last executing test programs: 3.440561081s ago: executing program 1 (id=434): r0 = mq_open(&(0x7f0000000080)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x41, 0x15, 0x0) mq_timedreceive(r0, 0x0, 0x0, 0x0, 0x0) 3.390501643s ago: executing program 0 (id=435): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) kexec_load(0x2, 0x1, &(0x7f00000002c0)=[{0x0, 0x20, 0x0, 0x12000}], 0x0) 3.328871824s ago: executing program 1 (id=436): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x20042, 0x0) r1 = accept4$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000080)=0x1c, 0x800) write(r1, &(0x7f0000000400)="001a000009020900010100803212010002000000402505a0a4000100000001", 0x1f) 3.239915939s ago: executing program 1 (id=438): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x2c}}, 0x41) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f10000000c"], 0x8500) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00A\x00'], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 3.204409852s ago: executing program 0 (id=439): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f00000000c0)={0x300, 0x0, 0x3, 0x8f}) syz_usb_connect(0x3, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010003e8149340da040d391eaf010203010902240001e40250060904630002ff7f36d2090501000800810ab009050904ff03080407"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x6, 0x0, 0x1, 0x0, 0x3, 0x8, 0x80, 0x0, 0x8}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000280)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x84, &(0x7f0000000480)={r2, @in={{0x2, 0x4ea0, @empty}}, [0x9, 0x8, 0x233666cf, 0x4, 0x8001, 0xd4, 0x4, 0x8000000000000000, 0x3, 0x1, 0x6, 0x3, 0x2000dbf, 0x8, 0x7]}, &(0x7f0000000300)=0x100) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f00000003c0)=""/4096, &(0x7f00000013c0)=0x1000) 3.103946416s ago: executing program 1 (id=440): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x6f41bcbb, @empty, 0x2}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x6, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x7, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x3, 0x6, 0xf3}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000000)={0x2c, &(0x7f0000002600)=ANY=[@ANYBLOB="00010700000007063b161970ef10fd1151290052dd"], 0x0, 0x0, 0x0, 0x0}, 0x0) listen(r4, 0xa7ba) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {0x0, @broadcast}, 0x0, {0x440, 0x0, @multicast1=0xe000cc02}}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) r10 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r10, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 2.455793369s ago: executing program 3 (id=441): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = openat(r0, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000d00)='.0.302\\00000t\n', 0xe) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = syz_clone(0x0, &(0x7f0000000500)="29974edce257a49baaf3ad901ced9abb854a0b4a8e30278966dd1f943349b1c0ba400072e61944123d4db967d693c0df51b6a6cdff5361767a119a6af5ce5d90744a65cb088d2d93209437f359e650ed5998c857e4b6d0841a83de1e490eb29520f9b1a3f03463fb8e4f8af5a2197432a14487c71cdaacd721378aa23a2d908b38cb9ada9654c6e3df0001ca6d0a7771581311b776fd59cc7011ae800a5f1dd55fe964aeffdfd0a09f49b9049b62be17aabea404aeb54538e9eb4eaa8a09478a9e41", 0xc2, &(0x7f0000000600), &(0x7f0000000640), &(0x7f0000000680)="edcc32ce161c6dc6f604839952498e99d20c07cefc94c741a7668199f3e78d240d22962ddacf2b2f446cb56f6f66ff0b9867c745baea56fd") syz_usb_connect(0x0, 0x3b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100001b3ebd40d80483009c0001020301090229000100000000090400000002020100050200000005"], 0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, r6, 0x0, 0x50}}}, &(0x7f0000000480)=0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a40000000060a010400000000000000000a0000060900010073797a310000000014000480100001800b0001006c6f6f6b757000000900020073797a32000000001400000011000100000000ad08d314000500000a"], 0x68}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) r9 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r9, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000240)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2014120000003219fad1a560da0781c2106a5bd2cb999f14", @ANYRES16=r9], 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r9, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000000)={0x800, 0xa2, 0x8}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0xffff}) open(&(0x7f0000000040)='./file0\x00', 0xa8242, 0x1df2a23c5997fad6) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) sendmsg$NFQNL_MSG_CONFIG(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="af24ae0ef2bfe1a2caaa165c79be9a1c000000020303000000000000000000030000060800010001000011"], 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) r13 = openat(0xffffffffffffffff, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x48e000, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) read(r13, &(0x7f00000000c0)=""/7, 0x7) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000003c0)=[@text32={0x20, &(0x7f00000002c0)="c4c125db4c4d760fc79df7ffffffc4c1f929ac1906cd0000440f20c03501000000440f22c066b83d018ed8660f71d510c4e19173f1010f01befa160000f20f005911c7421c00000000", 0x49}], 0x1, 0x8, &(0x7f0000000400)=[@vmwrite={0x8, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2}, @cstype3={0x5, 0x2}], 0x1000000000000020) syz_ublk_setup_queues(r11, r7, &(0x7f0000000180)={0x0, 0x28fb87, 0x800, 0x1, 0x3a}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x59e6, 0x80, 0x4, 0x15e, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x631b, 0x8, 0x10080000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x1000, 0x3, 0x3e7, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9621, 0x40, 0x82, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) ioctl$KVM_CREATE_VCPU(r11, 0xae41, 0x1) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x19, {0x0, 0x1, 0x4, 0x7, 0x5, 0xfffffffc}}) 1.980062175s ago: executing program 0 (id=443): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f00000011c0)="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", 0x127}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0xff00) 1.889529936s ago: executing program 0 (id=444): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0xfffffffffffffc2c) listen(r0, 0x0) bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000240)=""/253, 0xfd, 0x20, 0x0, 0xfffffffffffffdfc) clock_getres(0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000000000000070000000144", @ANYRES16], 0x20}}], 0x1, 0x40094) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f00000002c0)={[{0x1, 0x7, 0x2, 0xe7, 0x9, 0xb7, 0x5, 0x0, 0xad, 0x4, 0x7, 0x9, 0x8}, {0x405e, 0x1, 0x9, 0x6, 0x2, 0x5, 0x0, 0x1, 0xf7, 0xf9, 0x9, 0xfb, 0x800000000003}, {0xfffffffa, 0x5, 0x17, 0x0, 0x2, 0xc, 0x9, 0xe, 0x4, 0x6, 0x2, 0x4, 0x1}], 0x1000}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa101e64142bea866ff362e805"], 0x1a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 1.695911224s ago: executing program 2 (id=446): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x6f41bcbb, @empty, 0x2}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x3) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x14e22, 0xfffffff7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000100)='.\x00', &(0x7f0000000040)='fuseblk\x00', 0x1000009, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r4, 0xa7ba) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0xa8, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x4a, 0xf8, 0x0, 0x1, [@generic="78057c67001c274b77a33a15462348ca6f102294cd508cd48f01daa89988bfb72d95c4210c8dadd28149d2cd9ce63704d4c45a0c457b9150f39565b984a1b03e764e5f60b9e7"]}]}, @nested={0x44, 0x5, 0x0, 0x1, [@nested={0x40, 0xce, 0x0, 0x1, [@nested={0x3c, 0x13e, 0x0, 0x1, [@nested={0x38, 0xa0, 0x0, 0x1, [@nested={0x34, 0x61, 0x0, 0x1, [@nested={0x30, 0x9d, 0x0, 0x1, [@nested={0x2c, 0x63, 0x0, 0x1, [@typed={0x4, 0xa5}, @nested={0x10, 0x90, 0x0, 0x1, [@nested={0xc, 0x19, 0x0, 0x1, [@typed={0x8, 0x110, 0x0, 0x0, @fd=r6}]}]}, @typed={0xc, 0x11c, 0x0, 0x0, @u64=0x9}, @typed={0x8, 0x12e, 0x0, 0x0, @uid}]}]}]}]}]}]}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x5}, 0x0) listen(r5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r9) 1.62935664s ago: executing program 2 (id=447): r0 = socket$xdp(0x2c, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 64) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) (rerun: 64) copy_file_range(r1, 0x0, r1, 0x0, 0x8, 0x0) (async, rerun: 64) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x8, 0x0, &(0x7f0000000040)) (async, rerun: 64) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000280)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0) 1.559347435s ago: executing program 2 (id=448): mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) waitid(0x0, r1, &(0x7f0000000240), 0x2, &(0x7f00000002c0)) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r5], 0x38}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc1101, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000140)=0x4440010) 1.493764137s ago: executing program 2 (id=449): r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18, 0x40080}, 0x4000000) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=""/216, 0xd8}, 0x10001}], 0x2, 0x40010000, 0x0) 1.212022917s ago: executing program 0 (id=450): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) landlock_create_ruleset(&(0x7f0000000100)={0x100, 0x0, 0x2}, 0x88, 0x0) pwritev2(r2, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x10, 0xfff, 0x800000000, 0x5}) prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) mmap$IORING_OFF_SQ_RING(0x0, 0x3ff, 0x2000001, 0x5d031, 0xffffffffffffffff, 0x0) r4 = open(&(0x7f0000000280)='.\x00', 0x880, 0x5a) fcntl$lock(r4, 0x410, 0x0) r5 = pidfd_getfd(r1, r1, 0x0) setns(r5, 0x66020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) ioctl$VIDIOC_QUERYMENU(r5, 0xc02c5625, &(0x7f0000000180)={0x8, 0x1, @value=0x80000000}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x145091, 0x0) umount2(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6bb74189000003c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x37}], 0x1, 0x55, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) sendmsg$sock(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="2e00000013000500000000000000000004010000100002007664706173696d5f626c6b000a000400766470613000", 0x2e}], 0x1}, 0x0) 1.20403799s ago: executing program 0 (id=451): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) r1 = syz_usb_connect(0x5, 0x58, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x8e, 0x3a, 0xc6, 0x20, 0x694, 0x1, 0x7813, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x2, 0xe, 0x6, 0x10, 0x3, "", [{{0x9, 0x4, 0x39, 0xd8, 0x1, 0x1a, 0xda, 0xa8, 0x8, [], [{{0x9, 0x5, 0x8, 0x10, 0x20, 0x7, 0x9, 0x80}}]}}, {{0x9, 0x4, 0xe4, 0x5, 0x3, 0xb9, 0x56, 0xda, 0x2, [], [{{0x9, 0x5, 0x8, 0x0, 0x400, 0x1, 0x12, 0xfc}}, {{0x9, 0x5, 0xb, 0x0, 0x20, 0x7, 0x3, 0x9a, [@generic={0x7, 0x5, "d15b89f26d"}]}}, {{0x9, 0x5, 0x9, 0x3, 0x40, 0x7a, 0xa, 0x84}}]}}]}}]}}, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, &(0x7f0000000bc0)={0x24, 0x0, &(0x7f0000000b00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c01}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f00000011c0)={0x24, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)={0x40, 0x8, 0x8, "fde61e0ee4a63b9e"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r1, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000300)={0x40, 0xf, 0x4, "0df18785"}, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/kvm_intel/parameters/vmentry_l1d_flush\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='always', 0x6) (async) syz_usb_disconnect(r1) syz_usb_control_io$printer(r1, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000940)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f0000000140)={0x0, 0xc, 0x31, "e50a9db187334e7c234b65315b8c05bed786179a502d9985c1d7bf8784ce30ffffb7291dd27aa7d7870a90b1b3fd5ce9c1"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000380)={0x20, 0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) 1.046814315s ago: executing program 3 (id=452): r0 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty=0xf5ff}, 0x10, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b70b1d9813de8d2ff151c7a6a0452c660a57c33f13e2d9b88fa5f5c0505722d2e787a425e4a3e9b5efa9668e9199f5fb9fe7d5b8a57719a57df152e7f2c6a1087a2a24084f82455b65353a70559f04d5ed12defb81497ea69c1c7e69c373524770b7473c16a69c7a3648a9dd93377b89cdff61cf62512d1ee67a55ea67993937c1f55a2179bc9c8a337364cfb84d295adda1ad9700fc2f5c11cbfc1b90affb4666c6e7e23a6f7751410a5651819f29f690c6dba2b8a67e0f7f8cc377feb1854c393578994c85391ba21b3961aed477f771645571dc7d6cae72bf79c82a92a4edc3742b1398060a0a5c9e81c016b7f2ae3db529c6ff824cc28678764d8ab49d7dc68e5b0556c9e7ffb6fef442776d86fbd458741830e57f22a1f8513b92abd5b2df93a67cc560134078f0b8ecc3276e40aadef5cd579888b86b4988f396679250701f3869e7493b33692035ecd94aca5189fd0a0893ccc5bb19c0b4caca86cf90ebc2a5558f39cccb33f6773a4e425bf551fb3b6456ee1cc62fa1843a9e5539bb2d02ae6ef82533a9dbcfb562c1ab18c1f639ae7ff02083746f74a15ba2d10e4b955940a5d6f488d326a99f287c48ad463ce40367aeeff519cbad0a2d7fdbfa48bff75955467977764c2be2bd2ffa18396c46920c40c50a4037003666406d177e2cd20aee423d07169d8f611f635ba0b62b61265ff2c5548446a2423dd1038482b6852b2d9d2f90aa05d82c5e2c3d1af0c7aad72d82b3da67471af7b037bb0424a785e73f35b5a10a2ab300a195c20cd119a5390e0cd5d49c70bd80883b933e843d0d2902749dcf3c140c708a0f004b7a2f50bf311305dc01719016fcce5863815ca7951de710fcb71cd177551ff6fcd9f8bf01b93868f24c6129b6d7917125338cf62110083093fc7f862015d48450d992f2bb43e601cab19b2ea7b83962a382fc2a31fdf2358bf8a9a9e506eaa7b6eb5e7444d1ef459b24ffa51362abce902dfd84201a0e4b5a3b62757aad54fb65b83821c6bba663886de092065a565921ea3eb6781bb8ed4f4db3abcfeeb379b7e52fca790bea719918e299ab01bf5e92177d134360bf7a16a59e9d03d3dcfb0a25599237e3d41b3f0026c9402b1fb1894426303413a2cbcf7c72807ca694afa285990d07c3bca26413c9947b3b344aafc04544b8c11416e0312b028da7302e316c3966d41884b15055a49a4a0b3eac8e11f88a5615fb0af582f065d28e5a454447e9d0cfc60356439ebf7e1d0a00f5b9cc6daf2bd7195ba96b4d1a0679ff0fb1c01282c378a880f90f460889b67d76d4d0e8db6c928d113533d1d10b810303c43d8ff622c5bab7f095b96e64bf9daa48a2bdf3d9d40bac00cf1b66df61a4f7c3e21938e876f81b1179dce6a008f28eb682cae690ced0ea0d542da604d8056f2b1813ed36683c4c51aeb2650772cfb1c55d4e60604ff06344cfc271b2175a6c94defb807af240b483e24298ca73bfc743ca2ca2e77e6d5b817b3c1986601537faf59ac84c74d8bd0c068cb8e6bd03ac2dcf5793fb4a00b3c901a33aa3ee86e4f0db317b94bb8678ab26e36d305ebac4b0f7f164947148255b562dd0f87648499d45bccfb7d8c9d5624cadf8160a396e79fbcdc100058ba4606e41c02fb2cc0dc6c36196bd28acfde82a18cda2321d2d83fecd3b85380667cd1d0bc68298c6c8f10421a80c8fa86912b6c3e8ddd9d9668520d5151409e6b77f0d7730b374a68a744151bfbd123cfdf871e8c24e70d2ca3b50e84a48e0b78c1781000cfc848d43584985763a76c0ab9ba882c55e3e4aa8f2174255db38adb8350b48a77be22a869d13d183325f859b883464e5e46de5ea8a92532b9a794daaeff657cd361f7f158f8bebe36e9de1f5b9721d4263dcc9472229bc02d3f552180abfb25ca7aa36cb914d99c09fd5bb99dcab9b4e3c634d18fc7dfe84dc4425ad1e39c3e7410d49b4ea0a8a2958688c7725822f6dfc0827d19dc385e0e35a949941e4dd1aaeaab9ebe402f8c584bca7efc829f2ccfb63fd7bde1c182a67c14f9d3f033ca674e2604e89cd55a15419f956cd61a755c1b13554dae98e77be078aadfc131c9677381f1dbe6ef194eb17603a463e8b844ab46a6046e1f07d96d66de669359bff4c3d80948a4de3abb2f171a09b5d8999c379fb62244114e218c79805df7d899e5661320ee6721d652b95f09e4dfe69bd67099c73294b17ab574e0b966aa3ab44478965b9dca3cb3b9282945f24ccdd07c638ae25a84a728ca24f87ff49d718121a694be46f3616e27b1041b3c6cd24b9cf775bfc28dfbe0a009048f0599f2d5d6586cfd1e7f7fe69872d08b98f60d28e6af0d49d7f06ad71a7b5c41df261aba5de114022c7288bc265cc17909fdeadc3d7b256d7ab3b96e40f857060f16b54a6bb7248ee571f87ace5ee39eab412706cf52fa711468b21ea129c3f44bceb429fcc1a0ac2aa87b9365077dcfcfa9a1b32a0a09699197c20019a66cbd0a897feab3706c23123b888ada643d4560082033e31596b0483578968e3c9593ebd97141c228a42fc7645f92171c120aabca36657683fd7c72fcb87217f124d6fabc52f1d221d8410b47b0ad4bd944bf4085365e9b52a53911ab4ee142c5a1ebbe034c9d98c538c066f2dc0acf372eb2397dcac765055123e0ba19be22b18c886bf0f7490abe9fde91ffa62e059962bd134be8501cb5b715a744b1398e2c4c7e8afe72e189dda0654296afa1c1f99ab7d800fa40f72a758625c833b6fc7b7d42250522b456e1e7de815350c36c9cb2f4d1c9cb99109f89b456c559463f11b8b58247809b17a4ed4912bd0a47a529f1364d6dc593ea7f3eb98962078ac90e5012ee1c7b4b9ed5a8c7a9c0231b4ce425693faab64fa0f3482a04d4be2e06ee5d103694d288810a1a7f4d1e908dd82dd2016a064ece5cd67ef1dd5f4cda728fc6f1ccdd949dd8f775d862621507248ef4c83ae274969d19c7ddb02a4e8a1ab2b7aa539a442b22735ceedeefe60a1059dfaaa0979ce8d5387b5a047841fd9749b88ca91216b02d7926408a01916b7781bb7167528ccdb9a486d173437a5ba3e552c8674dff2cc9b21054e0e4f86b61b8723fca58ceef4413bffae9e9be79c5b9788f5449811ce78be9bc7a86375a670197baaef751beabcba0aa6c7c33f1cd702cb78ec39fa1f17d9da733d6abf2b80f9c51ac8f6f664b24edc53a7c9525c3016bd05c67272375fe816b2b121f2de68b885a0fd8f8b8c6c342237b632f6414a3eb3480f5f42106c5812e9bfd4e8c8dea8d08525d9aa1da7c7c2ee7ff3d31b79b211dd01e304a8ffc83a89a59f3b1e2ef5e969b6d90bea7e161066f25622fad914bff52bacd2807093dda1838b529ee57f718b374ce2841b924a42457867547a6edcb8412d85f11796742bf640b5819a9546357df778c332af5983c4373a95d9c58b52dba445eee92e6911824f0c534e7a5934d9eac9b7f6fec22002fc53a3003a3304217f567b47cd326edc5f48eb1f46bb20d1e10e72239afc9769344590cf48902aba5405b7d4baa31a912ab398a2f2d3f037614bb56a89244ece50f3a1e058d274f1e70f944eb8a305be91e561e5eb843d057a81f4deb84a6335ec81ca964cdae5f318d4e9aaea2c477cc279c00c698bcfe4b8e04c09079d8f3f5438d9d45a00f50d2f9b245c8c68eebf247e25ba8d26f8b95b21ac9ceb50c0aa2e4bdc032024db216b92f9350a90ac79341af14d3fa8ba908096e1b503341aed667bb184c672dac85fc4f335b3871c3b4e55ea219a857d2d2e135358f6b45a20b3e7de8e09b2041eb7c5084a80258fb524a983752659298a251e178b56f96bc67ae0a78ec92f92d92c9cf0edb5dcb11e739d69410ad44c8df00caa030d7d89f2ec38bd7698115c423cf3e6048793aca08ffbcdac766f1553773fa00031c1d75246e4e1eddf8948d02a3de6d67fd7329e45070f29044587f1e0db50d04e673191a63e30f96ee0d8d52738fab36a7fe2c6ab9301d401e7ca5b1f039193a580e40abbdf40c2d7e27809dec80815d37adae9fe7fb9d3a974c9fc03944d7338d000b81170be4c6792ed6b3b827194b3ae11e2acfca48498d1126aacf80f3d574256ef7f75552ff087a819e", 