last executing test programs: 5.658475471s ago: executing program 1 (id=2667): ustat(0x9, &(0x7f0000000000)) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800"], 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x7fff, 0x200) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000540)={0x0, 0x3ff, 0x100c, 0x1}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x21, {[@global=@item_4={0x3, 0x1, 0x4, "824a36e2"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @main=@item_012={0x1, 0x0, 0x9, '~'}, @global=@item_4={0x3, 0x1, 0xb, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_012={0x2, 0x2, 0x1, "5817"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dd2"}]}}, 0x0}, 0x0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) read$FUSE(r2, &(0x7f0000000b00)={0x2020, 0x0, 0x0}, 0x2020) syz_usb_ep_write(r0, 0x81, 0x0, &(0x7f0000000000)) write$FUSE_DIRENT(r2, &(0x7f0000000080)={0x60, 0x8000000000000001, r3, [{0x0, 0x4, 0xa, 0x1ff, '/dev/vcsu\x00'}, {0x1, 0x3, 0xa, 0x8, '/dev/vcsu\x00'}]}, 0x60) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2.590667175s ago: executing program 1 (id=2692): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7fff, 0x440) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f0000000080)={0x3, "625f94f0000000000000009024165d61e196ffc700004b1cd9ae000000000300", 0x1, 0x9, 0x1, 0xb000, 0x200, 0x2}) 2.543487119s ago: executing program 1 (id=2693): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback={0xffffffffffffffe0}, 0x1, 0x2, 0xc, 0x500, 0xe, 0xc80032}) 2.481779086s ago: executing program 1 (id=2694): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./file1\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) lseek(r6, 0x3, 0x1) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 2.354530244s ago: executing program 1 (id=2696): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902120001000000000904"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x64, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x0, 0x20, 0xe, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "cba8ac19"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x42, 0x7}, [@acm={0x4, 0x24, 0x2, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe8, 0xf5, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7f, 0x80, 0x8f}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x40, 0x0, 0x2, 0x10, 0x4}, 0x3f, &(0x7f0000000140)={0x5, 0xf, 0x3f, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xfd, 0x0, 0x9d, 0xff0f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xb7, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x7, 0x2, 0x76c}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x4, 0x78d7}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0x1, 0x0, 0x3, [0x3fcf]}]}, 0x1, [{0x95, &(0x7f0000000180)=@string={0x95, 0x3, "6db8bab5f6741c97e16c8d05775ccecc31d4878524653e7ce1f227019604c7355ab1d331cee3482578b0f78fb9eb61d4805a14bd265a53c39718dcf71688cfa21cfea9c2cb9ccca3eb67653bcad4d30accaf52b904d91b6ce89d1c329e2ab34bc588c24b07d59f4b6b82c81ce601a263c5948c5439f0d0fbb1de70918241e21c96aad063e5055a341a9c9b222329ea06380887"}}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x254, &(0x7f00000005c0)={[{0xc4, 0x4e00, "c476404dc308b15a0cf3e45003ed57ce35d3f6a414d2c720e9c4e6ef6cfc4122a157900cf8f6c8216442475b3bdad4cdf96df030ddab2bce1118b5394b549f696903f9e513b2a61ab71dee6e742c74fb9551025083432e9a7f02bdc2eff4a23f56590eb8677820b58d40ce034386cad3ea07695dcae916b366e67b2d8c44db53ef2799e57295f9a18283aba2b9ff45e57a24e71fe213c939989b0ca02d3a6444e56d6be8bb5fc264d6e7650a7f552b87f0203d83b6e0893269a56923a1ff3dc9df689a83"}, {0x49, 0x4e00, "2fe4c752747e8b8441ae474490eec4baa22159b6ca387b35125df18729dc88b5c5854fc1f5d0095cc9d7079fe5e6496d18c61e58a853d8b03024de36aba43fa9e89d41fcfe2c6176e4"}, {0xf8, 0x4e00, "263003216563b519946e4d2066b6ebf4b21d38241a21803c6ee4bd3857ad4c08c74ac296d72ee36e971b93f1c8db40c65f4edc19d1556fecaa31e72aa018b38eb0b6f1a131df42d1df484da7f2f3241fca1aa5f826d69113b6b4040c9d7963eef6c400082c0e97cb14f424b4ab42bbe328bd13f29432f80eee5e9efe1266b9d42543bdd3a1ec410e96e31aef5a41d351b2cb3437f4c329da5ce13f78d0c41a67366ea83e9c1af8672ad832d07925c608b0cef4fb3f9324e70e6f62f720501af642111396a02a4ecad67f1f89802f6ae489b61134bc7021974f13a2b8bac04aaf3da7677bc3a2a6b251b9480efbd4f1d189d9ff6bf7622392"}, {0x3b, 0x4e00, "88f8de59ff1a2d14ebab7d3eebdc435b25cd9cf918e82c759a77381a91e909e0c2c87064eb86b5fcde292b55adf5b9963b2238c9de09777ff81612"}]}) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) syz_usb_connect$cdc_ncm(0x1, 0x77, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x57, 0x0, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "8896482f"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xb, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0xc0, 0x20}, [@obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x66, 0x7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x4, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x71, 0x3c, 0xa5}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0xff, 0x26, 0x5, 0x8, 0x5}, 0x19, &(0x7f0000000380)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "8521dd80351b23ed2f56486d13606f4d"}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x200a}}, {0x9b, &(0x7f0000000440)=@string={0x9b, 0x3, "013c56e0ba350253f0ccc6facf9a81bfadb67889b29bb5a5c9f9d47e50dc2d63a978129fe01fe60e2caa0bf5aa293641718146f7b57f76f65cd77f3e8a38514c1f3d9f3bece12d02f7533ef27727fa82391984aef50bcc57e2dfa505a9cef54fde3f063d95033e015e27a03b83330b334e6a7417b42e34f04b537a50fe359ac149c1f1063a8b747c285764ff7131bd6eb7ae537cd0aaeb64e4"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc09}}]}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902120001000000000904"], 0x0) (async) syz_usb_connect$cdc_ecm(0x6, 0x64, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x52, 0x1, 0x1, 0x0, 0x20, 0xe, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x2, 0x6, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x0, "cba8ac19"}, {0x5, 0x24, 0x0, 0x1}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x4, 0x42, 0x7}, [@acm={0x4, 0x24, 0x2, 0x4}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x2}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe8, 0xf5, 0x9}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x7f, 0x80, 0x8f}}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x6, 0x5}}}}}]}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x40, 0x0, 0x2, 0x10, 0x4}, 0x3f, &(0x7f0000000140)={0x5, 0xf, 0x3f, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0xfd, 0x0, 0x9d, 0xff0f}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xb7, 0x9, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x7, 0x2, 0x76c}, @ext_cap={0x7, 0x10, 0x2, 0x1a, 0x5, 0x4, 0x78d7}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0xff, 0x1, 0x1, 0x0, 0x3, [0x3fcf]}]}, 0x1, [{0x95, &(0x7f0000000180)=@string={0x95, 0x3, "6db8bab5f6741c97e16c8d05775ccecc31d4878524653e7ce1f227019604c7355ab1d331cee3482578b0f78fb9eb61d4805a14bd265a53c39718dcf71688cfa21cfea9c2cb9ccca3eb67653bcad4d30accaf52b904d91b6ce89d1c329e2ab34bc588c24b07d59f4b6b82c81ce601a263c5948c5439f0d0fbb1de70918241e21c96aad063e5055a341a9c9b222329ea06380887"}}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x254, &(0x7f00000005c0)={[{0xc4, 0x4e00, "c476404dc308b15a0cf3e45003ed57ce35d3f6a414d2c720e9c4e6ef6cfc4122a157900cf8f6c8216442475b3bdad4cdf96df030ddab2bce1118b5394b549f696903f9e513b2a61ab71dee6e742c74fb9551025083432e9a7f02bdc2eff4a23f56590eb8677820b58d40ce034386cad3ea07695dcae916b366e67b2d8c44db53ef2799e57295f9a18283aba2b9ff45e57a24e71fe213c939989b0ca02d3a6444e56d6be8bb5fc264d6e7650a7f552b87f0203d83b6e0893269a56923a1ff3dc9df689a83"}, {0x49, 0x4e00, "2fe4c752747e8b8441ae474490eec4baa22159b6ca387b35125df18729dc88b5c5854fc1f5d0095cc9d7079fe5e6496d18c61e58a853d8b03024de36aba43fa9e89d41fcfe2c6176e4"}, {0xf8, 0x4e00, "263003216563b519946e4d2066b6ebf4b21d38241a21803c6ee4bd3857ad4c08c74ac296d72ee36e971b93f1c8db40c65f4edc19d1556fecaa31e72aa018b38eb0b6f1a131df42d1df484da7f2f3241fca1aa5f826d69113b6b4040c9d7963eef6c400082c0e97cb14f424b4ab42bbe328bd13f29432f80eee5e9efe1266b9d42543bdd3a1ec410e96e31aef5a41d351b2cb3437f4c329da5ce13f78d0c41a67366ea83e9c1af8672ad832d07925c608b0cef4fb3f9324e70e6f62f720501af642111396a02a4ecad67f1f89802f6ae489b61134bc7021974f13a2b8bac04aaf3da7677bc3a2a6b251b9480efbd4f1d189d9ff6bf7622392"}, {0x3b, 0x4e00, "88f8de59ff1a2d14ebab7d3eebdc435b25cd9cf918e82c759a77381a91e909e0c2c87064eb86b5fcde292b55adf5b9963b2238c9de09777ff81612"}]}) (async) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003a00010325bd7000fcffffff07"], 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) (async) syz_usb_connect$cdc_ncm(0x1, 0x77, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x65, 0x2, 0x1, 0x57, 0x0, 0xfe, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "8896482f"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xb, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0xc0, 0x20}, [@obex={0x5, 0x24, 0x15, 0x2}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x66, 0x7, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xff, 0x4, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x71, 0x3c, 0xa5}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0xff, 0x26, 0x5, 0x8, 0x5}, 0x19, &(0x7f0000000380)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x80, "8521dd80351b23ed2f56486d13606f4d"}]}, 0x4, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf0ff}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x200a}}, {0x9b, &(0x7f0000000440)=@string={0x9b, 0x3, "013c56e0ba350253f0ccc6facf9a81bfadb67889b29bb5a5c9f9d47e50dc2d63a978129fe01fe60e2caa0bf5aa293641718146f7b57f76f65cd77f3e8a38514c1f3d9f3bece12d02f7533ef27727fa82391984aef50bcc57e2dfa505a9cef54fde3f063d95033e015e27a03b83330b334e6a7417b42e34f04b537a50fe359ac149c1f1063a8b747c285764ff7131bd6eb7ae537cd0aaeb64e4"}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0xc09}}]}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) 1.822253795s ago: executing program 2 (id=2703): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000fc0)={'syz1\x00', {0x6, 0x8001, 0x0, 0x529}, 0x52, [0xf5, 0x8, 0x80000001, 0x2, 0x202, 0xffffffff, 0x8e, 0x9, 0x9, 0x4, 0x0, 0x9, 0x7, 0x1, 0xfffffffe, 0x38, 0xffffff7f, 0xac, 0x5, 0x1443, 0x2, 0xea7, 0x1, 0x8557, 0x8, 0x20002, 0x4, 0x9, 0x8, 0x6, 0x84, 0xd3, 0x8001, 0x3, 0x2001, 0xb, 0x2, 0x0, 0xfffffffe, 0xc1e, 0xa, 0x939a, 0x8000, 0x1, 0x5c, 0x8, 0x6e4, 0x3, 0xf2b, 0x1, 0x6, 0xfffffffa, 0xffff, 0x8, 0x7, 0x6, 0xffffff7e, 0xf3, 0x6, 0xd2, 0x8001, 0x5, 0x53, 0x7fffffff], [0x5, 0x2, 0xd91, 0x8, 0x39bb, 0x8, 0x1, 0x5, 0xfffffffe, 0x40a89, 0xffb, 0xffffff4b, 0x1, 0x2, 0x0, 0xfffffffc, 0x8, 0x8, 0xffffffff, 0x405, 0x8ca, 0x9, 0x6, 0x5, 0xd, 0xa, 0x206, 0x9, 0xa, 0x5, 0xf, 0xb2cf, 0x1, 0x200, 0xec, 0x9, 0x100, 0x9, 0x5, 0x10001, 0x1, 0x865f, 0x8ec2, 0x3, 0x802, 0x7, 0x3, 0x29e3, 0xce, 0x40b4e5, 0x20000, 0x200, 0x5, 0x4, 0xfd, 0x1, 0x1d, 0x3, 0x10000, 0xa, 0x26, 0x2, 0x6, 0xad], [0x4343fe9f, 0xfffffffd, 0x101, 0xffffffff, 0x7f, 0x8, 0x3, 0x3, 0xc, 0x0, 0xcb06, 0x3, 0x4, 0x37, 0x5, 0x80003, 0xc8, 0xc, 0x8000, 0x2, 0xdf9e, 0x44005, 0x8, 0xa, 0x0, 0x7, 0x401, 0x5, 0x5, 0x7, 0x6, 0x2, 0x1, 0x0, 0xff, 0x911, 0x7, 0x8000, 0x31c1, 0x8, 0xb, 0x4, 0x2, 0x3, 0x9, 0x1, 0x2, 0x8, 0x7, 0x100402, 0x7, 0xffff, 0x400, 0x80000000, 0xffffffff, 0xb, 0x80, 0xf, 0x8, 0x8, 0x9, 0x4, 0x4, 0xfffffdad], [0x27b, 0x6, 0x6, 0x10, 0x7, 0x4009, 0x8, 0xff, 0x7fffffff, 0xe012, 0xfffffff8, 0x8, 0xffff7bfb, 0xffffffff, 0x2, 0x100, 0x2, 0x0, 0xb, 0x8, 0x8, 0x5, 0xfffffc00, 0x91, 0xb, 0x4, 0x80000000, 0x0, 0xa, 0x27, 0x400, 0x70, 0x9, 0xffc, 0x400002, 0x2, 0xffffffff, 0x8049, 0x80088, 0x10, 0x5, 0x9a4, 0x81, 0xf011, 0x400, 0x103000, 0x8, 0x5, 0x4, 0xfffffffe, 0xb, 0x1, 0xa450, 0x9, 0x807ff, 0x1, 0x3, 0xfffffc02, 0x3, 0xb, 0x5, 0x8, 0xa, 0xfffffff7]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r1, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000280)={0x0, @xdp={0x2c, 0x4, 0x0, 0x4}, @rc={0x1f, @any, 0x8}, @phonet={0x23, 0x80, 0x10, 0x6}, 0x5, 0x0, 0x0, 0x200000, 0x5d28, 0x0, 0x9, 0x9, 0x101}) 1.783628299s ago: executing program 2 (id=2705): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x0, 0x2, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000380)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) close(r1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000440)={{0xffbe, 0x5, 0x2, 0x5}, 'syz1\x00', 0x53}) ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x12) ioctl$UI_DEV_CREATE(r6, 0x5501) write$uinput_user_dev(r5, &(0x7f00000004c0)={'syz0\x00', {0x7, 0x3, 0x1, 0x9}, 0x7, [0x4, 0x6, 0x802, 0xe9a2, 0x1, 0x0, 0xa9ba, 0xc1f, 0x1, 0x7f5d, 0x3, 0x6, 0x5, 0x10000, 0x6, 0x3, 0x0, 0x3, 0xe, 0x3, 0x0, 0x2, 0xda, 0x2, 0x6, 0x3, 0x3, 0x9, 0xfff, 0x8a0, 0x6, 0x8001, 0x33b5, 0x1, 0xfffffffc, 0x0, 0x9, 0xb, 0xcc, 0x5, 0x80, 0x401, 0x5, 0x5, 0xfffffffd, 0x8, 0xb, 0x3, 0xffff8001, 0x6, 0x3, 0x7ffffffe, 0x1, 0x9, 0x2007, 0x0, 0x5, 0xfff, 0x1, 0x7fe, 0x7fff, 0x40010000, 0x2, 0x8], [0x2, 0x1, 0x10000, 0x7, 0x9, 0x9, 0x5, 0x4, 0x9, 0x7, 0x5, 0xdd5a, 0x6, 0x5, 0x7, 0x8, 0x5, 0xcc, 0xbc1, 0x80000, 0x0, 0x5e81339d, 0xffffc256, 0x5, 0x80000001, 0x0, 0xfffffffd, 0x4, 0x4, 0x7, 0x9, 0x4, 0x1, 0x5, 0x5, 0xfffffb66, 0xfb5, 0x2, 0x4, 0x7, 0x2, 0x8000, 0x7fff, 0x1, 0x9425, 0x8, 0x6f, 0x80b, 0x1, 0x6, 0x0, 0x4f74, 0x7, 0x1, 0x1, 0x8, 0x100, 0x6, 0x10000, 0x1306, 0x8b, 0x10000, 0xfe4, 0x3ff], [0x2, 0x40, 0x4, 0xfffffff9, 0x7aa, 0x10, 0x80, 0x8001, 0x5, 0x0, 0x9, 0x8, 0x7fffffff, 0x1, 0x1, 0x4, 0x8, 0xfffffffa, 0x7, 0x9, 0x80000006, 0x4, 0x5, 0xa3, 0x3, 0x2, 0x0, 0x3, 0x4c, 0x3, 0x5, 0x2, 0xd21e, 0x9, 0x13, 0x0, 0x2, 0xfff, 0x6, 0x100, 0x7c83, 0xd, 0x1, 0x4, 0xf, 0x6, 0x47, 0x7, 0x0, 0x11, 0x3, 0xffd, 0x7, 0x7, 0x8000, 0x7ff, 0x10, 0x4, 0x10001, 0x1, 0x0, 0x6, 0x71c], [0x81, 0x3, 0x10, 0x4e26, 0x3, 0x40, 0xfffffff3, 0x497, 0x4, 0x1, 0x3, 0x5, 0x56, 0xc28, 0x9, 0x5, 0x5, 0xa, 0x79a, 0x40, 0x9, 0x6, 0xc41f, 0x80000001, 0x8b2, 0xffffffff, 0x0, 0x0, 0x6a, 0x9, 0x0, 0x0, 0x1000, 0x10, 0xe, 0x6, 0x8000, 0x53, 0x78d, 0x4, 0x1, 0xffffb027, 0xfffffff8, 0x9, 0x7, 0x7, 0x101, 0x7, 0x7, 0x4, 0x0, 0xb, 0x400, 0x8, 0x0, 0x8, 0x7, 0x1, 0x8, 0x0, 0x1, 0x8001, 0xfffffff7, 0x5]}, 0x45c) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f00000000c0)={r1}) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)="8b4f1fff93f432a7a7e02efaaebb19280ef09c53ede315ea616456bea8ab539fce3fac7859b14caf6bd725bd4a4cc09a0b7dd72a356105c55c751f5245f48d588f67f1270577a9dd0aa6897f2f253fd71f816d71144b04", 0x57}, {&(0x7f0000000080)="06cf8396d6eccb7534ae489cdd9c0f96e1f0ea7a98cff366c623fe589084c25b2d4f7ddc009faa1270b163abc189f0164f78c7f68b6c39a67465c4b7cfdbfafcc674be75d76b49c5e8c49d7c447ddf681cbff2bbd3b2a72254d990088da9cdfc1cbe8ccc29cb11cc32732a8f648d278f0c900356b705c468323aa30c03800352fb0bd769a2153493f5b5a9e7f6a8a58223f6ebc341ed93a42b9d35e8ac9302a97f85c9c59f78817dc76d7f9e45c9798bf2405e95a5b1a6acc4aff1a1919a1c3c01150a231a17a7a498d9f17752fd348cdc6c7b0375400c97a30f563d8588234918a020bbddd871c6401a6b5edc081eb3e9", 0xf1}, {&(0x7f0000000180)="90a77efe67daa0a31a130ee28e6656631037a0fca476c5580a38fe4e99aaea4e1c449235a67deded8e2ab01dcf49462cf27d515c3ee89c07190e5e303bbe25c0f9f3bda8fc365e1236cfbee265195a9deb2f48b59159489ab547cc942f189b747c9d82dacb497c718162db7eb13366d4c1ccd64ca46a91a847aa49aada440130dad321f8eb98b6a348b457d7e45da54693974341e95092a40f43efd7af6dbfd428709be8de81b3035ddbe1122767f65ee2e4cb10d0424d518b0cd745ac6c50d171ae927ba626", 0xc6}, {&(0x7f0000000280)="402a22282cf52ab0287518107ed00a160a41f8b79ab1edfe5db04647c3b774806e905178d15fa5e81be2eb36dd2955a238ecd93b5210000e44c3529b4cfaa313b18a6ca1e9144a1d1bf79dfdfaced34bc2f33cdc3c226f8b1e273d4f915ada436b9c540d42563deeeb843eadff2f3a9cfa01d5db1a9506c6fdfa28877449a2cd75847e8380b2b218885aaed0", 0x8c}], 0x4}, 0x400a044) 1.648043808s ago: executing program 0 (id=2706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x248}}, 0x0) 1.552130398s ago: executing program 0 (id=2707): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000040)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1.504690254s ago: executing program 1 (id=2708): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB='@\nB'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.402440594s ago: executing program 2 (id=2709): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d00eec0e940fd322ed3d4f526341462e89a340a781fceb4d740d4e1dd651463317480d5fc", 0x49}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/161, 0xa1}], 0x1}, 0x3}], 0x1, 0x10020, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1.368829417s ago: executing program 2 (id=2710): r0 = socket(0x15, 0x80801, 0x24) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_connect(0x5, 0x2c, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0xbe, 0x67, 0x2f, 0x10, 0x5ac, 0x241, 0xd09c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x9, 0x4, 0xa0, 0xf8, [{{0x9, 0x4, 0x81, 0x2, 0x0, 0x2, 0x2, 0xff, 0xfc, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x9, 0x8}]}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) socket(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x1000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) 972.108516ms ago: executing program 0 (id=2711): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xff01, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000280)={0x2, {0x2, 0x0, 0x304, 0x0, 0x8, 0x300}}) 837.920874ms ago: executing program 3 (id=2712): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0xc0580, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x0, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x1e}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x5, 0x1, 0xf0}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4048aec9, &(0x7f0000000840)={0x6, 0x0, @ioapic={0xeeee0000, 0x8000, 0x8, 0x8, 0x0, [{0x6, 0xbd, 0xff, '\x00', 0x6}, {0x5, 0x12, 0x2, '\x00', 0x4}, {0x4, 0x46, 0x3c, '\x00', 0x6}, {0x1, 0xfb, 0x1}, {0x8, 0x8, 0xc, '\x00', 0x5}, {0x8, 0x77, 0x1, '\x00', 0x19}, {0x17, 0x5, 0xd6, '\x00', 0x8d}, {0xa, 0x9, 0x1, '\x00', 