last executing test programs: 7.126873368s ago: executing program 4 (id=1015): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xe}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x101}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001bc0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff3, 0x8}, {0xffff, 0xffff}, {0x0, 0xf}}}, 0x24}}, 0x20044000) 6.903002921s ago: executing program 4 (id=1020): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@broadcast, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "dd690b", 0x44, 0x2f, 0x0, @private0={0xfc, 0x0, '\x00', 0x2}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8848}}}}}}}, 0x0) 6.643659277s ago: executing program 4 (id=1025): socket$packet(0x11, 0x2, 0x300) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_batadv\x00', 0x0}) sendto$packet(r1, &(0x7f0000000740)=' ', 0x1, 0x20008801, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000200)=0x102, 0x4) recvmmsg(r0, &(0x7f0000001880)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 5.433816928s ago: executing program 3 (id=1029): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00') setns(r0, 0x18000000) 5.099185566s ago: executing program 0 (id=1030): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="cf0400000000f90000001300000008000300", @ANYRES32=r3, @ANYBLOB="0600b500c90200000400130006001200000000000a000600ffffffffffff00000500e4000000000014001300a4962401c80498a46c892802046c60010a000600080211000000000006001a0103"], 0x74}}, 0x48040) 5.098784843s ago: executing program 1 (id=1031): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000000000e50008001e80"], 0x24}}, 0x0) 5.098615658s ago: executing program 4 (id=1032): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000008c0)=ANY=[@ANYBLOB="12010000124d5240e316e9f958000000000109021b00010000000009047800018fa68d0009058a", @ANYRES64=r0], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x40, 0x1e5782) 4.953561949s ago: executing program 3 (id=1034): r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r0, 0x541b, &(0x7f0000000300)={0xffffffffffffffff}) 4.9035592s ago: executing program 0 (id=1035): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x101403, 0x0) lseek(r0, 0x477da6ed, 0x1) 4.902726399s ago: executing program 1 (id=1036): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x280a01, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 4.815918619s ago: executing program 3 (id=1037): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000440)="723fa9dbdd5e", 0x6}, {&(0x7f0000000080)="b575682a", 0x4}], 0x2) 4.715126023s ago: executing program 2 (id=1038): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sendmsg$inet(r4, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 4.714902352s ago: executing program 0 (id=1039): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) chdir(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) 4.662616972s ago: executing program 3 (id=1040): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x103102, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0xa, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000440)={0xdddd0000, 0x10000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaa"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.518602923s ago: executing program 1 (id=1041): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) unshare(0x2c020400) msgget$private(0x0, 0x240) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgrcv(0x0, &(0x7f00000004c0)={0x0, ""/4}, 0x2000, 0xffffff7f00000000, 0x3000) 4.307055347s ago: executing program 0 (id=1042): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10000, 0x100000, 0x8, 0x1, 0x0, 0x0, 0x3, 0x20}, {0x4000, 0x2000, 0x3, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8}, {0x3000, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x3, 0x84, 0x4}, {0x10000, 0xffff1000, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x2000, 0xe, 0x2, 0xfe, 0x10, 0x6, 0x1, 0x1, 0x8, 0x4, 0x6}, {0x0, 0x8000000, 0x0, 0x0, 0x5, 0xfd, 0xfc, 0x0, 0x0, 0xd}, {0xe000, 0x5000, 0xa, 0x0, 0x80, 0xf9, 0x0, 0x7, 0x3a, 0x2}, {0xeeee0000, 0x3000, 0x0, 0x2, 0x0, 0x54, 0x7, 0xfc, 0x4, 0x0, 0x0, 0x5}, {0xdddd0000, 0x401}, {0x5000}, 0xddf8ffdb, 0x0, 0x0, 0x730, 0x8, 0x8000, 0x2000, [0xff, 0x0, 0x2]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000001280)={0x0, 0xdddd0000, 0x2, 0x5, 0x50}) 3.498859684s ago: executing program 1 (id=1043): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002400)={0x2020, 0x0, 0x0}, 0xfffffeef) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, r1, {0x7, 0x9, 0x3, 0x8695c381389adf0f, 0x0, 0xfffc, 0xbad, 0x4, 0x0, 0x0, 0x0, 0x80000}}, 0x50) utimensat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f000000b1c0)="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", 0x2000, &(0x7f000000d8c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x4, 0xfffffffc, 0x0, {0x0, 0x4000000, 0x0, 0x0, 0x4, 0x0, 0x0, 0xb7f5, 0xfffffe01, 0x8000, 0xfff, 0x0, 0xee00, 0x0, 0xc3fa}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.378865661s ago: executing program 2 (id=1044): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) r2 = dup2(r1, r0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, './file1\x00'}, 0x6e) 3.375762279s ago: executing program 3 (id=1045): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x0) 3.147111785s ago: executing program 2 (id=1046): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x88f5}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}]]}, 0x38}}, 0x0) 3.122990438s ago: executing program 1 (id=1047): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="1802000000200000000000000000000085000000070000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc0, &(0x7f00000020c0)=""/192, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r2, 0x25, 0x2}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000011c0)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x0) 3.040153436s ago: executing program 2 (id=1048): keyctl$update(0x2, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f00000000c0)={'wlan1\x00', {0x2, 0x4e26, @rand_addr=0x64010100}}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000080)={'wlan1\x00', {0x2, 0x4001, @empty}}) 2.955020082s ago: executing program 3 (id=1049): syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x2d, 0x3d, 0xb, 0x10, 0x46d, 0xa0e, 0x38d9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0xda, 0xf6, 0x90, 0x7e, [{{0x9, 0x4, 0x87, 0x1, 0x4, 0x3, 0x0, 0x0, 0x59, [], [{{0x9, 0x5, 0xc, 0x3, 0x8, 0xe, 0x59, 0xfb, [@generic={0x10, 0x21, "548e2177258e0151420d1b340b0f"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x20, 0x5, 0x82, 0x5}}, {{0x9, 0x5, 0x9, 0x10, 0x40, 0x2, 0x9d, 0x29}}, {{0x9, 0x5, 0x8c, 0x3, 0x200, 0x4, 0x7, 0x92}}]}}]}}]}}, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 2.954843232s ago: executing program 0 (id=1050): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000e94c1fbdb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x14a80, 0x10, 0x38, &(0x7f00000002c0)="24006f20a01c2500", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.688573425s ago: executing program 0 (id=1051): memfd_create(&(0x7f0000000180)='\b\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aWpA\xd4\x98\x85K\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/m\xdf\xb6]\xc2\xaa\x86\xec(\xf7\xcd\xa6\xd9n^.\x13*\xd4\xb8\xe8\xc4\xefb\x14Vx\xc6\xfe\x9e\xee\xe7\xd7E\xe9\t\x83\xdeNX\xec\xe66\x1b\x97$\xee\x84\x14n,B\xd5?\xe5E:+Pm\x1d\xb4\xb8\xeb\xe8Op2\x82\xc7\x0e\x97\x03\xef\x1a\xa5\x00.\x89\b!m\f\xd9\x8b$}\x9f\fX\x81\xa8\xf6\x94\xbc\xed\x80|l]\xe9\xca\xd3\xc9\xa3\x9e\x9cJI\xf1\xa2\xa0\xc4:\x00\x00\x00\x00\x00\x00\b\x00\x00', 0x6) r0 = syz_usb_connect$uac1(0x0, 0xdc, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206"], 0x0) syz_usb_control_io(r0, &(0x7f0000001bc0)={0x2c, 0x0, &(0x7f0000000980)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2409}}}, &(0x7f0000000600)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x83, 0x2, "0afe"}, &(0x7f00000004c0)={0x20, 0x84, 0x2, "e4fa"}, &(0x7f0000000500)={0x20, 0x85, 0x3, "bf5071"}}) syz_usb_connect$uac1(0x3, 0xea, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd8, 0x3, 0x1, 0x80, 0x40, 0x3, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8a0, 0x5}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x301, 0x2, 0x1, 0x6}, @extension_unit={0x7, 0x24, 0x8, 0x4, 0x3, 0x3}, @processing_unit={0x9, 0x24, 0x7, 0x8, 0x3, 0xc, "a4a6"}, @extension_unit={0xc, 0x24, 0x8, 0x6, 0x7ff, 0x2, "4134cc925b"}, @mixer_unit={0xa, 0x24, 0x4, 0x1, 0x5, "a2c0ddc9cd"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xe, 0x77d, 0xd}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x9, 0xfffa, 0x3}, @as_header={0x7, 0x24, 0x1, 0x5, 0x7, 0x4}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xf4, 0x3, 0xb4, 0x4, '-'}, @format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x8, 0x3, 0x2, 0xa1}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x6, 0x7, 0x3, {0x7, 0x25, 0x1, 0x82, 0x4, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0xb, 0x0, 0x4, "23d3"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x469, 0x5, 0x84}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x6, 0x200, 0x1, 'f\\?'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7, 0x8, 0xd, {0x7, 0x25, 0x1, 0x82, 0x7, 0x3}}}}}}}]}}, &(0x7f0000000940)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x40, 0xfe, 0x7, 0xbc, 0x40, 0x8}, 0x118, &(0x7f00000007c0)={0x5, 0xf, 0x118, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x9, 0x8, 0x230}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0xb, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x4, 0x4}, @generic={0xfe, 0x10, 0x3, "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"}]}, 0x2, [{0xe8, &(0x7f00000009c0)=@string={0xe8, 0x3, "9e12b407b0d753af451d65de91a8d25b1688ae3cfa40d8cd621c577ad1af8d2031e90f03f6153f41b29faca2b584e431d81ef206b2c13e8b3fd70b46d024eb9fc89dc71d369009b4ed6d678857b0da0283ae5418bf2232e0eba32c4a6e23bb433e5a14cff89c9bc75db04d82b6fca789fe760068125f5bad0558f72ae0e9f95ece94186f8fb501f7687f50e879ff19c27e19e96adea25afcdc5ce5457ae840f603757c9f2bdc27127c6711b727b1dc6bc226c27c22dc0b8a18affd58619ed48856e584a99140566a8ac2b3b73f50c2403dc83e45949bb0b1da0f376b88b33951f6ed7b43c639"}}, {0x1a, &(0x7f0000000900)=@string={0x1a, 0x3, "c71d18ae0d44b6314920c63a7fbdfa399e6890f1e9c777a6"}}]}) 1.969673023s ago: executing program 4 (id=1052): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc8c77000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="d80100001c0001"], 0x1d8}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000180)=0x2, 0x4) lseek(r0, 0x1000000, 0x0) 1.942091128s ago: executing program 1 (id=1053): syz_clone(0xc800411, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, 0x0) socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2, 0x0, 0x0) setsockopt$packet_fanout_data(r3, 0x107, 0x16, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) sendmsg$sock(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 1.921152169s ago: executing program 2 (id=1054): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000008080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8810) poll(&(0x7f0000000000)=[{r4, 0x402}], 0x1, 0x2) 307.630663ms ago: executing program 2 (id=1055): syz_open_procfs$pagemap(0x0, &(0x7f0000000140)) socket(0x10, 0x2, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000001080), 0x40000, 0x0) socket$kcm(0x21, 0x2, 0x2) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @tick=0x2, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @ext={0x0, 0x0}}], 0x38) syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r3, @ANYRES16=r0], 0x0) 0s ago: executing program 4 (id=1056): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)={0x18, 0x1, 0x2, 0x401, 0x0, 0x0, {0x2}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0xce084) kernel console output (not intermixed with test programs): T24] usb 4-1: Manufacturer: syz [ 366.300252][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.322987][ T24] usb 4-1: SerialNumber: syz [ 366.329414][ T10] usb 2-1: Product: syz [ 366.350794][ T8601] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 366.364873][ T24] hso 4-1:6.0: Can't find BULK OUT endpoint [ 366.370667][ T10] usb 2-1: Manufacturer: syz [ 366.380855][ T10] usb 2-1: SerialNumber: syz [ 366.472297][ T10] usb 2-1: config 0 descriptor?? [ 366.477825][ T8619] netlink: 8 bytes leftover after parsing attributes in process `syz.4.616'. [ 366.512732][ T10] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 366.564369][ T10] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 366.600235][ T5830] usb 4-1: USB disconnect, device number 19 [ 366.723762][ T977] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 366.759179][ T8627] siw: device registration error -23 [ 367.009203][ T977] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 367.019709][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.031509][ T977] usb 5-1: Product: syz [ 367.036659][ T977] usb 5-1: Manufacturer: syz [ 367.041558][ T977] usb 5-1: SerialNumber: syz [ 367.064360][ T977] usb 5-1: config 0 descriptor?? [ 367.120673][ T8608] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.313455][ T8608] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.335345][ T10] em28xx 2-1:0.0: unknown em28xx chip ID (86) [ 367.420618][ T8632] FAULT_INJECTION: forcing a failure. [ 367.420618][ T8632] name failslab, interval 1, probability 0, space 0, times 0 [ 367.433420][ T8632] CPU: 1 UID: 0 PID: 8632 Comm: syz.0.619 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 367.433445][ T8632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.433454][ T8632] Call Trace: [ 367.433462][ T8632] [ 367.433470][ T8632] dump_stack_lvl+0x189/0x250 [ 367.433502][ T8632] ? __pfx____ratelimit+0x10/0x10 [ 367.433524][ T8632] ? __pfx_dump_stack_lvl+0x10/0x10 [ 367.433550][ T8632] ? __pfx__printk+0x10/0x10 [ 367.433575][ T8632] ? __pfx___might_resched+0x10/0x10 [ 367.433602][ T8632] should_fail_ex+0x414/0x560 [ 367.433632][ T8632] should_failslab+0xa8/0x100 [ 367.433655][ T8632] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 367.433676][ T8632] ? __alloc_skb+0x112/0x2d0 [ 367.433705][ T8632] __alloc_skb+0x112/0x2d0 [ 367.433734][ T8632] netlink_sendmsg+0x5c6/0xb30 [ 367.433757][ T8632] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.433790][ T8632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.433826][ T8632] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 367.433845][ T8632] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.433872][ T8632] __sock_sendmsg+0x219/0x270 [ 367.433898][ T8632] ____sys_sendmsg+0x505/0x830 [ 367.433924][ T8632] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.433952][ T8632] ? import_iovec+0x74/0xa0 [ 367.433976][ T8632] ___sys_sendmsg+0x21f/0x2a0 [ 367.434006][ T8632] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.434020][ T8632] ? preempt_schedule_common+0x83/0xd0 [ 367.434079][ T8632] ? __fget_files+0x2a/0x420 [ 367.434100][ T8632] ? __fget_files+0x3a0/0x420 [ 367.434133][ T8632] __x64_sys_sendmsg+0x19b/0x260 [ 367.434155][ T8632] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.434183][ T8632] ? __pfx_ksys_write+0x10/0x10 [ 367.434198][ T8632] ? rcu_is_watching+0x15/0xb0 [ 367.434227][ T8632] ? do_syscall_64+0xbe/0x3b0 [ 367.434252][ T8632] do_syscall_64+0xfa/0x3b0 [ 367.434281][ T8632] ? lockdep_hardirqs_on+0x9c/0x150 [ 367.434301][ T8632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.434319][ T8632] ? clear_bhb_loop+0x60/0xb0 [ 367.434342][ T8632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.434359][ T8632] RIP: 0033:0x7efe46d8e969 [ 367.434376][ T8632] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.434392][ T8632] RSP: 002b:00007efe47b2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.434412][ T8632] RAX: ffffffffffffffda RBX: 00007efe46fb6160 RCX: 00007efe46d8e969 [ 367.434425][ T8632] RDX: 0000000000004000 RSI: 0000200000000140 RDI: 0000000000000005 [ 367.434437][ T8632] RBP: 00007efe47b2d090 R08: 0000000000000000 R09: 0000000000000000 [ 367.434448][ T8632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.434458][ T8632] R13: 0000000000000000 R14: 00007efe46fb6160 R15: 00007fffd04e9038 [ 367.434488][ T8632] [ 368.204728][ T10] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 368.229156][ T10] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 368.249791][ T10] em28xx 2-1:0.0: No AC97 audio processor [ 368.279812][ T10] usb 2-1: USB disconnect, device number 18 [ 368.288968][ T10] em28xx 2-1:0.0: Disconnecting em28xx [ 368.296900][ T10] em28xx 2-1:0.0: Freeing device [ 368.437097][ T8634] FAULT_INJECTION: forcing a failure. [ 368.437097][ T8634] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.450262][ T8634] CPU: 0 UID: 0 PID: 8634 Comm: syz.0.620 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 368.450278][ T8634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.450285][ T8634] Call Trace: [ 368.450290][ T8634] [ 368.450295][ T8634] dump_stack_lvl+0x189/0x250 [ 368.450316][ T8634] ? __pfx____ratelimit+0x10/0x10 [ 368.450330][ T8634] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.450344][ T8634] ? __pfx__printk+0x10/0x10 [ 368.450362][ T8634] should_fail_ex+0x414/0x560 [ 368.450379][ T8634] strncpy_from_user+0x36/0x290 [ 368.450394][ T8634] getname_flags+0xf3/0x540 [ 368.450410][ T8634] __x64_sys_unlink+0x3a/0x50 [ 368.450420][ T8634] do_syscall_64+0xfa/0x3b0 [ 368.450432][ T8634] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.450444][ T8634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.450455][ T8634] ? clear_bhb_loop+0x60/0xb0 [ 368.450468][ T8634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.450478][ T8634] RIP: 0033:0x7efe46d8e969 [ 368.450489][ T8634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.450498][ T8634] RSP: 002b:00007efe47b6f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 368.450512][ T8634] RAX: ffffffffffffffda RBX: 00007efe46fb5fa0 RCX: 00007efe46d8e969 [ 368.450520][ T8634] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000040 [ 368.450528][ T8634] RBP: 00007efe47b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 368.450534][ T8634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.450541][ T8634] R13: 0000000000000000 R14: 00007efe46fb5fa0 R15: 00007fffd04e9038 [ 368.450558][ T8634] [ 368.671883][ T9] usb 5-1: USB disconnect, device number 14 [ 369.313131][ T10] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 369.538969][ T9] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 369.563702][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 369.743568][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 369.764994][ T10] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 370.564943][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.577328][ T10] usb 3-1: config 0 descriptor?? [ 370.586184][ T10] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 370.592834][ T10] dvb-usb: bulk message failed: -22 (3/0) [ 370.603049][ T8653] usb usb8: usbfs: process 8653 (syz.4.623) did not claim interface 0 before use [ 370.647050][ T10] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 370.671075][ T9] usb 1-1: config 0 has no interfaces? [ 370.694218][ T10] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 370.711883][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 370.725201][ T10] usb 3-1: media controller created [ 371.096005][ T8654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.637223][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.678668][ T8654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.768937][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.817116][ T9] usb 1-1: Product: syz [ 371.868301][ T9] usb 1-1: Manufacturer: syz [ 371.891428][ T9] usb 1-1: SerialNumber: syz [ 371.897984][ T10] dvb-usb: bulk message failed: -22 (6/0) [ 371.909215][ T10] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 372.154638][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 372.182071][ T9] usb 1-1: config 0 descriptor?? [ 372.242822][ T10] dvb-usb: schedule remote query interval to 150 msecs. [ 372.308826][ T10] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 372.401844][ T10] usb 3-1: USB disconnect, device number 25 [ 372.550956][ T977] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 372.600693][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 372.993404][ T8681] input: syz0 as /devices/virtual/input/input12 [ 373.121347][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 373.181762][ T9] usb 1-1: can't set config #0, error -71 [ 373.200731][ T977] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 373.203207][ T9] usb 1-1: USB disconnect, device number 26 [ 373.254312][ T977] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 373.329139][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 373.407244][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 373.464986][ T977] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 373.491628][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.518751][ T977] usb 4-1: Product: syz [ 373.532449][ T977] usb 4-1: Manufacturer: syz [ 373.547650][ T977] usb 4-1: SerialNumber: syz [ 373.570292][ T977] usb 4-1: config 0 descriptor?? [ 373.594916][ T8673] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 373.788121][ T8689] ptrace attach of "./syz-executor exec"[5827] was attempted by "@/Os\x07Wdg囐A?^v)&E$uBx:krZ*5y˫8 Prah%]hF|\x07M\x22AcFp0G$f>'yiYQcsۆX_dk۷\x5cה̥heU6C%,cTм2\x1b\x22!i?QOP$͚EV36ǻ]Oy20si\x1bKTjunCXV{T/նb2Ymz»(\x5c-\x07`!\x07mdu\x07t\x0a~0||yeH4Y~f$\x073Y;N-0i+YK\x1bsyأg\x0aвP7(+Q6f/ $)p\x09gp[\x0bEm\x09:gh,b2LiL\x5cjj?Bёw-fXP|JAD\x09S`G+zz1]2ʄ9r%)DjӘrx/\x09jbZl\x1b\x0d9J& aϝА:,T9>.kCM/3=KNlxɊaå|/Lc.j=_\x07F)t>oCM3#kS\x0czC~::&(T9$l3\x09un^IЉQ\x0aZe%t!.xR~plجׂjC'F ^ [ 374.023514][ T977] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 374.191457][ T977] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13 [ 374.263262][ T24] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 374.317890][ C1] powermate: config urb returned -71 [ 374.323629][ C1] powermate: config urb returned -71 [ 374.329622][ C1] powermate: config urb returned -71 [ 374.343156][ C1] powermate: config urb returned -71 [ 374.353540][ T977] usb 4-1: USB disconnect, device number 20 [ 374.446555][ T24] usb 3-1: config 0 has no interfaces? [ 374.491825][ T24] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 374.549428][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.559329][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.589767][ T24] usb 3-1: Product: syz [ 374.623126][ T24] usb 3-1: Manufacturer: syz [ 374.640235][ T8705] bond0: (slave rose0): Enslaving as an active interface with an up link [ 374.649293][ T24] usb 3-1: SerialNumber: syz [ 374.786176][ T24] usb 3-1: config 0 descriptor?? [ 374.886047][ T8713] FAULT_INJECTION: forcing a failure. [ 374.886047][ T8713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.899358][ T8713] CPU: 0 UID: 0 PID: 8713 Comm: syz.0.641 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 374.899383][ T8713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 374.899394][ T8713] Call Trace: [ 374.899402][ T8713] [ 374.899410][ T8713] dump_stack_lvl+0x189/0x250 [ 374.899441][ T8713] ? __pfx____ratelimit+0x10/0x10 [ 374.899464][ T8713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.899490][ T8713] ? __pfx__printk+0x10/0x10 [ 374.899524][ T8713] should_fail_ex+0x414/0x560 [ 374.899555][ T8713] _copy_from_user+0x2d/0xb0 [ 374.899576][ T8713] alg_setkey+0xb8/0x190 [ 374.899603][ T8713] alg_setsockopt+0x3da/0x4a0 [ 374.899626][ T8713] ? __pfx_alg_setsockopt+0x10/0x10 [ 374.899650][ T8713] do_sock_setsockopt+0x25a/0x3e0 [ 374.899682][ T8713] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 374.899715][ T8713] ? __fget_files+0x2a/0x420 [ 374.899746][ T8713] __x64_sys_setsockopt+0x18b/0x220 [ 374.899781][ T8713] do_syscall_64+0xfa/0x3b0 [ 374.899804][ T8713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.899821][ T8713] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 374.899838][ T8713] ? clear_bhb_loop+0x60/0xb0 [ 374.899861][ T8713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.899878][ T8713] RIP: 0033:0x7efe46d8e969 [ 374.899895][ T8713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.899910][ T8713] RSP: 002b:00007efe47b2d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 374.899931][ T8713] RAX: ffffffffffffffda RBX: 00007efe46fb6160 RCX: 00007efe46d8e969 [ 374.899943][ T8713] RDX: 0000000000000001 RSI: 0000000000000117 RDI: 0000000000000003 [ 374.899954][ T8713] RBP: 00007efe47b2d090 R08: 0000000000000018 R09: 0000000000000000 [ 374.899965][ T8713] R10: 0000200000000280 R11: 0000000000000246 R12: 0000000000000001 [ 374.899976][ T8713] R13: 0000000000000000 R14: 00007efe46fb6160 R15: 00007fffd04e9038 [ 374.900008][ T8713] [ 375.620021][ T8691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.633486][ T8691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.786820][ T8715] netlink: 28 bytes leftover after parsing attributes in process `syz.2.635'. [ 376.496073][ T8722] FAULT_INJECTION: forcing a failure. [ 376.496073][ T8722] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.509341][ T8722] CPU: 1 UID: 0 PID: 8722 Comm: syz.0.642 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 376.509366][ T8722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 376.509377][ T8722] Call Trace: [ 376.509385][ T8722] [ 376.509393][ T8722] dump_stack_lvl+0x189/0x250 [ 376.509425][ T8722] ? __pfx____ratelimit+0x10/0x10 [ 376.509449][ T8722] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.509474][ T8722] ? __pfx__printk+0x10/0x10 [ 376.509509][ T8722] should_fail_ex+0x414/0x560 [ 376.509539][ T8722] strncpy_from_user+0x36/0x290 [ 376.509566][ T8722] getname_flags+0xf3/0x540 [ 376.509594][ T8722] __x64_sys_execve+0x7a/0xb0 [ 376.509614][ T8722] do_syscall_64+0xfa/0x3b0 [ 376.509638][ T8722] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.509655][ T8722] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 376.509672][ T8722] ? clear_bhb_loop+0x60/0xb0 [ 376.509695][ T8722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.509712][ T8722] RIP: 0033:0x7efe46d8e969 [ 376.509730][ T8722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.509746][ T8722] RSP: 002b:00007efe47b2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 376.509766][ T8722] RAX: ffffffffffffffda RBX: 00007efe46fb6160 RCX: 00007efe46d8e969 [ 376.509780][ T8722] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 376.509791][ T8722] RBP: 00007efe47b2d090 R08: 0000000000000000 R09: 0000000000000000 [ 376.509802][ T8722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.509813][ T8722] R13: 0000000000000000 R14: 00007efe46fb6160 R15: 00007fffd04e9038 [ 376.509844][ T8722] [ 377.403269][ T8736] x_tables: ip_tables: osf match: only valid for protocol 6 [ 377.403475][ T24] usb 3-1: USB disconnect, device number 26 [ 378.629084][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.637410][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.089287][ T8756] lo speed is unknown, defaulting to 1000 [ 379.098283][ T8756] lo speed is unknown, defaulting to 1000 [ 379.105168][ T8756] lo speed is unknown, defaulting to 1000 [ 379.342521][ T8756] infiniband sz1: set down [ 379.347375][ T8756] infiniband sz1: added lo [ 379.580258][ T980] lo speed is unknown, defaulting to 1000 [ 379.646805][ T8756] RDS/IB: sz1: added [ 379.657868][ T8756] smc: adding ib device sz1 with port count 1 [ 379.664332][ T8756] smc: ib device sz1 port 1 has pnetid [ 379.846186][ T980] lo speed is unknown, defaulting to 1000 [ 379.903576][ T8756] lo speed is unknown, defaulting to 1000 [ 380.087074][ T8756] lo speed is unknown, defaulting to 1000 [ 380.226377][ T8756] lo speed is unknown, defaulting to 1000 [ 380.365617][ T8756] lo speed is unknown, defaulting to 1000 [ 380.503307][ T8756] lo speed is unknown, defaulting to 1000 [ 380.687763][ T8759] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 381.775070][ T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 382.013343][ T8774] FAULT_INJECTION: forcing a failure. [ 382.013343][ T8774] name failslab, interval 1, probability 0, space 0, times 0 [ 382.026149][ T8774] CPU: 1 UID: 0 PID: 8774 Comm: syz.2.654 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 382.026183][ T8774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.026194][ T8774] Call Trace: [ 382.026202][ T8774] [ 382.026210][ T8774] dump_stack_lvl+0x189/0x250 [ 382.026242][ T8774] ? __pfx____ratelimit+0x10/0x10 [ 382.026265][ T8774] ? __pfx_dump_stack_lvl+0x10/0x10 [ 382.026291][ T8774] ? __pfx__printk+0x10/0x10 [ 382.026317][ T8774] ? __pfx___might_resched+0x10/0x10 [ 382.026339][ T8774] ? fs_reclaim_acquire+0x7d/0x100 [ 382.026367][ T8774] should_fail_ex+0x414/0x560 [ 382.026397][ T8774] should_failslab+0xa8/0x100 [ 382.026419][ T8774] __kmalloc_noprof+0xcb/0x4f0 [ 382.026438][ T8774] ? bpf_test_init+0xc2/0x170 [ 382.026469][ T8774] bpf_test_init+0xc2/0x170 [ 382.026498][ T8774] bpf_prog_test_run_xdp+0x37c/0x1000 [ 382.026544][ T8774] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 