last executing test programs: 5.238268689s ago: executing program 4 (id=3139): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308000000"], 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x800, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000000)='BBBB') 4.989520741s ago: executing program 0 (id=3146): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0xd428, @ipv4={'\x00', '\xff\xff', @local}, 0xa}, 0x1c, 0x0}}], 0x1, 0x200c88c0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r0, &(0x7f0000000240)=ANY=[], 0xe) 4.954431821s ago: executing program 0 (id=3147): mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000008504"]) 4.746514932s ago: executing program 0 (id=3148): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{0x304}, "51c52e03f6d371e8", "4127f6158d71f1799931b7e0b6d73b28", "1b8bec20", "408295c4101fca8f"}, 0x28) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.668060563s ago: executing program 0 (id=3149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x23, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000001c0)="162aa0b6d36473ac34b6c3f523ff390f3f8998bb0df7e66234ae8f6470e676542224db697c04b5bd7fa5cfdd64c005ff84e29b30889084", 0x37}, {0x0}, {&(0x7f0000000980)="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", 0x521}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000000000000294c61265135000000430000c060ff46fa6508005fccea6a993e090000"], 0x18}}], 0x1, 0x850) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.093897296s ago: executing program 2 (id=3151): pipe(&(0x7f0000000000)={0x0, 0x0}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, 0xffffffffffffffff, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) open(0x0, 0x400000, 0x80) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}}], [], 0x6b}}) syz_open_procfs(0x0, &(0x7f00000003c0)='mountinfo\x00') r4 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0) sendfile(r4, r2, 0x0, 0x100000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x565c}}, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r5, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_usb_connect$cdc_ecm(0x5, 0x4d, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010000020000402505a1a44000000001010902"], 0x0) syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) close_range(r0, 0xffffffffffffffff, 0x0) 3.743288408s ago: executing program 0 (id=3152): mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, 0xffffffffffffffff, 0x100000) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) 3.543240999s ago: executing program 4 (id=3153): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100ffffffffffff400101c0"]) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000000000000010000800000000003000000670800000b000000ffffffff0900"/48]) r3 = socket(0x8000000010, 0x2, 0x0) write(r3, &(0x7f00000002c0)="fc0000001c000704ab5b2509b868030002ab087a010000009c480493210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab91d710f74cec184406f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df77bc4cfd6239ec2a0f0d1bcae5fa0f5f9dcdd51af51af8502943283f4bb102b2b8f5566791cf190201ded815b2ccd243f395ed94e0ad91bd6433802e0784f2013cd1890058a10000c880ac801f", 0xed) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r4}, 0x10) pwritev(0xffffffffffffffff, &(0x7f0000001180), 0x10000000000000f3, 0x3fc, 0x0) 3.41254093s ago: executing program 4 (id=3154): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x1}, @IFLA_GRE_REMOTE={0x8, 0x7, @remote}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x721f26489206a8cb}, 0x40000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20048010) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r6) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/ip_mr_vif\x00') sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x68, 0x28, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, r7, {0x1}, {0xd}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x34, 0x2, [@TCA_BPF_ACT={0x30, 0x1, [@m_bpf={0x2c, 0x17, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x9, 0x1}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000804}, 0x40) 2.662818914s ago: executing program 2 (id=3155): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x10000, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 2.622448014s ago: executing program 2 (id=3156): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0xc00, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) read$FUSE(r0, &(0x7f0000000740)={0x2020}, 0x2020) chdir(&(0x7f0000000240)='./file0\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2.558099235s ago: executing program 4 (id=3157): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{0x0}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8}, 0x5}], 0x1, 0x2000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.555131455s ago: executing program 2 (id=3158): mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000008504"]) 2.493247435s ago: executing program 4 (id=3159): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000200)) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) r2 = creat(0x0, 0xecf86c37d53049cc) close(r2) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000002200)={[0x0]}, 0x0) write(0xffffffffffffffff, 0x0, 0x0) 2.462803146s ago: executing program 2 (id=3160): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) sendto$packet(r1, &(0x7f0000000180)="0b03feff4f00021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140), 0x14) 2.462362775s ago: executing program 2 (id=3161): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) msync(&(0x7f0000640000/0xd000)=nil, 0xd000, 0x3) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socket(0x1e, 0x1, 0x0) mknod$loop(0x0, 0x0, 0x1) syz_open_procfs$pagemap(0x0, 0x0) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xa, {0x4, 0xffffffffffffffff, 0x100000000000000, 0x800, 0x0, 0x0, {0x0, 0x3, 0x2, 0x0, 0x0, 0x46, 0x1, 0x0, 0x0, 0x4000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x30000, 0x0, 0x0, 0x8, 0x10000, 0x0, 0x0, 0x10}}, 0x50) rename(&(0x7f0000000100)='./file0/../file0/file0\x00', &(0x7f0000000140)='./file0/../file0/file0\x00') 2.272209307s ago: executing program 3 (id=3165): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="3400000015"], 0x34}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2c, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f00000001c0)={&(0x7f0000000100)=""/53, 0x35, 0x41b, 0x3}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={0x0, 0xf8}}, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.326481072s ago: executing program 1 (id=3168): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x10000, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) 1.262887922s ago: executing program 1 (id=3169): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 1.223636832s ago: executing program 1 (id=3170): mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0xa, 0x262) ioctl$sock_inet_SIOCSARP(r0, 0x8953, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000008504"]) 1.111067663s ago: executing program 1 (id=3171): sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0xd428, @ipv4={'\x00', '\xff\xff', @local}, 0xa}, 0x1c, 0x0}}], 0x1, 0x200c88c0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r0, &(0x7f0000000240)=ANY=[], 0xe) 1.110509943s ago: executing program 1 (id=3172): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000003c0)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x37, [0x6, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x4, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7ff7, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0xffffffff, 0x2, 0x2, 0x3, 0x1, 0x1, 0x7ff, 0x6, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00041, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0xfffff50f, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x7, 0x5, 0x9, 0x5, 0xb, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x8, 0x3437, 0x3, 0xfb2, 0xfd, 0x401, 0x101, 0xdd80, 0x60a2, 0x7f, 0x9d26, 0x0, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x4, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x200005, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0x56, 0x40, 0xff, 0x5, 0x7fffffff, 0x17, 0xe, 0x9, 0x81, 0x3, 0x9d86, 0xd, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0xa, 0x80000001, 0x7777, 0x1, 0x6, 0x100, 0xd8cb, 0x7fffffff, 0x624dfaee, 0xc, 0x32d, 0x1000, 0x1ff, 0x2000003, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0x7, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x3, 0x8, 0x13ffd, 0x1, 0xbe24]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1.020908644s ago: executing program 3 (id=3173): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000660000000000"], 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x8}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 994.727934ms ago: executing program 3 (id=3174): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rename(&(0x7f0000000100)='.\x00', 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x3ff, 0x6, 0x2, 0xe, 0x10003, 0x41, 0x400200cc0, 0xffd, 0x800b, 0x6, 0x200000000, 0x0, 0x5, 0x0, 0x6b, 0x7ff], 0xeeee8000, 0x2019c0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 894.495105ms ago: executing program 3 (id=3175): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x400800, 0x0) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0xfffe, @dev}, 0x2}}, 0x2e) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, &(0x7f0000000180)=""/246) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) 884.464174ms ago: executing program 3 (id=3176): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000003, 0x13, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 712.904466ms ago: executing program 3 (id=3177): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x269, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x5, [{{0x9, 0x4, 0x0, 0x0, 0xc1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x11da, 0x28, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x9, 0xa, 0x11}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x0, 0x6, 0x58, {0x58, 0x23, "274c3a9facef6252281e905f94cb8522585502c889ed56a39d1cf0f3995ed30bf94b28ff3eb92b2104cc4bf62541d0e0378301fc5097081795f6198fa7e26002a968d023414b99c56debb65c39e82bcbc34e93a98f9c"}}, &(0x7f0000000300)={0x0, 0x3, 0x84, @string={0x84, 0x3, "5f0091608a0c58c0abfe2252ad62fb990a4b73958698d7cc012dd3e79348c1db399b43d359cdefa042ae8c98780ac0195460f35c12fc14da458ed72328553a25aa9e2bf5b16bb9c910b47d8fd52c821c1b7a6643945d56bc8ac73ef979e825ed4aaeae016d6c1b211fc3503c293501f1cc4678f4468124ad4499e2c87412f5bcfe8f"}}, &(0x7f0000000a40)=ANY=[@ANYBLOB="000f0a000000050f050000de3986c352564a9f1ccac1728cc9d020b97251731734ed2411bc"], &(0x7f00000000c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x93, 0x6, 0xd, "0140fe43", "36b23948"}}, &(0x7f0000000180)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x10, 0x0, 0x2, 0x73, 0x3, 0x400}}}, 0x0) 410.251927ms ago: executing program 4 (id=3178): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x23, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f00000001c0)="162aa0b6d36473ac34b6c3f523ff390f3f8998bb0df7e66234ae8f6470e676542224db697c04b5bd7fa5cfdd64c005ff84e29b30889084", 0x37}, {0x0}, {&(0x7f0000000980)="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", 0x5fc}], 0x4, &(0x7f0000000880)=ANY=[@ANYBLOB="1400000000000000294c61265135000000430000c060ff46fa6508005fccea6a993e090000"], 0x18}}], 0x1, 0x850) ioctl$KVM_RUN(r2, 0xae80, 0x0) 354.543358ms ago: executing program 0 (id=3179): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448de, &(0x7f0000000200)) 0s ago: executing program 1 (id=3180): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) write$binfmt_aout(r0, 0x0, 0xff2e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x10000, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): USB device number 2 using dummy_hcd [ 338.378493][ T5620] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 338.439597][ T5035] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 338.448869][ T5035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.457544][ T5035] usb 4-1: config 0 descriptor?? [ 338.559552][ T5620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 338.570585][ T5620] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.580579][ T5620] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 338.589805][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.601703][ T5620] usb 1-1: config 0 descriptor?? [ 338.807591][ T7565] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.818229][ T7565] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.030207][ T5620] usbhid 1-1:0.0: can't add hid device: -71 [ 339.036167][ T5620] usbhid: probe of 1-1:0.0 failed with error -71 [ 339.052962][ T5620] usb 1-1: USB disconnect, device number 115 [ 339.198750][ T968] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 339.210631][ T968] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 339.221146][ T968] asix: probe of 5-1:0.0 failed with error -71 [ 339.233200][ T968] usb 5-1: USB disconnect, device number 10 [ 339.466126][ T5035] usb 4-1: Cannot set autoneg [ 339.470884][ T5035] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -61 [ 340.228490][ T968] usb 2-1: new full-speed USB device number 126 using dummy_hcd [ 340.429559][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 340.448452][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.458204][ T968] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 340.473113][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.486009][ T968] usb 2-1: config 0 descriptor?? [ 340.800806][ T7586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.838845][ T7586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.979975][ T5035] usb 4-1: USB disconnect, device number 2 [ 341.044296][ T7608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2380'. [ 341.120099][ T7586] fuse: Bad value for 'user_id' [ 341.228681][ T968] usbhid 2-1:0.0: can't add hid device: -71 [ 341.234738][ T968] usbhid: probe of 2-1:0.0 failed with error -71 [ 341.243123][ T968] usb 2-1: USB disconnect, device number 126 [ 341.398492][ T5620] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 341.407326][ T7619] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2383'. [ 341.598473][ T5620] usb 5-1: Using ep0 maxpacket: 16 [ 341.604874][ T5620] usb 5-1: no configurations [ 341.611685][ T5620] usb 5-1: can't read configurations, error -22 [ 341.712218][ T7623] netlink: 'syz.1.2387': attribute type 12 has an invalid length. [ 341.762218][ T7626] tmpfs: Unknown parameter 'nolazytimeř' [ 341.778620][ T5620] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 341.978468][ T5620] usb 5-1: Using ep0 maxpacket: 16 [ 341.985827][ T5620] usb 5-1: no configurations [ 341.996651][ T5620] usb 5-1: can't read configurations, error -22 [ 342.015467][ T5620] usb usb5-port1: attempt power cycle [ 342.418484][ T19] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 342.458489][ T5620] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 342.496660][ T5620] usb 5-1: Using ep0 maxpacket: 16 [ 342.508572][ T5620] usb 5-1: no configurations [ 342.513186][ T5620] usb 5-1: can't read configurations, error -22 [ 342.528470][ T5035] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 342.609443][ T19] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 342.618585][ T19] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.634663][ T19] usb 4-1: config 0 descriptor?? [ 342.668510][ T5620] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 342.708479][ T5035] usb 1-1: Using ep0 maxpacket: 32 [ 342.714759][ T5035] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.725021][ T5620] usb 5-1: Using ep0 maxpacket: 16 [ 342.725347][ T5035] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.739610][ T5035] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 342.739679][ T5620] usb 5-1: no configurations [ 342.748958][ T5035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.761350][ T5620] usb 5-1: can't read configurations, error -22 [ 342.771691][ T5035] usb 1-1: config 0 descriptor?? [ 342.778554][ T5620] usb usb5-port1: unable to enumerate USB device [ 343.833410][ T19] usb 4-1: Cannot set autoneg [ 343.838168][ T19] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -61 [ 344.328486][ T5620] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 344.501435][ T4084] Bluetooth: hci0: Frame reassembly failed (-84) [ 344.529574][ T5620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.540721][ T5620] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.618547][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2400'. [ 344.743373][ T5620] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 344.752491][ T5620] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.781799][ T5620] usb 5-1: config 0 descriptor?? [ 344.905577][ T7668] netlink: 'syz.1.2402': attribute type 12 has an invalid length. [ 344.987731][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.996329][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.075248][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2404'. [ 345.159469][ T19] usb 4-1: USB disconnect, device number 3 [ 345.209278][ T7654] fuse: Bad value for 'user_id' [ 345.225688][ T5620] usbhid 5-1:0.0: can't add hid device: -71 [ 345.237282][ T5620] usbhid: probe of 5-1:0.0 failed with error -71 [ 345.265948][ T5620] usb 5-1: USB disconnect, device number 15 [ 346.348340][ T7690] fuse: Unknown parameter 