last executing test programs: 6.541094684s ago: executing program 3 (id=919): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_ep_write(r0, 0x0, 0xe0, &(0x7f00000002c0)="43bd9fc35d6cfc94d14765a5ddd2895164d43132e4d0e09f7be1b5ef4206e62f89b6556726457c1ed9acee31451920de4cfa7288c55279346da4f8df78604bd3ae8beac8d4e00a7f477d440e72da8b94212ce04ee045004f05fb066fa6436d3c25b604bf2d9d50210ecc6b280c4a5ea0a414ca0c652a64aae4a6fd7ee6ed38ee069faf0769b85ebcb81e99363ce35d841419dce36d24db7c3f6221a39731561bba6e27922ddaf82eb053dfe8b3afcca6cfd9d907e75f673b862c86deb1c077a1b690e2c8250d7151ceb4f417e08f6621c65fbfb4066528e45c0b4cfcfb900c01") close_range(r1, r1, 0x0) 5.036309692s ago: executing program 1 (id=924): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0xb744, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}, 0x1c) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0302}}}, 0x14) syz_open_procfs(0x0, &(0x7f0000000040)='net/raw6\x00') r2 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002200"], 0x1c}], 0x1}, 0x0) r3 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000040)={0xa0, 0x1e0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x0, 0xffffffff}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x8, 0x80, 0x0, '\x00', 0x5c8d}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.811612987s ago: executing program 1 (id=926): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='highspeed\x00', 0xa) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902"], 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4.742793426s ago: executing program 3 (id=927): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4.602362507s ago: executing program 3 (id=928): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0xcc, 0x1, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_USERDATA={0x95, 0x6, "bcf08d5120a4f0b8a81e58f79e5e39832cd6905412049f9578258bc0f409268856000064bcbc8850f3114448701707249f7f159110f015784bd73c69035fd6f4f1d4b5071122b66c28a07bb3cf5fd466a1ba4c093b1d338052cc1a1a29cb42fb26f7029060e40c50fbbc52ed241923718ac3cb133aaef39e76694bb5363754bb6194bb344975f12199c0f71baf18a13457"}, @NFTA_TABLE_USERDATA={0x20, 0x6, "3251352324a510f22a057f4008ae412bb2965bb2789f8147fc7b083a"}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8050}, 0x20000851) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003280)=ANY=[@ANYBLOB="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"], 0xb98}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.504353382s ago: executing program 3 (id=929): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_DESC={0x28, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x8c}, 0x1, 0x0, 0x0, 0x20014840}, 0xc010) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 4.094303666s ago: executing program 3 (id=930): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, 0x0, 0xd0060) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(0xffffffffffffffff, 0x8040942d, &(0x7f00000000c0)) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000340), 0xa1410, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus/file0'}}, {@nfs_export_on}, {@redirect_dir_off}]}) chdir(&(0x7f0000000140)='./bus\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="040e0c003920"], 0xf) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2) r4 = syz_usb_connect(0x5, 0x845, &(0x7f0000000680)={{0x12, 0x1, 0x201, 0x68, 0x23, 0x67, 0x10, 0xe7e, 0x1001, 0x101, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x833, 0x2, 0x5, 0x4, 0x80, 0x6, [{{0x9, 0x4, 0x25, 0x9, 0x3, 0x98, 0x9a, 0xa8, 0x1, [@generic={0xd9, 0x9, "b5a735aa53e77ae869c029965cb36d0fe1c4436577c8895a870817d54d4e2573ad2e324ec5b53f75c15eb5e12d1a4eb2136b0514f177c7281016c26fadc3f46cb26e471397178c3ac35a50345357ec9738d8426c54af5512ef39abfd2fb3f9ea988c32a8180b1e67bb1d6466ceac36d71488d63532039a7a463b6fb457cab1bb25991acaa0a8c827e038ad76d47cdb35156aa478e446d58ed203003426a76888f15aa98911bd634a954906412cce8ebd351e09a3e541e184311f3db3d0da6b8615af3c3ed02b54f2090ce9b475d99650b5dd067bc37e2b"}], [{{0x9, 0x5, 0xd, 0x10, 0x10, 0x81, 0x6, 0x7, [@generic={0x9b, 0x11, "eb49131f09e2e236bb333fe382d3d994fdcfb214607e9adb295b0942f905b57e98e0bc7440a5fee1f7c97f935858d2d5ebcf4321aecccaa2a52d633776f8d357e424482d788a1793b4c59e3251771e61465dd68ee42fb86679050e4cb24bc466875c2e6833184a07592e6716a44de4c5fbb594ef5a580ee60014b235261af99eb1a64709dc1a5fe583e551ef61aa21f4e137f2cbdfd090d15e"}, @generic={0x18, 0x1, "d3688434100b1442362cac7ea100ff8e96d779ecb884"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x4, 0x4, 0x4, [@generic={0xbf, 0x1, "888096b06c3daee2a0dd9af732a1d57baa2d556737c512b59e6024796a60720267ae51fc2fb05d1f5488dad7a060d7140b774bd5738a155c2c6f0f8ab53bb81b156fab3222a02e6e5eb5b9d04a73a016f313f06e2f8fe5b214108cd35d9d55d538eb698a7d41a3a1b010305165b92eeabc5ee02f87c5dc134010858e5737d867b06c2af18c361ada0c4df4ed770cdbe12019f56c0f2d767ec1d0e388ef1fbb2331132128411e8da6d49c3f897393dbfb27b900595a75e22f515c4b0d62"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x5, 0xb4, 0xfb, [@generic={0xff, 0x23, "609d80f0d13c9549e0f6238efadcc682956ca37f370c4dc15147308cc0f8d3cb9c0b7f642d217a9d4201045cccc5d7e127c7e6b328ca35a109a15296dd58916f9cc65bc46e0fb366b32e353c0f314dba000496695e09c09e8ae4e6e2d1eb22c6532d58c30294c2246d91ef05fce800a6aa32dde0391698877f065a2358dea4c1d480c8796747d8a6a70653e31c6308984182bff2b765624572d6057200386aa813cf744f69112a106c65801e3e520ad1f504685737e77dc2597a00d669acb52c58768a4f77e148f2910e005643d60ee82f4c010077006c6632e04c012ed2e48d75e416fb7e5fd92485612d8e6488d4f28d5e2df73741772c5b4e4e8793"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xffc}]}}]}}, {{0x9, 0x4, 0xcf, 0x1, 0x8, 0x1d, 0xaa, 0x7, 0x4, [@generic={0x6, 0x23, "c9639cfb"}], [{{0x9, 0x5, 0xf, 0x3, 0x200, 0x36, 0x1, 0x2, [@generic={0x3f, 0x9, "7cb0a6b00464e9b91c82bc8e9def339906f260efacee279f723a97e34687ccd412dbeb1332ac5bc15a1ef1595f35a542e3c8bada0e56584f13ccc027ec"}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x33, 0x1f, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfe, 0x9}, @generic={0x16, 0x4, "65302e572391c07b88f3aff8cd8569a552b53841"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x20, 0xd, 0x70, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xfff}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x8, 0x3, 0x46, [@generic={0xfa, 0x5, "3e785442bb01472e46d00a665320b99815e971b4655e021ad29c69d2029b4cda413d25f3fd66f867c972f7f834f1a9b1ef4d599a1c5361ba8090a3f0b14af465491bbeaa2d3bf59e487cf5b58543391aeb8e8d20bafa1451962f6e09439267816187c12b8333ba9f54b5c75b37ccf3c60951a1f42d45e292c7c938d715e10d9c41852bab0d8bf74f3b32079a0f90c24ea9b967e70ae26aa685bbde237e6094eedc1cbb32583334b9c876a12d2804c1b4f39cc2c842d5d3b77dc6a4a65610ca71256c98b267338903ec0677d34e4bad674ded6daef49e32f963c03b9bfc59ffe5967e98bbeaa2183c1220063402a2c0caaa9b2f0b8dbfe2be"}, @generic={0xac, 0x23, "0bb97c1e328c0624ca58813edcc5e6f62cd0e6b0359711c0a44c999795612aefd2669783fa726184fc706d3323d167a53e45f1d5911e38282a775749497a52ea54fa04c5346e993024c41e2bf53b2c1228a93f9b9c0a7e1d8dedae53032a0273fb51983767da720e7a5b400d2311e8e1a7ecdeaf6b4604ba2c45f1e8758398ee9027c64cd4f3b67626ffb453473324ccb277e29ed23a4e65b4f5d1eae13f03199c8d4cc5326060c9347b"}]}}, {{0x9, 0x5, 0x3, 0x4, 0x40, 0x4, 0x0, 0xa1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0xfb, 0x4608}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x5, 0xfe, 0x4, [@generic={0x95, 0x22, "1219fff1fd4f46e7e7027ede250dc3615b212dfed0139273a23d3dcec618258e683241ddf8de6aa3a448494eef7796339a1fdb1028dd6f3beb199ffde9a32acf032b696d906ecd2af06ee26d14e570aea74769ed9cb6d85954b20a0444451016a71b4e6037dcde0de54678dd3dfcee1defa3d7c3dc320be48980cd6597a72770f3199d63f2cff9ee6d81e74f3003eaf72febd6"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x80}]}}, {{0x9, 0x5, 0xb, 0x4, 0x200, 0x3, 0x7f, 0xc, [@generic={0xa7, 0x23, "ef1067931bcc74000cfa5f609c39b81af9d1020ea36918a8770aa11c79710c6df8d0bf0c976c9cb6321e513c6bab8a48ea905e9b17c44487fb3c75e7fdeb63e7d8d86ac6b8a1e5bc7a66ed5fab44e419e0653e19c00a1d6041b8ac978cfe358bde505dd5fa1bc84e33dcdc0c036b2a856378e39121e393a046bb60653496ec591da5a521b4fcac0ee0f15064bc3eb4db2506f32eb9310a463ca893dd6e1c6fdd4f246b8940"}, @generic={0xd8, 0x1f, "2d10a9bdef6695bb6b469ce955c9751b7839890a8b656dbdf1994a3316d8e2c7756ccf0979cf7049c44dd40660bdc9171b6c67b4d520bbeae0f140b84f8c8c34d565d65fc759b8df9ab6b60bd9b9fad0c08c6e3a2a5fcc47109d5ee14bfd79fd29867e4d5a31cc421f378c09260daba10860d3b8ee0f8897e670880234d8c38014ec65c16b534b1ccece9630eeda122b6e8b391b645926aaf65f3662731b1d355c97306010e629d1d4924ae5a1ffc470c53d3dd549b9a06def99f303ad7f45c1789e3d1d5ae951c5df6eaaa89406e495916bd8bd6c8b"}]}}, {{0x9, 0x5, 0x3, 0x0, 0x400, 0x5, 0xb, 0x5, [@generic={0x2c, 0x8, "a7e594711ac7182dc654299c9b0e65434946081d6c182948bad90ac08b6f710656e537434669a76c789f"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x80, 0x8d}]}}]}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x81, 0x6, 0x8, 0x50, 0x1}, 0x8, &(0x7f0000000140)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0xa, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x140a}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x101f}}, {0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x42b}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0xfcff}}, {0xffdb, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x280a}}, {0xe8, &(0x7f0000000f00)=@lang_id={0x0, 0x3, 0x459}}, {0xe4, &(0x7f0000001000)=@string={0xe4, 0x3, "ab21726028de08e61fbbae59a5c205c50f76978a7930e08a092d0b5cc8e1fe8761bb058903359e4ee459dce4496a11a5a94f3e85907dd8b72e3bd2e1dd6cc4eb333061a9c977863062325f809651eb241e1ded377d92a800eb176affddb182f420c713cfe4a09758c130a8715b3295a80b4ddd3afad8e0fd471967f77cbf1d1702c2f0c19e596170e3e542cbe3e242e6b61861d4386a21000cad76629fd8bd857a611c547bdae4e92688440c0be283a25ae7974f1533a92151f665459dae7b93d96197740a14261003ef6d026ad619372ec946ceecae34df3b6ddf298490353f6bbc"}}, {0x4, &(0x7f0000000f80)=@string={0x0, 0x3, "cff67b336e5bcbeb2d32ed88670b8d510ba70dc4bc04e26e2b3d9eb18648ae39518f0fd79907a05b0e6bddda08ca96192e2b37d61620aeb59249a06822b3e58bec32971e39b009e31a526da7300f516476a1f35b2a7dc4b3ae38773848e4d193e5892a92cff862a5a5832940eaccaa35f9c0"}}]}) syz_usb_control_io(r4, &(0x7f0000001180)={0x2c, &(0x7f0000000580)={0x40, 0xa, 0x9, {0x9, 0x5, "55272e6ad5b4b0"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x82c}}, &(0x7f0000000600)={0x0, 0xf, 0x32, {0x5, 0xf, 0x32, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x42, 0x80, 0x0, 0x9, 0x6}, @ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x6, 0xa, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0xe, 0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x1, 0x80, 0x8}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x9, 0xfffb}]}}, &(0x7f0000001100)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x80, 0xff, 0x8, "aad59e82", "60a552ec"}}, &(0x7f0000001140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x60, 0xf9, 0x9, 0x8, 0x1, 0x8}}}, &(0x7f0000001680)={0x84, &(0x7f0000001780)=ANY=[@ANYBLOB="0001c100000076560173ea4f9039a1f8b23d1b88402afa4989accb1f4ffa8314579283bd36c3bb849175481800781d83795b8da17b04e6dbdd8f77dcdcd36f362f54be120e62c08c8514b46de5d7858f1d01cdc24290f7a7f1026e7be34bf07b931762570639bac05db0e642cb81a0f396872f324ab436f83474f9107cd74b55d368531e0d41431876e4ce43579c241b401f9918c801a7af4f44c9370f5a7c2667de05d17a091e38dea4e14ec232f8f5b198361e52c5d8111b8edcb211e8bd0ff42940a2ff220538a7a95a355e01fc1830d95098fb2982689b4f8842cd0d5d4bb1461c0a63fcb43859fcc34c23b6b2984753"], &(0x7f00000012c0)={0x0, 0xa, 0x1, 0x67}, &(0x7f0000001300)={0x0, 0x8, 0x1}, &(0x7f0000001340)={0x20, 0x0, 0x4, {0x1}}, &(0x7f0000001380)={0x20, 0x0, 0x8, {0x140, 0x10, [0xf0f]}}, &(0x7f00000013c0)={0x40, 0x7, 0x2, 0x2}, &(0x7f0000001400)={0x40, 0x9, 0x1, 0x1}, &(0x7f0000001440)={0x40, 0xb, 0x2, "8aaa"}, &(0x7f0000001480)={0x40, 0xf, 0x2, 0x800}, &(0x7f00000014c0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001500)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, &(0x7f0000001540)={0x40, 0x19, 0x2, "3214"}, &(0x7f0000001580)={0x40, 0x1a, 0x2, 0x2}, &(0x7f00000015c0)={0x40, 0x1c, 0x1, 0x7}, &(0x7f0000001600)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000001640)={0x40, 0x21, 0x1, 0x6}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000080)={0x12, 0x1, 0x0, "c175f0b781eddc96e6d941c3a7f9582753f9ffff8cbae2850c67ea00"}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x4, 0x0, &(0x7f0000001740)=[@enter_looper], 0x0, 0x0, 0x0}) r6 = dup3(r5, r0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs], 0x0, 0x0, 0x0}) 3.53230133s ago: executing program 2 (id=934): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x0, 0x0, 0x2}, 0x0, [0x0, 0x3, 0x403, 0x100000, 0x8, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3ec7c00, 0x0, 0x3, 0x3, 0x10000000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff, 0x0, 0x3, 0x0, 0xa9a4, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffb, 0x82, 0x0, 0x79, 0xfffffffd, 0x0, 0x0, 0x10, 0x2, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x20], [0x0, 0xfffffffc, 0x0, 0x6, 0x0, 0x2, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0xffffffff, 0x89, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffe, 0x1, 0x7, 0x0, 0xfffffffc, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x351e, 0x0, 0xfffffffd, 0x1, 0x0, 0x6492, 0x8], [0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x200000, 0x1, 0x0, 0x10, 0x0, 0x0, 0x804, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0xfffffffd, 0x0, 0x0, 0x0, 0x40, 0x0, 0x2, 0x0, 0x4, 0x0, 0xfd32, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000005, 0x2, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x800, 0x100000]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000000)="180c4552", 0x4) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000400)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x204, 0x0, 0x0, 0x0, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x7cc9c5b0ac252cf0, r1, 0x2c487000) r4 = getuid() setreuid(0x0, r4) quotactl_fd$Q_GETFMT(r2, 0xffffffff80000401, r4, &(0x7f0000000040)) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) 3.190475166s ago: executing program 2 (id=935): socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) clock_gettime(0x3, &(0x7f00000000c0)) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f00000000c0)=0x6) mount(&(0x7f0000000080)=@md0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='cramfs\x00', 0xc400, 0x0) 3.068655188s ago: executing program 0 (id=936): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143942, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0xf5, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 2.904315676s ago: executing program 2 (id=937): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="dc00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c000280050001000000000008000480040003800800084000000000080008400000000734000f8008000240000000050800024000000b8608000340000047510800034000000003"], 0xdc}}, 0x0) r3 = fsopen(&(0x7f0000000000)='autofs\x00', 0x0) socket(0x1, 0x5, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB="78000000030101010000000000000000000000001c00108008000240000000020800034000000200080002400f0004010800154000000000240001800c00028005000100880000001400018008000100e000000208000200e00000010c00068008000200ffffffff08000c400000000008000c4000000000"], 0x78}}, 0x24040080) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='fd', &(0x7f00000000c0)='1', 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1b2fd2c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}]}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$loop(0x0, 0x41b, 0x220080) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r3) syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x4000) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}, 0x3ff}], 0x1, 0x123, 0x0) 2.882632908s ago: executing program 0 (id=938): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000280)={'syz1\x00', {0x6, 0x6, 0x10, 0x800}, 0x4, [0x4, 0x6, 0x3c, 0x9, 0x2, 0x3, 0x5, 0x6, 0xffff, 0x51065121, 0x2, 0x2, 0x401, 0x4, 0x1000, 0x7, 0x8, 0xffffffff, 0x0, 0x6, 0x7, 0xfff, 0x0, 0x9, 0xfffff000, 0x10000, 0x1, 0x4, 0x8, 0x200, 0x3, 0x40, 0x3, 0xffff, 0x0, 0x8, 0x6, 0x6, 0x1d3, 0x8, 0xdc5, 0x5, 0x0, 0x6, 0xc, 0x9f4, 0xfffffff8, 0x3, 0xfffffff9, 0x7, 0x1, 0x2af2, 0x5cbc, 0xd, 0x6, 0xe3e, 0xd2, 0x0, 0x400, 0x8001, 0xc0, 0x6, 0x200009, 0xfff], [0x1, 0x3, 0x1, 0xf8, 0xd6, 0x80000000, 0x10000, 0x10001, 0xfffffffb, 0xfff, 0x6, 0x6, 0x1, 0x6, 0x2, 0x5, 0x5, 0xfffffffe, 0xffff, 0x7, 0x3, 0x10000, 0x7f, 0x2, 0x1000, 0xd, 0x40, 0x7, 0x0, 0xffffffff, 0x7, 0x6, 0x0, 0x3, 0x7, 0x10001, 0x74c4, 0x4, 0xfff, 0x8, 0xfff, 0x8, 0x10000, 0x2, 0x9, 0x4d, 0x1, 0x6, 0x50, 0xc5, 0xe1, 0x5, 0x7, 0x9, 0x6d, 0x9, 0x6, 0x715, 0x89, 0x10000, 0xf, 0x8, 0x7ff, 0xffff], [0x80000001, 0x6, 0x2, 0x6, 0x2, 0x3, 0x7, 0x9, 0x8, 0x400, 0x6, 0x1, 0x47, 0x7, 0xc85, 0x42a, 0x8, 0xfffffc01, 0x6, 0x3, 0x7f, 0x3, 0x0, 0xb9, 0x10000, 0xb, 0xffff, 0x3ff, 0x5, 0x4, 0x3, 0x9, 0xff, 0x406, 0xfffffc00, 0x400, 0x1, 0x0, 0x5, 0x4, 0x4, 0x186, 0xa5a4, 0x10, 0xfffffffc, 0x7, 0x1a346c9, 0xea, 0x4e3c, 0x7, 0x0, 0x10000, 0x4, 0x4ca, 0x4, 0x1, 0xfff, 0x1, 0x8001, 0x2, 0xac, 0xfff, 0x3, 0x8], [0x4, 0xae7c, 0x3, 0x2, 0x8, 0x7, 0x9, 0x0, 0x21a0, 0x9, 0x7, 0x1000, 0x80, 0x8c0, 0x2, 0x1000, 0x8001, 0x6, 0x4, 0x7, 0xe, 0xa, 0x4, 0x8, 0x3, 0xfffff372, 0x5, 0x3, 0xd1, 0xc913, 0x2, 0x4, 0x3, 0x7fffffff, 0x5, 0x8, 0xffffff00, 0x2, 0x0, 0x9, 0x0, 0x1, 0x4, 0xcf0, 0x3, 0x200, 0x7ff, 0x6, 0xd, 0x5, 0x1, 0x80, 0x9, 0x3, 0x2, 0x3, 0x7f, 0x8, 0xc0c, 0x80000, 0xfff, 0x9, 0x1ff, 0x7]}, 0x45c) 2.588609217s ago: executing program 0 (id=939): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000100)={r0}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x11d, 0xf, 0x0, &(0x7f0000000240)) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r2, 0x45809000) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000880)='ns\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) getdents(r3, 0x0, 0x0) 1.956357297s ago: executing program 2 (id=940): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x0) 1.902023068s ago: executing program 2 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) 1.802489167s ago: executing program 2 (id=942): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0xb, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902"], 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.756563883s ago: executing