382.026576][ T8774] ? __fget_files+0x2a/0x420 [ 382.026603][ T8774] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 382.026631][ T8774] bpf_prog_test_run+0x2c4/0x340 [ 382.026658][ T8774] __sys_bpf+0x4a4/0x860 [ 382.026681][ T8774] ? __pfx___sys_bpf+0x10/0x10 [ 382.026716][ T8774] ? ksys_write+0x22a/0x250 [ 382.026738][ T8774] ? __pfx_ksys_write+0x10/0x10 [ 382.026765][ T8774] __x64_sys_bpf+0x7c/0x90 [ 382.026784][ T8774] do_syscall_64+0xfa/0x3b0 [ 382.026808][ T8774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.026826][ T8774] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 382.026843][ T8774] ? clear_bhb_loop+0x60/0xb0 [ 382.026866][ T8774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.026883][ T8774] RIP: 0033:0x7fcf5ab8e969 [ 382.026901][ T8774] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.026915][ T8774] RSP: 002b:00007fcf5ba70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.026935][ T8774] RAX: ffffffffffffffda RBX: 00007fcf5adb6160 RCX: 00007fcf5ab8e969 [ 382.026948][ T8774] RDX: 0000000000000050 RSI: 0000200000000040 RDI: 000000000000000a [ 382.026960][ T8774] RBP: 00007fcf5ba70090 R08: 0000000000000000 R09: 0000000000000000 [ 382.026971][ T8774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.026982][ T8774] R13: 0000000000000000 R14: 00007fcf5adb6160 R15: 00007ffdcb745d98 [ 382.027014][ T8774] [ 382.510557][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 382.528666][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 382.588183][ T10] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 382.600263][ T10] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 382.693028][ T10] usb 1-1: Product: syz [ 382.697285][ T10] usb 1-1: Manufacturer: syz [ 382.701909][ T10] usb 1-1: SerialNumber: syz [ 382.744059][ T10] usb 1-1: config 0 descriptor?? [ 382.753542][ T8766] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 383.069835][ T10] usb 1-1: USB disconnect, device number 27 [ 383.268711][ T8789] overlayfs: failed to resolve './file1': -2 [ 386.394814][ T8825] FAULT_INJECTION: forcing a failure. [ 386.394814][ T8825] name failslab, interval 1, probability 0, space 0, times 0 [ 386.409280][ T8825] CPU: 1 UID: 0 PID: 8825 Comm: syz.4.664 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 386.409305][ T8825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.409316][ T8825] Call Trace: [ 386.409323][ T8825] [ 386.409331][ T8825] dump_stack_lvl+0x189/0x250 [ 386.409362][ T8825] ? __pfx____ratelimit+0x10/0x10 [ 386.409385][ T8825] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.409409][ T8825] ? __pfx__printk+0x10/0x10 [ 386.409434][ T8825] ? __pfx___might_resched+0x10/0x10 [ 386.409461][ T8825] should_fail_ex+0x414/0x560 [ 386.409490][ T8825] should_failslab+0xa8/0x100 [ 386.409511][ T8825] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 386.409530][ T8825] ? __alloc_skb+0x112/0x2d0 [ 386.409561][ T8825] __alloc_skb+0x112/0x2d0 [ 386.409591][ T8825] netlink_sendmsg+0x5c6/0xb30 [ 386.409627][ T8825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.409663][ T8825] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 386.409682][ T8825] ? __pfx_netlink_sendmsg+0x10/0x10 [ 386.409709][ T8825] __sock_sendmsg+0x219/0x270 [ 386.409735][ T8825] ____sys_sendmsg+0x505/0x830 [ 386.409761][ T8825] ? __pfx_____sys_sendmsg+0x10/0x10 [ 386.409791][ T8825] ? import_iovec+0x74/0xa0 [ 386.409814][ T8825] ___sys_sendmsg+0x21f/0x2a0 [ 386.409835][ T8825] ? __pfx____sys_sendmsg+0x10/0x10 [ 386.409896][ T8825] ? __fget_files+0x2a/0x420 [ 386.409917][ T8825] ? __fget_files+0x3a0/0x420 [ 386.409950][ T8825] __x64_sys_sendmsg+0x19b/0x260 [ 386.409972][ T8825] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 386.410001][ T8825] ? __pfx_ksys_write+0x10/0x10 [ 386.410017][ T8825] ? rcu_is_watching+0x15/0xb0 [ 386.410046][ T8825] ? do_syscall_64+0xbe/0x3b0 [ 386.410074][ T8825] do_syscall_64+0xfa/0x3b0 [ 386.410106][ T8825] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.410122][ T8825] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 386.410140][ T8825] ? clear_bhb_loop+0x60/0xb0 [ 386.410163][ T8825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.410181][ T8825] RIP: 0033:0x7f71c958e969 [ 386.410198][ T8825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.410214][ T8825] RSP: 002b:00007f71ca43b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 386.410235][ T8825] RAX: ffffffffffffffda RBX: 00007f71c97b5fa0 RCX: 00007f71c958e969 [ 386.410247][ T8825] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 000000000000000a [ 386.410258][ T8825] RBP: 00007f71ca43b090 R08: 0000000000000000 R09: 0000000000000000 [ 386.410270][ T8825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 386.410281][ T8825] R13: 0000000000000000 R14: 00007f71c97b5fa0 R15: 00007ffc0765ff28 [ 386.410313][ T8825] [ 386.861503][ T8830] netlink: 248 bytes leftover after parsing attributes in process `syz.4.665'. [ 387.225405][ T10] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 387.292280][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.668'. [ 387.322256][ T8845] sz1: rxe_newlink: already configured on lo [ 387.592339][ T10] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 387.612139][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.657975][ T10] usb 4-1: config 0 descriptor?? [ 388.032949][ T5830] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 388.040732][ T10] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 388.121183][ T8861] Bluetooth: hci0: load_link_keys: too big key_count value 49152 [ 388.154856][ T8865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 388.178519][ T10] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 388.196093][ T5830] usb 3-1: device descriptor read/64, error -71 [ 388.223930][ T10] [drm] Initialized udl on minor 2 [ 388.506911][ T5830] usb 3-1: new full-speed USB device number 28 using dummy_hcd [ 388.516394][ T30] audit: type=1800 audit(1748858907.598:53): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.663" name="bus" dev="overlay" ino=727 res=0 errno=0 [ 388.965820][ T5830] usb 3-1: device descriptor read/64, error -71 [ 392.644636][ T5830] usb usb3-port1: attempt power cycle [ 392.656002][ T10] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.672763][ T10] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 392.691171][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.704204][ T9] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 392.733671][ T9] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 392.753845][ T10] usb 4-1: USB disconnect, device number 21 [ 393.243574][ T5830] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 393.396317][ T5830] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 393.520414][ T5830] usb 3-1: Using ep0 maxpacket: 16 [ 393.590920][ T5830] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 394.384015][ T5830] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 394.415962][ T5830] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 394.443102][ T5830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.479839][ T5830] usb 3-1: Product: syz [ 394.502998][ T5830] usb 3-1: Manufacturer: syz [ 394.514791][ T5830] usb 3-1: SerialNumber: syz [ 394.542190][ T5830] usb 3-1: config 0 descriptor?? [ 394.565162][ T5830] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 394.581225][ T5830] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 395.077471][ T8913] netlink: 248 bytes leftover after parsing attributes in process `syz.3.680'. [ 395.172057][ T8882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.213922][ T8882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.254869][ T5830] em28xx 3-1:0.0: unknown em28xx chip ID (86) [ 395.467102][ T5830] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 395.518112][ T5830] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 395.534512][ T5830] em28xx 3-1:0.0: No AC97 audio processor [ 395.591616][ T5830] usb 3-1: USB disconnect, device number 30 [ 395.622266][ T5830] em28xx 3-1:0.0: Disconnecting em28xx [ 395.654813][ T5830] em28xx 3-1:0.0: Freeing device [ 396.692301][ T8937] netlink: 8 bytes leftover after parsing attributes in process `syz.0.685'. [ 396.972731][ T8937] netlink: 4 bytes leftover after parsing attributes in process `syz.0.685'. [ 397.507163][ T8946] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 398.553040][ T5830] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 399.351430][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 399.837211][ T5830] usb 1-1: unable to get BOS descriptor or descriptor too short [ 399.875379][ T5830] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 399.904442][ T5830] usb 1-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 399.968200][ T5830] usb 1-1: string descriptor 0 read error: -22 [ 399.983066][ T5830] usb 1-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a [ 400.270927][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.724970][ T8967] netlink: 248 bytes leftover after parsing attributes in process `syz.3.693'. [ 400.836874][ T5830] usb 1-1: USB disconnect, device number 28 [ 400.843312][ T977] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 400.996324][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 401.025150][ T977] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 401.037833][ T977] usb 3-1: config 179 has no interface number 0 [ 401.044544][ T24] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 401.090881][ T977] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 401.112957][ T977] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 401.147087][ T977] usb 3-1: config 179 interface 65 altsetting 12 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 401.173886][ T977] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 401.187717][ T977] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 401.232993][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 401.243133][ T977] usb 3-1: config 179 interface 65 has no altsetting 0 [ 401.261284][ T24] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 401.272996][ T977] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 401.292302][ T24] usb 2-1: config 1 has no interface number 1 [ 401.312566][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 401.325715][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.357608][ T24] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 401.378151][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.397394][ T977] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input14 [ 401.419192][ T24] usb 2-1: Product: syz [ 401.440763][ T24] usb 2-1: Manufacturer: ᷇긘䐍ㆶ⁉㫆뵿㧺梞쟩ꙷ [ 401.474198][ T24] usb 2-1: SerialNumber: syz [ 401.504374][ T5174] input input14: unable to receive magic message: -110 [ 401.512939][ T5830] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 401.551052][ T5174] input input14: unable to receive magic message: -32 [ 401.634043][ T5174] input input14: unable to receive magic message: -32 [ 401.719586][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 401.762435][ T5174] input input14: unable to receive magic message: -32 [ 401.853065][ T5830] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 401.876532][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 401.914912][ T24] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 402.063139][ T5830] usb 4-1: can't read configurations, error -22 [ 402.257217][ T24] usb 2-1: USB disconnect, device number 19 [ 402.300718][ T5174] input input14: unable to receive magic message: -32 [ 402.896131][ T8990] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 403.061887][ T5830] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 403.452418][ T5830] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 403.515189][ T5830] usb 4-1: can't read configurations, error -22 [ 403.576618][ T5830] usb usb4-port1: attempt power cycle [ 403.602654][ T5174] input input14: unable to receive magic message: -32 [ 403.706565][ T5174] input input14: unable to receive magic message: -32 [ 403.728860][ T8496] udevd[8496]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 403.773224][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -1 [ 403.963112][ T5830] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 404.037693][ T5830] usb 4-1: config index 0 descriptor too short (expected 9, got 0) [ 404.066426][ T5830] usb 4-1: can't read configurations, error -22 [ 404.084096][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 404.226294][ T977] usb 3-1: USB disconnect, device number 31 [ 404.232252][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 404.249714][ T977] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 404.263034][ T5830] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 404.392952][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 404.526427][ T9006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.699'. [ 404.973148][ T5830] usb 4-1: device descriptor read/8, error -71 [ 405.043000][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 405.113318][ T5830] usb usb4-port1: unable to enumerate USB device [ 405.183564][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.275105][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.978436][ T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 406.003882][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.038763][ T9] usb 5-1: config 0 descriptor?? [ 406.096033][ T9] hub 5-1:0.0: USB hub found [ 407.220417][ T9027] netlink: 248 bytes leftover after parsing attributes in process `syz.1.705'. [ 407.303748][ T9] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 407.430008][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 407.436470][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 407.529110][ T9] usb 5-1: USB disconnect, device number 15 [ 407.948899][ T9046] veth0_to_team: entered promiscuous mode [ 409.023040][ T5874] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 409.083987][ T9054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 409.198482][ T9055] netlink: 8 bytes leftover after parsing attributes in process `syz.1.710'. [ 409.396538][ T5874] usb 4-1: Using ep0 maxpacket: 16 [ 409.660786][ T5874] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 409.765449][ T5874] usb 4-1: config 0 has no interface number 0 [ 409.847346][ T9062] FAULT_INJECTION: forcing a failure. [ 409.847346][ T9062] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.861010][ T9062] CPU: 1 UID: 0 PID: 9062 Comm: syz.0.713 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 409.861036][ T9062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 409.861047][ T9062] Call Trace: [ 409.861055][ T9062] [ 409.861063][ T9062] dump_stack_lvl+0x189/0x250 [ 409.861095][ T9062] ? __pfx____ratelimit+0x10/0x10 [ 409.861118][ T9062] ? __pfx_dump_stack_lvl+0x10/0x10 [ 409.861145][ T9062] ? __pfx__printk+0x10/0x10 [ 409.861179][ T9062] should_fail_ex+0x414/0x560 [ 409.861209][ T9062] strncpy_from_user+0x36/0x290 [ 409.861236][ T9062] getname_flags+0xf3/0x540 [ 409.861265][ T9062] __x64_sys_execve+0x7a/0xb0 [ 409.861284][ T9062] do_syscall_64+0xfa/0x3b0 [ 409.861305][ T9062] ? lockdep_hardirqs_on+0x9c/0x150 [ 409.861326][ T9062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.861344][ T9062] ? clear_bhb_loop+0x60/0xb0 [ 409.861367][ T9062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.861385][ T9062] RIP: 0033:0x7efe46d8e969 [ 409.861402][ T9062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.861417][ T9062] RSP: 002b:00007efe47b2d038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 409.861439][ T9062] RAX: ffffffffffffffda RBX: 00007efe46fb6160 RCX: 00007efe46d8e969 [ 409.861452][ T9062] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 409.861464][ T9062] RBP: 00007efe47b2d090 R08: 0000000000000000 R09: 0000000000000000 [ 409.861475][ T9062] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 409.861486][ T9062] R13: 0000000000000000 R14: 00007efe46fb6160 R15: 00007fffd04e9038 [ 409.861517][ T9062] [ 410.048050][ T9062] affs: No valid root block on device nbd0 [ 410.182972][ T5874] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 410.272311][ T5874] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 410.348042][ T5874] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 410.649832][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.691497][ T9071] netlink: 452 bytes leftover after parsing attributes in process `syz.0.716'. [ 411.121703][ T5874] usb 4-1: config 0 descriptor?? [ 411.246339][ T5874] usb 4-1: can't set config #0, error -71 [ 411.314815][ T5874] usb 4-1: USB disconnect, device number 26 [ 411.412975][ T10] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 411.626351][ T10] usb 5-1: device descriptor read/64, error -71 [ 411.722583][ T9084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'. [ 412.092485][ T10] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 412.173964][ T9081] netlink: 28 bytes leftover after parsing attributes in process `syz.1.718'. [ 412.323076][ T10] usb 5-1: device descriptor read/64, error -71 [ 412.361130][ T9093] netlink: 248 bytes leftover after parsing attributes in process `syz.3.720'. [ 412.433488][ T10] usb usb5-port1: attempt power cycle [ 412.482981][ T24] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 412.683776][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 412.720822][ T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.763194][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 412.785717][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 412.805697][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 412.812930][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.855276][ T24] usb 1-1: Product: syz [ 412.868540][ T24] usb 1-1: Manufacturer: syz [ 412.946176][ T24] usb 1-1: SerialNumber: syz [ 413.193115][ T10] usb 5-1: device descriptor read/8, error -71 [ 413.413292][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 413.629174][ T24] usb 1-1: 0:2 : does not exist [ 413.668226][ T24] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 413.679078][ T10] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 413.702998][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 413.717273][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 413.772226][ T9111] affs: No valid root block on device nbd1 [ 414.336696][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 414.482086][ T10] usb 5-1: device descriptor read/8, error -71 [ 414.491455][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 414.506671][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.514951][ T9] usb 3-1: Product: syz [ 414.519155][ T9] usb 3-1: Manufacturer: syz [ 414.523842][ T9] usb 3-1: SerialNumber: syz [ 414.546151][ T9] usb 3-1: config 0 descriptor?? [ 414.566686][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 414.583190][ T24] usb 1-1: USB disconnect, device number 29 [ 414.603329][ T10] usb usb5-port1: unable to enumerate USB device [ 414.621295][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 414.834244][ T8409] udevd[8409]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 415.131722][ T9125] netlink: 452 bytes leftover after parsing attributes in process `syz.3.729'. [ 415.472444][ T9105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.510896][ T9105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.721068][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (86) [ 415.873256][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 416.033913][ T9131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 416.109676][ T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 416.363045][ T9] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 416.393132][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 416.423620][ T9] em28xx 3-1:0.0: No AC97 audio processor [ 416.436907][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.578949][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 416.613467][ T9] usb 3-1: USB disconnect, device number 32 [ 416.847411][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 416.977214][ T9141] FAULT_INJECTION: forcing a failure. [ 416.977214][ T9141] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 416.990400][ T9141] CPU: 1 UID: 0 PID: 9141 Comm: syz.3.732 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 416.990426][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 416.990437][ T9141] Call Trace: [ 416.990446][ T9141] [ 416.990454][ T9141] dump_stack_lvl+0x189/0x250 [ 416.990487][ T9141] ? __pfx____ratelimit+0x10/0x10 [ 416.990511][ T9141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 416.990537][ T9141] ? __pfx__printk+0x10/0x10 [ 416.990566][ T9141] ? __might_fault+0xb0/0x130 [ 416.990601][ T9141] should_fail_ex+0x414/0x560 [ 416.990633][ T9141] _copy_from_user+0x2d/0xb0 [ 416.990654][ T9141] memdup_user+0x5e/0xd0 [ 416.990680][ T9141] strndup_user+0x68/0xd0 [ 416.990705][ T9141] __se_sys_mount+0x9c/0x410 [ 416.990728][ T9141] ? ksys_write+0x22a/0x250 [ 416.990750][ T9141] ? __pfx___se_sys_mount+0x10/0x10 [ 416.990770][ T9141] ? rcu_is_watching+0x15/0xb0 [ 416.990800][ T9141] ? do_syscall_64+0xbe/0x3b0 [ 416.990820][ T9141] ? __x64_sys_mount+0x20/0xc0 [ 416.990845][ T9141] do_syscall_64+0xfa/0x3b0 [ 416.990866][ T9141] ? lockdep_hardirqs_on+0x9c/0x150 [ 416.990888][ T9141] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.990906][ T9141] ? clear_bhb_loop+0x60/0xb0 [ 416.990930][ T9141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.990948][ T9141] RIP: 0033:0x7f122558e969 [ 416.990966][ T9141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 416.990982][ T9141] RSP: 002b:00007f1226317038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 416.991002][ T9141] RAX: ffffffffffffffda RBX: 00007f12257b6160 RCX: 00007f122558e969 [ 416.991016][ T9141] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 416.991028][ T9141] RBP: 00007f1226317090 R08: 0000200000000a00 R09: 0000000000000000 [ 416.991040][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.991051][ T9141] R13: 0000000000000000 R14: 00007f12257b6160 R15: 00007ffc2939d278 [ 416.991083][ T9141] [ 417.217731][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 417.606183][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.626140][ T9] em28xx 3-1:0.0: Freeing device [ 417.638340][ T10] usb 5-1: Product: syz [ 417.642589][ T10] usb 5-1: Manufacturer: syz [ 417.657947][ T10] usb 5-1: SerialNumber: syz [ 417.687147][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.1.731'. [ 417.830332][ T10] usb 5-1: can't set config #1, error -71 [ 417.879598][ T9146] netlink: 248 bytes leftover after parsing attributes in process `syz.3.733'. [ 417.881447][ T10] usb 5-1: USB disconnect, device number 20 [ 418.223138][ T9159] siw: device registration error -23 [ 420.053211][ T9156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.736'. [ 420.314780][ T9173] syzkaller0: tun_chr_ioctl cmd 1074025676 [ 420.333590][ T9173] syzkaller0: owner set to 1 [ 420.339270][ T9173] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 420.386255][ T9173] batadv_slave_0: entered promiscuous mode [ 420.692647][ T9181] netlink: 452 bytes leftover after parsing attributes in process `syz.3.742'. [ 421.034812][ T5947] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 421.557821][ T5947] usb 5-1: Using ep0 maxpacket: 16 [ 421.648432][ T5947] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 421.905868][ T5947] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 421.923255][ T5947] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 421.934211][ T5947] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.944927][ T5947] usb 5-1: Product: syz [ 421.949508][ T5947] usb 5-1: Manufacturer: syz [ 421.955425][ T5947] usb 5-1: SerialNumber: syz [ 421.963269][ T9189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.744'. [ 422.202745][ T5947] usb 5-1: 0:2 : does not exist [ 422.245405][ T5947] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 422.297129][ T5947] usb 5-1: USB disconnect, device number 21 [ 422.375108][ T8409] udevd[8409]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 422.453114][ T9204] evm: overlay not supported [ 422.709547][ T9211] FAULT_INJECTION: forcing a failure. [ 422.709547][ T9211] name failslab, interval 1, probability 0, space 0, times 0 [ 422.743044][ T9211] CPU: 0 UID: 0 PID: 9211 Comm: syz.3.749 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 422.743073][ T9211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 422.743082][ T9211] Call Trace: [ 422.743090][ T9211] [ 422.743098][ T9211] dump_stack_lvl+0x189/0x250 [ 422.743136][ T9211] ? __pfx____ratelimit+0x10/0x10 [ 422.743160][ T9211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 422.743186][ T9211] ? __pfx__printk+0x10/0x10 [ 422.743212][ T9211] ? __pfx___might_resched+0x10/0x10 [ 422.743241][ T9211] should_fail_ex+0x414/0x560 [ 422.743272][ T9211] should_failslab+0xa8/0x100 [ 422.743296][ T9211] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 422.743317][ T9211] ? __alloc_skb+0x112/0x2d0 [ 422.743349][ T9211] __alloc_skb+0x112/0x2d0 [ 422.743380][ T9211] netlink_sendmsg+0x5c6/0xb30 [ 422.743419][ T9211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.743456][ T9211] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 422.743475][ T9211] ? __pfx_netlink_sendmsg+0x10/0x10 [ 422.743503][ T9211] __sock_sendmsg+0x219/0x270 [ 422.743531][ T9211] ____sys_sendmsg+0x505/0x830 [ 422.743558][ T9211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 422.743586][ T9211] ? import_iovec+0x74/0xa0 [ 422.743610][ T9211] ___sys_sendmsg+0x21f/0x2a0 [ 422.743631][ T9211] ? __pfx____sys_sendmsg+0x10/0x10 [ 422.743690][ T9211] ? __fget_files+0x2a/0x420 [ 422.743710][ T9211] ? __fget_files+0x3a0/0x420 [ 422.743743][ T9211] __x64_sys_sendmsg+0x19b/0x260 [ 422.743765][ T9211] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 422.743794][ T9211] ? __pfx_ksys_write+0x10/0x10 [ 422.743809][ T9211] ? rcu_is_watching+0x15/0xb0 [ 422.743849][ T9211] ? do_syscall_64+0xbe/0x3b0 [ 422.743877][ T9211] do_syscall_64+0xfa/0x3b0 [ 422.743897][ T9211] ? lockdep_hardirqs_on+0x9c/0x150 [ 422.743918][ T9211] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.743936][ T9211] ? clear_bhb_loop+0x60/0xb0 [ 422.743960][ T9211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.743977][ T9211] RIP: 0033:0x7f122558e969 [ 422.743996][ T9211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 422.744011][ T9211] RSP: 002b:00007f1226359038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 422.744032][ T9211] RAX: ffffffffffffffda RBX: 00007f12257b5fa0 RCX: 00007f122558e969 [ 422.744045][ T9211] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 422.744057][ T9211] RBP: 00007f1226359090 R08: 0000000000000000 R09: 0000000000000000 [ 422.744068][ T9211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.744078][ T9211] R13: 0000000000000000 R14: 00007f12257b5fa0 R15: 00007ffc2939d278 [ 422.744108][ T9211] [ 423.036207][ T9213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.748'. [ 423.047814][ T9213] netlink: 24 bytes leftover after parsing attributes in process `syz.1.748'. [ 423.875045][ T9229] FAULT_INJECTION: forcing a failure. [ 423.875045][ T9229] name failslab, interval 1, probability 0, space 0, times 0 [ 423.917250][ T5874] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 424.173075][ T9229] CPU: 1 UID: 0 PID: 9229 Comm: syz.2.753 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 424.173106][ T9229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 424.173117][ T9229] Call Trace: [ 424.173125][ T9229] [ 424.173134][ T9229] dump_stack_lvl+0x189/0x250 [ 424.173167][ T9229] ? __pfx____ratelimit+0x10/0x10 [ 424.173191][ T9229] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.173217][ T9229] ? __pfx__printk+0x10/0x10 [ 424.173242][ T9229] ? __pfx___might_resched+0x10/0x10 [ 424.173270][ T9229] should_fail_ex+0x414/0x560 [ 424.173299][ T9229] should_failslab+0xa8/0x100 [ 424.173322][ T9229] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 424.173342][ T9229] ? __alloc_skb+0x112/0x2d0 [ 424.173373][ T9229] __alloc_skb+0x112/0x2d0 [ 424.173404][ T9229] netlink_sendmsg+0x5c6/0xb30 [ 424.173442][ T9229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.173486][ T9229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 424.173505][ T9229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.173533][ T9229] __sock_sendmsg+0x219/0x270 [ 424.173560][ T9229] ____sys_sendmsg+0x505/0x830 [ 424.173585][ T9229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.173614][ T9229] ? import_iovec+0x74/0xa0 [ 424.173638][ T9229] ___sys_sendmsg+0x21f/0x2a0 [ 424.173659][ T9229] ? __pfx____sys_sendmsg+0x10/0x10 [ 424.173717][ T9229] ? __fget_files+0x2a/0x420 [ 424.173737][ T9229] ? __fget_files+0x3a0/0x420 [ 424.173769][ T9229] __x64_sys_sendmsg+0x19b/0x260 [ 424.173790][ T9229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 424.173819][ T9229] ? __pfx_ksys_write+0x10/0x10 [ 424.173835][ T9229] ? rcu_is_watching+0x15/0xb0 [ 424.173863][ T9229] ? do_syscall_64+0xbe/0x3b0 [ 424.173889][ T9229] do_syscall_64+0xfa/0x3b0 [ 424.173909][ T9229] ? lockdep_hardirqs_on+0x9c/0x150 [ 424.173931][ T9229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.173949][ T9229] ? clear_bhb_loop+0x60/0xb0 [ 424.173971][ T9229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.173988][ T9229] RIP: 0033:0x7fcf5ab8e969 [ 424.174006][ T9229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 424.174021][ T9229] RSP: 002b:00007fcf5bab2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.174042][ T9229] RAX: ffffffffffffffda RBX: 00007fcf5adb5fa0 RCX: 00007fcf5ab8e969 [ 424.174055][ T9229] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000003 [ 424.174067][ T9229] RBP: 00007fcf5bab2090 R08: 0000000000000000 R09: 0000000000000000 [ 424.174078][ T9229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.174089][ T9229] R13: 0000000000000000 R14: 00007fcf5adb5fa0 R15: 00007ffdcb745d98 [ 424.174120][ T9229] [ 424.276184][ T5874] usb 5-1: device descriptor read/64, error -71 [ 424.688245][ T9234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 425.482713][ T9241] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 426.373593][ T5874] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 426.733512][ C0] raw-gadget.0 gadget.4: ignoring, device is not running [ 426.808022][ T9245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.756'. [ 427.053115][ T10] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 427.603123][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 427.844111][ T10] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 427.852181][ T10] usb 4-1: config 6 has no interface number 0 [ 427.862920][ T10] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 427.872609][ T10] usb 4-1: config 6 interface 2 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 427.886755][ T10] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 427.897873][ T10] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 427.910796][ T10] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 427.920134][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.928205][ T10] usb 4-1: Product: syz [ 427.932399][ T10] usb 4-1: Manufacturer: syz [ 427.938000][ T10] usb 4-1: SerialNumber: syz [ 427.974785][ T10] hso 4-1:6.2: Failed to find BULK IN ep [ 428.193815][ T9249] ptrace attach of "./syz-executor exec"[5821] was attempted by ""[9249] [ 428.263890][ T9264] netlink: 'syz.2.762': attribute type 5 has an invalid length. [ 428.353254][ T980] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 428.666958][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 430.070936][ T980] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.131655][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 430.180701][ T980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 430.191718][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.214313][ T980] usb 5-1: Product: syz [ 430.214466][ T10] usb 4-1: USB disconnect, device number 27 [ 430.228591][ T980] usb 5-1: Manufacturer: syz [ 430.236368][ T980] usb 5-1: SerialNumber: syz [ 430.543129][ T5947] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 430.689012][ T980] usb 5-1: 0:2 : does not exist [ 430.711392][ T980] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 430.813709][ T980] usb 5-1: USB disconnect, device number 24 [ 430.864504][ T5947] usb 2-1: Using ep0 maxpacket: 16 [ 430.898872][ T5947] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 430.926175][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 430.973372][ T5947] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 430.984101][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.985587][ T10] libceph: connect (1)[c::]:6789 error -101 [ 430.992164][ T5947] usb 2-1: Product: syz [ 431.033080][ T8409] udevd[8409]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.038123][ T5947] usb 2-1: Manufacturer: syz [ 431.057941][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 431.171567][ T10] libceph: connect (1)[c::]:6789 error -101 [ 431.210113][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 431.225567][ T5947] usb 2-1: SerialNumber: syz [ 431.554574][ T10] libceph: connect (1)[c::]:6789 error -101 [ 431.593381][ T5947] usb 2-1: config 0 descriptor?? [ 431.617897][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 431.632672][ T5947] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 431.762930][ T5947] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 432.132615][ T9284] ceph: No mds server is up or the cluster is laggy [ 432.160745][ T10] libceph: connect (1)[c::]:6789 error -101 [ 432.172619][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 432.172980][ T980] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 432.227210][ T9273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.273663][ T9273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.326247][ T5947] em28xx 2-1:0.0: unknown em28xx chip ID (86) [ 432.352954][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 432.376581][ T980] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.441162][ T9308] FAULT_INJECTION: forcing a failure. [ 432.441162][ T9308] name failslab, interval 1, probability 0, space 0, times 0 [ 432.463265][ T980] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 432.524642][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.774'. [ 432.539603][ T5947] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 432.549703][ T9308] CPU: 0 UID: 0 PID: 9308 Comm: syz.4.773 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 432.549731][ T9308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 432.549741][ T9308] Call Trace: [ 432.549749][ T9308] [ 432.549757][ T9308] dump_stack_lvl+0x189/0x250 [ 432.549789][ T9308] ? __pfx____ratelimit+0x10/0x10 [ 432.549812][ T9308] ? __pfx_dump_stack_lvl+0x10/0x10 [ 432.549838][ T9308] ? __pfx__printk+0x10/0x10 [ 432.549864][ T9308] ? __pfx___might_resched+0x10/0x10 [ 432.549892][ T9308] should_fail_ex+0x414/0x560 [ 432.549922][ T9308] should_failslab+0xa8/0x100 [ 432.549953][ T9308] kmem_cache_alloc_noprof+0x73/0x3c0 [ 432.549972][ T9308] ? ptlock_alloc+0x20/0x70 [ 432.549994][ T9308] ptlock_alloc+0x20/0x70 [ 432.550013][ T9308] pte_alloc_one+0x7d/0x170 [ 432.550038][ T9308] __pte_alloc+0x25/0x1a0 [ 432.550066][ T9308] __handle_mm_fault+0x4b8a/0x5620 [ 432.550109][ T9308] ? __pfx___handle_mm_fault+0x10/0x10 [ 432.550152][ T9308] ? __pfx___might_resched+0x10/0x10 [ 432.550178][ T9308] handle_mm_fault+0x2d5/0x7f0 [ 432.550197][ T9308] ? vma_is_secretmem+0xd/0x50 [ 432.550228][ T9308] __get_user_pages+0x1af4/0x30b0 [ 432.550298][ T9308] ? __pfx___get_user_pages+0x10/0x10 [ 432.550324][ T9308] ? __gup_longterm_locked+0xbf7/0x15b0 [ 432.550351][ T9308] ? down_read_killable+0x1d1/0x350 [ 432.550383][ T9308] __gup_longterm_locked+0xd66/0x15b0 [ 432.550435][ T9308] ? sanity_check_pinned_pages+0x11cf/0x12c0 [ 432.550465][ T9308] ? gup_fast_fallback+0x1afc/0x2260 [ 432.550496][ T9308] gup_fast_fallback+0x1cd4/0x2260 [ 432.550566][ T9308] ? __pfx_gup_fast_fallback+0x10/0x10 [ 432.550620][ T9308] ? pin_user_pages_fast+0x4d/0xb0 [ 432.550648][ T9308] iov_iter_extract_pages+0x35a/0x5e0 [ 432.550679][ T9308] extract_iter_to_sg+0xe46/0x24e0 [ 432.550715][ T9308] ? sanity_check_pinned_pages+0x11c8/0x12c0 [ 432.550739][ T9308] ? xxh64_update+0x453/0xcf0 [ 432.550768][ T9308] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 432.550795][ T9308] ? unpin_user_page+0xc9/0x1d0 [ 432.550819][ T9308] ? __pfx_unpin_user_page+0x10/0x10 [ 432.550858][ T9308] ? __asan_memset+0x22/0x50 [ 432.550887][ T9308] hash_sendmsg+0x4f4/0x11d0 [ 432.550939][ T9308] ? __pfx_hash_sendmsg+0x10/0x10 [ 432.550964][ T9308] __sock_sendmsg+0x219/0x270 [ 432.550992][ T9308] __sys_sendto+0x3bd/0x520 [ 432.551022][ T9308] ? __pfx___sys_sendto+0x10/0x10 [ 432.551045][ T9308] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 432.551084][ T9308] ? __fget_files+0x3a0/0x420 [ 432.551119][ T9308] ? ksys_write+0x22a/0x250 [ 432.551141][ T9308] ? __pfx_ksys_write+0x10/0x10 [ 432.551165][ T9308] __x64_sys_sendto+0xde/0x100 [ 432.551196][ T9308] do_syscall_64+0xfa/0x3b0 [ 432.551220][ T9308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.551237][ T9308] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 432.551255][ T9308] ? clear_bhb_loop+0x60/0xb0 [ 432.551279][ T9308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.551297][ T9308] RIP: 0033:0x7f71c958e969 [ 432.551314][ T9308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.551330][ T9308] RSP: 002b:00007f71ca43b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 432.551352][ T9308] RAX: ffffffffffffffda RBX: 00007f71c97b5fa0 RCX: 00007f71c958e969 [ 432.551366][ T9308] RDX: fffffffffffffe20 RSI: 00002000000002c0 RDI: 0000000000000004 [ 432.551379][ T9308] RBP: 00007f71ca43b090 R08: 0000000000000000 R09: 0000000000000000 [ 432.551404][ T9308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.551415][ T9308] R13: 0000000000000000 R14: 00007f71c97b5fa0 R15: 00007ffc0765ff28 [ 432.551449][ T9308] [ 432.563086][ T980] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 432.933827][ T5947] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 432.940870][ T5947] em28xx 2-1:0.0: No AC97 audio processor [ 433.241257][ T5947] usb 2-1: USB disconnect, device number 20 [ 433.345203][ T5947] em28xx 2-1:0.0: Disconnecting em28xx [ 433.496665][ T5947] em28xx 2-1:0.0: Freeing device [ 433.542622][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.551748][ T980] usb 3-1: Product: syz [ 433.558352][ T980] usb 3-1: Manufacturer: syz [ 433.563560][ T980] usb 3-1: SerialNumber: syz [ 433.641088][ T5886] libceph: connect (1)[c::]:6789 error -101 [ 433.647414][ T5886] libceph: mon0 (1)[c::]:6789 connect error [ 433.776012][ T9325] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.776'. [ 433.817891][ T9319] ceph: No mds server is up or the cluster is laggy [ 433.937943][ T5947] libceph: connect (1)[c::]:6789 error -101 [ 433.950280][ T5947] libceph: mon0 (1)[c::]:6789 connect error [ 434.267072][ T980] usb 3-1: 0:2 : does not exist [ 434.306382][ T980] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 434.604259][ T9332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 434.686423][ T980] usb 3-1: USB disconnect, device number 33 [ 434.928417][ T9331] netlink: 8 bytes leftover after parsing attributes in process `syz.3.778'. [ 435.242584][ T8409] udevd[8409]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 435.603058][ T10] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 436.328685][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 436.344768][ T9345] FAULT_INJECTION: forcing a failure. [ 436.344768][ T9345] name failslab, interval 1, probability 0, space 0, times 0 [ 436.376950][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 436.402729][ T9345] CPU: 0 UID: 0 PID: 9345 Comm: syz.3.782 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 436.402758][ T9345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 436.402769][ T9345] Call Trace: [ 436.402777][ T9345] [ 436.402785][ T9345] dump_stack_lvl+0x189/0x250 [ 436.402819][ T9345] ? __pfx____ratelimit+0x10/0x10 [ 436.402848][ T9345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 436.402873][ T9345] ? __pfx__printk+0x10/0x10 [ 436.402896][ T9345] ? __pfx___might_resched+0x10/0x10 [ 436.402924][ T9345] should_fail_ex+0x414/0x560 [ 436.402954][ T9345] should_failslab+0xa8/0x100 [ 436.402977][ T9345] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 436.402998][ T9345] ? __alloc_skb+0x112/0x2d0 [ 436.403028][ T9345] __alloc_skb+0x112/0x2d0 [ 436.403060][ T9345] netlink_sendmsg+0x5c6/0xb30 [ 436.403098][ T9345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.403133][ T9345] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 436.403151][ T9345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 436.403179][ T9345] __sock_sendmsg+0x219/0x270 [ 436.403204][ T9345] ____sys_sendmsg+0x505/0x830 [ 436.403227][ T9345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 436.403256][ T9345] ? import_iovec+0x74/0xa0 [ 436.403278][ T9345] ___sys_sendmsg+0x21f/0x2a0 [ 436.403298][ T9345] ? __pfx____sys_sendmsg+0x10/0x10 [ 436.403357][ T9345] ? __fget_files+0x2a/0x420 [ 436.403378][ T9345] ? __fget_files+0x3a0/0x420 [ 436.403411][ T9345] __x64_sys_sendmsg+0x19b/0x260 [ 436.403433][ T9345] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 436.403461][ T9345] ? __pfx_ksys_write+0x10/0x10 [ 436.403477][ T9345] ? rcu_is_watching+0x15/0xb0 [ 436.403504][ T9345] ? do_syscall_64+0xbe/0x3b0 [ 436.403530][ T9345] do_syscall_64+0xfa/0x3b0 [ 436.403549][ T9345] ? lockdep_hardirqs_on+0x9c/0x150 [ 436.403571][ T9345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.403589][ T9345] ? clear_bhb_loop+0x60/0xb0 [ 436.403624][ T9345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.403642][ T9345] RIP: 0033:0x7f122558e969 [ 436.403660][ T9345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 436.403676][ T9345] RSP: 002b:00007f1226359038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 436.403697][ T9345] RAX: ffffffffffffffda RBX: 00007f12257b5fa0 RCX: 00007f122558e969 [ 436.403710][ T9345] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 000000000000000c [ 436.403721][ T9345] RBP: 00007f1226359090 R08: 0000000000000000 R09: 0000000000000000 [ 436.403732][ T9345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.403742][ T9345] R13: 0000000000000000 R14: 00007f12257b5fa0 R15: 00007ffc2939d278 [ 436.403774][ T9345] [ 436.677188][ T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 436.688042][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.768943][ T10] usb 2-1: config 0 descriptor?? [ 436.790784][ T9335] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 437.484359][ T980] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 437.659601][ T980] usb 3-1: config 40 has too many interfaces: 176, using maximum allowed: 32 [ 437.673650][ T980] usb 3-1: config 40 has an invalid descriptor of length 0, skipping remainder of the config [ 437.735507][ T10] hid-rmi 0003:17EF:6085.0008: unknown main item tag 0x0 [ 437.742634][ T10] hid-rmi 0003:17EF:6085.0008: unknown main item tag 0x0 [ 437.779330][ T10] hid-rmi 0003:17EF:6085.0008: unknown main item tag 0x0 [ 437.787368][ T10] hid-rmi 0003:17EF:6085.0008: unknown main item tag 0x0 [ 437.798841][ T10] hid-rmi 0003:17EF:6085.0008: unknown main item tag 0x0 [ 437.814752][ T10] hid-rmi 0003:17EF:6085.0008: hidraw0: USB HID v0.00 Device [HID 17ef:6085] on usb-dummy_hcd.1-1/input0 [ 437.834627][ T9335] IPv6: addrconf: prefix option has invalid lifetime [ 437.856241][ T980] usb 3-1: config 40 has 1 interface, different from the