'user_id00000000000000000000' [ 346.370599][ T7693] tmpfs: Unknown parameter 'nolazytimeř' [ 346.431282][ T7697] netlink: 'syz.2.2413': attribute type 12 has an invalid length. [ 346.452511][ T7700] netlink: 'syz.3.2414': attribute type 12 has an invalid length. [ 346.471759][ T7706] fuse: Unknown parameter '0x0000000000000003' [ 346.528514][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 346.574157][ T5620] usb 1-1: USB disconnect, device number 116 [ 346.688722][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2417'. [ 346.988909][ T7724] fuse: Unknown parameter 'user_id00000000000000000000' [ 347.480461][ T7741] fuse: Unknown parameter '0x0000000000000003' [ 347.496879][ T7743] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2430'. [ 347.726534][ T7749] netlink: 'syz.0.2431': attribute type 12 has an invalid length. [ 347.734431][ T623] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 347.918462][ T623] usb 3-1: Using ep0 maxpacket: 32 [ 347.925425][ T623] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.940715][ T623] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 347.954120][ T623] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 347.965774][ T623] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.975155][ T623] usb 3-1: config 0 descriptor?? [ 347.981310][ T623] hub 3-1:0.0: bad descriptor, ignoring hub [ 347.989471][ T623] hub: probe of 3-1:0.0 failed with error -5 [ 347.996216][ T623] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 348.158483][ T39] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 348.272598][ T7771] fuse: Unknown parameter '0x0000000000000003' [ 348.358474][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 348.364752][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.375843][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.385703][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 348.394856][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.458405][ T7775] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2441'. [ 348.560378][ T39] usb 2-1: config 0 descriptor?? [ 348.577542][ T39] hub 2-1:0.0: USB hub found [ 348.772323][ T39] hub 2-1:0.0: 1 port detected [ 349.437474][ T5035] hub 2-1:0.0: activate --> -90 [ 349.545135][ T7796] netlink: 'syz.3.2447': attribute type 12 has an invalid length. [ 349.715235][ T7808] fuse: Unknown parameter '0x0000000000000003' [ 349.791157][ T4084] Bluetooth: hci0: Frame reassembly failed (-84) [ 350.239194][ T5035] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 350.241249][ T5620] usb 2-1: USB disconnect, device number 127 [ 350.246410][ T5035] usb 2-1-port1: attempt power cycle [ 350.792767][ T7828] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2457'. [ 350.998638][ T7832] netlink: 'syz.1.2459': attribute type 12 has an invalid length. [ 351.114813][ T7835] netlink: 'syz.4.2460': attribute type 12 has an invalid length. [ 351.241167][ T7842] fuse: Unknown parameter '0x0000000000000003' [ 351.567786][ T5620] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 351.748854][ T5620] usb 5-1: no configurations [ 351.753476][ T5620] usb 5-1: can't read configurations, error -22 [ 351.808467][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 351.814483][ T426] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 351.918468][ T5620] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 352.108818][ T5620] usb 5-1: no configurations [ 352.113433][ T5620] usb 5-1: can't read configurations, error -22 [ 352.119982][ T344] usb 3-1: reset high-speed USB device number 122 using dummy_hcd [ 352.131513][ T344] usb 3-1: device reset changed ep0 maxpacket size! [ 352.143169][ T5620] usb usb5-port1: attempt power cycle [ 352.155167][ T344] usb 3-1: USB disconnect, device number 122 [ 352.288478][ T623] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 352.418260][ T7865] netlink: 'syz.0.2472': attribute type 12 has an invalid length. [ 352.513706][ T623] usb 2-1: Using ep0 maxpacket: 32 [ 352.519677][ T344] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 352.520087][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.538696][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.548448][ T623] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 352.557472][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.565884][ T623] usb 2-1: config 0 descriptor?? [ 352.571541][ T623] hub 2-1:0.0: USB hub found [ 352.578491][ T5620] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 352.783833][ T623] hub 2-1:0.0: 1 port detected [ 353.220472][ T5620] usb 5-1: no configurations [ 353.225083][ T5620] usb 5-1: can't read configurations, error -22 [ 353.278512][ T968] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 353.309810][ T344] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 353.318854][ T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.359972][ T344] usb 3-1: config 0 descriptor?? [ 353.367570][ T7872] netlink: 'syz.0.2474': attribute type 12 has an invalid length. [ 353.378473][ T5620] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 353.390805][ T623] hub 2-1:0.0: activate --> -90 [ 353.409226][ T5620] usb 5-1: no configurations [ 353.413846][ T5620] usb 5-1: can't read configurations, error -22 [ 353.420482][ T5620] usb usb5-port1: unable to enumerate USB device [ 353.459469][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 353.470465][ T968] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.480927][ T968] usb 4-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 353.489991][ T968] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.508514][ T968] usb 4-1: config 0 descriptor?? [ 353.522147][ T7875] fuse: Unknown parameter '0x0000000000000003' [ 353.714620][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.723111][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.848469][ T5620] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 353.931961][ T7863] fuse: Bad value for 'user_id' [ 353.940007][ T968] usbhid 4-1:0.0: can't add hid device: -71 [ 353.945959][ T968] usbhid: probe of 4-1:0.0 failed with error -71 [ 353.953559][ T968] usb 4-1: USB disconnect, device number 4 [ 354.038489][ T5620] usb 1-1: Using ep0 maxpacket: 32 [ 354.044663][ T5620] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.054788][ T5620] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.067670][ T5620] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 354.076779][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.085664][ T5620] usb 1-1: config 0 descriptor?? [ 354.091619][ T5620] hub 1-1:0.0: bad descriptor, ignoring hub [ 354.097523][ T5620] hub: probe of 1-1:0.0 failed with error -5 [ 354.103750][ T5620] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 354.192008][ T623] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 354.198985][ T5035] usb 2-1: USB disconnect, device number 6 [ 354.204831][ T623] usb 2-1-port1: cannot reset (err = -71) [ 354.210877][ T623] usb 2-1-port1: attempt power cycle [ 354.368393][ T344] usb 3-1: Cannot set autoneg [ 354.373159][ T344] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -61 [ 354.838508][ T7897] tmpfs: Unknown parameter 'nolazytimeř˙' [ 355.174849][ T7905] netlink: 'syz.4.2486': attribute type 12 has an invalid length. [ 355.271984][ T7908] fuse: Unknown parameter 'fd0x0000000000000003' [ 355.578469][ T344] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 355.768821][ T344] usb 5-1: no configurations [ 355.773425][ T344] usb 5-1: can't read configurations, error -22 [ 355.782650][ T968] usb 3-1: USB disconnect, device number 123 [ 355.868219][ T4084] Bluetooth: hci0: Frame reassembly failed (-84) [ 355.928465][ T344] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 356.018463][ T5620] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 356.118817][ T344] usb 5-1: no configurations [ 356.123441][ T344] usb 5-1: can't read configurations, error -22 [ 356.129881][ T344] usb usb5-port1: attempt power cycle [ 356.209717][ T968] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 356.218532][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 356.229597][ T5620] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.239512][ T5620] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 356.249071][ T5620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.260496][ T5620] usb 2-1: config 0 descriptor?? [ 356.384618][ T7931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2495'. [ 356.489036][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.498612][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.518467][ T968] usb 3-1: Using ep0 maxpacket: 32 [ 356.524664][ T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.535586][ T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.545398][ T968] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 356.554436][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.562451][ T344] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 356.570592][ T968] usb 3-1: config 0 descriptor?? [ 356.576351][ T968] hub 3-1:0.0: USB hub found [ 356.609128][ T344] usb 5-1: no configurations [ 356.613766][ T344] usb 5-1: can't read configurations, error -22 [ 356.707280][ T7924] fuse: Bad value for 'user_id' [ 356.719202][ T5620] usbhid 2-1:0.0: can't add hid device: -71 [ 356.729665][ T5620] usbhid: probe of 2-1:0.0 failed with error -71 [ 356.738204][ T5620] usb 2-1: USB disconnect, device number 11 [ 356.768508][ T344] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 356.777057][ T968] hub 3-1:0.0: 1 port detected [ 356.799165][ T344] usb 5-1: no configurations [ 356.803772][ T344] usb 5-1: can't read configurations, error -22 [ 356.810129][ T344] usb usb5-port1: unable to enumerate USB device [ 358.104912][ T1046] Bluetooth: hci0: command 0x1003 tx timeout [ 358.140576][ T426] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 358.338545][ T5035] usb 1-1: USB disconnect, device number 117 [ 358.345070][ T968] hub 3-1:0.0: activate --> -90 [ 358.351098][ T7943] netlink: 'syz.3.2498': attribute type 12 has an invalid length. [ 358.367426][ T7948] fuse: Unknown parameter 'fd0x0000000000000003' [ 358.815425][ T5035] usb 3-1: USB disconnect, device number 124 [ 358.836184][ T7953] tmpfs: Unknown parameter 'nolazytimeř' [ 358.866134][ T7957] 9pnet_fd: Insufficient options for proto=fd [ 358.918109][ T7961] tmpfs: Unknown parameter 'nolazytimeř˙' [ 358.982418][ T968] usb 3-1-port1: cannot reset (err = -71) [ 358.988581][ T968] usb 3-1-port1: attempt power cycle [ 359.006983][ T7967] fuse: Unknown parameter '0x0000000000000004' [ 359.238531][ T623] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 359.393997][ T5620] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 359.419899][ T623] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 359.429035][ T623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.437641][ T623] usb 1-1: config 0 descriptor?? [ 359.578838][ T5620] usb 5-1: no configurations [ 359.583466][ T5620] usb 5-1: can't read configurations, error -22 [ 359.738477][ T5620] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 359.919064][ T5620] usb 5-1: no configurations [ 359.923744][ T5620] usb 5-1: can't read configurations, error -22 [ 359.930649][ T5620] usb usb5-port1: attempt power cycle [ 360.015706][ T7991] tmpfs: Unknown parameter 'nolazytimeř' [ 360.271356][ T7995] 9pnet_fd: Insufficient options for proto=fd [ 360.628489][ T5620] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 360.659310][ T5620] usb 5-1: no configurations [ 360.663921][ T5620] usb 5-1: can't read configurations, error -22 [ 360.828480][ T5620] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 360.859127][ T5620] usb 5-1: no configurations [ 360.863755][ T5620] usb 5-1: can't read configurations, error -22 [ 360.870771][ T5620] usb usb5-port1: unable to enumerate USB device [ 361.048478][ T7980] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 361.049070][ T623] usb 1-1: Cannot set autoneg [ 361.060847][ T623] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 361.071657][ T623] usb 1-1: USB disconnect, device number 118 [ 361.239812][ T7980] usb 2-1: unable to get BOS descriptor or descriptor too short [ 361.247820][ T7980] usb 2-1: not running at top speed; connect to a high speed hub [ 361.256513][ T7980] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 361.266747][ T7980] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 361.277801][ T7980] usb 2-1: string descriptor 0 read error: -22 [ 361.284103][ T7980] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 361.293272][ T7980] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.311581][ T7980] usb 2-1: 0:2 : does not exist [ 361.570039][ T28] audit: type=1400 audit(1762437122.144:459): avc: denied { read write } for pid=8013 comm="syz.0.2523" name="snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 361.597236][ T28] audit: type=1400 audit(1762437122.144:460): avc: denied { open } for pid=8013 comm="syz.0.2523" path="/dev/snapshot" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 362.873742][ T968] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 362.886808][ T8027] tmpfs: Unknown parameter 'nolazytimeř' [ 362.892908][ T7980] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 362.905317][ T7980] usb 2-1: Warning! Unlikely big volume range (=3301), cval->res is probably wrong. [ 362.930112][ T7980] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/3301/1 [ 362.979982][ T7980] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 363.021427][ T7980] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 363.054881][ T7980] usb 2-1: USB disconnect, device number 12 [ 363.309098][ T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 363.328578][ T968] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.338322][ T968] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 363.351731][ T968] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.378661][ T968] usb 3-1: config 0 descriptor?? [ 363.476402][ T8034] loop0: detected capacity change from 0 to 40427 [ 363.492492][ T8034] F2FS-fs (loop0): fault_injection options not supported [ 363.506802][ T8034] F2FS-fs (loop0): fault_type options not supported [ 363.515293][ T8034] F2FS-fs (loop0): invalid crc value [ 363.527075][ T8034] F2FS-fs (loop0): Found nat_bits in checkpoint [ 363.559558][ T8034] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 363.584833][ T8012] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.596284][ T8012] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.811535][ T623] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 363.912476][ T8012] fuse: Bad value for 'user_id' [ 364.055181][ T623] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 364.193286][ T623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.217721][ T968] usbhid 3-1:0.0: can't add hid device: -71 [ 364.223723][ T968] usbhid: probe of 3-1:0.0 failed with error -71 [ 364.231388][ T968] usb 3-1: USB disconnect, device number 3 [ 364.259920][ T623] usb 4-1: config 0 descriptor?? [ 364.422288][ T8061] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2537'. [ 364.658479][ T7980] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 364.838867][ T7980] usb 1-1: no configurations [ 364.843485][ T7980] usb 1-1: can't read configurations, error -22 [ 364.948455][ T5436] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 364.998475][ T7980] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 365.130192][ T8069] tmpfs: Unknown parameter 'nolazytimeř' [ 365.139924][ T5436] usb 3-1: unable to get BOS descriptor or descriptor too short [ 365.149546][ T5436] usb 3-1: not running at top speed; connect to a high speed hub [ 365.158132][ T5436] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 365.173275][ T5436] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 365.188807][ T7980] usb 1-1: no configurations [ 365.188840][ T5436] usb 3-1: string descriptor 0 read error: -22 [ 365.193452][ T7980] usb 1-1: can't read configurations, error -22 [ 365.199904][ T5436] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.212057][ T7980] usb usb1-port1: attempt power cycle [ 365.215136][ T5436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.234621][ T5436] usb 3-1: 0:2 : does not exist [ 365.469181][ T8080] binder: 8079:8080 ioctl 4018620d 0 returned -22 [ 365.476276][ T8080] binder: 8079:8080 ioctl c0306201 0 returned -14 [ 365.508498][ T5035] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 365.638465][ T7980] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 365.689144][ T7980] usb 1-1: no configurations [ 365.689504][ T5035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 365.693765][ T7980] usb 1-1: can't read configurations, error -22 [ 365.711473][ T5035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 365.721800][ T5035] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 365.731117][ T5035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.740564][ T5035] usb 5-1: config 0 descriptor?? [ 365.838477][ T7980] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 365.869282][ T7980] usb 1-1: no configurations [ 365.873923][ T7980] usb 1-1: can't read configurations, error -22 [ 365.880426][ T7980] usb usb1-port1: unable to enumerate USB device [ 365.921554][ T623] usb 4-1: Cannot set autoneg [ 365.926265][ T623] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 365.935287][ T623] usb 4-1: USB disconnect, device number 5 [ 365.946783][ T8075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.955386][ T8075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.038127][ T5436] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 366.045859][ T5436] usb 3-1: Warning! Unlikely big volume range (=3301), cval->res is probably wrong. [ 366.055576][ T5436] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/3301/1 [ 366.064845][ T5436] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 366.074193][ T5436] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 366.087624][ T5436] usb 3-1: USB disconnect, device number 4 [ 366.165614][ T8075] fuse: Unknown parameter '' [ 366.172527][ T5035] usbhid 5-1:0.0: can't add hid device: -71 [ 366.178612][ T5035] usbhid: probe of 5-1:0.0 failed with error -71 [ 366.204390][ T5035] usb 5-1: USB disconnect, device number 28 [ 366.440651][ T8095] binder: 8094:8095 ioctl c0306201 0 returned -14 [ 367.146742][ T28] audit: type=1400 audit(1762437127.714:461): avc: denied { create } for pid=8113 comm="syz.2.