last executing test programs: 4m39.894255569s ago: executing program 1 (id=155): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') lseek(r0, 0xfff, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x9730514a12869b60, 0x0) ioctl$COMEDI_INSNLIST(r1, 0x8010640b, &(0x7f000003cac0)={0x6666666666666cf, &(0x7f0000158700)=[{0x4000000, 0x0, 0x0, 0x8, 0x5}]}) getdents64(r0, 0x0, 0x0) 4m39.732424662s ago: executing program 1 (id=156): r0 = socket$packet(0x11, 0x3, 0x300) r1 = syz_open_procfs(0x0, &(0x7f0000002440)='setgroups\x00') write$USERIO_CMD_SEND_INTERRUPT(r1, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000380)="0b031200e2ff02000200", 0xa, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x9, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, 0x14) syz_usb_connect(0x5, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120110010928fc10ac059102254301020301090212000100004000090484000003e102"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x8000) 4m38.924934099s ago: executing program 1 (id=166): r0 = inotify_init1(0x0) r1 = inotify_add_watch(r0, &(0x7f0000000180)='.\x00', 0x20000040) r2 = dup(r0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000740)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20,serpent)\x00'}, 0x4e) inotify_rm_watch(r2, r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m38.821909146s ago: executing program 1 (id=167): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x24044852) 4m38.695565507s ago: executing program 1 (id=170): r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) syz_genetlink_get_family_id$team(&(0x7f00000000c0), r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 4m38.359441808s ago: executing program 1 (id=172): inotify_init1(0x0) r0 = syz_open_procfs(0x0, 0x0) read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) 4m23.242883356s ago: executing program 32 (id=172): inotify_init1(0x0) r0 = syz_open_procfs(0x0, 0x0) read$qrtrtun(r0, &(0x7f00000004c0)=""/57, 0x39) 8.43320273s ago: executing program 3 (id=1821): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000900)=ANY=[], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x24, 0x47, {0x47, 0x24, "0164653bae36b8dfd97878eab81479ae8262f2feab4401de968933a7ff176b78f6d10bda92ba0f70f72b3ac919a70e0f8f125ba34a4baa12be39b415063b2afe0fc37381c9"}}, &(0x7f0000000140)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "82fbcba9e6bd5f50d4bff5887cd013f2385ec40ac4f65f9abf4034d635818e8bd6a616b25eba1443f433880c23c6d38b8aa06c31efab2b7f41ce7297423a61721bf6568f6823de1cf355af788fa1b417772527e51dea8f46e51d9537c852b089de3cad1be39d061252cb5c1eff745dce5e28ef14dc8cf920b72ea71066e72facf91617fab5e2164a6cc80869051e3ff83e638aa82c679cc38c71ddbe1ddb"}}}, &(0x7f0000000380)={0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="4007a900000067795c38391d1ae7a88e5ce2e8077fee4cedccc5e73efdbff52cbdec6df9a786e0d9d518a659328cdc475532d7148e5a8195bf93e143ccfa14773a6c5e440dc1277e6972426492486c5a8e40b4ac5c2f8892f5f48db9e7a0b552ed3e090ab4fb907cb99761faeda3e97584e959cf937d1105b948b2f7149f1f9966e184778fc277b4fe440197fc0e4a609423709517c3ff155fbb9d969ec829d5f624000340248b1ec13f2f119640fd249a08"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0xbc0000}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "588cbc363f32958c6e5443e613e83ff487b91181772569c550beb4346fe503d2e2291ea53d36613d5d4ec69c322da4"}}) syz_usb_control_io(r0, 0x0, 0x0) 7.244192483s ago: executing program 4 (id=1824): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e22, @private=0xa010102}, 0x10, &(0x7f00000015c0)=[{&(0x7f0000000400)='V', 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000440)="7ab0", 0x2}], 0x1}}], 0x3, 0x4000000) (fail_nth: 32) 6.754255222s ago: executing program 4 (id=1826): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @dev}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x9}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0xfffd, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @empty}, 0xab852ebbeefbd6b8, 0x0, 0x0, 0x1d, 0x2, 0x0, 0x0, 0x2, 0x9}) 6.714904557s ago: executing program 4 (id=1828): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x5}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x6c}}, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f00000001c0)='ns/time_for_children\x00', r4) statx(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0x800, 0x1, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r3, &(0x7f00000002c0)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000003) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x61, &(0x7f0000000480)={&(0x7f0000000d40)={0xa4, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_EXPECT_NAT={0x90, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r6 = socket(0x10, 0x803, 0x0) sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r6, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f00000006c0)=""/108, 0x6c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) read$FUSE(r3, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x2080000, &(0x7f0000004140)={'trans=virtio,', {[{@noextend}, {@version_u}, {@access_uid={'access', 0x3d, r5}}, {@ignoreqv}, {@posixacl}, {@privport}], [{@uid_gt={'uid>', r7}}, {@uid_lt={'uid<', r7}}, {@permit_directio}]}}) mount(&(0x7f0000000140)=@filename='./file0\x00', &(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='vfat\x00', 0x80, &(0x7f00000003c0)='[\x00') mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000004c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) 6.576542409s ago: executing program 4 (id=1829): mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000040)='./file0/../file0\x00', 0x81800) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = dup(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)="ba34", 0x2}], 0x1}, 0x4048043) r3 = dup(r1) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x85, 0x8, 0xff}, 0x9c) write$tun(r2, &(0x7f0000000540)={@val={0xa, 0x1}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @val={@void, {0x8100, 0x2, 0x0, 0x3}}, {@ipv6={0x86dd, @dccp_packet={0xf, 0x6, "79b96a", 0x10, 0x21, 0xff, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, {[], {{0x4e24, 0x4e20, 0x4, 0x1, 0x9, 0x0, 0x0, 0x5, 0x7, "789fa3", 0x9a, "945c9c"}}}}}}}}, 0x4e) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x3, 0x9, 0x2}}, 0x28) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xeb}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4850}, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e1f0a00"], 0x22) 5.548698532s ago: executing program 4 (id=1830): r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af83, &(0x7f00000000c0)={0x1, 0x0, [{0x8000, 0x0, 0x0}]}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$PIO_UNIMAP(r1, 0x4b67, &(0x7f00000000c0)={0x0, &(0x7f0000000080)}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r0, 0xc00464c9, &(0x7f0000000040)) clock_gettime(0x0, &(0x7f0000000280)) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwrite64(r2, &(0x7f0000000080)='2', 0x1, 0x10) 5.290985499s ago: executing program 3 (id=1831): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x779583, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x100) ioctl(r2, 0x5393, &(0x7f0000000540)="7c67df723af05b5fc4aab97e00e09111d3e50af3c3a641c49215a1a5fc97ac0a4ba0eeda6fa6fca4d1") ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000040)) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) socket(0x11, 0x3, 0x0) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r5 = socket(0x2, 0x3, 0x6) mount$tmpfs(0x0, 0x0, 0x0, 0x50020, 0x0) r6 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r7 = add_key$user(&(0x7f0000000000), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="c91e61f519069849f41feb552c9fd1c95ae6fed7fd0842fc9453eef63a08f9b8b327d65437e5c8f9bf9ef26e66d0a3f5ae6f5288c06a8b351199b53731fbcbd5f7400fe8ee4471d6925bc998811721ec1f4f", 0x52, r6) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)) r8 = socket(0xa, 0x1, 0x0) ioctl(r8, 0x8936, 0x0) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140), 0x0, 0xfffffffffffffffe) r9 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r10 = add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) keyctl$read(0xb, r10, 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r5, @ANYBLOB='\a'], 0x0) syz_open_procfs(0x0, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r11, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000100)={r9, r7}, &(0x7f0000000880)=""/218, 0xda, &(0x7f0000000840)={&(0x7f0000000680)={'sha3-384-generic\x00'}, &(0x7f0000000780)="56b2370ae1732d19d34ebd4b6a51e3750cf895108a9f1b9c9e442cd57b6b21ecc7fa742a3cab8c9d03485b76c3a07cebcbd053bc17fe5a832949141bb858ae4c5106962535f82391e6cf7780e3269d810c26229a8951d7dd93aa686341e36ea9c841d3f2c5d4e932b020df07bba6b6f08aa9173b64b000d409da110fd9d16541760f247839b9103a0dc91a5289eecb6a8966cbab208ad6746aefcc3a", 0x9c}) 5.186874513s ago: executing program 0 (id=1832): r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ifreq(r1, 0x8927, &(0x7f00000002c0)={'veth0_to_batadv\x00', @ifru_settings={0xb, 0xe3, @fr_pvc_info=0x0}}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000001c0)={0x2}) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x2, 0x2, 0x1}) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000380)={0x8000003, 0x9d, 0x3}) 5.06854961s ago: executing program 0 (id=1833): syz_usb_connect(0x5, 0x2f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xb3, 0xaf, 0x34, 0x20, 0xaf0, 0x8304, 0x966, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d, 0x1, 0x33, 0x18, 0x80, 0x5, "", [{{0x9, 0x4, 0x5d, 0x8, 0x1, 0x34, 0x77, 0xf7, 0x40, [], [{{0x9, 0x5, 0x0, 0x2, 0x400, 0x7a, 0x81, 0x9, [@generic={0x2, 0xb}]}}]}}]}}]}}, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000d00), 0x0, 0x0) mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x5ffffffff000, 0x1, 0x13, r0, 0x81000000) 3.723012553s ago: executing program 0 (id=1838): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}, 0xfff}}, 0x6, 0x2}, 0x90) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000140)={{0xffff1000, 0xeeee8000, 0x4, 0xf6, 0x2, 0xf3, 0xd7, 0x8, 0x7, 0x1, 0x9, 0x5}, {0x50000, 0xc0a0c0f0f5000ded, 0xd, 0x5, 0x3, 0x8, 0x5, 0x0, 0x80, 0xfc, 0xfc, 0x4}, {0x200000, 0x25000, 0xb, 0x6, 0xff, 0x3, 0x0, 0x5, 0xef, 0x27, 0xd5, 0x2}, {0x4000, 0x6000, 0x9, 0x9, 0x8f, 0x4, 0x83, 0xfc, 0xb, 0x1, 0x9, 0x3}, {0xffffffff, 0x0, 0x3, 0x2, 0x6, 0x1, 0x9, 0x2, 0x3, 0x3, 0x0, 0xe4}, {0x200000, 0xffff1000, 0xf, 0x0, 0x6, 0x0, 0xde, 0x9, 0x3, 0x0, 0x4, 0x30}, {0xdddd0000, 0x9000, 0xc, 0x1, 0x8, 0x3, 0x2, 0x6, 0x91, 0x8, 0x9, 0x88}, {0x8000000, 0xeeee0000, 0x10, 0x6, 0xc2, 0x8, 0x6, 0x10, 0x7, 0x3, 0x80, 0x87}, {0x6000, 0x8000}, {0x41000, 0x9}, 0x50000, 0x0, 0x0, 0x400408, 0x6, 0x8000, 0xeeef0000, [0x6, 0x5, 0x5, 0xe]}) add_key$fscrypt_v1(0x0, &(0x7f0000000180)={'fscrypt:', @desc3}, 0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f00000000c0)=@x86={0x60, 0x4, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x1, 0x0, 0x0, 0x8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0x1}) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x9, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x2, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x2, '\x00', 0xa}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x9, 0x89, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0x5, 0xb, '\x00', 0x8}, {0xd7, 0xd, 0x8, '\x00', 0xa}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xfe, 0x3, 0x26}, {0xcf, 0xfa, 0xb, '\x00', 0x5}, {0xf, 0x6, 0x5, '\x00', 0x10}, {0x39, 0x2, 0x6, '\x00', 0x8}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0x7, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x7}, {0x0, 0x80, 0x1, '\x00', 0x81}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x3, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) 3.672828132s ago: executing program 3 (id=1839): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000c80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000900)={0x1c, &(0x7f0000000900)=ANY=[], 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x40, 0x24, 0x47, {0x47, 0x24, "0164653bae36b8dfd97878eab81479ae8262f2feab4401de968933a7ff176b78f6d10bda92ba0f70f72b3ac919a70e0f8f125ba34a4baa12be39b415063b2afe0fc37381c9"}}, &(0x7f0000000140)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "82fbcba9e6bd5f50d4bff5887cd013f2385ec40ac4f65f9abf4034d635818e8bd6a616b25eba1443f433880c23c6d38b8aa06c31efab2b7f41ce7297423a61721bf6568f6823de1cf355af788fa1b417772527e51dea8f46e51d9537c852b089de3cad1be39d061252cb5c1eff745dce5e28ef14dc8cf920b72ea71066e72facf91617fab5e2164a6cc80869051e3ff83e638aa82c679cc38c71ddbe1ddb"}}}, &(0x7f0000000380)={0x34, &(0x7f00000003c0)=ANY=[@ANYBLOB="4007a900000067795c38391d1ae7a88e5ce2e8077fee4cedccc5e73efdbff52cbdec6df9a786e0d9d518a659328cdc475532d7148e5a8195bf93e143ccfa14773a6c5e440dc1277e6972426492486c5a8e40b4ac5c2f8892f5f48db9e7a0b552ed3e090ab4fb907cb99761faeda3e97584e959cf937d1105b948b2f7149f1f9966e184778fc277b4fe440197fc0e4a609423709517c3ff155fbb9d969ec829d5f624000340248b1ec13f2f119640fd249a08"], &(0x7f0000000240)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0xbc0000}, &(0x7f0000000340)={0xc0, 0xa2, 0x2f, "588cbc363f32958c6e5443e613e83ff487b91181772569c550beb4346fe503d2e2291ea53d36613d5d4ec69c322da4"}}) syz_usb_control_io(r0, 0x0, 0x0) 3.307132296s ago: executing program 0 (id=1840): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000640)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x1c, r1, 0x19, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x14) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000240)={0xf000, 0xf000, 0x0, r7}) unshare(0x2040400) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f00000003c0)={0x10000, 0x3000, 0x1, r7, 0x4}) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e23, 0x40000005, @remote, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x3, 0x0, 0x0) 3.04000766s ago: executing program 0 (id=1841): openat$vcsu(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="2400000058001f000307f4f9002304000a04f55f08000100020100020800038005000000", 0x24) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r3, 0x40045431, &(0x7f0000000000)) ptrace$getregset(0x4204, r1, 0x202, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0xb3d) close_range(r2, 0xffffffffffffffff, 0x0) 2.856366986s ago: executing program 0 (id=1842): syz_open_dev$video(0x0, 0x7fff, 0x40800) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, &(0x7f0000000200)={0x28, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4}) r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000240)={0x14, &(0x7f0000000040)={0x40, 0x10, 0xb1, {0xb1, 0x9, "0c920f1b4e72ab6082c991460ef427e4297201fd7f32876c8f34344974eecdade851a287d70513a642009841a3942d72a42ba37cbda91fc46e91dd8f7fd2a005ae8716fa7baaa897904eaf0297004771211f68c7cb356911e6fdc6ae7d69d884118c982db1a557668c057218ef9efcde886f9a94c1e332748661374962361c4bb304082be9a17a084829f824b4147e7b7f8aa8deae8dfecf67de093883cc4bf75023a1dea0086fcb5d2e2d1417f8d9"}}, &(0x7f0000000100)={0x0, 0x3, 0xa9, @string={0xa9, 0x3, "5aea1dac4fd9d6bacaf7af012c9fbd03d42ec19d621c0719b2d90082314a909a035dcea37f84ed5bace51a97cc9e79590e84b65a5d36de3aa8d0d02b0080849b78fd21f1c2ea1e718d5212c46a8f82e8facb4801abeac51b4cfa53a4c5025769551662f85bbf5eb0a67fbceb1ab3f31394fd0204ae201285b5e7b03a882c046f0853cf2b5a49298618264eb40f041ca6064c1d01de77182956fef96b48d7a30179f8d855a610e3"}}}, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x0, 0x0, 0x46, "dbeb3ae14f9965ca9a52e6d2e61ebe8c86dd53b9c85b1f3ac155347f2f8328edf2d5db15b3a5b69c4e6b407f0c1eac2d67ad533178e237340b9381d4be7a03136eb79450f6d3"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x20}, &(0x7f0000000380)={0x20, 0x81, 0x1, '\"'}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "97"}, &(0x7f0000000400)={0x20, 0x83, 0x2, "bb3a"}, &(0x7f0000000540)={0x20, 0x84, 0x4, "3ba950fd"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "e2be82"}}) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 2.235842553s ago: executing program 4 (id=1844): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011003faff82083910012181250102030109021b00028c4400600904b60800581e62090904"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) ioctl$IOCTL_STATUS_ACCEL_DEV(0xffffffffffffffff, 0x40046103, &(0x7f00000000c0)={0x3, 0xd, 0xd10, 0x9, 0x4, 0x9, 0x6, 0x4, 0x5, 0xc, 0x9, "72a315475c3c0e5ae029abeb147eaf547bbf4d3382eb931e3de47f5d695d7601"}) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x220082, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac2(0x5, 0xc3, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x249c, 0x9002, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb1, 0x3, 0x1, 0x2, 0x80, 0x1, {0x8, 0xb, 0x1, 0x0, 0x1, 0x3, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x0, 0xb, 0x44, 0xdc}, [@effect_unit={0xf, 0x24, 0x7, 0x2, 0x1, 0x1, [0x2, 0x3, 0x3, 0x0]}, @output_terminal={0xc, 0x24, 0x3, 0x3, 0x404, 0xf, 0x2, 0x8, 0x3, 0x2}, @extension_unit={0x9, 0x24, 0x9, 0x2, 0xe80f, 0x6, "02ee"}, @extension_unit={0x7, 0x24, 0x9, 0x2, 0xfffa}, @input_terminal={0x10, 0x24, 0x2, 0x2, 0x1ff, 0x6, 0x0, 0x25, 0x4, 0x6, 0x3, 0x2}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x5, 0x1, 0x3, 0xab, "ff0c9d3a78"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x5, 0x2, 0x40, {0x8, 0x25, 0x1, 0x1, 0xfe4eb3881c497e72, 0x8, 0xe46}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x5, 0xc0, {0x8, 0x25, 0x1, 0x2, 0x3, 0x3, 0x7fff}}}}}}}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x300, 0x2, 0x6, 0x2, 0x40}, 0xc9, &(0x7f0000000300)={0x5, 0xf, 0xc9, 0x2, [@generic={0xba, 0x10, 0x4, "d694bf15d15402e2eb3beb543ee4f7f1c9a18b216bc004a93a2b603b1996f8c483cf2a581b8c8b660e650b73c2861c84a835334f69fcde3f5b0fe6711dbefc979e82869ff5fbd73cfed68d76fd8699836d2efe978c8084613b6f7af4a225a7617f781518978a9df1c08e65fc9fd1081ccdea0064ad26d3ed39e43b62a07072b2d462704cbeb567c2516b6d3311faebbed14f8c18c11daeaa3af2f1c614f9a5509f8cd874e4938613e4d195daab38afe9d30e9ee60173fb"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x8, 0x7, 0x3}]}, 