0x1000}, {&(0x7f00000011c0)="9d7fcf3efc6316a6a555ba8b4726d7ccaf8a060000009cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71ad21b965f615b31105d60a4b16fa2fa1371850a1be85ffcad45b49422b2121d709014f49cf6bd1d18acc4c19e4356669a2ac3e05d5cdc6f0f485c1eb52ea8faf7e83a1468b6a491e71ae3d03cd9677e72413954feae71b5775a6e3e9fa9db9e1ed56e56bff66a7a86214d8145d878e26fa35bd55db98ecdef374d26a5d9cd0e89f3ae45be2d8e1d98ee0865fb64d6dd1e8c89608733370f12be1495d81b36dd72cc28e9c9b2c45f925b38b21818d93ce604772c21824e45793c4073eb44773f8e42c9ebb297dd5e76e856a22253c0e8a80f33b4d015c3f9c0c26bcdd6b440322a23b10d507eecead59faa166bdac1bd840211336", 0x127}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x3e}}, @ip_tos_u8={{0x11, 0x29, 0x2}}, @ip_tos_u8={{0x11}}], 0x48}, 0xff00) 956.566381ms ago: executing program 3 (id=453): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='ramfs\x00', 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r0, &(0x7f0000000600)='dir .', 0x5) write(r0, &(0x7f0000000700)='bi', 0x2) 952.123947ms ago: executing program 3 (id=454): mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) waitid(0x0, r1, &(0x7f0000000240), 0x2, &(0x7f00000002c0)) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000100)=0xe) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00', @ANYRES16=r5], 0x38}}, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc1101, 0x0) ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r6, 0x40047459, &(0x7f0000000140)=0x4440010) (fail_nth: 2) 858.19058ms ago: executing program 3 (id=455): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x6080, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'veth1\x00', &(0x7f0000000140)=@ethtool_regs={0x4, 0x1000}}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x1a) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000000)=0x7, 0x4) 732.011071ms ago: executing program 3 (id=456): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = dup(r1) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f000000d980)={&(0x7f000000d8c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000d940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x1, 'geneve0\x00', {}, 0x4}) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0x0, "115de214"}, @local=@item_4={0x3, 0x2, 0x1, '\x00\x00jJ'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x2, 0x2, 0x2, "009f"}, @local=@item_012={0x2, 0x2, 0x2, 'Kv'}, @main=@item_4={0x3, 0x0, 0x9, "c148f81b"}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x268, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) socket$phonet(0x23, 0x2, 0x1) (async) dup(r1) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f000000d980)={&(0x7f000000d8c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f000000d940)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r2, 0x8983, &(0x7f0000000080)={0x1, 'geneve0\x00', {}, 0x4}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x18, {[@global=@item_4={0x3, 0x1, 0x0, "115de214"}, @local=@item_4={0x3, 0x2, 0x1, '\x00\x00jJ'}, @global=@item_012={0x1, 0x1, 0x2, "ff"}, @local=@item_012={0x2, 0x2, 0x2, "009f"}, @local=@item_012={0x2, 0x2, 0x2, 'Kv'}, @main=@item_4={0x3, 0x0, 0x9, "c148f81b"}, @main=@item_012={0x0, 0x0, 0x9}]}}, 0x0}, 0x0) (async) 576.800194ms ago: executing program 2 (id=457): mkdir(0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) waitid(0x0, r2, &(0x7f0000000240), 0x2, &(0x7f00000002c0)) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7b36}, 0x30, 0x0) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7200fbdbdf253900000008000300", @ANYRES32=r6, @ANYBLOB="2c005a802800038024000888ecc20b663d2f9230553423789a9539e3f2d136a8fe25c1ca4ff073defb4e81af016d9f8ef0e998b95cd5a253c42fc3c8443e432cd4336f2ebaf1f1c3611956d2faaa6ef1e5435828232a7a9a41a05a85058c971c6352eba9b58251bc9f0795b3a12b0bde6259b2fdbd7f73b6e0437285d93322baa8f938121d602bba89aa0f13adf69c44caa8df1c9b05d22d5dc2ed2fa9b1aff91a3075b8823ff00e215a8481122722a81cb597ef7c"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, 0x0) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x109000, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000100)=0xe) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x8, 0x0) get_mempolicy(0x0, 0x0, 0x78, &(0x7f00002a0000/0x1000)=nil, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r9, &(0x7f0000000500)={0x2, 0x0, @remote, 0x3}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r8) sendmsg$ETHTOOL_MSG_PAUSE_SET(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000004c0)=ANY=[@ANYRESOCT=r7, @ANYRESOCT=r1], 0x38}}, 0x0) r10 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x402) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r10, 0xc02064b2, &(0x7f0000000040)={0x9, 0x5, 0x20ffd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x200000e, 0x11, r10, 0x100000000) r11 = syz_open_dev$vcsn(&(0x7f0000000380), 0x6, 0x900) mmap$IORING_OFF_SQ_RING(0x0, 0x80000001, 0xf, 0x80010, r11, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x38880, 0x0) r12 = socket(0x2, 0x80805, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x200}) sendmmsg$inet(r12, &(0x7f0000000440)=[{{&(0x7f0000000740)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="92", 0x1}], 0x1}}, {{&(0x7f0000000040)={0x2, 0x4e1f, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000014c0)="9967", 0x2}], 0x1}}], 0x2, 0x0) 404.149745ms ago: executing program 2 (id=458): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0xfffffffffffffc2c) listen(r0, 0x0) bind$vsock_stream(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, @my=0x0}, 0x10) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f0000000240)=""/253, 0xfd, 0x20, 0x0, 0xfffffffffffffdfc) clock_getres(0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r5, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000000000000070000000144", @ANYRES16], 0x20}}], 0x1, 0x40094) ioctl$KVM_SET_PIT2(r4, 0x4070aea0, &(0x7f00000002c0)={[{0x1, 0x7, 0x2, 0xe7, 0x9, 0xb7, 0x5, 0x0, 0xad, 0x4, 0x7, 0x9, 0x8}, {0x405e, 0x1, 0x9, 0x6, 0x2, 0x5, 0x0, 0x1, 0xf7, 0xf9, 0x9, 0xfb, 0x800000000003}, {0xfffffffa, 0x5, 0x17, 0x0, 0x2, 0xc, 0x9, 0xe, 0x4, 0x6, 0x2, 0x4, 0x1}], 0x1000}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="041817aaaaaaaaaa101e64142bea866ff362e805"], 0x1a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) 44.090467ms ago: executing program 1 (id=459): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000000)='\x00', 0xb2201, &(0x7f0000000080)={@_ha_fsid={[0x9, 0x4]}, {0x1b, 0x2b, 0x9, 0xc59b}}, 0x5, &(0x7f00000000c0), &(0x7f0000000100)=0x6aa149f2}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, r0, 0x0) kexec_load(0x2, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x12000}], 0x0) 0s ago: executing program 1 (id=460): r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000004c0)=0x8) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f00000003c0)='file0', 0x5) open(&(0x7f0000000000)='file0\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 77.359237][ T5618] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.369792][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.437374][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.441309][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.443014][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.453660][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.487597][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.490564][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.501747][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.507281][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.561833][ T5611] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.565553][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.579921][ T5611] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.584463][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.597274][ T5611] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.600389][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.624884][ T5611] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.628626][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.692468][ T5617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.695673][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 77.706461][ T5617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.714051][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 77.720738][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.728554][ T5617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.735882][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 77.747709][ T5617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.757437][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 77.796640][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.820854][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.834601][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.834756][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.860920][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.861149][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.890484][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.918024][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.918290][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.947325][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.947426][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.008236][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.071215][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.089151][ T86] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.089258][ T86] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.125351][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.136936][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.137038][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.205146][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.250340][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.250468][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.285186][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.285291][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.757080][ T4924] Bluetooth: hci1: command tx timeout [ 78.757165][ T5608] Bluetooth: hci0: command tx timeout [ 78.837585][ T4924] Bluetooth: hci2: command tx timeout [ 78.837667][ T5608] Bluetooth: hci3: command tx timeout [ 79.005154][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.066195][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.127267][ T5618] veth0_vlan: entered promiscuous mode [ 79.164148][ T5618] veth1_vlan: entered promiscuous mode [ 79.212208][ T5607] veth0_vlan: entered promiscuous mode [ 79.234773][ T5607] veth1_vlan: entered promiscuous mode [ 79.250308][ T5618] veth0_macvtap: entered promiscuous mode [ 79.276500][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.280990][ T5618] veth1_macvtap: entered promiscuous mode [ 79.324381][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.362800][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.364632][ T5607] veth0_macvtap: entered promiscuous mode [ 79.375020][ T5607] veth1_macvtap: entered promiscuous mode [ 79.391459][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.418466][ T45] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.418627][ T45] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.418688][ T45] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.418723][ T45] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.423133][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.470300][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.516930][ T5611] veth0_vlan: entered promiscuous mode [ 79.547309][ T86] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.571352][ T5617] veth0_vlan: entered promiscuous mode [ 79.620121][ T5611] veth1_vlan: entered promiscuous mode [ 79.626960][ T45] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.630984][ T45] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.642244][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.642267][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.676105][ T5617] veth1_vlan: entered promiscuous mode [ 79.724914][ T86] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.724933][ T86] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.726821][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.742668][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.742687][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.833807][ T5617] veth0_macvtap: entered promiscuous mode [ 79.852018][ T5618] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.860796][ T86] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.860814][ T86] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.900353][ T5617] veth1_macvtap: entered promiscuous mode [ 79.922402][ T5611] veth0_macvtap: entered promiscuous mode [ 79.975824][ T5611] veth1_macvtap: entered promiscuous mode [ 80.009214][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.033614][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.051559][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.080725][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.364066][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.364093][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.446759][ T1160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.447026][ T45] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.447478][ T45] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.447516][ T45] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.447559][ T45] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.447592][ T45] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.447625][ T45] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.447658][ T45] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.505011][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.505028][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.604878][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.604897][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.670553][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.670574][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.693582][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.836613][ T4924] Bluetooth: hci1: command tx timeout [ 80.836691][ T5608] Bluetooth: hci0: command tx timeout [ 80.857439][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 80.862694][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 80.862790][ T10] usb 2-1: New USB device found: idVendor=04e8, idProduct=8001, bcdDevice=41.ad [ 80.891671][ T10] usb 2-1: config 128 has an invalid interface number: 63 but max is 0 [ 80.891697][ T10] usb 2-1: config 128 has no interface number 0 [ 80.891728][ T10] usb 2-1: config 128 interface 63 has no altsetting 0 [ 80.894294][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.894317][ T10] usb 2-1: Product: syz [ 80.894332][ T10] usb 2-1: Manufacturer: syz [ 80.894346][ T10] usb 2-1: SerialNumber: syz [ 80.919682][ T4924] Bluetooth: hci2: command tx timeout [ 80.919759][ T5608] Bluetooth: hci3: command tx timeout [ 81.071093][ T5769] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.182493][ T5764] Zero length message leads to an empty skb [ 81.210155][ T10] usb 2-1: active config #128 != 1 ?? [ 81.230849][ T10] usb 2-1: USB disconnect, device number 2 [ 81.316897][ T5682] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 81.457444][ T5776] netlink: 5 bytes leftover after parsing attributes in process `syz.0.7'. [ 81.467792][ T5682] usb 4-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 81.488336][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 81.488368][ T5682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 81.490581][ T5682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.490604][ T5682] usb 4-1: Product: syz [ 81.490619][ T5682] usb 4-1: Manufacturer: syz [ 81.490633][ T5682] usb 4-1: SerialNumber: syz [ 81.541410][ T5778] netlink: 'syz.0.8': attribute type 15 has an invalid length. [ 81.541430][ T5778] netlink: 'syz.0.8': attribute type 30 has an invalid length. [ 81.557977][ T5682] usb 4-1: config 0 descriptor?? [ 81.574134][ T5682] hub 4-1:0.0: bad descriptor, ignoring hub [ 81.574160][ T5682] hub 4-1:0.0: probe with driver hub failed with error -5 [ 81.604704][ T5682] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 81.835385][ T5785] Bluetooth: MGMT ver 1.23 [ 81.847186][ T5711] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.000110][ T5711] usb 1-1: unable to get BOS descriptor or descriptor too short [ 82.000157][ T5711] usb 1-1: New USB device found: idVendor=1395, idProduct=0300, bcdDevice=0.40 [ 82.005640][ T5711] usb 1-1: language id specifier not provided by device, defaulting to English [ 82.008095][ T5682] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 82.017739][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.017763][ T5711] usb 1-1: Product: 볻蚂躟童뗄 ர [ 82.177368][ T5682] usb 2-1: not running at top speed; connect to a high speed hub [ 82.177404][ T5682] usb 2-1: New USB device found: idVendor=0ea0, idProduct=6858, bcdDevice=0.40 [ 82.198683][ T5682] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25702, setting to 64 [ 82.214998][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.215023][ T5682] usb 2-1: Product: syz [ 82.215038][ T5682] usb 2-1: Manufacturer: syz [ 82.215052][ T5682] usb 2-1: SerialNumber: syz [ 82.244114][ T5782] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 82.254142][ T5780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.254245][ T5682] oti6858 2-1:1.0: oti6858 converter detected [ 82.263218][ T5780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.289688][ T5682] usb 2-1: oti6858 converter now attached to ttyUSB0 [ 82.304010][ T5711] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 82.304072][ T5711] usb 1-1: MIDIStreaming interface descriptor not found [ 82.501959][ T5711] usb 1-1: USB disconnect, device number 2 [ 82.696028][ T5798] udevd[5798]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 