468315f766972745f776966690014000200626f6e643000000000000000000000001400020067656e65766531000000000000000000080003000000000008000300020000001400020067656e6576653100000000000000000000000100", @ANYRES32=0x0, @ANYBLOB="0000020070696d367265673100000000000000007000018014000200767863616e31000000000000000000000800030002000000080003000300000014000200776732000000000000000000000000001400020067656e6576653100000000000000000008000300010000000800030001000000080003000300000008000300020000004000018008000100", @ANYRES32=0x0, @ANYBLOB="080003000100000008000100", @ANYRES32=r7, @ANYBLOB="08002900948501517cc05a1eca23fccd6fe13993f674a84dd01103110a5092c28ff8db413572aa7f06db44d8a375a4fe9f97ca35b5e87d5d727e925b90de7d884d785da0c670a537c4205fd0fc521c0bab338b7f2a6133fe144deed7d263709ce8b7bc36dd4e4b39231132ff9e14cf9bbf3016ec0251952500123a9ff4f1bb60a95f830f0f592d517ba4f35f8e4b4c1acf9be9385ed12a7bae8133ada23397d2b801c7570e41008cd6d9e26c1fb47a", @ANYRES32=r8, @ANYBLOB="1400020070696d7265670000000000000000000008000300020000000000030001000000"], 0x170}}, 0x20040800) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r9, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0xfffffff1, 0x1, 0x4, 0x15, "51208000"}) r10 = socket$inet6(0xa, 0x3, 0x7) r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='stack\x00') pause() sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0xc0) r12 = socket(0x10, 0x803, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d80)="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", 0x598}], 0x1}, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, 0x0, 0x0, 0x7, &(0x7f0000000400)=[@cstype0={0x4, 0x6}], 0x1) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000040)=""/102, 0x38a}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f00000023c0)=""/4098, 0x1e1}, {&(0x7f00000000c0)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x5b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0xa}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/207, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000000000)={0x77359400}) read(r11, &(0x7f0000000180)=""/199, 0xc7) setsockopt$inet6_int(r10, 0x29, 0x4a, &(0x7f0000000000)=0x2, 0x4) sendmmsg$inet6(r10, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x4, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB='$\x00'], 0x28}}], 0x1, 0x0) recvfrom$inet6(r10, 0x0, 0x0, 0x10000, 0x0, 0x0) r13 = dup(r9) write$UHID_INPUT(r13, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 829.520268ms ago: executing program 1 (id=1599): r0 = socket$nl_route(0x10, 0x3, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1/file2\x00', 0x1c0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 537.157024ms ago: executing program 4 (id=1600): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r0, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/189, 0xbd}, {&(0x7f00000003c0)=""/152, 0x98}, {&(0x7f0000002b80)=""/4085, 0xff5}], 0x3, 0x0, 0x300}}], 0x1, 0x0, 0x0) 466.419586ms ago: executing program 4 (id=1601): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, 0x3, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000010}, 0x8000) set_mempolicy(0x8006, &(0x7f0000000040)=0x80000fff, 0x103) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x800, 0x0) 360.090896ms ago: executing program 4 (id=1602): mount(&(0x7f0000000380)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='bfs\x00', 0x800000, 0x0) (fail_nth: 13) 187.99951ms ago: executing program 4 (id=1603): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c6500070504002f2f6f00040600666c616773000702000000000200000000020000000008", 0x3d) (fail_nth: 8) 19.778912ms ago: executing program 1 (id=1604): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='efs\x00', 0x2800036, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8d80, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x40000002, 0x0, 0x6}, {0x40000002, 0x0, 0x8000000000000001}]}) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.overlay.redirect\x00') 0s ago: executing program 0 (id=1605): r0 = syz_usb_connect$uac3(0x0, 0xa0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f240902020000000001"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00007fb000/0x4000)=nil, 0x4000}}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="20539de35606e681fe50a59a466139a97c4fbed681738ce4dbe827bfb17bd06410eee90d82b34273029636789fe319d7ccff45bfc442a2812d3147c24ae305dc079ba4464a658117540ff2815c1ddefb01f0dcde858435a5072146cdfffadf608f2faa86aa0b1f8e4db2bca1d429cabd1bef70db2434f34b00c2edf043699ad57ca164d3c10d8f24c8b4f5df4cdb6848960c0f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b40)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000ac0)={0x2c, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, 0x0}, &(0x7f0000000fc0)={0x84, &(0x7f0000000b00)={0x40, 0x6, 0x5, "0835a0acd8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000000203036632199d62912ea200000000000800010001"], 0x1c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x8, 0x2, 0x2}, 0x10) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r4, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203051209000a004000683739ed002889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x1, 0x3, 0x101, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) kernel console output (not intermixed with test programs): 989] gspca_stk1135: serial bus timeout: status=0x00 [ 386.921886][ T989] gspca_stk1135: Sensor write failed [ 386.921974][ T989] gspca_stk1135: serial bus timeout: status=0x00 [ 386.921995][ T989] gspca_stk1135: Sensor write failed [ 386.922188][ T989] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 386.979446][ T989] usb 1-1: USB disconnect, device number 90 [ 387.776968][ T5703] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 387.947973][ T5703] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 387.964310][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 387.964387][ T5703] usb 1-1: Product: syz [ 387.964423][ T5703] usb 1-1: SerialNumber: syz [ 387.988467][ T5703] usb 1-1: config 0 descriptor?? [ 388.007097][ T5703] hso 1-1:0.0: Not our interface [ 388.074243][ T5695] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 388.074321][ T5695] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 388.075010][ T5695] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 388.121593][ T5695] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 388.139004][ T5695] usb 4-1: USB disconnect, device number 112 [ 388.177045][ T989] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 388.337886][ T989] usb 2-1: Using ep0 maxpacket: 16 [ 388.340008][ T989] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.344693][ T989] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.344761][ T989] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.372739][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.372821][ T989] usb 2-1: Product: syz [ 388.372862][ T989] usb 2-1: Manufacturer: syz [ 388.372904][ T989] usb 2-1: SerialNumber: syz [ 388.440977][ T989] usb 2-1: 0:2 : does not exist [ 388.639391][ T989] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 388.743147][ T989] usb 2-1: USB disconnect, device number 72 [ 388.779779][ T8094] udevd[8094]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 388.986970][ T5695] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 389.127015][ T5695] usb 5-1: device descriptor read/64, error -71 [ 389.377069][ T5695] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 389.536996][ T5695] usb 5-1: device descriptor read/64, error -71 [ 389.544039][ T5703] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 389.613964][T10639] FAULT_INJECTION: forcing a failure. [ 389.613964][T10639] name failslab, interval 1, probability 0, space 0, times 0 [ 389.614027][T10639] CPU: 0 UID: 0 PID: 10639 Comm: syz.3.1366 Not tainted syzkaller #0 PREEMPT(full) [ 389.614054][T10639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 389.614068][T10639] Call Trace: [ 389.614077][T10639] [ 389.614135][T10639] dump_stack_lvl+0xe8/0x150 [ 389.614259][T10639] should_fail_ex+0x3eb/0x540 [ 389.614353][T10639] ? __alloc_skb+0x1db/0x7a0 [ 389.614423][T10639] should_failslab+0xa8/0x100 [ 389.614487][T10639] ? __alloc_skb+0x1db/0x7a0 [ 389.614553][T10639] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 389.614635][T10639] ? __alloc_skb+0x18d/0x7a0 [ 389.614703][T10639] ? __alloc_skb+0x1db/0x7a0 [ 389.614781][T10639] __alloc_skb+0x1db/0x7a0 [ 389.614854][T10639] alloc_skb_with_frags+0xc6/0x760 [ 389.614950][T10639] sock_alloc_send_pskb+0x878/0x990 [ 389.615076][T10639] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 389.615208][T10639] ? iov_iter_advance+0x8b/0x1c0 [ 389.615300][T10639] tun_get_user+0x8fb/0x44d0 [ 389.615399][T10639] ? aa_file_perm+0x18b/0x15f0 [ 389.615460][T10639] ? aa_file_perm+0x4ed/0x15f0 [ 389.615518][T10639] ? __pfx_tun_get_user+0x10/0x10 [ 389.615578][T10639] ? __lock_acquire+0x6df/0x2e50 [ 389.615678][T10639] ? kstrtoull+0x137/0x1d0 [ 389.615782][T10639] ? ref_tracker_alloc+0x341/0x4b0 [ 389.615868][T10639] ? lock_acquire+0x115/0x350 [ 389.615950][T10639] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 389.616043][T10639] ? lock_acquire+0x115/0x350 [ 389.616116][T10639] ? tun_get+0x1c/0x2f0 [ 389.616196][T10639] ? tun_get+0x1c/0x2f0 [ 389.616255][T10639] ? tun_get+0x1c/0x2f0 [ 389.616317][T10639] tun_chr_write_iter+0x113/0x200 [ 389.616395][T10639] vfs_write+0x612/0xba0 [ 389.616486][T10639] ? __pfx_vfs_write+0x10/0x10 [ 389.616566][T10639] ? __fget_files+0x2a/0x420 [ 389.616646][T10639] ksys_write+0x150/0x270 [ 389.616715][T10639] ? __pfx_ksys_write+0x10/0x10 [ 389.616811][T10639] do_syscall_64+0x166/0x520 [ 389.616860][T10639] ? trace_irq_disable+0x3b/0x140 [ 389.616933][T10639] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.616984][T10639] ? clear_bhb_loop+0x70/0xc0 [ 389.617049][T10639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.617098][T10639] RIP: 0033:0x7f2c10f9e0d9 [ 389.617155][T10639] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.617201][T10639] RSP: 002b:00007f2c0f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 389.617281][T10639] RAX: ffffffffffffffda RBX: 00007f2c11225fa0 RCX: 00007f2c10f9e0d9 [ 389.617326][T10639] RDX: 000000000000004a RSI: 0000200000000140 RDI: 0000000000000004 [ 389.617367][T10639] RBP: 00007f2c0f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 389.617405][T10639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.617435][T10639] R13: 00007f2c11226038 R14: 00007f2c11225fa0 R15: 00007ffd253b91d8 [ 389.617511][T10639] [ 389.682109][ T5695] usb usb5-port1: attempt power cycle [ 389.809390][ T5703] usb 2-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 389.840957][ T5703] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.841007][ T5703] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 389.841032][ T5703] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 389.841055][ T5703] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.841097][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.217380][ T5695] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 390.237714][ T5695] usb 5-1: device descriptor read/8, error -71 [ 390.476984][ T5695] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 390.489209][ T5703] usb 2-1: USB disconnect, device number 73 [ 390.500860][ T5695] usb 5-1: device descriptor read/8, error -71 [ 390.544819][ T989] usb 1-1: USB disconnect, device number 91 [ 390.609482][ T5695] usb usb5-port1: unable to enumerate USB device [ 390.887085][ T989] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 391.038764][ T989] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 391.055564][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.055621][ T989] usb 1-1: Product: syz [ 391.055656][ T989] usb 1-1: Manufacturer: syz [ 391.055731][ T989] usb 1-1: SerialNumber: syz [ 391.396994][ T5695] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 391.495296][ T989] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 391.495392][ T989] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 391.556932][ T5695] usb 2-1: Using ep0 maxpacket: 16 [ 391.558447][ T5695] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.561555][ T5695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.561614][ T5695] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.566762][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.566814][ T5695] usb 2-1: Product: syz [ 391.566831][ T5695] usb 2-1: Manufacturer: syz [ 391.567039][ T5695] usb 2-1: SerialNumber: syz [ 391.601916][ T5695] usb 2-1: 0:2 : does not exist [ 391.794473][ T5695] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 391.861700][T10658] FAULT_INJECTION: forcing a failure. [ 391.861700][T10658] name failslab, interval 1, probability 0, space 0, times 0 [ 391.876111][T10658] CPU: 0 UID: 0 PID: 10658 Comm: syz.4.1375 Not tainted syzkaller #0 PREEMPT(full) [ 391.876142][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 391.876156][T10658] Call Trace: [ 391.876166][T10658] [ 391.876176][T10658] dump_stack_lvl+0xe8/0x150 [ 391.876210][T10658] should_fail_ex+0x3eb/0x540 [ 391.876250][T10658] should_failslab+0xa8/0x100 [ 391.876275][T10658] __kmalloc_cache_noprof+0xa3/0x600 [ 391.876307][T10658] ? ring_buffer_alloc_read_page+0x100/0x610 [ 391.876336][T10658] ? ring_buffer_alloc_read_page+0x100/0x610 [ 391.876372][T10658] ring_buffer_alloc_read_page+0x100/0x610 [ 391.876405][T10658] ? __pfx_ring_buffer_alloc_read_page+0x10/0x10 [ 391.876440][T10658] ? __lock_acquire+0x6df/0x2e50 [ 391.876475][T10658] tracing_buffers_read+0x2ba/0xcf0 [ 391.876517][T10658] ? common_file_perm+0x20e/0x2b0 [ 391.876552][T10658] ? __pfx_tracing_buffers_read+0x10/0x10 [ 391.876586][T10658] ? rw_verify_area+0x24a/0x4c0 [ 391.876616][T10658] ? __pfx_tracing_buffers_read+0x10/0x10 [ 391.876646][T10658] vfs_read+0x213/0xa80 [ 391.876679][T10658] ? __pfx___mutex_lock+0x10/0x10 [ 391.876705][T10658] ? __pfx_vfs_read+0x10/0x10 [ 391.876734][T10658] ? __fget_files+0x2a/0x420 [ 391.876771][T10658] ? __fget_files+0x3a2/0x420 [ 391.876796][T10658] ? __fget_files+0x2a/0x420 [ 391.876831][T10658] ksys_read+0x150/0x270 [ 391.876861][T10658] ? __pfx_ksys_read+0x10/0x10 [ 391.876899][T10658] do_syscall_64+0x166/0x520 [ 391.876922][T10658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.876945][T10658] ? clear_bhb_loop+0x70/0xc0 [ 391.876973][T10658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.876996][T10658] RIP: 0033:0x7f427179e0d9 [ 391.877017][T10658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.877037][T10658] RSP: 002b:00007f42725a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 391.877061][T10658] RAX: ffffffffffffffda RBX: 00007f4271a25fa0 RCX: 00007f427179e0d9 [ 391.877078][T10658] RDX: 0000000000002020 RSI: 0000200000000840 RDI: 0000000000000003 [ 391.877093][T10658] RBP: 00007f42725a1090 R08: 0000000000000000 R09: 0000000000000000 [ 391.877107][T10658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 391.877121][T10658] R13: 00007f4271a26038 R14: 00007f4271a25fa0 R15: 00007ffd2329ecf8 [ 391.877155][T10658] [ 391.913627][ T5695] usb 2-1: USB disconnect, device number 74 [ 392.164166][ T8079] udevd[8079]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.486971][ T5695] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 392.607029][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 392.637678][ T5695] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 392.651024][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 392.651073][ T5695] usb 5-1: Product: syz [ 392.651093][ T5695] usb 5-1: SerialNumber: syz [ 392.660119][ T5695] usb 5-1: config 0 descriptor?? [ 392.676027][ T5695] hso 5-1:0.0: Not our interface [ 392.756996][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 392.763495][ T10] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 392.770099][ T10] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 392.770215][ T10] usb 2-1: config 0 has no interface number 0 [ 392.770367][ T10] usb 2-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 392.770424][ T10] usb 2-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 392.770534][ T10] usb 2-1: config 0 interface 12 has no altsetting 0 [ 392.781253][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.781334][ T10] usb 2-1: Product: syz [ 392.781429][ T10] usb 2-1: Manufacturer: syz [ 392.781478][ T10] usb 2-1: SerialNumber: syz [ 392.797608][ T10] usb 2-1: config 0 descriptor?? [ 392.810241][ T10] f81534 2-1:0.12: unsupported endpoint max packet size [ 393.198173][ T989] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPIPE [ 393.198254][ T989] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 393.218396][ T989] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 393.235011][ T989] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 393.250580][ T989] usb 1-1: USB disconnect, device number 92 [ 393.616045][T10677] FAULT_INJECTION: forcing a failure. [ 393.616045][T10677] name failslab, interval 1, probability 0, space 0, times 0 [ 393.627472][T10677] CPU: 0 UID: 0 PID: 10677 Comm: syz.3.1382 Not tainted syzkaller #0 PREEMPT(full) [ 393.627553][T10677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.627595][T10677] Call Trace: [ 393.627627][T10677] [ 393.627645][T10677] dump_stack_lvl+0xe8/0x150 [ 393.627735][T10677] should_fail_ex+0x3eb/0x540 [ 393.627819][T10677] should_failslab+0xa8/0x100 [ 393.627882][T10677] __kmalloc_noprof+0xfe/0x720 [ 393.627962][T10677] ? tomoyo_encode+0x2ad/0x570 [ 393.628045][T10677] ? tomoyo_encode+0x2ad/0x570 [ 393.628151][T10677] tomoyo_encode+0x2ad/0x570 [ 393.628252][T10677] tomoyo_realpath_from_path+0x5fa/0x640 [ 393.628363][T10677] ? tomoyo_path_number_perm+0x219/0x5f0 [ 393.628428][T10677] tomoyo_path_number_perm+0x246/0x5f0 [ 393.628531][T10677] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 393.628626][T10677] ? __lock_acquire+0x6df/0x2e50 [ 393.628724][T10677] ? hook_file_ioctl+0x1f2/0x600 [ 393.628847][T10677] ? __fget_files+0x2a/0x420 [ 393.628919][T10677] ? __fget_files+0x2a/0x420 [ 393.628973][T10677] ? __fget_files+0x3a2/0x420 [ 393.629033][T10677] ? __fget_files+0x2a/0x420 [ 393.629104][T10677] security_file_ioctl+0xc3/0x2a0 [ 393.629187][T10677] __se_sys_ioctl+0x47/0x170 [ 393.629277][T10677] do_syscall_64+0x166/0x520 [ 393.629338][T10677] ? trace_irq_disable+0x3b/0x140 [ 393.629412][T10677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.629472][T10677] ? clear_bhb_loop+0x70/0xc0 [ 393.629544][T10677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.629615][T10677] RIP: 0033:0x7f2c10f9e0d9 [ 393.629662][T10677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.629715][T10677] RSP: 002b:00007f2c0f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 393.629780][T10677] RAX: ffffffffffffffda RBX: 00007f2c11225fa0 RCX: 00007f2c10f9e0d9 [ 393.629821][T10677] RDX: 0000200000000280 RSI: 0000000040946400 RDI: 0000000000000003 [ 393.629859][T10677] RBP: 00007f2c0f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 393.629899][T10677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.629931][T10677] R13: 00007f2c11226038 R14: 00007f2c11225fa0 R15: 00007ffd253b91d8 [ 393.629998][T10677] [ 393.645672][T10677] ERROR: Out of memory at tomoyo_realpath_from_path. [ 393.645952][T10677] comedi comedi3: 8255: I/O base address or length out of range [ 393.955503][T10683] comedi comedi3: 8255: I/O base address or length out of range [ 394.092688][T10691] FAULT_INJECTION: forcing a failure. [ 394.092688][T10691] name failslab, interval 1, probability 0, space 0, times 0 [ 394.092746][T10691] CPU: 0 UID: 0 PID: 10691 Comm: syz.3.1387 Not tainted syzkaller #0 PREEMPT(full) [ 394.092772][T10691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 394.092833][T10691] Call Trace: [ 394.092867][T10691] [ 394.092897][T10691] dump_stack_lvl+0xe8/0x150 [ 394.093016][T10691] should_fail_ex+0x3eb/0x540 [ 394.093124][T10691] should_failslab+0xa8/0x100 [ 394.093189][T10691] ? skb_clone+0x212/0x3a0 [ 394.093272][T10691] kmem_cache_alloc_noprof+0xa1/0x600 [ 394.093359][T10691] ? skb_clone+0x212/0x3a0 [ 394.093452][T10691] skb_clone+0x212/0x3a0 [ 394.093532][T10691] __netlink_deliver_tap+0x413/0x860 [ 394.093652][T10691] ? netlink_deliver_tap+0x2e/0x1b0 [ 394.093742][T10691] netlink_deliver_tap+0x19c/0x1b0 [ 394.093827][T10691] netlink_unicast+0x781/0x940 [ 394.093942][T10691] netlink_sendmsg+0x813/0xb40 [ 394.094024][T10691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.094129][T10691] ? apparmor_socket_sendmsg+0x18b/0x360 [ 394.094216][T10691] ? __pfx_netlink_sendmsg+0x10/0x10 [ 394.094300][T10691] sock_sendmsg_nosec+0x13a/0x180 [ 394.094395][T10691] ____sys_sendmsg+0x54e/0x850 [ 394.094510][T10691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 394.094618][T10691] ? import_iovec+0x73/0xa0 [ 394.094683][T10691] ___sys_sendmsg+0x2a5/0x360 [ 394.094755][T10691] ? __lock_acquire+0x6df/0x2e50 [ 394.094856][T10691] ? __pfx____sys_sendmsg+0x10/0x10 [ 394.095019][T10691] ? __fget_files+0x2a/0x420 [ 394.095099][T10691] ? __fget_files+0x3a2/0x420 [ 394.095197][T10691] __x64_sys_sendmsg+0x1b1/0x290 [ 394.095279][T10691] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 394.095400][T10691] do_syscall_64+0x166/0x520 [ 394.095455][T10691] ? trace_irq_disable+0x3b/0x140 [ 394.095535][T10691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.095585][T10691] ? clear_bhb_loop+0x70/0xc0 [ 394.095654][T10691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.095708][T10691] RIP: 0033:0x7f2c10f9e0d9 [ 394.095760][T10691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 394.095809][T10691] RSP: 002b:00007f2c0f1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 394.095870][T10691] RAX: ffffffffffffffda RBX: 00007f2c11225fa0 RCX: 00007f2c10f9e0d9 [ 394.095910][T10691] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 394.095957][T10691] RBP: 00007f2c0f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 394.096002][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.096047][T10691] R13: 00007f2c11226038 R14: 00007f2c11225fa0 R15: 00007ffd253b91d8 [ 394.096143][T10691] [ 394.943712][T10704] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1391'. [ 394.943763][T10704] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 394.986107][T10704] fuse: Bad value for 'user_id' [ 394.986152][T10704] fuse: Bad value for 'user_id' [ 395.270481][ T10] usb 5-1: USB disconnect, device number 16 [ 395.418648][ T5695] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 395.587754][ T5695] usb 4-1: New USB device found, idVendor=05ac, idProduct=0243, bcdDevice= 0.00 [ 395.599114][ T5695] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 395.599174][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.627345][ T5695] usb 4-1: config 0 descriptor?? [ 395.652466][ T5695] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input42 [ 395.841860][ T4970] bcm5974 4-1:0.0: could not read from device [ 395.857766][ T5695] bcm5974 4-1:0.0: could not read from device [ 395.880089][ T4970] bcm5974 4-1:0.0: could not read from device [ 395.912628][ T5695] input: failed to attach handler mousedev to device input42, error: -5 [ 395.938233][ T4970] bcm5974 4-1:0.0: could not read from device [ 395.949032][ T5695] usb 4-1: USB disconnect, device number 113 [ 396.068171][ T989] usb 2-1: USB disconnect, device number 75 [ 396.607047][ T989] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 396.747443][ T5695] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 396.757951][ T989] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98 [ 396.758010][ T989] usb 2-1: too many configurations: 25, using maximum allowed: 8 [ 396.781201][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.791944][ T989] usb 2-1: config 0 descriptor?? [ 396.804641][ T989] pwc: Creative Labs Webcam Pro Ex detected. [ 396.804678][ T989] pwc: Warning: more than 1 configuration available. [ 396.908696][ T5695] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 396.923821][ T5695] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 396.932834][ T5695] usb 4-1: Product: syz [ 396.932856][ T5695] usb 4-1: SerialNumber: syz [ 396.957581][ T5695] usb 4-1: config 0 descriptor?? [ 396.969031][ T5695] hso 4-1:0.0: Not our interface [ 397.247030][ T5695] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 397.338023][ T44] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 397.354297][ T989] pwc: Failed to set LED on/off time (-71) [ 397.355054][ T989] pwc: send_video_command error -71 [ 397.355095][ T989] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 397.355361][ T989] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 397.370540][ T989] usb 2-1: USB disconnect, device number 76 [ 397.394074][ T5695] usb 5-1: device descriptor read/64, error -71 [ 397.499549][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 397.505799][ T44] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.519135][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.519189][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.543089][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.552933][ T44] usb 1-1: Product: syz [ 397.552988][ T44] usb 1-1: Manufacturer: syz [ 397.553010][ T44] usb 1-1: SerialNumber: syz [ 397.579434][ T44] usb 1-1: 0:2 : does not exist [ 397.627063][ T5695] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 397.777202][ T5695] usb 5-1: device descriptor read/64, error -71 [ 397.789006][ T44] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 397.797309][ T989] usb 2-1: new full-speed USB device number 77 using dummy_hcd [ 397.836806][ T44] usb 1-1: USB disconnect, device number 93 [ 397.869358][ T8094] udevd[8094]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 397.889779][ T5695] usb usb5-port1: attempt power cycle [ 397.967544][ T989] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 397.981902][ T989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.990841][ T989] usb 2-1: Product: syz [ 397.990858][ T989] usb 2-1: Manufacturer: syz [ 397.990870][ T989] usb 2-1: SerialNumber: syz [ 398.009384][ T989] usb 2-1: config 0 descriptor?? [ 398.019707][ T989] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 398.237073][ T5695] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 398.257609][ T5695] usb 5-1: device descriptor read/8, error -71 [ 398.497112][ T5695] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 398.518443][ T5695] usb 5-1: device descriptor read/8, error -71 [ 398.597042][ T44] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 398.628252][ T5695] usb usb5-port1: unable to enumerate USB device [ 398.746953][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 398.748758][ T44] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 398.752097][ T44] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 398.752166][ T44] usb 1-1: config 0 has no interface number 0 [ 398.752263][ T44] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 398.752320][ T44] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 398.760388][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.760458][ T44] usb 1-1: Product: syz [ 398.760510][ T44] usb 1-1: Manufacturer: syz [ 398.760560][ T44] usb 1-1: SerialNumber: syz [ 398.773321][ T44] usb 1-1: config 0 descriptor?? [ 398.779972][T10754] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 398.780219][T10754] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 398.991373][T10754] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 398.992887][T10754] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 399.196984][ T44] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 399.398482][ T44] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 399.398525][ T44] asix 1-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 399.399120][ T44] asix 1-1:0.34: probe with driver asix failed with error -61 [ 399.507257][ T44] usb 4-1: USB disconnect, device number 114 [ 400.259987][ T989] gspca_stk1135: reg_w 0x2ff err -71 [ 400.270344][ T989] gspca_stk1135: serial bus timeout: status=0x00 [ 400.270388][ T989] gspca_stk1135: Sensor write failed [ 400.270425][ T989] gspca_stk1135: serial bus timeout: status=0x00 [ 400.270439][ T989] gspca_stk1135: Sensor write failed [ 400.270474][ T989] gspca_stk1135: serial bus timeout: status=0x00 [ 400.270496][ T989] gspca_stk1135: Sensor read failed [ 400.270531][ T989] gspca_stk1135: serial bus timeout: status=0x00 [ 400.270546][ T989] gspca_stk1135: Sensor read failed [ 400.270557][ T989] gspca_stk1135: Detected sensor type unknown (0x0) [ 400.270596][ T989] gspca_stk1135: serial bus timeout: status=0x00 [ 400.270610][ T989] gspca_stk1135: Sensor read failed [ 400.270644][ T989] gspca_stk1135: serial bus timeout: status=0x00 [ 400.283750][ T989] gspca_stk1135: Sensor read failed [ 400.283779][ T989] gspca_stk1135: serial bus timeout: status=0x00 [ 400.283787][ T989] gspca_stk1135: Sensor write failed [ 400.283813][ T989] gspca_stk1135: serial bus timeout: status=0x00 [ 400.283820][ T989] gspca_stk1135: Sensor write failed [ 400.283879][ T989] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 400.394445][ T989] usb 2-1: USB disconnect, device number 77 [ 400.506766][T10772] block nbd0: server does not support multiple connections per device. [ 400.510973][T10772] block nbd0: shutting down sockets [ 400.877068][ T5723] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 400.923091][T10781] Bluetooth: MGMT ver 1.23 [ 400.932110][T10781] Bluetooth: hci0: unsupported parameter 5161 [ 400.932149][T10781] Bluetooth: hci0: unsupported parameter 8192 [ 400.932193][T10781] Bluetooth: hci0: unsupported parameter 5161 [ 400.932209][T10781] Bluetooth: hci0: unsupported parameter 8192 [ 401.037082][ T5723] usb 4-1: Using ep0 maxpacket: 16 [ 401.043415][ T5723] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 401.049381][ T5723] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 401.049471][ T5723] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 401.056485][ T5723] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.056538][ T5723] usb 4-1: Product: syz [ 401.056588][ T5723] usb 4-1: Manufacturer: syz [ 401.056618][ T5723] usb 4-1: SerialNumber: syz [ 401.064070][ T5723] usb 4-1: config 0 descriptor?? [ 401.080873][ T44] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 401.086672][ T5723] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 401.086745][ T5723] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 401.187101][ T5716] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 401.288186][ T44] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 401.294978][ T44] usb 2-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 401.295055][ T44] usb 2-1: Product: syz [ 401.295154][ T44] usb 2-1: SerialNumber: syz [ 401.318489][ T44] usb 2-1: config 0 descriptor?? [ 401.328465][ T5716] usb 5-1: device descriptor read/64, error -71 [ 401.330725][ T44] hso 2-1:0.0: Not our interface [ 401.380785][ T44] usb 1-1: USB disconnect, device number 94 [ 401.577217][ T5716] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 401.675506][ T5723] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 401.677213][ T5723] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 401.682174][ T5723] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 401.682192][ T5723] em28xx 4-1:0.0: No AC97 audio processor [ 401.712034][ T5723] usb 4-1: USB disconnect, device number 115 [ 401.716013][ T5723] em28xx 4-1:0.0: Disconnecting em28xx [ 401.719236][ T5716] usb 5-1: device descriptor read/64, error -71 [ 401.734600][ T5723] em28xx: Freeing device [ 401.767373][ T44] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 401.827225][ T5716] usb usb5-port1: attempt power cycle [ 401.937429][ T44] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 401.946617][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.946700][ T44] usb 1-1: Product: syz [ 401.946746][ T44] usb 1-1: Manufacturer: syz [ 401.946781][ T44] usb 1-1: SerialNumber: syz [ 401.975614][ T44] usb 1-1: config 0 descriptor?? [ 401.986841][ T44] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 402.167074][ T5716] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 402.184224][T10784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.185842][T10784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.204587][ T5716] usb 5-1: device descriptor read/8, error -71 [ 402.344267][T10792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.349411][T10792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.403258][ T44] gspca_sunplus: reg_r err -71 [ 402.412836][ T44] usb 1-1: USB disconnect, device number 95 [ 402.438090][ T5716] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 402.457719][ T5716] usb 5-1: device descriptor read/8, error -71 [ 402.567342][ T5716] usb usb5-port1: unable to enumerate USB device [ 