0x6f}, {0x8, 0xf, 0x9, '\x00', 0x9}, {0x0, 0x3, 0xf, '\x00', 0x8}, {0x6, 0x3, 0xe1, '\x00', 0x5}, {0xfa, 0x46, 0x4, '\x00', 0xdd}, {0x1, 0x80, 0x2, '\x00', 0x5}, {0x80, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x81, 0x7, '\x00', 0xfd}, {0x4, 0x5, 0x2, '\x00', 0xf7}, {0x9, 0x10, 0x5, '\x00', 0x1}, {0xb5, 0x0, 0x9, '\x00', 0xc}, {0xa7, 0x1, 0x3, '\x00', 0x7}, {0xf, 0x3, 0x9, '\x00', 0xd}, {0x8, 0x5, 0x0, '\x00', 0x9}, {0x0, 0x5, 0x0, '\x00', 0xf1}, {0xa, 0x5, 0x2f, '\x00', 0xff}, {0x8}]}}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) setuid(0xee01) write$tun(r2, 0x0, 0xc2) 646.625847ms ago: executing program 3 (id=2713): sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x28}}, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={0x0, 0x14}, 0x1, 0x100000000000000, 0x0, 0x4044059}, 0x40090) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002400)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x257}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdb9742dd8a2f150ab0e8c5fa047c87d310adca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9", 0xf3}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d", 0x86}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0xc3ffffff}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 598.94997ms ago: executing program 3 (id=2714): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000640)=0x8a9, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x20000, 0x0) ioctl$RTC_AIE_ON(r1, 0x7001) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x20) ioctl$KVM_RESET_DIRTY_RINGS(r2, 0xaec7) 452.743008ms ago: executing program 2 (id=2715): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a310000000070000000060a010400000000000000000100000008000b400000000048000480440001800b000100657874686472000034000280080001400000000c080003400000000008000440000000220500020007000000080006400000000308000540000000000900010073797a300000000020000000030a010300000000000000000a0000020900030073797a300000000044010000080a01080000000000000000010000073a00074032e97608c07b8f34d704cc507d07a8d4c429672a9b6841e516ce194f03354b3c46a930469ce36ee8391a02352a70d543c633dc17a9d300007900074012119f33dbd27dbba871f33b8206fc0a59dac6df96baf86f3feffa20b8a2b13fa2fbc917a33ad4b9dc903553ff1e7533cd9d1e3f6a3248b10a63552977fab38d9ad7409cbd223b094a0bb6f0884c8839890d122f9b9963668c97749b2304852a8d461ccc39dc307f41ac41688a4f2d64a916dc532d00000008000a40000000000900010073797a30000000000900020073797a31000000002c00058008000140000086dd080001400000002c080001400000001608000140000000736afd01400000810008"], 0x248}}, 0x0) 406.718377ms ago: executing program 3 (id=2716): r0 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in={0x2, 0x4e20, @empty}, 0x80, 0x0, 0x11000, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 379.771952ms ago: executing program 0 (id=2717): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x44, r2, 0xb97534d5fe9704cf, 0x4, 0x200, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x3ff}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x602}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x6, 0xbe, "4ac0"}]}, 0x44}, 0x1, 0xef, 0x0, 0x80c1}, 0x0) 302.511318ms ago: executing program 3 (id=2718): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = socket(0x10, 0x803, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)="2e00000011008188040f46ecdb4cb9cca7480ef42b000081e3bd6efb01e511000b0003000d00eec0e940fd322ed3d4f526341462e89a340a781fceb4d740d4e1dd651463317480d5fc", 0x49}], 0x1, 0x0, 0x0, 0xc9e}, 0x400c0c0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000880)=""/161, 0xa1}], 0x1}, 0x3}], 0x1, 0x10020, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 257.971034ms ago: executing program 2 (id=2719): clock_adjtime(0xff64cd1d, &(0x7f0000000000)={0x8003ff, 0x0, 0xf690, 0xa, 0x0, 0x8001, 0x6, 0xfffffffffffffffc, 0x0, 0x200, 0x0, 0xfffffffffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x1000000, 0x0, 0x7, 0x8, 0x2, 0x3}) 170.317191ms ago: executing program 0 (id=2720): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x100000, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x18, 0x2e, 0x1, 0x8f0bd26, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x0, 0x0, 0x2004809c}, 0x20000000) 131.012967ms ago: executing program 3 (id=2722): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, 0x0, 0x121003, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) set_mempolicy(0x2, &(0x7f0000000080)=0x2, 0x6) set_mempolicy(0x4000, &(0x7f0000000100)=0x29, 0xa) mkdir(&(0x7f00000020c0)='./file0\x00', 0x82) lsetxattr$system_posix_acl(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x2}, [], {0x4, 0x3}, [{0x8, 0x6}], {0x10, 0x6}, {0x20, 0x1}}, 0x2c, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={0x0, 0x4c}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000014000101a5bd7000fddbdf2528"], 0x4c}, 0x1, 0x0, 0x0, 0x240480cc}, 0x40000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$TCPDIAG_GETSOCK(r4, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048084}, 0x40000) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) madvise(&(0x7f00001a5000/0x3000)=nil, 0x3000, 0x17) r5 = socket(0x11, 0x800000002, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$sock(r6, &(0x7f00000044c0), 0x4000000000001c0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000540)={'wlan0\x00', {0x2, 0x0, @private=0xf30a0000}}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 0s ago: executing program 0 (id=2723): r0 = socket(0x15, 0x80801, 0x24) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @empty}, 0x1c) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) syz_usb_connect(0x5, 0x2c, &(0x7f0000000640)={{0x12, 0x1, 0x201, 0xbe, 0x67, 0x2f, 0x10, 0x5ac, 0x241, 0xd09c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1a, 0x1, 0x9, 0x4, 0xa0, 0xf8, [{{0x9, 0x4, 0x81, 0x2, 0x0, 0x2, 0x2, 0xff, 0xfc, [@uac_as={[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x1, 0x4, 0x9, 0x8}]}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)) r2 = socket$packet(0x11, 0x3, 0x300) r3 = dup(r2) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) socket(0x10, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x40400, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = fcntl$dupfd(r1, 0x0, r2) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x1000}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3}) kernel console output (not intermixed with test programs): AFS: No cell specified [ 322.929410][T12803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1951'. [ 323.203513][ T9357] usb 2-1: new full-speed USB device number 117 using dummy_hcd [ 323.343595][ T6825] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 323.368759][ T9357] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.380434][ T9357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 323.392022][ T9357] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 323.405210][ T9357] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.418647][ T9357] usb 2-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 323.428621][ T9357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.449383][ T9357] usb 2-1: config 0 descriptor?? [ 323.504771][ T6825] usb 3-1: Using ep0 maxpacket: 16 [ 323.512529][ T6825] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.524758][ T6825] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 323.547033][ T6825] usb 3-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 323.557199][ T6825] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.579953][ T6825] usb 3-1: config 0 descriptor?? [ 323.605321][ T6825] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 323.872827][T12825] netlink: 'syz.0.1961': attribute type 10 has an invalid length. [ 323.878106][ T9357] hid-u2fzero 0003:10C4:8ACF.001D: item fetching failed at offset 1/5 [ 323.895312][ T9357] hid-u2fzero 0003:10C4:8ACF.001D: probe with driver hid-u2fzero failed with error -22 [ 323.920675][T12825] team0: Port device geneve1 added [ 324.069267][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.087714][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.874365][T12863] wlan0 speed is unknown, defaulting to 1000 [ 325.943490][ T9357] usb 2-1: USB disconnect, device number 117 [ 326.041882][T12867] tmpfs: Unknown parameter '' [ 326.093385][ T5909] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 326.117521][ T6825] usb 3-1: USB disconnect, device number 110 [ 326.273215][T12879] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1982'. [ 326.284475][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 326.301149][ T5909] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.00 [ 326.313564][ T5909] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.327897][ T5909] usb 4-1: config 0 descriptor?? [ 326.453974][T12881] kvm: kvm [12880]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010007) = 0x6 [ 326.540237][T12861] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 326.573155][ T55] usb 4-1: USB disconnect, device number 108 [ 326.659637][ T30] audit: type=1326 audit(1762798425.549:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12888 comm="syz.1.1987" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e0a78f6c9 code=0x0 [ 326.711580][T12890] netdevsim netdevsim1: Firmware load for '..' refused, path contains '..' component [ 326.833416][ T5909] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 326.983431][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 326.990398][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short [ 326.999030][ T5909] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 327.007287][ T5909] usb 3-1: config 9 has no interface number 0 [ 327.013525][ T5909] usb 3-1: config 9 interface 129 has no altsetting 0 [ 327.022048][ T5909] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 327.031798][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.039896][ T5909] usb 3-1: Product: syz [ 327.044456][ T5909] usb 3-1: Manufacturer: syz [ 327.049060][ T5909] usb 3-1: SerialNumber: syz [ 327.262616][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1989'. [ 327.826420][ T5909] usb 3-1: bad CDC descriptors [ 327.854632][ T5909] usb 3-1: USB disconnect, device number 111 [ 328.433453][ T9357] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 328.563906][ T9357] usb 3-1: device descriptor read/64, error -71 [ 328.763396][ T55] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 328.803380][ T9357] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 328.900385][T13033] siw: device registration error -23 [ 328.914391][ T55] usb 4-1: Using ep0 maxpacket: 16 [ 328.932684][ T55] usb 4-1: unable to get BOS descriptor or descriptor too short [ 328.934199][ T9357] usb 3-1: device descriptor read/64, error -71 [ 328.954008][ T55] usb 4-1: config 9 has an invalid interface number: 129 but max is 0 [ 328.962210][ T55] usb 4-1: config 9 has no interface number 0 [ 328.969128][ T55] usb 4-1: config 9 interface 129 has no altsetting 0 [ 328.992758][T13037] overlayfs: failed to clone upperpath [ 329.001006][ T55] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 329.021919][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.033457][ T55] usb 4-1: Product: syz [ 329.037648][ T55] usb 4-1: Manufacturer: syz [ 329.042248][ T55] usb 4-1: SerialNumber: syz [ 329.077324][ T9357] usb usb3-port1: attempt power cycle [ 329.273412][ T6825] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 329.424899][ T9357] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 329.457992][ T6825] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 329.471279][ T6825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.487275][ T9357] usb 3-1: device descriptor read/8, error -71 [ 329.503411][ T6825] usb 2-1: Product: syz [ 329.507608][ T6825] usb 2-1: Manufacturer: syz [ 329.512216][ T6825] usb 2-1: SerialNumber: syz [ 329.625642][ T6825] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 329.649840][ T10] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 329.753495][ T9357] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 329.854277][ T9357] usb 3-1: device descriptor read/8, error -71 [ 329.965689][ T9357] usb usb3-port1: unable to enumerate USB device [ 330.122705][ T55] usb 4-1: bad CDC descriptors [ 330.134519][ T55] usb 4-1: USB disconnect, device number 109 [ 330.429659][T13056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.445775][T13056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.466274][T13056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.475810][T13056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.793443][ T9357] usb 4-1: new full-speed USB device number 110 using dummy_hcd [ 330.955532][ T9357] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 330.966962][ T9357] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 330.984906][ T9357] usb 4-1: config 8 has no interface number 0 [ 330.991177][ T9357] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 331.002342][ T9357] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 331.012374][ T9357] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 331.033413][ T9357] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 331.044838][ T9357] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.070835][ T9357] usb 4-1: NFC: intf ffff88807f56e000 id ffffffff8ed2ef60 [ 331.262182][T13090] netlink: 212 bytes leftover after parsing attributes in process `syz.2.2026'. [ 331.263635][ T10] usb 2-1: Service connection timeout for: 256 [ 331.280431][ T10] ath9k_htc 2-1:1.0: ath9k_htc: Unable to initialize HTC services [ 331.280471][ T55] usb 4-1: USB disconnect, device number 110 [ 331.339175][ T10] ath9k_htc: Failed to initialize the device [ 331.357966][ T10] usb 2-1: ath9k_htc: USB layer deinitialized [ 331.579896][ T55] usb 2-1: USB disconnect, device number 118 [ 331.714411][ T10] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 331.873448][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 331.882791][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 331.896991][ T10] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 331.905889][ T10] usb 3-1: config 9 has no interface number 0 [ 331.912548][ T10] usb 3-1: config 9 interface 129 has no altsetting 0 [ 331.921644][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 331.930997][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.939342][ T10] usb 3-1: Product: syz [ 331.943834][ T10] usb 3-1: Manufacturer: syz [ 331.948433][ T10] usb 3-1: SerialNumber: syz [ 332.123504][ T6825] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 332.275419][ T6825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.307289][ T6825] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 332.327026][ T6825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.353386][ T6825] usb 4-1: Product: syz [ 332.357661][ T6825] usb 4-1: Manufacturer: syz [ 332.362298][ T6825] usb 4-1: SerialNumber: syz [ 332.394123][ T6825] usb 4-1: config 0 descriptor?? [ 332.413614][ T6825] yurex 4-1:0.0: Could not find endpoints [ 332.562192][ T10] usb 3-1: bad CDC descriptors [ 332.584618][ T10] usb 3-1: USB disconnect, device number 116 [ 332.618551][T13198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.652346][T13198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.675777][ T55] usb 4-1: USB disconnect, device number 111 [ 332.921050][T13315] wlan0 speed is unknown, defaulting to 1000 [ 333.080851][T13322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2038'. [ 333.613750][ T6825] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 333.813524][ T6825] usb 3-1: Using ep0 maxpacket: 16 [ 333.826817][ T6825] usb 3-1: unable to get BOS descriptor or descriptor too short [ 333.845283][ T6825] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 333.863333][ T6825] usb 3-1: config 9 has no interface number 0 [ 333.871024][ T6825] usb 3-1: config 9 interface 129 has no altsetting 0 [ 333.881328][ T6825] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 333.900898][ T6825] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.914154][T13347] kAFS: unable to lookup cell 'mS²jË¡8' [ 333.915000][ T6825] usb 3-1: Product: syz [ 333.924388][ T6825] usb 3-1: Manufacturer: syz [ 333.929022][ T6825] usb 3-1: SerialNumber: syz [ 334.083452][ T5824] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 334.125447][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'. [ 334.136735][T13354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'. [ 334.146054][T13354] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 334.200474][T13354] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 334.207585][T13354] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 334.216535][T13354] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 334.223070][T13354] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 334.231041][T13354] comedi comedi3: 8255: I/O port conflict (0x12,4) [ 334.239574][T13354] ptrace attach of "./syz-executor exec"[5819] was attempted by ""[13354] [ 334.243325][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 334.265889][ T5824] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 334.285743][ T5824] usb 4-1: config 0 has no interface number 0 [ 334.291916][ T5824] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.337695][ T5824] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.364692][ T5824] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 334.389974][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.419297][ T5824] usb 4-1: config 0 descriptor?? [ 334.582398][ T6825] usb 3-1: bad CDC descriptors [ 334.610222][ T6825] usb 3-1: USB disconnect, device number 117 [ 334.871137][T13481] overlayfs: missing 'workdir' [ 334.920704][T13484] netlink: 112 bytes leftover after parsing attributes in process `syz.0.2062'. [ 334.931807][T13484] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2062'. [ 335.059519][T13343] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2048'. [ 