0x2, [{0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x1401}}]}) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x40}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[], 0x0) 1.919926281s ago: executing program 2 (id=1846): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000140)={@multicast2, @multicast1, 0x0, "aaa517d60f2811d48c8a2cc60c4380bc23b510d442ff13482864280a9c0f4eb5"}, 0x3c) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000040)={@rand_addr=0x64010100, @multicast1, 0x2, "4f6fb4d8af0f724e6118ecd4ac1500843af297baebb0efcdb5a284da144a011a", 0x4, 0x5c, 0x0, 0x6}, 0x3c) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000100)={@multicast2, @multicast1, 0x0, "c6c0e6ec8755b5dc4e305886d95f086707764f8d0e5a0358ea21274f844a69e9", 0x1f00, 0x200, 0x489c, 0x2}, 0x3c) 1.848267911s ago: executing program 2 (id=1847): socket$alg(0x26, 0x5, 0x700) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c40000001900010000000000000000001520000200004a3b7923a3bc2352d8880000000000000000000000000000010000000000000000000000ff88daedca496a225914a6993362db5686e69ec0a3279691b9", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r0], 0xc4}}, 0x0) (async) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={0xffffffffffffffff, 0xc8, 0x1}) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, &(0x7f00000001c0)=@x86={0x11, 0x8, 0xf, 0x0, 0x5, 0x6, 0x86, 0x6, 0x48, 0x86, 0xdd, 0x68, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5, 0x8, '\x00', 0x1, 0x807}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000280), 0x660200, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000140)={0x4, 0xffffffffffffffff, 0x1}) write$eventfd(r3, &(0x7f00000001c0)=0x3, 0xfdef) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000002000000000000000000000000000000000000000000000000000000000000000000000000feff200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff00"/112], 0xb8}}, 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) write$P9_RWALK(r4, &(0x7f0000000240)={0x30, 0x6f, 0x2, {0x3, [{0x41, 0x4}, {0x0, 0x4}, {0x10, 0x1, 0x1}]}}, 0x30) 1.63883732s ago: executing program 2 (id=1848): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) process_mrelease(r1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a18100390000000015f0ffffff00000e0025000f000000028002002d1f", 0x2e}], 0x1}, 0x20) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_LIST(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r6, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'netdevsim0\x00'}]}, 0x40}}, 0x24004180) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r7) sendmsg$IEEE802154_DISASSOCIATE_REQ(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140011bc16073c088f0000", @ANYRES16=r8, @ANYBLOB="010025bd7000fedbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x80) syz_open_dev$vim2m(&(0x7f00000001c0), 0xc, 0x2) getsockopt$sock_int(r2, 0x1, 0x3, 0x0, &(0x7f00000006c0)) 1.497480506s ago: executing program 2 (id=1849): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0x23, "ea3189899beed6589c43c1002f596e75d25fe4b4865442b5dc7ff47949305a8665a035"}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_PPC_ALLOCATE_HTAB(0xffffffffffffffff, 0xc004aea7, &(0x7f00000001c0)=0x2) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = memfd_create(&(0x7f0000000080)=',\xea\x00', 0x4) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r3, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x141041) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x80001009, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x413, &(0x7f00000003c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_fuse_handle_req(r5, &(0x7f0000004100)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f0000000500)={0x0, 0xe, 0x1, 'queue0\x00'}) ftruncate(r2, 0x7000000) r6 = dup(r2) preadv2(r6, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/83, 0x200000}], 0x1000000000000146, 0x3700, 0x0, 0x0) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x6, 0x180, 0x4, 0x7, 0xf1, 0x50, 0x8000000000001, 0x5, 0x6, 0xa, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000000c0)={0xfffffffffffffffb, r1, 0x2}) ioctl$DRM_IOCTL_VERSION(r8, 0xc0406400, &(0x7f0000000540)={0x2, 0x1, 0x4, 0x3d, &(0x7f0000000380)=""/61, 0x82, &(0x7f00000002c0)=""/130, 0xc9, &(0x7f0000000440)=""/201}) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 909.629867ms ago: executing program 2 (id=1850): r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000001000)=ANY=[@ANYBLOB="24000000000601"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x58, r2, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x5b}}}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x6, 0xbd, [0x4]}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x5}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x458}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x20b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x40000c4) 788.399163ms ago: executing program 2 (id=1851): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x9, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000040)="8c7f93a965", 0xfffffe47}], 0x1, 0x0, 0x0, 0x7fd8}}], 0x1, 0x0) 552.223195ms ago: executing program 3 (id=1852): r0 = gettid() r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') getdents64(r1, &(0x7f0000002f40)=""/4098, 0x1002) r2 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r2, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) tkill(r0, 0x8) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, &(0x7f00000000c0)=0xb) mkdir(&(0x7f0000001580)='./file0\x00', 0x8) mount$tmpfs(0x0, &(0x7f0000004cc0)='./file0\x00', &(0x7f0000004d00), 0x800000, &(0x7f0000004d40)={[{@mpol={'mpol', 0x3d, {'default', '', @val={0x3a, [0x2c, 0x31]}}}}]}) 353.957882ms ago: executing program 3 (id=1853): rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0xf) wait4(r0, 0x0, 0x2, 0x0) getrusage(0x1, &(0x7f0000000000)) (async) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8880, 0x85) (async) tkill(r0, 0x3) (async) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 0s ago: executing program 3 (id=1854): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x3d810686a7d95765, 0x70bd2d, 0x25dfdb79}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24044852) kernel console output (not intermixed with test programs): ing 2 has an invalid descriptor for endpoint zero, skipping [ 340.079618][ T32] usb 1-1: config 9 interface 50 altsetting 2 has an endpoint descriptor with address 0x92, changing to 0x82 [ 340.079647][ T32] usb 1-1: config 9 interface 50 altsetting 2 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 340.079729][ T32] usb 1-1: config 9 interface 50 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 340.079757][ T32] usb 1-1: config 9 interface 50 altsetting 2 has a duplicate endpoint with address 0xF, skipping [ 340.079784][ T32] usb 1-1: config 9 interface 50 altsetting 2 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 340.079816][ T32] usb 1-1: config 9 interface 50 altsetting 2 endpoint 0x7 has an invalid bInterval 40, changing to 7 [ 340.079847][ T32] usb 1-1: config 9 interface 50 altsetting 2 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 340.079895][ T32] usb 1-1: config 9 interface 128 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 340.079920][ T32] usb 1-1: config 9 interface 128 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 340.079946][ T32] usb 1-1: config 9 interface 128 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 340.079973][ T32] usb 1-1: config 9 interface 128 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 340.079998][ T32] usb 1-1: config 9 interface 128 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 340.080023][ T32] usb 1-1: config 9 interface 128 altsetting 8 has a duplicate endpoint with address 0xA, skipping [ 340.080051][ T32] usb 1-1: config 9 interface 128 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 340.080077][ T32] usb 1-1: config 9 interface 128 altsetting 8 has a duplicate endpoint with address 0x6, skipping [ 340.080102][ T32] usb 1-1: config 9 interface 50 has no altsetting 0 [ 340.080123][ T32] usb 1-1: config 9 interface 128 has no altsetting 0 [ 340.261529][ T32] usb 1-1: New USB device found, idVendor=1199, idProduct=900a, bcdDevice=fa.ac [ 340.261564][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.261588][ T32] usb 1-1: Product: ╫鉰仓⛏ȥ͝峹觪專ꪤ᮫쩨ƾ˱䗨ࣇ訕 [ 340.261609][ T32] usb 1-1: SerialNumber: 㚉耮眭相ꛒ㔁싇섽⧨화䙍⢝銙憐溇篪슮잦⁘䀓늻蠲쑰졅쀌ꭇ갷ら䖘머㓆鯣ꏴ씢ﲓܺ뚼螡롋㳊녷莀斨驢㝉伞鶏蠢侹ȏ깒赶賾贻끽몾莳큛㹽㓼庆⓹쏒놟슛쎆켛竐ᑠ먻圧㘻嶃蜾潀筛ꏈ锃樏덇⽂ỏ [ 340.682484][ T5608] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 340.826188][ T9970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.829579][ T9970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.848813][ T5608] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 340.848974][ T5608] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 340.849036][ T5608] usb 3-1: config 150 has no interface number 0 [ 340.849113][ T5608] usb 3-1: config 150 interface 204 has no altsetting 0 [ 340.863935][ T5608] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 340.863972][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.863993][ T5608] usb 3-1: Product: syz [ 340.864009][ T5608] usb 3-1: Manufacturer: syz [ 340.864024][ T5608] usb 3-1: SerialNumber: syz [ 341.170578][ T5608] xr_serial 3-1:150.204: skipping garbage [ 341.170644][ T5608] xr_serial 3-1:150.204: xr_serial converter detected [ 341.623980][ T9994] dlm: no local IP address has been set [ 341.623998][ T9994] dlm: cannot start dlm midcomms -107 [ 341.785113][ T32] usb 1-1: unknown number of interfaces: 2 [ 341.789835][T10000] sg_write: data in/out 491487/136 bytes for SCSI command 0xe4-- guessing data in; [ 341.789835][T10000] program syz.3.1477 not setting count and/or reply_len properly [ 341.835919][ T32] usb 1-1: USB disconnect, device number 34 [ 341.970795][ T5608] usb 3-1: xr_serial converter now attached to ttyUSB0 [ 341.988604][ T9994] loop5: detected capacity change from 0 to 7 [ 342.176378][ T9981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.176923][ T9981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.215629][ T1395] lo_rw_aio(loop5) starting read with raw_refcnt=0x1, refcnt=2 [ 342.242513][ T5608] usb 3-1: USB disconnect, device number 66 [ 342.274960][ T9994] Dev loop5: unable to read RDB block 7 [ 342.274999][ T9994] loop5: AHDI p1 p2 p3 [ 342.275029][ T9994] loop5: partition table partially beyond EOD, truncated [ 342.275289][ T9994] loop5: p1 start 1601398130 is beyond EOD, truncated [ 342.275312][ T9994] loop5: p2 start 1702059890 is beyond EOD, truncated [ 342.279250][ T5608] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 342.328285][ T5608] xr_serial 3-1:150.204: device disconnected [ 342.522622][ T5916] __loop_clr_fd(loop5) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 343.247063][T10037] netlink: 'syz.3.1483': attribute type 21 has an invalid length. [ 343.247162][T10037] __nla_validate_parse: 60 callbacks suppressed [ 343.247178][T10037] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1483'. [ 343.416766][T10041] loop9: detected capacity change from 0 to 7 [ 343.422021][ T1395] lo_rw_aio(loop9) starting read with raw_refcnt=0x1, refcnt=2 [ 343.484641][T10041] Dev loop9: unable to read RDB block 7 [ 343.484690][T10041] loop9: unable to read partition table [ 343.484888][T10041] loop9: partition table beyond EOD, truncated [ 343.484924][T10041] loop_reread_partitions: partition scan of loop9 (被x ) failed (rc=-5) [ 343.693703][ T5608] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 343.713615][T10040] __loop_clr_fd(loop9) clearing lo_backing_file with raw_refcnt=0x0, refcnt=1 [ 343.862482][ T5608] usb 3-1: Using ep0 maxpacket: 32 [ 343.865902][ T5608] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 343.868323][ T5608] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 343.868358][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.868383][ T5608] usb 3-1: Product: syz [ 343.868395][ T5608] usb 3-1: Manufacturer: syz [ 343.868407][ T5608] usb 3-1: SerialNumber: syz [ 344.241407][ T5608] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 344.336765][ T5608] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 344.679061][T10072] binder: BINDER_SET_CONTEXT_MGR already set [ 344.679080][T10072] binder: 10071:10072 ioctl 4018620d 2000000002c0 returned -16 [ 344.736416][ T5608] usb 3-1: USB disconnect, device number 67 [ 345.132111][T10087] netlink: 'syz.4.1497': attribute type 21 has an invalid length. [ 345.132132][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 345.149609][ T32] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 345.203089][ T37] audit: type=1326 audit(1779262200.770:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10086 comm="syz.4.1497" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90b879ce59 code=0x0 [ 345.243315][ T822] usb 4-1: new full-speed USB device number 68 using dummy_hcd [ 345.292489][ T5608] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 345.314698][ T32] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 345.314826][ T32] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 345.314873][ T32] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 345.314903][ T32] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.314934][ T32] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 345.314964][ T32] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 345.314985][ T32] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 345.315008][ T32] usb 1-1: config 168 interface 0 has no altsetting 0 [ 345.317279][ T32] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 345.317310][ T32] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 345.317342][ T32] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 345.317367][ T32] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.317388][ T32] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 345.317409][ T32] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 345.317431][ T32] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 345.317452][ T32] usb 1-1: config 168 interface 0 has no altsetting 0 [ 345.318599][ T32] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 345.318638][ T32] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 345.318669][ T32] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has invalid maxpacket 77, setting to 64 [ 345.318690][ T32] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.318712][ T32] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 345.318733][ T32] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 345.318754][ T32] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 345.318776][ T32] usb 1-1: config 168 interface 0 has no altsetting 0 [ 345.391970][ T32] usb 1-1: string descriptor 0 read error: -22 [ 345.392107][ T32] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 345.392136][ T32] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.412430][ T822] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 345.412486][ T822] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 345.412512][ T822] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 345.453568][ T5608] usb 3-1: Using ep0 maxpacket: 8 [ 345.519126][ T822] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.519162][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 345.519182][ T822] usb 4-1: SerialNumber: syz [ 345.596556][ T5608] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 345.596699][ T5608] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 345.596965][ T5608] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 345.597076][ T5608] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.597156][ T5608] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.597237][ T5608] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 345.597317][ T5608] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 345.597406][ T5608] usb 3-1: config 168 interface 0 has no altsetting 0 [ 345.642739][ T5811] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 345.653152][ T5608] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 345.653278][ T5608] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 345.653698][ T5608] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 345.653807][ T5608] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.653887][ T5608] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.653972][ T5608] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 345.654057][ T5608] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 345.654144][ T5608] usb 3-1: config 168 interface 0 has no altsetting 0 [ 345.802530][ T5811] usb 5-1: device descriptor read/64, error -71 [ 345.914730][ T5608] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 345.914774][ T5608] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 345.914813][ T5608] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 345.914842][ T5608] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 345.914869][ T5608] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 345.914898][ T5608] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 345.914928][ T5608] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 345.914959][ T5608] usb 3-1: config 168 interface 0 has no altsetting 0 [ 345.961025][ T5608] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 345.961098][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.961160][ T5608] usb 3-1: Product: syz [ 345.961178][ T5608] usb 3-1: Manufacturer: syz [ 345.961195][ T5608] usb 3-1: SerialNumber: syz [ 346.055261][ T32] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 346.062525][ T5811] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 346.124726][T10075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.126014][T10075] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.244948][ T5811] usb 5-1: device descriptor read/64, error -71 [ 346.297485][ T9] usb 1-1: USB disconnect, device number 35 [ 346.354722][ T5811] usb usb5-port1: attempt power cycle [ 346.412231][T10077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.417831][T10077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.642697][ T5608] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 346.677098][ T5608] usb 3-1: USB disconnect, device number 68 [ 346.742424][ T5811] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 346.765949][ T5811] usb 5-1: device descriptor read/8, error -71 [ 347.021186][ T5811] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 347.043879][ T5811] usb 5-1: device descriptor read/8, error -71 [ 347.153739][ T5811] usb usb5-port1: unable to enumerate USB device [ 348.030436][ T822] usb 4-1: USB disconnect, device number 68 [ 348.318639][T10111] erofs (device nullb0): cannot find valid erofs superblock [ 348.868311][T10127] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1510'. [ 348.967984][T10129] ceph: No source [ 349.053123][ T822] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 349.202439][ T822] usb 5-1: Using ep0 maxpacket: 32 [ 349.224420][ T822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.244671][ T822] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 349.244707][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.244730][ T822] usb 5-1: Product: syz [ 349.244948][ T822] usb 5-1: Manufacturer: syz [ 349.244966][ T822] usb 5-1: SerialNumber: syz [ 349.288655][ T822] usb 5-1: config 0 descriptor?? [ 349.301043][ T822] smsc75xx 5-1:0.0 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 349.301832][ T822] smsc75xx 5-1:0.0: probe with driver smsc75xx failed with error -22 [ 349.516951][T10124] tmpfs: Bad value for 'mpol' [ 349.545044][T10143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.545578][T10143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.727967][T10147] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1516'. [ 349.827059][ T5811] usb 5-1: USB disconnect, device number 49 [ 351.132488][ T32] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 351.223335][T10193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1533'. [ 351.262574][ T32] usb 4-1: device descriptor read/64, error -71 [ 351.502572][ T32] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 351.632532][ T32] usb 4-1: device descriptor read/64, error -71 [ 351.743632][ T32] usb usb4-port1: attempt power cycle [ 351.981502][T10165] kexec: Could not allocate control_code_buffer [ 352.084486][ T32] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 352.119691][ T32] usb 4-1: device descriptor read/8, error -71 [ 352.353573][ T32] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 352.373689][ T32] usb 4-1: device descriptor read/8, error -71 [ 352.484501][ T32] usb usb4-port1: unable to enumerate USB device [ 352.681909][T10219] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.698816][T10219] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.924417][ T32] usb 1-1: new full-speed USB device number 36 using dummy_hcd [ 353.042461][ T5709] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 353.052428][ T32] usb 1-1: device descriptor read/64, error -71 [ 353.195696][ T5709] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 353.195733][ T5709] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 353.195756][ T5709] usb 3-1: config 220 has no interface number 2 [ 353.195828][ T5709] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 353.195861][ T5709] usb 3-1: config 220 interface 0 has no altsetting 0 [ 353.195884][ T5709] usb 3-1: config 220 interface 76 has no altsetting 0 [ 353.195904][ T5709] usb 3-1: config 220 interface 1 has no altsetting 0 [ 353.198606][ T5709] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 353.198645][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.198661][ T5709] usb 3-1: Product: syz [ 353.198673][ T5709] usb 3-1: Manufacturer: syz [ 353.198685][ T5709] usb 3-1: SerialNumber: syz [ 353.372603][ T32] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 353.503105][ T32] usb 1-1: device descriptor read/64, error -71 [ 353.538473][ T5709] usb 3-1: selecting invalid altsetting 0 [ 353.538961][ T5709] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 353.538997][ T5709] uvcvideo 3-1:220.0: No valid video chain found. [ 353.551096][ T5709] usb 3-1: selecting invalid altsetting 0 [ 353.551139][ T5709] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 353.629628][ T32] usb usb1-port1: attempt power cycle [ 353.630945][ T5709] usb 3-1: USB disconnect, device number 69 [ 353.965882][ T32] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 353.989197][ T32] usb 1-1: device descriptor read/8, error -71 [ 354.222424][ T32] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 354.243212][ T32] usb 1-1: device descriptor read/8, error -71 [ 354.369453][ T32] usb usb1-port1: unable to enumerate USB device [ 354.441223][T10238] ieee802154 phy0 wpan0: encryption failed: -22 [ 354.540608][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1552'. [ 354.666412][T10249] comedi comedi3: 8255: I/O base address not correctly aligned [ 354.863438][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 355.002577][ T9] usb 4-1: device descriptor read/64, error -71 [ 355.139564][T10264] binder: 10263:10264 ioctl c0306201 200000000680 returned -14 [ 355.242510][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 355.374017][ T9] usb 4-1: device descriptor read/64, error -71 [ 355.483878][ T9] usb usb4-port1: attempt power cycle [ 355.690615][T10284] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1565'. [ 355.832416][ T9] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 355.857116][ T9] usb 4-1: device descriptor read/8, error -71 [ 356.106313][ T9] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 356.131952][ T9] usb 4-1: device descriptor read/8, error -71 [ 356.366221][T10303] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.366932][T10303] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.506559][ T9] usb usb4-port1: unable to enumerate USB device [ 357.132335][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.152334][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.162314][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.172313][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.182320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.192307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.202308][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.212312][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.222311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.232319][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 357.510603][T10331] FAULT_INJECTION: forcing a failure. [ 357.510603][T10331] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.510650][T10331] CPU: 1 UID: 0 PID: 10331 Comm: syz.0.1583 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 357.510684][T10331] Tainted: [L]=SOFTLOCKUP [ 357.510693][T10331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 357.510708][T10331] Call Trace: [ 357.510717][T10331] [ 357.510728][T10331] dump_stack_lvl+0xe8/0x150 [ 357.510764][T10331] should_fail_ex+0x46b/0x600 [ 357.510801][T10331] _copy_from_user+0x2d/0xb0 [ 357.510848][T10331] ___sys_sendmsg+0x1c6/0x360 [ 357.510890][T10331] ? __lock_acquire+0x6b5/0x2d10 [ 357.510919][T10331] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.510993][T10331] ? __fget_files+0x2a/0x420 [ 357.511021][T10331] ? __fget_files+0x3a6/0x420 [ 357.511062][T10331] __x64_sys_sendmsg+0x1c3/0x2a0 [ 357.511100][T10331] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 357.511147][T10331] ? __pfx_ksys_write+0x10/0x10 [ 357.511190][T10331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.511217][T10331] do_syscall_64+0x15f/0xf80 [ 357.511240][T10331] ? trace_irq_disable+0x3b/0x140 [ 357.511277][T10331] ? clear_bhb_loop+0x40/0x90 [ 357.511307][T10331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.511331][T10331] RIP: 0033:0x7f1a9522ce59 [ 357.511354][T10331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 357.511377][T10331] RSP: 002b:00007f1a93486028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 357.511404][T10331] RAX: ffffffffffffffda RBX: 00007f1a954a5fa0 RCX: 00007f1a9522ce59 [ 357.511423][T10331] RDX: 0000000020000080 RSI: 0000200000000380 RDI: 0000000000000004 [ 357.511440][T10331] RBP: 00007f1a93486090 R08: 0000000000000000 R09: 0000000000000000 [ 357.511456][T10331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.511472][T10331] R13: 00007f1a954a6038 R14: 00007f1a954a5fa0 R15: 00007ffcb5ac4638 [ 357.511509][T10331] [ 358.047489][ T822] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 358.129368][ T5765] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 358.200548][ T822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.200581][ T822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 358.200641][ T822] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6 [ 358.200673][ T822] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 26984, setting to 8 [ 358.200721][ T822] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 358.200748][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.284043][T10333] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 358.288148][ T822] hub 1-1:1.0: bad descriptor, ignoring hub [ 358.288209][ T822] hub 1-1:1.0: probe with driver hub failed with error -5 [ 358.315051][ T822] cdc_wdm 1-1:1.0: skipping garbage [ 358.315073][ T822] cdc_wdm 1-1:1.0: skipping garbage [ 358.315181][ T822] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 358.322978][ T5765] usb 5-1: unable to get BOS descriptor or descriptor too short [ 358.332054][ T5765] usb 5-1: not running at top speed; connect to a high speed hub [ 358.358611][ T5765] usb 5-1: config 15 has an invalid interface number: 133 but max is 0 [ 358.358645][ T5765] usb 5-1: config 15 has no interface number 0 [ 358.358682][ T5765] usb 5-1: config 15 interface 133 has no altsetting 0 [ 358.388205][ T5765] usb 5-1: New USB device found, idVendor=3731, idProduct=010a, bcdDevice=c8.bc [ 358.388241][ T5765] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.388265][ T5765] usb 5-1: Product: syz [ 358.388282][ T5765] usb 5-1: Manufacturer: syz [ 358.388300][ T5765] usb 5-1: SerialNumber: syz [ 358.487630][T10340] binder: 10339:10340 ioctl 80085617 200000000180 returned -22 [ 358.491639][T10340] binder_alloc: 10339: binder_alloc_buf size -136 failed, no address space [ 358.491777][T10340] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 8192 (num: 1 largest: 8192) [ 358.695018][ T9] usb 4-1: new full-speed USB device number 77 using dummy_hcd [ 358.707045][T10327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.724900][T10327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.754527][ T5765] option 5-1:15.133: GSM modem (1-port) converter detected [ 358.759301][T10333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.761844][T10333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 358.820684][ T5765] usb 5-1: USB disconnect, device number 50 [ 358.843748][ T5765] option 5-1:15.133: device disconnected [ 358.885833][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 358.885879][ T9] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 358.885910][ T9] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 358.885929][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.514277][ T5709] usb 1-1: USB disconnect, device number 40 [ 359.805105][ T9] aiptek 4-1:17.0: Aiptek using 400 ms programming speed [ 359.810934][ T9] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input25 [ 359.872496][ T9] input: failed to attach handler kbd to device input25, error: -5 [ 359.940019][ T9] usb 4-1: USB disconnect, device number 77 [ 360.236197][T10363] FAULT_INJECTION: forcing a failure. [ 360.236197][T10363] name failslab, interval 1, probability 0, space 0, times 0 [ 360.236243][T10363] CPU: 0 UID: 0 PID: 10363 Comm: syz.4.1594 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 360.236268][T10363] Tainted: [L]=SOFTLOCKUP [ 360.236274][T10363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 360.236288][T10363] Call Trace: [ 360.236296][T10363] [ 360.236304][T10363] dump_stack_lvl+0xe8/0x150 [ 360.236331][T10363] should_fail_ex+0x46b/0x600 [ 360.236357][T10363] should_failslab+0xa8/0x100 [ 360.236384][T10363] __kmalloc_noprof+0xdf/0x7b0 [ 360.236407][T10363] ? kfree+0x4d/0x6c0 [ 360.236427][T10363] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 360.236465][T10363] tomoyo_realpath_from_path+0xe3/0x5d0 [ 360.236494][T10363] ? tomoyo_domain+0xd7/0x130 [ 360.236515][T10363] ? tomoyo_path_number_perm+0x219/0x630 [ 360.236539][T10363] tomoyo_path_number_perm+0x246/0x630 [ 360.236564][T10363] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 360.236586][T10363] ? __lock_acquire+0x6b5/0x2d10 [ 360.236606][T10363] ? do_raw_spin_lock+0x12b/0x2f0 [ 360.236653][T10363] ? __fget_files+0x2a/0x420 [ 360.236676][T10363] ? __fget_files+0x2a/0x420 [ 360.236695][T10363] ? __fget_files+0x3a6/0x420 [ 360.236741][T10363] ? __fget_files+0x2a/0x420 [ 360.236775][T10363] security_file_ioctl+0xc3/0x2a0 [ 360.236809][T10363] __se_sys_ioctl+0x47/0x170 [ 360.236845][T10363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.236874][T10363] do_syscall_64+0x15f/0xf80 [ 360.236898][T10363] ? trace_irq_disable+0x3b/0x140 [ 360.236933][T10363] ? clear_bhb_loop+0x40/0x90 [ 360.236965][T10363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.236990][T10363] RIP: 0033:0x7f90b879ce59 [ 360.237006][T10363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.237021][T10363] RSP: 002b:00007f90b69f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.237040][T10363] RAX: ffffffffffffffda RBX: 00007f90b8a15fa0 RCX: 00007f90b879ce59 [ 360.237053][T10363] RDX: 0000200000002280 RSI: 0000000000008943 RDI: 0000000000000006 [ 360.237064][T10363] RBP: 00007f90b69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 360.237075][T10363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.237085][T10363] R13: 00007f90b8a16038 R14: 00007f90b8a15fa0 R15: 00007fffa5ee6958 [ 360.237111][T10363] [ 360.237118][T10363] ERROR: Out of memory at tomoyo_realpath_from_path. [ 360.632719][ T9] usb 4-1: new full-speed USB device number 78 using dummy_hcd [ 360.651442][ T4935] Bluetooth: hci3: hcon ffff88803b1e8000 sent 1 < count 9 [ 360.651699][ T4935] Bluetooth: hci3: hcon ffff888039bec000 sent 1 < count 2 [ 360.651727][ T4935] Bluetooth: hci3: hcon ffff888039bec000 sent 0 < count 5 [ 360.825211][ T9] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 360.825248][ T9] usb 4-1: config 0 has no interface number 0 [ 360.825299][ T9] usb 4-1: config 0 interface 41 has no altsetting 0 [ 360.830643][ T9] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 360.830689][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.830711][ T9] usb 4-1: Product: syz [ 360.830730][ T9] usb 4-1: Manufacturer: syz [ 360.830746][ T9] usb 4-1: SerialNumber: syz [ 360.938338][ T9] usb 4-1: config 0 descriptor?? [ 361.004120][T10365] tipc: MTU too low for tipc bearer [ 361.537505][T10386] binder: 10385:10386 ioctl 4018620d 0 returned -22 [ 361.538309][T10386] binder: 10385:10386 ioctl c0306201 2000000001c0 returned -22 [ 361.542430][ T32] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 361.695502][ T32] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 99, setting to 64 [ 361.695545][ T32] usb 3-1: config 0 interface 0 has no altsetting 0 [ 361.699213][ T32] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 361.699252][ T32] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 361.699277][ T32] usb 3-1: Product: syz [ 361.699294][ T32] usb 3-1: Manufacturer: syz [ 361.699311][ T32] usb 3-1: SerialNumber: syz [ 361.741551][ T32] usb 3-1: config 0 descriptor?? [ 361.767678][T10379] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 361.797156][ T32] usb 3-1: selecting invalid altsetting 0 [ 361.812387][ T5765] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 361.812746][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 361.966986][ T5765] usb 1-1: Using ep0 maxpacket: 32 [ 361.984243][ T5765] usb 1-1: unable to get BOS descriptor or descriptor too short [ 361.988199][ T5765] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 173, changing to 7 [ 361.988310][ T5765] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1064, setting to 1024 [ 362.023059][ T5765] usb 1-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 362.023153][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.023177][ T5765] usb 1-1: Product: syz [ 362.023195][ T5765] usb 1-1: Manufacturer: syz [ 362.023212][ T5765] usb 1-1: SerialNumber: syz [ 362.025568][T10379] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1599'. [ 362.088490][ T32] usb 3-1: USB disconnect, device number 70 [ 362.118795][T10380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1599'. [ 362.441110][ T5765] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 362.441671][ T5765] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 362.541348][ T5765] usb 1-1: USB disconnect, device number 41 [ 362.626030][T10400] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1607'. [ 362.839100][T10406] sg_write: data in/out 418780/98 bytes for SCSI command 0x0-- guessing data in; [ 362.839100][T10406] program syz.2.1609 not setting count and/or reply_len properly [ 362.853025][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 362.853126][ T9] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 362.858994][ T9] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 362.920942][ T9] usb 4-1: USB disconnect, device number 78 [ 362.938920][T10409] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1610'. [ 363.085648][ T5765] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 363.255610][ T5765] usb 3-1: Using ep0 maxpacket: 8 [ 363.270384][ T5765] usb 3-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 363.270423][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.270447][ T5765] usb 3-1: Product: syz [ 363.270464][ T5765] usb 3-1: Manufacturer: syz [ 363.270481][ T5765] usb 3-1: SerialNumber: syz [ 363.352011][ T5765] usb 3-1: config 0 descriptor?? [ 