402.962585][T10798] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'. [ 402.979608][T10798] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 403.187031][ T5695] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 403.338909][ T5695] usb 4-1: New USB device found, idVendor=0586, idProduct=3427, bcdDevice=46.59 [ 403.350336][ T5695] usb 4-1: config 7 has an invalid interface number: 62 but max is 2 [ 403.350381][ T5695] usb 4-1: config 7 has an invalid interface number: 108 but max is 2 [ 403.350406][ T5695] usb 4-1: config 7 contains an unexpected descriptor of type 0x1, skipping [ 403.350499][ T5695] usb 4-1: config 7 has no interface number 1 [ 403.350558][ T5695] usb 4-1: config 7 has no interface number 2 [ 403.350724][ T5695] usb 4-1: config 7 interface 62 altsetting 7 bulk endpoint 0xC has invalid maxpacket 32 [ 403.350799][ T5695] usb 4-1: config 7 interface 62 altsetting 7 endpoint 0x4 has invalid wMaxPacketSize 0 [ 403.352242][ T5695] usb 4-1: config 7 interface 62 altsetting 7 endpoint 0x9 has an invalid bInterval 128, changing to 7 [ 403.352371][ T5695] usb 4-1: config 7 interface 62 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 403.352412][ T5695] usb 4-1: config 7 interface 62 altsetting 7 has a duplicate endpoint with address 0x4, skipping [ 403.352471][ T5695] usb 4-1: config 7 interface 62 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 403.352530][ T5695] usb 4-1: config 7 interface 62 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 403.352581][ T5695] usb 4-1: config 7 interface 62 altsetting 7 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 403.352650][ T5695] usb 4-1: config 7 interface 62 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 403.352705][ T5695] usb 4-1: config 7 interface 62 altsetting 7 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 403.352771][ T5695] usb 4-1: config 7 interface 62 altsetting 7 has an endpoint descriptor with address 0xB9, changing to 0x89 [ 403.352833][ T5695] usb 4-1: config 7 interface 62 altsetting 7 endpoint 0x89 has an invalid bInterval 43, changing to 7 [ 403.352897][ T5695] usb 4-1: config 7 interface 62 altsetting 7 endpoint 0x89 has invalid maxpacket 50314, setting to 1024 [ 403.352964][ T5695] usb 4-1: config 7 interface 62 altsetting 7 bulk endpoint 0xA has invalid maxpacket 16 [ 403.353025][ T5695] usb 4-1: config 7 interface 62 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 403.353086][ T5695] usb 4-1: config 7 interface 62 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 403.353140][ T5695] usb 4-1: config 7 interface 62 altsetting 7 has a duplicate endpoint with address 0x1, skipping [ 403.353409][ T5695] usb 4-1: config 7 interface 62 altsetting 7 has 17 endpoint descriptors, different from the interface descriptor's value: 16 [ 403.353541][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has a duplicate endpoint with address 0x3, skipping [ 403.353607][ T5695] usb 4-1: config 7 interface 0 altsetting 252 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 403.353685][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has a duplicate endpoint with address 0x1, skipping [ 403.353765][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 403.353821][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has a duplicate endpoint with address 0x6, skipping [ 403.353894][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has a duplicate endpoint with address 0x7, skipping [ 403.353965][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has a duplicate endpoint with address 0x1, skipping [ 403.354047][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 403.354112][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has a duplicate endpoint with address 0x6, skipping [ 403.354277][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has a duplicate endpoint with address 0x5, skipping [ 403.354344][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has an endpoint descriptor with address 0x1E, changing to 0xE [ 403.354786][ T5695] usb 4-1: config 7 interface 0 altsetting 252 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 403.354862][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has a duplicate endpoint with address 0xE, skipping [ 403.354928][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has an invalid descriptor for endpoint zero, skipping [ 403.354985][ T5695] usb 4-1: config 7 interface 0 altsetting 252 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 403.355060][ T5695] usb 4-1: config 7 interface 62 has no altsetting 0 [ 403.355123][ T5695] usb 4-1: config 7 interface 0 has no altsetting 0 [ 403.412631][ T5695] usb 4-1: Dual-Role OTG device on HNP port [ 403.413265][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.413594][ T5695] usb 4-1: Product: ᰊ [ 403.413638][ T5695] usb 4-1: Manufacturer: ⚁ﵨ쥄잃赧軘⫃篕響좭阍뀡祫玾￥⺣榟蔩ꍼ鬂傜䕞㗛ᗦ맓㠕컌␪䳲꒵ạ蜏秨槍꯸赭䡸轙湫鲹諉턎茚兤䃃၂焥ꮖヹ얥࡜㇮脖ꫂ熰裔舯숟㷦됋븓텃㢮蔡멦៾㤛폣蛉ྯ失敥Œ蛮䢩ཙ渄⣏ [ 403.413698][ T5695] usb 4-1: SerialNumber: І [ 403.442692][T10796] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 403.461303][T10796] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 403.473203][T10796] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 403.490437][T10796] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 403.775350][ T5695] dm9601 4-1:7.62: probe with driver dm9601 failed with error -22 [ 403.918084][ T5695] dm9601 4-1:7.108: probe with driver dm9601 failed with error -22 [ 403.929387][ T5723] usb 2-1: USB disconnect, device number 78 [ 403.949270][ T5695] dm9601 4-1:7.0: probe with driver dm9601 failed with error -22 [ 404.002213][ T5695] usb 4-1: USB disconnect, device number 116 [ 404.297429][ T5723] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 404.376994][ T989] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 404.447017][ T5723] usb 2-1: Using ep0 maxpacket: 16 [ 404.448046][ T5723] usb 2-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 404.452427][ T5723] usb 2-1: config 0 has an invalid interface number: 34 but max is 0 [ 404.452495][ T5723] usb 2-1: config 0 has no interface number 0 [ 404.453036][ T5723] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 404.453105][ T5723] usb 2-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 404.461323][ T5723] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.461406][ T5723] usb 2-1: Product: syz [ 404.461439][ T5723] usb 2-1: Manufacturer: syz [ 404.461486][ T5723] usb 2-1: SerialNumber: syz [ 404.478292][ T5723] usb 2-1: config 0 descriptor?? [ 404.480981][T10808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.481101][T10808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.536106][ T989] usb 5-1: Using ep0 maxpacket: 16 [ 404.540982][ T989] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 404.551564][ T989] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 404.551853][ T989] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 404.565064][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.565191][ T989] usb 5-1: Product: syz [ 404.565274][ T989] usb 5-1: Manufacturer: syz [ 404.565399][ T989] usb 5-1: SerialNumber: syz [ 404.599053][ T989] usb 5-1: config 0 descriptor?? [ 404.624135][ T989] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 404.624232][ T989] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 404.690663][T10808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.692700][T10808] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 404.895501][ T5723] asix 2-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 404.896246][ T5723] asix 2-1:0.34: probe with driver asix failed with error -61 [ 405.211731][ T989] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 405.213474][ T989] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 405.218111][ T10] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 405.235046][ T989] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 405.235092][ T989] em28xx 5-1:0.0: No AC97 audio processor [ 405.258880][ T989] usb 5-1: USB disconnect, device number 25 [ 405.266564][ T989] em28xx 5-1:0.0: Disconnecting em28xx [ 405.283505][ T989] em28xx: Freeing device [ 405.367775][ T10] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0103, bcdDevice= 3.6a [ 405.373272][ T10] usb 1-1: config 240 has an invalid interface number: 170 but max is 0 [ 405.373339][ T10] usb 1-1: config 240 has no interface number 0 [ 405.373435][ T10] usb 1-1: config 240 interface 170 has no altsetting 0 [ 405.389607][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.389689][ T10] usb 1-1: Product: syz [ 405.389730][ T10] usb 1-1: Manufacturer: syz [ 405.389771][ T10] usb 1-1: SerialNumber: syz [ 405.626013][T10818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.632785][T10818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.860345][ T10] usb_ehset_test 1-1:240.170: probe with driver usb_ehset_test failed with error -32 [ 405.871320][ T10] usb 1-1: USB disconnect, device number 96 [ 406.227055][ T1855] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 406.365141][T10827] fuse: Unknown parameter '_|d' [ 406.382154][ T1855] usb 4-1: unable to get BOS descriptor or descriptor too short [ 406.382224][ T1855] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 406.393872][ T1855] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 406.393960][ T1855] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 406.394078][ T1855] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 406.394191][ T1855] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 406.394309][ T1855] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 406.394384][ T1855] usb 4-1: config 1 interface 1 has no altsetting 0 [ 406.421985][ T1855] usb 4-1: string descriptor 0 read error: -22 [ 406.422391][ T1855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.565615][T10832] netlink: NAT attribute has 5 unknown bytes [ 406.565688][T10832] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 406.584166][T10832] tipc: Started in network mode [ 406.584225][T10832] tipc: Node identity ac14142f, cluster identity 4711 [ 406.599915][T10832] tipc: New replicast peer: 127.0.0.1 [ 406.604950][T10832] tipc: Enabled bearer , priority 10 [ 406.613101][T10832] tipc: New replicast peer: 255.255.255.255 [ 406.717104][ T10] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 406.865409][ T1855] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 406.865464][ T1855] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 406.865485][ T1855] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 406.868911][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 406.874635][ T10] usb 5-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 406.908306][ T989] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 406.919065][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.919135][ T10] usb 5-1: Product: syz [ 406.919181][ T10] usb 5-1: Manufacturer: syz [ 406.919196][ T10] usb 5-1: SerialNumber: syz [ 406.949090][ T10] usb 5-1: config 0 descriptor?? [ 406.961727][ T10] radio-usb-si4713 5-1:0.0: Si4713 development board discovered: (10C4:8244) [ 407.041240][ T5769] usb 2-1: USB disconnect, device number 79 [ 407.079119][ T989] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 407.093459][ T989] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 407.093512][ T989] usb 1-1: Product: syz [ 407.093626][ T989] usb 1-1: SerialNumber: syz [ 407.120188][ T989] usb 1-1: config 0 descriptor?? [ 407.335825][ T989] usb 1-1: USB disconnect, device number 97 [ 407.385012][ T10] radio-usb-si4713 5-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 407.386344][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 407.413793][ T10] usb 5-1: USB disconnect, device number 26 [ 407.468378][ T1855] usb 4-1: USB disconnect, device number 117 [ 407.739708][ T1855] tipc: Node number set to 2886997039 [ 408.066350][T10850] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.1442'. [ 408.108200][ T5695] wiimote 0005:057E:0306.0012: hidraw0: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 408.129314][ T5695] wiimote 0005:057E:0306.0012: New device registered [ 408.407171][ T1855] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 408.417192][ T5695] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 408.557013][ T1855] usb 5-1: Using ep0 maxpacket: 32 [ 408.559914][ T1855] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 408.562461][ T1855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 408.562533][ T1855] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 408.562627][ T1855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.578054][ T1855] usb 5-1: config 0 descriptor?? [ 408.597260][ T1855] hub 5-1:0.0: USB hub found [ 408.597452][ T5695] usb 2-1: Using ep0 maxpacket: 8 [ 408.612306][ T5695] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 408.647344][ T5695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.660971][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.670383][ T5695] usb 2-1: Product: syz [ 408.675079][ T5695] usb 2-1: Manufacturer: syz [ 408.675101][ T5695] usb 2-1: SerialNumber: syz [ 408.777037][ T25] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 408.800117][ T1855] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 408.907372][T10847] wiimote 0005:057E:0306.0012: Device removed [ 408.915628][ T5695] usb 2-1: USB disconnect, device number 80 [ 408.946966][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 408.951187][ T25] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 408.955525][ T25] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 408.955601][ T25] usb 1-1: config 0 has no interface number 0 [ 408.955681][ T25] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 408.955752][ T25] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 408.962006][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.962064][ T25] usb 1-1: Product: syz [ 408.962101][ T25] usb 1-1: Manufacturer: syz [ 408.962141][ T25] usb 1-1: SerialNumber: syz [ 408.974489][ T25] usb 1-1: config 0 descriptor?? [ 408.975354][T10864] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 408.975736][T10864] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 409.064389][ T1855] usbhid 5-1:0.0: can't add hid device: -71 [ 409.064515][ T1855] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 409.097765][ T1855] usb 5-1: USB disconnect, device number 27 [ 409.107116][ T10] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 409.183129][T10864] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 409.183600][T10864] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 409.258654][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 409.265726][ T10] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 409.265790][ T10] usb 4-1: Product: syz [ 409.265826][ T10] usb 4-1: SerialNumber: syz [ 409.283939][ T10] usb 4-1: config 0 descriptor?? [ 409.387697][ T25] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 409.388219][ T25] asix 1-1:0.34: probe with driver asix failed with error -61 [ 409.497994][ T10] usb 4-1: USB disconnect, device number 118 [ 410.517125][ T10] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 410.667033][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 410.674580][ T10] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 410.685852][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.697381][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 410.714985][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.715049][ T10] usb 4-1: Product: syz [ 410.715171][ T10] usb 4-1: Manufacturer: syz [ 410.715205][ T10] usb 4-1: SerialNumber: syz [ 410.755567][ T10] usb 4-1: 0:2 : does not exist [ 410.770898][T10894] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.1455'. [ 410.954607][ T10] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 410.992343][ T10] usb 4-1: USB disconnect, device number 119 [ 411.026407][ T8094] udevd[8094]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.028800][ T5716] wiimote 0005:057E:0306.0012: detected device: Nintendo Wii Remote (Gen 1) [ 411.114789][ T5716] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0012/input/input44 [ 411.150590][ T5716] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0012/input/input45 [ 411.201116][ T5716] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0012/input/input43 [ 411.342598][T10897] fuse: Bad value for 'fd' [ 411.508793][T10900] FAULT_INJECTION: forcing a failure. [ 