program 3 (id=943): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYRESHEX], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = openat$binfmt_register(0xffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x6, 0x3a, ')%\\&\\}:', 0x3a, 'exfat\x00', 0x3a, './file0/file0'}, 0x3a) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 1.665026418s ago: executing program 1 (id=944): bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 1.632329354s ago: executing program 0 (id=945): setuid(0xee01) socket(0x11, 0x800000003, 0x4000000) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='exfat\x00', 0x200000, 0x0) 1.4243383s ago: executing program 0 (id=946): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143942, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) openat$procfs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/keys\x00', 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES32=r0], 0xc4}, 0x1, 0x0, 0x0, 0x4000}, 0x800) (fail_nth: 6) 821.132216ms ago: executing program 0 (id=947): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a000090400000103010100092100080001220100090581"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="20000200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 639.13049ms ago: executing program 1 (id=948): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_int(r0, 0x0, 0xb, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f00000001c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x5, 0x1, 0xfff, 0x5, @dev={0xfe, 0x80, '\x00', 0xf}, @empty, 0x40, 0x0, 0x19, 0x801}}) socket$kcm(0x11, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r3, 0x0, 0x0, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 130.686424ms ago: executing program 1 (id=949): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffc000, 0x0) 0s ago: executing program 1 (id=950): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0000000000000ab284dc9a94095f54e34f11a5a480d2115805745f8a24d"], 0xb0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX=r2]) chdir(&(0x7f0000000100)='./file0\x00') utimensat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): 86352][ T5849] usb 4-1: Product: syz [ 129.790830][ T5849] usb 4-1: Manufacturer: syz [ 129.796394][ T5849] usb 4-1: SerialNumber: syz [ 129.825140][ T5849] usb 4-1: config 0 descriptor?? [ 130.175343][ T5889] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 130.326574][ T5889] usb 3-1: device descriptor read/64, error -71 [ 130.458071][ T49] usb 2-1: USB disconnect, device number 11 [ 130.573954][ T5889] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 130.733900][ T5889] usb 3-1: device descriptor read/64, error -71 [ 130.844226][ T5889] usb usb3-port1: attempt power cycle [ 130.923781][ T49] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 131.095553][ T49] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.108387][ T49] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 131.118914][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.128790][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 131.140393][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 131.155452][ T49] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.164916][ T49] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.173101][ T49] usb 2-1: Product: syz [ 131.177592][ T49] usb 2-1: Manufacturer: syz [ 131.184398][ T5889] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 131.201921][ T49] cdc_wdm 2-1:1.0: skipping garbage [ 131.207523][ T49] cdc_wdm 2-1:1.0: skipping garbage [ 131.216945][ T5889] usb 3-1: device descriptor read/8, error -71 [ 131.223557][ T49] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 131.229640][ T49] cdc_wdm 2-1:1.0: Unknown control protocol [ 131.314476][ T7081] fuse: Unknown parameter 'group_i00000000000000000000' [ 131.377945][ T7083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 131.447304][ T49] usb 2-1: USB disconnect, device number 12 [ 131.454207][ T5889] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 131.500451][ T5889] usb 3-1: device descriptor read/8, error -71 [ 131.614352][ T5889] usb usb3-port1: unable to enumerate USB device [ 132.219269][ T7104] fuse: Unknown parameter 'group_i00000000000000000000' [ 132.266273][ T49] usb 4-1: USB disconnect, device number 15 [ 132.767490][ T7126] fuse: Unknown parameter 'group_i00000000000000000000' [ 132.800446][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.813805][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.213820][ T5904] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 133.385489][ T5904] usb 4-1: config 0 has no interfaces? [ 133.394307][ T5904] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 133.407242][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.433891][ T5904] usb 4-1: Product: syz [ 133.446823][ T5904] usb 4-1: Manufacturer: syz [ 133.462202][ T5904] usb 4-1: SerialNumber: syz [ 133.508666][ T5904] usb 4-1: config 0 descriptor?? [ 133.719194][ T7159] overlayfs: missing 'lowerdir' [ 134.093751][ T5904] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 134.234962][ T5904] usb 3-1: device descriptor read/64, error -71 [ 134.483776][ T5904] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 134.623964][ T5904] usb 3-1: device descriptor read/64, error -71 [ 134.735138][ T5904] usb usb3-port1: attempt power cycle [ 134.749076][ T7189] overlayfs: missing 'lowerdir' [ 134.919591][ T7195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.486'. [ 135.017286][ T7198] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 135.026579][ T7198] UDF-fs: Scanning with blocksize 4096 failed [ 135.097816][ T5904] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 135.135147][ T5904] usb 3-1: device descriptor read/8, error -71 [ 135.156192][ T7202] fuse: Unknown parameter 'group_id00000000000000000000' [ 135.396248][ T5904] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 135.417964][ T7211] overlayfs: missing 'lowerdir' [ 135.424568][ T5904] usb 3-1: device descriptor read/8, error -71 [ 135.537101][ T5904] usb usb3-port1: unable to enumerate USB device [ 135.917942][ T5935] usb 4-1: USB disconnect, device number 16 [ 136.003700][ T49] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 136.111750][ T7238] overlayfs: missing 'lowerdir' [ 136.158091][ T49] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.179373][ T49] usb 1-1: config 0 has no interfaces? [ 136.188754][ T49] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 136.201531][ T49] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.210085][ T49] usb 1-1: Product: syz [ 136.214881][ T49] usb 1-1: Manufacturer: syz [ 136.219522][ T49] usb 1-1: SerialNumber: syz [ 136.229189][ T49] usb 1-1: config 0 descriptor?? [ 136.934610][ T5904] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 137.013705][ T5889] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 137.107822][ T5904] usb 2-1: config 0 has no interfaces? [ 137.138982][ T5904] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 137.168054][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 137.173140][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.180561][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 137.201584][ T5889] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 137.211737][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.219923][ T5889] usb 4-1: Product: syz [ 137.225407][ T5889] usb 4-1: Manufacturer: syz [ 137.230133][ T5889] usb 4-1: SerialNumber: syz [ 137.236388][ T5904] usb 2-1: Product: syz [ 137.240586][ T5904] usb 2-1: Manufacturer: syz [ 137.248682][ T5889] usb 4-1: config 0 descriptor?? [ 137.256774][ T5904] usb 2-1: SerialNumber: syz [ 137.259084][ T7260] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 137.269873][ T7260] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 137.288762][ T5904] usb 2-1: config 0 descriptor?? [ 137.494086][ T7260] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 137.503835][ T7260] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 137.915190][ T5889] Error reading MAC address [ 138.127767][ T5889] usb 4-1: USB disconnect, device number 17 [ 138.503786][ T49] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 138.665515][ T49] usb 3-1: config 0 has no interfaces? [ 138.673073][ T49] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 138.685606][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.693679][ T49] usb 3-1: Product: syz [ 138.697949][ T49] usb 3-1: Manufacturer: syz [ 138.702548][ T49] usb 3-1: SerialNumber: syz [ 138.711120][ T49] usb 3-1: config 0 descriptor?? [ 138.786328][ T5904] usb 1-1: USB disconnect, device number 14 [ 139.302632][ T5849] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 139.312610][ T5849] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 139.415728][ T7302] fido_id[7302]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 139.454415][ T5904] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 139.622787][ T49] usb 2-1: USB disconnect, device number 13 [ 139.637794][ T5904] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 139.656163][ T5904] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 139.688563][ T5904] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 139.698750][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.707109][ T5904] usb 4-1: Product: syz [ 139.711503][ T5904] usb 4-1: Manufacturer: syz [ 139.716317][ T5904] usb 4-1: SerialNumber: syz [ 139.723210][ T5904] usb 4-1: config 0 descriptor?? [ 139.729282][ T7299] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 139.737109][ T5849] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 139.745098][ T7299] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 139.917210][ T5849] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.926096][ T5849] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 139.939242][ T5849] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.948631][ T5849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 139.954984][ T7299] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 139.959925][ T5849] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 139.970647][ T7299] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 139.979981][ T5849] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 139.996585][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 140.005016][ T5849] usb 1-1: Product: syz [ 140.009195][ T5849] usb 1-1: Manufacturer: syz [ 140.023358][ T5849] cdc_wdm 1-1:1.0: skipping garbage [ 140.023742][ T49] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 140.028854][ T5849] cdc_wdm 1-1:1.0: skipping garbage [ 140.043093][ T5849] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 140.049138][ T5849] cdc_wdm 1-1:1.0: Unknown control protocol [ 140.185795][ T49] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.200743][ T49] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.212825][ T49] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 140.222100][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.230498][ T49] usb 2-1: Product: syz [ 140.235001][ T49] usb 2-1: Manufacturer: syz [ 140.239790][ T49] usb 2-1: SerialNumber: syz [ 140.251889][ T49] usb 2-1: config 0 descriptor?? [ 140.371799][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 140.372434][ T49] usb 1-1: USB disconnect, device number 15 [ 140.378440][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 140.378464][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 140.402885][ T5904] Error reading MAC address [ 140.611633][ T5904] usb 4-1: USB disconnect, device number 18 [ 140.754010][ T7312] netlink: 12 bytes leftover after parsing attributes in process `syz.3.532'. [ 141.270704][ T49] usb 3-1: USB disconnect, device number 26 [ 141.511051][ T7335] overlayfs: missing 'lowerdir' [ 141.568581][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.0.541'. [ 141.755421][ T5849] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 141.916205][ T5849] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 141.927507][ T5849] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 141.940548][ T5849] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 141.951283][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.961193][ T5849] usb 3-1: Product: syz [ 141.965523][ T5849] usb 3-1: Manufacturer: syz [ 141.970441][ T5849] usb 3-1: SerialNumber: syz [ 141.978240][ T5849] usb 3-1: config 0 descriptor?? [ 141.984170][ T7333] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 141.992557][ T7333] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.107303][ T5889] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 142.202811][ T7333] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.211276][ T7333] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 142.266657][ T5889] usb 4-1: config 0 has no interfaces? [ 142.276177][ T5889] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 142.285596][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.293754][ T5889] usb 4-1: Product: syz [ 142.298043][ T5889] usb 4-1: Manufacturer: syz [ 142.302639][ T5889] usb 4-1: SerialNumber: syz [ 142.310341][ T5889] usb 4-1: config 0 descriptor?? [ 142.625257][ T5849] Error reading MAC address [ 142.698635][ T49] usb 2-1: USB disconnect, device number 14 [ 143.109284][ T49] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 143.284464][ T5889] usb 3-1: USB disconnect, device number 27 [ 143.306764][ T49] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 143.320555][ T49] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 143.374798][ T49] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 143.393675][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 143.420496][ T49] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 143.472570][ T49] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 143.480533][ T7364] overlayfs: missing 'lowerdir' [ 143.491893][ T49] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 143.522267][ T49] usb 2-1: Product: syz [ 143.540788][ T49] usb 2-1: Manufacturer: syz [ 143.560544][ T49] cdc_wdm 2-1:1.0: skipping garbage [ 143.580773][ T49] cdc_wdm 2-1:1.0: skipping garbage [ 143.606775][ T49] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 143.612988][ T49] cdc_wdm 2-1:1.0: Unknown control protocol [ 143.851700][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.2.553'. [ 143.943720][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 143.944582][ T5849] usb 2-1: USB disconnect, device number 15 [ 143.950877][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 143.950897][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 143.976807][ T5904] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 144.153824][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 144.160608][ T5904] usb 1-1: config 0 has an invalid descriptor of length 72, skipping remainder of the config [ 144.171616][ T5904] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 144.182970][ T5904] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 144.197181][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.208498][ T5904] usb 1-1: config 0 descriptor?? [ 144.343749][ T49] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 144.506054][ T49] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.520591][ T49] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 144.536077][ T49] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 144.559319][ T49] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.583680][ T49] usb 3-1: Product: syz [ 144.587892][ T49] usb 3-1: Manufacturer: syz [ 144.592600][ T49] usb 3-1: SerialNumber: syz [ 144.621295][ T49] usb 3-1: config 0 descriptor?? [ 144.630678][ T5904] usb 1-1: string descriptor 0 read error: -71 [ 144.657516][ T5904] usb 1-1: USB disconnect, device number 16 [ 144.856847][ T5889] usb 4-1: USB disconnect, device number 19 [ 144.966694][ T7387] overlayfs: missing 'lowerdir' [ 145.323752][ T5849] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 145.336578][ T5904] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 145.516523][ T5904] usb 2-1: config 0 has no interfaces? [ 145.536463][ T5849] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 145.547021][ T5849] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.559824][ T5904] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 145.569673][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.580310][ T5904] usb 2-1: Product: syz [ 145.585694][ T5904] usb 2-1: Manufacturer: syz [ 145.590619][ T5904] usb 2-1: SerialNumber: syz [ 145.596464][ T5849] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 145.613240][ T5849] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.624392][ T5904] usb 2-1: config 0 descriptor?? [ 145.629638][ T5849] usb 4-1: Product: syz [ 145.636681][ T5849] usb 4-1: Manufacturer: syz [ 145.641333][ T5849] usb 4-1: SerialNumber: syz [ 145.654304][ T5849] usb 4-1: config 0 descriptor?? [ 145.660813][ T7392] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 145.668530][ T7392] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 145.883426][ T7392] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 145.891725][ T7392] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 146.053837][ T5889] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 146.217037][ T5889] usb 1-1: config 0 has no interfaces? [ 146.225145][ T5889] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 146.238600][ T5889] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.247043][ T5889] usb 1-1: Product: syz [ 146.251221][ T5889] usb 1-1: Manufacturer: syz [ 146.255904][ T5889] usb 1-1: SerialNumber: syz [ 146.263540][ T5889] usb 1-1: config 0 descriptor?? [ 146.300740][ T5849] Error reading MAC address [ 146.538805][ T5889] usb 4-1: USB disconnect, device number 20 [ 146.816393][ T7411] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 146.827559][ T7411] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 147.106792][ T5904] usb 3-1: USB disconnect, device number 28 [ 147.304966][ T5849] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 147.464709][ T5849] usb 4-1: Using ep0 maxpacket: 32 [ 147.472610][ T5849] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.483417][ T5849] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 147.496653][ T5849] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 