363.387334][T10421] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1615'. [ 363.429397][ T5765] radio-usb-si4713 3-1:0.0: Si4713 development board discovered: (10C4:8244) [ 363.603991][ T5765] radio-usb-si4713 3-1:0.0: probe with driver radio-usb-si4713 failed with error -71 [ 363.604391][ T5765] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 363.611270][ T5765] usb 3-1: USB disconnect, device number 71 [ 363.728197][ T1246] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 363.822483][ T5608] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 363.872542][ T1246] usb 1-1: Using ep0 maxpacket: 8 [ 363.876809][ T1246] usb 1-1: unable to get BOS descriptor or descriptor too short [ 363.878186][ T1246] usb 1-1: config 6 has an invalid interface number: 133 but max is 0 [ 363.878216][ T1246] usb 1-1: config 6 has no interface number 0 [ 363.878257][ T1246] usb 1-1: config 6 interface 133 has no altsetting 0 [ 363.880966][ T1246] usb 1-1: New USB device found, idVendor=19d2, idProduct=9bd4, bcdDevice=49.24 [ 363.881000][ T1246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.881098][ T1246] usb 1-1: Product: 僂걾捋㟻஍螥挰溱㉸띪㠏黹闇締⽍뎇㳱֊ꖟ叱⧢흄棡觉阑痦晉뒝獑䣙嵤䞖࠳嵰᜖ꍔᲠℐﵹ꿲ᔓ梌咉孻낳₂曞둣ྲ觶繊ۮ雞᎙ [ 363.881120][ T1246] usb 1-1: Manufacturer: 쯸߰팕節瑆䀂硒稕倝⥒屪啦翟紂崪燼筳턱쀔슌뭧廧ᡀ惘⧘ꧩ⌗ᑥ╱꘨Ā [ 363.881137][ T1246] usb 1-1: SerialNumber: 粮朏궭尪肨⫐⳧ꪈ痴ঙ鎑㚴者ꨦ퓻쫠‣몬椥ꪄꚬ嫝鲂⻤僜愔欳䱨 [ 364.012670][ T5608] usb 4-1: Using ep0 maxpacket: 16 [ 364.022124][ T5608] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 364.022192][ T5608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 364.069097][ T5608] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 364.069126][ T5608] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.069185][ T5608] usb 4-1: Product: syz [ 364.069198][ T5608] usb 4-1: Manufacturer: syz [ 364.069209][ T5608] usb 4-1: SerialNumber: syz [ 364.127277][ T5608] usb 4-1: config 0 descriptor?? [ 364.158701][ T5608] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 364.158961][ T5608] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 364.228224][ T1246] cdc_ether 1-1:6.133: bad CDC descriptors [ 364.278032][ T1246] usb 1-1: USB disconnect, device number 42 [ 364.643770][ T5709] usb 5-1: new low-speed USB device number 51 using dummy_hcd [ 364.780780][ T5608] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 364.781960][ T5608] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 364.782652][ T5608] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 364.782708][ T5608] em28xx 4-1:0.0: No AC97 audio processor [ 364.795216][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 364.795257][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 364.795287][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 is Bulk; changing to Interrupt [ 364.795314][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 364.795339][ T5709] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 364.892071][ T5608] usb 4-1: USB disconnect, device number 79 [ 364.904047][ T5608] em28xx 4-1:0.0: Disconnecting em28xx [ 364.957169][ T822] usb 3-1: new full-speed USB device number 72 using dummy_hcd [ 365.111509][ T5608] em28xx 4-1:0.0: Freeing device [ 365.126367][ T822] usb 3-1: not running at top speed; connect to a high speed hub [ 365.148100][ T822] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 365.148196][ T822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.148223][ T822] usb 3-1: Product: syz [ 365.148240][ T822] usb 3-1: Manufacturer: syz [ 365.148258][ T822] usb 3-1: SerialNumber: syz [ 365.266410][ T822] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 365.502359][ T1246] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 365.571165][T10440] netlink: 'syz.3.1624': attribute type 11 has an invalid length. [ 365.571191][T10440] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1624'. [ 365.659792][ T1246] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 365.659827][ T1246] usb 1-1: config 0 has no interface number 0 [ 365.659877][ T1246] usb 1-1: config 0 interface 41 has no altsetting 0 [ 365.671766][ T1246] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 365.671804][ T1246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.671857][ T1246] usb 1-1: Product: syz [ 365.671895][ T1246] usb 1-1: Manufacturer: syz [ 365.671927][ T1246] usb 1-1: SerialNumber: syz [ 365.685496][ T1246] usb 1-1: config 0 descriptor?? [ 365.995773][ T822] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 366.393191][ T822] usb 3-1: USB disconnect, device number 72 [ 366.498946][ T1246] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 366.907445][ T5800] udevd[5800]: setting mode of /dev/bus/usb/003/072 to 020664 failed: No such file or directory [ 366.907600][ T5800] udevd[5800]: setting owner of /dev/bus/usb/003/072 to uid=0, gid=0 failed: No such file or directory [ 366.983857][T10454] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 366.988401][ T6221] udevd[6221]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.146743][T10450] hpfs: hpfs_map_sector(): read error [ 367.320493][T10457] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.330620][T10456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.434826][ T5709] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 367.434862][ T5709] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 367.490328][ T5709] usb 5-1: can't set config #1, error -71 [ 367.512487][ T5709] usb 5-1: USB disconnect, device number 51 [ 367.512909][ T1246] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 367.512942][ T1246] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 367.513217][ T1246] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 367.621471][T10461] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 367.668036][ T1246] usb 1-1: USB disconnect, device number 43 [ 367.923585][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 368.094159][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 368.097875][ T9] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 368.097916][ T9] usb 3-1: config 0 has no interface number 0 [ 368.097952][ T9] usb 3-1: config 0 interface 184 has no altsetting 0 [ 368.147015][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 368.147052][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.147077][ T9] usb 3-1: Product: syz [ 368.147094][ T9] usb 3-1: Manufacturer: syz [ 368.147113][ T9] usb 3-1: SerialNumber: syz [ 368.168290][ T9] usb 3-1: config 0 descriptor?? [ 368.242529][ T5709] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 368.394721][ T5709] usb 1-1: unable to get BOS descriptor or descriptor too short [ 368.404685][ T5709] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 368.422995][ T5709] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 368.423032][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.423057][ T5709] usb 1-1: Product: syz [ 368.423075][ T5709] usb 1-1: Manufacturer: syz [ 368.423092][ T5709] usb 1-1: SerialNumber: syz [ 368.502927][T10481] FAULT_INJECTION: forcing a failure. [ 368.502927][T10481] name failslab, interval 1, probability 0, space 0, times 0 [ 368.503041][T10481] CPU: 0 UID: 0 PID: 10481 Comm: syz.3.1638 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 368.503075][T10481] Tainted: [L]=SOFTLOCKUP [ 368.503085][T10481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 368.503100][T10481] Call Trace: [ 368.503110][T10481] [ 368.503121][T10481] dump_stack_lvl+0xe8/0x150 [ 368.503161][T10481] should_fail_ex+0x46b/0x600 [ 368.503197][T10481] should_failslab+0xa8/0x100 [ 368.503236][T10481] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 368.503282][T10481] ? vfs_parse_monolithic_sep+0x21d/0x360 [ 368.503322][T10481] kmemdup_nul+0x36/0xf0 [ 368.503353][T10481] vfs_parse_monolithic_sep+0x21d/0x360 [ 368.503389][T10481] ? __pfx_vfs_parse_comma_sep+0x10/0x10 [ 368.503425][T10481] ? __pfx_vfs_parse_monolithic_sep+0x10/0x10 [ 368.503458][T10481] ? kstrdup+0x81/0x100 [ 368.503487][T10481] ? v9fs_init_fs_context+0x174/0x500 [ 368.503517][T10481] ? alloc_fs_context+0x9e9/0xd50 [ 368.503562][T10481] do_new_mount+0x304/0xd30 [ 368.503588][T10481] ? apparmor_capable+0x126/0x170 [ 368.503619][T10481] ? security_capable+0x7e/0x2c0 [ 368.503659][T10481] ? __pfx_do_new_mount+0x10/0x10 [ 368.503689][T10481] ? ns_capable+0x89/0xe0 [ 368.503724][T10481] ? path_mount+0x690/0x10e0 [ 368.503752][T10481] ? user_path_at+0xd4/0x160 [ 368.503788][T10481] ? user_path_at+0xd4/0x160 [ 368.503822][T10481] __se_sys_mount+0x31d/0x420 [ 368.503856][T10481] ? __pfx___se_sys_mount+0x10/0x10 [ 368.503891][T10481] ? __x64_sys_mount+0x20/0xc0 [ 368.503925][T10481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.503952][T10481] do_syscall_64+0x15f/0xf80 [ 368.503976][T10481] ? trace_irq_disable+0x3b/0x140 [ 368.504011][T10481] ? clear_bhb_loop+0x40/0x90 [ 368.504041][T10481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.504067][T10481] RIP: 0033:0x7f0095b6ce59 [ 368.504091][T10481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.504113][T10481] RSP: 002b:00007f0093dbe028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 368.504138][T10481] RAX: ffffffffffffffda RBX: 00007f0095de5fa0 RCX: 00007f0095b6ce59 [ 368.504156][T10481] RDX: 0000200000000200 RSI: 00002000000001c0 RDI: 0000000000000000 [ 368.504173][T10481] RBP: 00007f0093dbe090 R08: 0000200000000240 R09: 0000000000000000 [ 368.504189][T10481] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000002 [ 368.504204][T10481] R13: 00007f0095de6038 R14: 00007f0095de5fa0 R15: 00007fff07f848f8 [ 368.504241][T10481] [ 368.838250][ T5709] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 369.085264][ T5811] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 369.204991][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 369.205035][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 369.296088][ T5811] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 369.296174][ T5811] usb 5-1: config 0 has no interface number 0 [ 369.296225][ T5811] usb 5-1: config 0 interface 41 has no altsetting 0 [ 369.301114][ T5811] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 369.301217][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.301239][ T5811] usb 5-1: Product: syz [ 369.301264][ T5811] usb 5-1: Manufacturer: syz [ 369.301279][ T5811] usb 5-1: SerialNumber: syz [ 369.401831][ T5811] usb 5-1: config 0 descriptor?? [ 369.450158][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.451372][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.485794][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.487075][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.509737][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.510543][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.531283][ T5709] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve sample rate range (clock 0) [ 369.623052][ T5709] usb 1-1: USB disconnect, device number 44 [ 369.794886][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.274641][T10492] FAULT_INJECTION: forcing a failure. [ 370.274641][T10492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.274739][T10492] CPU: 1 UID: 0 PID: 10492 Comm: syz.0.1643 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 370.274776][T10492] Tainted: [L]=SOFTLOCKUP [ 370.274784][T10492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 370.274799][T10492] Call Trace: [ 370.274809][T10492] [ 370.274820][T10492] dump_stack_lvl+0xe8/0x150 [ 370.274866][T10492] should_fail_ex+0x46b/0x600 [ 370.274916][T10492] _copy_to_user+0x31/0xb0 [ 370.274971][T10492] copy_siginfo_to_user+0x22/0xc0 [ 370.275009][T10492] x64_setup_rt_frame+0x77b/0xcb0 [ 370.275035][T10492] ? rt_spin_unlock+0x14f/0x200 [ 370.275085][T10492] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 370.275126][T10492] arch_do_signal_or_restart+0x442/0x840 [ 370.275157][T10492] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 370.275203][T10492] exit_to_user_mode_loop+0x8c/0x4d0 [ 370.275244][T10492] ? rcu_is_watching+0x15/0xb0 [ 370.275270][T10492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.275303][T10492] do_syscall_64+0x33e/0xf80 [ 370.275328][T10492] ? trace_irq_disable+0x3b/0x140 [ 370.275364][T10492] ? clear_bhb_loop+0x40/0x90 [ 370.275393][T10492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.275416][T10492] RIP: 0033:0x7f1a9522ce57 [ 370.275440][T10492] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 370.275455][T10492] RSP: 002b:00007f1a93486028 EFLAGS: 00000246 [ 370.275486][T10492] RAX: 0000000000000133 RBX: 00007f1a954a5fa0 RCX: 00007f1a9522ce59 [ 370.275504][T10492] RDX: 0000000000000001 RSI: 0000200000000480 RDI: 0000000000000004 [ 370.275520][T10492] RBP: 00007f1a93486090 R08: 0000000000000000 R09: 0000000000000000 [ 370.275537][T10492] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000002 [ 370.275552][T10492] R13: 00007f1a954a6038 R14: 00007f1a954a5fa0 R15: 00007ffcb5ac4638 [ 370.275587][T10492] [ 370.476935][ T5811] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 370.772158][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 370.772197][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 370.772471][ T9] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 370.782292][ T9] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 370.837573][ T9] usb 3-1: USB disconnect, device number 73 [ 371.392519][ T9] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 371.492917][ T5811] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 371.492955][ T5811] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 371.493241][ T5811] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 371.507120][ T5811] usb 5-1: USB disconnect, device number 52 [ 371.546163][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.546204][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.546248][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 371.546275][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.552209][ T9] usb 4-1: config 0 descriptor?? [ 371.552368][ T5709] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 371.754657][ T5709] usb 3-1: Using ep0 maxpacket: 8 [ 371.756995][ T5709] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 371.766110][ T5709] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 371.767279][ T5709] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 371.767307][ T5709] usb 3-1: Product: syz [ 371.767325][ T5709] usb 3-1: Manufacturer: syz [ 371.767343][ T5709] usb 3-1: SerialNumber: syz [ 372.026010][ T5709] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 372.026041][ T5709] usb 3-1: Handspring Visor / Palm OS: port 45, is for unknown use [ 372.026063][ T5709] usb 3-1: Handspring Visor / Palm OS: port 225, is for unknown use [ 372.026095][ T5709] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 372.084518][ T9] hid_parser_main: 222 callbacks suppressed [ 372.084547][ T9] pyra 0003:1E7D:2CF6.0009: unknown main item tag 0x2 [ 372.191829][ T9] pyra 0003:1E7D:2CF6.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.3-1/input0 [ 372.233091][ T5709] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 372.241213][ T5709] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 372.280918][ T5709] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 372.389756][ T9] pyra 0003:1E7D:2CF6.0009: couldn't init struct pyra_device [ 372.389799][ T9] pyra 0003:1E7D:2CF6.0009: couldn't install mouse [ 372.515027][ T9] pyra 0003:1E7D:2CF6.0009: probe with driver pyra failed with error -71 [ 372.540572][ T9] usb 4-1: USB disconnect, device number 80 [ 372.587230][T10524] fido_id[10524]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 372.740376][T10530] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 372.754378][T10531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 372.758367][T10531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 372.803559][T10531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 372.803625][T10531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 372.803877][T10531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 372.803928][T10531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 372.804103][T10531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 372.804176][T10531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 372.804459][T10531] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 372.806335][T10531] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 373.096650][T10537] : renamed from virt_wifi0 [ 373.174954][ T5709] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 373.333393][ T5709] usb 1-1: Using ep0 maxpacket: 16 [ 373.341126][ T5709] usb 1-1: config 8 has an invalid interface number: 122 but max is 0 [ 373.341160][ T5709] usb 1-1: config 8 has no interface number 0 [ 373.341196][ T5709] usb 1-1: config 8 interface 122 has no altsetting 0 [ 373.371532][ T5709] usb 1-1: New USB device found, idVendor=046d, idProduct=0929, bcdDevice=b7.1d [ 373.371570][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.371595][ T5709] usb 1-1: Product: syz [ 373.371612][ T5709] usb 1-1: Manufacturer: syz [ 373.371629][ T5709] usb 1-1: SerialNumber: syz [ 373.409616][ T822] usb 4-1: new full-speed USB device number 81 using dummy_hcd [ 373.565834][ T822] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 373.565941][ T822] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1280, setting to 64 [ 373.565963][ T822] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 373.567397][ T822] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 373.567428][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 373.567513][ T822] usb 4-1: SerialNumber: syz [ 373.650286][T10537] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 373.693138][T10535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.694664][T10535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.916293][ T822] usb 4-1: USB disconnect, device number 81 [ 374.360174][ T5811] usb 3-1: USB disconnect, device number 74 [ 374.386156][ T5811] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 374.414547][ T5811] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 374.415616][ T5811] visor 3-1:1.0: device disconnected [ 374.712425][ T9] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 374.891134][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 374.891175][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.891201][ T9] usb 5-1: Product: syz [ 374.891219][ T9] usb 5-1: Manufacturer: syz [ 374.891237][ T9] usb 5-1: SerialNumber: syz [ 374.933133][ T822] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 375.185794][ T822] usb 3-1: too many configurations: 204, using maximum allowed: 8 [ 375.188670][ T822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 375.188734][ T822] usb 3-1: can't read configurations, error -61 [ 375.422429][ T822] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 375.453901][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 375.607843][ T822] usb 3-1: too many configurations: 204, using maximum allowed: 8 [ 375.620791][ T822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 375.620838][ T822] usb 3-1: can't read configurations, error -61 [ 375.666325][ T822] usb usb3-port1: attempt power cycle [ 376.052955][ T822] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 376.078209][ T822] usb 3-1: too many configurations: 204, using maximum allowed: 8 [ 376.080544][ T822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 376.080599][ T822] usb 3-1: can't read configurations, error -61 [ 376.114314][ T5709] gspca_main: spca561-2.14.0 probing 046d:0929 [ 376.117487][ T5709] spca561 1-1:8.122: probe with driver spca561 failed with error -22 [ 376.162555][ T5709] usb 1-1: USB disconnect, device number 45 [ 376.213205][ T822] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 376.235208][ T822] usb 3-1: too many configurations: 204, using maximum allowed: 8 [ 376.241281][ T822] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 376.241327][ T822] usb 3-1: can't read configurations, error -61 [ 376.247415][ T822] usb usb3-port1: unable to enumerate USB device [ 376.413717][T10565] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1668'. [ 376.542838][T10569] netlink: 'syz.0.1669': attribute type 2 has an invalid length. [ 376.542865][T10569] netlink: 228 bytes leftover after parsing attributes in process `syz.0.1669'. [ 377.088929][T10552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.089576][T10552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.705192][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 377.706136][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 377.724486][T10589] qnx4: unable to read the superblock [ 377.767709][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 377.790712][ T9] usb 5-1: USB disconnect, device number 53 [ 378.020038][T10604] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1679'. [ 378.045519][ T5709] IPVS: starting estimator thread 0... [ 378.132787][T10605] IPVS: using max 10 ests per chain, 24000 per kthread [ 378.212524][ T5765] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 378.326980][ T4935] Bluetooth: hci2: unexpected event 0x01 length: 7 > 1 [ 378.342822][T10613] FAULT_INJECTION: forcing a failure. [ 378.342822][T10613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.342866][T10613] CPU: 1 UID: 0 PID: 10613 Comm: syz.0.1683 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 378.342901][T10613] Tainted: [L]=SOFTLOCKUP [ 378.342909][T10613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 378.342924][T10613] Call Trace: [ 378.342933][T10613] [ 378.342942][T10613] dump_stack_lvl+0xe8/0x150 [ 378.342977][T10613] should_fail_ex+0x46b/0x600 [ 378.343014][T10613] _copy_to_user+0x31/0xb0 [ 378.343053][T10613] snd_timer_user_read+0x6c8/0xa10 [ 378.343103][T10613] ? __pfx_snd_timer_user_read+0x10/0x10 [ 378.343138][T10613] ? apparmor_file_permission+0x1f4/0x300 [ 378.343176][T10613] ? rw_verify_area+0x2ac/0x4e0 [ 378.343211][T10613] ? __pfx_snd_timer_user_read+0x10/0x10 [ 378.343241][T10613] vfs_read+0x212/0xa80 [ 378.343283][T10613] ? __pfx_vfs_read+0x10/0x10 [ 378.343318][T10613] ? __fget_files+0x2a/0x420 [ 378.343351][T10613] ? __fget_files+0x2a/0x420 [ 378.343379][T10613] ? __fget_files+0x3a6/0x420 [ 378.343407][T10613] ? __fget_files+0x2a/0x420 [ 378.343457][T10613] ksys_read+0x156/0x270 [ 378.343493][T10613] ? __pfx_ksys_read+0x10/0x10 [ 378.343535][T10613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.343564][T10613] do_syscall_64+0x15f/0xf80 [ 378.343587][T10613] ? trace_irq_disable+0x3b/0x140 [ 378.343622][T10613] ? clear_bhb_loop+0x40/0x90 [ 378.343653][T10613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.343678][T10613] RIP: 0033:0x7f1a9522ce59 [ 378.343700][T10613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.343723][T10613] RSP: 002b:00007f1a93486028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 378.343749][T10613] RAX: ffffffffffffffda RBX: 00007f1a954a5fa0 RCX: 00007f1a9522ce59 [ 378.343768][T10613] RDX: 0000000000002020 RSI: 0000200000002440 RDI: 0000000000000004 [ 378.343785][T10613] RBP: 00007f1a93486090 R08: 0000000000000000 R09: 0000000000000000 [ 378.343804][T10613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.343820][T10613] R13: 00007f1a954a6038 R14: 00007f1a954a5fa0 R15: 00007ffcb5ac4638 [ 378.343858][T10613] [ 378.375937][ T5765] usb 3-1: Using ep0 maxpacket: 16 [ 378.412854][ T5765] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.412935][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.412968][ T5765] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 378.412993][ T5765] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 378.413021][ T5765] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 378.465071][ T5765] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 378.465110][ T5765] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 378.465135][ T5765] usb 3-1: Manufacturer: syz [ 378.686152][ T5765] usb 3-1: config 0 descriptor?? [ 378.789754][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1684'. [ 378.789803][T10615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1684'. [ 378.865858][T10615] netlink: 'syz.3.1684': attribute type 10 has an invalid length. [ 379.052410][ T5765] rc_core: IR keymap rc-hauppauge not found [ 379.052434][ T5765] Registered IR keymap rc-empty [ 379.052612][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.082609][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.104329][ T5765] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 379.107817][ T5765] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input26 [ 379.112148][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.176448][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.196147][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.212957][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.242604][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.262587][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.292560][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.312630][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.332553][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.352437][ T5765] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 379.419164][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.419426][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.557218][ T5765] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 379.557247][ T5765] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 379.720763][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1689'. [ 379.720796][T10634] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1689'. [ 379.720815][T10634] netlink: 'syz.4.1689': attribute type 3 has an invalid length. [ 379.720832][T10634] netlink: 'syz.4.1689': attribute type 2 has an invalid length. [ 379.720848][T10634] netlink: 31 bytes leftover after parsing attributes in process `syz.4.1689'. [ 380.268836][T10638] overlay: filesystem on ./file1 not supported [ 380.392468][ T5811] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 380.555787][ T5811] usb 4-1: config 0 has an invalid interface number: 69 but max is 0 [ 380.555822][ T5811] usb 4-1: config 0 has no interface number 0 [ 380.555936][ T5811] usb 4-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 380.555966][ T5811] usb 4-1: config 0 interface 69 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 380.560922][ T5811] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 380.561084][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.561195][ T5811] usb 4-1: Product: syz [ 380.561213][ T5811] usb 4-1: Manufacturer: syz [ 380.561231][ T5811] usb 4-1: SerialNumber: syz [ 380.643286][ T5811] usb 4-1: config 0 descriptor?? [ 380.651801][T10640] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 380.704130][ T5811] cyberjack 4-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 380.726147][ T5811] cyberjack ttyUSB0: usb_submit_urb(read int) failed [ 380.770743][ T5811] usb 4-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 380.840283][T10649] random: crng reseeded on system resumption [ 380.842695][ T5709] usb 3-1: USB disconnect, device number 79 [ 380.909275][T10651] binder: Binderfs stats mode cannot be changed during a remount [ 381.007704][T10652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.065077][T10652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.085780][ T5710] usb 4-1: USB disconnect, device number 83 [ 381.141122][ T5710] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 381.144159][ T5710] cyberjack 4-1:0.69: device disconnected [ 381.312440][ T822] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 381.462679][ T822] usb 1-1: Using ep0 maxpacket: 16 [ 381.466466][ T822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.466503][ T822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 381.469093][ T822] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 381.469126][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.469155][ T822] usb 1-1: Product: syz [ 381.469167][ T822] usb 1-1: Manufacturer: syz [ 381.469179][ T822] usb 1-1: SerialNumber: syz [ 381.535945][ T822] usb 1-1: 0:2 : does not exist [ 381.574602][ T5709] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 381.759380][ T5709] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 381.759415][ T5709] usb 3-1: config 0 has no interface number 0 [ 381.759464][ T5709] usb 3-1: config 0 interface 41 has no altsetting 0 [ 381.785783][ T822] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 381.808415][ T5709] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 381.808453][ T5709] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.808477][ T5709] usb 3-1: Product: syz [ 381.808501][ T5709] usb 3-1: Manufacturer: syz [ 381.808519][ T5709] usb 3-1: SerialNumber: syz [ 381.830976][ T5709] usb 3-1: config 0 descriptor?? [ 382.129568][T10665] netlink: 766 bytes leftover after parsing attributes in process `syz.4.1700'. [ 382.173862][ T822] usb 1-1: USB disconnect, device number 46 [ 382.203154][T10665] netlink: 'syz.4.1700': attribute type 4 has an invalid length. [ 382.203178][T10665] netlink: 156 bytes leftover after parsing attributes in process `syz.4.1700'. [ 382.266393][T10665] net_ratelimit: 70 callbacks suppressed [ 382.266419][T10665] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 382.358226][T10667] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1701'. [ 382.460150][ T32] IPVS: starting estimator thread 0... [ 382.557461][T10668] IPVS: using max 10 ests per chain, 24000 per kthread [ 382.669946][ T5709] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 382.903635][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 382.989173][T10677] program syz.4.1704 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.996621][T10677] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 383.023287][ T4935] Bluetooth: hci4: unexpected event for opcode 0x2005 [ 383.106909][ T5709] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 383.106944][ T5709] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 383.107221][ T5709] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 383.160593][ T5709] usb 3-1: USB disconnect, device number 80 [ 383.305571][ T822] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 383.472420][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 383.475053][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.475089][ T822] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.475120][ T822] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 383.475139][ T822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.481258][ T822] usb 1-1: config 0 descriptor?? [ 383.533118][ T822] hub 1-1:0.0: USB hub found [ 384.941452][ T822] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 384.947682][ T822] usbhid 1-1:0.0: can't add hid device: -71 [ 384.947802][ T822] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 384.986588][ T822] usb 1-1: USB disconnect, device number 47 [ 385.842459][ T822] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 385.920601][ T37] audit: type=1326 audit(1779262241.520:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10698 comm="syz.3.1711" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0095b6ce59 code=0x0 [ 385.992432][ T822] usb 5-1: Using ep0 maxpacket: 8 [ 385.994431][ T822] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 385.994464][ T822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 385.994488][ T822] usb 5-1: config 0 has no interface number 0 [ 385.994513][ T822] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 385.994542][ T822] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 385.994564][ T822] usb 5-1: config 0 interface 255 has no altsetting 0 [ 385.996918][ T822] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= d.68 [ 385.996952][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.996970][ T822] usb 5-1: Product: syz [ 385.996981][ T822] usb 5-1: Manufacturer: syz [ 385.996993][ T822] usb 5-1: SerialNumber: syz [ 386.001487][ T822] usb 5-1: config 0 descriptor?? [ 386.264878][ T43] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 386.283548][T10695] netlink: 'syz.4.1709': attribute type 10 has an invalid length. [ 386.283675][T10695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.314091][T10695] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.341994][T10709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.382895][T10709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.404504][T10695] bond0: (slave batadv_slave_1): Enslaving as an active interface with an up link [ 386.409456][ T9] usb 5-1: USB disconnect, device number 54 [ 386.412413][ T43] usb 1-1: Using ep0 maxpacket: 8 [ 386.422990][ T43] usb 1-1: unable to get BOS descriptor or descriptor too short [ 386.504447][ T43] usb 1-1: string descriptor 0 read error: -22 [ 386.504580][ T43] usb 1-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 386.504609][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.552381][ T5811] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 386.553083][ T43] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 386.705555][ T5811] usb 3-1: config index 0 descriptor too short (expected 108, got 45) [ 386.719069][ T5811] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 386.719107][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.719130][ T5811] usb 3-1: Product: syz [ 386.719147][ T5811] usb 3-1: Manufacturer: syz [ 386.719165][ T5811] usb 3-1: SerialNumber: syz [ 386.763282][ T43] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 386.890381][ T43] usb 1-1: USB disconnect, device number 48 [ 387.034625][ T5811] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 387.034687][ T5811] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 387.034711][ T5811] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 387.082066][ T5811] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 387.472449][ T43] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 387.624815][ T43] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 387.624853][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.652808][ T43] usb 5-1: config 0 descriptor?? [ 387.677951][ T43] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 387.822681][ T5765] usb 3-1: USB disconnect, device number 81 [ 387.927183][T10721] Can't find a SQUASHFS superblock on nullb0 [ 387.983039][ T5811] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 388.162387][ T5811] usb 1-1: Using ep0 maxpacket: 8 [ 388.165433][ T5811] usb 1-1: unable to get BOS descriptor or descriptor too short [ 388.168854][ T5811] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.168883][ T5811] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 388.168934][ T5811] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 388.220369][ T5811] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.220408][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.220433][ T5811] usb 1-1: Product: syz [ 388.220450][ T5811] usb 1-1: Manufacturer: syz [ 388.220468][ T5811] usb 1-1: SerialNumber: syz [ 388.392416][ T5765] usb 3-1: new full-speed USB device number 82 using dummy_hcd [ 388.495611][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.496802][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.515176][ T5811] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 388.515226][ T5811] cdc_ncm 1-1:1.0: bind() failure [ 388.538373][ T43] usb 5-1: USB disconnect, device number 55 [ 388.568672][ T5765] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 388.568709][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.568726][ T5765] usb 3-1: Product: syz [ 388.568738][ T5765] usb 3-1: Manufacturer: syz [ 388.568749][ T5765] usb 3-1: SerialNumber: syz [ 388.629616][ T5765] usb 3-1: config 0 descriptor?? [ 388.654940][ T5811] usb 1-1: USB disconnect, device number 49 [ 388.684669][ T5765] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 389.373746][T10746] mmap: syz.4.1726 (10746): VmData 37474304 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 389.742960][T10755] netlink: 