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 367.196612][ T28] audit: type=1400 audit(1762437127.734:462): avc: denied { setopt } for pid=8113 comm="syz.2.2556" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 367.419287][ T8124] tipc: Enabling of bearer rejected, already enabled [ 367.908535][ T5035] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 368.109461][ T5035] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 368.118580][ T5035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.127382][ T5035] usb 4-1: config 0 descriptor?? [ 368.448526][ T968] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 368.598470][ T5436] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 368.639485][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 368.658440][ T968] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.688287][ T968] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 368.698571][ T968] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.720329][ T968] usb 5-1: config 0 descriptor?? [ 368.809815][ T5436] usb 3-1: unable to get BOS descriptor or descriptor too short [ 368.827567][ T5436] usb 3-1: not running at top speed; connect to a high speed hub [ 368.846197][ T5436] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.866408][ T5436] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.888476][ T5436] usb 3-1: string descriptor 0 read error: -22 [ 368.894684][ T5436] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.918483][ T5436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.930717][ T8137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.939606][ T5436] usb 3-1: 0:2 : does not exist [ 368.949571][ T8137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.223285][ T8149] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2567'. [ 369.314814][ T8137] fuse: Bad value for 'user_id' [ 369.366914][ T968] usbhid 5-1:0.0: can't add hid device: -71 [ 369.373026][ T968] usbhid: probe of 5-1:0.0 failed with error -71 [ 369.380493][ T968] usb 5-1: USB disconnect, device number 29 [ 369.737031][ T5035] usb 4-1: Cannot set autoneg [ 369.741973][ T5035] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 369.756424][ T5035] usb 4-1: USB disconnect, device number 6 [ 369.774684][ T5436] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 369.786110][ T5436] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 369.797213][ T5436] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 369.815994][ T5436] usb 3-1: USB disconnect, device number 5 [ 370.198474][ T968] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 370.306725][ T8162] 9pnet_fd: Insufficient options for proto=fd [ 370.388871][ T968] usb 2-1: no configurations [ 370.393525][ T968] usb 2-1: can't read configurations, error -22 [ 370.548455][ T968] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 370.738833][ T968] usb 2-1: no configurations [ 370.743489][ T968] usb 2-1: can't read configurations, error -22 [ 370.754942][ T968] usb usb2-port1: attempt power cycle [ 370.918365][ T8178] tmpfs: Unknown parameter 'nolazytime•' [ 371.164032][ T8184] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2580'. [ 371.320960][ T968] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 371.359137][ T968] usb 2-1: no configurations [ 371.363749][ T968] usb 2-1: can't read configurations, error -22 [ 371.478476][ T344] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 371.521785][ T8186] loop3: detected capacity change from 0 to 40427 [ 371.538460][ T968] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 371.546140][ T8186] F2FS-fs (loop3): fault_injection options not supported [ 371.553457][ T8186] F2FS-fs (loop3): fault_type options not supported [ 371.560824][ T8186] F2FS-fs (loop3): invalid crc value [ 371.567170][ T8186] F2FS-fs (loop3): Found nat_bits in checkpoint [ 371.579140][ T968] usb 2-1: no configurations [ 371.583732][ T968] usb 2-1: can't read configurations, error -22 [ 371.598510][ T968] usb usb2-port1: unable to enumerate USB device [ 371.605344][ T8186] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 371.669825][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 371.699125][ T344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.774374][ T344] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 371.824735][ T344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.043863][ T344] usb 5-1: config 0 descriptor?? [ 372.274814][ T8180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.372485][ T8180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.628196][ T8180] fuse: Bad value for 'user_id' [ 372.666101][ T344] usbhid 5-1:0.0: can't add hid device: -71 [ 372.672178][ T2849] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 372.689106][ T344] usbhid: probe of 5-1:0.0 failed with error -71 [ 372.769496][ T344] usb 5-1: USB disconnect, device number 30 [ 372.909459][ T2849] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 372.918543][ T2849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.927230][ T2849] usb 1-1: config 0 descriptor?? [ 373.064666][ T8201] loop1: detected capacity change from 0 to 40427 [ 373.073674][ T8201] F2FS-fs (loop1): fault_injection options not supported [ 373.078570][ T5620] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 373.080838][ T8201] F2FS-fs (loop1): fault_type options not supported [ 373.096195][ T8201] F2FS-fs (loop1): invalid crc value [ 373.102747][ T8201] F2FS-fs (loop1): Found nat_bits in checkpoint [ 373.108490][ T5035] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 373.131246][ T8201] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 373.288638][ T5035] usb 3-1: Using ep0 maxpacket: 16 [ 373.300741][ T5035] usb 3-1: config index 0 descriptor too short (expected 29659, got 56) [ 373.372916][ T5620] usb 4-1: unable to get BOS descriptor or descriptor too short [ 373.415686][ T5620] usb 4-1: not running at top speed; connect to a high speed hub [ 373.441375][ T5035] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.455351][ T5035] usb 3-1: config 0 has no interfaces? [ 373.464200][ T5035] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 373.473369][ T5035] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 373.481974][ T5035] usb 3-1: Manufacturer: syz [ 373.493540][ T5035] usb 3-1: config 0 descriptor?? [ 373.540459][ T5620] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.553150][ T5620] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.567448][ T5620] usb 4-1: string descriptor 0 read error: -22 [ 373.574496][ T5620] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 373.583638][ T5620] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.275335][ T5620] usb 4-1: 0:2 : does not exist [ 374.312679][ T5035] usb 3-1: USB disconnect, device number 6 [ 374.669693][ T2849] usb 1-1: Cannot set autoneg [ 374.674456][ T2849] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 374.683445][ T2849] usb 1-1: USB disconnect, device number 123 [ 375.191197][ T5620] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 375.202545][ T5620] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 375.208522][ T5035] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 375.212569][ T5620] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 375.237232][ T5620] usb 4-1: USB disconnect, device number 7 [ 375.274858][ T8230] binder: 8229:8230 ioctl c0306201 0 returned -14 [ 375.282932][ T8231] binder: 8228:8231 ioctl 4018620d 0 returned -22 [ 375.298016][ T8231] binder: 8228:8231 ioctl c0306201 0 returned -14 [ 375.400760][ T5035] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 375.418471][ T5035] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.438365][ T5035] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 375.447663][ T5035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.466178][ T5035] usb 3-1: config 0 descriptor?? [ 375.478895][ T8240] binder: 8239:8240 ioctl c0306201 0 returned -14 [ 375.686833][ T8223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.718715][ T8223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.935736][ T5035] usbhid 3-1:0.0: can't add hid device: -71 [ 375.941770][ T5035] usbhid: probe of 3-1:0.0 failed with error -71 [ 375.961481][ T5035] usb 3-1: USB disconnect, device number 7 [ 376.040522][ T8260] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2603'. [ 376.719551][ T8268] tmpfs: Unknown parameter 'nolazytime•' [ 377.088725][ T623] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 377.120136][ T8279] kvm: vcpu 2: requested 148514 ns lapic timer period limited to 200000 ns [ 377.128907][ T8279] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 377.147157][ T8279] ------------[ cut here ]------------ [ 377.152652][ T8279] WARNING: CPU: 1 PID: 8279 at arch/x86/kvm/x86.c:11228 kvm_arch_vcpu_ioctl_run+0x1a8c/0x1fa0 [ 377.162979][ T8279] Modules linked in: [ 377.166873][ T8279] CPU: 1 PID: 8279 Comm: syz.3.2610 Not tainted syzkaller #0 [ 377.174241][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 377.184321][ T8279] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1a8c/0x1fa0 [ 377.190759][ T8279] Code: e8 f9 85 a4 00 e9 a4 f2 ff ff 44 89 f9 80 e1 07 38 c1 0f 8c ef e8 ff ff 4c 89 ff e8 7e 85 a4 00 e9 e2 e8 ff ff e8 b4 12 60 00 <0f> 0b e9 93 fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 09 ef [ 377.210394][ T8279] RSP: 0018:ffffc9000df17bf8 EFLAGS: 00010283 [ 377.216453][ T8279] RAX: ffffffff81100d4c RBX: ffff888112f824c0 RCX: 0000000000080000 [ 377.224452][ T8279] RDX: ffffc900026ee000 RSI: 000000000000003f RDI: 0000000000000040 [ 377.232454][ T8279] RBP: ffffc9000df17cb0 R08: dffffc0000000000 R09: ffffed102319a289 [ 377.240452][ T8279] R10: ffffed102319a289 R11: 1ffff1102319a288 R12: ffff88811b2b0000 [ 377.248503][ T8279] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff888112f82538 [ 377.256469][ T8279] FS: 00007f6a379d36c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 377.265407][ T8279] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.271996][ T8279] CR2: 0000001b2eb15ff8 CR3: 0000000142214000 CR4: 00000000003526a0 [ 377.279978][ T8279] Call Trace: [ 377.283246][ T8279] [ 377.286158][ T8279] ? mutex_lock_killable+0x8d/0x1a0 [ 377.291364][ T8279] ? __cfi_mutex_lock_killable+0x10/0x10 [ 377.296997][ T8279] kvm_vcpu_ioctl+0x882/0xb70 [ 377.301681][ T8279] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 377.306892][ T8279] ? selinux_file_ioctl+0x377/0x480 [ 377.312099][ T8279] ? __cfi_do_futex+0x10/0x10 [ 377.316771][ T8279] ? lock_vma_under_rcu+0x3eb/0x4d0 [ 377.321979][ T8279] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 377.327530][ T8279] ? __fget_files+0x2d5/0x330 [ 377.332383][ T8279] ? security_file_ioctl+0x95/0xc0 [ 377.337484][ T8279] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 377.342852][ T8279] __se_sys_ioctl+0x12f/0x1b0 [ 377.347521][ T8279] __x64_sys_ioctl+0x7b/0x90 [ 377.352114][ T8279] x64_sys_call+0x58b/0x9a0 [ 377.356618][ T8279] do_syscall_64+0x4c/0xa0 [ 377.361044][ T8279] ? clear_bhb_loop+0x30/0x80 [ 377.365723][ T8279] ? clear_bhb_loop+0x30/0x80 [ 377.370409][ T8279] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 377.376302][ T8279] RIP: 0033:0x7f6a36b8f6c9 [ 377.380777][ T8279] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.400399][ T8279] RSP: 002b:00007f6a379d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.408815][ T8279] RAX: ffffffffffffffda RBX: 00007f6a36de5fa0 RCX: 00007f6a36b8f6c9 [ 377.416781][ T8279] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 377.424756][ T8279] RBP: 00007f6a36c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 377.432736][ T8279] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.440713][ T8279] R13: 00007f6a36de6038 R14: 00007f6a36de5fa0 R15: 00007ffdd4bcea28 [ 377.448708][ T8279] [ 377.451722][ T8279] ---[ end trace 0000000000000000 ]--- [ 377.549459][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 377.560559][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 377.570326][ T623] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 377.579392][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.588225][ T623] usb 2-1: config 0 descriptor?? [ 378.147336][ T8271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.249504][ T8271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.512428][ T8271] fuse: Bad value for 'user_id' [ 378.568695][ T623] usbhid 2-1:0.0: can't add hid device: -71 [ 378.575938][ T623] usbhid: probe of 2-1:0.0 failed with error -71 [ 378.583491][ T623] usb 2-1: USB disconnect, device number 17 [ 378.613527][ T8295] tmpfs: Unknown parameter 'nolazytimeř' [ 378.648504][ T7980] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 378.850224][ T7980] usb 3-1: unable to get BOS descriptor or descriptor too short [ 378.858819][ T5035] usb 1-1: new full-speed USB device number 124 using dummy_hcd [ 378.868465][ T7980] usb 3-1: not running at top speed; connect to a high speed hub [ 378.876889][ T7980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.898462][ T7980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 378.920145][ T7980] usb 3-1: string descriptor 0 read error: -22 [ 378.926346][ T7980] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.948443][ T7980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.969053][ T7980] usb 3-1: 0:2 : does not exist [ 379.059469][ T5035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 379.080000][ T5035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.093934][ T8302] binder: 8301:8302 ioctl c0306201 0 returned -14 [ 379.115132][ T5035] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 379.141719][ T5035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.169663][ T5035] usb 1-1: config 0 descriptor?? [ 379.385996][ T8291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.402148][ T8291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.622055][ T8291] fuse: Bad value for 'user_id' [ 379.630099][ T5035] usbhid 1-1:0.0: can't add hid device: -71 [ 379.636129][ T5035] usbhid: probe of 1-1:0.0 failed with error -71 [ 379.655250][ T5035] usb 1-1: USB disconnect, device number 124 [ 379.772525][ T7980] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 379.788483][ T7980] usb 3-1: Warning! Unlikely big volume range (=3301), cval->res is probably wrong. [ 379.797880][ T7980] usb 3-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/3301/1 [ 379.817779][ T7980] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 379.838109][ T7980] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 379.857946][ T7980] usb 3-1: USB disconnect, device number 8 [ 380.171818][ T8314] 9pnet_fd: Insufficient options for proto=fd [ 380.398558][ T5035] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 380.588504][ T5035] usb 2-1: Using ep0 maxpacket: 32 [ 380.594645][ T5035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.605722][ T5035] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.615948][ T5035] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 380.625116][ T5035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.637864][ T5035] usb 2-1: config 0 descriptor?? [ 380.638455][ T5620] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 380.644257][ T5035] hub 2-1:0.0: USB hub found [ 380.838454][ T5620] usb 4-1: Using ep0 maxpacket: 32 [ 380.844661][ T5620] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.844856][ T5035] hub 2-1:0.0: 1 port detected [ 380.868456][ T5620] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.888453][ T5620] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 380.897488][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.932250][ T5620] usb 4-1: config 0 descriptor?? [ 380.938652][ T5620] hub 4-1:0.0: bad descriptor, ignoring hub [ 380.944599][ T5620] hub: probe of 4-1:0.0 failed with error -5 [ 380.950846][ T5620] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 381.126635][ T8345] binder: 8344:8345 ioctl c0306201 0 returned -14 [ 381.317076][ T8353] binder: 8352:8353 ioctl 4018620d 0 returned -22 [ 381.324458][ T8353] binder: 8352:8353 ioctl c0306201 0 returned -14 [ 381.485887][ T5035] hub 2-1:0.0: activate --> -90 [ 382.294311][ T5035] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 382.301981][ T623] usb 2-1: USB disconnect, device number 18 [ 382.337039][ T5035] usb 2-1-port1: attempt power cycle [ 382.952216][ T8380] tmpfs: Unknown parameter 'nolazytime' [ 382.980248][ T8382] tmpfs: Unknown parameter 'nolazytimeř' [ 383.313801][ T5620] usb 1-1: new full-speed USB device number 125 using dummy_hcd [ 383.408479][ T623] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 