335.081435][ T5824] uclogic 0003:28BD:0071.001E: failed retrieving string descriptor #100: -71 [ 335.103439][ T5824] uclogic 0003:28BD:0071.001E: failed retrieving pen parameters: -71 [ 335.117508][ T5824] uclogic 0003:28BD:0071.001E: pen probing failed: -71 [ 335.125629][ T5824] uclogic 0003:28BD:0071.001E: failed probing parameters: -71 [ 335.134485][ T5824] uclogic 0003:28BD:0071.001E: probe with driver uclogic failed with error -71 [ 335.143362][ T6825] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 335.176356][ T5824] usb 4-1: USB disconnect, device number 112 [ 335.293423][ T6825] usb 3-1: device descriptor read/64, error -71 [ 335.533401][ T6825] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 335.663463][ T6825] usb 3-1: device descriptor read/64, error -71 [ 335.683388][ T5824] usb 2-1: new full-speed USB device number 119 using dummy_hcd [ 335.774252][ T6825] usb usb3-port1: attempt power cycle [ 335.813705][T13509] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2070'. [ 335.864991][ T5824] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 335.873110][ T5824] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 335.884093][ T5824] usb 2-1: config 8 has no interface number 0 [ 335.891116][ T5824] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 335.918252][ T5824] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 335.923859][T13513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 335.934412][ T5824] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 335.952275][ T5824] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 335.964808][ T5824] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.978792][ T5824] usb 2-1: NFC: intf ffff8880741b4000 id ffffffff8ed2ef60 [ 336.113388][ T6825] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 336.134852][ T6825] usb 3-1: device descriptor read/8, error -71 [ 336.183009][ T9] usb 2-1: USB disconnect, device number 119 [ 336.403393][ T6825] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 336.433892][ T6825] usb 3-1: device descriptor read/8, error -71 [ 336.544229][ T6825] usb usb3-port1: unable to enumerate USB device [ 336.973450][ T6825] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 337.093462][ T55] usb 2-1: new high-speed USB device number 120 using dummy_hcd [ 337.133413][ T6825] usb 4-1: Using ep0 maxpacket: 8 [ 337.143193][ T6825] usb 4-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 337.152875][ T6825] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.163013][ T6825] usb 4-1: Product: syz [ 337.167498][ T6825] usb 4-1: Manufacturer: syz [ 337.172098][ T6825] usb 4-1: SerialNumber: syz [ 337.194331][ T6825] usb 4-1: config 0 descriptor?? [ 337.204982][ T6825] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 337.212999][ T6825] imon 4-1:0.0: unable to initialize intf0, err -19 [ 337.224968][ T6825] imon:imon_probe: failed to initialize context! [ 337.231332][ T6825] imon 4-1:0.0: unable to register, err -19 [ 337.263488][ T55] usb 2-1: Using ep0 maxpacket: 16 [ 337.271881][ T55] usb 2-1: unable to get BOS descriptor or descriptor too short [ 337.283113][ T55] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 337.291822][ T55] usb 2-1: config 9 has no interface number 0 [ 337.301291][ T55] usb 2-1: config 9 interface 129 has no altsetting 0 [ 337.310016][ T55] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 337.319127][ T55] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.327205][ T55] usb 2-1: Product: syz [ 337.331396][ T55] usb 2-1: Manufacturer: syz [ 337.336085][ T55] usb 2-1: SerialNumber: syz [ 337.408270][ T5824] usb 4-1: USB disconnect, device number 113 [ 337.640675][ T55] usb 2-1: bad CDC descriptors [ 337.655550][ T55] usb 2-1: USB disconnect, device number 120 [ 337.896268][T13571] netlink: 116 bytes leftover after parsing attributes in process `syz.0.2094'. [ 338.055268][ T55] usb 2-1: new full-speed USB device number 121 using dummy_hcd [ 338.068869][T13576] wlan0 speed is unknown, defaulting to 1000 [ 338.215009][ T55] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 338.236922][ T55] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 338.253494][ T55] usb 2-1: config 8 has no interface number 0 [ 338.274621][ T55] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 338.306349][ T55] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 338.341337][ T55] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 338.389203][ T55] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 338.417656][ T55] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.457609][ T55] usb 2-1: NFC: intf ffff88802fb46000 id ffffffff8ed2ef60 [ 338.677889][ T55] usb 2-1: USB disconnect, device number 121 [ 338.719762][T13694] pimreg: entered allmulticast mode [ 338.738566][T13694] pimreg: left allmulticast mode [ 338.750395][T13696] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.2102'. [ 338.760040][T13696] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.838965][T13698] sp0: Synchronizing with TNC [ 338.963058][T13702] siw: device registration error -23 [ 339.134161][ T9357] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 339.253391][ T5824] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 339.283345][ T9357] usb 3-1: Using ep0 maxpacket: 8 [ 339.307013][ T9357] usb 3-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 339.318239][ T9357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.327971][ T9357] usb 3-1: Product: syz [ 339.343228][ T9357] usb 3-1: Manufacturer: syz [ 339.348525][ T9357] usb 3-1: SerialNumber: syz [ 339.357477][ T9357] usb 3-1: config 0 descriptor?? [ 339.367871][ T9357] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 339.383568][ T9357] imon 3-1:0.0: unable to initialize intf0, err -19 [ 339.390562][ T9357] imon:imon_probe: failed to initialize context! [ 339.397345][ T9357] imon 3-1:0.0: unable to register, err -19 [ 339.423672][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 339.435019][ T5824] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.449444][ T5824] usb 4-1: config 0 has no interface number 0 [ 339.456461][ T5824] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.469511][ T5824] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.482059][ T5824] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 339.491741][ T5824] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.513787][ T5824] usb 4-1: config 0 descriptor?? [ 339.571660][ T55] usb 3-1: USB disconnect, device number 122 [ 339.603374][ T5908] usb 2-1: new high-speed USB device number 122 using dummy_hcd [ 339.743549][ T5908] usb 2-1: device descriptor read/64, error -71 [ 339.989754][ T5908] usb 2-1: new high-speed USB device number 123 using dummy_hcd [ 340.129833][T13704] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2106'. [ 340.140356][ T5908] usb 2-1: device descriptor read/64, error -71 [ 340.161385][ T5824] uclogic 0003:28BD:0071.001F: failed retrieving string descriptor #100: -71 [ 340.177581][ T5824] uclogic 0003:28BD:0071.001F: failed retrieving pen parameters: -71 [ 340.190772][ T5824] uclogic 0003:28BD:0071.001F: pen probing failed: -71 [ 340.200425][ T5824] uclogic 0003:28BD:0071.001F: failed probing parameters: -71 [ 340.213208][ T5824] uclogic 0003:28BD:0071.001F: probe with driver uclogic failed with error -71 [ 340.230711][ T5824] usb 4-1: USB disconnect, device number 114 [ 340.273845][ T5908] usb usb2-port1: attempt power cycle [ 340.613364][ T5908] usb 2-1: new high-speed USB device number 124 using dummy_hcd [ 340.654024][ T5908] usb 2-1: device descriptor read/8, error -71 [ 340.893361][ T9357] usb 3-1: new full-speed USB device number 123 using dummy_hcd [ 340.913408][ T5908] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 340.931087][T13832] netlink: 236 bytes leftover after parsing attributes in process `syz.3.2117'. [ 340.940938][ T5908] usb 2-1: device descriptor read/8, error -71 [ 341.064121][ T5908] usb usb2-port1: unable to enumerate USB device [ 341.064996][ T9357] usb 3-1: config 0 has no interfaces? [ 341.096498][ T9357] usb 3-1: New USB device found, idVendor=0bc2, idProduct=2300, bcdDevice=35.7f [ 341.109199][ T9357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.175073][ T9357] usb 3-1: config 0 descriptor?? [ 341.393818][ T9357] usb 3-1: USB disconnect, device number 123 [ 342.739319][T13965] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2130'. [ 342.754031][ T6825] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 342.766535][T13966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2129'. [ 342.925140][ T6825] usb 2-1: config 0 has an invalid interface number: 82 but max is 0 [ 343.043521][ T6825] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.054575][ T6825] usb 2-1: config 0 has no interface number 0 [ 343.060711][ T6825] usb 2-1: config 0 interface 82 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 343.080719][ T6825] usb 2-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=11.9e [ 343.090378][ T6825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.101643][ T6825] usb 2-1: Product: syz [ 343.106193][ T6825] usb 2-1: Manufacturer: syz [ 343.111021][ T6825] usb 2-1: SerialNumber: syz [ 343.147860][ T6825] usb 2-1: config 0 descriptor?? [ 343.163372][ T5908] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 343.164689][ T6825] cdc_ether 2-1:0.82: skipping garbage [ 343.198044][ T6825] usb 2-1: bad CDC descriptors [ 343.223727][ T6825] usb 2-1: unsupported MDLM descriptors [ 343.242655][ T6825] cdc_acm 2-1:0.82: skipping garbage [ 343.345620][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 343.367989][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 343.369778][ T6825] usb 2-1: USB disconnect, device number 126 [ 343.383025][ T5908] usb 4-1: config 9 has an invalid interface number: 129 but max is 0 [ 343.396931][ T5908] usb 4-1: config 9 has no interface number 0 [ 343.403887][ T5908] usb 4-1: config 9 interface 129 has no altsetting 0 [ 343.428053][ T5908] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 343.440412][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.448943][ T5908] usb 4-1: Product: syz [ 343.453125][ T5908] usb 4-1: Manufacturer: syz [ 343.459689][ T5908] usb 4-1: SerialNumber: syz [ 343.496811][T14080] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 343.728228][T14085] efs: cannot read volume header [ 344.174262][T14092] net veth1_virt_wifi : renamed from virt_wifi0 [ 344.378401][T14202] comedi comedi2: rti800: I/O port conflict (0x4f27,16) [ 344.533393][ T55] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 344.685480][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 344.693212][ T55] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 344.707166][ T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 344.723788][ T55] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 344.733167][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.742637][ T55] usb 3-1: Product: syz [ 344.747385][ T55] usb 3-1: Manufacturer: syz [ 344.752017][ T55] usb 3-1: SerialNumber: syz [ 344.761345][ T55] usb 3-1: config 0 descriptor?? [ 344.777598][ T55] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 344.787276][ T55] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 345.320106][T14210] fuse: Bad value for 'fd' [ 345.380581][ T55] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 345.412096][ T55] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 345.643376][ T55] em28xx 3-1:0.0: AC97 command still being executed: not handled properly! [ 345.667083][ T55] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 345.685066][ T55] em28xx 3-1:0.0: No AC97 audio processor [ 345.905856][ T5908] usb 4-1: bad CDC descriptors [ 345.931601][ T5908] usb 4-1: USB disconnect, device number 115 [ 345.963391][ T9] usb 2-1: new full-speed USB device number 127 using dummy_hcd [ 346.127256][ T9] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 346.136651][ T9] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 346.150330][ T9] usb 2-1: config 8 has no interface number 0 [ 346.157912][ T9] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 346.168889][ T9] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 346.178682][ T9] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 346.193519][ T9] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 346.203179][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.222240][ T9] usb 2-1: NFC: intf ffff88802f16a000 id ffffffff8ed2ef60 [ 346.291259][ T9] usb 3-1: USB disconnect, device number 124 [ 346.317502][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 346.326284][ T9] em28xx 3-1:0.0: Freeing device [ 346.423149][ T6825] usb 2-1: USB disconnect, device number 127 [ 346.723817][ T9] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 346.828924][T14555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2168'. [ 346.873403][ T9] usb 4-1: device descriptor read/64, error -71 [ 347.125320][ T9] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 347.173452][T14563] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 347.197639][T14563] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 347.273364][ T9] usb 4-1: device descriptor read/64, error -71 [ 347.338726][T14568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2174'. [ 347.351200][T14568] dummy0: left allmulticast mode [ 347.356674][T14568] dummy0: left promiscuous mode [ 347.362930][T14568] bridge0: port 3(dummy0) entered disabled state [ 347.380375][T14568] bridge_slave_1: left allmulticast mode [ 347.386925][ T9] usb usb4-port1: attempt power cycle [ 347.393908][T14568] bridge_slave_1: left promiscuous mode [ 347.399948][T14568] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.410091][T14568] bridge_slave_0: left allmulticast mode [ 347.416728][T14568] bridge_slave_0: left promiscuous mode [ 347.424518][T14568] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.452213][T14568] bridge0 (unregistering): left allmulticast mode [ 347.735894][ T9] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 347.774193][ T9] usb 4-1: device descriptor read/8, error -71 [ 347.821457][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2176'. [ 348.025381][ T9] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 348.268168][ T9] usb 4-1: device descriptor read/8, error -71 [ 348.384712][ T9] usb usb4-port1: unable to enumerate USB device [ 348.793450][ T24] usb 2-1: new low-speed USB device number 2 using dummy_hcd [ 348.943422][ T24] usb 2-1: device descriptor read/64, error -71 [ 349.193361][ T24] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 349.333396][ T24] usb 2-1: device descriptor read/64, error -71 [ 349.363390][ T5908] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 349.444066][ T24] usb usb2-port1: attempt power cycle [ 349.530344][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.556103][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.575922][ T5908] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 349.597264][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.615894][ T5908] usb 3-1: config 0 descriptor?? [ 349.702836][ T30] audit: type=1326 audit(1762798448.589:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14894 comm="syz.3.2186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66f358f6c9 code=0x0 [ 349.803390][ T24] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 349.834275][ T24] usb 2-1: device descriptor read/8, error -71 [ 350.083549][ T5908] usbhid 3-1:0.0: can't add hid device: -71 [ 350.089576][ T5908] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 350.098736][ T24] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 350.119969][ T5908] usb 3-1: USB disconnect, device number 125 [ 350.129004][ T24] usb 2-1: device descriptor read/8, error -71 [ 350.255711][ T24] usb usb2-port1: unable to enumerate USB device [ 350.423381][ T5908] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 350.603348][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 350.614613][ T5908] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 350.623671][ T5908] usb 3-1: config 0 has no interface number 0 [ 350.631280][ T5908] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.633359][ T30] audit: type=1326 audit(1762798449.519:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15022 comm="syz.0.2198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76b838f6c9 code=0x0 [ 350.642819][ T5908] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.674042][ T5908] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 350.683056][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.693881][ T5908] usb 3-1: config 0 descriptor?? [ 350.739590][T15026] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2198'. [ 350.863427][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 351.013426][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 351.024069][ T9] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 351.033168][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.041251][ T9] usb 4-1: Product: syz [ 351.045482][ T9] usb 4-1: Manufacturer: syz [ 351.050108][ T9] usb 4-1: SerialNumber: syz [ 351.057187][ T9] usb 4-1: config 0 descriptor?? [ 351.311840][ T5908] uclogic 0003:28BD:0071.0020: failed retrieving string descriptor #100: -71 [ 351.321133][ T5908] uclogic 0003:28BD:0071.0020: failed retrieving pen parameters: -71 [ 351.329303][ T5908] uclogic 0003:28BD:0071.0020: pen probing failed: -71 [ 351.336232][ T5908] uclogic 0003:28BD:0071.0020: failed probing parameters: -71 [ 351.345492][ T5908] uclogic 0003:28BD:0071.0020: probe with driver uclogic failed with error -71 [ 351.361372][ T5908] usb 3-1: USB disconnect, device number 126 [ 351.465928][ T9] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 351.476267][T15028] overlayfs: failed to clone upperpath [ 351.476586][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 351.491839][ T9] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 