9732 bytes leftover after parsing attributes in process `syz.4.1729'. [ 389.762421][ T822] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 389.955232][ T822] usb 1-1: config index 0 descriptor too short (expected 108, got 45) [ 389.959175][ T822] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 389.959212][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.959236][ T822] usb 1-1: Product: syz [ 389.959255][ T822] usb 1-1: Manufacturer: syz [ 389.959273][ T822] usb 1-1: SerialNumber: syz [ 390.277999][ T5765] gspca_stk1135: reg_w 0x200 err -71 [ 390.279074][ T5765] gspca_stk1135: serial bus timeout: status=0x00 [ 390.279091][ T5765] gspca_stk1135: Sensor write failed [ 390.279129][ T5765] gspca_stk1135: serial bus timeout: status=0x00 [ 390.279146][ T5765] gspca_stk1135: Sensor write failed [ 390.279182][ T5765] gspca_stk1135: serial bus timeout: status=0x00 [ 390.279194][ T5765] gspca_stk1135: Sensor read failed [ 390.279231][ T5765] gspca_stk1135: serial bus timeout: status=0x00 [ 390.279243][ T5765] gspca_stk1135: Sensor read failed [ 390.279253][ T5765] gspca_stk1135: Detected sensor type unknown (0x0) [ 390.279294][ T5765] gspca_stk1135: serial bus timeout: status=0x00 [ 390.279306][ T5765] gspca_stk1135: Sensor read failed [ 390.279343][ T5765] gspca_stk1135: serial bus timeout: status=0x00 [ 390.279355][ T5765] gspca_stk1135: Sensor read failed [ 390.279392][ T5765] gspca_stk1135: serial bus timeout: status=0x00 [ 390.279405][ T5765] gspca_stk1135: Sensor write failed [ 390.279442][ T5765] gspca_stk1135: serial bus timeout: status=0x00 [ 390.279457][ T5765] gspca_stk1135: Sensor write failed [ 390.279548][ T5765] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 390.431889][ T5765] usb 3-1: USB disconnect, device number 82 [ 390.456064][ T822] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 390.456133][ T822] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 390.457017][ T822] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 390.457073][ T822] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 390.458128][ T822] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 390.526312][ T822] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 390.593904][ T5811] usb 5-1: new full-speed USB device number 56 using dummy_hcd [ 390.635066][T10769] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1733'. [ 390.748992][ T5811] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 390.749027][ T5811] usb 5-1: config 0 has no interface number 0 [ 390.749096][ T5811] usb 5-1: config 0 interface 41 has no altsetting 0 [ 390.774114][ T5811] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 390.774156][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.774179][ T5811] usb 5-1: Product: syz [ 390.774196][ T5811] usb 5-1: Manufacturer: syz [ 390.774212][ T5811] usb 5-1: SerialNumber: syz [ 390.861835][ T5811] usb 5-1: config 0 descriptor?? [ 391.352438][ T822] usb 4-1: new full-speed USB device number 84 using dummy_hcd [ 391.392450][ T32] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 391.504435][ T822] usb 4-1: too many configurations: 49, using maximum allowed: 8 [ 391.506582][ T822] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 391.506627][ T822] usb 4-1: can't read configurations, error -61 [ 391.553418][ T32] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 391.553458][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.561301][ T32] usb 3-1: config 0 descriptor?? [ 391.590521][ T32] cp210x 3-1:0.0: cp210x converter detected [ 391.642740][ T822] usb 4-1: new full-speed USB device number 85 using dummy_hcd [ 391.706375][ T5811] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 391.805644][ T822] usb 4-1: too many configurations: 49, using maximum allowed: 8 [ 391.808057][ T822] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 391.808101][ T822] usb 4-1: can't read configurations, error -61 [ 391.808751][ T822] usb usb4-port1: attempt power cycle [ 392.022428][ T32] usb 3-1: cp210x converter now attached to ttyUSB0 [ 392.109163][ T5811] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 392.109200][ T5811] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 392.109503][ T5811] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 392.158515][ T5811] usb 5-1: USB disconnect, device number 56 [ 392.197600][ T5765] usb 3-1: USB disconnect, device number 83 [ 392.217021][ T822] usb 4-1: new full-speed USB device number 86 using dummy_hcd [ 392.234263][ T822] usb 4-1: too many configurations: 49, using maximum allowed: 8 [ 392.245051][ T822] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 392.245091][ T822] usb 4-1: can't read configurations, error -61 [ 392.250766][ T5765] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 392.372470][ T822] usb 4-1: new full-speed USB device number 87 using dummy_hcd [ 392.395455][ T822] usb 4-1: too many configurations: 49, using maximum allowed: 8 [ 392.397333][ T822] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 392.397386][ T822] usb 4-1: can't read configurations, error -61 [ 392.399642][ T822] usb usb4-port1: unable to enumerate USB device [ 392.413500][ T5765] cp210x 3-1:0.0: device disconnected [ 392.525680][ T822] usb 1-1: USB disconnect, device number 50 [ 392.604536][T10786] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1737'. [ 392.935280][T10792] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1740'. [ 392.994609][T10797] UHID_CREATE from different security context by process 990 (syz.2.1741), this is not allowed. [ 393.312564][ T822] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 393.463218][ T822] usb 1-1: Using ep0 maxpacket: 32 [ 393.465777][ T822] usb 1-1: unable to get BOS descriptor or descriptor too short [ 393.468319][ T822] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 393.484932][ T5765] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 393.519333][ T822] usb 1-1: New USB device found, idVendor=0b05, idProduct=1739, bcdDevice= 0.40 [ 393.519372][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.519396][ T822] usb 1-1: Product: syz [ 393.519414][ T822] usb 1-1: Manufacturer: syz [ 393.519431][ T822] usb 1-1: SerialNumber: syz [ 393.695925][ T5765] usb 3-1: config index 0 descriptor too short (expected 108, got 45) [ 393.709655][ T5765] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 393.709693][ T5765] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.709718][ T5765] usb 3-1: Product: syz [ 393.709735][ T5765] usb 3-1: Manufacturer: syz [ 393.709751][ T5765] usb 3-1: SerialNumber: syz [ 393.817326][ T822] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 393.884484][ T822] usb 1-1: USB disconnect, device number 51 [ 394.031347][ T5916] udevd[5916]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 394.050349][ T9] usb 5-1: new full-speed USB device number 57 using dummy_hcd [ 394.181658][ T5765] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 394.181726][ T5765] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 394.211666][ T9] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 394.211698][ T9] usb 5-1: config 0 has no interface number 0 [ 394.211748][ T9] usb 5-1: config 0 interface 41 has no altsetting 0 [ 394.217158][ T5765] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 394.217332][ T5765] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 394.264808][ T9] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 394.264835][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.264852][ T9] usb 5-1: Product: syz [ 394.264863][ T9] usb 5-1: Manufacturer: syz [ 394.264875][ T9] usb 5-1: SerialNumber: syz [ 394.271805][ T9] usb 5-1: config 0 descriptor?? [ 394.386094][ T5765] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 394.433002][ T5765] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 395.002841][ T32] usb 3-1: USB disconnect, device number 84 [ 395.149986][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 395.452408][ T32] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 395.482438][ T822] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 395.556932][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 395.557040][ T9] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 395.557322][ T9] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 395.602415][ T32] usb 3-1: Using ep0 maxpacket: 8 [ 395.604804][ T32] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.604836][ T32] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 395.604897][ T9] usb 5-1: USB disconnect, device number 57 [ 395.607299][ T32] usb 3-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 395.607333][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.607356][ T32] usb 3-1: Product: syz [ 395.607382][ T32] usb 3-1: Manufacturer: syz [ 395.607400][ T32] usb 3-1: SerialNumber: syz [ 395.632994][ T822] usb 1-1: Using ep0 maxpacket: 8 [ 395.663153][ T822] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.663189][ T822] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 395.724855][ T822] usb 1-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 395.724882][ T822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.724899][ T822] usb 1-1: Product: syz [ 395.724911][ T822] usb 1-1: Manufacturer: syz [ 395.724923][ T822] usb 1-1: SerialNumber: syz [ 396.075201][ T32] usb 3-1: 1:1 : no or invalid class specific endpoint descriptor [ 396.075243][ T32] usb 3-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 396.075269][ T32] usb 3-1: 1:1 : sample bitwidth 236 in over sample bytes 2 [ 396.075357][ T32] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 396.145483][ T32] usb 3-1: 0:2 : does not exist [ 396.329105][ T822] usb 1-1: 1:1 : no or invalid class specific endpoint descriptor [ 396.329141][ T822] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 396.329165][ T822] usb 1-1: 1:1 : sample bitwidth 236 in over sample bytes 2 [ 396.329194][ T822] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 396.329701][ T822] usb 1-1: 0:2 : does not exist [ 396.466569][ T32] usb 3-1: USB disconnect, device number 85 [ 396.589148][ T822] usb 1-1: USB disconnect, device number 52 [ 396.856499][ T5800] udevd[5800]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 396.951575][T10833] kvm: apic: phys broadcast and lowest prio [ 397.973127][T10859] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 398.102339][ T5765] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 398.272717][ T5765] usb 5-1: Using ep0 maxpacket: 32 [ 398.277267][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.277304][ T5765] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.277343][ T5765] usb 5-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 398.277367][ T5765] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.352591][ T5765] usb 5-1: config 0 descriptor?? [ 399.041707][ T5765] nintendo 0003:057E:200E.000A: unbalanced delimiter at end of report description [ 399.053920][ T5765] nintendo 0003:057E:200E.000A: HID parse failed [ 399.080308][ T5765] nintendo 0003:057E:200E.000A: probe - fail = -22 [ 399.080437][ T5765] nintendo 0003:057E:200E.000A: probe with driver nintendo failed with error -22 [ 399.115112][ T5765] usb 5-1: USB disconnect, device number 58 [ 399.267412][ T5608] usb 3-1: new full-speed USB device number 86 using dummy_hcd [ 399.427048][ T5608] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 399.427082][ T5608] usb 3-1: config 0 has no interface number 0 [ 399.427142][ T5608] usb 3-1: config 0 interface 41 has no altsetting 0 [ 399.427426][T10870] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 399.427453][T10870] overlayfs: failed to set xattr on upper [ 399.427463][T10870] overlayfs: ...falling back to redirect_dir=nofollow. [ 399.427473][T10870] overlayfs: ...falling back to index=off. [ 399.427482][T10870] overlayfs: ...falling back to uuid=null. [ 399.442398][ T5608] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 399.442437][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.442461][ T5608] usb 3-1: Product: syz [ 399.442477][ T5608] usb 3-1: Manufacturer: syz [ 399.442494][ T5608] usb 3-1: SerialNumber: syz [ 399.530600][ T5608] usb 3-1: config 0 descriptor?? [ 399.928401][ T822] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 400.161451][ T822] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 400.161492][ T822] usb 1-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 400.161516][ T822] usb 1-1: Product: syz [ 400.161534][ T822] usb 1-1: SerialNumber: syz [ 400.208447][ T822] usb 1-1: config 0 descriptor?? [ 400.356500][ T5608] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 400.436869][ T822] hso 1-1:0.0: Failed to find BULK eps [ 400.768529][ T5608] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 400.768564][ T5608] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 400.768858][ T5608] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 400.811513][ T5608] usb 3-1: USB disconnect, device number 86 [ 400.942451][ T822] usb 5-1: new full-speed USB device number 59 using dummy_hcd [ 400.965471][ T32] usb 1-1: USB disconnect, device number 53 [ 401.105178][ T822] usb 5-1: unable to get BOS descriptor or descriptor too short [ 401.105796][ T822] usb 5-1: not running at top speed; connect to a high speed hub [ 401.108331][ T822] usb 5-1: config 1 has an invalid interface number: 28 but max is 0 [ 401.108361][ T822] usb 5-1: config 1 has no interface number 0 [ 401.108397][ T822] usb 5-1: config 1 interface 28 has no altsetting 0 [ 401.110791][ T822] usb 5-1: New USB device found, idVendor=045b, idProduct=0212, bcdDevice=88.53 [ 401.110825][ T822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.110849][ T822] usb 5-1: Product: syz [ 401.110865][ T822] usb 5-1: Manufacturer: syz [ 401.110882][ T822] usb 5-1: SerialNumber: syz [ 401.766981][ T822] upd78f0730 5-1:1.28: upd78f0730 converter detected [ 401.828368][ T822] usb 5-1: upd78f0730 converter now attached to ttyUSB0 [ 401.892468][ T5608] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 401.937787][ T822] usb 5-1: USB disconnect, device number 59 [ 402.056617][ T822] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0 [ 402.062546][ T5608] usb 3-1: Using ep0 maxpacket: 8 [ 402.065708][ T822] upd78f0730 5-1:1.28: device disconnected [ 402.094713][ T5608] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 402.094750][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.094775][ T5608] usb 3-1: Product: syz [ 402.094792][ T5608] usb 3-1: Manufacturer: syz [ 402.094810][ T5608] usb 3-1: SerialNumber: syz [ 402.176668][ T5608] usb 3-1: config 0 descriptor?? [ 402.192475][ T5765] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 402.297023][T10914] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 402.297058][T10914] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 402.357593][ T5765] usb 4-1: config index 0 descriptor too short (expected 108, got 45) [ 402.371069][ T5765] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 402.371104][ T5765] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.371346][ T5765] usb 4-1: Product: syz [ 402.371361][ T5765] usb 4-1: Manufacturer: syz [ 402.371375][ T5765] usb 4-1: SerialNumber: syz [ 402.395275][T10914] vhci_hcd vhci_hcd.0: Device attached [ 402.415762][T10915] vhci_hcd: connection closed [ 402.419970][ T5608] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 402.429985][ T1469] vhci_hcd vhci_hcd.0: stop threads [ 402.430052][ T1469] vhci_hcd vhci_hcd.0: release socket [ 402.430119][ T1469] vhci_hcd vhci_hcd.0: disconnect device [ 402.758283][T10924] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 402.880200][ T5765] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 402.880333][ T5765] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 402.909398][ T5765] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 402.909521][ T5765] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 402.985646][ T5765] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 403.019143][ T5765] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 403.114109][ T5608] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 403.129590][ T5608] usb 3-1: USB disconnect, device number 87 [ 403.192394][ T822] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 403.344556][ T822] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.344622][ T822] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 403.344641][ T822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.351453][ T822] usb 5-1: config 0 descriptor?? [ 403.416809][ T822] pwc: Askey VC010 type 2 USB webcam detected. [ 403.871476][ T822] pwc: recv_control_msg error -32 req 02 val 2b00 [ 403.928360][ T822] pwc: recv_control_msg error -32 req 02 val 2700 [ 403.929056][ T822] pwc: recv_control_msg error -32 req 02 val 2c00 [ 403.929739][ T822] pwc: recv_control_msg error -32 req 04 val 1000 [ 403.930379][ T822] pwc: recv_control_msg error -32 req 04 val 1300 [ 403.935309][ T822] pwc: recv_control_msg error -32 req 04 val 1400 [ 404.115051][ T5608] usb 3-1: new full-speed USB device number 88 using dummy_hcd [ 404.177684][ T822] pwc: recv_control_msg error -32 req 02 val 2100 [ 404.178422][ T822] pwc: recv_control_msg error -32 req 04 val 1500 [ 404.219459][T10959] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 404.234127][T10957] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 404.285883][ T5608] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 404.285920][ T5608] usb 3-1: config 0 has no interface number 0 [ 404.285972][ T5608] usb 3-1: config 0 interface 41 has no altsetting 0 [ 404.290565][ T5608] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 404.290603][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.290626][ T5608] usb 3-1: Product: syz [ 404.290644][ T5608] usb 3-1: Manufacturer: syz [ 404.290661][ T5608] usb 3-1: SerialNumber: syz [ 404.364396][ T5608] usb 3-1: config 0 descriptor?? [ 404.383254][ T822] pwc: recv_control_msg error -32 req 02 val 2400 [ 404.387778][ T822] pwc: recv_control_msg error -32 req 02 val 