147.508764][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.529501][ T5849] usb 4-1: config 0 descriptor?? [ 147.560409][ T5849] hub 4-1:0.0: bad descriptor, ignoring hub [ 147.580689][ T5849] hub 4-1:0.0: probe with driver hub failed with error -5 [ 147.596012][ T5849] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 147.834036][ T5889] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 147.997788][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 148.009679][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 148.023290][ T5889] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 148.033119][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.052981][ T5889] usb 3-1: Product: syz [ 148.057436][ T5889] usb 3-1: Manufacturer: syz [ 148.062049][ T5889] usb 3-1: SerialNumber: syz [ 148.067445][ T5846] usb 2-1: USB disconnect, device number 16 [ 148.100233][ T5889] usb 3-1: config 0 descriptor?? [ 148.110845][ T7427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.120694][ T7427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.141186][ T7429] fuse: Bad value for 'fd' [ 148.207120][ T7431] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 148.216318][ T7431] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 148.336879][ T7427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.356509][ T7427] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 148.769280][ T5889] Error reading MAC address [ 148.778819][ T5849] usb 1-1: USB disconnect, device number 17 [ 148.796963][ T5935] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 148.965208][ T5935] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.975675][ T5935] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 148.987525][ T5935] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 148.997503][ T5935] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.007922][ T5935] usb 2-1: Product: syz [ 149.012422][ T5935] usb 2-1: Manufacturer: syz [ 149.017847][ T5935] usb 2-1: SerialNumber: syz [ 149.029748][ T5935] usb 2-1: config 0 descriptor?? [ 149.169942][ T7447] overlayfs: missing 'workdir' [ 149.718096][ T7452] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 149.730276][ T7452] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 149.865214][ T5935] usb 3-1: USB disconnect, device number 29 [ 150.188271][ T5846] usb 4-1: USB disconnect, device number 21 [ 150.392567][ T7468] overlayfs: missing 'workdir' [ 150.513691][ T5846] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 150.685540][ T5846] usb 1-1: config 0 has no interfaces? [ 150.699024][ T5846] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 150.709699][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.722406][ T5846] usb 1-1: Product: syz [ 150.727046][ T5846] usb 1-1: Manufacturer: syz [ 150.732049][ T5846] usb 1-1: SerialNumber: syz [ 150.759127][ T5846] usb 1-1: config 0 descriptor?? [ 150.969126][ T5844] usb 1-1: USB disconnect, device number 18 [ 151.123765][ T5846] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 151.143734][ T5889] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 151.294724][ T5846] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 151.304957][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.314030][ T5889] usb 4-1: Using ep0 maxpacket: 32 [ 151.319192][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.330803][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.339028][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.349433][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.362420][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.374330][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 151.388553][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.395905][ T5889] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.405472][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.416426][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.431343][ T5889] usb 4-1: config 0 descriptor?? [ 151.437291][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.449735][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.459949][ T5889] hub 4-1:0.0: bad descriptor, ignoring hub [ 151.466353][ T5889] hub 4-1:0.0: probe with driver hub failed with error -5 [ 151.478396][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.490817][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.503145][ T5889] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 151.514397][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.527979][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.537452][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.554076][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.564320][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.583669][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.603212][ T5889] usb 2-1: USB disconnect, device number 17 [ 151.611414][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.647028][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.667809][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.696513][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.708239][ T5846] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.734164][ T5846] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.750696][ T5846] usb 3-1: config 0 interface 0 has no altsetting 0 [ 151.761211][ T5846] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 151.776417][ T5846] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 151.787061][ T5846] usb 3-1: Product: syz [ 151.791265][ T5846] usb 3-1: Manufacturer: syz [ 151.796580][ T5846] usb 3-1: SerialNumber: syz [ 151.815169][ T5846] usb 3-1: config 0 descriptor?? [ 151.841251][ T5846] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 151.873831][ T5935] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 151.955902][ T7490] overlayfs: missing 'workdir' [ 152.027477][ T5935] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 152.052628][ T5849] usb 3-1: USB disconnect, device number 30 [ 152.062641][ T5935] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 152.080660][ T5849] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 152.100156][ T5935] usb 1-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 152.119957][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.151057][ T5935] usb 1-1: Product: syz [ 152.161358][ T5935] usb 1-1: Manufacturer: syz [ 152.168767][ T5935] usb 1-1: SerialNumber: syz [ 152.192938][ T5935] usb 1-1: config 0 descriptor?? [ 152.204691][ T7484] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.228997][ T7484] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.250458][ T7496] fuse: Invalid rootmode [ 152.451224][ T7484] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.465690][ T7484] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 152.884006][ T5935] Error reading MAC address [ 153.053831][ T5889] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 153.092398][ T5935] usb 1-1: USB disconnect, device number 19 [ 153.108665][ T5849] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 153.216104][ T5889] usb 2-1: config 0 has no interfaces? [ 153.238329][ T5889] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 153.250987][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.259591][ T5889] usb 2-1: Product: syz [ 153.266977][ T5889] usb 2-1: Manufacturer: syz [ 153.271761][ T5889] usb 2-1: SerialNumber: syz [ 153.293523][ T5849] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 153.306247][ T5889] usb 2-1: config 0 descriptor?? [ 153.326455][ T5849] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 153.352877][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.379915][ T5849] usb 3-1: Product: syz [ 153.387105][ T5849] usb 3-1: Manufacturer: syz [ 153.393246][ T5849] usb 3-1: SerialNumber: syz [ 153.406624][ T5849] usb 3-1: config 0 descriptor?? [ 153.470084][ T7510] overlayfs: missing 'lowerdir' [ 153.518324][ T5889] usb 2-1: USB disconnect, device number 18 [ 153.672022][ T7516] fuse: Bad value for 'rootmode' [ 153.748292][ T7518] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.617'. [ 154.024974][ T5935] usb 4-1: USB disconnect, device number 22 [ 154.319352][ T7530] overlayfs: missing 'lowerdir' [ 154.377766][ T7534] fuse: Bad value for 'rootmode' [ 154.413916][ T7536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.624'. [ 154.444671][ T5849] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 154.477740][ T7540] netlink: 'syz.3.627': attribute type 1 has an invalid length. [ 154.625388][ T5849] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 154.637057][ T5849] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 154.649754][ T5849] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 154.659391][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.667568][ T5849] usb 2-1: Product: syz [ 154.672855][ T5849] usb 2-1: Manufacturer: syz [ 154.678264][ T5935] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 154.685943][ T5849] usb 2-1: SerialNumber: syz [ 154.693523][ T5849] usb 2-1: config 0 descriptor?? [ 154.700609][ T7525] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.708845][ T7525] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.764193][ T5904] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 154.844829][ T5935] usb 1-1: not running at top speed; connect to a high speed hub [ 154.855953][ T5935] usb 1-1: config 0 has an invalid interface number: 74 but max is 1 [ 154.864151][ T5935] usb 1-1: config 0 has no interface number 1 [ 154.870823][ T5935] usb 1-1: config 0 interface 74 altsetting 1 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 154.882051][ T5935] usb 1-1: config 0 interface 74 altsetting 1 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 154.893201][ T5935] usb 1-1: config 0 interface 0 has no altsetting 0 [ 154.900144][ T5935] usb 1-1: config 0 interface 74 has no altsetting 0 [ 154.910865][ T5935] usb 1-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=2b.5c [ 154.920548][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.922752][ T7525] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.928813][ T5904] usb 4-1: Using ep0 maxpacket: 32 [ 154.942018][ T7525] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.943514][ T5935] usb 1-1: Product: syz [ 154.959513][ T5935] usb 1-1: Manufacturer: syz [ 154.964790][ T5935] usb 1-1: SerialNumber: syz [ 154.969947][ T5904] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.981641][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 154.996062][ T5935] usb 1-1: config 0 descriptor?? [ 155.001415][ T5904] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 155.010695][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.022486][ T5904] usb 4-1: config 0 descriptor?? [ 155.031535][ T5904] hub 4-1:0.0: bad descriptor, ignoring hub [ 155.037774][ T5904] hub 4-1:0.0: probe with driver hub failed with error -5 [ 155.048850][ T5904] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 155.239393][ T5935] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 155.257085][ T5188] bcm5974 1-1:0.0: could not read from device [ 155.276308][ T5188] bcm5974 1-1:0.0: could not read from device [ 155.287528][ T5935] usbhid 1-1:0.74: couldn't find an input interrupt endpoint [ 155.300301][ T5188] bcm5974 1-1:0.0: could not read from device [ 155.314501][ T5935] usb 1-1: USB disconnect, device number 20 [ 155.321596][ T5188] bcm5974 1-1:0.0: could not read from device [ 155.357248][ T5849] Error reading MAC address [ 155.878230][ T5846] usb 3-1: USB disconnect, device number 31 [ 156.012407][ T7552] overlayfs: missing 'lowerdir' [ 156.130079][ T7556] fuse: Bad value for 'rootmode' [ 156.214070][ T7558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 156.352242][ T7562] netlink: 'syz.0.637': attribute type 4 has an invalid length. [ 156.364228][ T7562] netlink: 'syz.0.637': attribute type 8 has an invalid length. [ 156.374892][ T7562] netlink: 'syz.0.637': attribute type 9 has an invalid length. [ 156.382911][ T7562] netlink: 'syz.0.637': attribute type 10 has an invalid length. [ 156.399129][ T7562] netlink: 'syz.0.637': attribute type 11 has an invalid length. [ 156.408278][ T7562] netlink: 4 bytes leftover after parsing attributes in process `syz.0.637'. [ 156.743677][ T5935] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 156.915255][ T5935] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 156.936189][ T5935] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 156.945504][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.958903][ T5935] usb 1-1: Product: syz [ 156.963102][ T5935] usb 1-1: Manufacturer: syz [ 156.983750][ T5935] usb 1-1: SerialNumber: syz [ 157.004871][ T5935] usb 1-1: config 0 descriptor?? [ 157.172988][ T5846] usb 2-1: USB disconnect, device number 19 [ 157.345014][ T7576] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 157.358043][ T7576] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 157.433729][ T5904] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 157.443214][ T7578] fuse: Unknown parameter 'use00000000000000000000' [ 157.580436][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.1.646'. [ 157.593840][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 157.614546][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 157.645917][ T5904] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 157.658393][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.667522][ T5846] usb 4-1: USB disconnect, device number 23 [ 157.670767][ T5904] usb 3-1: Product: syz [ 157.688243][ T5904] usb 3-1: Manufacturer: syz [ 157.705665][ T5904] usb 3-1: SerialNumber: syz [ 157.724751][ T5904] usb 3-1: config 0 descriptor?? [ 157.735364][ T5904] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 157.747721][ T5904] usb 3-1: Detected FT232R [ 157.943333][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.957801][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.970657][ T5904] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 157.998324][ T5904] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 158.009675][ T5904] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 158.023845][ T5846] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 158.027923][ T5904] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 158.047542][ T5904] usb 3-1: USB disconnect, device number 32 [ 158.071089][ T5904] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 158.097159][ T5904] ftdi_sio 3-1:0.0: device disconnected [ 158.196391][ T5846] usb 4-1: config 0 has no interfaces? [ 158.205799][ T5846] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 158.215242][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.224316][ T5846] usb 4-1: Product: syz [ 158.228769][ T5846] usb 4-1: Manufacturer: syz [ 158.233418][ T5846] usb 4-1: SerialNumber: syz [ 158.244407][ T5846] usb 4-1: config 0 descriptor?? [ 158.407044][ T7596] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 158.416479][ T7596] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 158.509047][ T7598] fuse: Unknown parameter 'use00000000000000000000' [ 158.933685][ T5846] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 159.026862][ T7610] evm: overlay not supported [ 159.083660][ T5846] usb 2-1: Using ep0 maxpacket: 32 [ 159.098655][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.111003][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.135725][ T5846] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 159.147833][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.168096][ T5846] usb 2-1: config 0 descriptor?? [ 159.196926][ T5846] hub 2-1:0.0: bad descriptor, ignoring hub [ 159.211366][ T5846] hub 2-1:0.0: probe with driver hub failed with error -5 [ 159.229666][ T5846] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 159.513051][ T5846] usb 1-1: USB disconnect, device number 21 [ 159.558851][ T7618] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 159.569063][ T7618] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 159.621997][ T7620] fuse: Unknown parameter 'use00000000000000000000' [ 159.973901][ T5846] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 160.127568][ T5846] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 160.146873][ T5846] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 160.167974][ T5846] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 160.181785][ T5846] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 160.191884][ T5846] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.206100][ T7622] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 160.629245][ T7632] FAULT_INJECTION: forcing a failure. [ 160.629245][ T7632] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 160.643215][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: syz.2.667 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 160.643231][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 160.643243][ T7632] Call Trace: [ 160.643248][ T7632] [ 160.643252][ T7632] dump_stack_lvl+0x189/0x250 [ 160.643275][ T7632] ? __pfx____ratelimit+0x10/0x10 [ 160.643289][ T7632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 160.643299][ T7632] ? __pfx__printk+0x10/0x10 [ 160.643310][ T7632] ? __might_fault+0xb0/0x130 [ 160.643327][ T7632] should_fail_ex+0x414/0x560 [ 160.643343][ T7632] _copy_from_iter+0x575/0x16f0 [ 160.643362][ T7632] ? __pfx__copy_from_iter+0x10/0x10 [ 160.643378][ T7632] ? __build_skb_around+0x257/0x3e0 [ 160.643393][ T7632] ? netlink_sendmsg+0x642/0xb30 [ 160.643404][ T7632] ? skb_put+0x11b/0x210 [ 160.643419][ T7632] netlink_sendmsg+0x6b2/0xb30 [ 160.643437][ T7632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.643458][ T7632] ? aa_sock_msg_perm+0xf1/0x1d0 [ 160.643478][ T7632] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 160.643498][ T7632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 160.643518][ T7632] __sock_sendmsg+0x21c/0x270 [ 160.643538][ T7632] ____sys_sendmsg+0x505/0x830 [ 160.643555][ T7632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 160.643580][ T7632] ? import_iovec+0x74/0xa0 [ 160.643605][ T7632] ___sys_sendmsg+0x21f/0x2a0 [ 160.643636][ T7632] ? __pfx____sys_sendmsg+0x10/0x10 [ 160.643688][ T7632] ? __fget_files+0x2a/0x420 [ 160.643707][ T7632] ? __fget_files+0x3a0/0x420 [ 160.643735][ T7632] __x64_sys_sendmsg+0x19b/0x260 [ 160.643759][ T7632] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 160.643777][ T7632] ? __pfx_ksys_write+0x10/0x10 [ 160.643788][ T7632] ? rcu_is_watching+0x15/0xb0 [ 160.643801][ T7632] ? do_syscall_64+0xbe/0x3b0 [ 160.643815][ T7632] do_syscall_64+0xfa/0x3b0 [ 160.643825][ T7632] ? lockdep_hardirqs_on+0x9c/0x150 [ 160.643836][ T7632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.643846][ T7632] ? clear_bhb_loop+0x60/0xb0 [ 160.643857][ T7632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.643866][ T7632] RIP: 0033:0x7f7c0c98e929 [ 160.643881][ T7632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.643888][ T7632] RSP: 002b:00007f7c0d8bf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 160.643905][ T7632] RAX: ffffffffffffffda RBX: 00007f7c0cbb5fa0 RCX: 00007f7c0c98e929 [ 160.643912][ T7632] RDX: 0000000000000004 RSI: 0000200000000180 RDI: 0000000000000003 [ 160.643918][ T7632] RBP: 00007f7c0d8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 160.643924][ T7632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.643929][ T7632] R13: 0000000000000000 R14: 00007f7c0cbb5fa0 R15: 00007fff5c2180b8 [ 160.643943][ T7632] [ 160.969013][ T5904] usb 4-1: USB disconnect, device number 24 [ 161.217457][ T7640] fuse: Unknown parameter 'user_i00000000000000000000' [ 161.333830][ T5904] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 161.515593][ T5904] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 161.527016][ T5904] usb 4-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 161.536467][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.545317][ T5904] usb 4-1: Product: syz [ 161.550029][ T5904] usb 4-1: Manufacturer: syz [ 161.563651][ T5904] usb 4-1: SerialNumber: syz [ 161.570176][ T5904] usb 4-1: config 0 descriptor?? [ 161.795215][ T5889] usb 2-1: USB disconnect, device number 20 [ 161.888683][ T5846] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 161.914471][ T5846] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input6 [ 161.994299][ T5846] usb 1-1: USB disconnect, device number 22 [ 162.000440][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 162.343721][ T5889] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 162.505680][ T5889] usb 3-1: config 0 has no interfaces? [ 162.514826][ T5889] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 162.525300][ T5889] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.533512][ T5889] usb 3-1: Product: syz [ 162.538258][ T5889] usb 3-1: Manufacturer: syz [ 162.543205][ T5889] usb 3-1: SerialNumber: syz [ 162.556755][ T7663] fuse: Unknown parameter 'user_i00000000000000000000' [ 162.557017][ T5889] usb 3-1: config 0 descriptor?? [ 162.611825][ T7665] FAULT_INJECTION: forcing a failure. [ 162.611825][ T7665] name failslab, interval 1, probability 0, space 0, times 1 [ 162.639848][ T7665] CPU: 0 UID: 0 PID: 7665 Comm: syz.0.681 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 162.639875][ T7665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.639885][ T7665] Call Trace: [ 162.639891][ T7665] [ 162.639899][ T7665] dump_stack_lvl+0x189/0x250 [ 162.639922][ T7665] ? __pfx____ratelimit+0x10/0x10 [ 162.639943][ T7665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.639958][ T7665] ? __pfx__printk+0x10/0x10 [ 162.639988][ T7665] should_fail_ex+0x414/0x560 [ 162.640014][ T7665] should_failslab+0xa8/0x100 [ 162.640035][ T7665] kmem_cache_alloc_noprof+0x73/0x3c0 [ 162.640052][ T7665] ? skb_clone+0x212/0x3a0 [ 162.640070][ T7665] skb_clone+0x212/0x3a0 [ 162.640089][ T7665] __netlink_deliver_tap+0x404/0x850 [ 162.640121][ T7665] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.640141][ T7665] netlink_deliver_tap+0x19c/0x1b0 [ 162.640162][ T7665] netlink_sendskb+0x68/0x140 [ 162.640194][ T7665] netlink_rcv_skb+0x28c/0x470 [ 162.640216][ T7665] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 162.640237][ T7665] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 162.640265][ T7665] ? bpf_lsm_capable+0x9/0x20 [ 162.640282][ T7665] ? security_capable+0x7e/0x2e0 [ 162.640303][ T7665] nfnetlink_rcv+0x26a/0x2520 [ 162.640322][ T7665] ? __dev_queue_xmit+0x1cd7/0x3a70 [ 162.640342][ T7665] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 162.640362][ T7665] ? __dev_queue_xmit+0x27e/0x3a70 [ 162.640378][ T7665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.640404][ T7665] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 162.640422][ T7665] ? __pfx___dev_queue_xmit+0x10/0x10 [ 162.640451][ T7665] ? ref_tracker_free+0x63a/0x7d0 [ 162.640464][ T7665] ? __copy_skb_header+0xa7/0x550 [ 162.640479][ T7665] ? __pfx_ref_tracker_free+0x10/0x10 [ 162.640493][ T7665] ? __skb_clone+0x63/0x7a0 [ 162.640511][ T7665] ? __skb_clone+0x483/0x7a0 [ 162.640529][ T7665] ? skb_clone+0x246/0x3a0 [ 162.640547][ T7665] ? __netlink_deliver_tap+0x807/0x850 [ 162.640565][ T7665] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.640588][ T7665] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.640604][ T7665] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.640627][ T7665] netlink_unicast+0x758/0x8d0 [ 162.640654][ T7665] netlink_sendmsg+0x805/0xb30 [ 162.640679][ T7665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.640701][ T7665] ? aa_sock_msg_perm+0xf1/0x1d0 [ 162.640719][ T7665] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 162.640740][ T7665] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.640758][ T7665] __sock_sendmsg+0x21c/0x270 [ 162.640779][ T7665] ____sys_sendmsg+0x505/0x830 [ 162.640804][ T7665] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.640836][ T7665] ? import_iovec+0x74/0xa0 [ 162.640861][ T7665] ___sys_sendmsg+0x21f/0x2a0 [ 162.640886][ T7665] ? __pfx____sys_sendmsg+0x10/0x10 [ 162.640939][ T7665] ? __fget_files+0x2a/0x420 [ 162.640960][ T7665] ? __fget_files+0x3a0/0x420 [ 162.640990][ T7665] __x64_sys_sendmsg+0x19b/0x260 [ 162.641009][ T7665] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 162.641028][ T7665] ? __pfx_ksys_write+0x10/0x10 [ 162.641037][ T7665] ? rcu_is_watching+0x15/0xb0 [ 162.641050][ T7665] ? do_syscall_64+0xbe/0x3b0 [ 162.641064][ T7665] do_syscall_64+0xfa/0x3b0 [ 162.641074][ T7665] ? lockdep_hardirqs_on+0x9c/0x150 [ 162.641086][ T7665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.641095][ T7665] ? clear_bhb_loop+0x60/0xb0 [ 162.641107][ T7665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.641116][ T7665] RIP: 0033:0x7f43edf8e929 [ 162.641127][ T7665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.641134][ T7665] RSP: 002b:00007f43eed76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.641146][ T7665] RAX: ffffffffffffffda RBX: 00007f43ee1b5fa0 RCX: 00007f43edf8e929 [ 162.641153][ T7665] RDX: 0000000020004000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 162.641159][ T7665] RBP: 00007f43eed76090 R08: 0000000000000000 R09: 0000000000000000 [ 162.641165][ T7665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.641170][ T7665] R13: 0000000000000000 R14: 00007f43ee1b5fa0 R15: 00007ffdee1d91b8 [ 162.641192][ T7665] [ 163.114079][ T5904] usb 3-1: USB disconnect, device number 33 [ 163.423707][ T5935] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 163.527081][ T7677] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 163.573863][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 163.581275][ T5935] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.592029][ T5935] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.605740][ T5935] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 163.615200][ T5935] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.651680][ T5935] usb 1-1: config 0 descriptor?? [ 163.677285][ T5935] hub 1-1:0.0: bad descriptor, ignoring hub [ 163.703339][ T5935] hub 1-1:0.0: probe with driver hub failed with error -5 [ 163.717549][ T5935] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 163.841771][ T7684] fuse: Unknown parameter 'user_i00000000000000000000' [ 164.044639][ T5935] usb 4-1: USB disconnect, device number 25 [ 164.574006][ T5889] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 164.735633][ T5889] usb 4-1: config 0 has no interfaces? [ 164.743914][ T5889] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 164.762022][ T5889] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.794154][ T5889] usb 4-1: Product: syz [ 164.798657][ T5889] usb 4-1: Manufacturer: syz [ 164.803366][ T5889] usb 4-1: SerialNumber: syz [ 164.823115][ T5889] usb 4-1: config 0 descriptor?? [ 165.037144][ T5889] usb 4-1: USB disconnect, device number 26 [ 165.914087][ T5889] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 166.065589][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 166.077484][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 166.088522][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 166.098344][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 166.112524][ T5889] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 166.121731][ T5889] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.133093][ T5889] usb 4-1: config 0 descriptor?? [ 166.133773][ T5935] usb 3-1: new full-speed USB device number 34 using dummy_hcd [ 166.305978][ T5904] usb 1-1: USB disconnect, device number 23 [ 166.318289][ T5935] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.332178][ T5935] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.351767][ T5935] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 166.362147][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.374740][ T5935] usb 3-1: Product: syz [ 166.380047][ T5935] usb 3-1: Manufacturer: syz [ 166.388566][ T5935] usb 3-1: SerialNumber: syz [ 166.443161][ T7749] netlink: 48 bytes leftover after parsing attributes in process `syz.0.715'. [ 166.576917][ T5889] plantronics 0003:047F:FFFF.0009: ignoring exceeding usage max [ 166.629403][ T5889] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 166.639092][ T5935] usb 3-1: 0:2 : does not exist [ 166.707490][ T5935] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 166.784658][ T5935] usb 3-1: USB disconnect, device number 34 [ 166.850011][ T6673] udevd[6673]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.963714][ T5889] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 167.126917][ T5889] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 167.147075][ T5889] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.161624][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.201576][ T5889] usb 2-1: config 0 descriptor?? [ 167.232646][ T5889] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 167.537709][ T7770] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 168.043776][ T5889] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 168.053839][ T5846] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 168.207768][ T5846] usb 4-1: device descriptor read/64, error -32 [ 168.226949][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 168.239710][ T5889] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.260395][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 168.281809][ T5889] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 168.292178][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.308576][ T5889] usb 3-1: config 0 descriptor?? [ 168.323540][ T5889] hub 3-1:0.0: bad descriptor, ignoring hub [ 168.333548][ T5889] hub 3-1:0.0: probe with driver hub failed with error -5 [ 168.346926][ T5889] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 168.474139][ T5846] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 168.623653][ T5846] usb 4-1: device descriptor read/64, error -32 [ 168.660058][ T7789] netlink: 'syz.0.728': attribute type 4 has an invalid length. [ 168.679982][ T7789] netlink: 'syz.0.728': attribute type 4 has an invalid length. [ 168.863940][ T5846] usb 4-1: reset high-speed USB device number 27 using dummy_hcd [ 168.896643][ T5846] usb 4-1: device descriptor read/8, error -32 [ 169.508558][ T7820] FAULT_INJECTION: forcing a failure. [ 169.508558][ T7820] name failslab, interval 1, probability 0, space 0, times 0 [ 169.529675][ T7820] CPU: 0 UID: 0 PID: 7820 Comm: syz.0.735 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 169.529693][ T7820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 169.529700][ T7820] Call Trace: [ 169.529705][ T7820] [ 169.529710][ T7820] dump_stack_lvl+0x189/0x250 [ 169.529727][ T7820] ? __pfx____ratelimit+0x10/0x10 [ 169.529740][ T7820] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.529750][ T7820] ? __pfx__printk+0x10/0x10 [ 169.529768][ T7820] should_fail_ex+0x414/0x560 [ 169.529786][ T7820] should_failslab+0xa8/0x100 [ 169.529800][ T7820] kmem_cache_alloc_noprof+0x73/0x3c0 [ 169.529847][ T7820] ? skb_clone+0x212/0x3a0 [ 169.529868][ T7820] skb_clone+0x212/0x3a0 [ 169.529887][ T7820] __netlink_deliver_tap+0x404/0x850 [ 169.529919][ T7820] ? netlink_deliver_tap+0x2e/0x1b0 [ 169.529934][ T7820] netlink_deliver_tap+0x19c/0x1b0 [ 169.529947][ T7820] netlink_sendskb+0x68/0x140 [ 169.529959][ T7820] netlink_rcv_skb+0x28c/0x470 [ 169.529971][ T7820] ? __pfx_genl_rcv_msg+0x10/0x10 [ 169.529982][ T7820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 169.530003][ T7820] ? down_read+0x1ad/0x2e0 [ 169.530017][ T7820] genl_rcv+0x28/0x40 [ 169.530025][ T7820] netlink_unicast+0x758/0x8d0 [ 169.530042][ T7820] netlink_sendmsg+0x805/0xb30 [ 169.530059][ T7820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.530073][ T7820] ? aa_sock_msg_perm+0xf1/0x1d0 [ 169.530085][ T7820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 169.530098][ T7820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.530111][ T7820] __sock_sendmsg+0x21c/0x270 [ 169.530124][ T7820] ____sys_sendmsg+0x505/0x830 [ 169.530141][ T7820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 169.530159][ T7820] ? import_iovec+0x74/0xa0 [ 169.530175][ T7820] ___sys_sendmsg+0x21f/0x2a0 [ 169.530190][ T7820] ? __pfx____sys_sendmsg+0x10/0x10 [ 169.530222][ T7820] ? __fget_files+0x2a/0x420 [ 169.530235][ T7820] ? __fget_files+0x3a0/0x420 [ 169.530252][ T7820] __x64_sys_sendmsg+0x19b/0x260 [ 169.530267][ T7820] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 169.530286][ T7820] ? __pfx_ksys_write+0x10/0x10 [ 169.530300][ T7820] ? do_syscall_64+0xbe/0x3b0 [ 169.530314][ T7820] do_syscall_64+0xfa/0x3b0 [ 169.530325][ T7820] ? lockdep_hardirqs_on+0x9c/0x150 [ 169.530336][ T7820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.530345][ T7820] ? clear_bhb_loop+0x60/0xb0 [ 169.530357][ T7820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.530369][ T7820] RIP: 0033:0x7f43edf8e929 [ 169.530384][ T7820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.530397][ T7820] RSP: 002b:00007f43eed76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 169.530414][ T7820] RAX: ffffffffffffffda RBX: 00007f43ee1b5fa0 RCX: 00007f43edf8e929 [ 169.530426][ T7820] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 169.530437][ T7820] RBP: 00007f43eed76090 R08: 0000000000000000 R09: 0000000000000000 [ 169.530446][ T7820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.530451][ T7820] R13: 0000000000000000 R14: 00007f43ee1b5fa0 R15: 00007ffdee1d91b8 [ 169.530466][ T7820] [ 169.947599][ T5844] usb 4-1: USB disconnect, device number 27 [ 170.053057][ T7824] FAULT_INJECTION: forcing a failure. [ 170.053057][ T7824] name failslab, interval 1, probability 0, space 0, times 0 [ 170.067032][ T7824] CPU: 0 UID: 0 PID: 7824 Comm: syz.0.737 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 170.067148][ T7824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 170.067160][ T7824] Call Trace: [ 170.067172][ T7824] [ 170.067182][ T7824] dump_stack_lvl+0x189/0x250 [ 170.067210][ T7824] ? __pfx____ratelimit+0x10/0x10 [ 170.067233][ T7824] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.067252][ T7824] ? __pfx__printk+0x10/0x10 [ 170.067287][ T7824] should_fail_ex+0x414/0x560 [ 170.067318][ T7824] should_failslab+0xa8/0x100 [ 170.067342][ T7824] kmem_cache_alloc_noprof+0x73/0x3c0 [ 170.067362][ T7824] ? skb_clone+0x212/0x3a0 [ 170.067384][ T7824] skb_clone+0x212/0x3a0 [ 170.067404][ T7824] __netlink_deliver_tap+0x404/0x850 [ 170.067437][ T7824] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.067460][ T7824] netlink_deliver_tap+0x19c/0x1b0 [ 170.067479][ T7824] netlink_sendskb+0x68/0x140 [ 170.067498][ T7824] netlink_rcv_skb+0x28c/0x470 [ 170.067521][ T7824] ? __pfx_genl_rcv_msg+0x10/0x10 [ 170.067541][ T7824] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.067580][ T7824] ? down_read+0x1ad/0x2e0 [ 170.067720][ T7824] genl_rcv+0x28/0x40 [ 170.067743][ T7824] netlink_unicast+0x758/0x8d0 [ 170.067776][ T7824] netlink_sendmsg+0x805/0xb30 [ 170.067869][ T7824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.067895][ T7824] ? aa_sock_msg_perm+0xf1/0x1d0 [ 170.067915][ T7824] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 170.067936][ T7824] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.067960][ T7824] __sock_sendmsg+0x21c/0x270 [ 170.067984][ T7824] ____sys_sendmsg+0x505/0x830 [ 170.068013][ T7824] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.068042][ T7824] ? import_iovec+0x74/0xa0 [ 170.068067][ T7824] ___sys_sendmsg+0x21f/0x2a0 [ 170.068088][ T7824] ? __pfx____sys_sendmsg+0x10/0x10 [ 170.068147][ T7824] ? __fget_files+0x2a/0x420 [ 170.068168][ T7824] ? __fget_files+0x3a0/0x420 [ 170.068193][ T7824] __x64_sys_sendmsg+0x19b/0x260 [ 170.068217][ T7824] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 170.068244][ T7824] ? __pfx_ksys_write+0x10/0x10 [ 170.068266][ T7824] ? do_syscall_64+0xbe/0x3b0 [ 170.068288][ T7824] do_syscall_64+0xfa/0x3b0 [ 170.068305][ T7824] ? lockdep_hardirqs_on+0x9c/0x150 [ 170.068322][ T7824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.068337][ T7824] ? clear_bhb_loop+0x60/0xb0 [ 170.068355][ T7824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.068368][ T7824] RIP: 0033:0x7f43edf8e929 [ 170.068384][ T7824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.068395][ T7824] RSP: 002b:00007f43eed76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.068421][ T7824] RAX: ffffffffffffffda RBX: 00007f43ee1b5fa0 RCX: 00007f43edf8e929 [ 170.068432][ T7824] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 170.068439][ T7824] RBP: 00007f43eed76090 R08: 0000000000000000 R09: 0000000000000000 [ 170.068448][ T7824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.068455][ T7824] R13: 0000000000000000 R14: 00007f43ee1b5fa0 R15: 00007ffdee1d91b8 [ 170.068479][ T7824] [ 170.470336][ T5846] usb 2-1: USB disconnect, device number 21 [ 170.934343][ T5846] usb 3-1: USB disconnect, device number 35 [ 171.192614][ T7855] netlink: 244 bytes leftover after parsing attributes in process `syz.3.747'. [ 171.413355][ T7866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.753'. [ 171.433040][ T7868] FAULT_INJECTION: forcing a failure. [ 171.433040][ T7868] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.450567][ T7868] CPU: 0 UID: 0 PID: 7868 Comm: syz.3.754 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 171.450592][ T7868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.450603][ T7868] Call Trace: [ 171.450620][ T7868] [ 171.450628][ T7868] dump_stack_lvl+0x189/0x250 [ 171.450659][ T7868] ? __pfx____ratelimit+0x10/0x10 [ 171.450683][ T7868] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.450702][ T7868] ? __pfx__printk+0x10/0x10 [ 171.450722][ T7868] ? __might_fault+0xb0/0x130 [ 171.450751][ T7868] should_fail_ex+0x414/0x560 [ 171.450782][ T7868] _copy_from_iter+0x1db/0x16f0 [ 171.450803][ T7868] ? rcu_is_watching+0x15/0xb0 [ 171.450821][ T7868] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 171.450839][ T7868] ? tcp_leave_memory_pressure+0xea/0x100 [ 171.450856][ T7868] ? __pfx_tcp_leave_memory_pressure+0x10/0x10 [ 171.450880][ T7868] ? __pfx__copy_from_iter+0x10/0x10 [ 171.450906][ T7868] ? skb_page_frag_refill+0x1be/0x320 [ 171.450933][ T7868] tcp_sendmsg_locked+0x21fc/0x5630 [ 171.451007][ T7868] ? __pfx_tcp_sendmsg_locked+0x10/0x10 [ 171.451024][ T7868] ? __local_bh_enable_ip+0x12d/0x1c0 [ 171.451045][ T7868] ? __local_bh_enable_ip+0x12d/0x1c0 [ 171.451073][ T7868] tcp_sendmsg+0x2f/0x50 [ 171.451091][ T7868] __sock_sendmsg+0x19c/0x270 [ 171.451114][ T7868] __sys_sendto+0x3bd/0x520 [ 171.451139][ T7868] ? __pfx___sys_sendto+0x10/0x10 [ 171.451158][ T7868] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 171.451193][ T7868] ? __fget_files+0x3a0/0x420 [ 171.451227][ T7868] ? ksys_write+0x22a/0x250 [ 171.451250][ T7868] ? __pfx_ksys_write+0x10/0x10 [ 171.451265][ T7868] ? rcu_is_watching+0x15/0xb0 [ 171.451286][ T7868] __x64_sys_sendto+0xde/0x100 [ 171.451319][ T7868] do_syscall_64+0xfa/0x3b0 [ 171.451339][ T7868] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.451359][ T7868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.451376][ T7868] ? clear_bhb_loop+0x60/0xb0 [ 171.451397][ T7868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.451411][ T7868] RIP: 0033:0x7f73f018e929 [ 171.451427][ T7868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.451440][ T7868] RSP: 002b:00007f73f10c0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 171.451459][ T7868] RAX: ffffffffffffffda RBX: 00007f73f03b5fa0 RCX: 00007f73f018e929 [ 171.451471][ T7868] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 171.451481][ T7868] RBP: 00007f73f10c0090 R08: 0000000000000000 R09: 0000000000000000 [ 171.451492][ T7868] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000001 [ 171.451501][ T7868] R13: 0000000000000000 R14: 00007f73f03b5fa0 R15: 00007fff7ce41058 [ 171.451526][ T7868] [ 171.917271][ T7876] NILFS (rnullb0): couldn't find nilfs on the device [ 172.033688][ T5849] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 172.183737][ T5849] usb 2-1: Using ep0 maxpacket: 32 [ 172.191064][ T5849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.205100][ T5849] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 172.216090][ T7890] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.761'. [ 172.221595][ T5849] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 172.229262][ T7887] netlink: 4083 bytes leftover after parsing attributes in process `syz.2.761'. [ 172.253108][ T5849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.267417][ T5849] usb 2-1: config 0 descriptor?? [ 172.276121][ T5849] hub 2-1:0.0: bad descriptor, ignoring hub [ 172.282215][ T5849] hub 2-1:0.0: probe with driver hub failed with error -5 [ 172.298476][ T5849] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 173.165385][ T7915] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.773'. [ 173.667508][ T7942] FAULT_INJECTION: forcing a failure. [ 173.667508][ T7942] name failslab, interval 1, probability 0, space 0, times 0 [ 173.690738][ T7942] CPU: 0 UID: 0 PID: 7942 Comm: syz.2.781 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 173.690765][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.690776][ T7942] Call Trace: [ 173.690783][ T7942] [ 173.690791][ T7942] dump_stack_lvl+0x189/0x250 [ 173.690815][ T7942] ? __pfx____ratelimit+0x10/0x10 [ 173.690836][ T7942] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.690854][ T7942] ? __pfx__printk+0x10/0x10 [ 173.690873][ T7942] ? __pfx___might_resched+0x10/0x10 [ 173.690891][ T7942] ? fs_reclaim_acquire+0x7d/0x100 [ 173.690916][ T7942] should_fail_ex+0x414/0x560 [ 173.690946][ T7942] should_failslab+0xa8/0x100 [ 173.690969][ T7942] __kmalloc_node_track_caller_noprof+0xcc/0x4e0 [ 173.690989][ T7942] ? __request_module+0x2d1/0x5e0 [ 173.691015][ T7942] kstrdup+0x42/0x100 [ 173.691039][ T7942] __request_module+0x2d1/0x5e0 [ 173.691063][ T7942] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 173.691084][ T7942] ? __pfx___request_module+0x10/0x10 [ 173.691110][ T7942] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 173.691148][ T7942] nfnetlink_rcv+0x68e/0x2520 [ 173.691182][ T7942] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 173.691202][ T7942] ? __dev_queue_xmit+0x27e/0x3a70 [ 173.691231][ T7942] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 173.691262][ T7942] ? ref_tracker_free+0x63a/0x7d0 [ 173.691278][ T7942] ? __copy_skb_header+0xa7/0x550 [ 173.691295][ T7942] ? __pfx_ref_tracker_free+0x10/0x10 [ 173.691312][ T7942] ? __skb_clone+0x63/0x7a0 [ 173.691331][ T7942] ? __skb_clone+0x483/0x7a0 [ 173.691354][ T7942] ? skb_clone+0x246/0x3a0 [ 173.691373][ T7942] ? __netlink_deliver_tap+0x807/0x850 [ 173.691394][ T7942] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.691419][ T7942] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.691439][ T7942] ? netlink_deliver_tap+0x2e/0x1b0 [ 173.691466][ T7942] netlink_unicast+0x758/0x8d0 [ 173.691494][ T7942] netlink_sendmsg+0x805/0xb30 [ 173.691525][ T7942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.691548][ T7942] ? aa_sock_msg_perm+0xf1/0x1d0 [ 173.691569][ T7942] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 173.691592][ T7942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 173.691614][ T7942] __sock_sendmsg+0x21c/0x270 [ 173.691637][ T7942] __sys_sendto+0x3bd/0x520 [ 173.691661][ T7942] ? __pfx___sys_sendto+0x10/0x10 [ 173.691693][ T7942] ? count_memcg_event_mm+0x21/0x260 [ 173.691722][ T7942] ? exc_page_fault+0x76/0xf0 [ 173.691744][ T7942] ? do_user_addr_fault+0xc8a/0x1390 [ 173.691776][ T7942] __x64_sys_sendto+0xde/0x100 [ 173.691801][ T7942] do_syscall_64+0xfa/0x3b0 [ 173.691820][ T7942] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.691839][ T7942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.691855][ T7942] ? clear_bhb_loop+0x60/0xb0 [ 173.691876][ T7942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.691892][ T7942] RIP: 0033:0x7f7c0c9907bc [ 173.691908][ T7942] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 173.691922][ T7942] RSP: 002b:00007f7c0d89cec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 173.691941][ T7942] RAX: ffffffffffffffda RBX: 00007f7c0d89cfc0 RCX: 00007f7c0c9907bc [ 173.691954][ T7942] RDX: 0000000000000020 RSI: 00007f7c0d89d010 RDI: 0000000000000003 [ 173.691965][ T7942] RBP: 0000000000000000 R08: 00007f7c0d89cf14 R09: 000000000000000c [ 173.691975][ T7942] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 173.691986][ T7942] R13: 00007f7c0d89cf68 R14: 00007f7c0d89d010 R15: 0000000000000000 [ 173.692013][ T7942] [ 174.503836][ T5904] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 174.664895][ T5935] usb 2-1: USB disconnect, device number 22 [ 174.693226][ T5904] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.721057][ T5904] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 174.739529][ T5904] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 174.752242][ T5904] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.777931][ T5904] usb 4-1: config 0 descriptor?? [ 175.113293][ T7985] binder: 7984:7985 ioctl c0306201 2000000003c0 returned -14 [ 175.252445][ T5904] kovaplus 0003:1E7D:2D50.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 175.624438][ T5849] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 175.793746][ T5849] usb 3-1: Using ep0 maxpacket: 32 [ 175.800751][ T5849] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 175.811558][ T5849] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 175.825046][ T5849] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 175.837138][ T5849] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.847917][ T5849] usb 3-1: config 0 descriptor?? [ 175.856917][ T5849] hub 3-1:0.0: bad descriptor, ignoring hub [ 175.863093][ T5849] hub 3-1:0.0: probe with driver hub failed with error -5 [ 175.872931][ T5849] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 176.106216][ T5904] kovaplus 0003:1E7D:2D50.000A: couldn't init struct kovaplus_device [ 176.116690][ T5904] kovaplus 0003:1E7D:2D50.000A: couldn't install mouse [ 176.126476][ T5904] kovaplus 0003:1E7D:2D50.000A: probe with driver kovaplus failed with error -71 [ 176.140563][ T5904] usb 4-1: USB disconnect, device number 28 [ 176.477813][ T30] audit: type=1326 audit(1751405336.809:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8002 comm="syz.1.803" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a76b8e929 code=0x7fc00000 [ 176.964189][ T5849] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 177.033929][ T5844] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 177.125834][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 177.137704][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 177.148884][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 177.158801][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 177.173403][ T5849] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 177.182740][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.193977][ T5849] usb 1-1: config 0 descriptor?? [ 177.198096][ T5844] usb 4-1: config 0 has no interfaces? [ 177.219649][ T5844] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 177.230459][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.238983][ T5844] usb 4-1: Product: syz [ 177.243357][ T5844] usb 4-1: Manufacturer: syz [ 177.248033][ T5844] usb 4-1: SerialNumber: syz [ 177.255993][ T5844] usb 4-1: config 0 descriptor?? [ 177.621733][ T5849] usbhid 1-1:0.0: can't add hid device: -71 [ 177.628424][ T5849] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 177.645535][ T5849] usb 1-1: USB disconnect, device number 24 [ 178.350201][ T5844] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 178.424232][ T5846] usb 3-1: USB disconnect, device number 36 [ 178.468201][ T8059] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 178.517405][ T5844] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 178.536541][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.547277][ T5844] usb 2-1: config 0 has no interfaces? [ 178.555065][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.566655][ T5844] usb 2-1: config 0 has no interfaces? [ 178.574225][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.585172][ T5844] usb 2-1: config 0 has no interfaces? [ 178.591999][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.603983][ T5844] usb 2-1: config 0 has no interfaces? [ 178.611007][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.621168][ T5844] usb 2-1: config 0 has no interfaces? [ 178.629757][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.640269][ T5844] usb 2-1: config 0 has no interfaces? [ 178.647597][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.661545][ T5844] usb 2-1: config 0 has no interfaces? [ 178.668342][ T5844] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.679507][ T5844] usb 2-1: config 0 has no interfaces? [ 178.688065][ T5844] usb 2-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 178.699659][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.715677][ T5844] usb 2-1: config 0 descriptor?? [ 179.002490][ T5849] usb 2-1: USB disconnect, device number 23 [ 179.223745][ T5844] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 179.253890][ T5904] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 179.403795][ T5904] usb 3-1: Using ep0 maxpacket: 32 [ 179.403912][ T5844] usb 1-1: Using ep0 maxpacket: 32 [ 179.417672][ T5844] usb 1-1: config 0 has an invalid interface number: 74 but max is 0 [ 179.418709][ T5904] usb 3-1: config 0 has an invalid interface number: 74 but max is 0 [ 179.426244][ T5844] usb 1-1: config 0 has no interface number 0 [ 179.438584][ T5904] usb 3-1: config 0 has no interface number 0 [ 179.444662][ T5844] usb 1-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 179.450670][ T5904] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa [ 179.457832][ T5844] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.471399][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.476451][ T5844] usb 1-1: Product: syz [ 179.487279][ T5904] usb 3-1: Product: syz [ 179.489029][ T5844] usb 1-1: Manufacturer: syz [ 179.493321][ T5904] usb 3-1: Manufacturer: syz [ 179.493340][ T5904] usb 3-1: SerialNumber: syz [ 179.505086][ T5904] usb 3-1: config 0 descriptor?? [ 179.509345][ T5844] usb 1-1: SerialNumber: syz [ 179.549066][ T5844] usb 1-1: config 0 descriptor?? [ 179.739781][ T8072] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.760414][ T5904] usb 4-1: USB disconnect, device number 29 [ 179.764210][ T8072] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.830480][ T8069] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.857385][ T8069] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.942490][ T8072] FAULT_INJECTION: forcing a failure. [ 179.942490][ T8072] name failslab, interval 1, probability 0, space 0, times 0 [ 179.980845][ T8072] CPU: 1 UID: 0 PID: 8072 Comm: syz.2.827 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 179.980869][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 179.980879][ T8072] Call Trace: [ 179.980886][ T8072] [ 179.980894][ T8072] dump_stack_lvl+0x189/0x250 [ 179.980917][ T8072] ? __pfx____ratelimit+0x10/0x10 [ 179.980939][ T8072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 179.980959][ T8072] ? __pfx__printk+0x10/0x10 [ 179.980984][ T8072] ? __pfx___might_resched+0x10/0x10 [ 179.981005][ T8072] should_fail_ex+0x414/0x560 [ 179.981032][ T8072] should_failslab+0xa8/0x100 [ 179.981055][ T8072] __kmalloc_cache_node_noprof+0x73/0x3d0 [ 179.981076][ T8072] ? __get_vm_area_node+0x13f/0x300 [ 179.981097][ T8072] __get_vm_area_node+0x13f/0x300 [ 179.981118][ T8072] __vmalloc_node_range_noprof+0x301/0x12f0 [ 179.981137][ T8072] ? copy_process+0x54b/0x3c00 [ 179.981164][ T8072] ? percpu_ref_get_many+0x19/0x140 [ 179.981181][ T8072] ? percpu_ref_get_many+0x19/0x140 [ 179.981214][ T8072] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 179.981237][ T8072] ? memcpy_and_pad+0x48/0x80 [ 179.981261][ T8072] __vmalloc_node_noprof+0xc2/0x110 [ 179.981280][ T8072] ? copy_process+0x54b/0x3c00 [ 179.981293][ T8072] ? copy_process+0x54b/0x3c00 [ 179.981312][ T8072] dup_task_struct+0x3e7/0x860 [ 179.981335][ T8072] copy_process+0x54b/0x3c00 [ 179.981383][ T8072] ? __pfx_copy_process+0x10/0x10 [ 179.981412][ T8072] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 179.981435][ T8072] vhost_task_create+0x1c4/0x290 [ 179.981455][ T8072] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 179.981477][ T8072] ? __pfx_vhost_task_create+0x10/0x10 [ 179.981504][ T8072] ? __pfx_vhost_task_fn+0x10/0x10 [ 179.981533][ T8072] ? kasan_save_track+0x4f/0x80 [ 179.981548][ T8072] ? kasan_save_track+0x3e/0x80 [ 179.981568][ T8072] kvm_mmu_post_init_vm+0x147/0x2b0 [ 179.981594][ T8072] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 179.981623][ T8072] ? __mutex_trylock_common+0x153/0x260 [ 179.981654][ T8072] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 179.981679][ T8072] ? rcu_is_watching+0x15/0xb0 [ 179.981697][ T8072] ? look_up_lock_class+0x74/0x170 [ 179.981718][ T8072] ? register_lock_class+0x51/0x320 [ 179.981743][ T8072] ? __lock_acquire+0xab9/0xd20 [ 179.981790][ T8072] kvm_vcpu_ioctl+0x95c/0xe90 [ 179.981821][ T8072] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 179.981837][ T8072] ? __lock_acquire+0xab9/0xd20 [ 179.981877][ T8072] ? __fget_files+0x2a/0x420 [ 179.981900][ T8072] ? __fget_files+0x2a/0x420 [ 179.981920][ T8072] ? __fget_files+0x3a0/0x420 [ 179.981939][ T8072] ? __fget_files+0x2a/0x420 [ 179.981965][ T8072] ? bpf_lsm_file_ioctl+0x9/0x20 [ 179.981980][ T8072] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 179.981996][ T8072] __se_sys_ioctl+0xfc/0x170 [ 179.982016][ T8072] do_syscall_64+0xfa/0x3b0 [ 179.982033][ T8072] ? lockdep_hardirqs_on+0x9c/0x150 [ 179.982050][ T8072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.982066][ T8072] ? clear_bhb_loop+0x60/0xb0 [ 179.982087][ T8072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.982101][ T8072] RIP: 0033:0x7f7c0c98e929 [ 179.982116][ T8072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.982128][ T8072] RSP: 002b:00007f7c0d8bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 179.982147][ T8072] RAX: ffffffffffffffda RBX: 00007f7c0cbb5fa0 RCX: 00007f7c0c98e929 [ 179.982160][ T8072] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 179.982169][ T8072] RBP: 00007f7c0d8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 179.982179][ T8072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 179.982189][ T8072] R13: 0000000000000000 R14: 00007f7c0cbb5fa0 R15: 00007fff5c2180b8 [ 179.982218][ T8072] [ 179.982437][ T8072] syz.2.827: vmalloc error: size 32768, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 180.072157][ T5849] usb 1-1: USB disconnect, device number 25 [ 180.101635][ T8072] ,cpuset= [ 180.233946][ T5904] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 180.244286][ T8072] /,mems_allowed=0-1 [ 180.428659][ T8072] CPU: 0 UID: 0 PID: 8072 Comm: syz.2.827 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 180.428683][ T8072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 180.428693][ T8072] Call Trace: [ 180.428701][ T8072] [ 180.428720][ T8072] dump_stack_lvl+0x189/0x250 [ 180.428745][ T8072] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 180.428770][ T8072] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.428789][ T8072] ? __pfx__printk+0x10/0x10 [ 180.428808][ T8072] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 180.428828][ T8072] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 180.428855][ T8072] warn_alloc+0x214/0x310 [ 180.428883][ T8072] ? __pfx_warn_alloc+0x10/0x10 [ 180.428907][ T8072] ? __get_vm_area_node+0x13f/0x300 [ 180.428931][ T8072] ? __get_vm_area_node+0x2b5/0x300 [ 180.429014][ T8072] __vmalloc_node_range_noprof+0x326/0x12f0 [ 180.429055][ T8072] ? percpu_ref_get_many+0x19/0x140 [ 180.429077][ T8072] ? percpu_ref_get_many+0x19/0x140 [ 180.429110][ T8072] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 180.429134][ T8072] ? memcpy_and_pad+0x48/0x80 [ 180.429158][ T8072] __vmalloc_node_noprof+0xc2/0x110 [ 180.429179][ T8072] ? copy_process+0x54b/0x3c00 [ 180.429195][ T8072] ? copy_process+0x54b/0x3c00 [ 180.429215][ T8072] dup_task_struct+0x3e7/0x860 [ 180.429239][ T8072] copy_process+0x54b/0x3c00 [ 180.429286][ T8072] ? __pfx_copy_process+0x10/0x10 [ 180.429316][ T8072] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 180.429337][ T8072] vhost_task_create+0x1c4/0x290 [ 180.429358][ T8072] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 180.429378][ T8072] ? __pfx_vhost_task_create+0x10/0x10 [ 180.429406][ T8072] ? __pfx_vhost_task_fn+0x10/0x10 [ 180.429444][ T8072] ? kasan_save_track+0x4f/0x80 [ 180.429460][ T8072] ? kasan_save_track+0x3e/0x80 [ 180.429482][ T8072] kvm_mmu_post_init_vm+0x147/0x2b0 [ 180.429509][ T8072] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 180.429539][ T8072] ? __mutex_trylock_common+0x153/0x260 [ 180.429562][ T8072] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 180.429588][ T8072] ? rcu_is_watching+0x15/0xb0 [ 180.429605][ T8072] ? look_up_lock_class+0x74/0x170 [ 180.429629][ T8072] ? register_lock_class+0x51/0x320 [ 180.429659][ T8072] ? __lock_acquire+0xab9/0xd20 [ 180.429715][ T8072] kvm_vcpu_ioctl+0x95c/0xe90 [ 180.429742][ T8072] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 180.429760][ T8072] ? __lock_acquire+0xab9/0xd20 [ 180.429805][ T8072] ? __fget_files+0x2a/0x420 [ 180.429830][ T8072] ? __fget_files+0x2a/0x420 [ 180.429851][ T8072] ? __fget_files+0x3a0/0x420 [ 180.429871][ T8072] ? __fget_files+0x2a/0x420 [ 180.429897][ T8072] ? bpf_lsm_file_ioctl+0x9/0x20 [ 180.429914][ T8072] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 180.429933][ T8072] __se_sys_ioctl+0xfc/0x170 [ 180.430025][ T8072] do_syscall_64+0xfa/0x3b0 [ 180.430047][ T8072] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.430067][ T8072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.430083][ T8072] ? clear_bhb_loop+0x60/0xb0 [ 180.430102][ T8072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.430120][ T8072] RIP: 0033:0x7f7c0c98e929 [ 180.430137][ T8072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.430151][ T8072] RSP: 002b:00007f7c0d8bf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 180.430182][ T8072] RAX: ffffffffffffffda RBX: 00007f7c0cbb5fa0 RCX: 00007f7c0c98e929 [ 180.430196][ T8072] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000e [ 180.430206][ T8072] RBP: 00007f7c0d8bf090 R08: 0000000000000000 R09: 0000000000000000 [ 180.430217][ T8072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 180.430227][ T8072] R13: 0000000000000000 R14: 00007f7c0cbb5fa0 R15: 00007fff5c2180b8 [ 180.430257][ T8072] [ 180.430394][ T8072] Mem-Info: [ 180.835566][ T8072] active_anon:5519 inactive_anon:0 isolated_anon:0 [ 180.835566][ T8072] active_file:1382 inactive_file:39893 isolated_file:0 [ 180.835566][ T8072] unevictable:768 dirty:61 writeback:0 [ 180.835566][ T8072] slab_reclaimable:10392 slab_unreclaimable:94276 [ 180.835566][ T8072] mapped:24802 shmem:1354 pagetables:1167 [ 180.835566][ T8072] sec_pagetables:0 bounce:0 [ 180.835566][ T8072] kernel_misc_reclaimable:0 [ 180.835566][ T8072] free:1346490 free_pcp:14012 free_cma:0 [ 180.882368][ T8072] Node 0 active_anon:22328kB inactive_anon:0kB active_file:5528kB inactive_file:159372kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:99260kB dirty:244kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11468kB pagetables:4520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.914579][ T8072] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 180.945752][ T8072] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 180.976062][ T5904] usb 2-1: config 0 has no interfaces? [ 180.982450][ T8072] lowmem_reserve[]: 0 2496 2498 2498 2498 [ 181.003316][ T8072] Node 0 DMA32 free:1490720kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22176kB inactive_anon:0kB active_file:5528kB inactive_file:158064kB unevictable:1536kB writepending:244kB present:3129332kB managed:2556908kB mlocked:0kB bounce:0kB free_pcp:34748kB local_pcp:15048kB free_cma:0kB [ 181.003548][ T5904] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 181.054471][ T8072] lowmem_reserve[]: 0 0 1 1 1 [ 181.059226][ T8072] Node 0 Normal free:20kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1308kB unevictable:0kB writepending:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 181.091894][ T8072] lowmem_reserve[]: 0 0 0 0 0 [ 181.093543][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.105192][ T8072] Node 1 Normal free:3879860kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:21252kB local_pcp:10624kB free_cma:0kB [ 181.115264][ T5904] usb 2-1: Product: syz [ 181.140612][ T8072] lowmem_reserve[]: 0 0 0 0 0 [ 181.142088][ T5904] usb 2-1: Manufacturer: syz [ 181.151316][ T5904] usb 2-1: SerialNumber: syz [ 181.152260][ T8072] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 181.172855][ T5904] usb 2-1: config 0 descriptor?? [ 181.181957][ T8072] Node 0 DMA32: 746*4kB (UM) 227*8kB (UM) 228*16kB (UM) 155*32kB (UME) 90*64kB (UME) 25*128kB (UME) 12*256kB (M) 9*512kB (UME) 8*1024kB (UM) 7*2048kB (M) 351*4096kB (UM) = 1490272kB [ 181.208388][ T8072] Node 0 Normal: 1*4kB (M) 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 20kB [ 181.223316][ T8072] Node 1 Normal: 189*4kB (U) 56*8kB (UME) 46*16kB (UME) 57*32kB (UME) 24*64kB (UME) 4*128kB (UM) 3*256kB (UM) 5*512kB (UME) 2*1024kB (ME) 1*2048kB (E) 944*4096kB (M) = 3879860kB [ 181.244761][ T8072] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.256766][ T8072] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 181.266771][ T8072] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 181.276871][ T8072] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 181.290425][ T8072] 42635 total pagecache pages [ 181.295937][ T8072] 0 pages in swap cache [ 181.300260][ T8072] Free swap = 124996kB [ 181.307880][ T8072] Total swap = 124996kB [ 181.312140][ T8072] 2097051 pages RAM [ 181.316461][ T8072] 0 pages HighMem/MovableOnly [ 181.321491][ T8072] 425846 pages reserved [ 181.329515][ T8072] 0 pages cma reserved [ 181.342563][ T8094] fuse: Unknown parameter '0x0000000000000003' [ 181.431093][ T5889] usb 2-1: USB disconnect, device number 24 [ 181.450960][ T5849] usb 3-1: USB disconnect, device number 37 [ 181.760621][ T8108] FAULT_INJECTION: forcing a failure. [ 181.760621][ T8108] name failslab, interval 1, probability 0, space 0, times 0 [ 181.774581][ T8108] CPU: 0 UID: 0 PID: 8108 Comm: syz.0.841 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 181.774613][ T8108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 181.774622][ T8108] Call Trace: [ 181.774629][ T8108] [ 181.774638][ T8108] dump_stack_lvl+0x189/0x250 [ 181.774661][ T8108] ? __pfx____ratelimit+0x10/0x10 [ 181.774682][ T8108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.774709][ T8108] ? __pfx__printk+0x10/0x10 [ 181.774735][ T8108] ? __pfx___might_resched+0x10/0x10 [ 181.774749][ T8108] ? fs_reclaim_acquire+0x7d/0x100 [ 181.774770][ T8108] should_fail_ex+0x414/0x560 [ 181.774793][ T8108] should_failslab+0xa8/0x100 [ 181.774810][ T8108] __kmalloc_node_noprof+0xd1/0x4e0 [ 181.774829][ T8108] ? __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 181.774849][ T8108] __vmalloc_node_range_noprof+0x5a9/0x12f0 [ 181.774875][ T8108] ? percpu_ref_get_many+0x19/0x140 [ 181.774903][ T8108] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 181.774921][ T8108] ? memcpy_and_pad+0x48/0x80 [ 181.774997][ T8108] __vmalloc_node_noprof+0xc2/0x110 [ 181.775024][ T8108] ? copy_process+0x54b/0x3c00 [ 181.775038][ T8108] ? copy_process+0x54b/0x3c00 [ 181.775054][ T8108] dup_task_struct+0x3e7/0x860 [ 181.775072][ T8108] copy_process+0x54b/0x3c00 [ 181.775107][ T8108] ? __pfx_copy_process+0x10/0x10 [ 181.775131][ T8108] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 181.775149][ T8108] vhost_task_create+0x1c4/0x290 [ 181.775166][ T8108] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 181.775183][ T8108] ? __pfx_vhost_task_create+0x10/0x10 [ 181.775206][ T8108] ? __pfx_vhost_task_fn+0x10/0x10 [ 181.775234][ T8108] ? kasan_save_track+0x4f/0x80 [ 181.775247][ T8108] ? kasan_save_track+0x3e/0x80 [ 181.775264][ T8108] kvm_mmu_post_init_vm+0x147/0x2b0 [ 181.775285][ T8108] kvm_arch_vcpu_ioctl_run+0xdc/0x1940 [ 181.775314][ T8108] ? __mutex_trylock_common+0x153/0x260 [ 181.775332][ T8108] ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 181.775352][ T8108] ? rcu_is_watching+0x15/0xb0 [ 181.775366][ T8108] ? look_up_lock_class+0x74/0x170 [ 181.775387][ T8108] ? register_lock_class+0x51/0x320 [ 181.775411][ T8108] ? __lock_acquire+0xab9/0xd20 [ 181.775469][ T8108] kvm_vcpu_ioctl+0x95c/0xe90 [ 181.775490][ T8108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.775504][ T8108] ? __lock_acquire+0xab9/0xd20 [ 181.775537][ T8108] ? __fget_files+0x2a/0x420 [ 181.775558][ T8108] ? __fget_files+0x2a/0x420 [ 181.775574][ T8108] ? __fget_files+0x3a0/0x420 [ 181.775594][ T8108] ? __fget_files+0x2a/0x420 [ 181.775613][ T8108] ? bpf_lsm_file_ioctl+0x9/0x20 [ 181.775627][ T8108] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 181.775648][ T8108] __se_sys_ioctl+0xfc/0x170 [ 181.775665][ T8108] do_syscall_64+0xfa/0x3b0 [ 181.775681][ T8108] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.775696][ T8108] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.775714][ T8108] ? clear_bhb_loop+0x60/0xb0 [ 181.775731][ T8108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.775744][ T8108] RIP: 0033:0x7f43edf8e929 [ 181.775758][ T8108] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.775769][ T8108] RSP: 002b:00007f43eed76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 181.775785][ T8108] RAX: ffffffffffffffda RBX: 00007f43ee1b5fa0 RCX: 00007f43edf8e929 [ 181.775795][ T8108] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 181.775803][ T8108] RBP: 00007f43eed76090 R08: 0000000000000000 R09: 0000000000000000 [ 181.775812][ T8108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.775820][ T8108] R13: 0000000000000000 R14: 00007f43ee1b5fa0 R15: 00007ffdee1d91b8 [ 181.775842][ T8108] [ 182.203755][ T5904] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 182.205080][ T8110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.842'. [ 182.224169][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.1.842'. [ 182.333327][ T8114] fuse: Unknown parameter '0x0000000000000003' [ 182.355385][ T5904] usb 4-1: config 0 has no interfaces? [ 182.363420][ T5904] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 182.372897][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.381089][ T5904] usb 4-1: Product: syz [ 182.386295][ T5904] usb 4-1: Manufacturer: syz [ 182.391129][ T5904] usb 4-1: SerialNumber: syz [ 182.407774][ T5904] usb 4-1: config 0 descriptor?? [ 182.581432][ T8122] virtio-fs: tag not found [ 182.679143][ T8125] FAULT_INJECTION: forcing a failure. [ 182.679143][ T8125] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 182.694934][ T8125] CPU: 1 UID: 0 PID: 8125 Comm: syz.0.849 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 182.694959][ T8125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 182.694970][ T8125] Call Trace: [ 182.694977][ T8125] [ 182.694985][ T8125] dump_stack_lvl+0x189/0x250 [ 182.695011][ T8125] ? __pfx____ratelimit+0x10/0x10 [ 182.695033][ T8125] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.695052][ T8125] ? __pfx__printk+0x10/0x10 [ 182.695084][ T8125] should_fail_ex+0x414/0x560 [ 182.695114][ T8125] _copy_to_user+0x31/0xb0 [ 182.695133][ T8125] simple_read_from_buffer+0xe1/0x170 [ 182.695158][ T8125] proc_fail_nth_read+0x1df/0x250 [ 182.695186][ T8125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.695213][ T8125] ? rw_verify_area+0x258/0x650 [ 182.695231][ T8125] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 182.695256][ T8125] vfs_read+0x1fd/0x980 [ 182.695281][ T8125] ? __pfx___mutex_lock+0x10/0x10 [ 182.695310][ T8125] ? __pfx_vfs_read+0x10/0x10 [ 182.695330][ T8125] ? __fget_files+0x2a/0x420 [ 182.695355][ T8125] ? __fget_files+0x3a0/0x420 [ 182.695375][ T8125] ? __fget_files+0x2a/0x420 [ 182.695405][ T8125] ksys_read+0x145/0x250 [ 182.695427][ T8125] ? __pfx_ksys_read+0x10/0x10 [ 182.695443][ T8125] ? rcu_is_watching+0x15/0xb0 [ 182.695467][ T8125] ? do_syscall_64+0xbe/0x3b0 [ 182.695491][ T8125] do_syscall_64+0xfa/0x3b0 [ 182.695510][ T8125] ? lockdep_hardirqs_on+0x9c/0x150 [ 182.695530][ T8125] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.695546][ T8125] ? clear_bhb_loop+0x60/0xb0 [ 182.695568][ T8125] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.695584][ T8125] RIP: 0033:0x7f43edf8d33c [ 182.695600][ T8125] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 182.695615][ T8125] RSP: 002b:00007f43eed76030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 182.695634][ T8125] RAX: ffffffffffffffda RBX: 00007f43ee1b5fa0 RCX: 00007f43edf8d33c [ 182.695647][ T8125] RDX: 000000000000000f RSI: 00007f43eed760a0 RDI: 0000000000000004 [ 182.695658][ T8125] RBP: 00007f43eed76090 R08: 0000000000000000 R09: 0000000000000000 [ 182.695669][ T8125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 182.695678][ T8125] R13: 0000000000000000 R14: 00007f43ee1b5fa0 R15: 00007ffdee1d91b8 [ 182.695704][ T8125] [ 183.007456][ T8129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.851'. [ 183.042480][ T8129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.851'. [ 183.202251][ T8136] fuse: Unknown parameter '0x0000000000000003' [ 183.293660][ T5904] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 183.458765][ T5904] usb 3-1: config 0 has no interfaces? [ 183.475498][ T5904] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 183.492348][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.501175][ T5904] usb 3-1: Product: syz [ 183.505552][ T5904] usb 3-1: Manufacturer: syz [ 183.510936][ T5904] usb 3-1: SerialNumber: syz [ 183.530504][ T5904] usb 3-1: config 0 descriptor?? [ 183.675305][ T5935] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 183.748002][ T5904] usb 3-1: USB disconnect, device number 38 [ 183.849900][ T5935] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 183.863179][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.879112][ T5935] usb 1-1: Product: syz [ 183.883317][ T5935] usb 1-1: Manufacturer: syz [ 183.905056][ T5935] usb 1-1: SerialNumber: syz [ 183.916290][ T5935] usb 1-1: config 0 descriptor?? [ 184.539208][ T8155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.861'. [ 184.582441][ T5844] usb 4-1: USB disconnect, device number 30 [ 184.585023][ T8155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 184.634179][ T5889] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 184.794040][ T5889] usb 3-1: Using ep0 maxpacket: 32 [ 184.805521][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x48, changing to 0x8 [ 184.820070][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has an invalid bInterval 0, changing to 7 [ 184.845202][ T5889] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 184.854849][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.868012][ T5889] usb 3-1: config 0 descriptor?? [ 184.886159][ T5889] hub 3-1:0.0: bad descriptor, ignoring hub [ 184.895283][ T5889] hub 3-1:0.0: probe with driver hub failed with error -5 [ 184.909916][ T8166] 9pnet_fd: Insufficient options for proto=fd [ 184.915801][ T5889] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 185.353841][ T5844] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 185.528851][ T5844] usb 4-1: config 0 has no interfaces? [ 185.537172][ T5844] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 185.548042][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.563685][ T5844] usb 4-1: Product: syz [ 185.570267][ T5844] usb 4-1: Manufacturer: syz [ 185.579933][ T5844] usb 4-1: SerialNumber: syz [ 185.593129][ T5844] usb 4-1: config 0 descriptor?? [ 185.815724][ T5844] usb 4-1: USB disconnect, device number 31 [ 186.003739][ T5849] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 186.166104][ T5849] usb 2-1: config 0 has no interfaces? [ 186.186702][ T5849] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 186.203661][ T5849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.211772][ T5849] usb 2-1: Product: syz [ 186.223661][ T5849] usb 2-1: Manufacturer: syz [ 186.228294][ T5849] usb 2-1: SerialNumber: syz [ 186.245977][ T5849] usb 2-1: config 0 descriptor?? [ 186.383058][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.871'. [ 186.412731][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.871'. [ 186.470174][ T5849] usb 1-1: USB disconnect, device number 26 [ 186.688181][ T8187] ipvlan0: entered promiscuous mode [ 186.693440][ T8187] ipvlan0: entered allmulticast mode [ 186.710884][ T8187] veth0_vlan: entered allmulticast mode [ 186.860047][ T8189] 9pnet_fd: Insufficient options for proto=fd [ 186.883846][ T5846] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 187.053975][ T5846] usb 4-1: Using ep0 maxpacket: 16 [ 187.063058][ T5846] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 187.075155][ T5846] usb 4-1: config 0 has no interface number 0 [ 187.087405][ T5846] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 