351.500859][ T9] usb 4-1: media controller created [ 351.526899][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 351.881469][T15045] wlan0 speed is unknown, defaulting to 1000 [ 352.004330][ T9357] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 352.049454][T15148] wlan0 speed is unknown, defaulting to 1000 [ 352.084895][T15025] dtv5100: wlen = 0, aborting. [ 352.092081][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 352.120702][ T9] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 352.133773][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 352.151761][ T9] usb 4-1: USB disconnect, device number 120 [ 352.163506][ T9357] usb 2-1: Using ep0 maxpacket: 16 [ 352.187009][ T9357] usb 2-1: unable to get BOS descriptor or descriptor too short [ 352.207256][ T9357] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 352.225146][ T9357] usb 2-1: config 9 has no interface number 0 [ 352.234439][ T9] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 352.244820][ T9357] usb 2-1: config 9 interface 129 has no altsetting 0 [ 352.257664][ T9357] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 352.268191][ T9357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.278505][ T9357] usb 2-1: Product: syz [ 352.288104][ T9357] usb 2-1: Manufacturer: syz [ 352.292834][ T9357] usb 2-1: SerialNumber: syz [ 352.600669][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2211'. [ 352.712325][ T9357] usb 2-1: bad CDC descriptors [ 352.727443][ T9357] usb 2-1: USB disconnect, device number 6 [ 352.994390][T15371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.042841][T15373] wlan0 speed is unknown, defaulting to 1000 [ 353.085090][ T9357] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 353.254166][ T9357] usb 2-1: Using ep0 maxpacket: 8 [ 353.273074][ T9357] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 353.293352][ T9357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.301382][ T9357] usb 2-1: Product: syz [ 353.318344][ T9357] usb 2-1: Manufacturer: syz [ 353.322981][ T9357] usb 2-1: SerialNumber: syz [ 353.331899][ T9357] usb 2-1: config 0 descriptor?? [ 353.387021][ T9] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 353.399287][T15383] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1048580, id = 0 [ 353.546284][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 353.554244][ T9357] usb 2-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 353.568117][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 353.577414][ T9] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 353.588931][ T9] usb 3-1: config 9 has no interface number 0 [ 353.596176][ T9] usb 3-1: config 9 interface 129 has no altsetting 0 [ 353.606012][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 353.619025][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.627713][ T9] usb 3-1: Product: syz [ 353.631923][ T9] usb 3-1: Manufacturer: syz [ 353.636660][ T9] usb 3-1: SerialNumber: syz [ 353.867148][ T10] usb 4-1: new full-speed USB device number 121 using dummy_hcd [ 354.037950][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 354.059975][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 354.080865][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 354.102990][ T9] usb 3-1: bad CDC descriptors [ 354.117315][ T10] usb 4-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=af.16 [ 354.131712][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.141247][ T9] usb 3-1: USB disconnect, device number 127 [ 354.151465][ T10] usb 4-1: Product: syz [ 354.159785][ T10] usb 4-1: Manufacturer: syz [ 354.165603][ T10] usb 4-1: SerialNumber: syz [ 354.303584][T15536] wlan0 speed is unknown, defaulting to 1000 [ 354.394109][ T10] pwc: Visionite VCS-UC300 USB webcam detected. [ 354.426948][ T10] pwc: Failed to set LED on/off time (-71) [ 354.433165][ T10] pwc: send_video_command error -71 [ 354.438802][ T10] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 354.448798][ T10] Philips webcam 4-1:1.0: probe with driver Philips webcam failed with error -71 [ 354.470303][ T10] usb 4-1: USB disconnect, device number 121 [ 354.645899][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 354.785227][T15613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2234'. [ 354.815130][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.828771][ T9] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 354.838056][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.846210][ T9] usb 3-1: Product: syz [ 354.850638][ T9] usb 3-1: Manufacturer: syz [ 354.855637][ T9] usb 3-1: SerialNumber: syz [ 354.865704][ T9] usb 3-1: config 0 descriptor?? [ 354.876267][ T9] usb 3-1: ucan: probing device on interface #0 [ 354.882665][ T9] usb 3-1: ucan: invalid EP count (0) [ 354.888168][ T9] usb 3-1: ucan: probe failed; try to update the device firmware [ 355.002638][T15616] pimreg: entered allmulticast mode [ 355.010042][T15616] pimreg: left allmulticast mode [ 355.083666][T15603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.096883][T15603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.115848][ T5824] usb 3-1: USB disconnect, device number 2 [ 355.195483][T15618] netlink: 'syz.3.2236': attribute type 63 has an invalid length. [ 355.206100][T15618] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2236'. [ 355.373681][ T9357] usb write operation failed. (-71) [ 355.385072][ T9357] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 355.396725][ T9357] dvbdev: DVB: registering new adapter (Terratec H7) [ 355.404066][ T9357] usb 2-1: media controller created [ 355.419021][ T9357] usb read operation failed. (-71) [ 355.425907][ T9357] usb write operation failed. (-71) [ 355.439966][ T9357] dvb_usb_az6007 2-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 355.467394][ T9357] usb 2-1: USB disconnect, device number 7 [ 355.480372][T15628] wlan0 speed is unknown, defaulting to 1000 [ 355.651689][ T5824] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 355.834844][ T5824] usb 4-1: Using ep0 maxpacket: 16 [ 355.868000][ T5824] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 355.893333][ T5824] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.903210][ T5824] usb 4-1: Product: syz [ 355.908162][ T5824] usb 4-1: Manufacturer: syz [ 355.912849][ T5824] usb 4-1: SerialNumber: syz [ 355.934070][ T5824] usb 4-1: config 0 descriptor?? [ 355.944074][ T9357] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 356.083412][ T10] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 356.115059][ T9357] usb 3-1: config index 0 descriptor too short (expected 20842, got 18) [ 356.126192][ T9357] usb 3-1: config 255 has too many interfaces: 47, using maximum allowed: 32 [ 356.136269][ T9357] usb 3-1: config 255 has an invalid descriptor of length 125, skipping remainder of the config [ 356.151152][ T9357] usb 3-1: config 255 has 0 interfaces, different from the descriptor's value: 47 [ 356.165191][ T9357] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0062, bcdDevice=56.78 [ 356.174840][ T9357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=2 [ 356.182843][ T9357] usb 3-1: Product: syz [ 356.187658][ T9357] usb 3-1: Manufacturer: syz [ 356.192268][ T9357] usb 3-1: SerialNumber: syz [ 356.237834][ T10] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 356.246139][ T10] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 356.256654][ T10] usb 2-1: config 8 has no interface number 0 [ 356.262788][ T10] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 356.274988][ T10] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 356.284881][ T10] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 356.298164][ T10] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 356.307372][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.321783][ T10] usb 2-1: NFC: intf ffff888031ac0000 id ffffffff8ed2ef60 [ 356.352745][ T5824] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 356.363548][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 356.374286][ T5824] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 356.382278][ T5824] usb 4-1: media controller created [ 356.397211][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.524980][ T10] usb 2-1: USB disconnect, device number 8 [ 356.599565][ T5824] zl10353_read_register: readreg error (reg=127, ret==0) [ 356.616090][ T5824] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 356.625719][ T5824] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 356.639137][ T5824] usb 4-1: USB disconnect, device number 122 [ 356.672896][ T5824] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 356.872941][T15755] wlan0 speed is unknown, defaulting to 1000 [ 357.000707][ T9357] usb 3-1: USB disconnect, device number 3 [ 357.085978][T15760] comedi comedi2: fl512: I/O port conflict (0x6,16) [ 357.123105][T15762] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2251'. [ 357.235977][T15768] wlan0 speed is unknown, defaulting to 1000 [ 357.444192][ T9357] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 357.603758][ T9357] usb 2-1: Using ep0 maxpacket: 16 [ 357.615803][ T9357] usb 2-1: unable to get BOS descriptor or descriptor too short [ 357.634566][ T9357] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 357.642937][ T9357] usb 2-1: config 9 has no interface number 0 [ 357.653743][ T9357] usb 2-1: config 9 interface 129 has no altsetting 0 [ 357.675016][ T9357] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 357.689422][ T9357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.708730][T15783] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2260'. [ 357.713458][ T9357] usb 2-1: Product: syz [ 357.730292][ T9357] usb 2-1: Manufacturer: syz [ 357.738946][ T9357] usb 2-1: SerialNumber: syz [ 357.796762][ T5826] Bluetooth: unknown link type 9 [ 357.803758][ T5826] Bluetooth: hci4: connection err: -111 [ 357.819356][T15787] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 357.825897][T15787] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 357.834051][T15787] vhci_hcd vhci_hcd.0: Device attached [ 357.851653][T15787] binder: 15786:15787 ioctl 400c620e 200000002f00 returned -22 [ 357.864924][T15788] vhci_hcd: connection closed [ 357.865395][ T8805] vhci_hcd vhci_hcd.2: stop threads [ 357.875318][ T8805] vhci_hcd vhci_hcd.2: release socket [ 357.880715][ T8805] vhci_hcd vhci_hcd.2: disconnect device [ 358.038637][ T9357] usb 2-1: bad CDC descriptors [ 358.052276][ T9357] usb 2-1: USB disconnect, device number 9 [ 358.565561][T15811] wlan0 speed is unknown, defaulting to 1000 [ 358.764852][ T9357] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 358.954217][ T9357] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 358.975978][ T9357] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.985709][ T9357] usb 4-1: Product: syz [ 358.991952][ T9357] usb 4-1: Manufacturer: syz [ 359.030401][ T9357] usb 4-1: SerialNumber: syz [ 359.043211][ T9357] usb 4-1: config 0 descriptor?? [ 359.261879][ T9357] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 359.389889][T15935] wlan0 speed is unknown, defaulting to 1000 [ 359.443411][ T24] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 359.594953][ T24] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 359.603153][ T24] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 359.613551][ T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 359.622819][ T24] usb 2-1: config 8 has no interface number 0 [ 359.638035][ T24] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 359.659531][ T24] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 359.671768][ T24] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 359.687987][ T24] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 359.698990][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.718597][ T24] usb 2-1: NFC: intf ffff888032cc5000 id ffffffff8ed2ef60 [ 359.773450][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 359.817407][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 359.826577][ T10] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 359.835069][ T10] usb 3-1: config 9 has no interface number 0 [ 359.841224][ T10] usb 3-1: config 9 interface 129 has no altsetting 0 [ 359.853773][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 359.863173][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.872039][ T10] usb 3-1: Product: syz [ 359.876532][ T10] usb 3-1: Manufacturer: syz [ 359.881428][ T10] usb 3-1: SerialNumber: syz [ 359.918577][ T24] usb 2-1: USB disconnect, device number 10 [ 360.291159][ T9357] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 360.334856][ T9357] usb 4-1: USB disconnect, device number 123 [ 360.648554][T16022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.676979][T16015] wlan0 speed is unknown, defaulting to 1000 [ 360.920291][ T10] usb 3-1: bad CDC descriptors [ 360.944256][ T10] usb 3-1: USB disconnect, device number 4 [ 361.021139][T16069] veth1_to_bond: entered allmulticast mode [ 361.031799][T16068] veth1_to_bond: left allmulticast mode [ 361.113587][ T5908] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 361.264752][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 361.272853][ T5908] usb 4-1: unable to get BOS descriptor or descriptor too short [ 361.282748][ T5908] usb 4-1: config 9 has an invalid interface number: 129 but max is 0 [ 361.292273][ T5908] usb 4-1: config 9 has no interface number 0 [ 361.299004][ T5908] usb 4-1: config 9 interface 129 has no altsetting 0 [ 361.309968][ T5908] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 361.319556][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.328288][ T5908] usb 4-1: Product: syz [ 361.332743][ T5908] usb 4-1: Manufacturer: syz [ 361.337501][ T5908] usb 4-1: SerialNumber: syz [ 361.371174][T16085] wlan0 speed is unknown, defaulting to 1000 [ 361.483663][ T55] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 361.647747][ T55] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 361.657590][ T55] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 361.671748][ T55] usb 3-1: config 8 has no interface number 0 [ 361.680721][ T5908] usb 4-1: bad CDC descriptors [ 361.688353][ T55] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.701220][ T5908] usb 4-1: USB disconnect, device number 124 [ 361.716577][ T55] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 361.735917][ T9357] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 361.738655][ T55] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 361.769809][ T55] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 361.793753][ T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.822412][T16096] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2303'. [ 361.825208][ T55] usb 3-1: NFC: intf ffff88807eb21000 id ffffffff8ed2ef60 [ 361.835925][T16096] bpf: Bad value for 'gid' [ 361.848068][T16097] FAULT_INJECTION: forcing a failure. [ 361.848068][T16097] name failslab, interval 1, probability 0, space 0, times 0 [ 361.869626][T16097] CPU: 1 UID: 0 PID: 16097 Comm: syz.3.2302 Not tainted syzkaller #0 PREEMPT(full) [ 361.869650][T16097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 361.869673][T16097] Call Trace: [ 361.869682][T16097] [ 361.869690][T16097] dump_stack_lvl+0x189/0x250 [ 361.869719][T16097] ? __pfx____ratelimit+0x10/0x10 [ 361.869743][T16097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.869764][T16097] ? __pfx__printk+0x10/0x10 [ 361.869790][T16097] ? __pfx___might_resched+0x10/0x10 [ 361.869815][T16097] should_fail_ex+0x414/0x560 [ 361.869844][T16097] should_failslab+0xa8/0x100 [ 361.869870][T16097] __kmalloc_cache_noprof+0x84/0x700 [ 361.869893][T16097] ? __request_region+0x5f/0xe0 [ 361.869918][T16097] __request_region+0x5f/0xe0 [ 361.869941][T16097] serial8250_request_std_resource+0x177/0x360 [ 361.869962][T16097] ? serial8250_config_port+0x8c/0x5370 [ 361.869985][T16097] serial8250_config_port+0x94/0x5370 [ 361.870010][T16097] ? kasan_quarantine_put+0xdd/0x220 [ 361.870030][T16097] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.870061][T16097] ? __release_region+0x2d6/0x360 [ 361.870081][T16097] ? kfree+0x19a/0x6e0 [ 361.870097][T16097] ? __phys_addr+0xd3/0x180 [ 361.870122][T16097] ? __pfx_serial8250_config_port+0x10/0x10 [ 361.870143][T16097] ? __release_region+0x2d6/0x360 [ 361.870178][T16097] ? __pfx___release_region+0x10/0x10 [ 361.870204][T16097] univ8250_config_port+0x3d7/0x9a0 [ 361.870232][T16097] ? serial8250_release_std_resource+0x135/0x2e0 [ 361.870255][T16097] uart_ioctl+0x13cb/0x1a70 [ 361.870296][T16097] ? __pfx_uart_ioctl+0x10/0x10 [ 361.870339][T16097] ? __fget_files+0x2a/0x420 [ 361.870362][T16097] ? tty_jobctrl_ioctl+0x369/0xb70 [ 361.870381][T16097] ? __fget_files+0x3a0/0x420 [ 361.870397][T16097] ? __fget_files+0x2a/0x420 [ 361.870417][T16097] tty_ioctl+0x929/0xde0 [ 361.870442][T16097] ? __pfx_tty_ioctl+0x10/0x10 [ 361.870465][T16097] __se_sys_ioctl+0xfc/0x170 [ 361.870493][T16097] do_syscall_64+0xfa/0xfa0 [ 361.870519][T16097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.870537][T16097] ? clear_bhb_loop+0x60/0xb0 [ 361.870559][T16097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.870576][T16097] RIP: 0033:0x7f66f358f6c9 [ 361.870593][T16097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.870608][T16097] RSP: 002b:00007f66f43b3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 361.870628][T16097] RAX: ffffffffffffffda RBX: 00007f66f37e5fa0 RCX: 00007f66f358f6c9 [ 361.870640][T16097] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 361.870652][T16097] RBP: 00007f66f43b3090 R08: 0000000000000000 R09: 0000000000000000 [ 361.870663][T16097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.870674][T16097] R13: 00007f66f37e6038 R14: 00007f66f37e5fa0 R15: 00007fff729ff968 [ 361.870707][T16097] [ 362.163424][ T9357] usb 2-1: Using ep0 maxpacket: 16 [ 362.175784][ T9357] usb 2-1: unable to get BOS descriptor or descriptor too short [ 362.186738][ T24] usb 