383.499716][ T5620] usb 1-1: unable to get BOS descriptor or descriptor too short [ 383.507702][ T5620] usb 1-1: not running at top speed; connect to a high speed hub [ 383.516122][ T5620] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.526218][ T5620] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.536998][ T5620] usb 1-1: string descriptor 0 read error: -22 [ 383.543216][ T5620] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.555517][ T5620] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.563122][ T8401] binder: 8400:8401 ioctl 4018620d 0 returned -22 [ 383.571320][ T8401] binder: 8400:8401 ioctl c0306201 0 returned -14 [ 383.575039][ T5620] usb 1-1: 0:2 : does not exist [ 383.599904][ T623] usb 2-1: unable to get BOS descriptor or descriptor too short [ 383.607975][ T623] usb 2-1: not running at top speed; connect to a high speed hub [ 383.616591][ T623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 383.626797][ T623] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 383.637947][ T623] usb 2-1: string descriptor 0 read error: -22 [ 383.644222][ T623] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 383.653396][ T623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.059181][ T5436] usb 4-1: reset high-speed USB device number 8 using dummy_hcd [ 384.249420][ T5436] usb 4-1: device firmware changed [ 384.259260][ T5436] usb 4-1: USB disconnect, device number 8 [ 384.581481][ T5620] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 384.600450][ T5620] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 384.612313][ T5620] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 384.626424][ T623] usb 2-1: 0:2 : does not exist [ 384.627259][ T5620] usb 1-1: USB disconnect, device number 125 [ 384.637430][ T5436] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 384.666559][ T8418] tmpfs: Unknown parameter 'nolazytimeř' [ 384.828518][ T5436] usb 4-1: Using ep0 maxpacket: 32 [ 384.834791][ T5436] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.845772][ T5436] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.857434][ T5436] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 384.866709][ T5436] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.876303][ T623] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 384.888123][ T5436] usb 4-1: config 0 descriptor?? [ 384.893114][ T623] usb 2-1: Warning! Unlikely big volume range (=3301), cval->res is probably wrong. [ 384.902723][ T623] usb 2-1: [5] FU [Mic Capture Volume] ch = 1, val = 0/3301/1 [ 384.910759][ T5436] hub 4-1:0.0: USB hub found [ 384.917171][ T623] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 384.926641][ T623] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 384.937613][ T623] usb 2-1: USB disconnect, device number 23 [ 384.946077][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 385.111412][ T5436] hub 4-1:0.0: 1 port detected [ 385.458198][ T8445] binder: 8444:8445 ioctl 4018620d 0 returned -22 [ 385.465337][ T8445] binder: 8444:8445 ioctl c0306201 0 returned -14 [ 385.557800][ T8449] tmpfs: Unknown parameter 'nolazytimeř' [ 385.638475][ T5620] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 385.714448][ T5436] hub 4-1:0.0: activate --> -90 [ 385.828775][ T5620] usb 1-1: Using ep0 maxpacket: 32 [ 385.834988][ T5620] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.847887][ T5620] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 385.856955][ T5620] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.865789][ T5620] usb 1-1: config 0 descriptor?? [ 385.871694][ T5620] hub 1-1:0.0: bad descriptor, ignoring hub [ 385.877588][ T5620] hub: probe of 1-1:0.0 failed with error -5 [ 385.883804][ T5620] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 385.935937][ T366] udevd[366]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 386.137913][ T8473] binder: 8472:8473 ioctl c0306201 0 returned -14 [ 386.168568][ T2849] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 386.359556][ T2849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 386.370782][ T2849] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 386.380057][ T2849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.391910][ T2849] usb 2-1: config 0 descriptor?? [ 386.397191][ T8465] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 386.428461][ T39] usb 5-1: new low-speed USB device number 31 using dummy_hcd [ 386.535963][ T5436] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 386.542931][ T5620] usb 4-1: USB disconnect, device number 9 [ 386.558598][ T5436] usb 4-1-port1: attempt power cycle [ 386.619581][ T39] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 386.628663][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.637302][ T39] usb 5-1: config 0 descriptor?? [ 386.811210][ T2849] hid-generic 0003:04F3:0755.0031: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.1-1/input0 [ 387.015629][ T623] usb 2-1: USB disconnect, device number 24 [ 387.338483][ T2849] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 387.481533][ T4171] Bluetooth: hci0: Frame reassembly failed (-84) [ 387.519586][ T2849] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 387.541594][ T2849] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 387.558130][ T2849] usb 3-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 387.567557][ T2849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.582119][ T2849] usb 3-1: config 0 descriptor?? [ 387.846587][ T39] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 387.858549][ T39] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 387.869056][ T39] asix: probe of 5-1:0.0 failed with error -71 [ 387.876182][ T39] usb 5-1: USB disconnect, device number 31 [ 387.990092][ T2849] magicmouse 0003:05AC:0269.0032: item fetching failed at offset 5/7 [ 387.998341][ T2849] magicmouse 0003:05AC:0269.0032: magicmouse hid parse failed [ 388.006055][ T2849] magicmouse: probe of 0003:05AC:0269.0032 failed with error -22 [ 388.028500][ T623] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 388.197717][ T39] usb 3-1: USB disconnect, device number 9 [ 388.220052][ T623] usb 2-1: unable to get BOS descriptor or descriptor too short [ 388.229193][ T623] usb 2-1: not running at top speed; connect to a high speed hub [ 388.241944][ T623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.257523][ T623] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.272777][ T623] usb 2-1: string descriptor 0 read error: -22 [ 388.281199][ T623] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 388.294620][ T623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.311665][ T623] usb 2-1: 0:2 : does not exist [ 388.551528][ T8508] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2687'. [ 388.921996][ T623] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5) [ 388.931625][ T623] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 388.941053][ T623] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 388.951455][ T623] usb 2-1: USB disconnect, device number 25 [ 389.297385][ T8521] binder: 8520:8521 ioctl c0306201 0 returned -14 [ 389.498504][ T426] Bluetooth: hci0: command 0x1003 tx timeout [ 389.498528][ T1046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 390.043867][ T8538] tmpfs: Unknown parameter 'nolazytimeř' [ 390.231678][ T623] usb 1-1: USB disconnect, device number 126 [ 390.598555][ T623] usb 1-1: new full-speed USB device number 127 using dummy_hcd [ 390.699541][ T8547] 9pnet_fd: Insufficient options for proto=fd [ 390.800938][ T623] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 390.885827][ T623] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 391.054329][ T8549] netlink: 'syz.1.2700': attribute type 12 has an invalid length. [ 391.062252][ T623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.130382][ T623] usb 1-1: config 0 descriptor?? [ 391.135644][ T8531] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 391.236082][ T8563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2702'. [ 391.478451][ T5436] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 391.498477][ T2849] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 391.562796][ T623] hid-generic 0003:04F3:0755.0033: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 391.659830][ T5436] usb 2-1: unable to get BOS descriptor or descriptor too short [ 391.667867][ T5436] usb 2-1: not running at top speed; connect to a high speed hub [ 391.676334][ T5436] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.686459][ T5436] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.689824][ T2849] usb 5-1: unable to get BOS descriptor or descriptor too short [ 391.697427][ T5436] usb 2-1: string descriptor 0 read error: -22 [ 391.703708][ T2849] usb 5-1: not running at top speed; connect to a high speed hub [ 391.709219][ T5436] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.717828][ T2849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.725923][ T5436] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.736223][ T2849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.749606][ T5436] usb 2-1: 0:2 : does not exist [ 391.755106][ T2849] usb 5-1: string descriptor 0 read error: -22 [ 391.763933][ T2849] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 391.773107][ T2849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.826658][ T623] usb 1-1: USB disconnect, device number 127 [ 391.950607][ T8572] tmpfs: Unknown parameter 'nolazytimeř' [ 393.197112][ T5436] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 393.216755][ T5436] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 393.271883][ T5436] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 393.461760][ T2849] usb 5-1: 0:2 : does not exist [ 393.474605][ T8598] netlink: 'syz.2.2715': attribute type 12 has an invalid length. [ 393.519932][ T5436] usb 2-1: USB disconnect, device number 26 [ 393.710484][ T2849] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 393.730028][ T2849] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 393.746541][ T2849] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 393.858583][ T5035] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 394.061114][ T5035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 394.110112][ T5035] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 394.186377][ T5035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.326824][ T5035] usb 1-1: config 0 descriptor?? [ 394.384498][ T8605] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 394.642251][ T2849] usb 5-1: USB disconnect, device number 32 [ 394.853103][ T5035] hid-generic 0003:04F3:0755.0034: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.0-1/input0 [ 395.095821][ T5035] usb 1-1: USB disconnect, device number 2 [ 395.258572][ T5436] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 395.347811][ T8641] tmpfs: Unknown parameter 'nolazytimeř' [ 395.460370][ T5436] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 395.471874][ T5436] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 395.482896][ T5436] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 395.493071][ T5436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.533462][ T5436] usb 2-1: config 0 descriptor?? [ 395.728579][ T5035] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 395.822223][ T8614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.922423][ T8614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.951352][ T5035] usb 5-1: unable to get BOS descriptor or descriptor too short [ 395.966835][ T5035] usb 5-1: not running at top speed; connect to a high speed hub [ 396.111751][ T5035] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 396.142782][ T5035] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 396.155719][ T5035] usb 5-1: string descriptor 0 read error: -22 [ 396.162597][ T5035] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 396.171903][ T5035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.466447][ T5436] usbhid 2-1:0.0: can't add hid device: -71 [ 396.472499][ T5436] usbhid: probe of 2-1:0.0 failed with error -71 [ 396.479529][ T5035] usb 5-1: 0:2 : does not exist [ 396.487765][ T5436] usb 2-1: USB disconnect, device number 27 [ 397.393561][ T8665] binder: 8664:8665 ioctl c0306201 0 returned -14 [ 397.469597][ T5620] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 397.549103][ T5035] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 397.559636][ T5035] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 397.569316][ T5035] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 397.580106][ T5035] usb 5-1: USB disconnect, device number 33 [ 397.649548][ T5620] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 397.658697][ T5620] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.667189][ T5620] usb 3-1: config 0 descriptor?? [ 397.808459][ T2849] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 397.991296][ T2849] usb 4-1: Using ep0 maxpacket: 32 [ 397.998589][ T2849] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.011575][ T2849] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 398.020835][ T2849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.029967][ T2849] usb 4-1: config 0 descriptor?? [ 398.038744][ T8674] netlink: 'syz.0.2738': attribute type 12 has an invalid length. [ 398.039218][ T2849] hub 4-1:0.0: bad descriptor, ignoring hub [ 398.052600][ T2849] hub: probe of 4-1:0.0 failed with error -5 [ 398.065842][ T2849] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 399.108453][ T623] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 399.329672][ T623] usb 5-1: config 0 has no interfaces? [ 399.335891][ T623] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 399.355152][ T623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 399.372009][ T623] usb 5-1: SerialNumber: syz [ 399.385511][ T623] usb 5-1: config 0 descriptor?? [ 399.501578][ T5620] usb 3-1: Cannot set autoneg [ 399.506331][ T5620] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -61 [ 399.600192][ T623] usb 5-1: USB disconnect, device number 34 [ 399.671998][ T4171] Bluetooth: hci0: Frame reassembly failed (-84) [ 399.703401][ T5436] usb 3-1: USB disconnect, device number 10 [ 400.634757][ T8713] netlink: 'syz.1.2750': attribute type 12 has an invalid length. [ 400.836607][ T8728] binder: 8727:8728 ioctl c0306201 0 returned -14 [ 401.728708][ T426] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 401.728837][ T1046] Bluetooth: hci0: command 0x1003 tx timeout [ 401.858930][ T623] usb 4-1: USB disconnect, device number 14 [ 402.359541][ T28] audit: type=1400 audit(1762437162.934:463): avc: denied { ioctl } for pid=8736 comm="syz.3.2758" path="socket:[99416]" dev="sockfs" ino=99416 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 402.429973][ T8748] netlink: 'syz.2.2762': attribute type 12 has an invalid length. [ 402.818457][ T623] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 402.828570][ T5035] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 403.018488][ T5035] usb 1-1: Using ep0 maxpacket: 32 [ 403.024807][ T623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.036053][ T5035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.045895][ T623] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 403.055984][ T5035] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 403.065217][ T623] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 403.074535][ T5035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.082708][ T623] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.094785][ T5035] usb 1-1: config 0 descriptor?? [ 403.101423][ T5035] hub 1-1:0.0: bad descriptor, ignoring hub [ 403.111224][ T623] usb 5-1: config 0 descriptor?? [ 403.116308][ T5035] hub: probe of 1-1:0.0 failed with error -5 [ 403.124065][ T5035] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 403.528241][ T623] usbhid 5-1:0.0: can't add hid device: -71 [ 403.556851][ T623] usbhid: probe of 5-1:0.0 failed with error -71 [ 403.628590][ T5035] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 403.662201][ T623] usb 5-1: USB disconnect, device number 35 [ 403.871803][ T5035] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 403.891362][ T5035] usb 4-1: can't read configurations, error -61 [ 404.175873][ T8785] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2774'. [ 404.274976][ T5035] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 404.462930][ T8795] binder: 8794:8795 ioctl c0306201 0 returned -14 [ 404.499934][ T5035] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 404.507660][ T5035] usb 4-1: can't read configurations, error -61 [ 404.515125][ T5035] usb usb4-port1: attempt power cycle [ 404.600120][ T8799] netlink: 'syz.1.2778': attribute type 12 has an invalid length. [ 404.794423][ T4310] Bluetooth: hci0: Frame reassembly failed (-84) [ 404.928581][ T5035] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 404.960207][ T5035] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 404.971307][ T5035] usb 4-1: can't read configurations, error -61 [ 405.157714][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2786'. [ 405.192784][ T5035] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 405.241171][ T5035] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 405.259989][ T5035] usb 4-1: can't read configurations, error -61 [ 405.266434][ T5035] usb usb4-port1: unable to enumerate USB device [ 406.365725][ T8837] tmpfs: Unknown parameter 'nolazytimeř' [ 406.546416][ T8847] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2793'. [ 406.848467][ T1046] Bluetooth: hci0: command 0x1003 tx timeout [ 406.854536][ T426] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 406.979110][ T60] usb 1-1: USB disconnect, device number 3 [ 407.127151][ T8861] binder: 8860:8861 ioctl c0306201 0 returned -14 [ 408.648435][ T5620] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 408.818555][ T2849] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 408.849560][ T5620] usb 4-1: config 0 has no interfaces? [ 408.855814][ T5620] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 408.873611][ T5620] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 408.890337][ T5620] usb 4-1: SerialNumber: syz [ 408.900591][ T5620] usb 4-1: config 0 descriptor?? [ 408.968444][ T5436] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 409.009711][ T2849] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 409.022213][ T2849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.040237][ T2849] usb 5-1: config 0 descriptor?? [ 409.113491][ T5620] usb 4-1: USB disconnect, device number 19 [ 409.159594][ T5436] usb 2-1: config 0 has no interfaces? [ 409.165862][ T5436] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 409.183655][ T5436] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 409.200391][ T5436] usb 2-1: SerialNumber: syz [ 409.213915][ T5436] usb 2-1: config 0 descriptor?? [ 409.425795][ T5620] usb 2-1: USB disconnect, device number 28 [ 410.018482][ T344] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 410.210490][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 410.221958][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.232251][ T344] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 410.269566][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.282912][ T344] usb 1-1: config 0 descriptor?? [ 410.478516][ T5035] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 410.644147][ T8902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.680711][ T5035] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 410.704760][ T8902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.726518][ T5035] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 410.777933][ T5035] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.855664][ T5035] usb 4-1: config 0 descriptor?? [ 410.863220][ T8917] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 410.975412][ T8902] fuse: Bad value for 'user_id' [ 411.226421][ T344] usbhid 1-1:0.0: can't add hid device: -71 [ 411.232613][ T344] usbhid: probe of 1-1:0.0 failed with error -71 [ 411.240172][ T344] usb 1-1: USB disconnect, device number 4 [ 411.395068][ T2849] usb 5-1: Cannot set autoneg [ 411.399258][ T5035] usbhid 4-1:0.0: can't add hid device: -71 [ 411.400551][ T2849] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 411.405680][ T5035] usbhid: probe of 4-1:0.0 failed with error -71 [ 411.424650][ T2849] usb 5-1: USB disconnect, device number 36 [ 411.430966][ T5035] usb 4-1: USB disconnect, device number 20 [ 411.518471][ T60] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 411.699540][ T60] usb 2-1: config 0 has no interfaces? [ 411.705722][ T60] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 411.714818][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 411.722827][ T60] usb 2-1: SerialNumber: syz [ 411.727944][ T60] usb 2-1: config 0 descriptor?? [ 411.888544][ T623] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 411.935196][ T968] usb 2-1: USB disconnect, device number 29 [ 412.079477][ T623] usb 1-1: config 0 has no interfaces? [ 412.089984][ T623] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 412.108443][ T623] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 412.117813][ T623] usb 1-1: SerialNumber: syz [ 412.177321][ T623] usb 1-1: config 0 descriptor?? [ 412.454449][ T60] usb 1-1: USB disconnect, device number 5 [ 413.061726][ T8965] netlink: 'syz.1.2836': attribute type 12 has an invalid length. [ 413.388443][ T2849] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 413.418467][ T5436] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 413.579649][ T2849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 413.596097][ T2849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 413.615654][ T2849] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 413.619499][ T5436] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 413.634444][ T2849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.642581][ T5436] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 413.652715][ T2849] usb 5-1: config 0 descriptor?? [ 413.668039][ T5436] usb 1-1: config 0 descriptor?? [ 413.863088][ T8968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.876192][ T8968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 414.094394][ T8968] fuse: Bad value for 'user_id' [ 414.101135][ T2849] usbhid 5-1:0.0: can't add hid device: -71 [ 414.108203][ T2849] usbhid: probe of 5-1:0.0 failed with error -71 [ 414.137642][ T2849] usb 5-1: USB disconnect, device number 37 [ 414.143893][ T8991] binder: 8990:8991 ioctl c0306201 0 returned -14 [ 414.404083][ T9006] netlink: 'syz.3.2852': attribute type 12 has an invalid length. [ 414.478473][ T5035] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 414.659569][ T5035] usb 2-1: config 0 has no interfaces? [ 414.665864][ T5035] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 414.686582][ T5035] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 414.708462][ T5035] usb 2-1: SerialNumber: syz [ 414.719254][ T5035] usb 2-1: config 0 descriptor?? [ 414.931333][ T5035] usb 2-1: USB disconnect, device number 30 [ 415.497213][ T5436] usb 1-1: Cannot set autoneg [ 415.504084][ T5436] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 415.522893][ T5436] usb 1-1: USB disconnect, device number 6 [ 415.535632][ T9028] binder: 9027:9028 ioctl c0306201 0 returned -14 [ 415.697974][ T9039] netlink: 'syz.1.2863': attribute type 12 has an invalid length. [ 416.168573][ T5436] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 416.360234][ T5436] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 416.388793][ T5436] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 416.416145][ T5436] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 416.444805][ T5436] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.466290][ T5436] usb 5-1: config 0 descriptor?? [ 416.679760][ T9046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.692641][ T9046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.919509][ T9046] fuse: Bad value for 'user_id' [ 416.986370][ T5436] usbhid 5-1:0.0: can't add hid device: -71 [ 416.992368][ T5436] usbhid: probe of 5-1:0.0 failed with error -71 [ 417.001360][ T5436] usb 5-1: USB disconnect, device number 38 [ 417.008510][ T344] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 417.199542][ T344] usb 3-1: config 0 has no interfaces? [ 417.206126][ T344] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 417.238429][ T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 417.268421][ T344] usb 3-1: SerialNumber: syz [ 417.281318][ T344] usb 3-1: config 0 descriptor?? [ 417.489517][ T60] usb 3-1: USB disconnect, device number 11 [ 418.059921][ T60] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 418.078972][ T9090] binder: 9089:9090 ioctl c0306201 0 returned -14 [ 418.249778][ T60] usb 4-1: unable to get BOS descriptor or descriptor too short [ 418.277980][ T60] usb 4-1: not running at top speed; connect to a high speed hub [ 418.298437][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 418.328424][ T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 418.359499][ T60] usb 4-1: string descriptor 0 read error: -22 [ 418.365709][ T60] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 418.398433][ T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.432507][ T60] usb 4-1: 0:2 : does not exist [ 419.152612][ T9102] binder: 9101:9102 ioctl c0306201 0 returned -14 [ 419.237928][ T60] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 419.254657][ T60] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 419.282333][ T60] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 419.305842][ T60] usb 4-1: USB disconnect, device number 21 [ 419.648433][ T5436] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 419.860752][ T5436] usb 3-1: unable to get BOS descriptor or descriptor too short [ 419.904415][ T5436] usb 3-1: not running at top speed; connect to a high speed hub [ 419.931445][ T5436] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 420.054974][ T5436] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 420.165725][ T5436] usb 3-1: string descriptor 0 read error: -22 [ 420.291337][ T5436] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 420.392468][ T5436] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.610437][ T5436] usb 3-1: 0:2 : does not exist [ 420.698628][ T9121] binder: 9120:9121 ioctl c0306201 0 returned -14 [ 420.798474][ T623] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 420.989491][ T623] usb 4-1: config 0 has no interfaces? [ 420.995682][ T623] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 421.015857][ T623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 421.026401][ T623] usb 4-1: SerialNumber: syz [ 421.035213][ T623] usb 4-1: config 0 descriptor?? [ 421.247569][ T623] usb 4-1: USB disconnect, device number 22 [ 421.341164][ T5436] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 421.356605][ T5436] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 421.375897][ T5436] usb 3-1: 5:0: failed to get current value for ch 1 (-22) [ 421.396604][ T5436] usb 3-1: USB disconnect, device number 12 [ 421.498450][ T968] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 421.698436][ T968] usb 2-1: Using ep0 maxpacket: 32 [ 421.718793][ T968] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 421.738431][ T968] usb 2-1: New USB device found, idVendor=05ac, idProduct=8242, bcdDevice= 0.00 [ 421.747521][ T968] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.769286][ T968] usb 2-1: config 0 descriptor?? [ 421.855744][ T9146] tmpfs: Unknown parameter 'nolazytimeř' [ 421.974628][ T9156] binder: 9155:9156 ioctl c0306201 0 returned -14 [ 422.878850][ T968] usbhid 2-1:0.0: can't add hid device: -71 [ 422.884806][ T968] usbhid: probe of 2-1:0.0 failed with error -71 [ 422.898503][ T968] usb 2-1: USB disconnect, device number 31 [ 423.268435][ T2849] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 423.398443][ T344] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 423.459622][ T2849] usb 4-1: config 0 has no interfaces? [ 423.465854][ T2849] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.483576][ T2849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 423.500280][ T2849] usb 4-1: SerialNumber: syz [ 423.514273][ T2849] usb 4-1: config 0 descriptor?? [ 423.580072][ T9185] tmpfs: Unknown parameter 'nolazytimeř' [ 423.601117][ T344] usb 1-1: unable to get BOS descriptor or descriptor too short [ 423.618455][ T344] usb 1-1: not running at top speed; connect to a high speed hub [ 423.626997][ T344] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.637173][ T344] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 423.648343][ T344] usb 1-1: string descriptor 0 read error: -22 [ 423.654630][ T344] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 423.664152][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.674297][ T344] usb 1-1: 0:2 : does not exist [ 423.723913][ T2849] usb 4-1: USB disconnect, device number 23 [ 424.112376][ T28] audit: type=1400 audit(1762437184.684:464): avc: denied { mounton } for pid=9202 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 424.182181][ T9202] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.189363][ T9202] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.196865][ T9202] device bridge_slave_0 entered promiscuous mode [ 424.204158][ T9202] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.211324][ T9202] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.218978][ T9202] device bridge_slave_1 entered promiscuous mode [ 424.375078][ T9202] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.382176][ T9202] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.389477][ T9202] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.396506][ T9202] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.925094][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 424.952862][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.014083][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.218997][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 425.231994][ T344] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 425.246471][ T344] usb 1-1: 5:0: cannot get min/max values for control 3 (id 5) [ 425.246796][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.260195][ T344] usb 1-1: 5:0: failed to get current value for ch 1 (-22) [ 425.261089][ T4171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.279338][ T344] usb 1-1: USB disconnect, device number 7 [ 425.318545][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 425.336891][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.343980][ T4171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.380060][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 425.388227][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 425.421738][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 425.438720][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 425.472672][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 425.484153][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 425.493145][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2918'. [ 425.515022][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 425.524677][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 425.552858][ T9202] device veth0_vlan entered promiscuous mode [ 425.562384][ T9229] tmpfs: Unknown parameter 'nolazytimeř' [ 425.610930][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 425.622091][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 425.644380][ T9202] device veth1_macvtap entered promiscuous mode [ 425.667117][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 425.675545][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 425.683941][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 425.699253][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 425.716725][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 425.740054][ T28] audit: type=1400 audit(1762437186.314:465): avc: denied { mounton } for pid=9202 comm="syz-executor" path="/root/syzkaller.zWApfb/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 425.838864][ T344] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 426.049696][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 426.066208][ T344] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.109045][ T344] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 426.130306][ T4125] tipc: Disabling bearer [ 426.135758][ T4125] tipc: Left network mode [ 426.136550][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.156935][ T344] usb 1-1: config 0 descriptor?? [ 426.373861][ T9219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.396596][ T9219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.622211][ T9219] fuse: Bad value for 'user_id' [ 426.639143][ T344] usbhid 1-1:0.0: can't add hid device: -71 [ 426.646812][ T344] usbhid: probe of 1-1:0.0 failed with error -71 [ 426.670571][ T4125] device bridge_slave_1 left promiscuous mode [ 426.680006][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.705646][ T344] usb 1-1: USB disconnect, device number 8 [ 426.710061][ T4125] device bridge_slave_0 left promiscuous mode [ 426.735033][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.763840][ T4125] device veth1_macvtap left promiscuous mode [ 426.784092][ T4125] device veth0_vlan left promiscuous mode [ 427.168479][ T7980] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 427.365837][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.372990][ T344] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 427.381646][ T9261] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.388890][ T7980] usb 5-1: unable to get BOS descriptor or descriptor too short [ 427.397323][ T7980] usb 5-1: not running at top speed; connect to a high speed hub [ 427.405659][ T9261] device bridge_slave_0 entered promiscuous mode [ 427.412872][ T7980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.427048][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.434183][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.434207][ T7980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.441650][ T9261] device bridge_slave_1 entered promiscuous mode [ 427.460268][ T7980] usb 5-1: string descriptor 0 read error: -22 [ 427.467623][ T7980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.481639][ T4125] tipc: Disabling bearer [ 427.482275][ T7980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.490293][ T4125] tipc: Left network mode [ 427.504391][ T7980] usb 5-1: 0:2 : does not exist [ 427.568520][ T344] usb 2-1: Using ep0 maxpacket: 16 [ 427.575965][ T344] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.594731][ T344] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 427.613667][ T344] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 427.637792][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.646321][ T344] usb 2-1: Product: syz [ 427.651036][ T344] usb 2-1: Manufacturer: syz [ 427.655694][ T344] usb 2-1: SerialNumber: syz [ 427.677165][ T9261] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.684225][ T9261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.691511][ T9261] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.698549][ T9261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.728171][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 427.738025][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.759093][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.782420][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 427.798298][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.805367][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.828526][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 427.839149][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.846189][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.888494][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 427.896466][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 427.916972][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 427.930384][ T9261] device veth0_vlan entered promiscuous mode [ 427.937012][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 427.946792][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 427.954384][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 427.975461][ T9261] device veth1_macvtap entered promiscuous mode [ 427.994650][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 428.011791][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 428.033789][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 428.290841][ T4125] device bridge_slave_1 left promiscuous mode [ 428.302481][ T4125] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.315160][ T7980] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 428.327539][ T4125] device bridge_slave_0 left promiscuous mode [ 428.334242][ T4125] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.343283][ T4125] device veth1_macvtap left promiscuous mode [ 428.350136][ T4125] device veth0_vlan left promiscuous mode [ 428.359472][ T7980] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 428.386554][ T7980] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 428.420193][ T7980] usb 5-1: USB disconnect, device number 39 [ 428.425709][ T9284] tmpfs: Unknown parameter 'nolazytimeř' [ 428.426796][ T344] usb 2-1: 0:2 : does not exist [ 428.445971][ T344] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 428.505444][ T344] usb 2-1: USB disconnect, device number 32 [ 429.258752][ T9313] fuse: Invalid rootmode [ 429.986245][ T9328] loop2: detected capacity change from 0 to 40427 [ 429.993363][ T9328] F2FS-fs (loop2): fault_injection options not supported [ 430.000499][ T623] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 430.000927][ T9328] F2FS-fs (loop2): fault_type options not supported [ 430.015396][ T9328] F2FS-fs (loop2): invalid crc value [ 430.022435][ T9328] F2FS-fs (loop2): Found nat_bits in checkpoint [ 430.060554][ T9328] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 430.245003][ T623] usb 2-1: Using ep0 maxpacket: 16 [ 430.399830][ T623] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.414094][ T623] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.452796][ T623] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.573414][ T623] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.647757][ T623] usb 2-1: Product: syz [ 430.875890][ T623] usb 2-1: Manufacturer: syz [ 430.880808][ T623] usb 2-1: SerialNumber: syz [ 430.931136][ T4171] Bluetooth: hci0: Frame reassembly failed (-84) [ 430.939190][ T4171] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.091625][ T623] usb 2-1: 0:2 : does not exist [ 431.122010][ T623] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 431.139621][ T623] usb 2-1: USB disconnect, device number 33 [ 431.428446][ T2849] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 431.439023][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 431.608765][ T968] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 431.620959][ T2849] usb 5-1: unable to get BOS descriptor or descriptor too short [ 431.637947][ T2849] usb 5-1: not running at top speed; connect to a high speed hub [ 431.654315][ T2849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.664448][ T2849] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 431.691073][ T2849] usb 5-1: string descriptor 0 read error: -22 [ 431.697282][ T2849] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 431.706361][ T2849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.723291][ T2849] usb 5-1: 0:2 : does not exist [ 431.808527][ T968] usb 1-1: Using ep0 maxpacket: 16 [ 431.814763][ T968] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.826541][ T968] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 431.839415][ T968] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 431.881253][ T968] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.897242][ T4125] Bluetooth: hci1: Frame reassembly failed (-84) [ 431.911766][ T968] usb 1-1: config 0 descriptor?? [ 432.087011][ T9377] loop1: detected capacity change from 0 to 40427 [ 432.103774][ T9377] F2FS-fs (loop1): fault_injection options not supported [ 432.119215][ T9377] F2FS-fs (loop1): fault_type options not supported [ 432.130976][ T9369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.135898][ T9377] F2FS-fs (loop1): invalid crc value [ 432.146893][ T9369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.159442][ T9377] F2FS-fs (loop1): Found nat_bits in checkpoint [ 432.195024][ T9377] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 432.464332][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.473950][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.483184][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.490893][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.619900][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.629624][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.637262][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.645051][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.652588][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.660700][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.668437][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.676442][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.858972][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.866587][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.874154][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.881687][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.888958][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.896349][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.903756][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.911024][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.918244][ T968] microsoft 0003:045E:07DA.0035: unknown main item tag 0x0 [ 432.938641][ T968] microsoft 0003:045E:07DA.0035: No inputs registered, leaving [ 432.958574][ T968] microsoft 0003:045E:07DA.0035: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 432.970020][ T968] microsoft 0003:045E:07DA.0035: no inputs found [ 432.976370][ T968] microsoft 0003:045E:07DA.0035: could not initialize ff, continuing anyway [ 432.991549][ T968] usb 1-1: USB disconnect, device number 9 [ 433.008499][ T426] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 433.020762][ T9385] fido_id[9385]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 433.027333][ T9350] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 433.103251][ T2849] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 433.132236][ T2849] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 433.150441][ T2849] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 433.171749][ T2849] usb 5-1: USB disconnect, device number 40 [ 433.182089][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 433.874570][ T4171] Bluetooth: hci2: Frame reassembly failed (-84) [ 433.968556][ T426] Bluetooth: hci1: command 0x1003 tx timeout [ 433.968674][ T1046] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 434.894528][ T9375] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 434.903028][ T9404] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 435.143201][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2975'. [ 436.345414][ T1046] Bluetooth: hci2: command 0x1003 tx timeout [ 436.379281][ T45] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 437.137572][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.144760][ T9448] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.152089][ T9448] device bridge_slave_0 entered promiscuous mode [ 437.160481][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.167542][ T9448] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.175069][ T9448] device bridge_slave_1 entered promiscuous mode [ 437.185386][ T4310] tipc: Disabling bearer [ 437.197804][ T4310] tipc: Left network mode [ 437.280785][ T9465] binder: 9464:9465 ioctl c0306201 0 returned -14 [ 437.313534][ T9448] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.320618][ T9448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.327882][ T9448] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.334936][ T9448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.375648][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 437.378476][ T24] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 437.390532][ T4171] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.406543][ T4171] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.428976][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 437.437169][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.444221][ T4171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.454958][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 437.473292][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.480339][ T4171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.498099][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 437.506195][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 437.524143][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 437.537607][ T9448] device veth0_vlan entered promiscuous mode [ 437.547085][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 437.555419][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 437.563368][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 437.569978][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 437.578090][ T9448] device veth1_macvtap entered promiscuous mode [ 437.589568][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 437.595261][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 437.621320][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 437.627489][ T24] usb 1-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 437.645636][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 437.655352][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.668452][ T623] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 437.692812][ T24] usb 1-1: config 0 descriptor?? [ 437.848851][ T4310] device bridge_slave_1 left promiscuous mode [ 437.869157][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.876813][ T4310] device bridge_slave_0 left promiscuous mode [ 437.883051][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.890212][ T623] usb 4-1: Using ep0 maxpacket: 16 [ 437.896480][ T623] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 437.907999][ T9451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.924357][ T4310] device veth1_macvtap left promiscuous mode [ 437.935053][ T9451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.943540][ T4310] device veth0_vlan left promiscuous mode [ 437.949666][ T623] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 438.047059][ T623] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 438.142648][ T623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.209555][ T9451] fuse: Bad value for 'user_id' [ 438.266464][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 438.285149][ T24] usbhid: probe of 1-1:0.0 failed with error -71 [ 438.410384][ T623] usb 4-1: config 0 descriptor?? [ 438.464088][ T24] usb 1-1: USB disconnect, device number 10 [ 438.673346][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.693986][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.729464][ T9479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.744929][ T9479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.941915][ T9513] binder: 9512:9513 ioctl c0306201 0 returned -14 [ 439.115030][ T623] usbhid 4-1:0.0: can't add hid device: -71 [ 439.122827][ T623] usbhid: probe of 4-1:0.0 failed with error -71 [ 439.152611][ T623] usb 4-1: USB disconnect, device number 24 [ 440.913469][ T9553] binder: 9552:9553 ioctl c0306201 0 returned -14 [ 443.088679][ T24] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 443.268441][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 443.274892][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 443.290695][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 443.300690][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 443.309964][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.321962][ T24] usb 2-1: config 0 descriptor?? [ 443.336430][ T24] hub 2-1:0.0: USB hub found [ 443.531414][ T24] hub 2-1:0.0: 1 port detected [ 444.148883][ T24] hub 2-1:0.0: activate --> -90 [ 444.318447][ T968] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 444.351845][ T24] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 444.358763][ T5035] usb 2-1: USB disconnect, device number 34 [ 444.508440][ T968] usb 4-1: Using ep0 maxpacket: 16 [ 444.518627][ T968] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.529133][ T968] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 444.541290][ T968] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 444.550535][ T968] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.558708][ T968] usb 4-1: Product: syz [ 444.562894][ T968] usb 4-1: Manufacturer: syz [ 444.567535][ T968] usb 4-1: SerialNumber: syz [ 444.726184][ T9664] tmpfs: Unknown parameter 'nolazytimeř' [ 444.803534][ T968] usb 4-1: 0:2 : does not exist [ 444.810549][ T968] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 444.841288][ T968] usb 4-1: USB disconnect, device number 25 [ 445.059473][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 445.238420][ T5035] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 445.418435][ T5035] usb 1-1: Using ep0 maxpacket: 32 [ 445.424763][ T5035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.455884][ T5035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.480769][ T5035] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 445.513439][ T5035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.542018][ T5035] usb 1-1: config 0 descriptor?? [ 445.555023][ T5035] hub 1-1:0.0: USB hub found [ 445.748353][ T5035] hub 1-1:0.0: 1 port detected [ 446.358438][ T5035] hub 1-1:0.0: activate --> -90 [ 446.378436][ T24] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 446.559227][ T5035] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 446.559615][ T2849] usb 1-1: USB disconnect, device number 11 [ 446.579413][ T24] usb 2-1: config 0 has no interfaces? [ 446.585582][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 446.594763][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 446.605621][ T24] usb 2-1: SerialNumber: syz [ 446.611513][ T24] usb 2-1: config 0 descriptor?? [ 446.819568][ T24] usb 2-1: USB disconnect, device number 35 [ 447.510690][ T4067] tipc: Disabling bearer [ 447.516104][ T4067] tipc: Left network mode [ 447.576407][ T9771] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.583696][ T9771] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.591345][ T9771] device bridge_slave_0 entered promiscuous mode [ 447.602436][ T9771] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.609709][ T9771] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.617194][ T9771] device bridge_slave_1 entered promiscuous mode [ 447.678441][ T7980] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 447.707240][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 447.715216][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 447.732251][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 447.740798][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 447.749777][ T4171] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.756818][ T4171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.764907][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 447.773657][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 447.782092][ T4171] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.789136][ T4171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.807242][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 447.815130][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 447.823483][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 447.839762][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 447.848360][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 447.856170][ T623] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 447.864236][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 447.868427][ T7980] usb 5-1: Using ep0 maxpacket: 32 [ 