82.806137][ T5782] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 82.807716][ T5782] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 82.825077][ T5801] : renamed from vlan0 (while UP) [ 82.927127][ T4924] Bluetooth: hci1: command tx timeout [ 82.927172][ T5608] Bluetooth: hci0: command tx timeout [ 82.996744][ T4924] Bluetooth: hci2: command tx timeout [ 82.996790][ T5608] Bluetooth: hci3: command tx timeout [ 83.226413][ T5711] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 83.380508][ T5711] usb 1-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 83.381826][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 83.381855][ T5711] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 83.385279][ T5711] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.385302][ T5711] usb 1-1: Product: syz [ 83.385315][ T5711] usb 1-1: Manufacturer: syz [ 83.385329][ T5711] usb 1-1: SerialNumber: syz [ 83.428369][ T5711] usb 1-1: config 0 descriptor?? [ 83.443017][ T5711] hub 1-1:0.0: bad descriptor, ignoring hub [ 83.443041][ T5711] hub 1-1:0.0: probe with driver hub failed with error -5 [ 83.457118][ T5711] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6 [ 84.333762][ T5752] usb 4-1: USB disconnect, device number 2 [ 84.520155][ T10] usb 1-1: USB disconnect, device number 3 [ 84.690424][ T5752] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.770555][ T10] usb 2-1: USB disconnect, device number 3 [ 84.802750][ T10] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 84.803571][ T10] oti6858 2-1:1.0: device disconnected [ 84.849606][ T5752] usb 4-1: Using ep0 maxpacket: 8 [ 84.850133][ T5752] usb 4-1: New USB device found: idVendor=17ef, idProduct=61ae, bcdDevice=0.00 [ 84.852128][ T5752] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 84.852158][ T5752] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 84.852183][ T5752] usb 4-1: config 0 interface 0 has no altsetting 0 [ 84.852213][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.854690][ T5752] usb 4-1: config 0 descriptor?? [ 84.966796][ T5711] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.074618][ T5825] tipc: Started in network mode [ 85.074651][ T5825] tipc: Node identity f6161e45c6a2, cluster identity 4711 [ 85.075203][ T5825] tipc: Enabled bearer , priority 10 [ 85.087379][ T5825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.087828][ T5825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.127591][ T5711] usb 3-1: Using ep0 maxpacket: 16 [ 85.130273][ T5711] usb 3-1: unable to get BOS descriptor or descriptor too short [ 85.130318][ T5711] usb 3-1: New USB device found: idVendor=04e8, idProduct=8001, bcdDevice=41.ad [ 85.136924][ T5711] usb 3-1: config 128 has an invalid interface number: 63 but max is 0 [ 85.136968][ T5711] usb 3-1: config 128 has no interface number 0 [ 85.136996][ T5711] usb 3-1: config 128 interface 63 has no altsetting 0 [ 85.140148][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.140170][ T5711] usb 3-1: Product: syz [ 85.140184][ T5711] usb 3-1: Manufacturer: syz [ 85.140226][ T5711] usb 3-1: SerialNumber: syz [ 85.226993][ T5827] loop0: detected capacity change from 0 to 4096 [ 85.310567][ T5752] lenovo 0003:17EF:61AE.0001: unknown main item tag 0x0 [ 85.310655][ T5752] lenovo 0003:17EF:61AE.0001: collection stack underflow [ 85.310702][ T5752] lenovo 0003:17EF:61AE.0001: item 0 0 0 12 parsing failed [ 85.313341][ T5752] lenovo 0003:17EF:61AE.0001: hid_parse failed [ 85.313432][ T5752] lenovo 0003:17EF:61AE.0001: probe with driver lenovo failed with error -22 [ 85.396083][ T5711] usb 3-1: active config #128 != 1 ?? [ 85.414645][ T5711] usb 3-1: USB disconnect, device number 2 [ 85.494792][ T5816] tipc: Resetting bearer [ 85.512283][ T5816] tipc: Disabling bearer [ 85.554687][ T10] usb 4-1: USB disconnect, device number 3 [ 85.627971][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 85.778969][ T9] usb 1-1: New USB device found: idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 85.780768][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.784039][ T9] usb 1-1: config 0 descriptor?? [ 85.988611][ T9] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 86.069131][ T10] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 86.072100][ T5841] comedi comedi3: mpc624: I/O base address or length out of range [ 86.204597][ T9] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 1 [ 86.204622][ T9] [drm] Initialized udl on minor 1 [ 86.218123][ T10] usb 2-1: New USB device found: idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 86.223045][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 86.223072][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 86.223096][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 86.227801][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.227823][ T10] usb 2-1: Product: syz [ 86.227837][ T10] usb 2-1: Manufacturer: syz [ 86.227850][ T10] usb 2-1: SerialNumber: syz [ 86.267555][ T10] usb 2-1: config 0 descriptor?? [ 86.268755][ T5835] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 86.356387][ T10] rc_core: IR keymap rc-streamzap not found [ 86.356442][ T10] Registered IR keymap rc-empty [ 86.362831][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 86.366136][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7 [ 86.497747][ T10] usb 2-1: USB disconnect, device number 4 [ 86.762912][ T5853] netlink: 'syz.3.33': attribute type 46 has an invalid length. [ 86.922742][ T1222] cfg80211: failed to load regulatory.db [ 86.996510][ T990] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 87.147167][ T990] usb 3-1: New USB device found: idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 87.148134][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 87.148163][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 87.150063][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.150086][ T990] usb 3-1: Product: syz [ 87.150099][ T990] usb 3-1: Manufacturer: syz [ 87.150114][ T990] usb 3-1: SerialNumber: syz [ 87.154127][ T990] usb 3-1: config 0 descriptor?? [ 87.184106][ T990] hub 3-1:0.0: bad descriptor, ignoring hub [ 87.184129][ T990] hub 3-1:0.0: probe with driver hub failed with error -5 [ 87.187948][ T990] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input8 [ 87.241858][ T5608] Bluetooth: hci1: command 0x0406 tx timeout [ 87.306562][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 87.457095][ T10] usb 2-1: New USB device found: idVendor=108c, idProduct=0159, bcdDevice=0.01 [ 87.460708][ T10] usb 2-1: string descriptor 0 read error: -22 [ 87.460799][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.467382][ T10] etas_es58x 2-1:1.0: Starting (null) (null) (Serial Number (null)) [ 87.467630][ T10] etas_es58x 2-1:1.0: could not retrieve the product info string [ 87.683049][ T5858] etas_es58x 2-1:1.0 can0: bit-timing not yet defined [ 87.996885][ T5698] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 88.146716][ T5698] usb 4-1: Using ep0 maxpacket: 16 [ 88.151665][ T5698] usb 4-1: unable to get BOS descriptor or descriptor too short [ 88.151707][ T5698] usb 4-1: New USB device found: idVendor=04e8, idProduct=8001, bcdDevice=41.ad [ 88.153672][ T5698] usb 4-1: config 128 has an invalid interface number: 63 but max is 0 [ 88.153694][ T5698] usb 4-1: config 128 has no interface number 0 [ 88.153722][ T5698] usb 4-1: config 128 interface 63 has no altsetting 0 [ 88.160725][ T5698] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.160747][ T5698] usb 4-1: Product: syz [ 88.160761][ T5698] usb 4-1: Manufacturer: syz [ 88.160774][ T5698] usb 4-1: SerialNumber: syz [ 88.320952][ T5881] CIFS: VFS: UNC: path must begin with // or \\ [ 88.320967][ T5881] Malformed UNC in devname [ 88.320967][ T5881] [ 88.321090][ T5881] CIFS: VFS: Malformed UNC in devname [ 88.756443][ T5858] etas_es58x 2-1:1.0: es58x_free_urbs: Timeout, some TX urbs still remain [ 88.757731][ C1] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 88.757950][ C1] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 88.758156][ C1] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 88.758333][ C1] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 88.758515][ C1] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 88.758583][ T5858] etas_es58x 2-1:1.0 can0: es58x_open: Could not open the network device: -EINVAL [ 88.759808][ T5270] etas_es58x 2-1:1.0: es58x_set_realtime_diff_ns: Previous request to set timestamp has not completed yet [ 88.759886][ C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 88.760092][ C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 88.760402][ C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 88.760479][ C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -EPROTO. Device unplugged? [ 88.760550][ C0] etas_es58x 2-1:1.0: es58x_read_bulk_callback: error -ENOENT [ 88.760655][ T5270] etas_es58x 2-1:1.0 can1: es58x_open: Could not open the network device: -EBUSY [ 88.762334][ T5752] usb 2-1: USB disconnect, device number 5 [ 88.823042][ T5698] usb 4-1: active config #128 != 1 ?? [ 88.835464][ T5698] usb 4-1: USB disconnect, device number 4 [ 88.888076][ T5752] etas_es58x 2-1:1.0: Disconnecting (null) (null) [ 89.552054][ T5911] file system registered [ 89.746379][ T5752] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 89.854040][ T5698] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 89.884440][ T5698] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 89.917782][ T5752] usb 2-1: Using ep0 maxpacket: 8 [ 89.918472][ T5752] usb 2-1: New USB device found: idVendor=18d1, idProduct=2d04, bcdDevice=0.40 [ 89.919680][ T5752] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.919701][ T5752] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 89.964123][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.964149][ T5752] usb 2-1: Product: syz [ 89.964164][ T5752] usb 2-1: Manufacturer: syz [ 89.964178][ T5752] usb 2-1: SerialNumber: syz [ 90.336113][ T5925] fido_id[5925]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 90.381721][ T5752] usb 2-1: USB disconnect, device number 6 [ 90.477366][ T5613] udevd[5613]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 90.658457][ T10] usb 3-1: USB disconnect, device number 3 [ 91.001247][ T5612] Bluetooth: hci0: command 0x0406 tx timeout [ 91.078018][ T5761] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.228795][ T5761] usb 4-1: New USB device found: idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 91.234990][ T5761] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.235014][ T5761] usb 4-1: Product: syz [ 91.235029][ T5761] usb 4-1: Manufacturer: syz [ 91.235044][ T5761] usb 4-1: SerialNumber: syz [ 91.273403][ T9] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffff92 [ 91.274597][ T9] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 91.295090][ T5698] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffe0 [ 91.317859][ T5761] usb 4-1: config 0 descriptor?? [ 91.321420][ T5698] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 91.323755][ T9] usb 1-1: USB disconnect, device number 4 [ 91.338825][ T5761] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 91.351771][ T5698] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 91.732309][ T5761] gspca_sq905c: sq905c_read: usb_control_msg failed (-71) [ 91.732327][ T5761] sq905c 4-1:0.0: Reading version command failed [ 91.732399][ T5761] sq905c 4-1:0.0: probe with driver sq905c failed with error -71 [ 91.765192][ T5761] usb 4-1: USB disconnect, device number 5 [ 91.828420][ T5711] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 91.977177][ T5711] usb 3-1: New USB device found: idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 91.978705][ T5711] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.978840][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.986682][ T5711] usb 3-1: config 0 descriptor?? [ 91.994437][ T5711] smsusb:smsusb_probe: board id=8, interface number 0 [ 91.996883][ T5711] smsusb:smsusb_probe: Device initialized with return code -19 [ 92.285629][ T5711] usb 3-1: USB disconnect, device number 4 [ 92.680223][ T5698] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 92.846382][ T5698] usb 1-1: Using ep0 maxpacket: 16 [ 92.848466][ T5698] usb 1-1: New USB device found: idVendor=054c, idProduct=002e, bcdDevice=5.00 [ 92.853022][ T5698] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.853044][ T5698] usb 1-1: Product: syz [ 92.853057][ T5698] usb 1-1: Manufacturer: syz [ 92.853071][ T5698] usb 1-1: SerialNumber: syz [ 92.907663][ T5698] usb 1-1: config 0 descriptor?? [ 92.910417][ T5698] usb-storage 1-1:0.0: USB Mass Storage device detected [ 92.932461][ T5698] usb-storage 1-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 92.959814][ T6012] CacheFiles: Failed to register: -95 [ 93.000479][ T4924] Bluetooth: hci2: command 0x0406 tx timeout [ 93.112349][ T5698] usb 1-1: USB disconnect, device number 5 [ 93.454737][ T6025] FAULT_INJECTION: forcing a failure. [ 93.454737][ T6025] name failslab, interval 1, probability 0, space 0, times 0 [ 93.454772][ T6025] CPU: 1 UID: 0 PID: 6025 Comm: syz.3.65 Not tainted syzkaller #0 PREEMPT(full) [ 93.454784][ T6025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.454801][ T6025] Call Trace: [ 93.454808][ T6025] [ 93.454813][ T6025] dump_stack_lvl+0xe8/0x150 [ 93.454836][ T6025] should_fail_ex+0x3eb/0x540 [ 93.454850][ T6025] should_failslab+0xa8/0x100 [ 93.454866][ T6025] __kmalloc_noprof+0xf9/0x710 [ 93.454876][ T6025] ? rcu_is_watching+0x16/0xb0 [ 93.454890][ T6025] ? tomoyo_realpath_from_path+0xef/0x640 [ 93.454902][ T6025] ? tomoyo_realpath_from_path+0xef/0x640 [ 93.454916][ T6025] tomoyo_realpath_from_path+0xef/0x640 [ 93.454932][ T6025] ? tomoyo_path_number_perm+0x219/0x5f0 [ 93.454947][ T6025] tomoyo_path_number_perm+0x246/0x5f0 [ 93.454963][ T6025] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 93.454977][ T6025] ? __lock_acquire+0x747/0x2de0 [ 93.455007][ T6025] ? __fget_files+0x2a/0x420 [ 93.455020][ T6025] ? __fget_files+0x2a/0x420 [ 93.455030][ T6025] ? __fget_files+0x2a/0x420 [ 93.455043][ T6025] security_file_ioctl+0xc3/0x2a0 [ 93.455059][ T6025] __se_sys_ioctl+0x47/0x170 [ 93.455078][ T6025] do_syscall_64+0x166/0x520 [ 93.455090][ T6025] ? trace_irq_disable+0x3b/0x140 [ 93.455102][ T6025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.455113][ T6025] ? clear_bhb_loop+0x70/0xc0 [ 93.455128][ T6025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.455139][ T6025] RIP: 0033:0x7fb0bd79e159 [ 93.455152][ T6025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.455161][ T6025] RSP: 002b:00007fb0be681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 93.455175][ T6025] RAX: ffffffffffffffda RBX: 00007fb0bda25fa0 RCX: 00007fb0bd79e159 [ 93.455183][ T6025] RDX: 0000200000000180 RSI: 00000000c0cc5616 RDI: 0000000000000003 [ 93.455189][ T6025] RBP: 00007fb0be681090 R08: 0000000000000000 R09: 0000000000000000 [ 93.455196][ T6025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.455206][ T6025] R13: 00007fb0bda26038 R14: 00007fb0bda25fa0 R15: 00007fffafbccb78 [ 93.455226][ T6025] [ 93.455323][ T6025] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.545533][ T6027] syz.3.66 uses obsolete (PF_INET,SOCK_PACKET) [ 93.682702][ T6028] 0x000000000000-0x000000010000 : "" [ 93.762915][ T6028] ftl_cs: FTL header not found. [ 94.007816][ T6037] CacheFiles: Failed to register: -95 [ 94.179070][ T6043] capability: warning: `syz.2.73' uses 32-bit capabilities (legacy support in use) [ 94.576396][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 94.726406][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 94.728606][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.728656][ T9] usb 1-1: New USB device found: idVendor=19b5, idProduct=0021, bcdDevice=0.40 [ 94.730118][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.730142][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 94.730199][ T9] usb 1-1: config 1 interface 1 altsetting 4 endpoint 0x1 has invalid wMaxPacketSize 0 [ 94.730223][ T9] usb 1-1: config 1 interface 1 has no altsetting 1 [ 94.733472][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.733496][ T9] usb 1-1: Product: Б [ 94.733515][ T9] usb 1-1: Manufacturer: ᠁ [ 94.733536][ T9] usb 1-1: SerialNumber: ࡡ [ 95.054444][ T9] usb 1-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 95.054473][ T9] usb 1-1: __uac_clock_find_source(): recursive clock topology detected, id 0. [ 95.112352][ T6062] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(838860804.0.133495060), cmd(2) [ 95.153460][ T9] usb 1-1: USB disconnect, device number 6 [ 95.185630][ T6064] CIFS: VFS: UNC: missing share name [ 95.185667][ T6064] CIFS: VFS: Malformed UNC in devname [ 95.215905][ T6066] CIFS: VFS: UNC: path must begin with // or \\ [ 95.215937][ T6066] CIFS: VFS: Malformed UNC in devname [ 95.280007][ T5621] udevd[5621]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.434615][ T6076] CacheFiles: Failed to register: -95 [ 95.646411][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 95.797211][ T10] usb 3-1: New USB device found: idVendor=091e, idProduct=0003, bcdDevice=0.01 [ 95.798298][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.798344][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 95.798367][ T10] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.850319][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 95.850346][ T10] usb 3-1: Product: syz [ 95.850361][ T10] usb 3-1: Manufacturer: syz [ 95.879586][ T6075] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 95.904355][ T10] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 95.934654][ T10] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 96.170592][ T5752] usb 3-1: USB disconnect, device number 5 [ 96.225233][ T5752] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 96.230602][ T5752] garmin_gps 3-1:1.0: device disconnected [ 96.361350][ T6102] CacheFiles: Failed to register: -95 [ 97.086529][ T5698] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 97.241212][ T5698] usb 