3-1: USB disconnect, device number 5 [ 362.192025][ T9357] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 362.226827][ T9357] usb 2-1: config 9 has no interface number 0 [ 362.243669][ T9357] usb 2-1: config 9 interface 129 has no altsetting 0 [ 362.256175][ T9357] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 362.276759][ T9357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.285810][ T9357] usb 2-1: Product: syz [ 362.297699][ T9357] usb 2-1: Manufacturer: syz [ 362.302506][ T9357] usb 2-1: SerialNumber: syz [ 362.669176][ T9357] usb 2-1: bad CDC descriptors [ 362.684094][ T9357] usb 2-1: USB disconnect, device number 11 [ 363.113373][ T9357] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 363.283419][ T9357] usb 2-1: Using ep0 maxpacket: 16 [ 363.307174][ T9357] usb 2-1: unable to get BOS descriptor or descriptor too short [ 363.329598][ T9357] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 363.338301][ T9357] usb 2-1: config 9 has no interface number 0 [ 363.347673][ T9357] usb 2-1: config 9 interface 129 has no altsetting 0 [ 363.365106][ T9357] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 363.374787][ T9357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.383160][ T9357] usb 2-1: Product: syz [ 363.394959][ T9357] usb 2-1: Manufacturer: syz [ 363.399896][ T9357] usb 2-1: SerialNumber: syz [ 363.823555][ T55] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 363.933411][ T10] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 363.993337][ T55] usb 4-1: Using ep0 maxpacket: 32 [ 364.000313][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 364.022345][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 364.048901][ T55] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD2, changing to 0x82 [ 364.093320][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 364.101049][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 364.121215][ T10] usb 3-1: config 0 has no interface number 0 [ 364.133554][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.145875][ T55] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 364.161170][ T55] usb 4-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 364.170705][ T55] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.172868][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.183591][ T55] usb 4-1: Product: syz [ 364.213359][ T55] usb 4-1: Manufacturer: syz [ 364.217722][ T10] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 364.218163][ T55] usb 4-1: SerialNumber: syz [ 364.248345][ T10] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 364.257866][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.273120][ T55] usb 4-1: config 0 descriptor?? [ 364.292809][ T55] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input41 [ 364.296494][ T10] usb 3-1: config 0 descriptor?? [ 364.340787][ T9357] usb 2-1: bad CDC descriptors [ 364.367859][ T9357] usb 2-1: USB disconnect, device number 12 [ 364.506153][ T24] usb 4-1: USB disconnect, device number 125 [ 364.853425][ T9357] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 364.936609][ T10] uclogic 0003:28BD:0071.0021: failed retrieving string descriptor #100: -71 [ 364.946416][ T10] uclogic 0003:28BD:0071.0021: failed retrieving pen parameters: -71 [ 364.954602][ T10] uclogic 0003:28BD:0071.0021: pen probing failed: -71 [ 364.961495][ T10] uclogic 0003:28BD:0071.0021: failed probing parameters: -71 [ 364.969234][ T10] uclogic 0003:28BD:0071.0021: probe with driver uclogic failed with error -71 [ 364.982055][ T10] usb 3-1: USB disconnect, device number 6 [ 365.003383][ T9357] usb 2-1: Using ep0 maxpacket: 8 [ 365.010311][ T9357] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.023013][ T9357] usb 2-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 365.033170][ T9357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.043364][ T9357] usb 2-1: Product: syz [ 365.047558][ T9357] usb 2-1: Manufacturer: syz [ 365.052223][ T9357] usb 2-1: SerialNumber: syz [ 365.061485][ T9357] usb 2-1: config 0 descriptor?? [ 365.079734][ T9357] streamzap 2-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 365.107270][T16264] vivid-000: disconnect [ 365.113767][T16264] netlink: 'syz.3.2330': attribute type 4 has an invalid length. [ 365.124692][T16264] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2330'. [ 365.136902][T16263] vivid-000: reconnect [ 365.282821][ T9357] usb 2-1: USB disconnect, device number 13 [ 365.803371][ T24] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 365.953442][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 365.960713][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 365.969577][ T24] usb 4-1: config 9 has an invalid interface number: 129 but max is 0 [ 365.973386][ T9357] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 365.977863][ T24] usb 4-1: config 9 has no interface number 0 [ 365.991450][ T24] usb 4-1: config 9 interface 129 has no altsetting 0 [ 366.000379][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 366.009507][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.017554][ T24] usb 4-1: Product: syz [ 366.021713][ T24] usb 4-1: Manufacturer: syz [ 366.026523][ T24] usb 4-1: SerialNumber: syz [ 366.135065][ T9357] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 366.143978][ T10] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 366.151666][ T9357] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 366.163086][ T9357] usb 3-1: config 8 has no interface number 0 [ 366.169689][ T9357] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 366.180564][ T9357] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 366.190421][ T9357] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 366.203572][ T9357] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 366.212652][ T9357] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.230874][ T9357] usb 3-1: NFC: intf ffff888028057000 id ffffffff8ed2ef60 [ 366.313319][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 366.320523][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.00 [ 366.329866][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.341716][ T10] usb 2-1: config 0 descriptor?? [ 366.361569][ T24] usb 4-1: bad CDC descriptors [ 366.381500][ T24] usb 4-1: USB disconnect, device number 126 [ 366.433587][ T55] usb 3-1: USB disconnect, device number 7 [ 366.567121][T16284] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 366.631996][T16294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2341'. [ 366.672841][ T55] usb 2-1: USB disconnect, device number 14 [ 366.775610][T16302] wlan0 speed is unknown, defaulting to 1000 [ 366.976035][ T5908] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 367.145471][ T5908] usb 4-1: Using ep0 maxpacket: 16 [ 367.159019][ T5908] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.170043][ T5908] usb 4-1: config 0 has no interface number 0 [ 367.176569][ T5908] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.189139][ T5908] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 367.199994][ T5908] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 367.209460][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.230357][ T5908] usb 4-1: config 0 descriptor?? [ 367.417582][T16424] wlan0 speed is unknown, defaulting to 1000 [ 367.462331][T16434] resource: Trying to free nonexistent resource <0x00000000000002e8-0x00000000000002ef> [ 367.474527][T16434] FAULT_INJECTION: forcing a failure. [ 367.474527][T16434] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 367.490099][T16434] CPU: 0 UID: 0 PID: 16434 Comm: syz.1.2353 Not tainted syzkaller #0 PREEMPT(full) [ 367.490127][T16434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 367.490142][T16434] Call Trace: [ 367.490153][T16434] [ 367.490161][T16434] dump_stack_lvl+0x189/0x250 [ 367.490187][T16434] ? __pfx____ratelimit+0x10/0x10 [ 367.490211][T16434] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.490232][T16434] ? __pfx__printk+0x10/0x10 [ 367.490252][T16434] ? fs_reclaim_acquire+0x7d/0x100 [ 367.490285][T16434] should_fail_ex+0x414/0x560 [ 367.490315][T16434] prepare_alloc_pages+0x22b/0x650 [ 367.490346][T16434] __alloc_frozen_pages_noprof+0x123/0x370 [ 367.490376][T16434] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 367.490409][T16434] ? policy_nodemask+0x27c/0x720 [ 367.490438][T16434] alloc_pages_mpol+0x232/0x4a0 [ 367.490468][T16434] alloc_pages_noprof+0xa9/0x190 [ 367.490501][T16434] get_zeroed_page_noprof+0x1a/0x90 [ 367.490525][T16434] uart_startup+0x349/0x9f0 [ 367.490551][T16434] uart_ioctl+0x13dd/0x1a70 [ 367.490592][T16434] ? __pfx_uart_ioctl+0x10/0x10 [ 367.490635][T16434] ? __fget_files+0x2a/0x420 [ 367.490659][T16434] ? tty_jobctrl_ioctl+0x369/0xb70 [ 367.490679][T16434] ? __fget_files+0x3a0/0x420 [ 367.490696][T16434] ? __fget_files+0x2a/0x420 [ 367.490718][T16434] tty_ioctl+0x929/0xde0 [ 367.490742][T16434] ? __pfx_tty_ioctl+0x10/0x10 [ 367.490766][T16434] __se_sys_ioctl+0xfc/0x170 [ 367.490792][T16434] do_syscall_64+0xfa/0xfa0 [ 367.490818][T16434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.490835][T16434] ? clear_bhb_loop+0x60/0xb0 [ 367.490853][T16434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.490868][T16434] RIP: 0033:0x7f0e0a78f6c9 [ 367.490884][T16434] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.490899][T16434] RSP: 002b:00007f0e0b708038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 367.490919][T16434] RAX: ffffffffffffffda RBX: 00007f0e0a9e5fa0 RCX: 00007f0e0a78f6c9 [ 367.490932][T16434] RDX: 0000000000000000 RSI: 0000000000005453 RDI: 0000000000000003 [ 367.490944][T16434] RBP: 00007f0e0b708090 R08: 0000000000000000 R09: 0000000000000000 [ 367.490955][T16434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.490966][T16434] R13: 00007f0e0a9e6038 R14: 00007f0e0a9e5fa0 R15: 00007ffd80363dd8 [ 367.490997][T16434] [ 367.941846][ T5908] uclogic 0003:28BD:0071.0022: failed retrieving string descriptor #100: -71 [ 367.951072][ T5908] uclogic 0003:28BD:0071.0022: failed retrieving pen parameters: -71 [ 367.959531][ T5908] uclogic 0003:28BD:0071.0022: pen probing failed: -71 [ 367.968271][ T5908] uclogic 0003:28BD:0071.0022: failed probing parameters: -71 [ 367.976982][ T5908] uclogic 0003:28BD:0071.0022: probe with driver uclogic failed with error -71 [ 367.988983][ T5908] usb 4-1: USB disconnect, device number 127 [ 368.104148][ T9] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 368.112329][ T9357] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 368.152084][ T30] audit: type=1800 audit(1762799491.039:12): pid=16539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2358" name="bus" dev="tmpfs" ino=1465 res=0 errno=0 [ 368.273476][ T9357] usb 3-1: Using ep0 maxpacket: 32 [ 368.280608][ T9] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 368.294691][ T9357] usb 3-1: config 0 has an invalid interface number: 255 but max is 0 [ 368.303395][ T9] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 368.314518][ T9357] usb 3-1: config 0 has no interface number 0 [ 368.320635][ T9357] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 368.332494][ T9] usb 2-1: config 8 has no interface number 0 [ 368.339409][ T9] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 368.350744][ T9357] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 368.364569][ T9] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 368.374938][ T9357] usb 3-1: config 0 interface 255 has no altsetting 0 [ 368.381865][ T9] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 368.399473][ T9] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 368.410076][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.410236][ T9357] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 368.426288][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2361'. [ 368.438968][ T9357] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.448132][ T9357] usb 3-1: Product: syz [ 368.473296][ T9] usb 2-1: NFC: intf ffff88807fee7000 id ffffffff8ed2ef60 [ 368.482919][ T9357] usb 3-1: Manufacturer: syz [ 368.492553][ T9357] usb 3-1: SerialNumber: syz [ 368.511455][ T9357] usb 3-1: config 0 descriptor?? [ 368.637094][T16552] netlink: 'syz.3.2363': attribute type 4 has an invalid length. [ 368.686992][ T9] usb 2-1: USB disconnect, device number 15 [ 368.735078][ T9357] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 369.044766][T16559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2366'. [ 369.063906][ T5908] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 369.224763][T16568] overlayfs: failed to clone upperpath [ 369.230886][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 369.244223][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 369.263345][ T5908] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 369.283667][ T5908] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 369.292742][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.306398][ T5908] usb 4-1: config 0 descriptor?? [ 369.599679][T16575] netlink: 220 bytes leftover after parsing attributes in process `syz.1.2373'. [ 369.927984][ T5908] usbhid 4-1:0.0: can't add hid device: -71 [ 369.940193][ T5908] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 369.955687][ T5908] usb 4-1: USB disconnect, device number 2 [ 370.141494][T16533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.150420][T16533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.548369][T16590] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2379'. [ 370.768768][ T9357] gspca_stk1135: reg_w 0x203 err -71 [ 370.775180][ T9357] gspca_stk1135: serial bus timeout: status=0x00 [ 370.781503][ T9357] gspca_stk1135: Sensor write failed [ 370.786953][ T9357] gspca_stk1135: serial bus timeout: status=0x00 [ 370.793343][ T9357] gspca_stk1135: Sensor write failed [ 370.798644][ T9357] gspca_stk1135: serial bus timeout: status=0x00 [ 370.805207][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 370.813479][ T9357] gspca_stk1135: Sensor read failed [ 370.818779][ T9357] gspca_stk1135: serial bus timeout: status=0x00 [ 370.826182][ T9357] gspca_stk1135: Sensor read failed [ 370.831466][ T9357] gspca_stk1135: Detected sensor type unknown (0x0) [ 370.838106][ T9357] gspca_stk1135: serial bus timeout: status=0x00 [ 370.844551][ T9357] gspca_stk1135: Sensor read failed [ 370.849761][ T9357] gspca_stk1135: serial bus timeout: status=0x00 [ 370.856124][ T9357] gspca_stk1135: Sensor read failed [ 370.861335][ T9357] gspca_stk1135: serial bus timeout: status=0x00 [ 370.868676][ T9357] gspca_stk1135: Sensor write failed [ 370.874092][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 370.881797][ T9357] gspca_stk1135: serial bus timeout: status=0x00 [ 370.888714][ T9357] gspca_stk1135: Sensor write failed [ 370.894473][ T9357] stk1135 3-1:0.255: probe with driver stk1135 failed with error -71 [ 370.905188][ T9357] usb 3-1: USB disconnect, device number 8 [ 370.973458][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 370.980379][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 370.988930][ T9] usb 4-1: config 0 has no interface number 0 [ 370.997646][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 371.006760][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.015018][ T9] usb 4-1: Product: syz [ 371.019315][ T9] usb 4-1: Manufacturer: syz [ 371.024086][ T9] usb 4-1: SerialNumber: syz [ 371.030434][ T9] usb 4-1: config 0 descriptor?? [ 371.035664][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 371.042532][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.052138][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 371.061018][ T10] usb 2-1: config 0 has no interface number 0 [ 371.067531][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.080652][ T10] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.090551][ T10] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 371.099663][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.110312][ T10] usb 2-1: config 0 descriptor?? [ 371.253543][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 371.272724][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 371.601018][T16616] overlayfs: failed to clone lowerpath [ 371.610726][T16617] overlayfs: failed to clone lowerpath [ 371.610780][T16616] overlayfs: failed to clone lowerpath [ 371.651901][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 371.652394][ T5908] usb 4-1: USB disconnect, device number 3 [ 371.688984][ T5908] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 371.696409][T16619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2391'. [ 371.705246][ T5908] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 371.713217][T16619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2391'. [ 371.731094][ T5908] quatech2 4-1:0.51: device disconnected [ 371.734632][T16619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2391'. [ 371.748074][ T10] uclogic 0003:28BD:0071.0023: failed retrieving string descriptor #100: -71 [ 371.758869][T16619] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2391'. [ 371.768053][ T10] uclogic 0003:28BD:0071.0023: failed retrieving pen parameters: -71 [ 371.782156][ T10] uclogic 0003:28BD:0071.0023: pen probing failed: -71 [ 371.790409][ T10] uclogic 0003:28BD:0071.0023: failed probing parameters: -71 [ 371.798222][ T10] uclogic 0003:28BD:0071.0023: probe with driver uclogic failed with error -71 [ 371.810386][ T10] usb 2-1: USB disconnect, device number 16 [ 372.001308][T16632] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2395'. [ 372.171055][T16636] 9p: Bad value for 'rfdno' [ 372.236846][T16642] comedi comedi2: fl512: I/O port conflict (0x6,16) [ 372.680066][T16669] overlayfs: failed to resolve './file1/file0': -2 [ 372.843474][ T24] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 372.863444][ T5908] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 373.003536][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 373.012306][ T24] usb 