411.508793][T10900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.508852][T10900] CPU: 1 UID: 0 PID: 10900 Comm: syz.3.1457 Not tainted syzkaller #0 PREEMPT(full) [ 411.508876][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 411.508917][T10900] Call Trace: [ 411.508947][T10900] [ 411.508978][T10900] dump_stack_lvl+0xe8/0x150 [ 411.509058][T10900] should_fail_ex+0x3eb/0x540 [ 411.509188][T10900] _copy_from_iter+0x1d3/0x1660 [ 411.509270][T10900] ? __alloc_skb+0x27a/0x7a0 [ 411.509349][T10900] ? __alloc_skb+0x27a/0x7a0 [ 411.509413][T10900] ? __alloc_skb+0x27a/0x7a0 [ 411.509475][T10900] ? __pfx__copy_from_iter+0x10/0x10 [ 411.509558][T10900] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 411.509631][T10900] ? __alloc_skb+0x27a/0x7a0 [ 411.509709][T10900] ? __alloc_skb+0x27a/0x7a0 [ 411.509810][T10900] ? netlink_sendmsg+0x650/0xb40 [ 411.509894][T10900] ? skb_put+0x112/0x210 [ 411.509968][T10900] netlink_sendmsg+0x6c0/0xb40 [ 411.510067][T10900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.510170][T10900] ? apparmor_socket_sendmsg+0x98/0x360 [ 411.510253][T10900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.510336][T10900] sock_sendmsg_nosec+0x13a/0x180 [ 411.510432][T10900] ____sys_sendmsg+0x54e/0x850 [ 411.510534][T10900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.510652][T10900] ? import_iovec+0x73/0xa0 [ 411.510717][T10900] ___sys_sendmsg+0x2a5/0x360 [ 411.510791][T10900] ? __lock_acquire+0x6df/0x2e50 [ 411.510913][T10900] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.511062][T10900] ? __fget_files+0x2a/0x420 [ 411.511114][T10900] ? __fget_files+0x3a2/0x420 [ 411.511199][T10900] __x64_sys_sendmsg+0x1b1/0x290 [ 411.511273][T10900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.511379][T10900] do_syscall_64+0x166/0x520 [ 411.511433][T10900] ? trace_irq_disable+0x3b/0x140 [ 411.511510][T10900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.511567][T10900] ? clear_bhb_loop+0x70/0xc0 [ 411.511628][T10900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.511684][T10900] RIP: 0033:0x7f2c10f9e0d9 [ 411.511731][T10900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.511773][T10900] RSP: 002b:00007f2c0f1f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.511837][T10900] RAX: ffffffffffffffda RBX: 00007f2c11225fa0 RCX: 00007f2c10f9e0d9 [ 411.511877][T10900] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003 [ 411.511908][T10900] RBP: 00007f2c0f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 411.511945][T10900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 411.511975][T10900] R13: 00007f2c11226038 R14: 00007f2c11225fa0 R15: 00007ffd253b91d8 [ 411.512054][T10900] [ 411.577958][ T44] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 411.757335][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 411.764840][ T44] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 411.822138][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.822230][ T44] usb 5-1: Product: syz [ 411.822302][ T44] usb 5-1: Manufacturer: syz [ 411.822345][ T44] usb 5-1: SerialNumber: syz [ 411.870417][ T44] usb 5-1: config 0 descriptor?? [ 411.890554][ T44] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 411.911229][ T5695] usb 1-1: USB disconnect, device number 98 [ 412.277034][ T5695] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 412.429994][ T5695] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 412.445361][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 412.445438][ T5695] usb 1-1: Product: syz [ 412.445504][ T5695] usb 1-1: SerialNumber: syz [ 412.475286][ T5695] usb 1-1: config 0 descriptor?? [ 412.690561][ T5695] usb 1-1: USB disconnect, device number 99 [ 412.876992][ T10] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 412.907196][ T44] gspca_ov534_9: reg_w failed -110 [ 413.037023][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 413.042051][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 413.048756][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 413.048840][ T10] usb 4-1: config 0 has no interface number 0 [ 413.048953][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 413.057897][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.057976][ T10] usb 4-1: Product: syz [ 413.058018][ T10] usb 4-1: Manufacturer: syz [ 413.058062][ T10] usb 4-1: SerialNumber: syz [ 413.071601][ T10] usb 4-1: config 0 descriptor?? [ 413.207066][ T44] gspca_ov534_9: Unknown sensor 0000 [ 413.207170][ T44] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 414.204893][T10919] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1464'. [ 414.355014][ T1855] usb 5-1: USB disconnect, device number 28 [ 414.866491][T10931] FAULT_INJECTION: forcing a failure. [ 414.866491][T10931] name failslab, interval 1, probability 0, space 0, times 0 [ 414.866560][T10931] CPU: 1 UID: 0 PID: 10931 Comm: syz.0.1467 Not tainted syzkaller #0 PREEMPT(full) [ 414.866628][T10931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 414.866680][T10931] Call Trace: [ 414.866716][T10931] [ 414.866757][T10931] dump_stack_lvl+0xe8/0x150 [ 414.866851][T10931] should_fail_ex+0x3eb/0x540 [ 414.866947][T10931] should_failslab+0xa8/0x100 [ 414.867010][T10931] __kmalloc_cache_noprof+0xa3/0x600 [ 414.867091][T10931] ? rcu_is_watching+0x16/0xb0 [ 414.867148][T10931] ? vhost_task_create+0x123/0x380 [ 414.867230][T10931] ? vhost_task_create+0x123/0x380 [ 414.867331][T10931] vhost_task_create+0x123/0x380 [ 414.867411][T10931] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 414.867466][T10931] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 414.867522][T10931] ? __pfx_vhost_task_create+0x10/0x10 [ 414.867601][T10931] ? register_lock_class+0x31/0x2e0 [ 414.867709][T10931] ? __pfx_vhost_task_fn+0x10/0x10 [ 414.867812][T10931] ? kasan_quarantine_put+0xbb/0x1f0 [ 414.867915][T10931] kvm_mmu_post_init_vm+0x147/0x2b0 [ 414.867985][T10931] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 414.868087][T10931] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 414.868188][T10931] kvm_vcpu_ioctl+0xa61/0xfd0 [ 414.868311][T10931] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 414.868400][T10931] ? hook_file_ioctl+0x1f2/0x600 [ 414.868530][T10931] ? __fget_files+0x2a/0x420 [ 414.868602][T10931] ? __fget_files+0x2a/0x420 [ 414.868665][T10931] ? __fget_files+0x3a2/0x420 [ 414.868727][T10931] ? __fget_files+0x2a/0x420 [ 414.868804][T10931] ? bpf_lsm_file_ioctl+0x9/0x20 [ 414.868861][T10931] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 414.868949][T10931] __se_sys_ioctl+0xfc/0x170 [ 414.869030][T10931] do_syscall_64+0x166/0x520 [ 414.869092][T10931] ? trace_irq_disable+0x3b/0x140 [ 414.869165][T10931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.869222][T10931] ? clear_bhb_loop+0x70/0xc0 [ 414.869284][T10931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.869343][T10931] RIP: 0033:0x7f6b3899e0d9 [ 414.869422][T10931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.869475][T10931] RSP: 002b:00007f6b39837028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 414.869538][T10931] RAX: ffffffffffffffda RBX: 00007f6b38c25fa0 RCX: 00007f6b3899e0d9 [ 414.869579][T10931] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 414.869618][T10931] RBP: 00007f6b39837090 R08: 0000000000000000 R09: 0000000000000000 [ 414.869652][T10931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 414.869691][T10931] R13: 00007f6b38c26038 R14: 00007f6b38c25fa0 R15: 00007ffed9894618 [ 414.869797][T10931] [ 415.073346][ T1855] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 415.277108][ T1855] usb 5-1: Using ep0 maxpacket: 16 [ 415.283953][ T1855] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 415.297036][ T1855] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 415.299257][ T1855] usb 5-1: config 0 has no interface number 0 [ 415.299929][ T1855] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 415.299985][ T1855] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 415.341713][ T1855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.351318][ T1855] usb 5-1: Product: syz [ 415.351384][ T1855] usb 5-1: Manufacturer: syz [ 415.351406][ T1855] usb 5-1: SerialNumber: syz [ 415.372718][ T10] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 415.372794][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 415.372831][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 415.372918][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 415.413102][ T1855] usb 5-1: config 0 descriptor?? [ 415.421472][T10933] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.421639][T10933] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.451346][ T10] usb 4-1: USB disconnect, device number 120 [ 415.633506][T10933] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.633773][T10933] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.842745][ T1855] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 415.855099][ T1855] asix 5-1:0.34: probe with driver asix failed with error -61 [ 416.198165][T10945] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1472'. [ 416.306989][ T5695] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 416.461678][ T5695] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 416.464566][ T5695] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 130 [ 416.464648][ T5695] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.474485][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 416.474553][ T5695] usb 4-1: Product: syz [ 416.474595][ T5695] usb 4-1: Manufacturer: syz [ 416.474638][ T5695] usb 4-1: SerialNumber: syz [ 416.487844][T10939] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 416.700658][ T5695] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 121 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 416.927518][ T10] usb 4-1: USB disconnect, device number 121 [ 416.950563][ T10] usblp0: removed [ 417.377055][ T5695] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 417.527044][ T5695] usb 1-1: Using ep0 maxpacket: 16 [ 417.534154][ T5695] usb 1-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 417.538157][ T5695] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 99, changing to 10 [ 417.538275][ T5695] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.547932][ T5695] usb 1-1: config 0 descriptor?? [ 417.847556][ T1855] usb 5-1: USB disconnect, device number 29 [ 417.867079][ T10] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 417.962703][ T5695] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 417.962766][ T5695] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 417.962859][ T5695] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 417.962952][ T5695] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 417.963017][ T5695] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 417.963091][ T5695] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 417.963162][ T5695] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 417.963224][ T5695] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 417.963297][ T5695] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 417.963361][ T5695] elo 0003:04E7:0009.0013: unknown main item tag 0x0 [ 418.061160][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 418.070408][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 418.081782][ T10] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 418.084442][ T5695] elo 0003:04E7:0009.0013: hidraw1: USB HID v7e.ff Device [HID 04e7:0009] on usb-dummy_hcd.0-1/input0 [ 418.104174][ T10] usb 4-1: config 0 has no interface number 0 [ 418.104260][ T10] usb 4-1: config 0 interface 12 has no altsetting 0 [ 418.134799][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.134848][ T10] usb 4-1: Product: syz [ 418.134882][ T10] usb 4-1: Manufacturer: syz [ 418.134903][ T10] usb 4-1: SerialNumber: syz [ 418.167184][ T10] usb 4-1: config 0 descriptor?? [ 418.191385][ T5695] usb 1-1: USB disconnect, device number 100 [ 418.309888][T10967] fido_id[10967]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 419.027083][ T25] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 419.057098][ T5703] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 419.116976][ T5695] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 419.177852][ T25] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 419.180793][ T25] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 419.180937][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.181012][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.181078][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 419.181230][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.195257][ T25] usb 2-1: config 0 descriptor?? [ 419.227706][ T5703] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 419.238685][ T5703] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.238773][ T5703] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 419.238861][ T5703] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 419.238989][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.283317][ T5695] usb 5-1: Using ep0 maxpacket: 8 [ 419.292371][ T5695] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 419.316640][ T5695] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 419.316789][ T5695] usb 5-1: config 0 has no interface number 0 [ 419.319562][ T5695] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 419.319711][ T5695] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 419.319855][ T5695] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 419.319927][ T5695] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 419.320035][ T5695] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 419.320209][ T5695] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.327919][T10971] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 419.415234][ T5695] usb 5-1: config 0 descriptor?? [ 419.451642][ T5695] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 419.630159][T10973] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 419.642534][T10974] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 419.656008][ T25] plantronics 0003:047F:FFFF.0014: reserved main item tag 0xd [ 419.681131][ T25] plantronics 0003:047F:FFFF.0014: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 419.861711][T10969] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 419.862578][T10969] overlayfs: NFS export requires an index dir, falling back to nfs_export=off. [ 419.892414][ T25] usb 2-1: USB disconnect, device number 81 [ 420.479804][ T10] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 420.479883][ T10] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 420.479930][ T10] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 420.480015][ T10] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 420.526164][ T10] usb 4-1: USB disconnect, device number 122 [ 420.576317][T10979] FAULT_INJECTION: forcing a failure. [ 420.576317][T10979] name failslab, interval 1, probability 0, space 0, times 0 [ 420.576375][T10979] CPU: 1 UID: 0 PID: 10979 Comm: syz.1.1483 Not tainted syzkaller #0 PREEMPT(full) [ 420.576399][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.576414][T10979] Call Trace: [ 420.576455][T10979] [ 420.576487][T10979] dump_stack_lvl+0xe8/0x150 [ 420.576587][T10979] should_fail_ex+0x3eb/0x540 [ 420.576704][T10979] should_failslab+0xa8/0x100 [ 420.576780][T10979] __kmalloc_cache_node_noprof+0xaa/0x620 [ 420.576877][T10979] ? __get_vm_area_node+0x155/0x2f0 [ 420.576945][T10979] ? __get_vm_area_node+0x155/0x2f0 [ 420.577054][T10979] __get_vm_area_node+0x155/0x2f0 [ 420.577148][T10979] __vmalloc_node_range_noprof+0x343/0x1540 [ 420.577224][T10979] ? copy_process+0x820/0x43e0 [ 420.577296][T10979] ? percpu_ref_get_many+0x19/0x140 [ 420.577381][T10979] ? __memcg_slab_post_alloc_hook+0x4d7/0xf80 [ 420.577487][T10979] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 420.577561][T10979] ? dup_task_struct+0x52/0xa00 [ 420.577628][T10979] ? trace_kmem_cache_alloc+0x29/0xe0 [ 420.577705][T10979] ? memcpy_and_pad+0x48/0x80 [ 420.577782][T10979] __vmalloc_node_noprof+0xc2/0x100 [ 420.577856][T10979] ? copy_process+0x820/0x43e0 [ 420.577917][T10979] ? copy_process+0x820/0x43e0 [ 420.578008][T10979] dup_task_struct+0x2c6/0xa00 [ 420.578106][T10979] copy_process+0x820/0x43e0 [ 420.578255][T10979] ? rcu_is_watching+0x16/0xb0 [ 420.578328][T10979] ? __pfx_copy_process+0x10/0x10 [ 420.578416][T10979] ? mutex_init_lockdep+0xdf/0x110 [ 