2600 [ 404.413523][ T822] pwc: recv_control_msg error -32 req 02 val 2900 [ 404.618662][ T822] pwc: recv_control_msg error -32 req 04 val 1100 [ 404.643005][ T822] pwc: recv_control_msg error -32 req 04 val 1200 [ 404.657039][ T822] pwc: Registered as video103. [ 404.674422][ T822] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 405.098466][ T5811] usb 4-1: USB disconnect, device number 88 [ 405.244560][ T5608] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 405.347833][ T4935] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 405.347871][ T4935] Bluetooth: Wrong link type (-22) [ 405.409223][ T4935] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 405.409306][ T4935] Bluetooth: Wrong link type (-22) [ 405.655477][ T5608] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 405.655510][ T5608] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 405.655780][ T5608] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 405.725892][ T5608] usb 3-1: USB disconnect, device number 88 [ 406.188921][ T43] usb 5-1: USB disconnect, device number 60 [ 406.312709][ T5710] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 406.492396][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 406.502535][ T5710] usb 4-1: config index 0 descriptor too short (expected 16420, got 36) [ 406.502573][ T5710] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 406.509949][ T5710] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 406.509987][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.510012][ T5710] usb 4-1: Product: syz [ 406.510030][ T5710] usb 4-1: Manufacturer: syz [ 406.510048][ T5710] usb 4-1: SerialNumber: syz [ 406.729183][ T5710] usb 4-1: config 0 descriptor?? [ 406.815186][ T5710] ipheth 4-1:0.0: Unable to find alternate settings interface [ 406.895196][T11024] FAULT_INJECTION: forcing a failure. [ 406.895196][T11024] name failslab, interval 1, probability 0, space 0, times 0 [ 406.895244][T11024] CPU: 0 UID: 0 PID: 11024 Comm: syz.4.1798 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 406.895278][T11024] Tainted: [L]=SOFTLOCKUP [ 406.895286][T11024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.895301][T11024] Call Trace: [ 406.895309][T11024] [ 406.895320][T11024] dump_stack_lvl+0xe8/0x150 [ 406.895356][T11024] should_fail_ex+0x46b/0x600 [ 406.895392][T11024] should_failslab+0xa8/0x100 [ 406.895429][T11024] __kmalloc_cache_noprof+0x84/0x690 [ 406.895465][T11024] ? fuse_get_tree+0xc2/0x3a0 [ 406.895506][T11024] fuse_get_tree+0xc2/0x3a0 [ 406.895545][T11024] vfs_get_tree+0x92/0x2a0 [ 406.895585][T11024] do_new_mount+0x341/0xd30 [ 406.895611][T11024] ? apparmor_capable+0x126/0x170 [ 406.895645][T11024] ? __pfx_do_new_mount+0x10/0x10 [ 406.895674][T11024] ? ns_capable+0x89/0xe0 [ 406.895717][T11024] ? path_mount+0x690/0x10e0 [ 406.895744][T11024] ? user_path_at+0xd4/0x160 [ 406.895780][T11024] ? user_path_at+0xd4/0x160 [ 406.895813][T11024] __se_sys_mount+0x31d/0x420 [ 406.895847][T11024] ? __pfx___se_sys_mount+0x10/0x10 [ 406.895883][T11024] ? __x64_sys_mount+0x20/0xc0 [ 406.895910][T11024] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.895936][T11024] do_syscall_64+0x15f/0xf80 [ 406.895958][T11024] ? trace_irq_disable+0x3b/0x140 [ 406.895993][T11024] ? clear_bhb_loop+0x40/0x90 [ 406.896023][T11024] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.896047][T11024] RIP: 0033:0x7f90b879ce59 [ 406.896070][T11024] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.896091][T11024] RSP: 002b:00007f90b69f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 406.896117][T11024] RAX: ffffffffffffffda RBX: 00007f90b8a15fa0 RCX: 00007f90b879ce59 [ 406.896136][T11024] RDX: 00002000000020c0 RSI: 0000200000000180 RDI: 0000000000000000 [ 406.896152][T11024] RBP: 00007f90b69f6090 R08: 00002000000004c0 R09: 0000000000000000 [ 406.896169][T11024] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 406.896185][T11024] R13: 00007f90b8a16038 R14: 00007f90b8a15fa0 R15: 00007fffa5ee6958 [ 406.896223][T11024] [ 407.019412][ T5811] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 407.250351][ T5811] usb 1-1: config index 0 descriptor too short (expected 108, got 45) [ 407.257360][ T5811] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 407.257396][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.257419][ T5811] usb 1-1: Product: syz [ 407.257435][ T5811] usb 1-1: Manufacturer: syz [ 407.257451][ T5811] usb 1-1: SerialNumber: syz [ 407.566951][ T5710] usb 4-1: USB disconnect, device number 89 [ 407.768972][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 407.769043][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 407.769762][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 407.769821][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 407.770485][ T5811] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 407.831268][ T5811] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 408.192505][ T5811] usb 3-1: new full-speed USB device number 89 using dummy_hcd [ 408.257148][T11046] FAULT_INJECTION: forcing a failure. [ 408.257148][T11046] name failslab, interval 1, probability 0, space 0, times 0 [ 408.257192][T11046] CPU: 1 UID: 0 PID: 11046 Comm: syz.3.1804 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 408.257225][T11046] Tainted: [L]=SOFTLOCKUP [ 408.257234][T11046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 408.257248][T11046] Call Trace: [ 408.257257][T11046] [ 408.257267][T11046] dump_stack_lvl+0xe8/0x150 [ 408.257301][T11046] should_fail_ex+0x46b/0x600 [ 408.257337][T11046] should_failslab+0xa8/0x100 [ 408.257374][T11046] __kmalloc_cache_noprof+0x84/0x690 [ 408.257410][T11046] ? kvm_uevent_notify_change+0x226/0x3a0 [ 408.257445][T11046] kvm_uevent_notify_change+0x226/0x3a0 [ 408.257476][T11046] ? __pfx_kvm_vm_release+0x10/0x10 [ 408.257507][T11046] kvm_put_kvm+0xaa/0xa50 [ 408.257542][T11046] ? __pfx_kvm_vm_release+0x10/0x10 [ 408.257575][T11046] ? __pfx_kvm_vm_release+0x10/0x10 [ 408.257612][T11046] kvm_vm_release+0x46/0x50 [ 408.257641][T11046] __fput+0x461/0xa70 [ 408.257687][T11046] task_work_run+0x1d9/0x270 [ 408.257716][T11046] ? __pfx_task_work_run+0x10/0x10 [ 408.257754][T11046] exit_to_user_mode_loop+0xf3/0x4d0 [ 408.257793][T11046] ? rcu_is_watching+0x15/0xb0 [ 408.257823][T11046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.257849][T11046] do_syscall_64+0x33e/0xf80 [ 408.257872][T11046] ? trace_irq_disable+0x3b/0x140 [ 408.257908][T11046] ? clear_bhb_loop+0x40/0x90 [ 408.257938][T11046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.257962][T11046] RIP: 0033:0x7f0095b6ce59 [ 408.257985][T11046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.258006][T11046] RSP: 002b:00007f0093dbe028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 408.258032][T11046] RAX: 0000000000000000 RBX: 00007f0095de5fa0 RCX: 00007f0095b6ce59 [ 408.258049][T11046] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 408.258064][T11046] RBP: 00007f0093dbe090 R08: 0000000000000000 R09: 0000000000000000 [ 408.258080][T11046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.258094][T11046] R13: 00007f0095de6038 R14: 00007f0095de5fa0 R15: 00007fff07f848f8 [ 408.258130][T11046] [ 408.504621][ T5811] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 408.504666][ T5811] usb 3-1: config 0 has no interface number 0 [ 408.504715][ T5811] usb 3-1: config 0 interface 41 has no altsetting 0 [ 408.509399][ T5811] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 408.509442][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.509468][ T5811] usb 3-1: Product: syz [ 408.509485][ T5811] usb 3-1: Manufacturer: syz [ 408.509503][ T5811] usb 3-1: SerialNumber: syz [ 408.595533][ T5811] usb 3-1: config 0 descriptor?? [ 408.880011][ T1472] wlan1: BSS 50:50:50:50:50:50 switches to unsupported channel (0 MHz), disconnecting [ 409.054332][ T1472] wlan1: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID [ 409.410379][ T5811] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 409.542441][ T43] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 409.682435][ T43] usb 4-1: device descriptor read/64, error -71 [ 409.755310][ T5710] usb 1-1: USB disconnect, device number 54 [ 409.826541][ T5811] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 409.826579][ T5811] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 409.826865][ T5811] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 409.891549][ T5811] usb 3-1: USB disconnect, device number 89 [ 409.935655][ T43] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 410.062415][ T43] usb 4-1: device descriptor read/64, error -71 [ 410.172742][ T43] usb usb4-port1: attempt power cycle [ 410.235220][T11078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1816'. [ 410.240044][T11078] PKCS8: Unsupported PKCS#8 version [ 410.272848][T11075] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 410.367712][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.368309][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.397444][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.399375][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.418161][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.430846][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.444382][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.445045][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.488052][T11082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.489195][T11082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.532966][ T43] usb 4-1: new full-speed USB device number 92 using dummy_hcd [ 410.557782][ T43] usb 4-1: device descriptor read/8, error -71 [ 410.632419][ T5608] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 410.762824][ T5608] usb 5-1: device descriptor read/64, error -71 [ 410.802463][ T43] usb 4-1: new full-speed USB device number 93 using dummy_hcd [ 410.813681][ T32] usb 3-1: new full-speed USB device number 90 using dummy_hcd [ 410.828872][ T43] usb 4-1: device descriptor read/8, error -71 [ 410.933617][ T43] usb usb4-port1: unable to enumerate USB device [ 410.972458][ T32] usb 3-1: device descriptor read/64, error -71 [ 411.003079][ T5608] usb 5-1: new full-speed USB device number 62 using dummy_hcd [ 411.142451][ T5608] usb 5-1: device descriptor read/64, error -71 [ 411.223865][ T32] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 411.252825][ T5608] usb usb5-port1: attempt power cycle [ 411.362394][ T32] usb 3-1: device descriptor read/64, error -71 [ 411.478382][ T32] usb usb3-port1: attempt power cycle [ 411.532411][ T5811] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 411.632376][ T5608] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 411.653033][ T5608] usb 5-1: device descriptor read/8, error -71 [ 411.689836][ T5811] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 411.689876][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.689901][ T5811] usb 1-1: Product: syz [ 411.689919][ T5811] usb 1-1: Manufacturer: syz [ 411.689936][ T5811] usb 1-1: SerialNumber: syz [ 411.727144][ T5811] usb 1-1: config 0 descriptor?? [ 411.737724][ T5811] ch341 1-1:0.0: ch341-uart converter detected [ 411.822468][ T32] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 411.843464][ T32] usb 3-1: device descriptor read/8, error -71 [ 411.892554][ T5608] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 411.913200][ T5608] usb 5-1: device descriptor read/8, error -71 [ 412.029373][ T5608] usb usb5-port1: unable to enumerate USB device [ 412.095265][ T32] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 412.113305][ T32] usb 3-1: device descriptor read/8, error -71 [ 412.222854][ T32] usb usb3-port1: unable to enumerate USB device [ 412.380989][T11092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.381650][T11092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.480874][ T5811] usb 1-1: failed to send control message: -71 [ 412.480939][ T5811] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 412.519491][ T5811] usb 1-1: USB disconnect, device number 55 [ 412.522134][ T5811] ch341 1-1:0.0: device disconnected [ 412.762590][ T43] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 412.892401][ T5811] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 412.925299][ T43] usb 4-1: config index 0 descriptor too short (expected 108, got 45) [ 412.927857][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 412.927898][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.927915][ T43] usb 4-1: Product: syz [ 412.927926][ T43] usb 4-1: Manufacturer: syz [ 412.927938][ T43] usb 4-1: SerialNumber: syz [ 413.033838][ T5811] usb 1-1: device descriptor read/64, error -71 [ 413.272384][ T5811] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 413.380883][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 413.380959][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 413.381578][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 413.381635][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 413.384306][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 413.402595][ T5811] usb 1-1: device descriptor read/64, error -71 [ 413.426128][ T43] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 413.512960][ T5811] usb usb1-port1: attempt power cycle [ 413.613237][T11102] FAULT_INJECTION: forcing a failure. [ 413.613237][T11102] name failslab, interval 1, probability 0, space 0, times 0 [ 413.613282][T11102] CPU: 1 UID: 0 PID: 11102 Comm: syz.4.1824 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 413.613317][T11102] Tainted: [L]=SOFTLOCKUP [ 413.613326][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 413.613341][T11102] Call Trace: [ 413.613350][T11102] [ 413.613360][T11102] dump_stack_lvl+0xe8/0x150 [ 413.613396][T11102] should_fail_ex+0x46b/0x600 [ 413.613433][T11102] should_failslab+0xa8/0x100 [ 413.613470][T11102] __kmalloc_cache_noprof+0x84/0x690 [ 413.613506][T11102] ? sctp_add_bind_addr+0x8c/0x370 [ 413.613549][T11102] sctp_add_bind_addr+0x8c/0x370 [ 413.613589][T11102] sctp_copy_local_addr_list+0x314/0x4f0 [ 413.613639][T11102] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 413.613675][T11102] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 413.613718][T11102] ? sctp_v4_is_any+0x35/0x60 [ 413.613742][T11102] ? sctp_copy_one_addr+0x93/0x360 [ 413.613783][T11102] sctp_bind_addr_copy+0xb3/0x3c0 [ 413.613820][T11102] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 413.613857][T11102] sctp_connect_new_asoc+0x2ff/0x6b0 [ 413.613890][T11102] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 413.613923][T11102] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 413.613958][T11102] ? lockdep_hardirqs_on+0x7a/0x110 [ 413.613994][T11102] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 413.614019][T11102] ? security_sctp_bind_connect+0x7e/0x2c0 [ 413.614052][T11102] sctp_sendmsg+0x14c0/0x2990 [ 413.614097][T11102] ? __pfx_sctp_sendmsg+0x10/0x10 [ 413.614134][T11102] ? aa_sk_perm+0x703/0x950 [ 413.614176][T11102] ? __pfx_aa_sk_perm+0x10/0x10 [ 413.614207][T11102] ? sock_rps_record_flow+0x19/0x350 [ 413.614235][T11102] ? inet_sendmsg+0x2f4/0x370 [ 413.614263][T11102] ? __pfx_inet_sendmsg+0x10/0x10 [ 413.614285][T11102] sock_sendmsg_nosec+0xf9/0x150 [ 413.614316][T11102] ____sys_sendmsg+0x55c/0x870 [ 413.614357][T11102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.614403][T11102] ? import_iovec+0x73/0xa0 [ 413.614441][T11102] ___sys_sendmsg+0x2a5/0x360 [ 413.614475][T11102] ? __lock_acquire+0x6b5/0x2d10 [ 413.614504][T11102] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.614545][T11102] ? kstrtouint+0x6e/0xe0 [ 413.614609][T11102] ? __fget_files+0x2a/0x420 [ 413.614641][T11102] ? __fget_files+0x3a6/0x420 [ 413.614681][T11102] __sys_sendmmsg+0x282/0x4e0 [ 413.614724][T11102] ? __pfx___sys_sendmmsg+0x10/0x10 [ 413.614770][T11102] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 413.614817][T11102] ? ksys_write+0x248/0x270 [ 413.614853][T11102] ? __pfx_ksys_write+0x10/0x10 [ 413.614895][T11102] __x64_sys_sendmmsg+0xa0/0xc0 [ 413.614929][T11102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.614954][T11102] do_syscall_64+0x15f/0xf80 [ 413.614975][T11102] ? trace_irq_disable+0x3b/0x140 [ 413.615009][T11102] ? clear_bhb_loop+0x40/0x90 [ 413.615038][T11102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.615061][T11102] RIP: 0033:0x7f90b879ce59 [ 413.615083][T11102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.615103][T11102] RSP: 002b:00007f90b69f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 413.615129][T11102] RAX: ffffffffffffffda RBX: 00007f90b8a15fa0 RCX: 00007f90b879ce59 [ 413.615147][T11102] RDX: 0000000000000003 RSI: 00002000000009c0 RDI: 0000000000000003 [ 413.615184][T11102] RBP: 00007f90b69f6090 R08: 0000000000000000 R09: 0000000000000000 [ 413.615199][T11102] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000002 [ 413.615215][T11102] R13: 00007f90b8a16038 R14: 00007f90b8a15fa0 R15: 00007fffa5ee6958 [ 413.615257][T11102] [ 414.042506][ T5811] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 414.065554][ T5811] usb 1-1: device descriptor read/8, error -71 [ 414.144804][T11109] vfat: Unknown parameter '[' [ 414.307929][ T5811] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 414.324958][ T5811] usb 1-1: device descriptor read/8, error -71 [ 414.437791][ T5811] usb usb1-port1: unable to enumerate USB device [ 414.452447][ T5608] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 414.608578][ T5608] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 414.608612][ T5608] usb 3-1: config 0 has no interface number 0 [ 414.608671][ T5608] usb 3-1: config 0 interface 41 has no altsetting 0 [ 414.614381][ T5608] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 414.614457][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.614525][ T5608] usb 3-1: Product: syz [ 414.614570][ T5608] usb 3-1: Manufacturer: syz [ 414.614621][ T5608] usb 3-1: SerialNumber: syz [ 414.680298][ T5608] usb 3-1: config 0 descriptor?? [ 415.307725][ T5608] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -32 [ 415.503768][ T5811] usb 4-1: USB disconnect, device number 94 [ 415.593489][ T5608] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 415.733432][ T5608] usb 5-1: device descriptor read/64, error -71 [ 415.882824][ T5811] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 415.972453][ T5765] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 415.972651][ T5608] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 416.031869][ T9] usb 3-1: USB disconnect, device number 94 [ 416.048590][ T5811] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 416.048664][ T5811] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 416.048768][ T5811] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 416.048796][ T5811] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 416.048845][ T5811] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 416.048872][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.108722][ T5608] usb 5-1: device descriptor read/64, error -71 [ 416.133575][ T5765] usb 1-1: Using ep0 maxpacket: 32 [ 416.136001][ T5765] usb 1-1: config 51 has an invalid interface number: 93 but max is 0 [ 416.136033][ T5765] usb 1-1: config 51 has an invalid interface association descriptor of length 2, skipping [ 416.136056][ T5765] usb 1-1: config 51 has no interface number 0 [ 416.136105][ T5765] usb 1-1: config 51 interface 93 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 416.136131][ T5765] usb 1-1: config 51 interface 93 has no altsetting 0 [ 416.143730][ T5765] usb 1-1: New USB device found, idVendor=0af0, idProduct=8304, bcdDevice= 9.66 [ 416.149438][ T5765] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.149472][ T5765] usb 1-1: Product: syz [ 416.149491][ T5765] usb 1-1: Manufacturer: syz [ 416.149508][ T5765] usb 1-1: SerialNumber: syz [ 416.188555][T11133] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1834'. [ 416.236884][ T5608] usb usb5-port1: attempt power cycle [ 416.266410][T11130] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 416.289940][ T5811] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 416.299712][ T5811] usb 4-1: invalid MIDI out EP 0 [ 416.350509][T11125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.351163][T11125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.506423][ T5765] hso 1-1:51.93: Not our interface [ 416.521624][ T5765] usb 1-1: USB disconnect, device number 60 [ 416.625657][ T5800] udevd[5800]: setting mode of /dev/bus/usb/001/060 to 020664 failed: No such file or directory [ 416.625826][ T5800] udevd[5800]: setting owner of /dev/bus/usb/001/060 to uid=0, gid=0 failed: No such file or directory [ 416.632504][ T5608] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 416.673984][ T5608] usb 5-1: device descriptor read/8, error -71 [ 416.903753][T11138] kAFS: unable to lookup cell 'syz0' [ 416.910368][ T5811] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 416.912827][ T5608] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 416.934177][ T5608] usb 5-1: device descriptor read/8, error -71 [ 416.946505][ T5811] usb 4-1: USB disconnect, device number 95 [ 417.043012][ T5608] usb usb5-port1: unable to enumerate USB device [ 417.422415][ T43] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 417.596436][ T43] usb 4-1: config index 0 descriptor too short (expected 108, got 45) [ 417.598848][ T43] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 417.598884][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.598901][ T43] usb 4-1: Product: syz [ 417.598913][ T43] usb 4-1: Manufacturer: syz [ 417.598946][ T43] usb 4-1: SerialNumber: syz [ 418.074351][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 418.074424][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 418.192402][ T5811] usb 1-1: new full-speed USB device number 61 using dummy_hcd [ 418.369927][ T5811] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 418.369965][ T5811] usb 1-1: config 0 has no interface number 0 [ 418.370018][ T5811] usb 1-1: config 0 interface 41 has no altsetting 0 [ 418.406135][ T5811] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 418.406173][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.406198][ T5811] usb 1-1: Product: syz [ 418.406216][ T5811] usb 1-1: Manufacturer: syz [ 418.406233][ T5811] usb 1-1: SerialNumber: syz [ 418.463145][ T5811] usb 1-1: config 0 descriptor?? [ 418.512447][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 418.512511][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 418.513512][ T43] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 418.588114][ T43] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 418.728885][T11160] QAT: failed to copy from user. [ 418.731830][T11160] sctp: [Deprecated]: syz.2.1845 (pid 11160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.731830][T11160] Use struct sctp_sack_info instead [ 418.739091][T11160] sctp: [Deprecated]: syz.2.1845 (pid 11160) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.739091][T11160] Use struct sctp_sack_info instead [ 418.982484][ T5710] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 419.086177][ T5811] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -32 [ 419.142741][ T5710] usb 5-1: Using ep0 maxpacket: 8 [ 419.145515][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 419.147666][ T5710] usb 5-1: config 140 has an invalid interface number: 182 but max is 1 [ 419.147691][ T5710] usb 5-1: config 140 has no interface number 1 [ 419.147724][ T5710] usb 5-1: config 140 interface 182 has no altsetting 0 [ 419.150202][ T5710] usb 5-1: New USB device found, idVendor=1039, idProduct=2101, bcdDevice=25.81 [ 419.150244][ T5710] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.150262][ T5710] usb 5-1: Product: syz [ 419.150273][ T5710] usb 5-1: Manufacturer: syz [ 419.150286][ T5710] usb 5-1: SerialNumber: syz [ 419.261154][T11168] netlink: 'syz.2.1848': attribute type 37 has an invalid length. [ 419.439920][T11158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.443142][T11158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.550224][ T5710] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 419.926294][T11181] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1850'. [ 420.193933][ T5710] usb 5-1: reset high-speed USB device number 69 using dummy_hcd [ 420.244369][ T43] usb 4-1: USB disconnect, device number 96 [ 420.421949][T11187] tmpfs: Bad value for 'mpol' [ 420.511385][ T5710] usb 5-1: unable to get BOS descriptor or descriptor too short [ 420.572578][ T5710] usb 5-1: device firmware changed [ 420.610459][ T5710] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 420.635342][ T5710] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 420.663646][ T5710] usb 5-1: [ueagle-atm] ADSL device founded vid (0X1039) pid (0X2101) Rev (0X2581): Eagle I [ 420.663677][ T5710] usb 5-1: [ueagle-atm] pre-firmware device, uploading firmware [ 420.663781][ T5710] usb 5-1: [ueagle-atm] loading firmware ueagle-atm/eagleI.fw [ 420.688658][ T43] usb 5-1: Direct firmware load for ueagle-atm/eagleI.fw failed with error -2 [ 420.688722][ T43] usb 5-1: Falling back to sysfs fallback for: ueagle-atm/eagleI.fw [ 420.740790][ T5710] usb 5-1: USB disconnect, device number 69 [ 420.794177][ T5710] usb 5-1: [ueagle-atm] ADSL device removed [ 420.925569][ T43] ================================================================== [ 420.925588][ T43] BUG: KASAN: slab-use-after-free in kernfs_new_node+0x120/0x210 [ 420.925629][ T43] Read of size 4 at addr ffff88803450df00 by task kworker/1:1/43 [ 420.925651][ T43] [ 420.925669][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 420.925701][ T43] Tainted: [L]=SOFTLOCKUP [ 420.925711][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.925727][ T43] Workqueue: events request_firmware_work_func [ 420.925762][ T43] Call Trace: [ 420.925772][ T43] [ 420.925782][ T43] dump_stack_lvl+0xe8/0x150 [ 420.925814][ T43] print_address_description+0x55/0x1e0 [ 420.925847][ T43] ? kernfs_new_node+0x120/0x210 [ 420.925876][ T43] print_report+0x58/0x70 [ 420.925905][ T43] kasan_report+0x117/0x150 [ 420.925939][ T43] ? kernfs_root+0x1c/0x230 [ 420.925969][ T43] ? kernfs_new_node+0x120/0x210 [ 420.926005][ T43] kasan_check_range+0x264/0x2c0 [ 420.926041][ T43] kernfs_new_node+0x120/0x210 [ 420.926073][ T43] kernfs_create_dir_ns+0x44/0x130 [ 420.926107][ T43] sysfs_create_dir_ns+0x12f/0x2a0 [ 420.926136][ T43] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 420.926169][ T43] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 420.926207][ T43] ? rt_spin_unlock+0x160/0x200 [ 420.926239][ T43] kobject_add_internal+0x631/0xd10 [ 420.926272][ T43] kobject_add+0x163/0x240 [ 420.926302][ T43] ? __pfx_kobject_add+0x10/0x10 [ 420.926331][ T43] ? kobject_init+0x83/0x1e0 [ 420.926358][ T43] get_device_parent+0x31d/0x3a0 [ 420.926393][ T43] device_add+0x2e1/0xb90 [ 420.926427][ T43] firmware_fallback_sysfs+0x2e4/0xa30 [ 420.926459][ T43] ? kfree+0x1c5/0x6c0 [ 420.926490][ T43] _request_firmware+0x1052/0x1780 [ 420.926527][ T43] ? __pfx__request_firmware+0x10/0x10 [ 420.926553][ T43] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 420.926588][ T43] ? process_one_work+0x8be/0x1630 [ 420.926620][ T43] ? process_one_work+0x8be/0x1630 [ 420.926651][ T43] request_firmware_work_func+0xba/0x2e0 [ 420.926684][ T43] ? process_one_work+0x8be/0x1630 [ 420.926714][ T43] process_one_work+0x98b/0x1630 [ 420.926755][ T43] ? __pfx_process_one_work+0x10/0x10 [ 420.926784][ T43] ? do_raw_spin_lock+0x12b/0x2f0 [ 420.926825][ T43] worker_thread+0xb49/0x1140 [ 420.926862][ T43] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.926907][ T43] kthread+0x388/0x470 [ 420.926932][ T43] ? __pfx_worker_thread+0x10/0x10 [ 420.926963][ T43] ? __pfx_kthread+0x10/0x10 [ 420.926993][ T43] ret_from_fork+0x514/0xb70 [ 420.927023][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 420.927050][ T43] ? __switch_to+0xc79/0x1410 [ 420.927089][ T43] ? __pfx_kthread+0x10/0x10 [ 420.927114][ T43] ret_from_fork_asm+0x1a/0x30 [ 420.927155][ T43] [ 420.927164][ T43] [ 420.927170][ T43] Allocated by task 5710: [ 420.927183][ T43] kasan_save_track+0x3e/0x80 [ 420.927224][ T43] __kasan_slab_alloc+0x6c/0x80 [ 420.927254][ T43] kmem_cache_alloc_noprof+0x33b/0x680 [ 420.927283][ T43] __kernfs_new_node+0xea/0x980 [ 420.927309][ T43] kernfs_new_node+0x102/0x210 [ 420.927338][ T43] kernfs_create_dir_ns+0x44/0x130 [ 420.927368][ T43] sysfs_create_dir_ns+0x12f/0x2a0 [ 420.927392][ T43] kobject_add_internal+0x631/0xd10 [ 420.927420][ T43] kobject_add+0x163/0x240 [ 420.927444][ T43] device_add+0x408/0xb90 [ 420.927470][ T43] usb_new_device+0x9f8/0x16e0 [ 420.927491][ T43] hub_event+0x2a49/0x4f60 [ 420.927515][ T43] process_one_work+0x98b/0x1630 [ 420.927542][ T43] worker_thread+0xb49/0x1140 [ 420.927570][ T43] kthread+0x388/0x470 [ 420.927588][ T43] ret_from_fork+0x514/0xb70 [ 420.927610][ T43] ret_from_fork_asm+0x1a/0x30 [ 420.927637][ T43] [ 420.927643][ T43] Freed by task 21: [ 420.927654][ T43] kasan_save_track+0x3e/0x80 [ 420.927679][ T43] kasan_save_free_info+0x46/0x50 [ 420.927701][ T43] __kasan_slab_free+0x5c/0x80 [ 420.927730][ T43] kmem_cache_free+0x187/0x6c0 [ 420.927760][ T43] rcu_cpu_kthread+0x99e/0x1470 [ 420.927782][ T43] smpboot_thread_fn+0x541/0xa50 [ 420.927815][ T43] kthread+0x388/0x470 [ 420.927836][ T43] ret_from_fork+0x514/0xb70 [ 420.927860][ T43] ret_from_fork_asm+0x1a/0x30 [ 420.927889][ T43] [ 420.927894][ T43] Last potentially related work creation: [ 420.927904][ T43] kasan_save_stack+0x3e/0x60 [ 420.927931][ T43] kasan_record_aux_stack+0xbd/0xd0 [ 420.927953][ T43] call_rcu+0xee/0x890 [ 420.927972][ T43] kernfs_put+0x25c/0x700 [ 420.928000][ T43] evict+0x61e/0xb10 [ 420.928029][ T43] __dentry_kill+0x1a2/0x690 [ 420.928063][ T43] finish_dput+0xc9/0x480 [ 420.928088][ T43] lookup_fast+0x3cb/0x5b0 [ 420.928116][ T43] link_path_walk+0x720/0x18d0 [ 420.928141][ T43] path_openat+0x2d5/0x38a0 [ 420.928171][ T43] do_file_open+0x23e/0x4a0 [ 420.928213][ T43] do_sys_openat2+0x113/0x200 [ 420.928238][ T43] __x64_sys_openat+0x138/0x170 [ 420.928262][ T43] do_syscall_64+0x15f/0xf80 [ 420.928283][ T43] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.928305][ T43] [ 420.928310][ T43] The buggy address belongs to the object at ffff88803450df00 [ 420.928310][ T43] which belongs to the cache kernfs_node_cache of size 176 [ 420.928333][ T43] The buggy address is located 0 bytes inside of [ 420.928333][ T43] freed 176-byte region [ffff88803450df00, ffff88803450dfb0) [ 420.928357][ T43] [ 420.928363][ T43] The buggy address belongs to the physical page: [ 420.928388][ T43] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3450d [ 420.928411][ T43] flags: 0x80000000000000(node=0|zone=1) [ 420.928429][ T43] page_type: f5(slab) [ 420.928451][ T43] raw: 0080000000000000 ffff88801bec8a00 dead000000000100 dead000000000122 [ 420.928474][ T43] raw: 0000000000000000 0000000800110011 00000000f5000000 0000000000000000 [ 420.928486][ T43] page dumped because: kasan: bad access detected [ 420.928498][ T43] page_owner tracks the page as allocated [ 420.928506][ T43] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 9036, tgid 9036 (syz-executor), ts 281929657701, free_ts 280842760098 [ 420.928547][ T43] post_alloc_hook+0x1f9/0x250 [ 420.928577][ T43] get_page_from_freelist+0x27d6/0x2850 [ 420.928611][ T43] __alloc_frozen_pages_noprof+0x18d/0x380 [ 420.928646][ T43] allocate_slab+0x74/0x5e0 [ 420.928669][ T43] refill_objects+0x33c/0x3d0 [ 420.928691][ T43] __pcs_replace_empty_main+0x373/0x720 [ 420.928716][ T43] kmem_cache_alloc_noprof+0x433/0x680 [ 420.928746][ T43] __kernfs_new_node+0xea/0x980 [ 420.928774][ T43] kernfs_new_node+0x102/0x210 [ 420.928801][ T43] __kernfs_create_file+0x4b/0x2e0 [ 420.928835][ T43] sysfs_add_file_mode_ns+0x238/0x300 [ 420.928856][ T43] internal_create_group+0x673/0x1180 [ 420.928884][ T43] sysfs_create_groups+0x59/0x120 [ 420.928912][ T43] device_add_attrs+0x1bf/0x5d0 [ 420.928942][ T43] device_add+0x496/0xb90 [ 420.928969][ T43] netdev_register_kobject+0x178/0x310 [ 420.929000][ T43] page last free pid 29 tgid 29 stack trace: [ 420.929014][ T43] __free_frozen_pages+0x1075/0x11b0 [ 420.929045][ T43] tlb_remove_table_rcu+0x85/0x100 [ 420.929067][ T43] rcu_cpu_kthread+0x99e/0x1470 [ 420.929088][ T43] smpboot_thread_fn+0x541/0xa50 [ 420.929119][ T43] kthread+0x388/0x470 [ 420.929139][ T43] ret_from_fork+0x514/0xb70 [ 420.929161][ T43] ret_from_fork_asm+0x1a/0x30 [ 420.929191][ T43] [ 420.929196][ T43] Memory state around the buggy address: [ 420.929217][ T43] ffff88803450de00: fc fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.929232][ T43] ffff88803450de80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 420.929248][ T43] >ffff88803450df00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 420.929260][ T43] ^ [ 420.929272][ T43] ffff88803450df80: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 420.929287][ T43] ffff88803450e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 420.929300][ T43] ================================================================== [ 420.971429][ T43] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 420.971507][ T43] CPU: 1 UID: 0 PID: 43 Comm: kworker/1:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 420.971590][ T43] Tainted: [L]=SOFTLOCKUP [ 420.971624][ T43] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 420.971661][ T43] Workqueue: events request_firmware_work_func [ 420.971739][ T43] Call Trace: [ 420.971763][ T43] [ 420.971794][ T43] vpanic+0x56c/0xa60 [ 420.971894][ T43] ? __pfx_vpanic+0x10/0x10 [ 420.971990][ T43] panic+0xc5/0xd0 [ 420.972036][ T43] ? __pfx_panic+0x10/0x10 [ 420.972107][ T43] ? preempt_schedule_thunk+0x16/0x40 [ 420.972215][ T43] ? kernfs_new_node+0x120/0x210 [ 420.972244][ T43] ? preempt_schedule_thunk+0x16/0x40 [ 420.972281][ T43] ? kernfs_new_node+0x120/0x210 [ 420.972310][ T43] check_panic_on_warn+0x89/0xb0 [ 420.972336][ T43] ? kernfs_new_node+0x120/0x210 [ 420.972402][ T43] end_report+0x73/0x170 [ 420.972501][ T43] ? kernfs_new_node+0x120/0x210 [ 420.972579][ T43] kasan_report+0x128/0x150 [ 420.972659][ T43] ? kernfs_root+0x1c/0x230 [ 420.972746][ T43] ? kernfs_new_node+0x120/0x210 [ 420.972828][ T43] kasan_check_range+0x264/0x2c0 [ 420.972919][ T43] kernfs_new_node+0x120/0x210 [ 420.973021][ T43] kernfs_create_dir_ns+0x44/0x130 [ 420.973117][ T43] sysfs_create_dir_ns+0x12f/0x2a0 [ 420.973203][ T43] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 420.973283][ T43] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 420.973367][ T43] ? rt_spin_unlock+0x160/0x200 [ 420.973452][ T43] kobject_add_internal+0x631/0xd10 [ 420.973549][ T43] kobject_add+0x163/0x240 [ 420.973629][ T43] ? __pfx_kobject_add+0x10/0x10 [ 420.973681][ T43] ? kobject_init+0x83/0x1e0 [ 420.973759][ T43] get_device_parent+0x31d/0x3a0 [ 420.973850][ T43] device_add+0x2e1/0xb90 [ 420.973946][ T43] firmware_fallback_sysfs+0x2e4/0xa30 [ 420.974027][ T43] ? kfree+0x1c5/0x6c0 [ 420.974113][ T43] _request_firmware+0x1052/0x1780 [ 420.974223][ T43] ? __pfx__request_firmware+0x10/0x10 [ 420.974299][ T43] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 420.974397][ T43] ? process_one_work+0x8be/0x1630 [ 420.974477][ T43] ? process_one_work+0x8be/0x1630 [ 420.974565][ T43] request_firmware_work_func+0xba/0x2e0 [ 420.974661][ T43] ? process_one_work+0x8be/0x1630 [ 420.974740][ T43] process_one_work+0x98b/0x1630 [ 420.974853][ T43] ? __pfx_process_one_work+0x10/0x10 [ 420.974935][ T43] ? do_raw_spin_lock+0x12b/0x2f0 [ 420.974977][ T43] worker_thread+0xb49/0x1140 [ 420.975012][ T43] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.975053][ T43] kthread+0x388/0x470 [ 420.975075][ T43] ? __pfx_worker_thread+0x10/0x10 [ 420.975104][ T43] ? __pfx_kthread+0x10/0x10 [ 420.975126][ T43] ret_from_fork+0x514/0xb70 [ 420.975153][ T43] ? __pfx_ret_from_fork+0x10/0x10 [ 420.975178][ T43] ? __switch_to+0xc79/0x1410 [ 420.975221][ T43] ? __pfx_kthread+0x10/0x10 [ 420.975243][ T43] ret_from_fork_asm+0x1a/0x30 [ 420.975280][ T43] [ 420.975909][ T43] Kernel Offset: disabled