2-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 373.022007][ T5908] usb 3-1: Using ep0 maxpacket: 16 [ 373.027197][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.035380][ T24] usb 2-1: Product: syz [ 373.039835][ T24] usb 2-1: Manufacturer: syz [ 373.044765][ T24] usb 2-1: SerialNumber: syz [ 373.050253][ T5908] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.059180][ T5908] usb 3-1: config 0 has no interface number 0 [ 373.066383][ T24] usb 2-1: config 0 descriptor?? [ 373.071597][ T5908] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.082603][ T5908] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.094312][ T24] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 373.102251][ T24] pctv452e: pctv452e_power_ctrl: 1 [ 373.102251][ T24] [ 373.109767][ T5908] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 373.118938][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.127401][ T24] usb 2-1: selecting invalid altsetting 3 [ 373.133142][ T24] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 373.133142][ T24] [ 373.144549][ T24] dvb-usb: bulk message failed: -22 (5/0) [ 373.151132][ T5908] usb 3-1: config 0 descriptor?? [ 373.166063][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 373.176058][ T24] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 373.184704][ T24] usb 2-1: media controller created [ 373.190369][ T24] dvb-usb: bulk message failed: -22 (8/0) [ 373.196454][ T24] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 373.204814][ T24] dvb-usb: MAC address reading failed. [ 373.218613][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.260133][ T24] DVB: Unable to find symbol stb0899_attach() [ 373.266404][ T24] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 373.333336][ T24] rc_core: IR keymap rc-tt-1500 not found [ 373.339139][ T24] Registered IR keymap rc-empty [ 373.345349][ T24] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 373.359005][ T24] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input42 [ 373.375615][ T24] dvb-usb: schedule remote query interval to 100 msecs. [ 373.382616][ T24] pctv452e: pctv452e_power_ctrl: 0 [ 373.382616][ T24] [ 373.401512][ T24] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 373.485611][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 373.491589][ T24] dvb-usb: error -22 while querying for an remote control event. [ 373.626671][ T5909] dvb-usb: bulk message failed: -22 (4/0) [ 373.632487][ T5909] dvb-usb: error -22 while querying for an remote control event. [ 373.765443][ T24] dvb-usb: bulk message failed: -22 (4/0) [ 373.771254][ T24] dvb-usb: error -22 while querying for an remote control event. [ 373.780553][ T5908] uclogic 0003:28BD:0071.0024: failed retrieving string descriptor #100: -71 [ 373.781932][ T10] usb 2-1: USB disconnect, device number 17 [ 373.795657][ T5908] uclogic 0003:28BD:0071.0024: failed retrieving pen parameters: -71 [ 373.823221][ T5908] uclogic 0003:28BD:0071.0024: pen probing failed: -71 [ 373.831652][ T5908] uclogic 0003:28BD:0071.0024: failed probing parameters: -71 [ 373.849157][ T5908] uclogic 0003:28BD:0071.0024: probe with driver uclogic failed with error -71 [ 373.875820][ T5908] usb 3-1: USB disconnect, device number 9 [ 373.969753][ T10] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 374.032019][T16805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2420'. [ 374.160301][T16813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.716853][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 374.812869][T16829] wlan0 speed is unknown, defaulting to 1000 [ 374.893350][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 374.921769][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.00 [ 374.954983][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.004300][ T10] usb 3-1: config 0 descriptor?? [ 375.028112][T16840] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.037091][T16841] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.103537][T16845] blktrace: Concurrent blktraces are not allowed on loop4 [ 375.216042][T16821] program syz.2.2426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 375.233163][T16821] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 375.298272][ T9] usb 3-1: USB disconnect, device number 10 [ 375.471959][T16854] can: request_module (can-proto-0) failed. [ 375.613410][ T5908] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 375.765004][ T5908] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 375.773145][ T5908] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 375.783889][ T5908] usb 2-1: config 8 has no interface number 0 [ 375.791553][ T5908] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 375.802365][ T5908] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 375.812140][ T5908] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 375.825237][ T5908] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 375.834303][ T5908] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.847246][ T5908] usb 2-1: NFC: intf ffff8880724d1000 id ffffffff8ed2ef60 [ 376.044790][T16863] comedi comedi3: comedi_test: 20263 microvolt, 5 microsecond waveform attached [ 376.063124][ T5908] usb 2-1: USB disconnect, device number 18 [ 376.174543][T16870] pimreg: entered allmulticast mode [ 376.180939][T16870] pimreg: left allmulticast mode [ 376.695555][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 376.879759][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.897398][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.907697][ T10] usb 4-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 376.918396][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.934616][ T10] usb 4-1: config 0 descriptor?? [ 377.117369][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 377.293645][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 377.307547][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 377.324772][ T9] usb 2-1: config 0 has no interface number 0 [ 377.338941][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 377.377272][ T9] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.398847][ T9] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 377.419613][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.431676][T17001] wlan0 speed is unknown, defaulting to 1000 [ 377.448033][ T9] usb 2-1: config 0 descriptor?? [ 377.759346][ T10] hid-led 0003:27B8:01ED.0025: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.3-1/input0 [ 377.837833][ T10] hid-led 0003:27B8:01ED.0025: ThingM blink(1) initialized [ 377.868389][ T9] usbhid 2-1:0.1: can't add hid device: -71 [ 377.878519][ T9] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 377.921492][ T9] usb 2-1: USB disconnect, device number 19 [ 377.970507][T16876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.991285][T17105] wlan0 speed is unknown, defaulting to 1000 [ 377.994603][T16876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.629579][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.636102][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.063421][ T5909] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 379.213326][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 379.221509][ T5909] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 379.230063][ T5909] usb 2-1: config 0 has no interface number 0 [ 379.237019][ T5909] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.253511][ T5909] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.266907][ T5909] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 379.276269][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.296344][ T5909] usb 2-1: config 0 descriptor?? [ 379.493767][ T5908] usb 4-1: USB disconnect, device number 4 [ 379.724222][ T5909] usbhid 2-1:0.1: can't add hid device: -71 [ 379.730361][ T5909] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 379.753607][ T5909] usb 2-1: USB disconnect, device number 20 [ 379.780052][T17276] tun0: tun_chr_ioctl cmd 21731 [ 379.791402][T17276] bond_slave_0: entered promiscuous mode [ 379.798216][T17276] bond_slave_0: entered allmulticast mode [ 380.203335][ T5908] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 380.274620][ T5909] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 380.365559][ T5908] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 380.374600][ T5908] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 380.388581][ T5908] usb 4-1: config 8 has no interface number 0 [ 380.397221][ T5908] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 380.409512][ T5908] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 380.421235][ T5908] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 380.437314][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 380.448433][ T5908] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 380.457996][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 8 [ 380.471384][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.482517][ T5909] usb 3-1: New USB device found, idVendor=0499, idProduct=103e, bcdDevice=4e.18 [ 380.492464][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.513838][ T5908] usb 4-1: NFC: intf ffff888029270000 id ffffffff8ed2ef60 [ 380.522844][ T5909] usb 3-1: Product: syz [ 380.527974][ T5909] usb 3-1: Manufacturer: syz [ 380.532588][ T5909] usb 3-1: SerialNumber: syz [ 380.547502][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 380.565246][ T5909] usb 3-1: config 0 descriptor?? [ 380.732290][ T10] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 380.732643][ T5908] usb 4-1: USB disconnect, device number 5 [ 380.755411][ T10] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 380.773944][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.792294][ T10] usb 2-1: Product: syz [ 380.793214][T17382] rtc_cmos 00:00: Alarms can be up to one day in the future [ 380.808123][ T10] usb 2-1: Manufacturer: syz [ 380.815512][ T5909] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 380.832902][ T10] usb 2-1: SerialNumber: syz [ 380.866023][ T5909] usb 3-1: USB disconnect, device number 11 [ 380.915874][ T5823] udevd[5823]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.163862][ T10] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 381.205915][ T10] usb 2-1: USB disconnect, device number 21 [ 381.581906][T17394] loop5: detected capacity change from 0 to 7 [ 381.600553][T17394] Dev loop5: unable to read RDB block 7 [ 381.606959][T17394] loop5: unable to read partition table [ 381.612883][T17394] loop5: partition table beyond EOD, truncated [ 381.620834][T17394] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 381.783317][ T5908] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 381.966738][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 381.978294][ T5908] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.989204][ T5908] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 382.032429][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.056690][ T5908] usb 3-1: config 0 descriptor?? [ 382.163361][ T9357] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 382.334657][ T9357] usb 2-1: Using ep0 maxpacket: 32 [ 382.342511][ T9357] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 382.359975][ T9357] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 382.369385][ T9357] usb 2-1: can't read configurations, error -61 [ 382.448055][T17415] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2499'. [ 382.494124][ T5908] keytouch 0003:0926:3333.0026: fixing up Keytouch IEC report descriptor [ 382.503371][ T9357] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 382.535098][ T5908] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0026/input/input43 [ 382.667184][ T9357] usb 2-1: Using ep0 maxpacket: 32 [ 382.685770][ T5908] keytouch 0003:0926:3333.0026: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 382.691613][ T9357] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 382.739639][ T9357] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 382.751315][ T5908] usb 3-1: USB disconnect, device number 12 [ 382.759155][ T9357] usb 2-1: can't read configurations, error -61 [ 382.787229][ T9357] usb usb2-port1: attempt power cycle [ 382.850318][T17420] fido_id[17420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 383.038551][T17427] netlink: 'syz.3.2503': attribute type 10 has an invalid length. [ 383.048808][T17427] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2503'. [ 383.058407][T17427] bond0: entered promiscuous mode [ 383.064951][T17427] bond_slave_1: entered promiscuous mode [ 383.071337][T17427] bridge0: port 3(bond0) entered blocking state [ 383.077996][T17427] bridge0: port 3(bond0) entered disabled state [ 383.084796][T17427] bond0: entered allmulticast mode [ 383.089989][T17427] bond_slave_1: entered allmulticast mode [ 383.098490][T17427] bridge0: port 3(bond0) entered blocking state [ 383.104938][T17427] bridge0: port 3(bond0) entered forwarding state [ 383.163498][ T9357] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 383.196490][ T9357] usb 2-1: Using ep0 maxpacket: 32 [ 383.202395][ T9357] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 383.212537][ T9357] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 383.221079][ T9357] usb 2-1: can't read configurations, error -61 [ 383.353481][ T9357] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 383.375171][ T9357] usb 2-1: Using ep0 maxpacket: 32 [ 383.381035][ T9357] usb 2-1: too many configurations: 53, using maximum allowed: 8 [ 383.390493][ T9357] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 383.398145][ T9357] usb 2-1: can't read configurations, error -61 [ 383.404830][ T9357] usb usb2-port1: unable to enumerate USB device [ 383.423357][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 383.503514][ T5869] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 383.573730][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 383.582717][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 383.588935][T17439] wlan0 speed is unknown, defaulting to 1000 [ 383.597072][ T9] usb 4-1: config 9 has an invalid interface number: 129 but max is 0 [ 383.606685][ T9] usb 4-1: config 9 has no interface number 0 [ 383.612800][ T9] usb 4-1: config 9 interface 129 has no altsetting 0 [ 383.622760][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 383.632675][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.641300][ T9] usb 4-1: Product: syz [ 383.645921][ T9] usb 4-1: Manufacturer: syz [ 383.650526][ T9] usb 4-1: SerialNumber: syz [ 383.655298][ T5869] usb 3-1: Using ep0 maxpacket: 8 [ 383.676302][ T5869] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 383.689721][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.718578][ T5869] usb 3-1: Product: syz [ 383.722810][ T5869] usb 3-1: Manufacturer: syz [ 383.739295][ T5869] usb 3-1: SerialNumber: syz [ 383.968549][ T5869] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 384.178591][T17435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.192677][T17435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.203449][ T5869] usb 3-1: USB disconnect, device number 13 [ 384.224552][ T5869] usblp0: removed [ 385.118286][T17563] pimreg: entered allmulticast mode [ 385.126213][T17563] pimreg: left allmulticast mode [ 385.168828][T17562] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2515'. [ 385.323365][ T5869] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 385.413377][ T10] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 385.484240][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 385.493875][ T5869] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 385.502486][ T5869] usb 3-1: config 0 has no interface number 0 [ 385.510175][ T5869] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 385.528142][ T5869] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 385.538627][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 385.548128][ T5869] usb 3-1: Product: syz [ 385.552469][ T5869] usb 3-1: SerialNumber: syz [ 385.563315][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 385.568732][ T5869] usb 3-1: config 0 descriptor?? [ 385.580883][ T5869] cm109 3-1:0.8: invalid payload size 255, expected 4 [ 385.592084][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.606307][ T5869] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input44 [ 385.617938][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1048, setting to 1024 [ 385.630810][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 385.648912][ T10] usb 2-1: New USB device found, idVendor=093a, idProduct=8003, bcdDevice= 0.40 [ 385.658423][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.667485][ T10] usb 2-1: Product: syz [ 385.671792][ T10] usb 2-1: Manufacturer: syz [ 385.676488][ T10] usb 2-1: SerialNumber: syz [ 385.696771][T17562] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 385.901458][T17570] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2520'. [ 385.909978][ T10] usbhid 2-1:1.0: can't add hid device: -22 [ 385.939477][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -22 [ 385.964597][ T10] usb 2-1: USB disconnect, device number 26 [ 386.127290][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 386.127747][ T5909] usb 3-1: USB disconnect, device number 14 [ 386.134269][ C0] cm109 3-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 386.162752][ T5909] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 386.237618][ T9] usb 4-1: bad CDC descriptors [ 386.268538][ T9] usb 4-1: USB disconnect, device number 6 [ 386.500447][T17687] tmpfs: Bad value for 'grpquota_inode_hardlimit' [ 386.683391][ T9] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 386.691718][T17693] netlink: 120 bytes leftover after parsing attributes in process `syz.0.2529'. [ 386.773350][ T5909] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 386.854895][ T9] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 386.863029][ T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 