420.578487][T10979] vhost_task_create+0x1f9/0x380 [ 420.578575][T10979] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 420.578640][T10979] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 420.578704][T10979] ? __pfx_vhost_task_create+0x10/0x10 [ 420.578784][T10979] ? register_lock_class+0x31/0x2e0 [ 420.578882][T10979] ? __pfx_vhost_task_fn+0x10/0x10 [ 420.578988][T10979] ? kasan_quarantine_put+0xbb/0x1f0 [ 420.579093][T10979] kvm_mmu_post_init_vm+0x147/0x2b0 [ 420.579177][T10979] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 420.579282][T10979] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 420.579386][T10979] kvm_vcpu_ioctl+0xa61/0xfd0 [ 420.579471][T10979] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 420.579552][T10979] ? hook_file_ioctl+0x1f2/0x600 [ 420.579733][T10979] ? __fget_files+0x2a/0x420 [ 420.579817][T10979] ? __fget_files+0x2a/0x420 [ 420.579881][T10979] ? __fget_files+0x3a2/0x420 [ 420.579946][T10979] ? __fget_files+0x2a/0x420 [ 420.580020][T10979] ? bpf_lsm_file_ioctl+0x9/0x20 [ 420.580094][T10979] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 420.580179][T10979] __se_sys_ioctl+0xfc/0x170 [ 420.580274][T10979] do_syscall_64+0x166/0x520 [ 420.580336][T10979] ? trace_irq_disable+0x3b/0x140 [ 420.580415][T10979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.580476][T10979] ? clear_bhb_loop+0x70/0xc0 [ 420.580554][T10979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.580602][T10979] RIP: 0033:0x7f198a79e0d9 [ 420.580657][T10979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.580709][T10979] RSP: 002b:00007f19889f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.580773][T10979] RAX: ffffffffffffffda RBX: 00007f198aa25fa0 RCX: 00007f198a79e0d9 [ 420.580832][T10979] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 420.580858][T10979] RBP: 00007f19889f6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.580890][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.580923][T10979] R13: 00007f198aa26038 R14: 00007f198aa25fa0 R15: 00007ffd28ef6588 [ 420.581015][T10979] [ 420.582535][T10979] syz.1.1483: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 420.582846][T10979] CPU: 1 UID: 0 PID: 10979 Comm: syz.1.1483 Not tainted syzkaller #0 PREEMPT(full) [ 420.582894][T10979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 420.582935][T10979] Call Trace: [ 420.582957][T10979] [ 420.582988][T10979] dump_stack_lvl+0xe8/0x150 [ 420.583074][T10979] warn_alloc+0x24d/0x270 [ 420.583144][T10979] ? __kasan_kmalloc+0x22/0xb0 [ 420.583247][T10979] ? __pfx_warn_alloc+0x10/0x10 [ 420.583323][T10979] ? __get_vm_area_node+0x155/0x2f0 [ 420.583409][T10979] ? __get_vm_area_node+0x2a9/0x2f0 [ 420.583504][T10979] __vmalloc_node_range_noprof+0x36b/0x1540 [ 420.583587][T10979] ? percpu_ref_get_many+0x19/0x140 [ 420.583683][T10979] ? __memcg_slab_post_alloc_hook+0x4d7/0xf80 [ 420.583827][T10979] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 420.583900][T10979] ? dup_task_struct+0x52/0xa00 [ 420.583987][T10979] ? trace_kmem_cache_alloc+0x29/0xe0 [ 420.584043][T10979] ? memcpy_and_pad+0x48/0x80 [ 420.584132][T10979] __vmalloc_node_noprof+0xc2/0x100 [ 420.584222][T10979] ? copy_process+0x820/0x43e0 [ 420.584296][T10979] ? copy_process+0x820/0x43e0 [ 420.584375][T10979] dup_task_struct+0x2c6/0xa00 [ 420.584463][T10979] copy_process+0x820/0x43e0 [ 420.584606][T10979] ? rcu_is_watching+0x16/0xb0 [ 420.584683][T10979] ? __pfx_copy_process+0x10/0x10 [ 420.584774][T10979] ? mutex_init_lockdep+0xdf/0x110 [ 420.584850][T10979] vhost_task_create+0x1f9/0x380 [ 420.584932][T10979] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 420.584997][T10979] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 420.585078][T10979] ? __pfx_vhost_task_create+0x10/0x10 [ 420.585155][T10979] ? register_lock_class+0x31/0x2e0 [ 420.585269][T10979] ? __pfx_vhost_task_fn+0x10/0x10 [ 420.585374][T10979] ? kasan_quarantine_put+0xbb/0x1f0 [ 420.585482][T10979] kvm_mmu_post_init_vm+0x147/0x2b0 [ 420.585547][T10979] kvm_arch_vcpu_ioctl_run+0x7c/0x19c0 [ 420.585640][T10979] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 420.585757][T10979] kvm_vcpu_ioctl+0xa61/0xfd0 [ 420.585868][T10979] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 420.585950][T10979] ? hook_file_ioctl+0x1f2/0x600 [ 420.586074][T10979] ? __fget_files+0x2a/0x420 [ 420.586152][T10979] ? __fget_files+0x2a/0x420 [ 420.586215][T10979] ? __fget_files+0x3a2/0x420 [ 420.586279][T10979] ? __fget_files+0x2a/0x420 [ 420.586353][T10979] ? bpf_lsm_file_ioctl+0x9/0x20 [ 420.586424][T10979] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 420.586538][T10979] __se_sys_ioctl+0xfc/0x170 [ 420.586627][T10979] do_syscall_64+0x166/0x520 [ 420.586692][T10979] ? trace_irq_disable+0x3b/0x140 [ 420.586772][T10979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.586839][T10979] ? clear_bhb_loop+0x70/0xc0 [ 420.586914][T10979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.586978][T10979] RIP: 0033:0x7f198a79e0d9 [ 420.587035][T10979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.587099][T10979] RSP: 002b:00007f19889f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.587157][T10979] RAX: ffffffffffffffda RBX: 00007f198aa25fa0 RCX: 00007f198a79e0d9 [ 420.587210][T10979] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000b [ 420.587252][T10979] RBP: 00007f19889f6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.587302][T10979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.587343][T10979] R13: 00007f198aa26038 R14: 00007f198aa25fa0 R15: 00007ffd28ef6588 [ 420.587437][T10979] [ 420.610243][T10979] Mem-Info: [ 420.610296][T10979] active_anon:39528 inactive_anon:0 isolated_anon:0 [ 420.610296][T10979] active_file:15 inactive_file:56645 isolated_file:0 [ 420.610296][T10979] unevictable:0 dirty:122 writeback:0 [ 420.610296][T10979] slab_reclaimable:10891 slab_unreclaimable:95340 [ 420.610296][T10979] mapped:26201 shmem:33444 pagetables:1592 [ 420.610296][T10979] sec_pagetables:2 bounce:0 [ 420.610296][T10979] kernel_misc_reclaimable:0 [ 420.610296][T10979] free:1280963 free_pcp:9535 free_cma:0 [ 420.610460][T10979] Node 0 active_anon:158112kB inactive_anon:0kB active_file:60kB inactive_file:226164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104596kB dirty:472kB writeback:0kB shmem:133776kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11964kB pagetables:6248kB sec_pagetables:8kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 420.610664][T10979] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:416kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:208kB dirty:16kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 420.610807][T10979] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 420.610966][T10979] lowmem_reserve[]: 0 2482 2484 2484 2484 [ 420.611138][T10979] Node 0 DMA32 free:1164392kB boost:0kB min:34096kB low:42620kB high:51144kB reserved_highatomic:0kB free_highatomic:0kB active_anon:158112kB inactive_anon:0kB active_file:60kB inactive_file:226164kB unevictable:0kB writepending:472kB zspages:0kB present:3129332kB managed:2542380kB mlocked:0kB bounce:0kB free_pcp:38120kB local_pcp:20200kB free_cma:0kB [ 420.611313][T10979] lowmem_reserve[]: 0 0 1 1 1 [ 420.611410][T10979] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1712kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:8kB free_cma:0kB [ 420.611562][T10979] lowmem_reserve[]: 0 0 0 0 0 [ 420.622241][T10979] Node 1 Normal free:3944100kB boost:0kB min:55780kB low:69724kB high:83668kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:416kB unevictable:0kB writepending:16kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 420.622419][T10979] lowmem_reserve[]: 0 0 0 0 0 [ 420.622530][T10979] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 420.622958][T10979] Node 0 DMA32: 2192*4kB (UME) 996*8kB (UME) 407*16kB (UME) 182*32kB (UM) 46*64kB (UME) 44*128kB (UM) 43*256kB (UME) 11*512kB (ME) 10*1024kB (UME) 3*2048kB (UME) 267*4096kB (UM) = 1164304kB [ 420.654802][T10979] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 420.655196][T10979] Node 1 Normal: 7*4kB (UM) 9*8kB (UM) 14*16kB (UM) 11*32kB (UM) 12*64kB (UM) 6*128kB (U) 2*256kB (UM) 4*512kB (UM) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3944100kB [ 420.659778][T10979] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.659837][T10979] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 420.666080][T10979] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 420.666179][T10979] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 420.666230][T10979] 90100 total pagecache pages [ 420.666261][T10979] 0 pages in swap cache [ 420.666282][T10979] Free swap = 124996kB [ 420.666305][T10979] Total swap = 124996kB [ 420.666337][T10979] 2097051 pages RAM [ 420.666358][T10979] 0 pages HighMem/MovableOnly [ 420.666385][T10979] 429412 pages reserved [ 420.666407][T10979] 0 pages cma reserved [ 420.967748][ T5703] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 421.006614][ T5703] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input46 [ 421.947806][ T5703] usb 1-1: USB disconnect, device number 101 [ 421.948053][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 422.020568][ T5695] usb 5-1: USB disconnect, device number 30 [ 422.115442][ T5695] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 422.229408][T10991] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 422.529495][ T5695] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 422.558490][ T5703] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 422.686955][ T5695] usb 5-1: Using ep0 maxpacket: 16 [ 422.687658][ T5703] usb 1-1: device descriptor read/64, error -71 [ 422.705887][ T5695] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 422.715220][ T5695] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 422.715310][ T5695] usb 5-1: config 0 has no interface number 0 [ 422.715417][ T5695] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 422.715503][ T5695] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 422.733953][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.733987][ T5695] usb 5-1: Product: syz [ 422.734029][ T5695] usb 5-1: Manufacturer: syz [ 422.734047][ T5695] usb 5-1: SerialNumber: syz [ 422.779851][ T5695] usb 5-1: config 0 descriptor?? [ 422.784344][T10992] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 422.784830][T10992] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 422.937149][ T5703] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 423.018868][T10992] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 423.019355][T10992] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 423.076966][ T5703] usb 1-1: device descriptor read/64, error -71 [ 423.189444][ T5703] usb usb1-port1: attempt power cycle [ 423.221115][ T5695] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 423.221733][ T5695] asix 5-1:0.34: probe with driver asix failed with error -61 [ 423.307006][ T1855] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 423.456994][ T1855] usb 2-1: Using ep0 maxpacket: 32 [ 423.463270][ T1855] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 423.467169][ T1855] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 423.467246][ T1855] usb 2-1: config 0 has no interface number 0 [ 423.467361][ T1855] usb 2-1: config 0 interface 12 has no altsetting 0 [ 423.475561][ T1855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.475630][ T1855] usb 2-1: Product: syz [ 423.475670][ T1855] usb 2-1: Manufacturer: syz [ 423.475712][ T1855] usb 2-1: SerialNumber: syz [ 423.487144][ T1855] usb 2-1: config 0 descriptor?? [ 423.577981][ T5703] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 423.597658][ T5703] usb 1-1: device descriptor read/8, error -71 [ 423.836955][ T5703] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 423.857634][ T5703] usb 1-1: device descriptor read/8, error -71 [ 423.969657][ T5703] usb usb1-port1: unable to enumerate USB device [ 424.002653][T11012] input: syz1 as /devices/virtual/input/input48 [ 424.256946][ T5703] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 424.407823][ T5703] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 1.41 [ 424.410664][ T5703] usb 4-1: config 0 has an invalid interface number: 4 but max is 0 [ 424.410736][ T5703] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 424.410798][ T5703] usb 4-1: config 0 has no interface number 0 [ 424.410886][ T5703] usb 4-1: config 0 interface 4 has no altsetting 0 [ 424.415006][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=246, SerialNumber=2 [ 424.415075][ T5703] usb 4-1: Product: syz [ 424.415117][ T5703] usb 4-1: SerialNumber: syz [ 424.423309][ T5703] usb 4-1: config 0 descriptor?? [ 424.430999][ T5703] ftdi_sio 4-1:0.4: FTDI USB Serial Device converter detected [ 424.434266][ T5703] usb 4-1: Detected SIO [ 424.438788][ T5703] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 424.630786][ T5703] usb 4-1: USB disconnect, device number 123 [ 424.651736][ T5703] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 424.654752][ T5703] ftdi_sio 4-1:0.4: device disconnected [ 425.184512][ T5695] usb 5-1: USB disconnect, device number 31 [ 425.667968][ T10] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 425.731663][ T1855] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 425.731751][ T1855] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 425.731798][ T1855] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 425.732060][ T1855] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 425.781651][ T1855] usb 2-1: USB disconnect, device number 82 [ 425.817818][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 425.820562][ T10] usb 1-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 425.825509][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 425.835012][ T10] usb 1-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 425.835086][ T10] usb 1-1: Product: syz [ 425.835158][ T10] usb 1-1: Manufacturer: syz [ 425.835200][ T10] usb 1-1: SerialNumber: syz [ 426.109836][ T10] usb 1-1: Handspring Visor / Palm OS: No valid connect info available [ 426.109895][ T10] usb 1-1: Handspring Visor / Palm OS: port 40, is for unknown use [ 426.109918][ T10] usb 1-1: Handspring Visor / Palm OS: port 156, is for unknown use [ 426.109978][ T10] usb 1-1: Handspring Visor / Palm OS: Number of ports: 2 [ 426.311865][ T10] visor 1-1:1.0: Handspring Visor / Palm OS converter detected [ 426.328451][ T10] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 426.367988][ T10] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 426.514713][ T10] usb 1-1: USB disconnect, device number 106 [ 426.526675][ T10] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 426.544315][ T10] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 426.554882][ T10] visor 1-1:1.0: device disconnected [ 426.616977][ T5695] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 426.777104][ T5695] usb 5-1: Using ep0 maxpacket: 16 [ 426.783550][ T5695] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 426.786382][ T5695] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 426.786450][ T5695] usb 5-1: config 0 has no interface number 0 [ 426.786550][ T5695] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 426.786617][ T5695] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 426.792522][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.792591][ T5695] usb 5-1: Product: syz [ 426.792625][ T5695] usb 5-1: Manufacturer: syz [ 426.792664][ T5695] usb 5-1: SerialNumber: syz [ 426.798785][ T5695] usb 5-1: config 0 descriptor?? [ 426.801183][T11035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 426.801631][T11035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 426.874276][ T989] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 427.012727][T11035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 427.022829][T11035] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 427.047419][ T989] usb 2-1: Using ep0 maxpacket: 16 [ 427.054700][ T989] usb 2-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00 [ 427.067580][ T989] usb 2-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 427.067627][ T989] usb 2-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.067673][ T989] usb 2-1: config 0 interface 0 has no altsetting 0 [ 427.067712][ T989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.112851][ T989] usb 2-1: config 0 descriptor?? [ 427.235946][ T5695] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 427.236571][ T5695] asix 5-1:0.34: probe with driver asix failed with error -61 [ 427.549917][ T989] input: HID 04b4:bca1 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:04B4:BCA1.0015/input/input49 [ 427.645720][ T989] cypress 0003:04B4:BCA1.0015: input,hidraw0: USB HID v0.00 Joystick [HID 04b4:bca1] on usb-dummy_hcd.1-1/input0 [ 427.828764][ T5695] usb 2-1: USB disconnect, device number 83 [ 428.117704][ T989] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 428.267110][ T5695] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 428.279109][ T989] usb 1-1: unable to get BOS descriptor or descriptor too short [ 428.279186][ T989] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 428.281886][ T989] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.281962][ T989] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 428.282098][ T989] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 52, changing to 7 [ 428.282170][ T989] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 9272, setting to 1024 [ 428.297427][ T989] usb 1-1: string descriptor 0 read error: -22 [ 428.297774][ T989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.320142][ T25] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 428.360214][ T989] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 428.426932][ T5695] usb 2-1: Using ep0 maxpacket: 16 [ 428.433995][ T5695] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.437342][ T5695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.437418][ T5695] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.443028][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.443096][ T5695] usb 2-1: Product: syz [ 428.443139][ T5695] usb 2-1: Manufacturer: syz [ 428.443179][ T5695] usb 2-1: SerialNumber: syz [ 428.527644][ T25] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 428.536296][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.536378][ T25] usb 4-1: Product: syz [ 428.536419][ T25] usb 4-1: Manufacturer: syz [ 428.536461][ T25] usb 4-1: SerialNumber: syz [ 428.552458][ T25] usb 4-1: config 0 descriptor?? [ 428.571476][ T25] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 428.644775][ T5695] usb 2-1: 0:2 : does not exist [ 428.654535][ T989] usb 1-1: USB disconnect, device number 107 [ 428.676794][ T5695] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 428.725080][ T5695] usb 2-1: USB disconnect, device number 84 [ 428.798914][ T8094] udevd[8094]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 429.266488][T11072] fuse: Bad value for 'fd' [ 429.399604][T11077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'. [ 429.430340][ T1855] usb 5-1: USB disconnect, device number 32 [ 429.704864][T11090] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 429.727372][T11088] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 430.267033][ T1855] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 430.427560][ T1855] usb 2-1: Using ep0 maxpacket: 16 [ 430.433860][ T1855] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.448500][ T1855] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.448546][ T1855] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.472464][ T1855] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.482128][ T1855] usb 2-1: Product: syz [ 430.482176][ T1855] usb 2-1: Manufacturer: syz [ 430.482195][ T1855] usb 2-1: SerialNumber: syz [ 430.513785][ T1855] usb 2-1: 0:2 : does not exist [ 430.520793][ T30] audit: type=1400 audit(1787684796.002:242): apparmor="STATUS" info="profile missing flags" error=-71 profile="unconfined" name="//o" pid=11105 comm="syz.0.1527" name="//o" offset=35 [ 430.723283][ T1855] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 430.806580][ T1855] usb 2-1: USB disconnect, device number 85 [ 430.886270][ T8094] udevd[8094]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 430.888567][ T5695] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 431.037768][ T5695] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 431.052102][ T5695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.052173][ T5695] usb 1-1: Product: syz [ 431.052959][ T5695] usb 1-1: Manufacturer: syz [ 431.053051][ T5695] usb 1-1: SerialNumber: syz [ 431.067942][ T5695] usb 1-1: config 0 descriptor?? [ 431.086059][ T5695] ch341 1-1:0.0: ch341-uart converter detected [ 431.107800][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 431.203823][ T25] gspca_stk1135: reg_w 0x350 err -71 [ 431.204895][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 431.204930][ T25] gspca_stk1135: Sensor write failed [ 431.205120][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 431.205218][ T25] gspca_stk1135: Sensor write failed [ 431.205293][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 431.205316][ T25] gspca_stk1135: Sensor read failed [ 431.209774][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 431.209859][ T25] gspca_stk1135: Sensor read failed [ 431.209880][ T25] gspca_stk1135: Detected sensor type unknown (0x0) [ 431.209958][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 431.210027][ T25] gspca_stk1135: Sensor read failed [ 431.210104][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 431.210135][ T25] gspca_stk1135: Sensor read failed [ 431.210254][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 431.210282][ T25] gspca_stk1135: Sensor write failed [ 431.210403][ T25] gspca_stk1135: serial bus timeout: status=0x00 [ 431.210424][ T25] gspca_stk1135: Sensor write failed [ 431.210829][ T25] stk1135 4-1:0.0: probe with driver stk1135 failed with error -71 [ 431.238816][ T25] usb 4-1: USB disconnect, device number 124 [ 431.287388][ T10] usb 5-1: device descriptor read/64, error -71 [ 431.527082][ T10] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 431.626998][ T5716] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 431.656995][ T10] usb 5-1: device descriptor read/64, error -71 [ 431.769549][ T10] usb usb5-port1: attempt power cycle [ 431.777832][ T5716] usb 2-1: Using ep0 maxpacket: 16 [ 431.784162][ T5716] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 431.796100][ T5716] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 431.796147][ T5716] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 431.809664][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.809694][ T5716] usb 2-1: Product: syz [ 431.809737][ T5716] usb 2-1: Manufacturer: syz [ 431.809756][ T5716] usb 2-1: SerialNumber: syz [ 431.849758][ T5716] usb 2-1: config 0 descriptor?? [ 431.876230][ T5716] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 431.876324][ T5716] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 432.137078][ T10] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 432.158753][ T10] usb 5-1: device descriptor read/8, error -71 [ 432.383126][ T5695] usb 1-1: failed to send control message: -71 [ 432.383303][ T5695] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 432.399954][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 432.417543][ T5695] usb 1-1: USB disconnect, device number 108 [ 432.427736][ T10] usb 5-1: device descriptor read/8, error -71 [ 432.434926][ T5695] ch341 1-1:0.0: device disconnected [ 432.465505][ T5716] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 432.471035][ T5716] em28xx 2-1:0.0: Config register raw data: 0x8d [ 432.537639][ T10] usb usb5-port1: unable to enumerate USB device [ 432.672954][ T10] usb 2-1: USB disconnect, device number 86 [ 432.685076][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 432.695332][ T10] em28xx: Freeing device [ 433.687084][ T989] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 433.757026][ T5703] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 433.836996][ T989] usb 4-1: Using ep0 maxpacket: 16 [ 433.840006][ T989] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 433.842806][ T989] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 433.842832][ T989] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 433.850470][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.850545][ T989] usb 4-1: Product: syz [ 433.850586][ T989] usb 4-1: Manufacturer: syz [ 433.850632][ T989] usb 4-1: SerialNumber: syz [ 433.904477][ T989] usb 4-1: 0:2 : does not exist [ 433.916970][ T5703] usb 2-1: Using ep0 maxpacket: 16 [ 433.923738][ T5703] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 433.927560][ T5703] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 433.927682][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 433.937455][ T5703] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.937531][ T5703] usb 2-1: Product: syz [ 433.937574][ T5703] usb 2-1: Manufacturer: syz [ 433.937615][ T5703] usb 2-1: SerialNumber: syz [ 433.960817][ T5703] usb 2-1: config 0 descriptor?? [ 433.984958][ T5703] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 433.984993][ T5703] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 434.102330][ T989] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 434.153064][ T989] usb 4-1: USB disconnect, device number 125 [ 434.186517][ T8094] udevd[8094]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 434.228874][T11152] FAULT_INJECTION: forcing a failure. [ 434.228874][T11152] name failslab, interval 1, probability 0, space 0, times 0 [ 434.246121][T11152] CPU: 0 UID: 0 PID: 11152 Comm: syz.4.1544 Not tainted syzkaller #0 PREEMPT(full) [ 434.246152][T11152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 434.246165][T11152] Call Trace: [ 434.246177][T11152] [ 434.246191][T11152] dump_stack_lvl+0xe8/0x150 [ 434.246251][T11152] should_fail_ex+0x3eb/0x540 [ 434.246289][T11152] should_failslab+0xa8/0x100 [ 434.246313][T11152] __kmalloc_noprof+0xfe/0x720 [ 434.246348][T11152] ? __kmalloc_cache_noprof+0x14d/0x600 [ 434.246370][T11152] ? fuse_direct_io+0x359/0x2ad0 [ 434.246407][T11152] ? fuse_direct_io+0x359/0x2ad0 [ 434.246440][T11152] fuse_direct_io+0x359/0x2ad0 [ 434.246495][T11152] ? rcu_is_watching+0x16/0xb0 [ 434.246515][T11152] ? __pfx_fuse_direct_io+0x10/0x10 [ 434.246534][T11152] ? __kmalloc_cache_noprof+0x321/0x600 [ 434.246577][T11152] ? __kmalloc_cache_noprof+0x14d/0x600 [ 434.246610][T11152] ? __raw_spin_lock_init+0x45/0x100 [ 434.246644][T11152] fuse_direct_IO+0x963/0x12d0 [ 434.246683][T11152] ? __pfx_fuse_direct_IO+0x10/0x10 [ 434.246721][T11152] ? cap_inode_need_killpriv+0x51/0x60 [ 434.246748][T11152] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 434.246772][T11152] ? security_inode_need_killpriv+0x71/0x240 [ 434.246803][T11152] ? file_remove_privs_flags+0x49b/0x610 [ 434.246862][T11152] ? down_write+0x16b/0x200 [ 434.246893][T11152] generic_file_direct_write+0x1d0/0x3f0 [ 434.246930][T11152] fuse_file_write_iter+0xd16/0x11b0 [ 434.246969][T11152] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 434.247009][T11152] ? lock_acquire+0x115/0x350 [ 434.247062][T11152] vfs_write+0x612/0xba0 [ 434.247101][T11152] ? __pfx_vfs_write+0x10/0x10 [ 434.247138][T11152] ? __fget_files+0x2a/0x420 [ 434.247175][T11152] ksys_write+0x150/0x270 [ 434.247216][T11152] ? __pfx_ksys_write+0x10/0x10 [ 434.247256][T11152] do_syscall_64+0x166/0x520 [ 434.247279][T11152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.247306][T11152] ? clear_bhb_loop+0x70/0xc0 [ 434.247331][T11152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.247348][T11152] RIP: 0033:0x7f427179e0d9 [ 434.247383][T11152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.247403][T11152] RSP: 002b:00007f4272580028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 434.247427][T11152] RAX: ffffffffffffffda RBX: 00007f4271a26090 RCX: 00007f427179e0d9 [ 434.247443][T11152] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000004 [ 434.247462][T11152] RBP: 00007f4272580090 R08: 0000000000000000 R09: 0000000000000000 [ 434.247472][T11152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.247481][T11152] R13: 00007f4271a26128 R14: 00007f4271a26090 R15: 00007ffd2329ecf8 [ 434.247506][T11152] [ 434.608909][ T5703] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 434.612383][ T5703] em28xx 2-1:0.0: Config register raw data: 0x78 [ 434.612435][ T5703] em28xx 2-1:0.0: I2S Audio (3 sample rate(s)) [ 434.612481][ T5703] em28xx 2-1:0.0: No AC97 audio processor [ 435.059875][ T5703] usb 2-1: USB disconnect, device number 87 [ 435.097573][ T5769] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 435.267355][ T5769] usb 1-1: Using ep0 maxpacket: 16 [ 435.273885][ T5769] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 435.285210][ T5769] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 435.299257][ T5769] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 435.313734][ T5769] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.322969][ T5769] usb 1-1: Product: syz [ 435.327736][ T5769] usb 1-1: Manufacturer: syz [ 435.327758][ T5769] usb 1-1: SerialNumber: syz [ 435.343309][ T5769] usb 1-1: config 0 descriptor?? [ 435.367034][ T5769] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 435.377676][ T5769] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 435.972966][ T5769] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 435.974632][ T5769] em28xx 1-1:0.0: Config register raw data: 0x8d [ 436.179325][ T5703] usb 1-1: USB disconnect, device number 109 [ 436.192575][ T5703] em28xx 1-1:0.0: Disconnecting em28xx [ 436.201880][ T5703] em28xx: Freeing device [ 436.527266][ T5769] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 436.597400][ T5716] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 436.678984][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 436.684428][ T5769] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 436.692342][ T5769] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 436.692413][ T5769] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 436.706685][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.706766][ T5769] usb 2-1: Product: syz [ 436.706809][ T5769] usb 2-1: Manufacturer: syz [ 436.707329][ T5769] usb 2-1: SerialNumber: syz [ 436.757093][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 436.765054][ T5716] usb 4-1: unable to get BOS descriptor or descriptor too short [ 436.774072][ T5716] usb 4-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 436.787313][ T5716] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 436.807850][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.807895][ T5716] usb 4-1: Product: syz [ 436.807916][ T5716] usb 4-1: Manufacturer: syz [ 436.807937][ T5716] usb 4-1: SerialNumber: syz [ 436.837442][ T5769] usb 2-1: 0:2 : does not exist [ 436.974468][ T5769] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 437.069217][T11191] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 437.088332][ T5716] usb 4-1: Cannot retrieve CPort count: -71 [ 437.088402][ T5716] usb 4-1: Cannot retrieve CPort count: -71 [ 437.088445][ T5716] es2_ap_driver 4-1:7.0: probe with driver es2_ap_driver failed with error -71 [ 437.103232][ T5769] usb 2-1: USB disconnect, device number 88 [ 437.123266][ T5716] usb 4-1: USB disconnect, device number 126 [ 437.236308][ T8094] udevd[8094]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 437.384214][T11202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1563'. [ 437.410661][T11202] netlink: 'syz.0.1563': attribute type 2 has an invalid length. [ 437.490229][T11204] FAULT_INJECTION: forcing a failure. [ 437.490229][T11204] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 437.490284][T11204] CPU: 0 UID: 0 PID: 11204 Comm: syz.4.1564 Not tainted syzkaller #0 PREEMPT(full) [ 437.490311][T11204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 437.490325][T11204] Call Trace: [ 437.490335][T11204] [ 437.490346][T11204] dump_stack_lvl+0xe8/0x150 [ 437.490381][T11204] should_fail_ex+0x3eb/0x540 [ 437.490419][T11204] _copy_from_user+0x2d/0xb0 [ 437.490455][T11204] kstrtouint_from_user+0xd6/0x180 [ 437.490489][T11204] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 437.490529][T11204] ? lock_acquire+0x115/0x350 [ 437.490565][T11204] proc_fail_nth_write+0x8e/0x210 [ 437.490618][T11204] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 437.490657][T11204] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 437.490687][T11204] vfs_write+0x296/0xba0 [ 437.490724][T11204] ? __pfx_vfs_write+0x10/0x10 [ 437.490754][T11204] ? __fget_files+0x2a/0x420 [ 437.490783][T11204] ? __fget_files+0x3a2/0x420 [ 437.490808][T11204] ? __fget_files+0x2a/0x420 [ 437.490844][T11204] ksys_write+0x150/0x270 [ 437.490876][T11204] ? __pfx_ksys_write+0x10/0x10 [ 437.490917][T11204] do_syscall_64+0x166/0x520 [ 437.490941][T11204] ? trace_irq_disable+0x3b/0x140 [ 437.490974][T11204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.490997][T11204] ? clear_bhb_loop+0x70/0xc0 [ 437.491025][T11204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.491048][T11204] RIP: 0033:0x7f427175e90e [ 437.491082][T11204] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 437.491100][T11204] RSP: 002b:00007f42725a0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 437.491124][T11204] RAX: ffffffffffffffda RBX: 00007f42725a16c0 RCX: 00007f427175e90e [ 437.491149][T11204] RDX: 0000000000000001 RSI: 00007f42725a10a0 RDI: 0000000000000004 [ 437.491216][T11204] RBP: 00007f42725a1090 R08: 0000000000000000 R09: 0000000000000000 [ 437.491259][T11204] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.491329][T11204] R13: 00007f4271a26038 R14: 00007f4271a25fa0 R15: 00007ffd2329ecf8 [ 437.491424][T11204] [ 438.147007][ T989] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 438.288358][ T5716] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 438.300324][ T989] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 438.321259][ T989] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 438.321319][ T989] usb 1-1: Product: syz [ 438.321351][ T989] usb 1-1: SerialNumber: syz [ 438.352400][ T989] usb 1-1: config 0 descriptor?? [ 438.450128][ T5716] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 438.468936][ T5716] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 438.472652][ T5716] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 438.472723][ T5716] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.490910][ T5716] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.490938][ T5716] usb 2-1: Product: syz [ 438.490956][ T5716] usb 2-1: Manufacturer: syz [ 438.490973][ T5716] usb 2-1: SerialNumber: syz [ 438.554957][ T5716] hub 2-1:1.0: bad descriptor, ignoring hub [ 438.555011][ T5716] hub 2-1:1.0: probe with driver hub failed with error -5 [ 438.697169][ T10] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 438.767659][ T5716] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 89 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 438.788043][ T5695] usb 1-1: USB disconnect, device number 110 [ 438.839150][T11222] FAULT_INJECTION: forcing a failure. [ 438.839150][T11222] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 438.839201][T11222] CPU: 1 UID: 0 PID: 11222 Comm: syz.3.1572 Not tainted syzkaller #0 PREEMPT(full) [ 438.839226][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 438.839239][T11222] Call Trace: [ 438.839297][T11222] [ 438.839328][T11222] dump_stack_lvl+0xe8/0x150 [ 438.839427][T11222] should_fail_ex+0x3eb/0x540 [ 438.839540][T11222] prepare_alloc_pages+0x223/0x600 [ 438.839636][T11222] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 438.839751][T11222] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 438.839843][T11222] ? __pfx_policy_nodemask+0x10/0x10 [ 438.839903][T11222] ? lock_acquire+0x115/0x350 [ 438.840004][T11222] alloc_pages_mpol+0x21e/0x390 [ 438.840075][T11222] folio_alloc_mpol_noprof+0x39/0x160 [ 438.840136][T11222] vma_alloc_folio_noprof+0xe1/0x1e0 [ 438.840202][T11222] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 438.840265][T11222] ? __anon_vma_prepare+0x411/0x4d0 [ 438.840342][T11222] do_pte_missing+0x173a/0x34b0 [ 438.840456][T11222] handle_mm_fault+0x1a53/0x3750 [ 438.840537][T11222] ? handle_mm_fault+0xf1/0x3750 [ 438.840615][T11222] ? __pfx_handle_mm_fault+0x10/0x10 [ 438.840703][T11222] ? __lock_acquire+0x6df/0x2e50 [ 438.840782][T11222] ? lock_mm_and_find_vma+0xa7/0x340 [ 438.840857][T11222] do_user_addr_fault+0x746/0x1340 [ 438.840993][T11222] exc_page_fault+0x6a/0xc0 [ 438.841042][T11222] asm_exc_page_fault+0x26/0x30 [ 438.841089][T11222] RIP: 0010:__put_user_4+0xd/0x30 [ 438.841144][T11222] Code: 66 89 01 31 c9 0f 01 ca e9 40 98 03 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca e9 17 98 03 00 90 90 90 90 90 90 90 90 90 90 [ 438.841189][T11222] RSP: 0018:ffffc900038dfcd8 EFLAGS: 00050206 [ 438.841257][T11222] RAX: 0000000000000002 RBX: 0000000000000000 RCX: 0000200000000000 [ 438.841322][T11222] RDX: 000000000859fa7d RSI: ffffffff8e810bd4 RDI: ffffffff8c6ede80 [ 438.841350][T11222] RBP: ffffc900038dfe68 R08: ea00000000000000 R09: 0000000000000000 [ 438.841393][T11222] R10: 0000000000000000 R11: ffff8880232c29f8 R12: 1ffff9200071bfa4 [ 438.841435][T11222] R13: 0000000000000050 R14: 0000200000000000 R15: 0000000000000001 [ 438.841527][T11222] vt_ioctl+0x193f/0x20e0 [ 438.841601][T11222] ? __pfx_vt_ioctl+0x10/0x10 [ 438.841695][T11222] ? __fget_files+0x2a/0x420 [ 438.841778][T11222] ? tty_jobctrl_ioctl+0x378/0xba0 [ 438.841839][T11222] ? __fget_files+0x2a/0x420 [ 438.841911][T11222] tty_ioctl+0x920/0xdd0 [ 438.841992][T11222] ? __pfx_tty_ioctl+0x10/0x10 [ 438.842069][T11222] __se_sys_ioctl+0xfc/0x170 [ 438.842155][T11222] do_syscall_64+0x166/0x520 [ 438.842210][T11222] ? trace_irq_disable+0x3b/0x140 [ 438.842292][T11222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.842354][T11222] ? clear_bhb_loop+0x70/0xc0 [ 438.842440][T11222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.842533][T11222] RIP: 0033:0x7f2c10f9e0d9 [ 438.842583][T11222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.842632][T11222] RSP: 002b:00007f2c0f1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 438.842690][T11222] RAX: ffffffffffffffda RBX: 00007f2c11225fa0 RCX: 00007f2c10f9e0d9 [ 438.842725][T11222] RDX: 0000200000000000 RSI: 0000000000005600 RDI: 0000000000000003 [ 438.842765][T11222] RBP: 00007f2c0f1f6090 R08: 0000000000000000 R09: 0000000000000000 [ 438.842797][T11222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 438.842835][T11222] R13: 00007f2c11226038 R14: 00007f2c11225fa0 R15: 00007ffd253b91d8 [ 438.842916][T11222] [ 438.865802][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 438.881287][ T10] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice= 0.02 [ 438.981359][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.981390][ T10] usb 5-1: Product: syz [ 438.981405][ T10] usb 5-1: Manufacturer: syz [ 438.981420][ T10] usb 5-1: SerialNumber: syz [ 439.192143][ T10] usb 5-1: config 0 descriptor?? [ 439.426439][T11220] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.439532][T11220] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.521239][ T10] usb 2-1: USB disconnect, device number 89 [ 439.536291][ T10] usblp0: removed [ 439.629851][ T5695] usb 5-1: USB disconnect, device number 37 [ 439.897712][ T989] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 439.927053][ T5703] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 440.057230][ T989] usb 4-1: Using ep0 maxpacket: 16 [ 440.064032][ T989] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 440.080531][ T989] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.080575][ T989] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 440.081047][ T5703] usb 1-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00 [ 440.085498][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 440.085609][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.100001][ T5703] usb 1-1: config 0 descriptor?? [ 440.140778][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.153345][ T989] usb 4-1: Product: syz [ 440.153368][ T989] usb 4-1: Manufacturer: syz [ 440.153385][ T989] usb 4-1: SerialNumber: syz [ 440.154729][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.194468][ T989] usb 4-1: 0:2 : does not exist [ 440.399831][ T989] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 440.454613][T11251] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1579'. [ 440.488046][ T989] usb 4-1: USB disconnect, device number 127 [ 440.522988][ T5703] hid_parser_main: 470 callbacks suppressed [ 440.525637][ T5703] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 440.525740][ T5703] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 440.525823][ T5703] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 440.525883][ T5703] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 440.525951][ T5703] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 440.526022][ T5703] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 440.526092][ T5703] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 440.526148][ T5703] logitech 0003:046D:C294.0016: unknown main item tag 0x0 [ 440.624544][ T8094] udevd[8094]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.643741][ T5703] logitech 0003:046D:C294.0016: hidraw0: USB HID vef.fd Device [HID 046d:c294] on usb-dummy_hcd.0-1/input0 [ 440.643818][ T5703] logitech 0003:046D:C294.0016: no inputs found [ 441.123949][T11260] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 441.467406][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 441.632210][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 441.654947][ T10] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 441.654999][ T10] usb 4-1: Product: syz [ 441.655040][ T10] usb 4-1: SerialNumber: syz [ 441.688503][ T10] usb 4-1: config 0 descriptor?? [ 442.096612][T11282] netlink: 1688 bytes leftover after parsing attributes in process `syz.4.1590'. [ 442.111603][ T10] usb 4-1: USB disconnect, device number 2 [ 442.236994][ T5716] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 442.389152][ T5716] usb 2-1: not running at top speed; connect to a high speed hub [ 442.389218][ T5716] usb 2-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 442.409500][ T5716] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 442.409551][ T5716] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 442.409687][ T5716] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.454791][ T5716] uvcvideo 2-1:1.0: Found Unit with invalid ID 0 [ 442.672262][ T5716] usb 2-1: string descriptor 0 read error: -71 [ 442.672426][ T5716] uvcvideo 2-1:1.0: Found UVC 0.00 device (046d:0825) [ 442.672546][ T5716] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 442.741552][ T5716] usb 2-1: USB disconnect, device number 90 [ 442.934807][T11289] netlink: 'syz.3.1592': attribute type 21 has an invalid length. [ 442.951730][T11289] CIFS mount error: No usable UNC path provided in device string! [ 442.951730][T11289] [ 442.964668][T11289] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 443.040051][ T989] usb 1-1: USB disconnect, device number 111 [ 443.147572][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 443.307189][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 443.313736][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 443.325537][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.337675][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 443.353128][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.362364][ T10] usb 5-1: Product: syz [ 443.367137][ T10] usb 5-1: Manufacturer: syz [ 443.372465][ T10] usb 5-1: SerialNumber: syz [ 443.377474][ T5716] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 443.408263][ T10] usb 5-1: 0:2 : does not exist [ 443.533124][ T5716] usb 4-1: Using ep0 maxpacket: 32 [ 443.535818][ T5716] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 443.552578][ T5716] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 443.552626][ T5716] usb 4-1: config 0 has no interface number 0 [ 443.552692][ T5716] usb 4-1: config 0 interface 12 has no altsetting 0 [ 443.598836][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.598891][ T5716] usb 4-1: Product: syz [ 443.598909][ T5716] usb 4-1: Manufacturer: syz [ 443.598970][ T5716] usb 4-1: SerialNumber: syz [ 443.610150][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 443.658058][ T5716] usb 4-1: config 0 descriptor?? [ 443.702275][ T10] usb 5-1: USB disconnect, device number 38 [ 443.901420][ T8094] udevd[8094]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 444.428838][T11304] syzkaller1: entered promiscuous mode [ 444.428880][T11304] syzkaller1: entered allmulticast mode [ 444.439586][T11306] batadv_slave_0: entered promiscuous mode [ 444.518158][T11304] option changes via remount are deprecated (pid=11300 comm=syz.4.1597) [ 444.567901][T11310] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1599'. [ 445.006658][T11318] FAULT_INJECTION: forcing a failure. [ 445.006658][T11318] name failslab, interval 1, probability 0, space 0, times 0 [ 445.006719][T11318] CPU: 0 UID: 0 PID: 11318 Comm: syz.4.1602 Not tainted syzkaller #0 PREEMPT(full) [ 445.006744][T11318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.006786][T11318] Call Trace: [ 445.006811][T11318] [ 445.006862][T11318] dump_stack_lvl+0xe8/0x150 [ 445.006986][T11318] should_fail_ex+0x3eb/0x540 [ 445.007093][T11318] should_failslab+0xa8/0x100 [ 445.007161][T11318] __kmalloc_cache_noprof+0xa3/0x600 [ 445.007246][T11318] ? alloc_fs_context+0x66/0xd00 [ 445.007322][T11318] ? alloc_fs_context+0x66/0xd00 [ 445.007402][T11318] ? __get_fs_type+0x21/0x280 [ 445.007498][T11318] alloc_fs_context+0x66/0xd00 [ 445.007575][T11318] ? __get_fs_type+0x267/0x280 [ 445.007649][T11318] ? __get_fs_type+0x21/0x280 [ 445.007755][T11318] do_new_mount+0x17f/0xdc0 [ 445.007838][T11318] ? __pfx_do_new_mount+0x10/0x10 [ 445.007898][T11318] ? ns_capable+0x89/0xe0 [ 445.007947][T11318] ? path_mount+0x647/0x1050 [ 445.008033][T11318] ? user_path_at+0xd4/0x160 [ 445.008112][T11318] __se_sys_mount+0x31d/0x420 [ 445.008185][T11318] ? __pfx___se_sys_mount+0x10/0x10 [ 445.008258][T11318] ? __x64_sys_mount+0x20/0xc0 [ 445.008329][T11318] do_syscall_64+0x166/0x520 [ 445.008390][T11318] ? trace_irq_disable+0x3b/0x140 [ 445.008501][T11318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.008569][T11318] ? clear_bhb_loop+0x70/0xc0 [ 445.008627][T11318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.008687][T11318] RIP: 0033:0x7f427179e0d9 [ 445.008739][T11318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.008790][T11318] RSP: 002b:00007f42725a1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 445.008852][T11318] RAX: ffffffffffffffda RBX: 00007f4271a25fa0 RCX: 00007f427179e0d9 [ 445.008887][T11318] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000200000000380 [ 445.008924][T11318] RBP: 00007f42725a1090 R08: 0000000000000000 R09: 0000000000000000 [ 445.008965][T11318] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000002 [ 445.008992][T11318] R13: 00007f4271a26038 R14: 00007f4271a25fa0 R15: 00007ffd2329ecf8 [ 445.009077][T11318] [ 445.244582][T11305] batadv_slave_0: left promiscuous mode [ 445.343156][T11321] FAULT_INJECTION: forcing a failure. [ 445.343156][T11321] name failslab, interval 1, probability 0, space 0, times 0 [ 445.343220][T11321] CPU: 0 UID: 0 PID: 11321 Comm: syz.4.1603 Not tainted syzkaller #0 PREEMPT(full) [ 445.343247][T11321] Hardware name: Google Google Compute Engi ** replaying previous printk message ** [ 445.343247][T11321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.343261][T11321] Call Trace: [ 445.343270][T11321] [ 445.343324][T11321] dump_stack_lvl+0xe8/0x150 [ 445.343460][T11321] should_fail_ex+0x3eb/0x540 [ 445.343564][T11321] should_failslab+0xa8/0x100 [ 445.343641][T11321] __kmalloc_noprof+0xfe/0x720 [ 445.343725][T11321] ? __kasan_kmalloc+0x93/0xb0 [ 445.343809][T11321] ? aa_policy_init+0x75/0x300 [ 445.343873][T11321] ? aa_policy_init+0x75/0x300 [ 445.343944][T11321] aa_policy_init+0x75/0x300 [ 445.344026][T11321] aa_alloc_profile+0xa7/0x3e0 [ 445.344110][T11321] aa_unpack+0x17e8/0x7500 [ 445.344292][T11321] ? __pfx_aa_unpack+0x10/0x10 [ 445.344575][T11321] ? rcu_is_watching+0x16/0xb0 [ 445.344640][T11321] ? __lock_acquire+0x6df/0x2e50 [ 445.344755][T11321] ? __lock_acquire+0x6df/0x2e50 [ 445.344871][T11321] ? __lock_acquire+0x6df/0x2e50 [ 445.344981][T11321] ? __lock_acquire+0x6df/0x2e50 [ 445.345078][T11321] ? lock_acquire+0x115/0x350 [ 445.345182][T11321] ? lock_acquire+0x115/0x350 [ 445.345274][T11321] ? lock_acquire+0x115/0x350 [ 445.345407][T11321] ? __lock_acquire+0x6df/0x2e50 [ 445.345500][T11321] ? is_bpf_text_address+0x292/0x2b0 [ 445.345562][T11321] ? is_bpf_text_address+0x26/0x2b0 [ 445.345630][T11321] ? kernel_text_address+0xa5/0xe0 [ 445.345694][T11321] ? __kernel_text_address+0xd/0x30 [ 445.345792][T11321] ? unwind_get_return_address+0x4d/0x90 [ 445.345862][T11321] ? __lock_acquire+0x6df/0x2e50 [ 445.345957][T11321] ? __lock_acquire+0x6df/0x2e50 [ 445.346048][T11321] ? ima_match_policy+0x115/0x2230 [ 445.346129][T11321] ? lock_acquire+0x115/0x350 [ 445.346231][T11321] ? lock_acquire+0x115/0x350 [ 445.346332][T11321] ? is_bpf_text_address+0x26/0x2b0 [ 445.346423][T11321] aa_replace_profiles+0x24a/0x2ab0 [ 445.346535][T11321] ? kernel_text_address+0xa5/0xe0 [ 445.346627][T11321] ? __kernel_text_address+0xd/0x30 [ 445.346723][T11321] ? arch_stack_walk+0xfb/0x150 [ 445.346798][T11321] ? __pfx_aa_replace_profiles+0x10/0x10 [ 445.346897][T11321] ? stack_trace_save+0xa9/0x100 [ 445.346973][T11321] ? __pfx_stack_trace_save+0x10/0x10 [ 445.347062][T11321] ? stack_depot_save_flags+0x33/0x7f0 [ 445.347144][T11321] ? stack_depot_init+0x1a1/0x1b0 [ 445.347238][T11321] ? kasan_save_track+0x4f/0x80 [ 445.347320][T11321] ? kasan_save_track+0x3e/0x80 [ 445.347405][T11321] ? __kasan_kmalloc+0x93/0xb0 [ 445.347489][T11321] ? __kvmalloc_node_noprof+0x50f/0x820 [ 445.347572][T11321] ? aa_loaddata_alloc+0x74/0x1e0 [ 445.347648][T11321] ? aa_simple_write_to_buffer+0x80/0x1f0 [ 445.347731][T11321] ? policy_update+0x36e/0x640 [ 445.347814][T11321] ? profile_replace+0x1cb/0x320 [ 445.347897][T11321] ? vfs_write+0x296/0xba0 [ 445.347975][T11321] ? ksys_write+0x150/0x270 [ 445.348071][T11321] ? do_syscall_64+0x166/0x520 [ 445.348137][T11321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.348228][T11321] ? __lock_acquire+0x6df/0x2e50 [ 445.348368][T11321] ? lock_acquire+0x115/0x350 [ 445.348498][T11321] ? __might_fault+0xaf/0x130 [ 445.348582][T11321] ? aa_simple_write_to_buffer+0x160/0x1f0 [ 445.348677][T11321] policy_update+0x3a9/0x640 [ 445.348770][T11321] ? __pfx_policy_update+0x10/0x10 [ 445.348850][T11321] ? lock_acquire+0x115/0x350 [ 445.348964][T11321] profile_replace+0x1cb/0x320 [ 445.349050][T11321] ? __pfx_profile_replace+0x10/0x10 [ 445.349150][T11321] vfs_write+0x296/0xba0 [ 445.349236][T11321] ? __pfx_vfs_write+0x10/0x10 [ 445.349315][T11321] ? __fget_files+0x2a/0x420 [ 445.349396][T11321] ? __fget_files+0x3a2/0x420 [ 445.349450][T11321] ? __fget_files+0x2a/0x420 [ 445.349552][T11321] ksys_write+0x150/0x270 [ 445.349644][T11321] ? __pfx_ksys_write+0x10/0x10 [ 445.349745][T11321] do_syscall_64+0x166/0x520 [ 445.349801][T11321] ? trace_irq_disable+0x3b/0x140 [ 445.349893][T11321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.349949][T11321] ? clear_bhb_loop+0x70/0xc0 [ 445.350009][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 445.350064][T11321] RIP: 0033:0x7f427179e0d9 [ 445.350112][T11321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 445.350171][T11321] RSP: 002b:00007f42725a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 445.350233][T11321] RAX: ffffffffffffffda RBX: 00007f4271a25fa0 RCX: 00007f427179e0d9 [ 445.350275][T11321] RDX: 000000000000003d RSI: 0000200000000300 RDI: 0000000000000003 [ 445.350308][T11321] RBP: 00007f42725a1090 R08: 0000000000000000 R09: 0000000000000000 [ 445.350356][T11321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 445.350395][T11321] R13: 00007f4271a26038 R14: 00007f4271a25fa0 R15: 00007ffd2329ecf8 [ 445.350483][T11321] [ 445.375682][T11321] ------------[ cut here ]------------ [ 445.375722][T11321] AppArmor WARN aa_policy_destroy: (((!list_empty(&policy->profiles) && (&policy->profiles)->prev != ((void *) 0x122 + (0xdead000000000000UL))))): [ 445.375774][T11321] WARNING: security/apparmor/lib.c:508 at aa_policy_destroy+0x164/0x1b0, CPU#0: syz.4.1603/11321 [ 445.789289][ T5703] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 445.933075][T11321] Modules linked in: [ 445.939279][T11321] CPU: 0 UID: 0 PID: 11321 Comm: syz.4.1603 Not tainted syzkaller #0 PREEMPT(full) [ 445.950711][T11321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 445.961858][T11321] RIP: 0010:aa_policy_destroy+0x16b/0x1b0 [ 445.968392][T11321] Code: 85 ed 7e 4d e8 56 98 33 fd 5b 41 5c 41 5e 41 5f 5d e9 49 44 5d 07 cc e8 43 98 33 fd 48 8d 3d fc fc 11 0c 48 c7 c6 54 ba 6b 8e <67> 48 0f b9 3a e9 04 ff ff ff e8 26 98 33 fd 48 8d 3d ef fc 11 0c [ 445.990245][T11321] RSP: 0018:ffffc900025cea00 EFLAGS: 00010293 [ 445.996336][ T5703] usb 1-1: unable to get BOS descriptor or descriptor too short [ 445.996800][ T5703] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 446.008059][ T5703] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 446.008747][ T5703] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 446.016633][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.018248][ T5703] usb 1-1: Product: syz [ 446.019116][ T5703] usb 1-1: Manufacturer: syz [ 446.019539][ T5703] usb 1-1: SerialNumber: syz [ 446.061380][T11321] RAX: ffffffff8494445d RBX: ffff88806882b400 RCX: ffff88802f0addc0 [ 446.070251][T11321] RDX: 0000000000000000 RSI: ffffffff8e6bba54 RDI: ffffffff90a64160 [ 446.079086][T11321] RBP: 0000000000000000 R08: 0000000000000cc0 R09: 00000000ffffffff [ 446.087973][T11321] R10: dffffc0000000000 R11: fffffbfff1e15c5f R12: dead000000000122 [ 446.096772][T11321] R13: ffff88806882b400 R14: ffff88806882b428 R15: dffffc0000000000 [ 446.106244][T11321] FS: 00007f42725a16c0(0000) GS:ffff888124888000(0000) knlGS:0000000000000000 [ 446.116566][T11321] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 446.123956][T11321] CR2: 00007f198a72d300 CR3: 0000000075cd4000 CR4: 00000000003526f0 [ 446.132036][ T5716] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 446.132319][ T5716] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 446.132371][ T5716] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 446.132567][ T5716] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 446.166739][T11321] Call Trace: [ 446.170428][T11321] [ 446.173680][T11321] aa_free_profile+0x9d/0x9f0 [ 446.178920][T11321] ? aa_policy_init+0xed/0x300 [ 446.180325][ T5716] usb 4-1: USB disconnect, device number 3 [ 446.180724][ T5703] usb 1-1: selecting invalid altsetting 1 [ 446.193089][ T5703] usb 1-1: unit 6 not found! [ 446.202075][T11321] aa_alloc_profile+0x1e4/0x3e0 [ 446.208151][T11321] aa_unpack+0x17e8/0x7500 [ 446.213560][T11321] ? __pfx_aa_unpack+0x10/0x10 [ 446.219045][T11321] ? rcu_is_watching+0x16/0xb0 [ 446.224327][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.229857][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.235340][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.240914][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.246407][T11321] ? lock_acquire+0x115/0x350 [ 446.251677][T11321] ? lock_acquire+0x115/0x350 [ 446.256906][T11321] ? lock_acquire+0x115/0x350 [ 446.262100][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.267629][T11321] ? is_bpf_text_address+0x292/0x2b0 [ 446.273475][T11321] ? is_bpf_text_address+0x26/0x2b0 [ 446.279305][T11321] ? kernel_text_address+0xa5/0xe0 [ 446.284976][T11321] ? __kernel_text_address+0xd/0x30 [ 446.290806][T11321] ? unwind_get_return_address+0x4d/0x90 [ 446.297478][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.302975][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.309228][T11321] ? ima_match_policy+0x115/0x2230 [ 446.314917][T11321] ? lock_acquire+0x115/0x350 [ 446.320640][T11321] ? lock_acquire+0x115/0x350 [ 446.325856][T11321] ? is_bpf_text_address+0x26/0x2b0 [ 446.331675][T11321] aa_replace_profiles+0x24a/0x2ab0 [ 446.337487][T11321] ? kernel_text_address+0xa5/0xe0 [ 446.343153][T11321] ? __kernel_text_address+0xd/0x30 [ 446.349007][T11321] ? arch_stack_walk+0xfb/0x150 [ 446.354395][T11321] ? __pfx_aa_replace_profiles+0x10/0x10 [ 446.360708][T11321] ? stack_trace_save+0xa9/0x100 [ 446.366192][T11321] ? __pfx_stack_trace_save+0x10/0x10 [ 446.372203][T11321] ? stack_depot_save_flags+0x33/0x7f0 [ 446.378349][T11321] ? stack_depot_init+0x1a1/0x1b0 [ 446.383934][T11321] ? kasan_save_track+0x4f/0x80 [ 446.389399][T11321] ? kasan_save_track+0x3e/0x80 [ 446.394784][T11321] ? __kasan_kmalloc+0x93/0xb0 [ 446.400184][T11321] ? __kvmalloc_node_noprof+0x50f/0x820 [ 446.406337][T11321] ? aa_loaddata_alloc+0x74/0x1e0 [ 446.412628][T11321] ? aa_simple_write_to_buffer+0x80/0x1f0 [ 446.419470][T11321] ? policy_update+0x36e/0x640 [ 446.424825][T11321] ? profile_replace+0x1cb/0x320 [ 446.430343][T11321] ? vfs_write+0x296/0xba0 [ 446.435241][T11321] ? ksys_write+0x150/0x270 [ 446.440272][T11321] ? do_syscall_64+0x166/0x520 [ 446.445559][T11321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.452329][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.457904][T11321] ? lock_acquire+0x115/0x350 [ 446.463102][T11321] ? __might_fault+0xaf/0x130 [ 446.468353][T11321] ? aa_simple_write_to_buffer+0x160/0x1f0 [ 446.474795][T11321] policy_update+0x3a9/0x640 [ 446.480009][T11321] ? __pfx_policy_update+0x10/0x10 [ 446.485681][T11321] ? lock_acquire+0x115/0x350 [ 446.490959][T11321] profile_replace+0x1cb/0x320 [ 446.496246][T11321] ? __pfx_profile_replace+0x10/0x10 [ 446.502185][T11321] vfs_write+0x296/0xba0 [ 446.506986][T11321] ? __pfx_vfs_write+0x10/0x10 [ 446.512827][T11321] ? __fget_files+0x2a/0x420 [ 446.518375][T11321] ? __fget_files+0x3a2/0x420 [ 446.523574][T11321] ? __fget_files+0x2a/0x420 [ 446.528741][T11321] ksys_write+0x150/0x270 [ 446.533545][T11321] ? __pfx_ksys_write+0x10/0x10 [ 446.539169][T11321] do_syscall_64+0x166/0x520 [ 446.544261][T11321] ? trace_irq_disable+0x3b/0x140 [ 446.549895][T11321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.556610][T11321] ? clear_bhb_loop+0x70/0xc0 [ 446.561886][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.568441][T11321] RIP: 0033:0x7f427179e0d9 [ 446.573329][T11321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 446.594999][T11321] RSP: 002b:00007f42725a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 446.604371][T11321] RAX: ffffffffffffffda RBX: 00007f4271a25fa0 RCX: 00007f427179e0d9 [ 446.613966][T11321] RDX: 000000000000003d RSI: 0000200000000300 RDI: 0000000000000003 [ 446.623234][T11321] RBP: 00007f42725a1090 R08: 0000000000000000 R09: 0000000000000000 [ 446.632097][T11321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 446.640934][T11321] R13: 00007f4271a26038 R14: 00007f4271a25fa0 R15: 00007ffd2329ecf8 [ 446.649792][T11321] [ 446.653162][T11321] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 446.661197][T11321] CPU: 0 UID: 0 PID: 11321 Comm: syz.4.1603 Not tainted syzkaller #0 PREEMPT(full) [ 446.671527][T11321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 446.682613][T11321] Call Trace: [ 446.686266][T11321] [ 446.689550][T11321] vpanic+0x56d/0xa60 [ 446.693999][T11321] ? __pfx__printk+0x10/0x10 [ 446.699079][T11321] ? __pfx_vpanic+0x10/0x10 [ 446.704066][T11321] ? is_bpf_text_address+0x292/0x2b0 [ 446.709913][T11321] ? is_bpf_text_address+0x26/0x2b0 [ 446.715664][T11321] panic+0xc5/0xd0 [ 446.719826][T11321] ? __pfx_panic+0x10/0x10 [ 446.724736][T11321] __warn+0x315/0x4c0 [ 446.729140][T11321] ? aa_policy_destroy+0x164/0x1b0 [ 446.734879][T11321] ? aa_policy_destroy+0x164/0x1b0 [ 446.740519][T11321] __report_bug+0x276/0x570 [ 446.745488][T11321] ? aa_policy_destroy+0x164/0x1b0 [ 446.751132][T11321] ? __pfx___report_bug+0x10/0x10 [ 446.756687][T11321] report_bug_entry+0x19b/0x290 [ 446.762046][T11321] ? aa_policy_destroy+0x16b/0x1b0 [ 446.767696][T11321] ? aa_policy_destroy+0x170/0x1b0 [ 446.773356][T11321] handle_bug+0xce/0x200 [ 446.778060][T11321] exc_invalid_op+0x1a/0x50 [ 446.783052][T11321] asm_exc_invalid_op+0x1a/0x20 [ 446.788413][T11321] RIP: 0010:aa_policy_destroy+0x16b/0x1b0 [ 446.794751][T11321] Code: 85 ed 7e 4d e8 56 98 33 fd 5b 41 5c 41 5e 41 5f 5d e9 49 44 5d 07 cc e8 43 98 33 fd 48 8d 3d fc fc 11 0c 48 c7 c6 54 ba 6b 8e <67> 48 0f b9 3a e9 04 ff ff ff e8 26 98 33 fd 48 8d 3d ef fc 11 0c [ 446.816348][T11321] RSP: 0018:ffffc900025cea00 EFLAGS: 00010293 [ 446.823070][T11321] RAX: ffffffff8494445d RBX: ffff88806882b400 RCX: ffff88802f0addc0 [ 446.831866][T11321] RDX: 0000000000000000 RSI: ffffffff8e6bba54 RDI: ffffffff90a64160 [ 446.840644][T11321] RBP: 0000000000000000 R08: 0000000000000cc0 R09: 00000000ffffffff [ 446.849430][T11321] R10: dffffc0000000000 R11: fffffbfff1e15c5f R12: dead000000000122 [ 446.858219][T11321] R13: ffff88806882b400 R14: ffff88806882b428 R15: dffffc0000000000 [ 446.867013][T11321] ? aa_policy_destroy+0x15d/0x1b0 [ 446.872677][T11321] aa_free_profile+0x9d/0x9f0 [ 446.877855][T11321] ? aa_policy_init+0xed/0x300 [ 446.883130][T11321] aa_alloc_profile+0x1e4/0x3e0 [ 446.888505][T11321] aa_unpack+0x17e8/0x7500 [ 446.893421][T11321] ? __pfx_aa_unpack+0x10/0x10 [ 446.898736][T11321] ? rcu_is_watching+0x16/0xb0 [ 446.904000][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.909467][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.914932][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.920403][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.925856][T11321] ? lock_acquire+0x115/0x350 [ 446.931031][T11321] ? lock_acquire+0x115/0x350 [ 446.936238][T11321] ? lock_acquire+0x115/0x350 [ 446.941413][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.946867][T11321] ? is_bpf_text_address+0x292/0x2b0 [ 446.952698][T11321] ? is_bpf_text_address+0x26/0x2b0 [ 446.958452][T11321] ? kernel_text_address+0xa5/0xe0 [ 446.964088][T11321] ? __kernel_text_address+0xd/0x30 [ 446.969834][T11321] ? unwind_get_return_address+0x4d/0x90 [ 446.976054][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.981513][T11321] ? __lock_acquire+0x6df/0x2e50 [ 446.986962][T11321] ? ima_match_policy+0x115/0x2230 [ 446.992622][T11321] ? lock_acquire+0x115/0x350 [ 446.997794][T11321] ? lock_acquire+0x115/0x350 [ 447.002963][T11321] ? is_bpf_text_address+0x26/0x2b0 [ 447.008702][T11321] aa_replace_profiles+0x24a/0x2ab0 [ 447.014450][T11321] ? kernel_text_address+0xa5/0xe0 [ 447.020078][T11321] ? __kernel_text_address+0xd/0x30 [ 447.025812][T11321] ? arch_stack_walk+0xfb/0x150 [ 447.031161][T11321] ? __pfx_aa_replace_profiles+0x10/0x10 [ 447.037382][T11321] ? stack_trace_save+0xa9/0x100 [ 447.042838][T11321] ? __pfx_stack_trace_save+0x10/0x10 [ 447.048758][T11321] ? stack_depot_save_flags+0x33/0x7f0 [ 447.054778][T11321] ? stack_depot_init+0x1a1/0x1b0 [ 447.060330][T11321] ? kasan_save_track+0x4f/0x80 [ 447.065678][T11321] ? kasan_save_track+0x3e/0x80 [ 447.071030][T11321] ? __kasan_kmalloc+0x93/0xb0 [ 447.076295][T11321] ? __kvmalloc_node_noprof+0x50f/0x820 [ 447.082407][T11321] ? aa_loaddata_alloc+0x74/0x1e0 [ 447.087944][T11321] ? aa_simple_write_to_buffer+0x80/0x1f0 [ 447.094251][T11321] ? policy_update+0x36e/0x640 [ 447.099514][T11321] ? profile_replace+0x1cb/0x320 [ 447.104963][T11321] ? vfs_write+0x296/0xba0 [ 447.109831][T11321] ? ksys_write+0x150/0x270 [ 447.114797][T11321] ? do_syscall_64+0x166/0x520 [ 447.120059][T11321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.126754][T11321] ? __lock_acquire+0x6df/0x2e50 [ 447.132228][T11321] ? lock_acquire+0x115/0x350 [ 447.137397][T11321] ? __might_fault+0xaf/0x130 [ 447.142560][T11321] ? aa_simple_write_to_buffer+0x160/0x1f0 [ 447.148975][T11321] policy_update+0x3a9/0x640 [ 447.154054][T11321] ? __pfx_policy_update+0x10/0x10 [ 447.159706][T11321] ? lock_acquire+0x115/0x350 [ 447.164880][T11321] profile_replace+0x1cb/0x320 [ 447.170150][T11321] ? __pfx_profile_replace+0x10/0x10 [ 447.175984][T11321] vfs_write+0x296/0xba0 [ 447.180696][T11321] ? __pfx_vfs_write+0x10/0x10 [ 447.185951][T11321] ? __fget_files+0x2a/0x420 [ 447.191017][T11321] ? __fget_files+0x3a2/0x420 [ 447.196173][T11321] ? __fget_files+0x2a/0x420 [ 447.201242][T11321] ksys_write+0x150/0x270 [ 447.206033][T11321] ? __pfx_ksys_write+0x10/0x10 [ 447.211401][T11321] do_syscall_64+0x166/0x520 [ 447.216464][T11321] ? trace_irq_disable+0x3b/0x140 [ 447.222006][T11321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.228687][T11321] ? clear_bhb_loop+0x70/0xc0 [ 447.233857][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.240390][T11321] RIP: 0033:0x7f427179e0d9 [ 447.245266][T11321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.266873][T11321] RSP: 002b:00007f42725a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 447.276148][T11321] RAX: ffffffffffffffda RBX: 00007f4271a25fa0 RCX: 00007f427179e0d9 [ 447.284925][T11321] RDX: 000000000000003d RSI: 0000200000000300 RDI: 0000000000000003 [ 447.293708][T11321] RBP: 00007f42725a1090 R08: 0000000000000000 R09: 0000000000000000 [ 447.302492][T11321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.311260][T11321] R13: 00007f4271a26038 R14: 00007f4271a25fa0 R15: 00007ffd2329ecf8 [ 447.320047][T11321] [ 447.324191][T11321] Kernel Offset: disabled [ 447.328956][T11321] Rebooting in 86400 seconds..