3-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 97.243733][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.243763][ T5698] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.243785][ T5698] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.243826][ T5698] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.308403][ T5698] usb 3-1: config 0 descriptor?? [ 97.596512][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 97.599431][ T5698] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 97.746464][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 97.747280][ T10] usb 1-1: New USB device found: idVendor=057e, idProduct=200e, bcdDevice=0.00 [ 97.748548][ T10] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 97.748591][ T10] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 97.748617][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 97.748650][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.762475][ T10] usb 1-1: config 0 descriptor?? [ 97.868122][ T6122] syzkaller1: entered promiscuous mode [ 97.868142][ T6122] syzkaller1: entered allmulticast mode [ 97.885398][ T6112] block nbd2: Device being setup by another task [ 97.935124][ T6112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.935534][ T6112] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.951389][ T6126] CacheFiles: Failed to register: -95 [ 98.053191][ T6111] block nbd2: shutting down sockets [ 98.087754][ T5752] usb 3-1: USB disconnect, device number 6 [ 98.219003][ T10] nintendo 0003:057E:200E.0004: ignoring exceeding usage max [ 98.228743][ T10] nintendo 0003:057E:200E.0004: unknown main item tag 0x1 [ 98.228782][ T10] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 98.228809][ T10] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 98.228834][ T10] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 98.228858][ T10] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 98.228882][ T10] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 98.228907][ T10] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 98.228929][ T10] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 98.228952][ T10] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 98.228975][ T10] nintendo 0003:057E:200E.0004: unknown main item tag 0x0 [ 98.324716][ T10] nintendo 0003:057E:200E.0004: hidraw0: USB HID v80.01 Device [HID 057e:200e] on usb-dummy_hcd.0-1/input0 [ 98.377845][ T10] nintendo 0003:057E:200E.0004: Failed charging grip handshake [ 98.377868][ T10] nintendo 0003:057E:200E.0004: Failed to initialize controller; ret=-110 [ 98.435496][ T10] nintendo 0003:057E:200E.0004: probe - fail = -110 [ 98.435675][ T10] nintendo 0003:057E:200E.0004: probe with driver nintendo failed with error -110 [ 98.615626][ T6119] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 98.653609][ T6119] binder: Write failure EINVAL in pid:52 [ 98.812629][ T5711] usb 1-1: USB disconnect, device number 7 [ 98.851641][ T6149] netlink: 44 bytes leftover after parsing attributes in process `syz.1.105'. [ 98.851670][ T6149] netlink: 43 bytes leftover after parsing attributes in process `syz.1.105'. [ 98.851685][ T6149] netlink: 'syz.1.105': attribute type 5 has an invalid length. [ 98.851698][ T6149] netlink: 43 bytes leftover after parsing attributes in process `syz.1.105'. [ 99.008763][ T5752] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 99.157111][ T5752] usb 3-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 99.158267][ T5752] usb 3-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 99.158297][ T5752] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 99.158322][ T5752] usb 3-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 99.158394][ T5752] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.170916][ T6148] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 99.392256][ T6157] CacheFiles: Failed to register: -95 [ 99.806417][ T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.957096][ T9] usb 1-1: New USB device found: idVendor=1e7d, idProduct=2d50, bcdDevice=0.00 [ 99.958076][ T9] usb 1-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 10 [ 99.958106][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 99.958137][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.961098][ T9] usb 1-1: config 0 descriptor?? [ 99.987691][ T5752] aiptek 3-1:17.0: Aiptek using 400 ms programming speed [ 99.991827][ T5752] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.0/input/input10 [ 100.173834][ T6163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.186429][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 100.202687][ T6163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.224159][ T9] kovaplus 0003:1E7D:2D50.0005: hidraw0: USB HID v80.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 100.338059][ T10] usb 4-1: device descriptor read/64, error -71 [ 100.379455][ T5752] usb 1-1: USB disconnect, device number 8 [ 100.588095][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 100.716814][ T10] usb 4-1: device descriptor read/64, error -71 [ 100.828702][ T10] usb usb4-port1: attempt power cycle [ 101.166408][ T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 101.166551][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 101.196991][ T10] usb 4-1: device descriptor read/8, error -71 [ 101.318855][ T9] usb 1-1: New USB device found: idVendor=055f, idProduct=a800, bcdDevice=1.00 [ 101.320031][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 101.320071][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.324414][ T6180] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 101.327696][ T9] mdc800 1-1:1.0: probe fails -> Wrong Endpoints. [ 101.436363][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 101.456970][ T10] usb 4-1: device descriptor read/8, error -71 [ 101.534662][ T5761] usb 1-1: USB disconnect, device number 9 [ 101.570578][ T10] usb usb4-port1: unable to enumerate USB device [ 101.583736][ T6182] CacheFiles: Failed to register: -95 [ 101.724256][ T990] usb 3-1: USB disconnect, device number 7 [ 101.724356][ C1] aiptek 3-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 102.182487][ T6195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.182905][ T6195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.406371][ T5761] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 102.556357][ T5761] usb 1-1: Using ep0 maxpacket: 8 [ 102.556871][ T5761] usb 1-1: New USB device found: idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 102.557783][ T5761] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 102.559658][ T5761] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.559681][ T5761] usb 1-1: Product: syz [ 102.559694][ T5761] usb 1-1: Manufacturer: syz [ 102.559708][ T5761] usb 1-1: SerialNumber: syz [ 102.561468][ T5761] usb 1-1: config 0 descriptor?? [ 102.565165][ T5761] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 103.025190][ T6204] CacheFiles: Failed to register: -95 [ 103.219400][ T6207] netlink: 52 bytes leftover after parsing attributes in process `syz.3.128'. [ 103.774258][ T5761] gspca_zc3xx: reg_w_i err -71 [ 103.880755][ T6220] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 103.880772][ T6220] overlayfs: failed to set xattr on upper [ 103.880777][ T6220] overlayfs: ...falling back to index=off. [ 103.880781][ T6220] overlayfs: ...falling back to uuid=null. [ 103.880813][ T6220] overlayfs: conflicting lowerdir path [ 104.341128][ T6226] CacheFiles: Failed to register: -95 [ 104.386362][ T5761] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 104.386457][ T5761] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 104.394616][ T5761] usb 1-1: USB disconnect, device number 10 [ 104.447054][ T6228] FAULT_INJECTION: forcing a failure. [ 104.447054][ T6228] name failslab, interval 1, probability 0, space 0, times 0 [ 104.447085][ T6228] CPU: 0 UID: 0 PID: 6228 Comm: syz.3.137 Not tainted syzkaller #0 PREEMPT(full) [ 104.447108][ T6228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.447121][ T6228] Call Trace: [ 104.447129][ T6228] [ 104.447137][ T6228] dump_stack_lvl+0xe8/0x150 [ 104.447171][ T6228] should_fail_ex+0x3eb/0x540 [ 104.447197][ T6228] should_failslab+0xa8/0x100 [ 104.447225][ T6228] ? mempool_init_node+0x1f4/0x510 [ 104.447256][ T6228] kmem_cache_alloc_noprof+0x9c/0x600 [ 104.447277][ T6228] ? kmem_cache_alloc_noprof+0x151/0x600 [ 104.447298][ T6228] ? mempool_init_node+0x1f4/0x510 [ 104.447331][ T6228] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 104.447363][ T6228] mempool_init_node+0x1f4/0x510 [ 104.447401][ T6228] ? __pfx_mempool_free_slab+0x10/0x10 [ 104.447431][ T6228] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 104.447471][ T6228] mempool_init_noprof+0x3a/0x50 [ 104.447505][ T6228] bioset_init+0x2ee/0x7e0 [ 104.447534][ T6228] ? __pfx_bioset_init+0x10/0x10 [ 104.447556][ T6228] ? __kasan_kmalloc+0x93/0xb0 [ 104.447583][ T6228] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 104.447608][ T6228] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 104.447630][ T6228] ? __alloc_disk_node+0x5e/0x600 [ 104.447651][ T6228] ? __alloc_disk_node+0x5e/0x600 [ 104.447680][ T6228] __alloc_disk_node+0x7b/0x600 [ 104.447710][ T6228] __blk_alloc_disk+0x105/0x1d0 [ 104.447736][ T6228] ? __pfx___blk_alloc_disk+0x10/0x10 [ 104.447783][ T6228] ? __raw_spin_lock_init+0x45/0x100 [ 104.447817][ T6228] dm_create+0x476/0xf70 [ 104.447850][ T6228] dev_create+0x1f7/0x400 [ 104.447876][ T6228] ? __pfx_dev_create+0x10/0x10 [ 104.447900][ T6228] ? __might_fault+0xaf/0x130 [ 104.447938][ T6228] dm_ctl_ioctl+0x9ec/0xe10 [ 104.447968][ T6228] ? __pfx_dev_create+0x10/0x10 [ 104.447991][ T6228] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 104.448040][ T6228] ? __fget_files+0x2a/0x420 [ 104.448065][ T6228] ? bpf_lsm_file_ioctl+0x9/0x20 [ 104.448092][ T6228] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 104.448115][ T6228] __se_sys_ioctl+0xfc/0x170 [ 104.448145][ T6228] do_syscall_64+0x166/0x520 [ 104.448168][ T6228] ? trace_irq_disable+0x3b/0x140 [ 104.448191][ T6228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.448213][ T6228] ? clear_bhb_loop+0x70/0xc0 [ 104.448238][ T6228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.448259][ T6228] RIP: 0033:0x7fb0bd79e159 [ 104.448278][ T6228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.448296][ T6228] RSP: 002b:00007fb0be681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.448318][ T6228] RAX: ffffffffffffffda RBX: 00007fb0bda25fa0 RCX: 00007fb0bd79e159 [ 104.448334][ T6228] RDX: 0000200000000000 RSI: 00000000c138fd03 RDI: 0000000000000003 [ 104.448348][ T6228] RBP: 00007fb0bd83506b R08: 0000000000000000 R09: 0000000000000000 [ 104.448360][ T6228] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.448373][ T6228] R13: 00007fb0bda26038 R14: 00007fb0bda25fa0 R15: 00007fffafbccb78 [ 104.448404][ T6228] [ 106.004043][ T6251] CacheFiles: Failed to register: -95 [ 107.132808][ T5608] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 107.316870][ T33] audit: type=1800 audit(1790643440.367:2): pid=6274 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.154" name="(" dev="sda1" ino=2043 res=0 errno=0 [ 107.435460][ T6276] CacheFiles: Failed to register: -95 [ 108.198891][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.198916][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.200227][ T6284] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.200242][ T6284] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.435768][ T5608] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 108.507780][ T9] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 108.605337][ T6299] CacheFiles: Failed to register: -95 [ 108.668146][ T9] usb 1-1: New USB device found: idVendor=0926, idProduct=3333, bcdDevice=0.40 [ 108.669868][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.669900][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.673010][ T9] usb 1-1: config 0 descriptor?? [ 109.096776][ T9] keytouch 0003:0926:3333.0006: fixing up Keytouch IEC report descriptor [ 109.122791][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0006/input/input13 [ 109.378684][ T9] keytouch 0003:0926:3333.0006: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 109.382369][ C0] Mem-Info: [ 109.382385][ C0] active_anon:17135 inactive_anon:2 isolated_anon:0 [ 109.382385][ C0] active_file:5 inactive_file:52029 isolated_file:0 [ 109.382385][ C0] unevictable:0 dirty:29 writeback:0 [ 109.382385][ C0] slab_reclaimable:10602 slab_unreclaimable:90583 [ 109.382385][ C0] mapped:35582 shmem:11668 pagetables:1215 [ 109.382385][ C0] sec_pagetables:0 bounce:0 [ 109.382385][ C0] kernel_misc_reclaimable:0 [ 109.382385][ C0] free:1297129 free_pcp:17336 free_cma:0 [ 109.382453][ C0] Node 0 active_anon:68540kB inactive_anon:8kB active_file:20kB inactive_file:207912kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:142328kB dirty:116kB writeback:0kB shmem:46672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11796kB pagetables:4772kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 109.382521][ C0] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:88kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 109.382586][ C0] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.382666][ C0] lowmem_reserve[]: 0 2481 2483 2483 2483 [ 109.382710][ C0] Node 0 DMA32 free:1235544kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0kB free_highatomic:0kB active_anon:68540kB inactive_anon:8kB active_file:20kB inactive_file:207912kB unevictable:0kB writepending:116kB zspages:0kB present:3129332kB managed:2541392kB mlocked:0kB bounce:0kB free_pcp:69340kB local_pcp:29088kB free_cma:0kB [ 109.382788][ C0] lowmem_reserve[]: 0 0 1 1 1 [ 109.382828][ C0] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1404kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 109.382893][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 109.382937][ C0] Node 1 Normal free:3937612kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 109.383021][ C0] lowmem_reserve[]: 0 0 0 0 0 [ 109.383065][ C0] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 109.383239][ C0] Node 0 DMA32: 6354*4kB (UME) 882*8kB (UME) 402*16kB (UME) 64*32kB (ME) 67*64kB (UM) 41*128kB (UM) 25*256kB (UME) 18*512kB (UM) 18*1024kB (UM) 10*2048kB (UM) 276*4096kB (M) = 1235512kB [ 109.383422][ C0] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 109.383530][ C0] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 7*16kB (UM) 12*32kB (UM) 9*64kB (UM) 4*128kB (UM) 3*256kB (UM) 4*512kB (UM) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3937616kB [ 109.383717][ C0] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.383738][ C0] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.383758][ C0] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 109.383777][ C0] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 109.383805][ C0] 63698 total pagecache pages [ 109.383818][ C0] 0 pages in swap cache [ 109.383826][ C0] Free swap = 124996kB [ 109.383835][ C0] Total swap = 124996kB [ 109.383845][ C0] 2097051 pages RAM [ 109.383854][ C0] 0 pages HighMem/MovableOnly [ 109.383862][ C0] 429736 pages reserved [ 109.383870][ C0] 0 pages cma reserved [ 109.698252][ T5711] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 109.877590][ T6319] CacheFiles: Empty tag specified [ 109.887636][ T6319] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 109.901213][ T5711] usb 2-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 109.904810][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.904834][ T5711] usb 2-1: Product: syz [ 109.904849][ T5711] usb 2-1: Manufacturer: syz [ 109.904864][ T5711] usb 2-1: SerialNumber: syz [ 109.947120][ T5711] usb 2-1: config 0 descriptor?? [ 110.316436][ T5752] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 110.467235][ T5752] usb 4-1: New USB device found: idVendor=041e, idProduct=2801, bcdDevice=0.00 [ 110.468313][ T5752] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 110.468336][ T5752] usb 4-1: config 0 has no interface number 0 [ 110.468375][ T5752] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.468399][ T5752] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.468440][ T5752] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.472451][ T5752] usb 4-1: config 0 descriptor?? [ 110.565661][ T5711] usb 2-1: Firmware version (0.0) predates our first public release. [ 110.565686][ T5711] usb 2-1: Please update to version 0.2 or newer [ 110.635319][ T5711] usb 2-1: USB disconnect, device number 7 [ 110.684655][ T5752] usbhid 4-1:0.1: can't add hid device: -71 [ 110.684764][ T5752] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 110.716111][ T5752] usb 4-1: USB disconnect, device number 10 [ 110.789316][ T9] usb 1-1: USB disconnect, device number 11 [ 110.973469][ T6340] CacheFiles: Failed to register: -95 [ 111.071608][ T6346] FAULT_INJECTION: forcing a failure. [ 111.071608][ T6346] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 111.071637][ T6346] CPU: 1 UID: 0 PID: 6346 Comm: syz.2.175 Not tainted syzkaller #0 PREEMPT(full) [ 111.071658][ T6346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.071669][ T6346] Call Trace: [ 111.071676][ T6346] [ 111.071684][ T6346] dump_stack_lvl+0xe8/0x150 [ 111.071714][ T6346] should_fail_ex+0x3eb/0x540 [ 111.071741][ T6346] _copy_to_user+0x31/0xb0 [ 111.071765][ T6346] simple_read_from_buffer+0xe1/0x170 [ 111.071790][ T6346] proc_fail_nth_read+0x1bb/0x230 [ 111.071818][ T6346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.071854][ T6346] ? rw_verify_area+0x24a/0x4c0 [ 111.071878][ T6346] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.071902][ T6346] vfs_read+0x213/0xa80 [ 111.071929][ T6346] ? __pfx___mutex_lock+0x10/0x10 [ 111.071954][ T6346] ? __pfx_vfs_read+0x10/0x10 [ 111.071977][ T6346] ? __fget_files+0x2a/0x420 [ 111.071996][ T6346] ? __fget_files+0x3a2/0x420 [ 111.072015][ T6346] ? __fget_files+0x2a/0x420 [ 111.072045][ T6346] ? fdget+0x1ac/0x250 [ 111.072076][ T6346] ksys_read+0x150/0x270 [ 111.072101][ T6346] ? __pfx_ksys_read+0x10/0x10 [ 111.072134][ T6346] do_syscall_64+0x166/0x520 [ 111.072156][ T6346] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.072176][ T6346] ? clear_bhb_loop+0x70/0xc0 [ 111.072208][ T6346] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.072228][ T6346] RIP: 0033:0x7fedc915e98e [ 111.072246][ T6346] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.072262][ T6346] RSP: 002b:00007fedc9ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.072282][ T6346] RAX: ffffffffffffffda RBX: 00007fedc9ff66c0 RCX: 00007fedc915e98e [ 111.072295][ T6346] RDX: 000000000000000f RSI: 00007fedc9ff60a0 RDI: 0000000000000004 [ 111.072307][ T6346] RBP: 00007fedc9ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 111.072319][ T6346] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.072330][ T6346] R13: 00007fedc9426038 R14: 00007fedc9425fa0 R15: 00007fff91867038 [ 111.072358][ T6346] [ 111.669688][ T6365] CacheFiles: Failed to register: -95 [ 111.734698][ T6368] FAULT_INJECTION: forcing a failure. [ 111.734698][ T6368] name failslab, interval 1, probability 0, space 0, times 0 [ 111.734728][ T6368] CPU: 1 UID: 0 PID: 6368 Comm: syz.0.183 Not tainted syzkaller #0 PREEMPT(full) [ 111.734740][ T6368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 111.734747][ T6368] Call Trace: [ 111.734751][ T6368] [ 111.734756][ T6368] dump_stack_lvl+0xe8/0x150 [ 111.734782][ T6368] should_fail_ex+0x3eb/0x540 [ 111.734797][ T6368] should_failslab+0xa8/0x100 [ 111.734811][ T6368] ? do_getname+0x2e/0x250 [ 111.734828][ T6368] kmem_cache_alloc_noprof+0x9c/0x600 [ 111.734844][ T6368] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 111.734860][ T6368] ? do_futex+0x3e7/0x4e0 [ 111.734876][ T6368] ? do_getname+0x2e/0x250 [ 111.734895][ T6368] do_getname+0x2e/0x250 [ 111.734909][ T6368] ? getname_flags+0x11/0x20 [ 111.734926][ T6368] do_sys_openat2+0xce/0x200 [ 111.734943][ T6368] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.734960][ T6368] ? __fget_files+0x2a/0x420 [ 111.734975][ T6368] __x64_sys_openat+0x138/0x170 [ 111.734997][ T6368] do_syscall_64+0x166/0x520 [ 111.735010][ T6368] ? trace_irq_disable+0x3b/0x140 [ 111.735022][ T6368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.735033][ T6368] ? clear_bhb_loop+0x70/0xc0 [ 111.735046][ T6368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.735057][ T6368] RIP: 0033:0x7f84cff5e98e [ 111.735071][ T6368] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 111.735080][ T6368] RSP: 002b:00007f84d0dd53f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.735095][ T6368] RAX: ffffffffffffffda RBX: 00007f84d0dd76c0 RCX: 00007f84cff5e98e [ 111.735103][ T6368] RDX: 0000000000000002 RSI: 00007f84d0034426 RDI: ffffffffffffff9c [ 111.735110][ T6368] RBP: 0000200000001000 R08: 0000000000000000 R09: 0000000000000000 [ 111.735116][ T6368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001800 [ 111.735123][ T6368] R13: 00007f84d0dd5bd0 R14: 000000000000006b R15: 00000000000000c0 [ 111.735138][ T6368] [ 112.023935][ T6373] netlink: 24 bytes leftover after parsing attributes in process `syz.1.185'. [ 112.108356][ T6377] input: syz0 as /devices/virtual/input/input14 [ 112.214604][ T6380] netlink: 112 bytes leftover after parsing attributes in process `syz.2.187'. [ 112.337011][ T5711] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 112.357504][ T5608] Bluetooth: hci3: command 0x0406 tx timeout [ 112.467273][ T5711] usb 1-1: device descriptor read/64, error -71 [ 112.645528][ T6401] FAULT_INJECTION: forcing a failure. [ 112.645528][ T6401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 112.645557][ T6401] CPU: 0 UID: 0 PID: 6401 Comm: syz.3.192 Not tainted syzkaller #0 PREEMPT(full) [ 112.645583][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.645595][ T6401] Call Trace: [ 112.645603][ T6401] [ 112.645611][ T6401] dump_stack_lvl+0xe8/0x150 [ 112.645642][ T6401] should_fail_ex+0x3eb/0x540 [ 112.645668][ T6401] strncpy_from_user+0x36/0x2c0 [ 112.645693][ T6401] do_getname+0x77/0x250 [ 112.645726][ T6401] do_sys_openat2+0xce/0x200 [ 112.645760][ T6401] ? __pfx_do_sys_openat2+0x10/0x10 [ 112.645794][ T6401] ? __fget_files+0x2a/0x420 [ 112.645822][ T6401] __x64_sys_openat+0x138/0x170 [ 112.645864][ T6401] do_syscall_64+0x166/0x520 [ 112.645888][ T6401] ? trace_irq_disable+0x3b/0x140 [ 112.645913][ T6401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.645934][ T6401] ? clear_bhb_loop+0x70/0xc0 [ 112.645957][ T6401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.645977][ T6401] RIP: 0033:0x7fb0bd75e98e [ 112.645996][ T6401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 112.646015][ T6401] RSP: 002b:00007fb0be67f3f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 112.646037][ T6401] RAX: ffffffffffffffda RBX: 00007fb0be6816c0 RCX: 00007fb0bd75e98e [ 112.646052][ T6401] RDX: 0000000000000002 RSI: 00007fb0bd834426 RDI: ffffffffffffff9c [ 112.646067][ T6401] RBP: 0000200000001000 R08: 0000000000000000 R09: 0000000000000000 [ 112.646080][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000001800 [ 112.646093][ T6401] R13: 00007fb0be67fbd0 R14: 000000000000006b R15: 00000000000000c0 [ 112.646121][ T6401] [ 112.706443][ T5711] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 112.783881][ T6397] CacheFiles: Failed to register: -95 [ 112.837011][ T5711] usb 1-1: device descriptor read/64, error -71 [ 112.877475][ T6373] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 112.946834][ T5711] usb usb1-port1: attempt power cycle [ 113.286485][ T5711] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 113.308115][ T5711] usb 1-1: device descriptor read/8, error -71 [ 113.336375][ T5698] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 113.486743][ T5698] usb 2-1: Using ep0 maxpacket: 32 [ 113.487315][ T5698] usb 2-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 113.492298][ T5698] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.492321][ T5698] usb 2-1: Product: syz [ 113.492329][ T5698] usb 2-1: Manufacturer: syz [ 113.492337][ T5698] usb 2-1: SerialNumber: syz [ 113.534323][ T5698] usb 2-1: config 0 descriptor?? [ 113.550178][ T5711] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 113.550330][ T5698] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 113.567904][ T5711] usb 1-1: device descriptor read/8, error -71 [ 113.677560][ T5711] usb usb1-port1: unable to enumerate USB device [ 113.750436][ T6413] netlink: 'syz.1.194': attribute type 2 has an invalid length. [ 114.926626][ T4924] Bluetooth: hci1: command 0x0406 tx timeout [ 114.926624][ T5761] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 114.926645][ T5761] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 115.168932][ T5698] gspca_ov534_9: reg_r err -32 [ 115.446371][ T5698] gspca_ov534_9: Unknown sensor 0000 [ 115.446453][ T5698] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 115.449109][ T5698] usb 2-1: USB disconnect, device number 8 [ 115.593453][ T6491] CacheFiles: Failed to register: -95 [ 115.820947][ T4924] Bluetooth: hci2: unexpected event for opcode 0x0c1c [ 116.166385][ T5752] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 116.296425][ T5752] usb 2-1: device descriptor read/64, error -71 [ 116.536497][ T5752] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 116.666415][ T5752] usb 2-1: device descriptor read/64, error -71 [ 116.706508][ T1222] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 116.776991][ T5752] usb usb2-port1: attempt power cycle [ 116.886390][ T1222] usb 3-1: Using ep0 maxpacket: 32 [ 116.887052][ T1222] usb 3-1: New USB device found: idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 116.888183][ T1222] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 116.888197][ T1222] usb 3-1: config 0 has no interface number 0 [ 116.888218][ T1222] usb 3-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 116.888228][ T1222] usb 3-1: config 0 interface 1 has no altsetting 0 [ 116.890056][ T1222] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.890069][ T1222] usb 3-1: Product: syz [ 116.890077][ T1222] usb 3-1: Manufacturer: syz [ 116.890085][ T1222] usb 3-1: SerialNumber: syz [ 116.891648][ T1222] usb 3-1: config 0 descriptor?? [ 116.936384][ T5711] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 116.996521][ T5761] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 116.996544][ T5761] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 117.087434][ T5711] usb 1-1: not running at top speed; connect to a high speed hub [ 117.087468][ T5711] usb 1-1: New USB device found: idVendor=046d, idProduct=0825, bcdDevice=1.00 [ 117.088422][ T5711] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.088443][ T5711] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 117.088500][ T5711] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.097978][ T5711] uvcvideo 1-1:1.0: Found Unit with invalid ID 0 [ 117.126512][ T5752] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 117.157005][ T5752] usb 2-1: device descriptor read/8, error -71 [ 117.165629][ T1222] cx231xx 3-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 117.176756][ T1222] cx231xx 3-1:0.1: Failed to read PCB config [ 117.176889][ T1222] cx231xx 3-1:0.1: probe with driver cx231xx failed with error -71 [ 117.180159][ T1222] usb 3-1: USB disconnect, device number 8 [ 117.298601][ T5711] usb 1-1: string descriptor 0 read error: -71 [ 117.298736][ T5711] uvcvideo 1-1:1.0: Found UVC 0.00 device (046d:0825) [ 117.298818][ T5711] uvcvideo 1-1:1.0: No streaming interface found for terminal 32770. [ 117.313163][ T5711] usb 1-1: USB disconnect, device number 16 [ 117.382871][ T6526] CacheFiles: Failed to register: -95 [ 117.388516][ T5752] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 117.407258][ T5752] usb 2-1: device descriptor read/8, error -71 [ 117.516611][ T5752] usb usb2-port1: unable to enumerate USB device [ 117.615265][ T6534] bond0: entered promiscuous mode [ 117.615287][ T6534] bond_slave_0: entered promiscuous mode [ 117.615429][ T6534] bond_slave_1: entered promiscuous mode [ 117.686528][ T1222] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 117.827092][ T1222] usb 3-1: device descriptor read/64, error -71 [ 118.076366][ T1222] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 118.206389][ T1222] usb 3-1: device descriptor read/64, error -71 [ 118.318068][ T1222] usb usb3-port1: attempt power cycle [ 118.611352][ T6551] CacheFiles: Failed to register: -95 [ 118.656441][ T1222] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 118.677139][ T1222] usb 3-1: device descriptor read/8, error -71 [ 118.916650][ T1222] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 118.937326][ T1222] usb 3-1: device descriptor read/8, error -71 [ 119.046751][ T1222] usb usb3-port1: unable to enumerate USB device [ 119.077166][ T4924] Bluetooth: hci3: command 0x0406 tx timeout [ 119.077278][ T5761] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 119.077293][ T5761] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 119.856399][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 120.007066][ T9] usb 3-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 120.007912][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 120.007928][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 120.067807][ T6592] tmpfs: Unknown parameter 'mpKkE&M' [ 120.144353][ T9] usb 3-1: string descriptor 0 read error: -71 [ 120.144481][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.162185][ T9] usb 3-1: can't set config #1, error -71 [ 120.165611][ T9] usb 3-1: USB disconnect, device number 13 [ 120.326794][ T6598] kAFS: bad VL server IP address [ 120.586417][ T5752] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 120.746351][ T5752] usb 2-1: Using ep0 maxpacket: 8 [ 120.747518][ T5752] usb 2-1: New USB device found: idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 120.748695][ T5752] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.748718][ T5752] usb 2-1: config 0 has no interfaces? [ 120.751370][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.751393][ T5752] usb 2-1: Product: syz [ 120.751408][ T5752] usb 2-1: Manufacturer: syz [ 120.751421][ T5752] usb 2-1: SerialNumber: syz [ 120.755545][ T5752] usb 2-1: config 0 descriptor?? [ 121.282261][ T6621] FAULT_INJECTION: forcing a failure. [ 121.282261][ T6621] name failslab, interval 1, probability 0, space 10, times 0 [ 121.282295][ T6621] CPU: 1 UID: 0 PID: 6621 Comm: syz.0.240 Not tainted syzkaller #0 PREEMPT(full) [ 121.282335][ T6621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.282341][ T6621] Call Trace: [ 121.282346][ T6621] [ 121.282351][ T6621] dump_stack_lvl+0xe8/0x150 [ 121.282371][ T6621] should_fail_ex+0x3eb/0x540 [ 121.282385][ T6621] should_failslab+0xa8/0x100 [ 121.282400][ T6621] ? do_getname+0x2e/0x250 [ 121.282418][ T6621] kmem_cache_alloc_noprof+0x9c/0x600 [ 121.282430][ T6621] ? do_getname+0x2e/0x250 [ 121.282449][ T6621] do_getname+0x2e/0x250 [ 121.282464][ T6621] ? user_path_at+0x1e/0x160 [ 121.282477][ T6621] user_path_at+0x2a/0x160 [ 121.282490][ T6621] __se_sys_mount+0x2dc/0x420 [ 121.282505][ T6621] ? __pfx___se_sys_mount+0x10/0x10 [ 121.282519][ T6621] ? __x64_sys_mount+0x20/0xc0 [ 121.282531][ T6621] do_syscall_64+0x166/0x520 [ 121.282543][ T6621] ? trace_irq_disable+0x3b/0x140 [ 121.282556][ T6621] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.282568][ T6621] ? clear_bhb_loop+0x70/0xc0 [ 121.282581][ T6621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.282592][ T6621] RIP: 0033:0x7f84cff9e159 [ 121.282603][ T6621] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.282612][ T6621] RSP: 002b:00007f84d0dd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 121.282624][ T6621] RAX: ffffffffffffffda RBX: 00007f84d0225fa0 RCX: 00007f84cff9e159 [ 121.282632][ T6621] RDX: 0000200000000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 121.282639][ T6621] RBP: 00007f84d003506b R08: 0000000000000000 R09: 0000000000000000 [ 121.282645][ T6621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.282651][ T6621] R13: 00007f84d0226038 R14: 00007f84d0225fa0 R15: 00007ffdc1915978 [ 121.282667][ T6621] [ 121.283740][ T6621] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(12339.8192.232), cmd(3) [ 121.360772][ T9] usb 2-1: USB disconnect, device number 13 [ 121.388229][ T5682] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 121.536360][ T5682] usb 4-1: Using ep0 maxpacket: 32 [ 121.536878][ T5682] usb 4-1: New USB device found: idVendor=03f0, idProduct=6c17, bcdDevice=0.40 [ 121.537882][ T5682] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 121.537896][ T5682] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 121.537907][ T5682] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.537916][ T5682] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 121.537942][ T5682] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 121.537962][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.540263][ T5682] usb 4-1: config 0 descriptor?? [ 121.556366][ T5711] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 121.686454][ T5711] usb 1-1: device descriptor read/64, error -71 [ 121.745179][ T6618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.745561][ T6618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.760626][ T5690] kernel read not supported for file /swaps (pid: 5690 comm: kworker/1:4) [ 121.839139][ T5690] usb 4-1: USB disconnect, device number 11 [ 121.926388][ T5711] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 122.056398][ T5711] usb 1-1: device descriptor read/64, error -71 [ 122.176900][ T5711] usb usb1-port1: attempt power cycle [ 122.266423][ T5690] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 122.426371][ T5690] usb 2-1: Using ep0 maxpacket: 16 [ 122.426903][ T5690] usb 2-1: New USB device found: idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 122.427841][ T5690] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 122.429969][ T5690] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.429991][ T5690] usb 2-1: Product: syz [ 122.430005][ T5690] usb 2-1: Manufacturer: syz [ 122.430020][ T5690] usb 2-1: SerialNumber: syz [ 122.433945][ T5690] r8152-cfgselector 2-1: Unknown version 0x0000 [ 122.433966][ T5690] r8152-cfgselector 2-1: config 0 descriptor?? [ 122.526385][ T5711] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 122.548669][ T5711] usb 1-1: device descriptor read/8, error -71 [ 122.796373][ T5711] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 122.827154][ T5711] usb 1-1: device descriptor read/8, error -71 [ 122.868162][ T5682] r8152-cfgselector 2-1: USB disconnect, device number 14 [ 122.936688][ T5711] usb usb1-port1: unable to enumerate USB device [ 123.656441][ T5752] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 123.806365][ T5752] usb 2-1: Using ep0 maxpacket: 32 [ 123.807063][ T5752] usb 2-1: New USB device found: idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 123.809784][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.809807][ T5752] usb 2-1: Product: syz [ 123.809821][ T5752] usb 2-1: Manufacturer: syz [ 123.809835][ T5752] usb 2-1: SerialNumber: syz [ 123.811590][ T5752] usb 2-1: config 0 descriptor?? [ 123.814787][ T5752] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 124.636369][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 124.786382][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 124.792184][ T9] usb 1-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 124.793166][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.793194][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.793214][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 124.793253][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.795279][ T9] usb 1-1: config 0 descriptor?? [ 125.048479][ T6661] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x48280 [ 125.048507][ T6661] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 125.048536][ T6661] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 125.048554][ T6661] page_type: f5(slab) [ 125.048566][ T6661] raw: 00fff00000000040 ffff88813ff23140 