386.873761][ T9] usb 4-1: config 8 has no interface number 0 [ 386.879879][ T9] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 386.890950][ T9] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 386.900755][ T9] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 386.914279][ T9] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 386.923361][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 386.923413][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.932150][ T5909] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 386.949894][ T9] usb 4-1: NFC: intf ffff88802a37a000 id ffffffff8ed2ef60 [ 386.963212][ T5909] usb 2-1: config 0 has no interface number 0 [ 386.980049][ T5909] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.991719][ T5909] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.003144][ T5909] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 387.014398][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.026168][ T5909] usb 2-1: config 0 descriptor?? [ 387.160610][ T9] usb 4-1: USB disconnect, device number 7 [ 387.293405][ T55] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 387.350796][T17703] wlan0 speed is unknown, defaulting to 1000 [ 387.453387][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 387.462155][ T55] usb 3-1: unable to get BOS descriptor or descriptor too short [ 387.473352][ T55] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 387.481924][ T55] usb 3-1: config 9 has no interface number 0 [ 387.489898][ T55] usb 3-1: config 9 interface 129 has no altsetting 0 [ 387.500788][ T55] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 387.511058][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.521262][ T55] usb 3-1: Product: syz [ 387.527332][ T55] usb 3-1: Manufacturer: syz [ 387.532266][ T55] usb 3-1: SerialNumber: syz [ 387.635535][ T5909] uclogic 0003:28BD:0071.0027: failed retrieving string descriptor #100: -71 [ 387.650631][ T5909] uclogic 0003:28BD:0071.0027: failed retrieving pen parameters: -71 [ 387.659878][ T5909] uclogic 0003:28BD:0071.0027: pen probing failed: -71 [ 387.668595][ T5909] uclogic 0003:28BD:0071.0027: failed probing parameters: -71 [ 387.677260][ T5909] uclogic 0003:28BD:0071.0027: probe with driver uclogic failed with error -71 [ 387.694924][ T5909] usb 2-1: USB disconnect, device number 27 [ 387.954099][T17735] comedi comedi2: fl512: I/O port conflict (0x6,16) [ 388.347273][T17809] netlink: 212 bytes leftover after parsing attributes in process `syz.3.2540'. [ 388.360005][T17814] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2539'. [ 388.414422][ T55] usb 3-1: bad CDC descriptors [ 388.437039][ T55] usb 3-1: USB disconnect, device number 15 [ 388.528477][T17823] siw: device registration error -23 [ 388.796201][ T5909] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 388.939780][ T55] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 388.965264][ T5909] usb 2-1: config 8 has an invalid interface number: 80 but max is 0 [ 388.997174][ T5909] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 389.026410][ T5909] usb 2-1: config 8 has no interface number 0 [ 389.050804][ T5909] usb 2-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 389.092087][ T5909] usb 2-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 389.125533][ T5909] usb 2-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 389.143680][ T5909] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 389.165120][ T55] usb 3-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 389.175449][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.193353][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.203627][ T55] usb 3-1: Product: syz [ 389.207811][ T55] usb 3-1: Manufacturer: syz [ 389.212441][ T55] usb 3-1: SerialNumber: syz [ 389.234998][ T5909] usb 2-1: NFC: intf ffff88802fbdc000 id ffffffff8ed2ef60 [ 389.274733][ T55] usb 3-1: config 0 descriptor?? [ 389.444692][ T5909] usb 2-1: USB disconnect, device number 28 [ 389.489674][ T55] usb 3-1: ignoring: probably an ADSL modem [ 389.533340][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 389.683363][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 389.690532][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 389.699803][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.711572][ T9] usb 4-1: config 0 descriptor?? [ 389.890927][ T55] cxacru 3-1:0.0: usbatm_usb_probe: bind failed: -19! [ 389.918893][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 389.927627][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 389.938258][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 389.945510][ T9] usb 4-1: media controller created [ 389.959005][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 390.073178][T17853] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2552'. [ 390.121482][T17827] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2544'. [ 390.207283][ T5869] usb 3-1: USB disconnect, device number 16 [ 390.307281][T17864] sp0: Synchronizing with TNC [ 390.813385][ T5869] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 390.963478][ T5869] usb 2-1: Using ep0 maxpacket: 16 [ 390.970981][ T5869] usb 2-1: unable to get BOS descriptor or descriptor too short [ 390.980008][ T5869] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 390.988276][ T5869] usb 2-1: config 9 has no interface number 0 [ 390.994481][ T5869] usb 2-1: config 9 interface 129 has no altsetting 0 [ 391.003808][ T5869] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 391.013166][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.021293][ T5869] usb 2-1: Product: syz [ 391.022255][ T55] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 391.025632][ T5869] usb 2-1: Manufacturer: syz [ 391.038064][ T5869] usb 2-1: SerialNumber: syz [ 391.183427][ T55] usb 3-1: Using ep0 maxpacket: 16 [ 391.190780][ T55] usb 3-1: unable to get BOS descriptor or descriptor too short [ 391.199646][ T55] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 391.207910][ T55] usb 3-1: config 9 has no interface number 0 [ 391.214243][ T55] usb 3-1: config 9 interface 129 has no altsetting 0 [ 391.223370][ T55] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 391.232441][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.240547][ T55] usb 3-1: Product: syz [ 391.244765][ T55] usb 3-1: Manufacturer: syz [ 391.249491][ T55] usb 3-1: SerialNumber: syz [ 391.394884][ T5869] usb 2-1: bad CDC descriptors [ 391.423768][ T5869] usb 2-1: USB disconnect, device number 29 [ 391.636473][ T55] usb 3-1: bad CDC descriptors [ 391.657554][ T55] usb 3-1: USB disconnect, device number 17 [ 391.809029][T18009] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.941389][T18110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.985287][ T9] az6027: usb out operation failed. (-110) [ 391.991535][ T9] az6027: usb out operation failed. (-32) [ 391.997428][ T9] stb0899_attach: Driver disabled by Kconfig [ 392.003572][ T9] az6027: no front-end attached [ 392.003572][ T9] [ 392.010992][ T9] az6027: usb out operation failed. (-32) [ 392.017367][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 392.035138][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 392.064270][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 392.075561][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 392.092371][ T9] usb 4-1: USB disconnect, device number 8 [ 392.141194][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 392.443370][ T9] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 392.567294][T18128] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2581'. [ 392.595153][ T9] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 392.613516][ T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 392.633577][ T9] usb 4-1: config 8 has no interface number 0 [ 392.643631][ T9] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.660078][ T9] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 392.670639][ T9] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 392.684770][ T9357] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 392.696430][ T9] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 392.706392][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.721757][ T9] usb 4-1: NFC: intf ffff8880477ff000 id ffffffff8ed2ef60 [ 392.845056][ T9357] usb 2-1: Using ep0 maxpacket: 16 [ 392.852739][ T9357] usb 2-1: unable to get BOS descriptor or descriptor too short [ 392.866709][ T9357] usb 2-1: config 9 has an invalid interface number: 129 but max is 0 [ 392.875746][ T9357] usb 2-1: config 9 has no interface number 0 [ 392.881826][ T9357] usb 2-1: config 9 interface 129 has no altsetting 0 [ 392.891164][ T9357] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 392.900756][ T9357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.908812][ T9357] usb 2-1: Product: syz [ 392.912973][ T9357] usb 2-1: Manufacturer: syz [ 392.917672][ T9357] usb 2-1: SerialNumber: syz [ 392.925749][ T5909] usb 4-1: USB disconnect, device number 9 [ 392.953432][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 393.103497][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 393.110063][ T9] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 393.121514][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 393.131624][ T9] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 393.141667][ T9] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 393.155119][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 393.164720][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.176996][ T9357] usb 2-1: bad CDC descriptors [ 393.197753][ T9357] usb 2-1: USB disconnect, device number 30 [ 393.545560][ T9] usb 3-1: usb_control_msg returned -71 [ 393.551541][ T9] usbtmc 3-1:16.0: can't read capabilities [ 393.593797][ T9] usb 3-1: USB disconnect, device number 18 [ 393.693506][T18254] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2588'. [ 393.761606][T18257] pimreg: entered allmulticast mode [ 393.771397][T18257] pimreg: left allmulticast mode [ 393.909974][T18259] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2591'. [ 394.182354][ T5909] IPVS: starting estimator thread 0... [ 394.192334][T18369] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 394.200118][ C1] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 394.207465][ T55] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 394.273975][T18370] IPVS: using max 26 ests per chain, 62400 per kthread [ 394.335638][T18377] FAULT_INJECTION: forcing a failure. [ 394.335638][T18377] name failslab, interval 1, probability 0, space 0, times 0 [ 394.348801][T18377] CPU: 1 UID: 0 PID: 18377 Comm: syz.2.2599 Not tainted syzkaller #0 PREEMPT(full) [ 394.348825][T18377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 394.348836][T18377] Call Trace: [ 394.348844][T18377] [ 394.348852][T18377] dump_stack_lvl+0x189/0x250 [ 394.348878][T18377] ? __pfx____ratelimit+0x10/0x10 [ 394.348902][T18377] ? __pfx_dump_stack_lvl+0x10/0x10 [ 394.348921][T18377] ? __pfx__printk+0x10/0x10 [ 394.348947][T18377] ? __pfx___might_resched+0x10/0x10 [ 394.348964][T18377] ? fs_reclaim_acquire+0x7d/0x100 [ 394.349005][T18377] should_fail_ex+0x414/0x560 [ 394.349033][T18377] should_failslab+0xa8/0x100 [ 394.349058][T18377] __kmalloc_noprof+0xdf/0x800 [ 394.349080][T18377] ? tomoyo_encode+0x28b/0x550 [ 394.349106][T18377] tomoyo_encode+0x28b/0x550 [ 394.349131][T18377] tomoyo_realpath_from_path+0x58d/0x5d0 [ 394.349154][T18377] ? tomoyo_domain+0xd8/0x130 [ 394.349180][T18377] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 394.349198][T18377] tomoyo_path_number_perm+0x1e8/0x5a0 [ 394.349219][T18377] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 394.349276][T18377] ? __fget_files+0x2a/0x420 [ 394.349300][T18377] ? __fget_files+0x3a0/0x420 [ 394.349317][T18377] ? __fget_files+0x2a/0x420 [ 394.349340][T18377] security_file_ioctl+0xcb/0x2d0 [ 394.349367][T18377] __se_sys_ioctl+0x47/0x170 [ 394.349393][T18377] do_syscall_64+0xfa/0xfa0 [ 394.349418][T18377] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.349435][T18377] ? clear_bhb_loop+0x60/0xb0 [ 394.349456][T18377] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.349473][T18377] RIP: 0033:0x7fd814b8f6c9 [ 394.349488][T18377] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.349503][T18377] RSP: 002b:00007fd815ae9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 394.349522][T18377] RAX: ffffffffffffffda RBX: 00007fd814de5fa0 RCX: 00007fd814b8f6c9 [ 394.349535][T18377] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 394.349547][T18377] RBP: 00007fd815ae9090 R08: 0000000000000000 R09: 0000000000000000 [ 394.349570][T18377] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.349580][T18377] R13: 00007fd814de6038 R14: 00007fd814de5fa0 R15: 00007ffee2df62a8 [ 394.349618][T18377] [ 394.349639][T18377] ERROR: Out of memory at tomoyo_realpath_from_path. [ 394.534203][ T9] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 394.566973][ T55] usb 2-1: too many configurations: 68, using maximum allowed: 8 [ 394.600960][ T55] usb 2-1: config index 0 descriptor too short (expected 8451, got 18) [ 394.609292][ T55] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 394.617940][ T55] usb 2-1: can't read configurations, error -22 [ 394.724774][ T9] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 394.733318][ T9] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 394.744026][ T9] usb 4-1: config 8 has no interface number 0 [ 394.750150][ T9] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 394.760958][ T9] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 394.763345][ T55] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 394.770796][ T9] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 394.792488][ T9] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 394.802029][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.814990][ T9] usb 4-1: NFC: intf ffff88807beef000 id ffffffff8ed2ef60 [ 394.927935][T18384] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2602'. [ 394.954917][ T55] usb 2-1: too many configurations: 68, using maximum allowed: 8 [ 394.963945][ T55] usb 2-1: config index 0 descriptor too short (expected 8451, got 18) [ 394.972224][ T55] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 394.980752][ T55] usb 2-1: can't read configurations, error -22 [ 394.987587][ T55] usb usb2-port1: attempt power cycle [ 395.022236][ T9] usb 4-1: USB disconnect, device number 10 [ 395.238568][T18393] comedi comedi2: fl512: I/O port conflict (0x6,16) [ 395.300311][T18400] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2608'. [ 395.344333][ T55] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 395.376044][ T55] usb 2-1: too many configurations: 68, using maximum allowed: 8 [ 395.394536][ T55] usb 2-1: config index 0 descriptor too short (expected 8451, got 18) [ 395.402819][ T55] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 395.424407][ T55] usb 2-1: can't read configurations, error -22 [ 395.442277][T18505] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2611'. [ 395.459032][T18504] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2610'. [ 395.500480][T18509] siw: device registration error -23 [ 395.558530][T18513] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2614'. [ 395.563527][ T55] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 395.610458][T18556] netlink: 236 bytes leftover after parsing attributes in process `syz.0.2615'. [ 395.622250][ T55] usb 2-1: too many configurations: 68, using maximum allowed: 8 [ 395.644862][ T55] usb 2-1: config index 0 descriptor too short (expected 8451, got 18) [ 395.671086][ T55] usb 2-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 395.687237][ T55] usb 2-1: can't read configurations, error -22 [ 395.704412][ T55] usb usb2-port1: unable to enumerate USB device [ 395.897698][T18630] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2621'. [ 395.973355][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 396.138799][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 396.149612][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.159256][ T9] usb 4-1: Product: syz [ 396.164810][ T9] usb 4-1: Manufacturer: syz [ 396.169419][ T9] usb 4-1: SerialNumber: syz [ 396.343454][ T5869] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 396.362372][T18646] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2627'. [ 396.379800][T18617] vxcan1: entered allmulticast mode [ 396.505217][ T5869] usb 3-1: config 8 has an invalid interface number: 80 but max is 0 [ 396.513563][ T5869] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 396.524127][ T5869] usb 3-1: config 8 has no interface number 0 [ 396.530283][ T5869] usb 3-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 396.542420][ T5869] usb 3-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 396.556330][ T5869] usb 3-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 396.569940][ T5869] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 396.580436][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.592470][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 396.607789][ T5869] usb 3-1: NFC: intf ffff888053142000 id ffffffff8ed2ef60 [ 396.618974][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 396.812598][ T5869] usb 3-1: USB disconnect, device number 19 [ 397.117944][T18672] wlan0 speed is unknown, defaulting to 1000 [ 397.527687][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 397.559021][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 397.570830][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 397.601561][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 397.649092][ T9] usb 4-1: USB disconnect, device number 11 [ 397.933382][ T5869] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 398.105796][ T5869] usb 3-1: Invalid ep0 maxpacket: 64 [ 398.253801][ T5869] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 