447.872764][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 447.881980][ T7980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.885101][ T9771] device veth0_vlan entered promiscuous mode [ 447.908291][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 447.908480][ T7980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.917795][ T9771] device veth1_macvtap entered promiscuous mode [ 447.937126][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 447.946175][ T7980] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 447.957005][ T4171] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 447.965450][ T7980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.982985][ T7980] usb 5-1: config 0 descriptor?? [ 447.996163][ T7980] hub 5-1:0.0: USB hub found [ 448.028482][ T2849] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 448.058467][ T623] usb 2-1: Using ep0 maxpacket: 16 [ 448.065312][ T623] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.076286][ T623] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 448.089163][ T623] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 448.098185][ T623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.107796][ T623] usb 2-1: config 0 descriptor?? [ 448.196424][ T7980] hub 5-1:0.0: 1 port detected [ 448.203363][ T4067] device bridge_slave_1 left promiscuous mode [ 448.208600][ T2849] usb 4-1: Using ep0 maxpacket: 32 [ 448.212797][ T4067] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.215616][ T2849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.232489][ T2849] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.232684][ T4067] device bridge_slave_0 left promiscuous mode [ 448.242461][ T2849] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 448.248736][ T4067] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.257552][ T2849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.273551][ T4067] device veth1_macvtap left promiscuous mode [ 448.276544][ T2849] usb 4-1: config 0 descriptor?? [ 448.279773][ T4067] device veth0_vlan left promiscuous mode [ 448.296248][ T2849] hub 4-1:0.0: USB hub found [ 448.315146][ T9776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.323807][ T9776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.331640][ T5035] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 448.518626][ T5035] usb 1-1: Using ep0 maxpacket: 32 [ 448.524797][ T5035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 448.535762][ T5035] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 448.545542][ T5035] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 448.554823][ T5035] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.563675][ T5035] usb 1-1: config 0 descriptor?? [ 448.569943][ T5035] hub 1-1:0.0: USB hub found [ 448.628468][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 448.696869][ T2849] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 448.710293][ T623] usbhid 2-1:0.0: can't add hid device: -71 [ 448.716320][ T623] usbhid: probe of 2-1:0.0 failed with error -71 [ 448.723958][ T623] usb 2-1: USB disconnect, device number 36 [ 448.769469][ T5035] hub 1-1:0.0: 1 port detected [ 448.809415][ T24] usb 3-1: config 0 has no interfaces? [ 448.815709][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 448.824860][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 448.833280][ T24] usb 3-1: SerialNumber: syz [ 448.839027][ T24] usb 3-1: config 0 descriptor?? [ 448.859191][ T7980] hub 5-1:0.0: activate --> -90 [ 449.046186][ T2774] usb 3-1: USB disconnect, device number 13 [ 449.060044][ T344] usb 5-1: USB disconnect, device number 41 [ 449.373552][ T2774] hub 1-1:0.0: activate --> -90 [ 449.574418][ T2774] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 449.581659][ T5035] usb 1-1: USB disconnect, device number 12 [ 449.599809][ T4067] Bluetooth: hci1: Frame reassembly failed (-84) [ 450.928458][ T797] Bluetooth: hci0: command 0x1003 tx timeout [ 450.934713][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 450.947290][ T2849] usbhid 4-1:0.0: can't add hid device: -71 [ 450.953390][ T2849] usbhid: probe of 4-1:0.0 failed with error -71 [ 451.218633][ T2849] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 451.227293][ T2849] usb 4-1: device reset changed ep0 maxpacket size! [ 451.235881][ T2849] usb 4-1: USB disconnect, device number 26 [ 451.278417][ T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 451.308426][ T5035] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 451.458407][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 451.464653][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.476141][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.486069][ T24] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 451.495481][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.506934][ T24] usb 1-1: config 0 descriptor?? [ 451.513242][ T5035] usb 3-1: config 0 has no interfaces? [ 451.519390][ T24] hub 1-1:0.0: USB hub found [ 451.524204][ T5035] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.533488][ T5035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 451.541611][ T5035] usb 3-1: SerialNumber: syz [ 451.550111][ T5035] usb 3-1: config 0 descriptor?? [ 451.588430][ T2849] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 451.658424][ T45] Bluetooth: hci1: command 0x1003 tx timeout [ 451.664480][ T1046] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 451.695423][ T9844] tmpfs: Unknown parameter 'nolazytimeř' [ 451.713752][ T24] hub 1-1:0.0: 1 port detected [ 451.757335][ T5035] usb 3-1: USB disconnect, device number 14 [ 451.778425][ T2849] usb 4-1: Using ep0 maxpacket: 16 [ 451.784658][ T2849] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.794806][ T2849] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.805245][ T2849] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.814676][ T2849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.825259][ T2849] usb 4-1: Product: syz [ 451.829458][ T2849] usb 4-1: Manufacturer: syz [ 451.834052][ T2849] usb 4-1: SerialNumber: syz [ 451.879350][ T9852] 9pnet_fd: Insufficient options for proto=fd [ 452.903480][ T2849] usb 4-1: 0:2 : does not exist [ 452.911066][ T2849] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 452.932407][ T2849] usb 4-1: USB disconnect, device number 27 [ 452.966741][ T9866] binder: 9865:9866 ioctl c0306201 0 returned -14 [ 453.098932][ T5035] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 453.159571][ T365] udevd[365]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 453.175355][ T9876] tmpfs: Unknown parameter 'nolazytimeř' [ 453.298433][ T5035] usb 3-1: Using ep0 maxpacket: 32 [ 453.304782][ T5035] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 453.325947][ T5035] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 453.344928][ T5035] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 453.364141][ T5035] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.382710][ T24] hub 1-1:0.0: activate --> -90 [ 453.387928][ T5035] usb 3-1: config 0 descriptor?? [ 453.394292][ T5035] hub 3-1:0.0: USB hub found [ 453.422404][ T24] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 453.429324][ T2774] usb 1-1: USB disconnect, device number 13 [ 453.841224][ T5035] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 454.066209][ T4310] Bluetooth: hci0: Frame reassembly failed (-84) [ 455.462236][ T4067] tipc: Disabling bearer [ 455.467531][ T4067] tipc: Left network mode [ 455.476815][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.483977][ T9913] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.491446][ T9913] device bridge_slave_0 entered promiscuous mode [ 455.498332][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.505430][ T9913] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.512963][ T9913] device bridge_slave_1 entered promiscuous mode [ 455.587832][ T9913] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.594937][ T9913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.602233][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.609274][ T9913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.634106][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 455.647251][ T4310] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.655091][ T4310] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.680930][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 455.689622][ T4310] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.696691][ T4310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.704106][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 455.712820][ T4310] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.719884][ T4310] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.741377][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 455.749738][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 455.757677][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 455.770568][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 455.778641][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 455.786031][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 455.795026][ T9913] device veth0_vlan entered promiscuous mode [ 455.806104][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 455.815265][ T9913] device veth1_macvtap entered promiscuous mode [ 455.824982][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 455.839369][ T4310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 455.886512][ T9944] binder: 9940:9944 ioctl c0306201 0 returned -14 [ 456.779454][ T1046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 456.799665][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 456.876935][ T5035] usbhid 3-1:0.0: can't add hid device: -71 [ 456.944857][ T5035] usbhid: probe of 3-1:0.0 failed with error -71 [ 456.993910][ T5035] usb 3-1: USB disconnect, device number 15 [ 457.045550][ T9973] 9pnet_fd: Insufficient options for proto=fd [ 457.111784][ T4067] device bridge_slave_1 left promiscuous mode [ 457.117945][ T4067] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.142803][ T4067] device bridge_slave_0 left promiscuous mode [ 457.154463][ T4067] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.174937][ T4067] device veth1_macvtap left promiscuous mode [ 457.187664][ T4067] device veth0_vlan left promiscuous mode [ 457.238430][ T2774] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 457.438435][ T2774] usb 5-1: Using ep0 maxpacket: 16 [ 457.444844][ T2774] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.455858][ T24] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 457.473280][ T2774] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 457.499269][ T2774] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 457.520679][ T2774] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.540636][ T2774] usb 5-1: config 0 descriptor?? [ 457.659669][ T24] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.676148][ T24] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 457.698519][ T24] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 457.716375][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.732079][ T24] usb 4-1: Product: syz [ 457.740718][ T24] usb 4-1: Manufacturer: syz [ 457.752186][ T24] usb 4-1: SerialNumber: syz [ 457.971035][ T9979] binder: 9978:9979 ioctl 801c581f 0 returned -22 [ 457.978178][ T9979] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 458.091432][ T4310] Bluetooth: hci0: Frame reassembly failed (-84) [ 458.115379][ T2774] usbhid 5-1:0.0: can't add hid device: -71 [ 458.122253][ T2774] usbhid: probe of 5-1:0.0 failed with error -71 [ 458.141985][ T2774] usb 5-1: USB disconnect, device number 42 [ 458.156928][ T2849] hid-generic 0000:0000:0000.0036: unknown main item tag 0x0 [ 458.169444][ T2849] hid-generic 0000:0000:0000.0036: hidraw0: HID v0.00 Device [syz1] on syz0 [ 458.418452][ T344] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 458.596479][ T9979] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 458.599669][ T344] usb 3-1: config 0 has no interfaces? [ 458.609915][ T344] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 458.618995][ T344] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 458.626975][ T344] usb 3-1: SerialNumber: syz [ 458.639411][ T344] usb 3-1: config 0 descriptor?? [ 458.708451][ T2774] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 458.804825][ T24] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 458.811326][ T24] cdc_ncm 4-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 458.818900][ T24] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 458.877424][T10005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3154'. [ 458.948761][ T2774] usb 1-1: Using ep0 maxpacket: 32 [ 458.965194][ T2774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 458.981596][ T2774] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 458.985692][ T344] usb 3-1: USB disconnect, device number 16 [ 458.991500][ T2774] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 459.006392][ T2774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.014508][ T24] cdc_ncm 4-1:1.0: setting tx_max = 184 [ 459.023002][ T24] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 459.034120][ T2774] usb 1-1: config 0 descriptor?? [ 459.040300][ T2774] hub 1-1:0.0: USB hub found [ 459.246244][ T344] usb 4-1: USB disconnect, device number 28 [ 459.252451][ T344] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 459.441559][ T2774] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 459.690564][ T4067] Bluetooth: hci2: Frame reassembly failed (-84) [ 459.890968][T10059] 9pnet_fd: Insufficient options for proto=fd [ 460.128920][T10047] Bluetooth: hci0: command 0x1003 tx timeout [ 460.134994][ T1046] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 460.142303][ T9994] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 461.254254][ T28] audit: type=1326 audit(1762437221.824:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.3.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3338f6c9 code=0x7ffc0000 [ 461.307881][ T28] audit: type=1326 audit(1762437221.824:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.3.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3338f6c9 code=0x7ffc0000 [ 461.351850][ T28] audit: type=1326 audit(1762437221.854:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.3.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b3338f6c9 code=0x7ffc0000 [ 461.409058][ T28] audit: type=1326 audit(1762437221.854:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.3.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3338f6c9 code=0x7ffc0000 [ 461.433675][ T28] audit: type=1326 audit(1762437221.854:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.3.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3338f6c9 code=0x7ffc0000 [ 461.472119][ T28] audit: type=1326 audit(1762437221.854:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.3.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4b3338f6c9 code=0x7ffc0000 [ 461.505311][ T28] audit: type=1326 audit(1762437221.854:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.3.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3338f6c9 code=0x7ffc0000 [ 461.535252][ T28] audit: type=1326 audit(1762437221.854:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.3.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3338f6c9 code=0x7ffc0000 [ 461.559323][ T28] audit: type=1326 audit(1762437221.854:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.3.