dead000000000100 dead000000000122 [ 125.048576][ T6661] raw: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 125.048587][ T6661] head: 00fff00000000040 ffff88813ff23140 dead000000000100 dead000000000122 [ 125.048597][ T6661] head: 0000000000000000 0000000000040004 00000000f5000000 0000000000000000 [ 125.048607][ T6661] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 125.048616][ T6661] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 125.048623][ T6661] page dumped because: unmovable page [ 125.048632][ T6661] page_owner tracks the page as allocated [ 125.048636][ T6661] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6649, tgid 6648 (syz.0.250), ts 124637011949 [ 125.048669][ T6661] post_alloc_hook+0x1f9/0x250 [ 125.048683][ T6661] get_page_from_freelist+0x220f/0x2280 [ 125.048695][ T6661] __alloc_frozen_pages_noprof+0x1fc/0x400 [ 125.048708][ T6661] allocate_slab+0x7d/0x5e0 [ 125.048723][ T6661] refill_objects+0x2d5/0x350 [ 125.048737][ T6661] __pcs_replace_empty_main+0x2c8/0x6c0 [ 125.048750][ T6661] __kmalloc_noprof+0x476/0x710 [ 125.048761][ T6661] tomoyo_realpath_from_path+0xef/0x640 [ 125.048773][ T6661] tomoyo_path_number_perm+0x246/0x5f0 [ 125.048787][ T6661] security_file_ioctl+0xc3/0x2a0 [ 125.048815][ T6661] __se_sys_ioctl+0x47/0x170 [ 125.048829][ T6661] do_syscall_64+0x166/0x520 [ 125.048841][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.048852][ T6661] page last free pid 6308 tgid 6308 ts 110663412806 stack trace: [ 125.048859][ T6661] __free_frozen_pages+0xc97/0xd90 [ 125.048869][ T6661] packet_set_ring+0x19f7/0x2e60 [ 125.048884][ T6661] packet_release+0x85d/0xd00 [ 125.048897][ T6661] __sock_release+0xa0/0x1f0 [ 125.048909][ T6661] sock_close+0x1c/0x30 [ 125.048924][ T6661] __fput+0x413/0xa50 [ 125.048932][ T6661] fput_close_sync+0x11f/0x240 [ 125.048957][ T6661] filp_close_sync+0x6e/0xa0 [ 125.048967][ T6661] __se_sys_close_range+0xa77/0xef0 [ 125.048985][ T6661] do_syscall_64+0x166/0x520 [ 125.049006][ T6661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.223883][ T9] hid_parser_main: 27 callbacks suppressed [ 125.223905][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 125.223933][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 125.223957][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 125.223983][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 125.224008][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 125.224033][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 125.224058][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 125.224156][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 125.224181][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 125.224207][ T9] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0 [ 125.240923][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0007/input/input15 [ 125.312282][ T9] microsoft 0003:045E:07DA.0007: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 125.451322][ T990] wacom 0003:056A:003F.0008: hidraw1: USB HID v0.00 Gamepad [syz0] on syz0 [ 125.571861][ T9] usb 1-1: USB disconnect, device number 21 [ 126.033586][ T33] audit: type=1807 audit(1790643459.087:3): action=measure func=FILE_CHECK res=1 [ 126.034276][ T6668] ima: policy update completed [ 126.034421][ T33] audit: type=1802 audit(1790643459.087:4): pid=6668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=completed comm="syz.2.257" res=1 errno=0 [ 126.069929][ T5752] gspca_ov534_9: sccb_write failed [ 126.144737][ T33] audit: type=1800 audit(1790643459.197:5): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 126.161914][ T33] audit: type=1800 audit(1790643459.207:6): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 126.214775][ T33] audit: type=1800 audit(1790643459.267:7): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=4844 res=0 errno=0 [ 126.292344][ T6674] CacheFiles: No cache directory specified [ 126.471051][ T5752] gspca_ov534_9: reg_w failed -71 [ 126.471944][ T33] audit: type=1800 audit(1790643459.527:8): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31305 res=0 errno=0 [ 126.475649][ T33] audit: type=1800 audit(1790643459.527:9): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=31328 res=0 errno=0 [ 126.706359][ T5752] gspca_ov534_9: Unknown sensor 0000 [ 126.706431][ T5752] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 126.708203][ T5752] usb 2-1: USB disconnect, device number 15 [ 126.712753][ T33] audit: type=1800 audit(1790643459.767:10): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="product" dev="sysfs" ino=116338 res=0 errno=0 [ 126.714218][ T33] audit: type=1800 audit(1790643459.767:11): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="serial" dev="sysfs" ino=116339 res=0 errno=0 [ 126.843736][ T33] audit: type=1800 audit(1790643459.897:12): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 127.216411][ T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 127.256383][ T5682] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 127.367427][ T9] usb 1-1: New USB device found: idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 127.370272][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.370295][ T9] usb 1-1: Product: syz [ 127.370309][ T9] usb 1-1: Manufacturer: syz [ 127.370323][ T9] usb 1-1: SerialNumber: syz [ 127.372152][ T9] usb 1-1: config 0 descriptor?? [ 127.375835][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 127.436068][ T6699] CacheFiles: No cache directory specified [ 127.746518][ T5698] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 127.796101][ T5761] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 127.897925][ T5698] usb 3-1: New USB device found: idVendor=0cf3, idProduct=9271, bcdDevice=1.08 [ 127.905670][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.905694][ T5698] usb 3-1: Product: syz [ 127.905707][ T5698] usb 3-1: Manufacturer: syz [ 127.905745][ T5698] usb 3-1: SerialNumber: syz [ 128.078194][ T9] gspca_sunplus: reg_w_riv err -110 [ 128.078300][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 128.152344][ T5698] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 128.189614][ T990] usb 1-1: USB disconnect, device number 22 [ 128.376216][ T6703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.377428][ T6703] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.403882][ T6711] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 128.403895][ T6711] netlink: 224 bytes leftover after parsing attributes in process `syz.1.273'. [ 128.421787][ T6711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 128.421804][ T6711] netlink: 2 bytes leftover after parsing attributes in process `syz.1.273'. [ 129.156611][ T5682] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 129.236511][ T5698] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 129.238266][ T5698] ath9k_htc: Failed to initialize the device [ 129.272486][ T5698] usb 3-1: ath9k_htc: USB layer deinitialized [ 129.306928][ T5682] usb 1-1: New USB device found: idVendor=0b48, idProduct=1005, bcdDevice=1.00 [ 129.307980][ T5682] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.309440][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 129.309463][ T5682] usb 1-1: Product: syz [ 129.309473][ T5682] usb 1-1: Manufacturer: syz [ 129.359357][ T5682] usb 1-1: selecting invalid altsetting 1 [ 129.360563][ T5682] dvb_ttusb_budget: ttusb_init_controller: error [ 129.360665][ T5682] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 129.478830][ T5682] DVB: Unable to find symbol cx22700_attach() [ 129.518801][ T6720] dvb_ttusb_budget: failed urb submission (0: err = -2)! [ 129.542657][ T6728] CacheFiles: No cache directory specified [ 129.568961][ T5682] DVB: Unable to find symbol tda10046_attach() [ 129.568970][ T5682] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 129.577079][ T5682] usb 1-1: USB disconnect, device number 23 [ 129.715719][ T6732] netlink: 52 bytes leftover after parsing attributes in process `syz.3.281'. [ 129.874475][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'. [ 130.106878][ T6747] CacheFiles: No cache directory specified [ 130.296403][ T5682] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 130.373974][ T6756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.292'. [ 130.378054][ T6756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.292'. [ 130.378118][ T6756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.292'. [ 130.401927][ T6756] FAT-fs (mtdblock0): bogus logical sector size 65535 [ 130.401954][ T6756] FAT-fs (mtdblock0): Can't find a valid FAT filesystem [ 130.448066][ T5682] usb 2-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.449101][ T5682] usb 2-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 130.449130][ T5682] usb 2-1: config 0 interface 0 altsetting 255 bulk endpoint 0x8F has invalid maxpacket 61 [ 130.449187][ T5682] usb 2-1: config 0 interface 0 has no altsetting 0 [ 130.451249][ T5682] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.451263][ T5682] usb 2-1: Product: syz [ 130.451270][ T5682] usb 2-1: Manufacturer: syz [ 130.451278][ T5682] usb 2-1: SerialNumber: syz [ 130.454538][ T5682] usb 2-1: config 0 descriptor?? [ 130.455394][ T6745] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 130.463823][ T5682] usb 2-1: selecting invalid altsetting 0 [ 130.577688][ T990] usb 3-1: USB disconnect, device number 14 [ 130.676233][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.685548][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.685904][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.686263][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.711410][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.711772][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.713727][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.714144][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.714479][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.714815][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.715182][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.719960][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.720302][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.720664][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.720992][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.727628][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.727982][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.728312][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.728676][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.739935][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.740283][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.740650][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.740985][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.755592][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.755952][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.763356][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.763710][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.771062][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.771405][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.771773][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.772104][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.780741][ T6745] usb 2-1: cannot submit urb 0, error -2: endpoint not enabled [ 130.814740][ T5682] usb 2-1: USB disconnect, device number 17 [ 130.939216][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 131.083495][ T33] kauditd_printk_skb: 91 callbacks suppressed [ 131.083512][ T33] audit: type=1800 audit(1790643464.137:104): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 131.087641][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 131.088413][ T9] usb 4-1: New USB device found: idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.090269][ T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 131.090318][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.090338][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.090361][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.090383][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.090418][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.107454][ T33] audit: type=1800 audit(1790643464.167:105): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=117664 res=0 errno=0 [ 131.111722][ T33] audit: type=1800 audit(1790643464.167:106): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=117693 res=0 errno=0 [ 131.112823][ T33] audit: type=1800 audit(1790643464.167:107): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=117671 res=0 errno=0 [ 131.113976][ T33] audit: type=1800 audit(1790643464.167:108): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=117672 res=0 errno=0 [ 131.125585][ T33] audit: type=1800 audit(1790643464.177:109): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=117673 res=0 errno=0 [ 131.132664][ T33] audit: type=1800 audit(1790643464.187:110): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=117713 res=0 errno=0 [ 131.178644][ T6772] CacheFiles: No cache directory specified [ 131.296056][ T33] audit: type=1800 audit(1790643464.347:111): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 131.306923][ T9] usb 4-1: usb_control_msg returned -32 [ 131.306969][ T9] usbtmc 4-1:16.0: can't read capabilities [ 131.338432][ T33] audit: type=1800 audit(1790643464.397:112): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=117730 res=0 errno=0 [ 131.398466][ T33] audit: type=1800 audit(1790643464.457:113): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 131.521765][ T6778] netlink: 'syz.1.300': attribute type 12 has an invalid length. [ 131.772311][ T6783] ima: policy update failed [ 131.853964][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz.1.303'. [ 131.922490][ T6797] capability: warning: `syz.1.305' uses deprecated v2 capabilities in a way that may be insecure [ 131.958127][ T6800] ======================================================= [ 131.958127][ T6800] WARNING: The mand mount option has been deprecated and [ 131.958127][ T6800] and is ignored by this kernel. Remove the mand [ 131.958127][ T6800] option from the mount to silence this warning. [ 131.958127][ T6800] ======================================================= [ 132.080443][ T6803] CacheFiles: No cache directory specified [ 132.093172][ T5752] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 132.246424][ T5752] usb 3-1: Invalid ep0 maxpacket: 64 [ 132.376370][ T5752] usb 3-1: new low-speed USB device number 16 using dummy_hcd [ 132.526443][ T5752] usb 3-1: Invalid ep0 maxpacket: 64 [ 132.527739][ T5752] usb usb3-port1: attempt power cycle [ 132.876511][ T5752] usb 3-1: new low-speed USB device number 17 using dummy_hcd [ 132.907585][ T5752] usb 3-1: Invalid ep0 maxpacket: 64 [ 132.918294][ T5682] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 133.002090][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.002610][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.036578][ T5752] usb 3-1: new low-speed USB device number 18 using dummy_hcd [ 133.056980][ T5752] usb 3-1: Invalid ep0 maxpacket: 64 [ 133.057403][ T5752] usb usb3-port1: unable to enumerate USB device [ 133.087245][ T5682] usb 1-1: New USB device found: idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 133.088590][ T5682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.091843][ T5682] usb 1-1: config 0 descriptor?? [ 133.097622][ T5682] cp210x 1-1:0.0: cp210x converter detected [ 133.296844][ T5682] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 133.296910][ T5682] cp210x 1-1:0.0: querying part number failed [ 133.300578][ T5682] usb 1-1: cp210x converter now attached to ttyUSB0 [ 133.469086][ T6823] FAULT_INJECTION: forcing a failure. [ 133.469086][ T6823] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 133.469117][ T6823] CPU: 0 UID: 0 PID: 6823 Comm: syz.1.312 Not tainted syzkaller #0 PREEMPT(full) [ 133.469140][ T6823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 133.469153][ T6823] Call Trace: [ 133.469164][ T6823] [ 133.469172][ T6823] dump_stack_lvl+0xe8/0x150 [ 133.469203][ T6823] should_fail_ex+0x3eb/0x540 [ 133.469230][ T6823] prepare_alloc_pages+0x21e/0x5f0 [ 133.469262][ T6823] __alloc_frozen_pages_noprof+0x17a/0x400 [ 133.469291][ T6823] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 133.469323][ T6823] ? policy_nodemask+0x2cc/0x8e0 [ 133.469352][ T6823] ? security_file_alloc+0x34/0x310 [ 133.469382][ T6823] alloc_pages_mpol+0x21e/0x390 [ 133.469416][ T6823] folio_alloc_mpol_noprof+0x39/0x160 [ 133.469446][ T6823] vma_alloc_folio_noprof+0xe1/0x1e0 [ 133.469478][ T6823] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 133.469511][ T6823] ? vma_has_anon_rmap+0xc9/0x270 [ 133.469541][ T6823] do_wp_page+0x1166/0x4b60 [ 133.469585][ T6823] ? __pfx_do_wp_page+0x10/0x10 [ 133.469611][ T6823] ? do_raw_spin_lock+0x12b/0x2f0 [ 133.469643][ T6823] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 133.469683][ T6823] handle_mm_fault+0x15d7/0x3750 [ 133.469722][ T6823] ? handle_mm_fault+0xf1/0x3750 [ 133.469761][ T6823] ? __pfx_handle_mm_fault+0x10/0x10 [ 133.469795][ T6823] ? lock_vma_under_rcu+0x45a/0x500 [ 133.469849][ T6823] do_user_addr_fault+0xb35/0x1480 [ 133.469891][ T6823] ? trace_page_fault_user+0x84/0x1e0 [ 133.469924][ T6823] exc_page_fault+0x6a/0xc0 [ 133.469947][ T6823] asm_exc_page_fault+0x26/0x30 [ 133.469967][ T6823] RIP: 0033:0x7f9bcdc54ee1 [ 133.469987][ T6823] Code: 05 0f 94 c3 31 d2 e8 2e ab 14 00 85 c0 75 7a 0f b6 c3 8b 4c 24 18 8b 6c 24 1c be 01 00 00 00 48 c1 e0 02 48 8d 15 c7 e6 ef 00 0f c1 34 02 83 fe 08 7f 75 8b 05 97 07 f0 00 0f b6 db 45 89 e1 [ 133.470004][ T6823] RSP: 002b:00007f9bced43f70 EFLAGS: 00010202 [ 133.470024][ T6823] RAX: 0000000000000004 RBX: 00007f9bce025f01 RCX: 0000000000000005 [ 133.470037][ T6823] RDX: 00007f9bceb535a8 RSI: 0000000000000001 RDI: 0000000000000001 [ 133.470050][ T6823] RBP: 0000000000000006 R08: 0000000000000000 R09: 0000000000000000 [ 133.470062][ T6823] R10: 00007f9bced43f88 R11: 0000000000000246 R12: 0000000000000005 [ 133.470075][ T6823] R13: 00007f9bce026038 R14: 00007f9bce025fa0 R15: 00007fffd763a0f8 [ 133.470107][ T6823] [ 133.470364][ T6823] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 133.476073][ T6823] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 133.476096][ T6823] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 133.481942][ T6823] vhci_hcd vhci_hcd.0: Device attached [ 133.486424][ T6824] vhci_hcd: connection closed [ 133.490598][ T58] vhci_hcd vhci_hcd.1: stop threads [ 133.491943][ T58] vhci_hcd vhci_hcd.1: release socket [ 133.495324][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 133.505506][ T6818] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.510660][ T6818] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.513707][ T5698] usb 1-1: USB disconnect, device number 24 [ 133.534468][ T5698] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 133.535069][ T5698] cp210x 1-1:0.0: device disconnected [ 134.051109][ T6827] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 134.174986][ T6833] CacheFiles: Empty directory specified [ 134.175278][ T6833] CacheFiles: No cache directory specified [ 134.515224][ T6844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.939887][ T6851] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 135.040162][ T6855] CacheFiles: Empty directory specified [ 135.040449][ T6855] CacheFiles: No cache directory specified [ 135.130925][ T6859] jffs2: notice: (6859) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.754478][ T6869] netlink: 'syz.0.330': attribute type 1 has an invalid length. [ 135.851006][ T6874] jffs2: notice: (6874) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.941235][ T6879] CacheFiles: Empty directory specified [ 135.941987][ T6879] CacheFiles: No cache directory specified [ 136.101736][ T33] kauditd_printk_skb: 42 callbacks suppressed [ 136.101754][ T33] audit: type=1800 audit(1790643469.157:156): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.336" name="match_busid" dev="sysfs" ino=41396 res=0 errno=0 [ 136.153139][ T33] audit: type=1800 audit(1790643469.207:157): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 136.167394][ T5682] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 136.214979][ T33] audit: type=1800 audit(1790643469.267:158): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 136.316363][ T5682] usb 3-1: Using ep0 maxpacket: 8 [ 136.317079][ T5682] usb 3-1: New USB device found: idVendor=0421, idProduct=0335, bcdDevice=5f.0e [ 136.317104][ T5682] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 136.318023][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.318907][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.319780][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.320665][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.321543][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.322412][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.323291][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.324256][ T5682] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.324302][ T5682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.325932][ T5682] usb 3-1: config 0 descriptor?? [ 136.332488][ T33] audit: type=1800 audit(1790643469.387:159): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=117941 res=0 errno=0 [ 136.334900][ T5682] rndis_host 3-1:0.0: rndis: master #0/ffff88807a65d000 slave #1/0000000000000000 [ 136.335845][ T5682] cdc_acm 3-1:0.0: Zero length descriptor references [ 136.335871][ T5682] cdc_acm 3-1:0.0: probe with driver cdc_acm failed with error -22 [ 136.336496][ T33] audit: type=1800 audit(1790643469.397:160): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=117970 res=0 errno=0 [ 136.337970][ T33] audit: type=1800 audit(1790643469.397:161): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=117948 res=0 errno=0 [ 136.341199][ T33] audit: type=1800 audit(1790643469.397:162): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=117949 res=0 errno=0 [ 136.344778][ T33] audit: type=1800 audit(1790643469.397:163): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="bcdDevice" dev="sysfs" ino=117950 res=0 errno=0 [ 136.351481][ T33] audit: type=1800 audit(1790643469.407:164): pid=5613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=117990 res=0 errno=0 [ 136.428311][ T33] audit: type=1800 audit(1790643469.487:165): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 136.562722][ T5711] usb 3-1: USB disconnect, device number 19 [ 136.617323][ T6762] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 136.635448][ T5682] usb 4-1: USB disconnect, device number 12 [ 136.681894][ T6894] warning: `syz.3.340' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 136.812448][ T6898] loop4: detected capacity change from 0 to 2640 [ 136.813899][ T6898] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.813936][ T6898] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.813960][ T6898] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.813984][ T6898] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.814009][ T6898] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.814057][ T6898] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.814095][ T6898] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.814119][ T6898] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.814132][ T6898] ldm_validate_partition_table(): Disk read failed. [ 136.814155][ T6898] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.814180][ T6898] Buffer I/O error on dev loop4, logical block 0, async page read [ 136.814219][ T6898] Dev loop4: unable to read RDB block 0 [ 136.814429][ T6898] loop4: unable to read partition table [ 136.814613][ T6898] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 136.818800][ T6898] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 136.913007][ T6900] CacheFiles: Empty directory specified [ 136.913292][ T6900] CacheFiles: No cache directory specified [ 137.171070][ T6917] netlink: 12 bytes leftover after parsing attributes in process `syz.0.346'. [ 137.412393][ T990] hid_parser_main: 6 callbacks suppressed [ 137.412413][ T990] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 137.427363][ T990] hid-generic 0000:0000:0000.000A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 137.511491][ T6926] fido_id[6926]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 137.588563][ T6930] CacheFiles: Empty directory specified [ 137.588827][ T6930] CacheFiles: No cache directory specified [ 138.288940][ T6953] CacheFiles: Empty directory specified [ 138.289216][ T6953] CacheFiles: No cache directory specified [ 138.421974][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 138.566980][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 138.567782][ T9] usb 1-1: New USB device found: idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 138.568922][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.568967][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 138.568992][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 138.569016][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 138.569043][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 138.569068][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.571647][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.571670][ T9] usb 1-1: Product: syz [ 138.571684][ T9] usb 1-1: Manufacturer: syz [ 138.571698][ T9] usb 1-1: SerialNumber: syz [ 138.605001][ T6963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.605384][ T6963] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.646787][ T9] usb 1-1: config 0 descriptor?? [ 138.695824][ T6949] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 138.856577][ T5752] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 138.963932][ T6966] process 'syz.1.367' launched './file0' with NULL argv: empty string added [ 138.964455][ T6966] Invalid argument reading file caps for ./file0 [ 139.016910][ T5752] usb 3-1: Using ep0 maxpacket: 8 [ 139.022095][ T5752] usb 3-1: unable to get BOS descriptor or descriptor too short [ 139.022142][ T5752] usb 3-1: New USB device found: idVendor=04b8, idProduct=0202, bcdDevice=0.40 [ 139.023606][ T5752] usb 3-1: config 21 has an invalid descriptor of length 0, skipping remainder of the config [ 139.028406][ T5752] usb 3-1: string descriptor 0 read error: -22 [ 139.028521][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.265301][ T5752] usb 3-1: USB disconnect, device number 20 [ 140.108875][ T9] rc_core: IR keymap rc-snapstream-firefly not found [ 140.108893][ T9] Registered IR keymap rc-empty [ 140.110858][ T9] rc rc0: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 140.114068][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 140.192186][ T9] input: syz syz mouse as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input20 [ 140.755656][ T6998] netlink: 80 bytes leftover after parsing attributes in process `syz.1.375'. [ 141.065113][ T5752] usb 1-1: USB disconnect, device number 25 [ 141.065250][ C0] ati_remote 1-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19 [ 141.097176][ T5711] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 141.129919][ T33] kauditd_printk_skb: 74 callbacks suppressed [ 141.129936][ T33] audit: type=1800 audit(1790643474.187:240): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 141.246542][ T5711] usb 2-1: Using ep0 maxpacket: 8 [ 141.253534][ T5711] usb 2-1: New USB device found: idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 141.257428][ T5711] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.257451][ T5711] usb 2-1: Product: syz [ 141.257465][ T5711] usb 2-1: Manufacturer: syz [ 141.257480][ T5711] usb 2-1: SerialNumber: syz [ 141.288835][ T5711] usb 2-1: config 0 descriptor?? [ 141.291707][ T33] audit: type=1800 audit(1790643474.347:241): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 141.317846][ T33] audit: type=1800 audit(1790643474.357:242): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=119232 res=0 errno=0 [ 141.329843][ T33] audit: type=1800 audit(1790643474.357:243): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=119264 res=0 errno=0 [ 141.329888][ T33] audit: type=1800 audit(1790643474.377:244): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=119239 res=0 errno=0 [ 141.329924][ T33] audit: type=1800 audit(1790643474.377:245): pid=5802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=119240 res=0 errno=0 [ 141.423795][ T33] audit: type=1800 audit(1790643474.477:246): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 141.527681][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.0.380'. [ 141.572785][ T33] audit: type=1800 audit(1790643474.627:247): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 141.662941][ T33] audit: type=1800 audit(1790643474.717:248): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 141.745562][ T33] audit: type=1800 audit(1790643474.797:249): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 141.794319][ T7029] comedi comedi2: multiq3: I/O base address not correctly aligned [ 141.851714][ T7031] CIFS: Attempting to mount //127.0.0.1/share [ 142.183990][ T5711] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 142.186101][ T5711] usb 2-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 142.186117][ T5711] usb 2-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 142.296374][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 142.426396][ T9] usb 4-1: device descriptor read/64, error -71 [ 142.570116][ T7046] FAULT_INJECTION: forcing a failure. [ 142.570116][ T7046] name failslab, interval 1, probability 0, space 10, times 0 [ 142.570138][ T7046] CPU: 0 UID: 0 PID: 7046 Comm: syz.0.394 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.570153][ T7046] Tainted: [L]=SOFTLOCKUP [ 142.570157][ T7046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 142.570164][ T7046] Call Trace: [ 142.570168][ T7046] [ 142.570173][ T7046] dump_stack_lvl+0xe8/0x150 [ 142.570192][ T7046] should_fail_ex+0x3eb/0x540 [ 142.570210][ T7046] should_failslab+0xa8/0x100 [ 142.570226][ T7046] __kmalloc_noprof+0xf9/0x710 [ 142.570238][ T7046] ? sock_kmalloc+0xd6/0x160 [ 142.570250][ T7046] ? sock_kmalloc+0xd6/0x160 [ 142.570265][ T7046] sock_kmalloc+0xd6/0x160 [ 142.570277][ T7046] ? __pfx_skcipher_accept_parent+0x10/0x10 [ 142.570293][ T7046] skcipher_accept_parent_nokey+0x2b/0x2b0 [ 142.570308][ T7046] ? __pfx_skcipher_accept_parent+0x10/0x10 [ 142.570322][ T7046] af_alg_accept+0x175/0x520 [ 142.570337][ T7046] do_accept+0x501/0x730 [ 142.570355][ T7046] ? __pfx_do_accept+0x10/0x10 [ 142.570381][ T7046] __sys_accept4+0x135/0x230 [ 142.570397][ T7046] ? __pfx___sys_accept4+0x10/0x10 [ 142.570418][ T7046] __x64_sys_accept+0x7d/0x90 [ 142.570434][ T7046] do_syscall_64+0x166/0x520 [ 142.570446][ T7046] ? trace_irq_disable+0x3b/0x140 [ 142.570459][ T7046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.570470][ T7046] ? clear_bhb_loop+0x70/0xc0 [ 142.570483][ T7046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.570493][ T7046] RIP: 0033:0x7f84cff9e159 [ 142.570504][ T7046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.570514][ T7046] RSP: 002b:00007f84d0dd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 142.570526][ T7046] RAX: ffffffffffffffda RBX: 00007f84d0225fa0 RCX: 00007f84cff9e159 [ 142.570534][ T7046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 142.570544][ T7046] RBP: 00007f84d003506b R08: 0000000000000000 R09: 0000000000000000 [ 142.570556][ T7046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.570567][ T7046] R13: 00007f84d0226038 R14: 00007f84d0225fa0 R15: 00007ffdc1915978 [ 142.570597][ T7046] [ 142.573275][ T7046] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 142.573295][ T7046] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 142.575400][ T7046] vhci_hcd vhci_hcd.0: Device attached [ 142.576059][ T7047] vhci_hcd: connection closed [ 142.586546][ T86] vhci_hcd vhci_hcd.0: stop threads [ 142.586568][ T86] vhci_hcd vhci_hcd.0: release socket [ 142.586586][ T86] vhci_hcd vhci_hcd.0: disconnect device [ 142.684771][ T7031] CIFS: VFS: cifs_mount failed w/return code = -112 [ 142.708811][ T9] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 142.886370][ T9] usb 4-1: device descriptor read/64, error -71 [ 142.905682][ T7053] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.905936][ T7053] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.996589][ T9] usb usb4-port1: attempt power cycle [ 143.149052][ T5752] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 143.336364][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 143.356973][ T9] usb 4-1: device descriptor read/8, error -71 [ 143.596619][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 143.617357][ T9] usb 4-1: device descriptor read/8, error -71 [ 143.726776][ T9] usb usb4-port1: unable to enumerate USB device [ 144.078487][ T7059] comedi comedi1: 8255: I/O base address not correctly aligned [ 144.080720][ T7059] overlay: ./file0 is not a directory [ 145.412481][ T7090] binder: Unknown parameter 'stas' [ 145.507556][ T5690] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 145.658603][ T5690] usb 4-1: New USB device found: idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 145.662572][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.662597][ T5690] usb 4-1: Product: syz [ 145.662612][ T5690] usb 4-1: Manufacturer: syz [ 145.662626][ T5690] usb 4-1: SerialNumber: syz [ 145.698696][ T5690] usb 4-1: config 0 descriptor?? [ 145.759928][ T7096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.873301][ T7095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.915262][ T7084] netlink: 'syz.3.410': attribute type 21 has an invalid length. [ 145.915308][ T7084] netlink: 128 bytes leftover after parsing attributes in process `syz.3.410'. [ 145.915391][ T7084] netlink: 'syz.3.410': attribute type 4 has an invalid length. [ 145.915404][ T7084] netlink: 'syz.3.410': attribute type 3 has an invalid length. [ 145.915416][ T7084] netlink: 3 bytes leftover after parsing attributes in process `syz.3.410'. [ 145.941853][ T5690] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 145.974495][ T7105] jffs2: notice: (7105) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 146.420301][ T33] kauditd_printk_skb: 33 callbacks suppressed [ 146.420322][ T33] audit: type=1800 audit(1790643479.477:283): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 146.476431][ T5752] usb 3-1: device descriptor read/64, error -71 [ 146.481785][ T33] audit: type=1800 audit(1790643479.537:284): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 146.579337][ T33] audit: type=1800 audit(1790643479.637:285): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 146.653564][ T33] audit: type=1800 audit(1790643479.707:286): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 146.709721][ T7120] netlink: 20 bytes leftover after parsing attributes in process `syz.0.422'. [ 146.746420][ T5752] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 146.754577][ T33] audit: type=1800 audit(1790643479.807:287): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 146.842631][ T33] audit: type=1800 audit(1790643479.897:288): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 146.898140][ T5752] usb 3-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 146.900505][ T5752] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 146.900532][ T5752] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 146.900555][ T5752] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 146.903028][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.903050][ T5752] usb 3-1: Product: syz [ 146.903064][ T5752] usb 3-1: Manufacturer: syz [ 146.903102][ T5752] usb 3-1: SerialNumber: syz [ 146.969219][ T5752] usb 3-1: config 0 descriptor?? [ 146.974305][ T33] audit: type=1800 audit(1790643480.027:289): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=119453 res=0 errno=0 [ 146.978160][ T7111] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 146.986035][ T33] audit: type=1800 