187.116701][ T5846] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 187.127206][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.136222][ T5846] usb 4-1: Product: syz [ 187.142970][ T5846] usb 4-1: Manufacturer: syz [ 187.148520][ T5846] usb 4-1: SerialNumber: syz [ 187.155903][ T5846] usb 4-1: config 0 descriptor?? [ 187.366369][ T5935] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 187.474065][ T5889] usb 3-1: USB disconnect, device number 39 [ 187.534747][ T5935] usb 1-1: Using ep0 maxpacket: 32 [ 187.545141][ T5935] usb 1-1: config 0 has too many interfaces: 129, using maximum allowed: 32 [ 187.556444][ T5935] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 129 [ 187.565926][ T5935] usb 1-1: config 0 has no interface number 0 [ 187.575571][ T5935] usb 1-1: New USB device found, idVendor=0613, idProduct=c150, bcdDevice=ce.6f [ 187.584817][ T5935] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.592899][ T5935] usb 1-1: Product: syz [ 187.597620][ T5935] usb 1-1: Manufacturer: syz [ 187.602345][ T5935] usb 1-1: SerialNumber: syz [ 187.612953][ T5935] usb 1-1: config 0 descriptor?? [ 187.781305][ T5846] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input7 [ 187.985312][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.874'. [ 187.998311][ T5846] usb 4-1: USB disconnect, device number 32 [ 188.173781][ T5935] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 188.326969][ T5935] usb 3-1: config 0 has no interfaces? [ 188.335008][ T5935] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 188.344330][ T5935] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.352356][ T5935] usb 3-1: Product: syz [ 188.356672][ T5935] usb 3-1: Manufacturer: syz [ 188.361272][ T5935] usb 3-1: SerialNumber: syz [ 188.368474][ T5935] usb 3-1: config 0 descriptor?? [ 188.541915][ T8202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.880'. [ 188.586088][ T5935] usb 3-1: USB disconnect, device number 40 [ 188.601748][ T8204] gfs2: not a GFS2 filesystem [ 188.708295][ T5846] usb 2-1: USB disconnect, device number 25 [ 188.839281][ T8211] 9pnet_fd: Insufficient options for proto=fd [ 189.109518][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'. [ 189.173693][ T5935] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 189.195942][ T8227] Mount JFS Failure: -22 [ 189.202953][ T8227] netlink: 'syz.3.891': attribute type 15 has an invalid length. [ 189.212007][ T8227] netlink: 'syz.3.891': attribute type 7 has an invalid length. [ 189.223369][ T8227] netlink: 52 bytes leftover after parsing attributes in process `syz.3.891'. [ 189.240308][ T30] audit: type=1800 audit(1751405349.569:4): pid=8227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.891" name="memory.events" dev="tmpfs" ino=1206 res=0 errno=0 [ 189.342960][ T5935] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 189.353195][ T5935] usb 2-1: New USB device strings: Mfr=13, Product=2, SerialNumber=3 [ 189.361905][ T5935] usb 2-1: Product: syz [ 189.366289][ T5935] usb 2-1: Manufacturer: syz [ 189.371115][ T5935] usb 2-1: SerialNumber: syz [ 189.388467][ T5935] r8152-cfgselector 2-1: Unknown version 0x0000 [ 189.395555][ T5935] r8152-cfgselector 2-1: config 0 descriptor?? [ 189.453825][ T10] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 189.481789][ T8236] 9pnet_fd: Insufficient options for proto=fd [ 189.626171][ T10] usb 3-1: config 0 has no interfaces? [ 189.647802][ T10] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 189.649376][ T8242] hfs: can't find a HFS filesystem on dev rnullb0 [ 189.667863][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.685526][ T5935] r8152-cfgselector 2-1: Unknown version 0x0000 [ 189.692356][ T10] usb 3-1: Product: syz [ 189.700087][ T5935] r8152-cfgselector 2-1: bad CDC descriptors [ 189.706434][ T10] usb 3-1: Manufacturer: syz [ 189.711047][ T10] usb 3-1: SerialNumber: syz [ 189.721201][ T5935] r8152-cfgselector 2-1: USB disconnect, device number 26 [ 189.732097][ T10] usb 3-1: config 0 descriptor?? [ 189.983759][ T5846] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 190.116216][ T5935] usb 1-1: USB disconnect, device number 27 [ 190.147120][ T5846] usb 4-1: config 0 has no interfaces? [ 190.167044][ T5846] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 190.182109][ T5846] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.190400][ T8247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.899'. [ 190.190447][ T5846] usb 4-1: Product: syz [ 190.203919][ T5846] usb 4-1: Manufacturer: syz [ 190.208729][ T5846] usb 4-1: SerialNumber: syz [ 190.218436][ T5846] usb 4-1: config 0 descriptor?? [ 190.320929][ T8249] FAULT_INJECTION: forcing a failure. [ 190.320929][ T8249] name failslab, interval 1, probability 0, space 0, times 0 [ 190.336243][ T8249] CPU: 0 UID: 0 PID: 8249 Comm: syz.0.900 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 190.336267][ T8249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.336278][ T8249] Call Trace: [ 190.336284][ T8249] [ 190.336292][ T8249] dump_stack_lvl+0x189/0x250 [ 190.336315][ T8249] ? __pfx____ratelimit+0x10/0x10 [ 190.336335][ T8249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.336354][ T8249] ? __pfx__printk+0x10/0x10 [ 190.336378][ T8249] ? __pfx___might_resched+0x10/0x10 [ 190.336393][ T8249] ? fs_reclaim_acquire+0x7d/0x100 [ 190.336418][ T8249] should_fail_ex+0x414/0x560 [ 190.336446][ T8249] should_failslab+0xa8/0x100 [ 190.336467][ T8249] __kmalloc_cache_noprof+0x70/0x3d0 [ 190.336485][ T8249] ? nfnetlink_rcv+0xeff/0x2520 [ 190.336508][ T8249] nfnetlink_rcv+0xeff/0x2520 [ 190.336560][ T8249] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 190.336595][ T8249] ? ref_tracker_free+0x63a/0x7d0 [ 190.336643][ T8249] ? __netlink_deliver_tap+0x807/0x850 [ 190.336674][ T8249] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.336695][ T8249] ? netlink_deliver_tap+0x2e/0x1b0 [ 190.336729][ T8249] netlink_unicast+0x758/0x8d0 [ 190.336761][ T8249] netlink_sendmsg+0x805/0xb30 [ 190.336791][ T8249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.336817][ T8249] ? aa_sock_msg_perm+0xf1/0x1d0 [ 190.336838][ T8249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 190.336861][ T8249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 190.336883][ T8249] __sock_sendmsg+0x21c/0x270 [ 190.336906][ T8249] ____sys_sendmsg+0x505/0x830 [ 190.336937][ T8249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 190.336970][ T8249] ? import_iovec+0x74/0xa0 [ 190.336997][ T8249] ___sys_sendmsg+0x21f/0x2a0 [ 190.337025][ T8249] ? __pfx____sys_sendmsg+0x10/0x10 [ 190.337082][ T8249] ? __fget_files+0x2a/0x420 [ 190.337101][ T8249] ? __fget_files+0x3a0/0x420 [ 190.337120][ T8249] __x64_sys_sendmsg+0x19b/0x260 [ 190.337134][ T8249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 190.337153][ T8249] ? __pfx_ksys_write+0x10/0x10 [ 190.337163][ T8249] ? rcu_is_watching+0x15/0xb0 [ 190.337176][ T8249] ? do_syscall_64+0xbe/0x3b0 [ 190.337190][ T8249] do_syscall_64+0xfa/0x3b0 [ 190.337201][ T8249] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.337212][ T8249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.337222][ T8249] ? clear_bhb_loop+0x60/0xb0 [ 190.337233][ T8249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.337243][ T8249] RIP: 0033:0x7f43edf8e929 [ 190.337253][ T8249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.337261][ T8249] RSP: 002b:00007f43eed76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 190.337272][ T8249] RAX: ffffffffffffffda RBX: 00007f43ee1b5fa0 RCX: 00007f43edf8e929 [ 190.337279][ T8249] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 190.337285][ T8249] RBP: 00007f43eed76090 R08: 0000000000000000 R09: 0000000000000000 [ 190.337291][ T8249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.337297][ T8249] R13: 0000000000000000 R14: 00007f43ee1b5fa0 R15: 00007ffdee1d91b8 [ 190.337312][ T8249] [ 190.338272][ T8251] 9pnet_fd: Insufficient options for proto=fd [ 190.443721][ T5846] usb 4-1: USB disconnect, device number 33 [ 190.618409][ T8256] 9pnet_fd: Insufficient options for proto=fd [ 190.870385][ T8263] loop1: detected capacity change from 0 to 7 [ 190.883509][ T8263] Dev loop1: unable to read RDB block 7 [ 190.895266][ T8263] loop1: AHDI p4 [ 190.899047][ T8263] loop1: partition table partially beyond EOD, truncated [ 190.951034][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 190.987273][ T5203] Dev loop1: unable to read RDB block 7 [ 190.992927][ T5203] loop1: AHDI p4 [ 190.998047][ T5203] loop1: partition table partially beyond EOD, truncated [ 191.116584][ T8273] 9pnet_fd: Insufficient options for proto=fd [ 191.169909][ T5203] Dev loop1: unable to read RDB block 7 [ 191.177496][ T5203] loop1: AHDI p4 [ 191.181330][ T5203] loop1: partition table partially beyond EOD, truncated [ 191.199904][ T8277] 9pnet_fd: Insufficient options for proto=fd [ 191.223681][ T5846] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 191.403669][ T5846] usb 1-1: Using ep0 maxpacket: 32 [ 191.410175][ T5846] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 191.418332][ T5846] usb 1-1: config 0 has no interface number 0 [ 191.424639][ T5846] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.435682][ T5846] usb 1-1: config 0 interface 85 has no altsetting 0 [ 191.444898][ T5846] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 191.454042][ T5846] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.462016][ T5846] usb 1-1: Product: syz [ 191.466286][ T5846] usb 1-1: Manufacturer: syz [ 191.470885][ T5846] usb 1-1: SerialNumber: syz [ 191.477695][ T5846] usb 1-1: config 0 descriptor?? [ 191.810318][ T5203] Dev loop1: unable to read RDB block 7 [ 191.817466][ T5203] loop1: AHDI p4 [ 191.821209][ T5203] loop1: partition table partially beyond EOD, truncated [ 191.931398][ T8282] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 191.939580][ T10] IPVS: starting estimator thread 0... [ 191.972686][ T5203] Dev loop1: unable to read RDB block 7 [ 191.983698][ T5203] loop1: AHDI p4 [ 191.987399][ T5203] loop1: partition table partially beyond EOD, truncated [ 192.044821][ T8284] IPVS: using max 27 ests per chain, 64800 per kthread [ 192.094850][ T5846] appletouch 1-1:0.85: Geyser mode initialized. [ 192.108116][ T5846] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input8 [ 192.122827][ T8288] netlink: 4 bytes leftover after parsing attributes in process `syz.3.917'. [ 192.205247][ T5846] usb 3-1: USB disconnect, device number 41 [ 192.513417][ T5203] Dev loop1: unable to read RDB block 7 [ 192.520993][ T5203] loop1: AHDI p4 [ 192.525514][ T5203] loop1: partition table partially beyond EOD, truncated [ 192.584826][ T10] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 192.643680][ T5846] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 192.753809][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 192.760889][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 192.772561][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 192.782430][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 192.795604][ T10] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 192.805045][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.815784][ T10] usb 4-1: config 0 descriptor?? [ 192.816241][ T5846] usb 3-1: config 0 has no interfaces? [ 192.836783][ T5846] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 192.847085][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.856344][ T5846] usb 3-1: Product: syz [ 192.860902][ T5846] usb 3-1: Manufacturer: syz [ 192.865789][ T5846] usb 3-1: SerialNumber: syz [ 192.874679][ T5846] usb 3-1: config 0 descriptor?? [ 193.171188][ T5203] Dev loop1: unable to read RDB block 7 [ 193.177017][ T5203] loop1: AHDI p4 [ 193.180887][ T5203] loop1: partition table partially beyond EOD, truncated [ 193.226971][ T8301] 9pnet_fd: Insufficient options for proto=fd [ 193.254742][ T10] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 193.266487][ T10] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 193.275942][ T10] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 193.283192][ T10] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 193.290895][ T10] shield 0003:0955:7214.000B: unknown main item tag 0x0 [ 193.307990][ T8303] 9pnet_fd: Insufficient options for proto=fd [ 193.311499][ T10] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 193.349732][ T5203] Dev loop1: unable to read RDB block 7 [ 193.367884][ T5203] loop1: AHDI p4 [ 193.368559][ T10] shield 0003:0955:7214.000B: Registered Thunderstrike controller [ 193.376741][ T5203] loop1: partition table partially beyond EOD, truncated [ 193.386903][ T10] shield 0003:0955:7214.000B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 193.414999][ T5844] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 193.443192][ T8294] random: crng reseeded on system resumption [ 193.454197][ T5844] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 193.520533][ T5904] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 193.524623][ T5844] usb 4-1: USB disconnect, device number 34 [ 193.538489][ T5904] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 193.557022][ T5904] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 193.569397][ T5904] shield 0003:0955:7214.000B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 193.843884][ T5203] Dev loop1: unable to read RDB block 7 [ 193.850509][ T5203] loop1: AHDI p4 [ 193.857931][ T5203] loop1: partition table partially beyond EOD, truncated [ 193.906904][ T5844] usb 1-1: USB disconnect, device number 28 [ 193.968183][ T5844] appletouch 1-1:0.85: input: appletouch disconnected [ 194.081181][ T5847] Bluetooth: unknown link type 13 [ 194.094541][ T5847] Bluetooth: hci1: connection err: -111 [ 194.199435][ T8318] netlink: 4 bytes leftover after parsing attributes in process `syz.3.927'. [ 194.238935][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.246369][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.443894][ T5904] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 194.599633][ T5904] usb 2-1: config 0 has no interfaces? [ 194.607760][ T5904] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 194.617807][ T5904] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.626224][ T5904] usb 2-1: Product: syz [ 194.630796][ T5904] usb 2-1: Manufacturer: syz [ 194.635629][ T5904] usb 2-1: SerialNumber: syz [ 194.642790][ T5904] usb 2-1: config 0 descriptor?? [ 194.819288][ T5847] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1 [ 194.893276][ T8327] 9pnet_fd: Insufficient options for proto=fd [ 194.957408][ T8329] 9pnet_fd: Insufficient options for proto=fd [ 195.035959][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 195.059913][ T10] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 195.073682][ T5904] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 195.233713][ T5904] usb 4-1: Using ep0 maxpacket: 16 [ 195.247671][ T5904] usb 4-1: config 5 has an invalid interface number: 37 but max is 1 [ 195.258207][ T5904] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 195.272718][ T5904] usb 4-1: config 5 contains an unexpected descriptor of type 0x1, skipping [ 195.292438][ T5846] usb 3-1: USB disconnect, device number 42 [ 195.300466][ T5904] usb 4-1: config 5 has an invalid interface number: 207 but max is 1 [ 195.327932][ T5904] usb 4-1: config 5 has an invalid interface number: 101 but max is 1 [ 195.366185][ T5904] usb 4-1: config 5 has 3 interfaces, different from the descriptor's value: 2 [ 195.375042][ T8334] loop3: detected capacity change from 0 to 1 [ 195.393251][ T5904] usb 4-1: config 5 has no interface number 0 [ 195.401811][ T8334] Dev loop3: unable to read RDB block 1 [ 195.405883][ T5904] usb 4-1: config 5 has no interface number 1 [ 195.415401][ T8334] loop3: AHDI p1 p2 [ 195.415490][ T5904] usb 4-1: config 5 has no interface number 2 [ 195.421630][ T8334] loop3: partition table partially beyond EOD, [ 195.428548][ T5904] usb 4-1: config 5 interface 207 altsetting 1 endpoint 0xF has an invalid bInterval 54, changing to 9 [ 195.435308][ T8334] truncated [ 195.458167][ T5904] usb 4-1: config 5 interface 207 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 195.460980][ T8336] input: syz0 as /devices/virtual/input/input10 [ 195.499500][ T5904] usb 4-1: config 5 interface 207 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 8 [ 195.564334][ T5904] usb 4-1: too many endpoints for config 5 interface 101 altsetting 48: 46, using maximum allowed: 30 [ 195.628530][ T5904] usb 4-1: config 5 interface 101 altsetting 48 has an endpoint descriptor with address 0x3E, changing to 0xE [ 195.665734][ T5904] usb 4-1: config 5 interface 101 altsetting 48 endpoint 0xE has invalid maxpacket 16980, setting to 64 [ 195.703908][ T5904] usb 4-1: config 5 interface 101 altsetting 48 has a duplicate endpoint with address 0x3, skipping [ 195.739570][ T5904] usb 4-1: config 5 interface 101 altsetting 48 has a duplicate endpoint with address 0xB, skipping [ 195.788617][ T5904] usb 4-1: config 5 interface 101 altsetting 48 has a duplicate endpoint with address 0x3, skipping [ 195.824003][ T5904] usb 4-1: config 5 interface 101 altsetting 48 has 7 endpoint descriptors, different from the interface descriptor's value: 46 [ 195.853626][ T5904] usb 4-1: config 5 interface 37 has no altsetting 0 [ 195.892224][ T5904] usb 4-1: config 5 interface 207 has no altsetting 0 [ 195.912627][ T5904] usb 4-1: config 5 interface 101 has no altsetting 0 [ 195.953425][ T5904] usb 4-1: New USB device found, idVendor=0e7e, idProduct=1001, bcdDevice= 1.01 [ 195.982426][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.013034][ T5904] usb 4-1: Product: ѕ [ 196.019629][ T5904] usb 4-1: Manufacturer: Ⰺ [ 196.028864][ T5904] usb 4-1: SerialNumber: ဟ [ 196.057603][ T8348] netlink: 88 bytes leftover after parsing attributes in process `syz.2.937'. [ 196.237686][ T8355] fuse: Bad value for 'fd' [ 196.356142][ T30] audit: type=1326 audit(1751405356.689:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8358 comm="syz.0.939" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f43edf8e929 code=0x0 [ 196.459545][ T5904] cdc_subset 4-1:5.37: probe with driver cdc_subset failed with error -22 [ 196.495879][ T5904] cdc_subset 4-1:5.207: probe with driver cdc_subset failed with error -22 [ 196.520135][ T5904] cdc_subset 4-1:5.101: probe with driver cdc_subset failed with error -22 [ 196.555172][ T5904] usb 4-1: USB disconnect, device number 35 [ 196.940914][ T8377] 9pnet_fd: Insufficient options for proto=fd [ 197.022630][ T8380] 9pnet_fd: Insufficient options for proto=fd [ 197.189235][ T5904] usb 2-1: USB disconnect, device number 27 [ 197.358901][ T5889] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 197.383850][ T24] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 197.438818][ T5889] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 197.493873][ T5849] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 197.517855][ T8397] FAULT_INJECTION: forcing a failure. [ 197.517855][ T8397] name failslab, interval 1, probability 0, space 0, times 0 [ 197.530993][ T8397] CPU: 0 UID: 0 PID: 8397 Comm: syz.0.946 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 197.531016][ T8397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 197.531025][ T8397] Call Trace: [ 197.531032][ T8397] [ 197.531039][ T8397] dump_stack_lvl+0x189/0x250 [ 197.531064][ T8397] ? __pfx____ratelimit+0x10/0x10 [ 197.531083][ T8397] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.531098][ T8397] ? __pfx__printk+0x10/0x10 [ 197.531120][ T8397] ? __lock_acquire+0xab9/0xd20 [ 197.531152][ T8397] should_fail_ex+0x414/0x560 [ 197.531180][ T8397] should_failslab+0xa8/0x100 [ 197.531202][ T8397] kmem_cache_alloc_noprof+0x73/0x3c0 [ 197.531222][ T8397] ? skb_clone+0x212/0x3a0 [ 197.531238][ T8397] ? __pfx_skb_network_protocol+0x10/0x10 [ 197.531260][ T8397] skb_clone+0x212/0x3a0 [ 197.531275][ T8397] ? dev_queue_xmit_nit+0x25a/0xcc0 [ 197.531302][ T8397] dev_queue_xmit_nit+0x416/0xcc0 [ 197.531325][ T8397] ? dev_queue_xmit_nit+0x2d/0xcc0 [ 197.531358][ T8397] dev_hard_start_xmit+0x1be/0x830 [ 197.531392][ T8397] __dev_queue_xmit+0x1adf/0x3a70 [ 197.531415][ T8397] ? kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 197.531436][ T8397] ? __dev_queue_xmit+0x27e/0x3a70 [ 197.531453][ T8397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.531484][ T8397] ? __pfx___dev_queue_xmit+0x10/0x10 [ 197.531517][ T8397] ? __copy_skb_header+0xa7/0x550 [ 197.531534][ T8397] ? __asan_memcpy+0x40/0x70 [ 197.531558][ T8397] ? __skb_clone+0x63/0x7a0 [ 197.531577][ T8397] ? __skb_clone+0x483/0x7a0 [ 197.531599][ T8397] ? skb_clone+0x246/0x3a0 [ 197.531619][ T8397] __netlink_deliver_tap+0x5ad/0x850 [ 197.531653][ T8397] ? netlink_deliver_tap+0x2e/0x1b0 [ 197.531674][ T8397] netlink_deliver_tap+0x19c/0x1b0 [ 197.531693][ T8397] netlink_unicast+0x72f/0x8d0 [ 197.531721][ T8397] netlink_sendmsg+0x805/0xb30 [ 197.531748][ T8397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.531768][ T8397] ? aa_sock_msg_perm+0xf1/0x1d0 [ 197.531790][ T8397] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 197.531813][ T8397] ? __pfx_netlink_sendmsg+0x10/0x10 [ 197.531835][ T8397] __sock_sendmsg+0x21c/0x270 [ 197.531859][ T8397] ____sys_sendmsg+0x505/0x830 [ 197.531890][ T8397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 197.531923][ T8397] ? import_iovec+0x74/0xa0 [ 197.531962][ T8397] ___sys_sendmsg+0x21f/0x2a0 [ 197.531988][ T8397] ? __pfx____sys_sendmsg+0x10/0x10 [ 197.532049][ T8397] ? __fget_files+0x2a/0x420 [ 197.532075][ T8397] ? __fget_files+0x3a0/0x420 [ 197.532112][ T8397] __x64_sys_sendmsg+0x19b/0x260 [ 197.532138][ T8397] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 197.532172][ T8397] ? __pfx_ksys_write+0x10/0x10 [ 197.532189][ T8397] ? rcu_is_watching+0x15/0xb0 [ 197.532211][ T8397] ? do_syscall_64+0xbe/0x3b0 [ 197.532237][ T8397] do_syscall_64+0xfa/0x3b0 [ 197.532255][ T8397] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.532275][ T8397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.532292][ T8397] ? clear_bhb_loop+0x60/0xb0 [ 197.532313][ T8397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.532330][ T8397] RIP: 0033:0x7f43edf8e929 [ 197.532347][ T8397] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.532361][ T8397] RSP: 002b:00007f43eed76038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 197.532381][ T8397] RAX: ffffffffffffffda RBX: 00007f43ee1b5fa0 RCX: 00007f43edf8e929 [ 197.532392][ T8397] RDX: 0000000000000800 RSI: 00002000000000c0 RDI: 000000000000000f [ 197.532403][ T8397] RBP: 00007f43eed76090 R08: 0000000000000000 R09: 0000000000000000 [ 197.532414][ T8397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.532424][ T8397] R13: 0000000000000000 R14: 00007f43ee1b5fa0 R15: 00007ffdee1d91b8 [ 197.532454][ T8397] [ 197.597602][ T24] usb 4-1: device descriptor read/64, error -71 [ 197.795754][ T5849] usb 3-1: config 0 has no interfaces? [ 197.855631][ T5847] Bluetooth: hci0: command 0x0c1a tx timeout [ 197.982683][ T5846] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 197.989342][ T5846] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 198.053971][ T5849] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 198.063137][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.107349][ T5849] usb 3-1: Product: syz [ 198.121818][ T5849] usb 3-1: Manufacturer: syz [ 198.139493][ T5849] usb 3-1: SerialNumber: syz [ 198.171177][ T5849] usb 3-1: config 0 descriptor?? [ 198.245093][ T24] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 198.396467][ T24] usb 4-1: device descriptor read/64, error -71 [ 198.445616][ T5849] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 198.524112][ T24] usb usb4-port1: attempt power cycle [ 198.612178][ T5849] usb 1-1: Using ep0 maxpacket: 32 [ 198.622720][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.639739][ T5849] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 198.652197][ T5849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.668338][ T5849] usb 1-1: config 0 descriptor?? [ 198.688068][ T5849] hub 1-1:0.0: USB hub found [ 198.821340][ T8425] 9pnet_fd: Insufficient options for proto=fd [ 198.873888][ T24] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 198.894192][ T5849] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 198.902411][ T5849] ------------[ cut here ]------------ [ 198.909177][ T5849] WARNING: kernel/workqueue.c:4208 at __flush_work+0xabc/0xbc0, CPU#0: kworker/0:3/5849 [ 198.919936][ T5849] Modules linked in: [ 198.925098][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: kworker/0:3 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 198.937835][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 198.940391][ T24] usb 4-1: device descriptor read/8, error -71 [ 198.949446][ T5849] Workqueue: usb_hub_wq hub_event [ 198.960617][ T5849] RIP: 0010:__flush_work+0xabc/0xbc0 [ 198.966909][ T5849] Code: 01 00 00 75 53 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 3d 35 00 90 0f 0b 90 eb a5 e8 55 3d 35 00 90 <0f> 0b 90 31 c0 48 8b 5c 24 18 eb 95 e8 43 3d 35 00 e9 92 fc ff ff [ 198.987941][ T5849] RSP: 0018:ffffc90004186940 EFLAGS: 00010287 [ 198.996145][ T5849] RAX: ffffffff818ade3b RBX: 1ffff110041dae54 RCX: 0000000000100000 [ 199.005561][ T5849] RDX: ffffc9001619e000 RSI: 000000000001ba2a RDI: 000000000001ba2b [ 199.008795][ T8428] 9pnet_fd: Insufficient options for proto=fd [ 199.014853][ T5849] RBP: ffffc90004186b10 R08: ffffffff8fc29737 R09: 1ffffffff1f852e6 [ 199.028696][ T5849] R10: dffffc0000000000 R11: fffffbfff1f852e7 R12: 0000000000000000 [ 199.037602][ T5849] R13: ffff888020ed72a0 R14: dffffc0000000000 R15: ffff888020ed7288 [ 199.046355][ T5849] FS: 0000000000000000(0000) GS:ffff8881259e4000(0000) knlGS:0000000000000000 [ 199.056268][ T5849] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 199.062883][ T5849] CR2: 000000110c320555 CR3: 0000000076396000 CR4: 00000000003526f0 [ 199.071607][ T5849] Call Trace: [ 199.076366][ T5849] [ 199.079338][ T5849] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.086913][ T5849] ? __pfx___flush_work+0x10/0x10 [ 199.092032][ T5849] ? __timer_delete_sync+0x218/0x2d0 [ 199.097978][ T5849] ? __pfx___might_resched+0x10/0x10 [ 199.103295][ T5849] ? __pfx___timer_delete_sync+0x10/0x10 [ 199.109389][ T5849] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 199.116116][ T5849] ? flush_delayed_work+0x11d/0x190 [ 199.121359][ T5849] flush_delayed_work+0x13e/0x190 [ 199.126841][ T5849] ? __pfx_flush_delayed_work+0x10/0x10 [ 199.132405][ T5849] ? _dev_err+0x10a/0x160 [ 199.136814][ T5849] hub_quiesce+0x1f0/0x330 [ 199.141339][ T5849] hub_disconnect+0xc8/0x470 [ 199.146065][ T5849] hub_probe+0x132f/0x36e0 [ 199.150520][ T5849] ? __pfx_hub_probe+0x10/0x10 [ 199.155432][ T5849] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 199.161342][ T5849] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.167877][ T5849] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 199.173441][ T5849] ? pm_runtime_enable+0x1f3/0x340 [ 199.179282][ T5849] usb_probe_interface+0x634/0xbf0 [ 199.184955][ T5849] ? __pfx_usb_probe_interface+0x10/0x10 [ 199.190612][ T5849] really_probe+0x26d/0x9a0 [ 199.195413][ T5849] __driver_probe_device+0x18c/0x2f0 [ 199.201169][ T5849] driver_probe_device+0x4f/0x430 [ 199.206772][ T5849] __device_attach_driver+0x2ce/0x530 [ 199.212192][ T5849] bus_for_each_drv+0x24e/0x2e0 [ 199.217154][ T5849] ? __pfx___device_attach_driver+0x10/0x10 [ 199.223083][ T5849] ? __pfx_bus_for_each_drv+0x10/0x10 [ 199.228562][ T5849] __device_attach+0x2b8/0x400 [ 199.233352][ T5849] ? __pfx___device_attach+0x10/0x10 [ 199.238724][ T5849] ? do_raw_spin_unlock+0x122/0x240 [ 199.244187][ T5849] bus_probe_device+0x185/0x260 [ 199.249168][ T5849] device_add+0x7b6/0xb50 [ 199.253679][ T5849] usb_set_configuration+0x1a87/0x20e0 [ 199.259298][ T5849] usb_generic_driver_probe+0x8d/0x150 [ 199.264861][ T5849] usb_probe_device+0x1c4/0x390 [ 199.269739][ T5849] ? __pfx_usb_probe_device+0x10/0x10 [ 199.275315][ T5849] really_probe+0x26d/0x9a0 [ 199.276015][ T24] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 199.280558][ T5849] __driver_probe_device+0x18c/0x2f0 [ 199.280592][ T5849] driver_probe_device+0x4f/0x430 [ 199.280619][ T5849] __device_attach_driver+0x2ce/0x530 [ 199.280647][ T5849] bus_for_each_drv+0x24e/0x2e0 [ 199.280674][ T5849] ? __pfx___device_attach_driver+0x10/0x10 [ 199.280697][ T5849] ? __pfx_bus_for_each_drv+0x10/0x10 [ 199.280735][ T5849] __device_attach+0x2b8/0x400 [ 199.280758][ T5849] ? __pfx___device_attach+0x10/0x10 [ 199.280785][ T5849] ? do_raw_spin_unlock+0x122/0x240 [ 199.280814][ T5849] bus_probe_device+0x185/0x260 [ 199.280843][ T5849] device_add+0x7b6/0xb50 [ 199.280876][ T5849] usb_new_device+0xa39/0x16f0 [ 199.280919][ T5849] ? __pfx_usb_new_device+0x10/0x10 [ 199.280948][ T5849] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.335498][ T24] usb 4-1: device descriptor read/8, error -71 [ 199.336914][ T5849] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.380076][ T5849] hub_event+0x2941/0x4a00 [ 199.385309][ T5849] ? __pfx_hub_event+0x10/0x10 [ 199.390188][ T5849] ? process_scheduled_works+0x9ef/0x17b0 [ 199.396542][ T5849] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.401866][ T5849] ? process_scheduled_works+0x9ef/0x17b0 [ 199.407673][ T5849] ? process_scheduled_works+0x9ef/0x17b0 [ 199.413520][ T5849] process_scheduled_works+0xae1/0x17b0 [ 199.419221][ T5849] ? __pfx_process_scheduled_works+0x10/0x10 [ 199.425289][ T5849] worker_thread+0x8a0/0xda0 [ 199.430178][ T5849] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.436985][ T5849] ? __kthread_parkme+0x7b/0x200 [ 199.441951][ T5849] kthread+0x70e/0x8a0 [ 199.446118][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 199.451248][ T5849] ? __pfx_kthread+0x10/0x10 [ 199.454999][ T24] usb usb4-port1: unable to enumerate USB device [ 199.456273][ T5849] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.467867][ T5849] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.473098][ T5849] ? __pfx_kthread+0x10/0x10 [ 199.477895][ T5849] ret_from_fork+0x3fc/0x770 [ 199.482519][ T5849] ? __pfx_ret_from_fork+0x10/0x10 [ 199.489027][ T5849] ? __switch_to_asm+0x39/0x70 [ 199.494202][ T5849] ? __switch_to_asm+0x33/0x70 [ 199.499086][ T5849] ? __pfx_kthread+0x10/0x10 [ 199.504055][ T5849] ret_from_fork_asm+0x1a/0x30 [ 199.508871][ T5849] [ 199.511916][ T5849] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 199.519294][ T5849] CPU: 0 UID: 0 PID: 5849 Comm: kworker/0:3 Not tainted 6.16.0-rc4-next-20250630-syzkaller #0 PREEMPT(full) [ 199.531108][ T5849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 199.541441][ T5849] Workqueue: usb_hub_wq hub_event [ 199.547098][ T5849] Call Trace: [ 199.550520][ T5849] [ 199.553486][ T5849] dump_stack_lvl+0x99/0x250 [ 199.558199][ T5849] ? __asan_memcpy+0x40/0x70 [ 199.563191][ T5849] ? __pfx_dump_stack_lvl+0x10/0x10 [ 199.568512][ T5849] ? __pfx__printk+0x10/0x10 [ 199.573133][ T5849] panic+0x2db/0x790 [ 199.577091][ T5849] ? __pfx_panic+0x10/0x10 [ 199.581644][ T5849] ? ret_from_fork_asm+0x1a/0x30 [ 199.586599][ T5849] __warn+0x334/0x4c0 [ 199.590692][ T5849] ? __flush_work+0xabc/0xbc0 [ 199.595482][ T5849] ? __flush_work+0xabc/0xbc0 [ 199.600178][ T5849] report_bug+0x2be/0x4f0 [ 199.604517][ T5849] ? __flush_work+0xabc/0xbc0 [ 199.609201][ T5849] ? __flush_work+0xabc/0xbc0 [ 199.613968][ T5849] ? __flush_work+0xabe/0xbc0 [ 199.618828][ T5849] handle_bug+0x84/0x160 [ 199.623136][ T5849] exc_invalid_op+0x1a/0x50 [ 199.628117][ T5849] asm_exc_invalid_op+0x1a/0x20 [ 199.633515][ T5849] RIP: 0010:__flush_work+0xabc/0xbc0 [ 199.639858][ T5849] Code: 01 00 00 75 53 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 60 3d 35 00 90 0f 0b 90 eb a5 e8 55 3d 35 00 90 <0f> 0b 90 31 c0 48 8b 5c 24 18 eb 95 e8 43 3d 35 00 e9 92 fc ff ff [ 199.659733][ T5849] RSP: 0018:ffffc90004186940 EFLAGS: 00010287 [ 199.665833][ T5849] RAX: ffffffff818ade3b RBX: 1ffff110041dae54 RCX: 0000000000100000 [ 199.673971][ T5849] RDX: ffffc9001619e000 RSI: 000000000001ba2a RDI: 000000000001ba2b [ 199.682207][ T5849] RBP: ffffc90004186b10 R08: ffffffff8fc29737 R09: 1ffffffff1f852e6 [ 199.690364][ T5849] R10: dffffc0000000000 R11: fffffbfff1f852e7 R12: 0000000000000000 [ 199.698336][ T5849] R13: ffff888020ed72a0 R14: dffffc0000000000 R15: ffff888020ed7288 [ 199.706308][ T5849] ? __flush_work+0xabb/0xbc0 [ 199.710995][ T5849] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.717320][ T5849] ? __pfx___flush_work+0x10/0x10 [ 199.722347][ T5849] ? __timer_delete_sync+0x218/0x2d0 [ 199.727632][ T5849] ? __pfx___might_resched+0x10/0x10 [ 199.732993][ T5849] ? __pfx___timer_delete_sync+0x10/0x10 [ 199.738614][ T5849] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 199.744241][ T5849] ? flush_delayed_work+0x11d/0x190 [ 199.749520][ T5849] flush_delayed_work+0x13e/0x190 [ 199.754996][ T5849] ? __pfx_flush_delayed_work+0x10/0x10 [ 199.761184][ T5849] ? _dev_err+0x10a/0x160 [ 199.765607][ T5849] hub_quiesce+0x1f0/0x330 [ 199.770116][ T5849] hub_disconnect+0xc8/0x470 [ 199.774701][ T5849] hub_probe+0x132f/0x36e0 [ 199.779168][ T5849] ? __pfx_hub_probe+0x10/0x10 [ 199.784009][ T5849] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 199.790170][ T5849] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 199.796621][ T5849] ? ktime_get_mono_fast_ns+0x2af/0x2d0 [ 199.802261][ T5849] ? pm_runtime_enable+0x1f3/0x340 [ 199.807814][ T5849] usb_probe_interface+0x634/0xbf0 [ 199.812928][ T5849] ? __pfx_usb_probe_interface+0x10/0x10 [ 199.818816][ T5849] really_probe+0x26d/0x9a0 [ 199.823588][ T5849] __driver_probe_device+0x18c/0x2f0 [ 199.829051][ T5849] driver_probe_device+0x4f/0x430 [ 199.834591][ T5849] __device_attach_driver+0x2ce/0x530 [ 199.840049][ T5849] bus_for_each_drv+0x24e/0x2e0 [ 199.845255][ T5849] ? __pfx___device_attach_driver+0x10/0x10 [ 199.851324][ T5849] ? __pfx_bus_for_each_drv+0x10/0x10 [ 199.857231][ T5849] __device_attach+0x2b8/0x400 [ 199.862014][ T5849] ? __pfx___device_attach+0x10/0x10 [ 199.867345][ T5849] ? do_raw_spin_unlock+0x122/0x240 [ 199.872660][ T5849] bus_probe_device+0x185/0x260 [ 199.877597][ T5849] device_add+0x7b6/0xb50 [ 199.881967][ T5849] usb_set_configuration+0x1a87/0x20e0 [ 199.887808][ T5849] usb_generic_driver_probe+0x8d/0x150 [ 199.893379][ T5849] usb_probe_device+0x1c4/0x390 [ 199.898331][ T5849] ? __pfx_usb_probe_device+0x10/0x10 [ 199.903797][ T5849] really_probe+0x26d/0x9a0 [ 199.908745][ T5849] __driver_probe_device+0x18c/0x2f0 [ 199.914052][ T5849] driver_probe_device+0x4f/0x430 [ 199.919275][ T5849] __device_attach_driver+0x2ce/0x530 [ 199.924864][ T5849] bus_for_each_drv+0x24e/0x2e0 [ 199.929741][ T5849] ? __pfx___device_attach_driver+0x10/0x10 [ 199.936008][ T5849] ? __pfx_bus_for_each_drv+0x10/0x10 [ 199.941496][ T5849] __device_attach+0x2b8/0x400 [ 199.946270][ T5849] ? __pfx___device_attach+0x10/0x10 [ 199.951919][ T5849] ? do_raw_spin_unlock+0x122/0x240 [ 199.957215][ T5849] bus_probe_device+0x185/0x260 [ 199.962090][ T5849] device_add+0x7b6/0xb50 [ 199.966412][ T5849] usb_new_device+0xa39/0x16f0 [ 199.971190][ T5849] ? __pfx_usb_new_device+0x10/0x10 [ 199.976390][ T5849] ? _raw_spin_unlock_irq+0x23/0x50 [ 199.981578][ T5849] ? lockdep_hardirqs_on+0x9c/0x150 [ 199.987151][ T5849] hub_event+0x2941/0x4a00 [ 199.991776][ T5849] ? __pfx_hub_event+0x10/0x10 [ 199.996557][ T5849] ? process_scheduled_works+0x9ef/0x17b0 [ 200.002378][ T5849] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.007592][ T5849] ? process_scheduled_works+0x9ef/0x17b0 [ 200.013404][ T5849] ? process_scheduled_works+0x9ef/0x17b0 [ 200.019144][ T5849] process_scheduled_works+0xae1/0x17b0 [ 200.024832][ T5849] ? __pfx_process_scheduled_works+0x10/0x10 [ 200.030863][ T5849] worker_thread+0x8a0/0xda0 [ 200.035504][ T5849] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 200.041862][ T5849] ? __kthread_parkme+0x7b/0x200 [ 200.046828][ T5849] kthread+0x70e/0x8a0 [ 200.050912][ T5849] ? __pfx_worker_thread+0x10/0x10 [ 200.056053][ T5849] ? __pfx_kthread+0x10/0x10 [ 200.060656][ T5849] ? _raw_spin_unlock_irq+0x23/0x50 [ 200.065895][ T5849] ? lockdep_hardirqs_on+0x9c/0x150 [ 200.071195][ T5849] ? __pfx_kthread+0x10/0x10 [ 200.075980][ T5849] ret_from_fork+0x3fc/0x770 [ 200.080965][ T5849] ? __pfx_ret_from_fork+0x10/0x10 [ 200.086090][ T5849] ? __switch_to_asm+0x39/0x70 [ 200.090850][ T5849] ? __switch_to_asm+0x33/0x70 [ 200.095873][ T5849] ? __pfx_kthread+0x10/0x10 [ 200.100506][ T5849] ret_from_fork_asm+0x1a/0x30 [ 200.105301][ T5849] [ 200.108631][ T5849] Kernel Offset: disabled [ 200.113028][ T5849] Rebooting in 86400 seconds..