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4b3338f6c9 code=0x7ffc0000 [ 461.583432][ T28] audit: type=1326 audit(1762437221.854:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10088 comm="syz.3.3175" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4b3338f6c9 code=0x7ffc0000 [ 461.728443][ T1046] Bluetooth: hci2: command 0x1003 tx timeout [ 461.734489][ T1046] Bluetooth: hci1: command 0x1003 tx timeout [ 461.738477][ T2849] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 461.748089][ T45] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 461.754227][ T797] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 461.760976][ T2774] usbhid 1-1:0.0: can't add hid device: -71 [ 461.766914][ T2774] usbhid: probe of 1-1:0.0 failed with error -71 [ 461.809640][ T2774] usb 1-1: USB disconnect, device number 14 [ 461.989496][ T2849] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 193, using maximum allowed: 30 [ 462.018415][ T2849] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 462.052101][ T2849] usb 4-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 462.067860][ T2849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.089969][ T2849] usb 4-1: config 0 descriptor?? [ 462.208405][ C1] ================================================================== [ 462.216496][ C1] BUG: KASAN: use-after-free in __run_timers+0x32b/0x9a0 [ 462.223535][ C1] Write of size 8 at addr ffff888114df0a00 by task syz.4.3178/10096 [ 462.231507][ C1] [ 462.233827][ C1] CPU: 1 PID: 10096 Comm: syz.4.3178 Tainted: G W syzkaller #0 [ 462.242753][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 462.252802][ C1] Call Trace: [ 462.256078][ C1] [ 462.259700][ C1] __dump_stack+0x21/0x24 [ 462.264029][ C1] dump_stack_lvl+0xee/0x150 [ 462.268624][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 462.273651][ C1] ? update_rq_clock+0x536/0x5c0 [ 462.278588][ C1] ? __run_timers+0x32b/0x9a0 [ 462.283268][ C1] print_address_description+0x71/0x200 [ 462.288815][ C1] print_report+0x4a/0x60 [ 462.293146][ C1] kasan_report+0x122/0x150 [ 462.297661][ C1] ? __run_timers+0x32b/0x9a0 [ 462.302351][ C1] __asan_report_store8_noabort+0x17/0x20 [ 462.308070][ C1] __run_timers+0x32b/0x9a0 [ 462.312583][ C1] ? sched_clock+0x9/0x10 [ 462.316918][ C1] ? sched_clock_cpu+0x6e/0x250 [ 462.321771][ C1] ? calc_index+0x200/0x200 [ 462.326282][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 462.331493][ C1] run_timer_softirq+0x6a/0xf0 [ 462.336265][ C1] handle_softirqs+0x1d7/0x600 [ 462.341031][ C1] ? irqtime_account_irq+0xc4/0x240 [ 462.346242][ C1] __irq_exit_rcu+0x52/0xf0 [ 462.350752][ C1] irq_exit_rcu+0x9/0x10 [ 462.355007][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 462.360660][ C1] [ 462.363595][ C1] [ 462.366533][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 462.372533][ C1] RIP: 0010:vcpu_enter_guest+0x5332/0x6ba0 [ 462.378360][ C1] Code: 01 48 8b 54 24 08 49 8d 9d 32 0a 00 00 49 89 de 49 c1 ee 03 43 0f b6 04 3e 84 c0 0f 85 cc 07 00 00 c6 03 01 fb 48 8b 44 24 28 <42> 80 3c 38 00 74 0f 48 8b 7c 24 08 e8 9d 75 a2 00 48 8b 54 24 08 [ 462.397977][ C1] RSP: 0018:ffffc90000e07640 EFLAGS: 00000246 [ 462.404058][ C1] RAX: 1ffff11021da5319 RBX: ffff88810ed28a32 RCX: 0000000000080000 [ 462.412038][ C1] RDX: ffff88810ed298c8 RSI: 000000000007ffff RDI: 0000000000080000 [ 462.420018][ C1] RBP: ffffc90000e07be8 R08: ffff888114a53cc0 R09: 0000000000000002 [ 462.427997][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: 1ffff920001c0edc [ 462.435976][ C1] R13: ffff88810ed28000 R14: 1ffff11021da5146 R15: dffffc0000000000 [ 462.443958][ C1] ? pvclock_gtod_update_fn+0x270/0x270 [ 462.449510][ C1] ? vmx_vcpu_pi_put+0x17a/0x7f0 [ 462.454453][ C1] ? vmx_vcpu_pi_load+0x12d/0x810 [ 462.459478][ C1] ? __cfi_vmx_vcpu_pi_put+0x10/0x10 [ 462.464765][ C1] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 462.470141][ C1] ? __cfi____update_load_sum+0x10/0x10 [ 462.475694][ C1] ? save_fpregs_to_fpstate+0x192/0x220 [ 462.481244][ C1] ? __kasan_check_write+0x14/0x20 [ 462.486361][ C1] ? kvm_arch_vcpu_load+0x55a/0x740 [ 462.491563][ C1] ? __kasan_check_write+0x14/0x20 [ 462.496672][ C1] ? __cfi_kvm_arch_vcpu_load+0x10/0x10 [ 462.498173][ T2849] magicmouse 0003:05AC:0269.0037: unknown main item tag 0x2 [ 462.502219][ C1] ? vmx_sched_in+0x5c/0x2f0 [ 462.502247][ C1] ? kvm_sched_in+0x85/0xc0 [ 462.518573][ C1] ? finish_task_switch+0x678/0x7b0 [ 462.520763][ T2849] magicmouse 0003:05AC:0269.0037: hidraw0: USB HID v11.da Device [HID 05ac:0269] on usb-dummy_hcd.3-1/input0 [ 462.523781][ C1] ? __switch_to_asm+0x3a/0x60 [ 462.540053][ C1] ? __schedule+0xb8f/0x14e0 [ 462.544656][ C1] ? irqentry_exit+0x37/0x40 [ 462.549265][ C1] ? __sched_text_start+0x8/0x8 [ 462.554135][ C1] ? schedule+0xb6/0x170 [ 462.558381][ C1] ? preempt_count_add+0xce/0x1b0 [ 462.563416][ C1] ? __kasan_check_read+0x11/0x20 [ 462.568440][ C1] ? schedule+0xd4/0x170 [ 462.572672][ C1] kvm_arch_vcpu_ioctl_run+0xec4/0x1fa0 [ 462.578210][ C1] kvm_vcpu_ioctl+0x882/0xb70 [ 462.582878][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 462.588069][ C1] ? selinux_file_ioctl+0x377/0x480 [ 462.593252][ C1] ? __cfi_do_futex+0x10/0x10 [ 462.597909][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 462.603442][ C1] ? __fget_files+0x2d5/0x330 [ 462.608098][ C1] ? security_file_ioctl+0x95/0xc0 [ 462.613189][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 462.618373][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 462.623035][ C1] __x64_sys_ioctl+0x7b/0x90 [ 462.627615][ C1] x64_sys_call+0x58b/0x9a0 [ 462.632120][ C1] do_syscall_64+0x4c/0xa0 [ 462.636522][ C1] ? clear_bhb_loop+0x30/0x80 [ 462.641188][ C1] ? clear_bhb_loop+0x30/0x80 [ 462.645856][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.651745][ C1] RIP: 0033:0x7f75e638f6c9 [ 462.656143][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 462.675730][ C1] RSP: 002b:00007f75e714b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 462.684125][ C1] RAX: ffffffffffffffda RBX: 00007f75e65e5fa0 RCX: 00007f75e638f6c9 [ 462.692077][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 462.700029][ C1] RBP: 00007f75e6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 462.707980][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.715932][ C1] R13: 00007f75e65e6038 R14: 00007f75e65e5fa0 R15: 00007fffb4869a58 [ 462.723887][ C1] [ 462.726884][ C1] [ 462.729192][ C1] Allocated by task 9994: [ 462.733499][ C1] kasan_set_track+0x4b/0x70 [ 462.738079][ C1] kasan_save_alloc_info+0x25/0x30 [ 462.743197][ C1] __kasan_kmalloc+0x95/0xb0 [ 462.747781][ C1] __kmalloc+0xb1/0x1e0 [ 462.751939][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 462.756953][ C1] hci_uart_tty_ioctl+0x3d6/0xa20 [ 462.761966][ C1] tty_ioctl+0x8ef/0xc60 [ 462.766198][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 462.770860][ C1] __x64_sys_ioctl+0x7b/0x90 [ 462.775433][ C1] x64_sys_call+0x58b/0x9a0 [ 462.779917][ C1] do_syscall_64+0x4c/0xa0 [ 462.784312][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.790188][ C1] [ 462.792489][ C1] Freed by task 9994: [ 462.796443][ C1] kasan_set_track+0x4b/0x70 [ 462.801011][ C1] kasan_save_free_info+0x31/0x50 [ 462.806027][ C1] ____kasan_slab_free+0x132/0x180 [ 462.811121][ C1] __kasan_slab_free+0x11/0x20 [ 462.815867][ C1] slab_free_freelist_hook+0xc2/0x190 [ 462.821225][ C1] __kmem_cache_free+0xb7/0x1b0 [ 462.826060][ C1] kfree+0x6f/0xf0 [ 462.829770][ C1] hci_release_dev+0x12a3/0x13b0 [ 462.834690][ C1] bt_host_release+0x82/0x90 [ 462.839264][ C1] device_release+0xa4/0x1d0 [ 462.843832][ C1] kobject_put+0x19d/0x280 [ 462.848230][ C1] put_device+0x1f/0x30 [ 462.852370][ C1] hci_dev_cmd+0x265/0x720 [ 462.856765][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 462.861425][ C1] sock_do_ioctl+0x101/0x310 [ 462.866002][ C1] sock_ioctl+0x4d8/0x6e0 [ 462.870312][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 462.874968][ C1] __x64_sys_ioctl+0x7b/0x90 [ 462.879533][ C1] x64_sys_call+0x58b/0x9a0 [ 462.884016][ C1] do_syscall_64+0x4c/0xa0 [ 462.888414][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.894289][ C1] [ 462.896591][ C1] Last potentially related work creation: [ 462.902278][ C1] kasan_save_stack+0x3a/0x60 [ 462.906934][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 462.912290][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 462.918081][ C1] insert_work+0x51/0x300 [ 462.922390][ C1] __queue_work+0x9b1/0xd30 [ 462.926875][ C1] queue_work_on+0xd2/0x140 [ 462.931361][ C1] __hci_cmd_sync_sk+0xa3e/0xcf0 [ 462.936277][ C1] hci_cmd_sync_status+0x53/0x120 [ 462.941281][ C1] hci_dev_cmd+0x628/0x720 [ 462.945676][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 462.950333][ C1] sock_do_ioctl+0x101/0x310 [ 462.954908][ C1] sock_ioctl+0x4d8/0x6e0 [ 462.959218][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 462.963873][ C1] __x64_sys_ioctl+0x7b/0x90 [ 462.968439][ C1] x64_sys_call+0x58b/0x9a0 [ 462.972926][ C1] do_syscall_64+0x4c/0xa0 [ 462.977324][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.983199][ C1] [ 462.985502][ C1] Second to last potentially related work creation: [ 462.992057][ C1] kasan_save_stack+0x3a/0x60 [ 462.996717][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 463.002073][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 463.007869][ C1] insert_work+0x51/0x300 [ 463.012178][ C1] __queue_work+0x9b1/0xd30 [ 463.016661][ C1] queue_work_on+0xd2/0x140 [ 463.021146][ C1] hci_cmd_timeout+0x191/0x200 [ 463.025894][ C1] process_one_work+0x71f/0xc40 [ 463.030723][ C1] worker_thread+0xa29/0x11f0 [ 463.035375][ C1] kthread+0x281/0x320 [ 463.039422][ C1] ret_from_fork+0x1f/0x30 [ 463.044165][ C1] [ 463.046469][ C1] The buggy address belongs to the object at ffff888114df0000 [ 463.046469][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 463.060496][ C1] The buggy address is located 2560 bytes inside of [ 463.060496][ C1] 8192-byte region [ffff888114df0000, ffff888114df2000) [ 463.073920][ C1] [ 463.076223][ C1] The buggy address belongs to the physical page: [ 463.082611][ C1] page:ffffea0004537c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x114df0 [ 463.092828][ C1] head:ffffea0004537c00 order:3 compound_mapcount:0 compound_pincount:0 [ 463.101136][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 463.107214][ C1] raw: 4000000000010200 ffffea0004ddc600 dead000000000005 ffff888100043500 [ 463.115781][ C1] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000 [ 463.124338][ C1] page dumped because: kasan: bad access detected [ 463.130729][ C1] page_owner tracks the page as allocated [ 463.136419][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 9537, tgid 9531 (syz.3.3005), ts 439811822040, free_ts 439638622034 [ 463.159144][ C1] post_alloc_hook+0x1f5/0x210 [ 463.163896][ C1] prep_new_page+0x1c/0x110 [ 463.168381][ C1] get_page_from_freelist+0x2c7b/0x2cf0 [ 463.173914][ C1] __alloc_pages+0x1c3/0x450 [ 463.178489][ C1] alloc_slab_page+0x6e/0xf0 [ 463.183068][ C1] new_slab+0x98/0x3d0 [ 463.187127][ C1] ___slab_alloc+0x6bd/0xb20 [ 463.191701][ C1] __slab_alloc+0x5e/0xa0 [ 463.196017][ C1] __kmem_cache_alloc_node+0x203/0x2c0 [ 463.201465][ C1] __kmalloc_node+0xa1/0x1e0 [ 463.206061][ C1] get_callchain_buffers+0x175/0x350 [ 463.211345][ C1] stack_map_alloc+0x379/0x530 [ 463.216097][ C1] map_create+0x49c/0xd80 [ 463.220413][ C1] __sys_bpf+0x30b/0x780 [ 463.224641][ C1] __x64_sys_bpf+0x7c/0x90 [ 463.229045][ C1] x64_sys_call+0x488/0x9a0 [ 463.233536][ C1] page last free stack trace: [ 463.238183][ C1] free_unref_page_prepare+0x742/0x750 [ 463.243623][ C1] free_unref_page+0x8f/0x530 [ 463.248281][ C1] __free_pages+0x67/0x100 [ 463.252678][ C1] __free_slab+0xca/0x1a0 [ 463.256994][ C1] __unfreeze_partials+0x160/0x190 [ 463.262093][ C1] put_cpu_partial+0xa9/0x100 [ 463.266762][ C1] __slab_free+0x1c4/0x280 [ 463.271162][ C1] ___cache_free+0xbf/0xd0 [ 463.275559][ C1] qlist_free_all+0xc6/0x140 [ 463.280127][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 463.285565][ C1] __kasan_slab_alloc+0x24/0x80 [ 463.290395][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 463.295490][ C1] kmem_cache_alloc+0x16e/0x330 [ 463.300322][ C1] getname_flags+0xb9/0x500 [ 463.304806][ C1] __se_sys_newfstatat+0xdf/0x380 [ 463.309817][ C1] __x64_sys_newfstatat+0x9b/0xb0 [ 463.314821][ C1] [ 463.317130][ C1] Memory state around the buggy address: [ 463.322747][ C1] ffff888114df0900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 463.330795][ C1] ffff888114df0980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 463.338846][ C1] >ffff888114df0a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 463.346888][ C1] ^ [ 463.350939][ C1] ffff888114df0a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 463.358977][ C1] ffff888114df0b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 463.367017][ C1] ================================================================== [ 463.375052][ C1] Disabling lock debugging due to kernel taint [ 463.381233][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 463.392921][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 463.401309][ C1] CPU: 1 PID: 10096 Comm: syz.4.3178 Tainted: G B W syzkaller #0 [ 463.410222][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 463.420255][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 463.425530][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 b0 09 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4f 6d 00 49 8b 7d 00 e8 93 05 [ 463.445130][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 463.451200][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888114a53cc0 [ 463.459162][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 463.467118][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 463.475088][ C1] R10: ffffed10229be139 R11: 1ffff110229be139 R12: dffffc0000000000 [ 463.483070][ C1] R13: 0000000000000000 R14: ffff888114df09c8 R15: 0000000000000008 [ 463.491022][ C1] FS: 00007f75e714b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 463.499931][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 463.506502][ C1] CR2: 0000000000000000 CR3: 0000000125ea5000 CR4: 00000000003526a0 [ 463.514476][ C1] Call Trace: [ 463.517748][ C1] [ 463.520580][ C1] delayed_work_timer_fn+0x61/0x80 [ 463.525684][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 463.531475][ C1] call_timer_fn+0x46/0x2a0 [ 463.535962][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 463.541753][ C1] __run_timers+0x667/0x9a0 [ 463.546248][ C1] ? calc_index+0x200/0x200 [ 463.550739][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 463.555927][ C1] run_timer_softirq+0x6a/0xf0 [ 463.560674][ C1] handle_softirqs+0x1d7/0x600 [ 463.565417][ C1] ? irqtime_account_irq+0xc4/0x240 [ 463.570606][ C1] __irq_exit_rcu+0x52/0xf0 [ 463.575107][ C1] irq_exit_rcu+0x9/0x10 [ 463.579349][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 463.584980][ C1] [ 463.587894][ C1] [ 463.590806][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 463.596770][ C1] RIP: 0010:vcpu_enter_guest+0x5332/0x6ba0 [ 463.602562][ C1] Code: 01 48 8b 54 24 08 49 8d 9d 32 0a 00 00 49 89 de 49 c1 ee 03 43 0f b6 04 3e 84 c0 0f 85 cc 07 00 00 c6 03 01 fb 48 8b 44 24 28 <42> 80 3c 38 00 74 0f 48 8b 7c 24 08 e8 9d 75 a2 00 48 8b 54 24 08 [ 463.622147][ C1] RSP: 0018:ffffc90000e07640 EFLAGS: 00000246 [ 463.628192][ C1] RAX: 1ffff11021da5319 RBX: ffff88810ed28a32 RCX: 0000000000080000 [ 463.636492][ C1] RDX: ffff88810ed298c8 RSI: 000000000007ffff RDI: 0000000000080000 [ 463.644447][ C1] RBP: ffffc90000e07be8 R08: ffff888114a53cc0 R09: 0000000000000002 [ 463.652396][ C1] R10: 0000000000000001 R11: 0000000000000002 R12: 1ffff920001c0edc [ 463.660376][ C1] R13: ffff88810ed28000 R14: 1ffff11021da5146 R15: dffffc0000000000 [ 463.668335][ C1] ? pvclock_gtod_update_fn+0x270/0x270 [ 463.673868][ C1] ? vmx_vcpu_pi_put+0x17a/0x7f0 [ 463.678794][ C1] ? vmx_vcpu_pi_load+0x12d/0x810 [ 463.683800][ C1] ? __cfi_vmx_vcpu_pi_put+0x10/0x10 [ 463.689077][ C1] ? __cfi_vmx_vcpu_pi_load+0x10/0x10 [ 463.694451][ C1] ? __cfi____update_load_sum+0x10/0x10 [ 463.699990][ C1] ? save_fpregs_to_fpstate+0x192/0x220 [ 463.705542][ C1] ? __kasan_check_write+0x14/0x20 [ 463.710643][ C1] ? kvm_arch_vcpu_load+0x55a/0x740 [ 463.715831][ C1] ? __kasan_check_write+0x14/0x20 [ 463.720925][ C1] ? __cfi_kvm_arch_vcpu_load+0x10/0x10 [ 463.726454][ C1] ? vmx_sched_in+0x5c/0x2f0 [ 463.731025][ C1] ? kvm_sched_in+0x85/0xc0 [ 463.735514][ C1] ? finish_task_switch+0x678/0x7b0 [ 463.740697][ C1] ? __switch_to_asm+0x3a/0x60 [ 463.745440][ C1] ? __schedule+0xb8f/0x14e0 [ 463.750011][ C1] ? irqentry_exit+0x37/0x40 [ 463.754590][ C1] ? __sched_text_start+0x8/0x8 [ 463.759419][ C1] ? schedule+0xb6/0x170 [ 463.763642][ C1] ? preempt_count_add+0xce/0x1b0 [ 463.768646][ C1] ? __kasan_check_read+0x11/0x20 [ 463.773646][ C1] ? schedule+0xd4/0x170 [ 463.777870][ C1] kvm_arch_vcpu_ioctl_run+0xec4/0x1fa0 [ 463.783403][ C1] kvm_vcpu_ioctl+0x882/0xb70 [ 463.788067][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 463.793252][ C1] ? selinux_file_ioctl+0x377/0x480 [ 463.798432][ C1] ? __cfi_do_futex+0x10/0x10 [ 463.803088][ C1] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 463.808614][ C1] ? __fget_files+0x2d5/0x330 [ 463.813270][ C1] ? security_file_ioctl+0x95/0xc0 [ 463.818363][ C1] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 463.823549][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 463.828206][ C1] __x64_sys_ioctl+0x7b/0x90 [ 463.832775][ C1] x64_sys_call+0x58b/0x9a0 [ 463.837265][ C1] do_syscall_64+0x4c/0xa0 [ 463.841661][ C1] ? clear_bhb_loop+0x30/0x80 [ 463.846323][ C1] ? clear_bhb_loop+0x30/0x80 [ 463.850984][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.856859][ C1] RIP: 0033:0x7f75e638f6c9 [ 463.861254][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 463.880838][ C1] RSP: 002b:00007f75e714b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 463.889233][ C1] RAX: ffffffffffffffda RBX: 00007f75e65e5fa0 RCX: 00007f75e638f6c9 [ 463.897186][ C1] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 463.905134][ C1] RBP: 00007f75e6411f91 R08: 0000000000000000 R09: 0000000000000000 [ 463.913085][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.921032][ C1] R13: 00007f75e65e6038 R14: 00007f75e65e5fa0 R15: 00007fffb4869a58 [ 463.928992][ C1] [ 463.931992][ C1] Modules linked in: [ 463.935871][ C1] ---[ end trace 0000000000000000 ]--- [ 463.941299][ C1] RIP: 0010:__queue_work+0x575/0xd30 [ 463.946572][ C1] Code: 39 2b 0f 84 b9 00 00 00 e8 a8 dc 28 00 4c 89 ff e8 b0 09 ad 03 49 bc 00 00 00 00 00 fc ff df 4c 8b 6d d0 4c 89 e8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ef e8 cc 4f 6d 00 49 8b 7d 00 e8 93 05 [ 463.966157][ C1] RSP: 0018:ffffc900001b0c70 EFLAGS: 00010046 [ 463.972205][ C1] RAX: 0000000000000000 RBX: 000000007fffffff RCX: ffff888114a53cc0 [ 463.980156][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 463.988107][ C1] RBP: ffffc900001b0d08 R08: fffffffffffffffb R09: 0000000000000007 [ 463.996073][ C1] R10: ffffed10229be139 R11: 1ffff110229be139 R12: dffffc0000000000 [ 464.004025][ C1] R13: 0000000000000000 R14: ffff888114df09c8 R15: 0000000000000008 [ 464.011978][ C1] FS: 00007f75e714b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 464.020887][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 464.027449][ C1] CR2: 0000000000000000 CR3: 0000000125ea5000 CR4: 00000000003526a0 [ 464.035405][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 464.042826][ C1] Kernel Offset: disabled [ 464.047130][ C1] Rebooting in 86400 seconds..