audit(1790643480.037:290): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=119485 res=0 errno=0 [ 146.989052][ T33] audit: type=1800 audit(1790643480.047:291): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=119460 res=0 errno=0 [ 146.993156][ T33] audit: type=1800 audit(1790643480.047:292): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=119461 res=0 errno=0 [ 147.070551][ T5752] dm9601 3-1:0.0: probe with driver dm9601 failed with error -22 [ 147.441114][ T5690] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 147.445241][ T5690] usb 4-1: USB disconnect, device number 17 [ 147.472134][ T5613] udevd[5613]: setting mode of /dev/bus/usb/004/017 to 020664 failed: No such file or directory [ 147.472242][ T5613] udevd[5613]: setting owner of /dev/bus/usb/004/017 to uid=0, gid=0 failed: No such file or directory [ 148.426398][ T5682] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 148.588235][ T5682] usb 1-1: unable to get BOS descriptor or descriptor too short [ 148.588286][ T5682] usb 1-1: New USB device found: idVendor=04da, idProduct=390d, bcdDevice=af.1e [ 148.589330][ T5682] usb 1-1: config 228 has an invalid interface number: 99 but max is 0 [ 148.589356][ T5682] usb 1-1: config 228 has no interface number 0 [ 148.589403][ T5682] usb 1-1: config 228 interface 99 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 148.591189][ T5682] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.591203][ T5682] usb 1-1: Product: syz [ 148.591211][ T5682] usb 1-1: Manufacturer: syz [ 148.591218][ T5682] usb 1-1: SerialNumber: syz [ 148.811694][ T5682] ath6kl: Failed to submit usb control message: -71 [ 148.811724][ T5682] ath6kl: unable to send the bmi data to the device: -71 [ 148.811732][ T5682] ath6kl: Unable to send get target info: -71 [ 148.813068][ T5682] ath6kl: Failed to init ath6kl core: -71 [ 148.827214][ T5682] ath6kl_usb 1-1:228.99: probe with driver ath6kl_usb failed with error -71 [ 148.861058][ T5682] usb 1-1: USB disconnect, device number 26 [ 149.133192][ T5752] usb 3-1: USB disconnect, device number 22 [ 149.188472][ T5690] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 149.338206][ T5690] usb 4-1: New USB device found: idVendor=04d8, idProduct=0083, bcdDevice=0.9c [ 149.339329][ T5690] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 149.339350][ T5690] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.342846][ T5690] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.342869][ T5690] usb 4-1: Product: syz [ 149.342884][ T5690] usb 4-1: Manufacturer: syz [ 149.342898][ T5690] usb 4-1: SerialNumber: syz [ 149.400627][ T5690] usb 4-1: config 0 descriptor?? [ 149.405225][ T5690] ims_pcu 4-1:0.0: Missing CDC union descriptor [ 149.405283][ T5690] ims_pcu 4-1:0.0: probe with driver ims_pcu failed with error -22 [ 149.609776][ T7165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.610226][ T7165] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.775765][ T5752] usb 4-1: USB disconnect, device number 18 [ 150.431936][ T7199] FAULT_INJECTION: forcing a failure. [ 150.431936][ T7199] name failslab, interval 1, probability 0, space 10, times 0 [ 150.431969][ T7199] CPU: 1 UID: 0 PID: 7199 Comm: syz.3.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.431996][ T7199] Tainted: [L]=SOFTLOCKUP [ 150.432003][ T7199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 150.432015][ T7199] Call Trace: [ 150.432022][ T7199] [ 150.432027][ T7199] dump_stack_lvl+0xe8/0x150 [ 150.432045][ T7199] should_fail_ex+0x3eb/0x540 [ 150.432059][ T7199] should_failslab+0xa8/0x100 [ 150.432074][ T7199] __kmalloc_noprof+0xf9/0x710 [ 150.432086][ T7199] ? tomoyo_encode+0x2ad/0x570 [ 150.432097][ T7199] ? tomoyo_encode+0x2ad/0x570 [ 150.432111][ T7199] tomoyo_encode+0x2ad/0x570 [ 150.432125][ T7199] tomoyo_realpath_from_path+0x5fa/0x640 [ 150.432141][ T7199] ? tomoyo_path_number_perm+0x219/0x5f0 [ 150.432157][ T7199] tomoyo_path_number_perm+0x246/0x5f0 [ 150.432173][ T7199] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 150.432187][ T7199] ? __lock_acquire+0x747/0x2de0 [ 150.432223][ T7199] ? __fget_files+0x2a/0x420 [ 150.432236][ T7199] ? __fget_files+0x2a/0x420 [ 150.432247][ T7199] ? __fget_files+0x2a/0x420 [ 150.432260][ T7199] security_file_ioctl+0xc3/0x2a0 [ 150.432276][ T7199] __se_sys_ioctl+0x47/0x170 [ 150.432291][ T7199] do_syscall_64+0x166/0x520 [ 150.432310][ T7199] ? trace_irq_disable+0x3b/0x140 [ 150.432322][ T7199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.432333][ T7199] ? clear_bhb_loop+0x70/0xc0 [ 150.432346][ T7199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.432356][ T7199] RIP: 0033:0x7fb0bd79e159 [ 150.432366][ T7199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.432375][ T7199] RSP: 002b:00007fb0be681028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.432388][ T7199] RAX: ffffffffffffffda RBX: 00007fb0bda25fa0 RCX: 00007fb0bd79e159 [ 150.432396][ T7199] RDX: 0000200000000140 RSI: 0000000040047459 RDI: 0000000000000007 [ 150.432403][ T7199] RBP: 00007fb0be681090 R08: 0000000000000000 R09: 0000000000000000 [ 150.432410][ T7199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.432416][ T7199] R13: 00007fb0bda26038 R14: 00007fb0bda25fa0 R15: 00007fffafbccb78 [ 150.432433][ T7199] [ 150.432444][ T7199] ERROR: Out of memory at tomoyo_realpath_from_path. [ 150.477930][ T5690] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 150.693712][ T5690] usb 1-1: Using ep0 maxpacket: 16 [ 150.699429][ T5690] usb 1-1: New USB device found: idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 150.700287][ T5690] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 150.700303][ T5690] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.701880][ T5690] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.701894][ T5690] usb 1-1: Product: syz [ 150.701901][ T5690] usb 1-1: Manufacturer: syz [ 150.701909][ T5690] usb 1-1: SerialNumber: syz [ 150.703710][ T5690] usb 1-1: config 0 descriptor?? [ 150.716444][ T5690] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 150.716477][ T5690] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 150.800079][ T7205] faux_driver vgem: [drm] Unknown color mode 135165; guessing buffer size. [ 150.886595][ T5682] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 151.037712][ T5682] usb 4-1: New USB device found: idVendor=054c, idProduct=0268, bcdDevice=0.00 [ 151.038760][ T5682] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.038791][ T5682] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.038818][ T5682] usb 4-1: config 0 interface 0 has no altsetting 0 [ 151.038850][ T5682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.041029][ T5682] usb 4-1: config 0 descriptor?? [ 151.117927][ T5690] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 151.118103][ T7209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.118640][ T7209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.326015][ T5690] em28xx 1-1:0.0: Config register raw data: 0x00 [ 151.392624][ T7216] LUN: removable file: (no medium) [ 151.395794][ T7216] [ 151.403253][ T7216] ====================================================== [ 151.410267][ T7216] WARNING: possible circular locking dependency detected [ 151.417278][ T7216] syzkaller #0 Tainted: G L [ 151.423318][ T7216] ------------------------------------------------------ [ 151.430308][ T7216] syz.1.460/7216 is trying to acquire lock: [ 151.436200][ T7216] ffff88807c39b690 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7d0/0x1c10 [ 151.446797][ T7216] [ 151.446797][ T7216] but task is already holding lock: [ 151.447914][ T33] kauditd_printk_skb: 73 callbacks suppressed [ 151.447928][ T33] audit: type=1804 audit(1790643484.447:366): pid=7217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.460" name="/newroot/109/file0" dev="tmpfs" ino=611 res=1 errno=0 [ 151.481272][ T7216] ffff888077ef2120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x163/0x400 [ 151.490474][ T7216] [ 151.490474][ T7216] which lock already depends on the new lock. [ 151.490474][ T7216] [ 151.500859][ T7216] [ 151.500859][ T7216] the existing dependency chain (in reverse order) is: [ 151.509863][ T7216] [ 151.509863][ T7216] -> #3 (&common->filesem){++++}-{4:4}: [ 151.517609][ T7216] down_read+0x45/0x320 [ 151.522286][ T7216] fsg_show_file+0x2d/0x140 [ 151.527306][ T7216] configfs_read_iter+0x2b7/0x620 [ 151.532860][ T7216] __kernel_read+0x4ca/0x960 [ 151.537975][ T7216] integrity_kernel_read+0x89/0xd0 [ 151.543616][ T7216] ima_calc_file_hash+0x451/0x890 [ 151.549154][ T7216] ima_collect_measurement+0x51b/0xa00 [ 151.555128][ T7216] process_measurement+0x1272/0x1c10 [ 151.561277][ T7216] ima_file_check+0xdc/0x130 [ 151.566383][ T7216] security_file_post_open+0xb3/0x260 [ 151.572276][ T7216] path_openat+0x14e9/0x1da0 [ 151.577380][ T7216] do_file_open+0x23e/0x4a0 [ 151.582402][ T7216] do_sys_openat2+0x115/0x200 [ 151.587598][ T7216] __x64_sys_openat+0x138/0x170 [ 151.592965][ T7216] do_syscall_64+0x166/0x520 [ 151.598072][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.604489][ T7216] [ 151.604489][ T7216] -> #2 (&p->frag_sem){.+.+}-{4:4}: [ 151.611867][ T7216] down_read+0x45/0x320 [ 151.616542][ T7216] configfs_read_iter+0x1cc/0x620 [ 151.622085][ T7216] __kernel_read+0x4ca/0x960 [ 151.627187][ T7216] integrity_kernel_read+0x89/0xd0 [ 151.632825][ T7216] ima_calc_file_hash+0x451/0x890 [ 151.638362][ T7216] ima_collect_measurement+0x51b/0xa00 [ 151.644336][ T7216] process_measurement+0x1272/0x1c10 [ 151.650135][ T7216] ima_file_check+0xdc/0x130 [ 151.655243][ T7216] security_file_post_open+0xb3/0x260 [ 151.661133][ T7216] path_openat+0x14e9/0x1da0 [ 151.666241][ T7216] do_file_open+0x23e/0x4a0 [ 151.671258][ T7216] do_sys_openat2+0x115/0x200 [ 151.676461][ T7216] __x64_sys_openat+0x138/0x170 [ 151.681837][ T7216] do_syscall_64+0x166/0x520 [ 151.686945][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.693356][ T7216] [ 151.693356][ T7216] -> #1 (&buffer->mutex){+.+.}-{4:4}: [ 151.700909][ T7216] __mutex_lock+0x197/0x15a0 [ 151.706022][ T7216] configfs_read_iter+0x70/0x620 [ 151.711475][ T7216] __kernel_read+0x4ca/0x960 [ 151.716580][ T7216] integrity_kernel_read+0x89/0xd0 [ 151.722217][ T7216] ima_calc_file_hash+0x451/0x890 [ 151.727755][ T7216] ima_collect_measurement+0x51b/0xa00 [ 151.733726][ T7216] process_measurement+0x1272/0x1c10 [ 151.739522][ T7216] ima_file_check+0xdc/0x130 [ 151.744626][ T7216] security_file_post_open+0xb3/0x260 [ 151.750514][ T7216] path_openat+0x14e9/0x1da0 [ 151.755631][ T7216] do_file_open+0x23e/0x4a0 [ 151.760648][ T7216] do_sys_openat2+0x115/0x200 [ 151.765849][ T7216] __x64_sys_openat+0x138/0x170 [ 151.771220][ T7216] do_syscall_64+0x166/0x520 [ 151.776332][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.782739][ T7216] [ 151.782739][ T7216] -> #0 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 151.791342][ T7216] __lock_acquire+0x164c/0x2de0 [ 151.796726][ T7216] lock_acquire+0x115/0x350 [ 151.801759][ T7216] __mutex_lock+0x197/0x15a0 [ 151.806873][ T7216] process_measurement+0x7d0/0x1c10 [ 151.812591][ T7216] ima_file_check+0xdc/0x130 [ 151.817696][ T7216] security_file_post_open+0xb3/0x260 [ 151.823591][ T7216] path_openat+0x14e9/0x1da0 [ 151.828702][ T7216] do_file_open+0x23e/0x4a0 [ 151.833728][ T7216] filp_open+0x16d/0x1d0 [ 151.838488][ T7216] fsg_lun_open+0x6c/0xdf0 [ 151.843415][ T7216] fsg_store_file+0x19e/0x400 [ 151.848603][ T7216] configfs_write_iter+0x337/0x430 [ 151.854237][ T7216] vfs_write+0x612/0xba0 [ 151.859001][ T7216] ksys_write+0x150/0x270 [ 151.863848][ T7216] do_syscall_64+0x166/0x520 [ 151.868950][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.875354][ T7216] [ 151.875354][ T7216] other info that might help us debug this: [ 151.875354][ T7216] [ 151.885571][ T7216] Chain exists of: [ 151.885571][ T7216] &ima_iint_mutex_key[depth] --> &p->frag_sem --> &common->filesem [ 151.885571][ T7216] [ 151.899393][ T7216] Possible unsafe locking scenario: [ 151.899393][ T7216] [ 151.906836][ T7216] CPU0 CPU1 [ 151.912187][ T7216] ---- ---- [ 151.917537][ T7216] lock(&common->filesem); [ 151.922045][ T7216] lock(&p->frag_sem); [ 151.928724][ T7216] lock(&common->filesem); [ 151.935747][ T7216] lock(&ima_iint_mutex_key[depth]); [ 151.941116][ T7216] [ 151.941116][ T7216] *** DEADLOCK *** [ 151.941116][ T7216] [ 151.949252][ T7216] locks held by syz.1.460/7216: 5, last CPU#0: [ 151.955399][ T7216] #0: ffff8880766917b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x118/0x160 [ 151.964458][ T7216] #1: ffff88801d3a8460 (sb_writers#13){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 151.973438][ T7216] #2: ffff8880765cc080 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x7e/0x430 [ 151.983298][ T7216] #3: ffff888026099a70 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x238/0x430 [ 151.993059][ T7216] #4: ffff888077ef2120 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x163/0x400 [ 152.002733][ T7216] [ 152.002733][ T7216] stack backtrace: [ 152.008622][ T7216] CPU: 0 UID: 0 PID: 7216 Comm: syz.1.460 Tainted: G L syzkaller #0 PREEMPT(full) [ 152.019469][ T7216] Tainted: [L]=SOFTLOCKUP [ 152.023785][ T7216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 152.033829][ T7216] Call Trace: [ 152.037109][ T7216] [ 152.040030][ T7216] dump_stack_lvl+0xe8/0x150 [ 152.044621][ T7216] print_circular_bug+0x2e2/0x300 [ 152.049649][ T7216] check_noncircular+0x12f/0x150 [ 152.054591][ T7216] __lock_acquire+0x164c/0x2de0 [ 152.059442][ T7216] ? check_path+0x21/0x40 [ 152.063772][ T7216] ? check_noncircular+0xdb/0x150 [ 152.068797][ T7216] ? add_lock_to_list+0xc7/0x100 [ 152.073737][ T7216] lock_acquire+0x115/0x350 [ 152.078233][ T7216] ? process_measurement+0x7d0/0x1c10 [ 152.083603][ T7216] __mutex_lock+0x197/0x15a0 [ 152.088188][ T7216] ? process_measurement+0x7d0/0x1c10 [ 152.093560][ T7216] ? process_measurement+0x7d0/0x1c10 [ 152.098935][ T7216] ? __pfx___mutex_lock+0x10/0x10 [ 152.103968][ T7216] ? ima_inode_get+0xcb/0x4d0 [ 152.108642][ T7216] process_measurement+0x7d0/0x1c10 [ 152.113837][ T7216] ? kasan_quarantine_put+0xbb/0x1f0 [ 152.119122][ T7216] ? __pfx_process_measurement+0x10/0x10 [ 152.124753][ T7216] ? tomoyo_check_open_permission+0x38e/0x470 [ 152.130823][ T7216] ? apparmor_file_open+0x523/0x6c0 [ 152.136021][ T7216] ima_file_check+0xdc/0x130 [ 152.140602][ T7216] ? file_ra_state_init+0x3d/0xc0 [ 152.145623][ T7216] ? __pfx_ima_file_check+0x10/0x10 [ 152.150816][ T7216] security_file_post_open+0xb3/0x260 [ 152.156188][ T7216] path_openat+0x14e9/0x1da0 [ 152.160778][ T7216] do_file_open+0x23e/0x4a0 [ 152.165278][ T7216] ? __pfx_do_file_open+0x10/0x10 [ 152.170303][ T7216] ? do_getname_kernel+0x54/0x230 [ 152.175325][ T7216] ? do_getname_kernel+0x97/0x230 [ 152.180347][ T7216] ? __asan_memcpy+0x40/0x70 [ 152.184929][ T7216] filp_open+0x16d/0x1d0 [ 152.189175][ T7216] ? __pfx_filp_open+0x10/0x10 [ 152.194064][ T7216] fsg_lun_open+0x6c/0xdf0 [ 152.198487][ T7216] fsg_store_file+0x19e/0x400 [ 152.203172][ T7216] ? __pfx_fsg_lun_opts_file_store+0x10/0x10 [ 152.209166][ T7216] configfs_write_iter+0x337/0x430 [ 152.214298][ T7216] vfs_write+0x612/0xba0 [ 152.218549][ T7216] ? __pfx_vfs_write+0x10/0x10 [ 152.223314][ T7216] ? __fget_files+0x3a2/0x420 [ 152.227994][ T7216] ? __fget_files+0x2a/0x420 [ 152.232581][ T7216] ? fdget+0x1ac/0x250 [ 152.236661][ T7216] ksys_write+0x150/0x270 [ 152.240991][ T7216] ? __pfx_ksys_write+0x10/0x10 [ 152.245844][ T7216] do_syscall_64+0x166/0x520 [ 152.250433][ T7216] ? trace_irq_disable+0x3b/0x140 [ 152.255461][ T7216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.261529][ T7216] ? clear_bhb_loop+0x70/0xc0 [ 152.266203][ T7216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.272091][ T7216] RIP: 0033:0x7f9bcdd9e159 [ 152.276497][ T7216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 152.296096][ T7216] RSP: 002b:00007f9bced44028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 152.304503][ T7216] RAX: ffffffffffffffda RBX: 00007f9bce025fa0 RCX: 00007f9bcdd9e159 [ 152.312475][ T7216] RDX: 0000000000000005 RSI: 00002000000003c0 RDI: 0000000000000005 [ 152.320438][ T7216] RBP: 00007f9bcde3506b R08: 0000000000000000 R09: 0000000000000000 [ 152.328403][ T7216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.336363][ T7216] R13: 00007f9bce026038 R14: 00007f9bce025fa0 R15: 00007fffd763a0f8 [ 152.344335][ T7216] [ 152.353920][ T5682] sony 0003:054C:0268.000B: ignoring exceeding usage max [ 152.355296][ T5682] sony 0003:054C:0268.000B: ignoring exceeding usage max [ 152.373359][ T33] audit: type=1800 audit(1790643485.427:367): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=120037 res=0 errno=0 [ 152.387888][ T33] audit: type=1800 audit(1790643485.437:368): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=120059 res=0 errno=0 [ 152.409126][ T33] audit: type=1800 audit(1790643485.457:369): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15106 res=0 errno=0 [ 152.435622][ T5682] sony 0003:054C:0268.000B: hiddev0,hidraw0: USB HID v80.00 Device [HID 054c:0268] on usb-dummy_hcd.3-1/input0 [ 152.435655][ T5682] sony 0003:054C:0268.000B: failed to claim input [ 152.437828][ T33] audit: type=1800 audit(1790643485.497:370): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=120073 res=0 errno=0 [ 152.509541][ T33] audit: type=1800 audit(1790643485.567:371): pid=7221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="fido_id" name="report_descriptor" dev="sysfs" ino=120039 res=0 errno=0 [ 152.553153][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 152.553379][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.363457][ T5752] usb 1-1: USB disconnect, device number 27 [ 153.364135][ T5752] em28xx 1-1:0.0: Disconnecting em28xx [ 153.365802][ T5752] em28xx: Freeing device [ 153.386173][ T33] audit: type=1800 audit(1790643486.437:372): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=14983 res=0 errno=0 [ 153.648464][ T5752] usb 4-1: USB disconnect, device number 19 [ 153.664019][ T33] audit: type=1800 audit(1790643486.717:373): pid=4975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15352 res=0 errno=0