398.403417][ T5869] usb 3-1: Invalid ep0 maxpacket: 64 [ 398.409111][ T5869] usb usb3-port1: attempt power cycle [ 398.753348][ T5869] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 398.773788][ T5869] usb 3-1: Invalid ep0 maxpacket: 64 [ 398.903364][ T5869] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 398.926796][ T5869] usb 3-1: Invalid ep0 maxpacket: 64 [ 398.932606][ T5869] usb usb3-port1: unable to enumerate USB device [ 399.197848][T18736] wlan0 speed is unknown, defaulting to 1000 [ 399.336428][ T5869] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 399.513315][ T5869] usb 4-1: Using ep0 maxpacket: 16 [ 399.519811][ T5869] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.531017][ T5869] usb 4-1: config 0 interface 0 has no altsetting 0 [ 399.537714][ T5869] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 399.547488][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.557256][ T5869] usb 4-1: config 0 descriptor?? [ 399.623394][ T5909] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 399.669032][T18744] sctp: [Deprecated]: syz.0.2668 (pid 18744) Use of struct sctp_assoc_value in delayed_ack socket option. [ 399.669032][T18744] Use struct sctp_sack_info instead [ 399.773359][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 399.793350][ T5909] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.807828][ T5909] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 399.822552][ T5909] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 399.835025][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.854476][ T5909] usb 2-1: config 0 descriptor?? [ 399.913024][T18753] __nla_validate_parse: 2 callbacks suppressed [ 399.913037][T18753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2671'. [ 399.980167][ T5869] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 399.989056][ T5869] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 399.996725][ T5869] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 400.004294][ T5869] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 400.011794][ T5869] nzxt-smart2 0003:1E71:2009.0028: unknown main item tag 0x0 [ 400.032662][ T5869] nzxt-smart2 0003:1E71:2009.0028: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 400.178498][ C0] usb 4-1: input irq status -75 received [ 400.381703][ T55] usb 4-1: USB disconnect, device number 12 [ 401.012599][T18780] trusted_key: syz.3.2682 sent an empty control message without MSG_MORE. [ 401.184853][ T5829] Bluetooth: hci4: command 0x0406 tx timeout [ 401.683351][ T55] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 401.843324][ T55] usb 3-1: Using ep0 maxpacket: 32 [ 401.851159][ T55] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 401.862735][ T55] usb 3-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 401.875221][ T55] usb 3-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.887128][ T55] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 401.905164][ T55] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 401.920604][ T55] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.929323][ T55] usb 3-1: Product: syz [ 401.934170][ T55] usb 3-1: Manufacturer: syz [ 401.938908][ T55] usb 3-1: SerialNumber: syz [ 401.958174][ C1] imon 3-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 401.974839][ T55] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/input/input46 [ 402.185240][ T55] imon 3-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 402.194032][ T55] (id 0x00) [ 402.253394][ T55] rc_core: IR keymap rc-imon-pad not found [ 402.259428][ T55] Registered IR keymap rc-empty [ 402.267506][ T55] imon 3-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 402.277894][ T55] imon 3-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 402.376386][ T55] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0 [ 402.389715][ T55] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:155.0/rc/rc0/input47 [ 402.402769][ T5909] usbhid 2-1:0.0: can't add hid device: -71 [ 402.410170][ T5909] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 402.421803][ T55] imon 3-1:155.0: iMON device (15c2:ffdc, intf0) on usb<3:24> initialized [ 402.433108][ T5909] usb 2-1: USB disconnect, device number 35 [ 402.768214][T18817] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2697'. [ 402.893495][ T5909] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 402.959938][ T10] usb 3-1: USB disconnect, device number 24 [ 403.053323][ T5909] usb 2-1: Using ep0 maxpacket: 8 [ 403.067142][ T5909] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55 [ 403.073851][ T5869] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 403.076375][ T5909] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.092324][ T5909] usb 2-1: Product: syz [ 403.098164][ T5909] usb 2-1: Manufacturer: syz [ 403.102893][ T5909] usb 2-1: SerialNumber: syz [ 403.110927][ T5909] usb 2-1: config 0 descriptor?? [ 403.154943][T19025] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2701'. [ 403.251666][ T5869] usb 4-1: config 8 has an invalid interface number: 80 but max is 0 [ 403.264988][ T5869] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 403.283605][ T30] audit: type=1800 audit(1762800038.153:13): pid=19031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2704" name="nullb0" dev="tmpfs" ino=934 res=0 errno=0 [ 403.311791][ T5869] usb 4-1: config 8 has no interface number 0 [ 403.319727][ T5869] usb 4-1: config 8 interface 80 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 403.332012][ T5869] usb 4-1: config 8 interface 80 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 403.341011][T18815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.341989][ T5869] usb 4-1: config 8 interface 80 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 14 [ 403.367521][ T5869] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=c1.6f [ 403.373064][T18815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.378688][ T5869] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.396636][T19033] input: syz1 as /devices/virtual/input/input48 [ 403.410998][T19035] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2706'. [ 403.414835][ T5869] usb 4-1: NFC: intf ffff88807d1f1000 id ffffffff8ed2ef60 [ 403.423879][T18815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.438185][T18815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.511979][ T5909] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 403.533479][ T5909] dvb_usb_af9015 2-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 403.547042][ T5909] usb 2-1: USB disconnect, device number 36 [ 403.617117][ T5824] usb 4-1: USB disconnect, device number 13 [ 403.863404][ T5909] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 403.913375][ T5869] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 404.014897][ T5909] usb 2-1: Using ep0 maxpacket: 16 [ 404.023340][ T5909] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 404.031357][ T5909] usb 2-1: config 0 has no interface number 0 [ 404.037683][ T5909] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.051747][ T5909] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 404.062378][ T5909] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 404.063373][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 404.072231][ T5909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.088907][ T5869] usb 3-1: unable to get BOS descriptor or descriptor too short [ 404.097528][ T5909] usb 2-1: config 0 descriptor?? [ 404.098250][ T5869] usb 3-1: config 9 has an invalid interface number: 129 but max is 0 [ 404.117336][ T5869] usb 3-1: config 9 has no interface number 0 [ 404.123937][ T5869] usb 3-1: config 9 interface 129 has no altsetting 0 [ 404.133619][ T5869] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=d0.9c [ 404.142986][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.156445][ T5869] usb 3-1: Product: syz [ 404.162157][ T5869] usb 3-1: Manufacturer: syz [ 404.167782][ T5869] usb 3-1: SerialNumber: syz [ 404.624387][ T5869] usb 3-1: bad CDC descriptors [ 404.654093][ T5869] usb 3-1: USB disconnect, device number 25 [ 404.692847][T19260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2715'. [ 404.721809][ T5909] uclogic 0003:28BD:0071.0029: failed retrieving string descriptor #100: -71 [ 404.737675][ T5909] uclogic 0003:28BD:0071.0029: failed retrieving pen parameters: -71 [ 404.747055][ T5909] uclogic 0003:28BD:0071.0029: pen probing failed: -71 [ 404.754689][ T5909] uclogic 0003:28BD:0071.0029: failed probing parameters: -71 [ 404.786263][ T5909] uclogic 0003:28BD:0071.0029: probe with driver uclogic failed with error -71 [ 404.813777][ T5909] usb 2-1: USB disconnect, device number 37 [ 405.086188][ T6956] ------------[ cut here ]------------ [ 405.091744][ T6956] WARNING: ./include/linux/ns_common.h:255 at free_nsproxy+0x415/0x560, CPU#0: syz.2.346/6956 [ 405.102116][ T6956] Modules linked in: [ 405.106110][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.2.346 Not tainted syzkaller #0 PREEMPT(full) [ 405.115789][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.126204][ T6956] RIP: 0010:free_nsproxy+0x415/0x560 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 405.131513][ T6956] Code: 85 ed 0f 8e be 00 00 00 e8 a8 31 33 00 48 8b 3d f1 28 32 11 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 01 32 8e 00 e8 8c 31 33 00 90 <0f> 0b 90 e9 ba fc ff ff e8 7e 31 33 00 4c 89 ff be 03 00 00 00 e8 [ 405.151516][ T6956] RSP: 0018:ffffc90003fbfa90 EFLAGS: 00010293 [ 405.157649][ T5829] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 405.160170][ T5829] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 405.165543][ T6956] RAX: ffffffff818e2b84 RBX: ffff888065b2a680 RCX: ffff888026145b80 [ 405.175224][ T5829] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 405.181380][ T6956] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 405.189766][ T5829] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 405.195976][ T6956] RBP: 00000000ffffffff R08: ffff88807e8d8803 R09: 1ffff1100fd1b100 [ 405.204574][ T5829] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 405.210881][ T6956] R10: dffffc0000000000 R11: ffffed100fd1b101 R12: dffffc0000000000 [ 405.225859][ T6956] R13: 0000000000000009 R14: ffff88807e8d85b0 R15: ffff88807e8d8800 [ 405.233903][ T6956] FS: 0000000000000000(0000) GS:ffff888125a83000(0000) knlGS:0000000000000000 [ 405.243062][ T6956] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.249960][ T6956] CR2: 000055555f64f808 CR3: 0000000044a30000 CR4: 00000000003526f0 [ 405.258019][ T6956] Call Trace: [ 405.261308][ T6956] [ 405.264287][ T6956] do_exit+0x6b8/0x2300 [ 405.268481][ T6956] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 405.273947][ T6956] ? do_raw_spin_lock+0x121/0x290 [ 405.279556][ T6956] ? __pfx_do_exit+0x10/0x10 [ 405.285432][ T6956] do_group_exit+0x21c/0x2d0 [ 405.290059][ T6956] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.295353][ T6956] get_signal+0x1285/0x1340 [ 405.299885][ T6956] arch_do_signal_or_restart+0x9a/0x7a0 [ 405.305560][ T6956] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 405.310771][ T6956] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 405.317011][ T6956] ? exit_to_user_mode_loop+0x55/0x4f0 [ 405.322481][ T6956] exit_to_user_mode_loop+0x87/0x4f0 [ 405.327838][ T6956] ? rcu_is_watching+0x15/0xb0 [ 405.332614][ T6956] do_syscall_64+0x2e9/0xfa0 [ 405.337552][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.343995][ T6956] ? clear_bhb_loop+0x60/0xb0 [ 405.346494][ T9191] ------------[ cut here ]------------ [ 405.348684][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.354296][ T9191] WARNING: ./include/linux/ns_common.h:255 at put_mnt_ns+0x152/0x190, CPU#1: syz.2.1134/9191 [ 405.354327][ T9191] Modules linked in: [ 405.354345][ T9191] CPU: 1 UID: 0 PID: 9191 Comm: syz.2.1134 Not tainted syzkaller #0 PREEMPT(full) [ 405.354362][ T9191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.354398][ T9191] RIP: 0010:put_mnt_ns+0x152/0x190 [ 405.360262][ T6956] RIP: 0033:0x7fd814bc1f85 [ 405.370538][ T9191] Code: 79 00 00 bf 01 00 00 00 89 ee e8 09 17 7e ff 85 ed 7e 1f e8 c0 12 7e ff 5b 41 5e 41 5f 5d e9 c5 83 21 09 cc e8 af 12 7e ff 90 <0f> 0b 90 e9 33 ff ff ff e8 a1 12 7e ff 4c 89 f7 be 03 00 00 00 5b [ 405.374346][ T6956] Code: Unable to access opcode bytes at 0x7fd814bc1f5b. [ 405.374360][ T6956] RSP: 002b:00007fd815ae8f80 EFLAGS: 00000293 [ 405.383834][ T9191] RSP: 0018:ffffc9001a2a7a68 EFLAGS: 00010293 [ 405.383861][ T9191] RAX: ffffffff82434a61 RBX: ffff88807e8cc000 RCX: ffff8880278b8000 [ 405.383876][ T9191] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 405.383888][ T9191] RBP: 00000000ffffffff R08: ffff88807e8cc0bb R09: 1ffff1100fd19817 [ 405.383907][ T9191] R10: dffffc0000000000 R11: ffffed100fd19818 R12: dffffc0000000000 [ 405.383921][ T9191] R13: 0000000000000009 R14: ffff88807e8cc0b8 R15: dffffc0000000000 [ 405.383935][ T9191] FS: 0000000000000000(0000) GS:ffff888125b83000(0000) knlGS:0000000000000000 [ 405.383950][ T9191] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.383964][ T9191] CR2: 00007f0e0b517d60 CR3: 0000000044a30000 CR4: 00000000003526f0 [ 405.383982][ T9191] DR0: fffffffffffffff1 DR1: 64cd6b2aec9cee78 DR2: 0000000000000000 [ 405.383996][ T9191] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 405.384007][ T9191] Call Trace: [ 405.384016][ T9191] [ 405.384027][ T9191] free_nsproxy+0x46/0x560 [ 405.384051][ T9191] do_exit+0x6b8/0x2300 [ 405.384080][ T9191] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 405.384103][ T9191] ? do_raw_spin_lock+0x121/0x290 [ 405.384129][ T9191] ? __pfx_do_exit+0x10/0x10 [ 405.384167][ T9191] do_group_exit+0x21c/0x2d0 [ 405.394689][ T6956] ORIG_RAX: 00000000000000e6 [ 405.399350][ T9191] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.403766][ T6956] RAX: fffffffffffffdfc RBX: 00007fd814de5fa0 RCX: 00007fd814bc1f85 [ 405.403782][ T6956] RDX: 00007fd815ae8fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.403794][ T6956] RBP: 00007fd814c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 405.403807][ T6956] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 405.403819][ T6956] R13: 00007fd814de6038 R14: 00007fd814de5fa0 R15: 00007ffee2df62a8 [ 405.403850][ T6956] [ 405.403876][ T6956] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 405.403891][ T6956] CPU: 0 UID: 0 PID: 6956 Comm: syz.2.346 Not tainted syzkaller #0 PREEMPT(full) [ 405.403911][ T6956] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 405.403922][ T6956] Call Trace: [ 405.403930][ T6956] [ 405.403938][ T6956] dump_stack_lvl+0x99/0x250 [ 405.403962][ T6956] ? __asan_memcpy+0x40/0x70 [ 405.403983][ T6956] ? __pfx_dump_stack_lvl+0x10/0x10 [ 405.404004][ T6956] ? __pfx__printk+0x10/0x10 [ 405.404036][ T6956] vpanic+0x237/0x6d0 [ 405.404052][ T6956] ? __pfx_vpanic+0x10/0x10 [ 405.404067][ T6956] ? is_bpf_text_address+0x26/0x2b0 [ 405.404099][ T6956] panic+0xb9/0xc0 [ 405.404115][ T6956] ? __pfx_panic+0x10/0x10 [ 405.404145][ T6956] __warn+0x334/0x4c0 [ 405.404160][ T6956] ? free_nsproxy+0x415/0x560 [ 405.404179][ T6956] ? free_nsproxy+0x415/0x560 [ 405.404196][ T6956] report_bug+0x2be/0x4f0 [ 405.404217][ T6956] ? free_nsproxy+0x415/0x560 [ 405.404234][ T6956] ? free_nsproxy+0x415/0x560 [ 405.404251][ T6956] ? free_nsproxy+0x417/0x560 [ 405.404266][ T6956] handle_bug+0x84/0x160 [ 405.404285][ T6956] exc_invalid_op+0x1a/0x50 [ 405.404303][ T6956] asm_exc_invalid_op+0x1a/0x20 [ 405.404319][ T6956] RIP: 0010:free_nsproxy+0x415/0x560 [ 405.404336][ T6956] Code: 85 ed 0f 8e be 00 00 00 e8 a8 31 33 00 48 8b 3d f1 28 32 11 48 89 de 5b 41 5c 41 5e 41 5f 5d e9 01 32 8e 00 e8 8c 31 33 00 90 <0f> 0b 90 e9 ba fc ff ff e8 7e 31 33 00 4c 89 ff be 03 00 00 00 e8 [ 405.404351][ T6956] RSP: 0018:ffffc90003fbfa90 EFLAGS: 00010293 [ 405.404368][ T6956] RAX: ffffffff818e2b84 RBX: ffff888065b2a680 RCX: ffff888026145b80 [ 405.404382][ T6956] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 405.404393][ T6956] RBP: 00000000ffffffff R08: ffff88807e8d8803 R09: 1ffff1100fd1b100 [ 405.404405][ T6956] R10: dffffc0000000000 R11: ffffed100fd1b101 R12: dffffc0000000000 [ 405.404419][ T6956] R13: 0000000000000009 R14: ffff88807e8d85b0 R15: ffff88807e8d8800 [ 405.404439][ T6956] ? free_nsproxy+0x414/0x560 [ 405.404464][ T6956] do_exit+0x6b8/0x2300 [ 405.404497][ T6956] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 405.404518][ T6956] ? do_raw_spin_lock+0x121/0x290 [ 405.404544][ T6956] ? __pfx_do_exit+0x10/0x10 [ 405.404580][ T6956] do_group_exit+0x21c/0x2d0 [ 405.404602][ T6956] ? lockdep_hardirqs_on+0x9c/0x150 [ 405.404628][ T6956] get_signal+0x1285/0x1340 [ 405.404665][ T6956] arch_do_signal_or_restart+0x9a/0x7a0 [ 405.404688][ T6956] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 405.404712][ T6956] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 405.404748][ T6956] ? exit_to_user_mode_loop+0x55/0x4f0 [ 405.404769][ T6956] exit_to_user_mode_loop+0x87/0x4f0 [ 405.404786][ T6956] ? rcu_is_watching+0x15/0xb0 [ 405.404810][ T6956] do_syscall_64+0x2e9/0xfa0 [ 405.404835][ T6956] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.404853][ T6956] ? clear_bhb_loop+0x60/0xb0 [ 405.404874][ T6956] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.404890][ T6956] RIP: 0033:0x7fd814bc1f85 [ 405.404906][ T6956] Code: Unable to access opcode bytes at 0x7fd814bc1f5b. [ 405.404916][ T6956] RSP: 002b:00007fd815ae8f80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 405.404934][ T6956] RAX: fffffffffffffdfc RBX: 00007fd814de5fa0 RCX: 00007fd814bc1f85 [ 405.404947][ T6956] RDX: 00007fd815ae8fc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 405.404959][ T6956] RBP: 00007fd814c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 405.404971][ T6956] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 405.404982][ T6956] R13: 00007fd814de6038 R14: 00007fd814de5fa0 R15: 00007ffee2df62a8 [ 405.405010][ T6956] [ 405.423570][ T6956] Kernel Offset: disabled