descriptor's value: 176 [ 438.592703][ T980] usb 3-1: config 40 has no interface number 0 [ 438.602938][ T980] usb 3-1: config 40 interface 11 altsetting 253 has an invalid descriptor for endpoint zero, skipping [ 438.631785][ T980] usb 3-1: config 40 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 438.670749][ T5886] usb 2-1: USB disconnect, device number 21 [ 438.717128][ T980] usb 3-1: config 40 interface 11 has no altsetting 0 [ 438.758157][ T980] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 438.825872][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.872535][ T9379] netlink: 'syz.3.787': attribute type 1 has an invalid length. [ 438.961242][ T9373] fido_id[9373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 439.045030][ T9347] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 439.087168][ T980] keyspan 3-1:40.11: Keyspan 2 port adapter converter detected [ 439.110939][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 87 [ 439.140043][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 7 [ 439.180006][ T9379] bond1: entered promiscuous mode [ 439.189308][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 81 [ 439.192759][ T9379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.340734][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 82 [ 439.412657][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 1 [ 439.555989][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 2 [ 439.664266][ T9375] bond1: (slave veth3): making interface the new active one [ 439.691209][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 85 [ 439.736531][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 5 [ 439.747482][ T9375] veth3: entered promiscuous mode [ 439.793093][ T977] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 439.806798][ T9375] bond1: (slave veth3): Enslaving as an active interface with an up link [ 439.833546][ T980] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 440.045344][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 83 [ 440.081550][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.089123][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.105964][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 84 [ 440.114193][ T977] usb 2-1: Using ep0 maxpacket: 32 [ 440.141958][ T977] usb 2-1: config 0 has no interfaces? [ 440.197949][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 3 [ 440.246625][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 4 [ 440.303037][ T977] usb 2-1: New USB device found, idVendor=0a88, idProduct=c301, bcdDevice=82.d5 [ 440.321154][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 86 [ 440.361484][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.385659][ T980] keyspan 3-1:40.11: found no endpoint descriptor for endpoint 6 [ 440.422716][ T977] usb 2-1: Product: syz [ 440.440119][ T977] usb 2-1: Manufacturer: syz [ 440.449233][ T980] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 440.467355][ T977] usb 2-1: SerialNumber: syz [ 440.498518][ T980] usb 3-1: USB disconnect, device number 34 [ 440.506297][ T977] usb 2-1: config 0 descriptor?? [ 440.526141][ T980] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 440.604194][ T980] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 440.646246][ T980] keyspan 3-1:40.11: device disconnected [ 440.793043][ T977] usb 2-1: USB disconnect, device number 22 [ 441.210155][ T980] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 442.012939][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 442.159952][ T980] usb 5-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 442.212914][ T980] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 442.297688][ T980] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 442.325742][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.357288][ T980] usb 5-1: Product: syz [ 442.361605][ T980] usb 5-1: Manufacturer: syz [ 442.423161][ T9430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.800'. [ 442.451779][ T980] usb 5-1: SerialNumber: syz [ 443.274123][ T980] usb 5-1: 0:2 : does not exist [ 444.240531][ T9410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 444.304390][ T9410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 444.603488][ T980] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 444.755393][ T980] usb 5-1: USB disconnect, device number 25 [ 444.815249][ T9453] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 445.646746][ T8409] udevd[8409]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.633372][ T9477] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 451.093264][ T977] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 451.307731][ T977] usb 2-1: config 0 has no interfaces? [ 451.334807][ T977] usb 2-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00 [ 451.622980][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.856352][ T977] usb 2-1: config 0 descriptor?? [ 452.091249][ T9529] netlink: 8 bytes leftover after parsing attributes in process `syz.3.824'. [ 452.214445][ T9514] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 452.285255][ T9538] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.318618][ T9538] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.369201][ T9541] FAULT_INJECTION: forcing a failure. [ 452.369201][ T9541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.394542][ T10] usb 2-1: USB disconnect, device number 23 [ 452.402922][ T5874] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 452.473375][ T9541] CPU: 1 UID: 0 PID: 9541 Comm: syz.3.827 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 452.473404][ T9541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 452.473416][ T9541] Call Trace: [ 452.473424][ T9541] [ 452.473432][ T9541] dump_stack_lvl+0x189/0x250 [ 452.473466][ T9541] ? __pfx____ratelimit+0x10/0x10 [ 452.473499][ T9541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.473526][ T9541] ? __pfx__printk+0x10/0x10 [ 452.473545][ T9541] ? __might_fault+0xb0/0x130 [ 452.473578][ T9541] should_fail_ex+0x414/0x560 [ 452.473608][ T9541] _copy_from_user+0x2d/0xb0 [ 452.473628][ T9541] __sys_bpf+0x1ed/0x860 [ 452.473653][ T9541] ? __pfx___sys_bpf+0x10/0x10 [ 452.473688][ T9541] ? ksys_write+0x22a/0x250 [ 452.473710][ T9541] ? __pfx_ksys_write+0x10/0x10 [ 452.473738][ T9541] __x64_sys_bpf+0x7c/0x90 [ 452.473758][ T9541] do_syscall_64+0xfa/0x3b0 [ 452.473780][ T9541] ? lockdep_hardirqs_on+0x9c/0x150 [ 452.473801][ T9541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.473819][ T9541] ? clear_bhb_loop+0x60/0xb0 [ 452.473843][ T9541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.473860][ T9541] RIP: 0033:0x7f122558e969 [ 452.473878][ T9541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 452.473894][ T9541] RSP: 002b:00007f1226359038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.473915][ T9541] RAX: ffffffffffffffda RBX: 00007f12257b5fa0 RCX: 00007f122558e969 [ 452.473929][ T9541] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 452.473941][ T9541] RBP: 00007f1226359090 R08: 0000000000000000 R09: 0000000000000000 [ 452.473952][ T9541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.473963][ T9541] R13: 0000000000000001 R14: 00007f12257b5fa0 R15: 00007ffc2939d278 [ 452.473995][ T9541] [ 452.751374][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 453.292099][ T5874] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 453.308819][ T5874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 453.487361][ T5874] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 453.531084][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.543748][ T9550] fuse: Bad value for 'group_id' [ 453.573166][ T9550] fuse: Bad value for 'group_id' [ 453.602500][ T5874] usb 3-1: Product: syz [ 453.612633][ T5874] usb 3-1: Manufacturer: syz [ 453.633064][ T5874] usb 3-1: SerialNumber: syz [ 453.649540][ T5874] usb 3-1: config 0 descriptor?? [ 453.690307][ T5874] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 453.723029][ T10] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 453.740853][ T5874] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 453.948215][ T10] usb 2-1: device descriptor read/all, error -71 [ 454.445539][ T9536] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.538110][ T9536] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.640240][ T5874] em28xx 3-1:0.0: unknown em28xx chip ID (86) [ 454.873175][ T5874] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 454.951923][ T5874] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 455.074139][ T9575] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 455.728905][ T5874] em28xx 3-1:0.0: No AC97 audio processor [ 455.876457][ T5874] usb 3-1: USB disconnect, device number 35 [ 455.927086][ T5874] em28xx 3-1:0.0: Disconnecting em28xx [ 455.976542][ T5874] em28xx 3-1:0.0: Freeing device [ 457.847759][ T9595] 9pnet_fd: Insufficient options for proto=fd [ 458.178892][ T9602] fuse: Bad value for 'group_id' [ 458.217044][ T9602] fuse: Bad value for 'group_id' [ 458.433021][ T5947] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 458.558877][ T9611] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 458.623494][ T5947] usb 1-1: Using ep0 maxpacket: 32 [ 458.686757][ T5947] usb 1-1: config 0 has no interfaces? [ 458.708538][ T5947] usb 1-1: New USB device found, idVendor=0a88, idProduct=c301, bcdDevice=82.d5 [ 458.726672][ T5947] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.770887][ T5947] usb 1-1: Product: syz [ 458.789939][ T5947] usb 1-1: Manufacturer: syz [ 458.808510][ T5947] usb 1-1: SerialNumber: syz [ 458.835552][ T5947] usb 1-1: config 0 descriptor?? [ 459.192173][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.846'. [ 459.562119][ T5947] usb 1-1: USB disconnect, device number 30 [ 461.469790][ T9641] mkiss: ax0: crc mode is auto. [ 461.675089][ T9629] openvswitch: netlink: Flow key attr not present in new flow. [ 464.162927][ T5947] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 464.365755][ T9649] FAULT_INJECTION: forcing a failure. [ 464.365755][ T9649] name failslab, interval 1, probability 0, space 0, times 0 [ 464.375058][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.378695][ T9649] CPU: 0 UID: 0 PID: 9649 Comm: syz.3.853 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 464.378718][ T9649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 464.378728][ T9649] Call Trace: [ 464.378735][ T9649] [ 464.378743][ T9649] dump_stack_lvl+0x189/0x250 [ 464.378772][ T9649] ? __pfx____ratelimit+0x10/0x10 [ 464.378793][ T9649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 464.378815][ T9649] ? __pfx__printk+0x10/0x10 [ 464.378837][ T9649] ? __pfx___might_resched+0x10/0x10 [ 464.378862][ T9649] should_fail_ex+0x414/0x560 [ 464.378888][ T9649] should_failslab+0xa8/0x100 [ 464.378908][ T9649] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 464.378927][ T9649] ? __alloc_skb+0x112/0x2d0 [ 464.378954][ T9649] __alloc_skb+0x112/0x2d0 [ 464.378980][ T9649] netlink_sendmsg+0x5c6/0xb30 [ 464.379013][ T9649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.379044][ T9649] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 464.379061][ T9649] ? __pfx_netlink_sendmsg+0x10/0x10 [ 464.379092][ T9649] __sock_sendmsg+0x219/0x270 [ 464.379116][ T9649] ____sys_sendmsg+0x505/0x830 [ 464.379139][ T9649] ? __pfx_____sys_sendmsg+0x10/0x10 [ 464.379165][ T9649] ? import_iovec+0x74/0xa0 [ 464.379186][ T9649] ___sys_sendmsg+0x21f/0x2a0 [ 464.379206][ T9649] ? __pfx____sys_sendmsg+0x10/0x10 [ 464.379258][ T9649] ? __fget_files+0x2a/0x420 [ 464.379276][ T9649] ? __fget_files+0x3a0/0x420 [ 464.379304][ T9649] __x64_sys_sendmsg+0x19b/0x260 [ 464.379323][ T9649] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 464.379350][ T9649] ? __pfx_ksys_write+0x10/0x10 [ 464.379364][ T9649] ? rcu_is_watching+0x15/0xb0 [ 464.379397][ T9649] ? do_syscall_64+0xbe/0x3b0 [ 464.379420][ T9649] do_syscall_64+0xfa/0x3b0 [ 464.379438][ T9649] ? lockdep_hardirqs_on+0x9c/0x150 [ 464.379457][ T9649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.379474][ T9649] ? clear_bhb_loop+0x60/0xb0 [ 464.379494][ T9649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.379510][ T9649] RIP: 0033:0x7f122558e969 [ 464.379526][ T9649] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.379541][ T9649] RSP: 002b:00007f1226359038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 464.379559][ T9649] RAX: ffffffffffffffda RBX: 00007f12257b5fa0 RCX: 00007f122558e969 [ 464.379572][ T9649] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 464.379582][ T9649] RBP: 00007f1226359090 R08: 0000000000000000 R09: 0000000000000000 [ 464.379593][ T9649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.379602][ T9649] R13: 0000000000000000 R14: 00007f12257b5fa0 R15: 00007ffc2939d278 [ 464.379630][ T9649] [ 464.701404][ T5947] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.712339][ T5947] usb 2-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 464.731812][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.745150][ T5947] usb 2-1: config 0 descriptor?? [ 464.802998][ T5947] usb 2-1: can't set config #0, error -71 [ 464.833671][ T5947] usb 2-1: USB disconnect, device number 26 [ 465.820243][ T5874] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 466.141650][ T5874] usb 3-1: Using ep0 maxpacket: 16 [ 466.165253][ T5874] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 466.176981][ T5874] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 466.187980][ T5874] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 466.197146][ T5874] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.205395][ T5874] usb 3-1: Product: syz [ 466.303588][ T9672] FAULT_INJECTION: forcing a failure. [ 466.303588][ T9672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 466.428743][ T9672] CPU: 0 UID: 0 PID: 9672 Comm: syz.4.860 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 466.428767][ T9672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 466.428774][ T9672] Call Trace: [ 466.428779][ T9672] [ 466.428785][ T9672] dump_stack_lvl+0x189/0x250 [ 466.428805][ T9672] ? __pfx____ratelimit+0x10/0x10 [ 466.428819][ T9672] ? __pfx_dump_stack_lvl+0x10/0x10 [ 466.428834][ T9672] ? __pfx__printk+0x10/0x10 [ 466.428845][ T9672] ? __might_fault+0xb0/0x130 [ 466.428863][ T9672] should_fail_ex+0x414/0x560 [ 466.428880][ T9672] _copy_from_user+0x2d/0xb0 [ 466.428892][ T9672] input_event_from_user+0xb2/0x280 [ 466.428906][ T9672] ? __pfx_input_event_from_user+0x10/0x10 [ 466.428920][ T9672] ? input_inject_event+0xbc/0x320 [ 466.428936][ T9672] evdev_write+0x2a6/0x480 [ 466.428951][ T9672] ? __pfx_evdev_write+0x10/0x10 [ 466.428962][ T9672] ? bpf_lsm_file_permission+0x9/0x20 [ 466.428974][ T9672] ? security_file_permission+0x75/0x290 [ 466.428989][ T9672] ? rw_verify_area+0x258/0x650 [ 466.428999][ T9672] ? __pfx_evdev_write+0x10/0x10 [ 466.429010][ T9672] vfs_write+0x27b/0xa90 [ 466.429027][ T9672] ? __pfx_vfs_write+0x10/0x10 [ 466.429038][ T9672] ? __fget_files+0x2a/0x420 [ 466.429052][ T9672] ? __fget_files+0x2a/0x420 [ 466.429063][ T9672] ? __fget_files+0x3a0/0x420 [ 466.429074][ T9672] ? __fget_files+0x2a/0x420 [ 466.429091][ T9672] ksys_write+0x145/0x250 [ 466.429104][ T9672] ? __pfx_ksys_write+0x10/0x10 [ 466.429113][ T9672] ? rcu_is_watching+0x15/0xb0 [ 466.429129][ T9672] ? do_syscall_64+0xbe/0x3b0 [ 466.429144][ T9672] do_syscall_64+0xfa/0x3b0 [ 466.429155][ T9672] ? lockdep_hardirqs_on+0x9c/0x150 [ 466.429171][ T9672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.429181][ T9672] ? clear_bhb_loop+0x60/0xb0 [ 466.429194][ T9672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.429204][ T9672] RIP: 0033:0x7f71c958e969 [ 466.429216][ T9672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 466.429225][ T9672] RSP: 002b:00007f71ca41a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 466.429239][ T9672] RAX: ffffffffffffffda RBX: 00007f71c97b6080 RCX: 00007f71c958e969 [ 466.429247][ T9672] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000004 [ 466.429255][ T9672] RBP: 00007f71ca41a090 R08: 0000000000000000 R09: 0000000000000000 [ 466.429262][ T9672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 466.429268][ T9672] R13: 0000000000000000 R14: 00007f71c97b6080 R15: 00007ffc0765ff28 [ 466.429286][ T9672] [ 466.519537][ T9675] 9pnet_fd: Insufficient options for proto=fd [ 466.530768][ T5874] usb 3-1: Manufacturer: syz [ 466.879036][ T5874] usb 3-1: SerialNumber: syz [ 466.933567][ T5947] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 467.144287][ T5874] usb 3-1: 0:2 : does not exist [ 467.179162][ T5947] usb 2-1: Using ep0 maxpacket: 32 [ 467.203821][ T5874] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 467.273321][ T5947] usb 2-1: config 0 has no interfaces? [ 467.311802][ T5874] usb 3-1: USB disconnect, device number 36 [ 468.128020][ T5947] usb 2-1: New USB device found, idVendor=0a88, idProduct=c301, bcdDevice=82.d5 [ 468.137337][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.145542][ T5947] usb 2-1: Product: syz [ 468.149818][ T5947] usb 2-1: Manufacturer: syz [ 468.154569][ T5947] usb 2-1: SerialNumber: syz [ 468.174778][ T5947] usb 2-1: config 0 descriptor?? [ 468.474461][ T977] usb 2-1: USB disconnect, device number 27 [ 468.650566][ T8409] udevd[8409]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 468.711338][ T9694] FAULT_INJECTION: forcing a failure. [ 468.711338][ T9694] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.725210][ T9694] CPU: 0 UID: 0 PID: 9694 Comm: syz.2.864 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 468.725235][ T9694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 468.725246][ T9694] Call Trace: [ 468.725255][ T9694] [ 468.725263][ T9694] dump_stack_lvl+0x189/0x250 [ 468.725296][ T9694] ? __pfx____ratelimit+0x10/0x10 [ 468.725319][ T9694] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.725346][ T9694] ? __pfx__printk+0x10/0x10 [ 468.725381][ T9694] should_fail_ex+0x414/0x560 [ 468.725412][ T9694] _copy_to_user+0x31/0xb0 [ 468.725435][ T9694] simple_read_from_buffer+0xe1/0x170 [ 468.725462][ T9694] proc_fail_nth_read+0x1df/0x250 [ 468.725490][ T9694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.725517][ T9694] ? rw_verify_area+0x258/0x650 [ 468.725535][ T9694] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 468.725560][ T9694] vfs_read+0x1fd/0x980 [ 468.725585][ T9694] ? __pfx___mutex_lock+0x10/0x10 [ 468.725608][ T9694] ? __pfx_vfs_read+0x10/0x10 [ 468.725628][ T9694] ? __fget_files+0x2a/0x420 [ 468.725655][ T9694] ? __fget_files+0x3a0/0x420 [ 468.725675][ T9694] ? __fget_files+0x2a/0x420 [ 468.725706][ T9694] ksys_read+0x145/0x250 [ 468.725729][ T9694] ? __pfx_ksys_read+0x10/0x10 [ 468.725761][ T9694] do_syscall_64+0xfa/0x3b0 [ 468.725786][ T9694] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.725803][ T9694] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 468.725820][ T9694] ? clear_bhb_loop+0x60/0xb0 [ 468.725843][ T9694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.725862][ T9694] RIP: 0033:0x7fcf5ab8d37c [ 468.725880][ T9694] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 468.725896][ T9694] RSP: 002b:00007fcf5ba63030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 468.725917][ T9694] RAX: ffffffffffffffda RBX: 00007fcf5adb6160 RCX: 00007fcf5ab8d37c [ 468.725930][ T9694] RDX: 000000000000000f RSI: 00007fcf5ba630a0 RDI: 0000000000000007 [ 468.725943][ T9694] RBP: 00007fcf5ba63090 R08: 0000000000000000 R09: 0000000000000000 [ 468.725955][ T9694] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 468.725966][ T9694] R13: 0000000000000001 R14: 00007fcf5adb6160 R15: 00007ffdcb745d98 [ 468.725999][ T9694] [ 469.339546][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.865'. [ 469.874676][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.866'. [ 470.699678][ T9707] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'. [ 474.122331][ T9727] FAULT_INJECTION: forcing a failure. [ 474.122331][ T9727] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.135890][ T9727] CPU: 0 UID: 0 PID: 9727 Comm: syz.2.871 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 474.135917][ T9727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 474.135929][ T9727] Call Trace: [ 474.135937][ T9727] [ 474.135945][ T9727] dump_stack_lvl+0x189/0x250 [ 474.135979][ T9727] ? lockdep_hardirqs_on+0x9c/0x150 [ 474.136004][ T9727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 474.136040][ T9727] ? __pfx__printk+0x10/0x10 [ 474.136074][ T9727] should_fail_ex+0x414/0x560 [ 474.136106][ T9727] _copy_to_user+0x31/0xb0 [ 474.136129][ T9727] simple_read_from_buffer+0xe1/0x170 [ 474.136156][ T9727] proc_fail_nth_read+0x1df/0x250 [ 474.136185][ T9727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.136213][ T9727] ? rw_verify_area+0x258/0x650 [ 474.136231][ T9727] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 474.136257][ T9727] vfs_read+0x1fd/0x980 [ 474.136281][ T9727] ? __pfx___mutex_lock+0x10/0x10 [ 474.136306][ T9727] ? __pfx_vfs_read+0x10/0x10 [ 474.136326][ T9727] ? __fget_files+0x2a/0x420 [ 474.136354][ T9727] ? __fget_files+0x3a0/0x420 [ 474.136372][ T9727] ? __fget_files+0x2a/0x420 [ 474.136404][ T9727] ksys_read+0x145/0x250 [ 474.136426][ T9727] ? __pfx_ksys_read+0x10/0x10 [ 474.136442][ T9727] ? rcu_is_watching+0x15/0xb0 [ 474.136471][ T9727] ? do_syscall_64+0xbe/0x3b0 [ 474.136500][ T9727] do_syscall_64+0xfa/0x3b0 [ 474.136524][ T9727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.136542][ T9727] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 474.136559][ T9727] ? clear_bhb_loop+0x60/0xb0 [ 474.136583][ T9727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.136601][ T9727] RIP: 0033:0x7fcf5ab8d37c [ 474.136618][ T9727] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 474.136634][ T9727] RSP: 002b:00007fcf5ba63030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 474.136656][ T9727] RAX: ffffffffffffffda RBX: 00007fcf5adb6160 RCX: 00007fcf5ab8d37c [ 474.136669][ T9727] RDX: 000000000000000f RSI: 00007fcf5ba630a0 RDI: 0000000000000007 [ 474.136681][ T9727] RBP: 00007fcf5ba63090 R08: 0000000000000000 R09: 0000000000000000 [ 474.136693][ T9727] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 474.136704][ T9727] R13: 0000000000000001 R14: 00007fcf5adb6160 R15: 00007ffdcb745d98 [ 474.136737][ T9727] [ 474.805381][ T9738] program syz.0.872 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 474.874429][ T10] libceph: connect (1)[c::]:6789 error -97 [ 474.953816][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 475.393001][ T10] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 475.500316][ T9] libceph: connect (1)[c::]:6789 error -97 [ 475.528628][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 475.613009][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 475.630868][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 475.670210][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 475.695248][ T9730] ceph: No mds server is up or the cluster is laggy [ 475.748184][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 475.786125][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.839562][ T977] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 475.870033][ T10] usb 4-1: Product: syz [ 475.881876][ T10] usb 4-1: Manufacturer: syz [ 475.942976][ T10] usb 4-1: SerialNumber: syz [ 476.004994][ T10] usb 4-1: config 0 descriptor?? [ 476.043269][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 476.058728][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 476.079095][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 476.085813][ T9754] 9pnet_fd: Insufficient options for proto=fd [ 476.104533][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 476.112915][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 476.156408][ T977] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 476.212749][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.276369][ T977] usb 5-1: config 0 descriptor?? [ 476.300468][ T977] hub 5-1:0.0: USB hub found [ 476.433049][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 476.502206][ T9745] block nbd4: NBD_DISCONNECT [ 476.524239][ T977] hub 5-1:0.0: 1 port detected [ 476.646308][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 476.677616][ T9736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.684213][ T24] usb 3-1: config 0 has no interfaces? [ 476.707123][ T9736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.715219][ T24] usb 3-1: New USB device found, idVendor=0a88, idProduct=c301, bcdDevice=82.d5 [ 476.842218][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (86) [ 477.013278][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.021373][ T24] usb 3-1: Product: syz [ 477.032729][ T24] usb 3-1: Manufacturer: syz [ 477.037504][ T24] usb 3-1: SerialNumber: syz [ 477.058714][ T24] usb 3-1: config 0 descriptor?? [ 477.073216][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 477.098005][ T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 477.122312][ T10] em28xx 4-1:0.0: No AC97 audio processor [ 477.167988][ T10] usb 4-1: USB disconnect, device number 28 [ 477.218165][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 477.457531][ T10] em28xx 4-1:0.0: Freeing device [ 477.485786][ T24] usb 3-1: USB disconnect, device number 37 [ 478.298629][ T977] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 478.322799][ T977] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 478.346326][ T977] usbhid 5-1:0.0: can't add hid device: -32 [ 478.361823][ T977] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 478.774221][ T10] usb 5-1: USB disconnect, device number 26 [ 478.973444][ T24] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 479.152936][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 479.422598][ T9800] netlink: 452 bytes leftover after parsing attributes in process `syz.4.886'. [ 479.694246][ T24] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 479.702320][ T24] usb 4-1: config 0 has no interface number 0 [ 479.713796][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.729283][ T24] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.753373][ T24] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 479.762946][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.802953][ T24] usb 4-1: config 0 descriptor?? [ 480.284102][ T10] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 480.492955][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 480.551293][ T10] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 480.591114][ T10] usb 3-1: config 0 has no interface number 0 [ 480.648734][ T10] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.767029][ T10] usb 3-1: config 0 interface 85 has no altsetting 0 [ 480.799239][ T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 480.819110][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.839187][ T10] usb 3-1: Product: syz [ 480.849338][ T10] usb 3-1: Manufacturer: syz [ 480.862026][ T10] usb 3-1: SerialNumber: syz [ 480.914342][ T10] usb 3-1: config 0 descriptor?? [ 481.095892][ T9818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.892'. [ 481.239085][ T24] uclogic 0003:28BD:0071.0009: pen parameters not found [ 481.418671][ T10] appletouch 3-1:0.85: Geyser mode initialized. [ 481.603299][ T24] uclogic 0003:28BD:0071.0009: interface is invalid, ignoring [ 481.607333][ T10] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input16 [ 481.644062][ T10] usb 3-1: USB disconnect, device number 38 [ 481.644227][ C1] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 482.604441][ T24] usb 4-1: USB disconnect, device number 29 [ 483.131708][ T10] appletouch 3-1:0.85: input: appletouch disconnected [ 483.163648][ T9842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 483.164282][ T24] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 483.332786][ T9841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.897'. [ 483.544201][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 483.549869][ T9835] lo speed is unknown, defaulting to 1000 [ 483.568111][ T9835] lo speed is unknown, defaulting to 1000 [ 483.570641][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 483.633122][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 483.670971][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 483.689506][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.732331][ T24] usb 4-1: Product: syz [ 483.753157][ T24] usb 4-1: Manufacturer: syz [ 483.757851][ T24] usb 4-1: SerialNumber: syz [ 484.044272][ T24] usb 4-1: 0:2 : does not exist [ 484.093426][ T24] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 484.223423][ T24] usb 4-1: USB disconnect, device number 30 [ 484.341081][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 484.455218][ T9859] netlink: 8 bytes leftover after parsing attributes in process `syz.2.903'. [ 484.881254][ T8409] udevd[8409]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 485.497180][ T9867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 486.307855][ T10] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 487.243175][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 487.263679][ T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 487.343014][ T10] usb 1-1: config 0 has no interface number 0 [ 487.391999][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.672164][ T9904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.909'. [ 487.932239][ T10] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.965470][ T9] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 487.973221][ T5822] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 488.012638][ T10] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 488.108535][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.152912][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 488.180355][ T5822] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.194250][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 488.224539][ T9] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 488.232981][ T5822] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 488.259316][ T9] usb 3-1: config 0 has no interface number 0 [ 488.267747][ T10] usb 1-1: config 0 descriptor?? [ 488.300792][ T9] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 488.348515][ T5822] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 488.437442][ T9911] netlink: 'syz.1.910': attribute type 8 has an invalid length. [ 488.461555][ T9911] bridge0: port 2(bridge_slave_1) entered disabled state [ 488.469999][ T9911] bridge0: port 1(bridge_slave_0) entered disabled state [ 488.500940][ T9] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 488.523572][ T5822] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.545733][ T9911] bridge0: entered allmulticast mode [ 488.560760][ T5822] usb 5-1: Product: syz [ 488.620582][ T5822] usb 5-1: Manufacturer: syz [ 488.629457][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 488.738720][ T5822] usb 5-1: SerialNumber: syz [ 488.747996][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.772914][ T9] usb 3-1: Product: syz [ 488.804633][ T9] usb 3-1: Manufacturer: syz [ 488.831429][ T9] usb 3-1: SerialNumber: syz [ 488.861501][ T9] usb 3-1: config 0 descriptor?? [ 488.960225][ T10] uclogic 0003:28BD:0071.000A: pen parameters not found [ 488.976933][ T10] uclogic 0003:28BD:0071.000A: interface is invalid, ignoring [ 489.048005][ T5822] usb 5-1: 0:2 : does not exist [ 489.073745][ T10] usb 1-1: USB disconnect, device number 31 [ 489.103700][ T5822] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 489.193466][ T5822] usb 5-1: USB disconnect, device number 27 [ 489.276146][ T8496] udevd[8496]: setting owner of /dev/bus/usb/005/027 to uid=0, gid=0 failed: No such file or directory [ 489.462270][ T8496] udevd[8496]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.996720][ T9] usb 3-1: can't set config #0, error -71 [ 490.148929][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 490.272903][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.914'. [ 490.427667][ T9] usb 3-1: USB disconnect, device number 39 [ 490.952449][ T9943] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 492.829467][ T9959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.920'. [ 493.464661][ T9965] FAULT_INJECTION: forcing a failure. [ 493.464661][ T9965] name failslab, interval 1, probability 0, space 0, times 0 [ 493.514359][ T9965] CPU: 1 UID: 0 PID: 9965 Comm: syz.4.921 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 493.514394][ T9965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 493.514405][ T9965] Call Trace: [ 493.514413][ T9965] [ 493.514421][ T9965] dump_stack_lvl+0x189/0x250 [ 493.514453][ T9965] ? __pfx____ratelimit+0x10/0x10 [ 493.514476][ T9965] ? __pfx_dump_stack_lvl+0x10/0x10 [ 493.514502][ T9965] ? __pfx__printk+0x10/0x10 [ 493.514528][ T9965] ? __pfx___might_resched+0x10/0x10 [ 493.514552][ T9965] should_fail_ex+0x414/0x560 [ 493.514581][ T9965] ? vmemdup_user+0x26/0xd0 [ 493.514604][ T9965] should_failslab+0xa8/0x100 [ 493.514626][ T9965] __kvmalloc_node_noprof+0x168/0x600 [ 493.514647][ T9965] ? vmemdup_user+0x26/0xd0 [ 493.514678][ T9965] vmemdup_user+0x26/0xd0 [ 493.514703][ T9965] map_lookup_elem+0x237/0x620 [ 493.514725][ T9965] ? bpf_lsm_bpf+0x9/0x20 [ 493.514753][ T9965] __sys_bpf+0x46b/0x860 [ 493.514776][ T9965] ? __pfx___sys_bpf+0x10/0x10 [ 493.514806][ T9965] ? ksys_write+0x22a/0x250 [ 493.514826][ T9965] ? __pfx_ksys_write+0x10/0x10 [ 493.514841][ T9965] ? rcu_is_watching+0x15/0xb0 [ 493.514869][ T9965] __x64_sys_bpf+0x7c/0x90 [ 493.514886][ T9965] do_syscall_64+0xfa/0x3b0 [ 493.514906][ T9965] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.514927][ T9965] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.514945][ T9965] ? clear_bhb_loop+0x60/0xb0 [ 493.514967][ T9965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.514984][ T9965] RIP: 0033:0x7f71c958e969 [ 493.515001][ T9965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.515017][ T9965] RSP: 002b:00007f71ca43b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 493.515037][ T9965] RAX: ffffffffffffffda RBX: 00007f71c97b5fa0 RCX: 00007f71c958e969 [ 493.515049][ T9965] RDX: 0000000000000020 RSI: 0000200000000140 RDI: 0000000000000001 [ 493.515069][ T9965] RBP: 00007f71ca43b090 R08: 0000000000000000 R09: 0000000000000000 [ 493.515080][ T9965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.515091][ T9965] R13: 0000000000000000 R14: 00007f71c97b5fa0 R15: 00007ffc0765ff28 [ 493.515119][ T9965] [ 494.873844][ T9939] ceph: No mds server is up or the cluster is laggy [ 496.023194][ T5822] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 496.135682][ T9986] fuse: Unknown parameter 'grou00000000000000000000' [ 496.409983][ T5822] usb 5-1: Using ep0 maxpacket: 16 [ 496.451954][ T5822] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 496.460865][ T5822] usb 5-1: config 0 has no interface number 0 [ 496.467280][ T5822] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 496.750387][ T9999] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 497.133786][ T5822] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 497.158992][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 497.232395][ T5822] usb 5-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 497.271864][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 497.376048][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.669592][ T5822] usb 5-1: config 0 descriptor?? [ 497.937987][ T5822] usbhid 5-1:0.1: can't add hid device: -71 [ 497.978931][ T5822] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 497.992727][ T30] audit: type=1804 audit(1748859017.068:54): pid=10002 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.0.930" name="/newroot/183/file0" dev="tmpfs" ino=1011 res=1 errno=0 [ 498.054122][ T5822] usb 5-1: USB disconnect, device number 28 [ 498.288398][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.4.932'. [ 498.437356][T10018] netlink: 156 bytes leftover after parsing attributes in process `syz.1.935'. [ 498.577298][T10026] netlink: 'syz.1.935': attribute type 13 has an invalid length. [ 499.008234][T10028] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 500.162987][T10039] fuse: Unknown parameter 'grou00000000000000000000' [ 500.300895][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 500.463102][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.4.941'. [ 501.202977][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 501.332965][ T977] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 501.362971][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 501.376267][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 501.411754][ T9] usb 3-1: config 0 has no interface number 0 [ 501.426078][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.441758][ T9] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.468974][ T9] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 501.481660][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.502039][ T9] usb 3-1: config 0 descriptor?? [ 501.512995][ T977] usb 1-1: Using ep0 maxpacket: 32 [ 501.523852][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.530227][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.546930][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.568005][T10065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 501.808396][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 502.011006][ T977] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 502.021448][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.060858][ T977] usb 1-1: config 0 descriptor?? [ 502.665322][ T977] hub 1-1:0.0: USB hub found [ 502.703229][ T9] uclogic 0003:28BD:0071.000B: pen parameters not found [ 502.732869][ T9] uclogic 0003:28BD:0071.000B: interface is invalid, ignoring [ 502.908194][T10057] block nbd0: NBD_DISCONNECT [ 502.915365][ T10] usb 3-1: USB disconnect, device number 40 [ 502.973024][ T977] hub 1-1:0.0: 1 port detected [ 504.017306][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 504.245901][ T977] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 504.252279][ T977] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 504.270329][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 504.287121][ T977] usbhid 1-1:0.0: can't add hid device: -32 [ 504.302997][ T977] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 504.353241][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 504.603002][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.637965][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 504.657563][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.695392][ T9] usb 5-1: Product: syz [ 504.864427][ T5822] usb 1-1: USB disconnect, device number 32 [ 504.875490][ T9] usb 5-1: Manufacturer: syz [ 504.902894][ T9] usb 5-1: SerialNumber: syz [ 504.924232][ T9] usb 5-1: config 0 descriptor?? [ 504.941795][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 505.043701][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 506.117405][T10077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.147147][T10077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 506.207350][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (86) [ 506.271611][T10106] tmpfs: Unknown parameter 'rpquota_block_hardlimit' [ 506.378655][T10106] netlink: 8 bytes leftover after parsing attributes in process `syz.2.952'. [ 506.417529][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 506.455798][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 506.469190][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 506.509538][ T9] usb 5-1: USB disconnect, device number 29 [ 506.523518][T10110] fuse: Unknown parameter 'grou00000000000000000000' [ 506.534620][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 506.588115][ T9] em28xx 5-1:0.0: Freeing device [ 508.187548][T10132] binder: BINDER_SET_CONTEXT_MGR already set [ 508.193890][T10132] binder: 10131:10132 ioctl 4018620d 200000000140 returned -16 [ 510.695982][T10156] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 512.495587][T10175] fuse: Unknown parameter 'group_i00000000000000000000' [ 512.679234][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 512.736694][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 512.912990][ T977] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 513.093039][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 513.243661][ T24] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 513.372416][ T5822] libceph: connect (1)[c::]:6789 error -101 [ 513.426769][ T5822] libceph: mon0 (1)[c::]:6789 connect error [ 513.447200][ T977] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 513.523002][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 513.578263][ T977] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 513.588176][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 513.608612][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.623004][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.652966][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 513.661995][ T977] usb 1-1: Product: syz [ 513.715834][ T977] usb 1-1: Manufacturer: syz [ 513.720503][ T977] usb 1-1: SerialNumber: syz [ 513.754417][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 513.787543][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.800460][ T977] usb 1-1: config 0 descriptor?? [ 513.807756][T10176] ceph: No mds server is up or the cluster is laggy [ 513.819503][ T24] usb 3-1: Product: syz [ 513.828010][ T977] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 513.848367][ T24] usb 3-1: Manufacturer: syz [ 513.976678][ T977] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 513.986452][ T24] usb 3-1: SerialNumber: syz [ 514.017040][ T9] libceph: connect (1)[c::]:6789 error -101 [ 514.033150][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 514.131852][T10195] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.850050][ T24] usb 3-1: 0:2 : does not exist [ 514.868191][ T24] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 515.044787][ T24] usb 3-1: USB disconnect, device number 41 [ 515.264804][ T8496] udevd[8496]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 515.435181][T10182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 515.484441][ T5947] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 515.572193][T10182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 515.618574][ T977] em28xx 1-1:0.0: unknown em28xx chip ID (86) [ 515.737281][ T5947] usb 4-1: config 0 has no interfaces? [ 515.820599][ T977] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 515.829519][ T977] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 515.838398][ T5947] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 515.853418][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.862738][ T5947] usb 4-1: Product: syz [ 515.867379][ T5947] usb 4-1: Manufacturer: syz [ 515.892486][ T5947] usb 4-1: SerialNumber: syz [ 515.925177][ T977] em28xx 1-1:0.0: No AC97 audio processor [ 515.988412][ T5947] usb 4-1: config 0 descriptor?? [ 516.078320][ T977] usb 1-1: USB disconnect, device number 33 [ 516.087482][T10212] netlink: 24 bytes leftover after parsing attributes in process `syz.2.975'. [ 516.164889][ T977] em28xx 1-1:0.0: Disconnecting em28xx [ 516.439284][ T977] em28xx 1-1:0.0: Freeing device [ 517.350470][T10203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.359514][T10203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.865092][T10249] FAULT_INJECTION: forcing a failure. [ 519.865092][T10249] name failslab, interval 1, probability 0, space 0, times 0 [ 519.942963][T10249] CPU: 0 UID: 0 PID: 10249 Comm: syz.0.982 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 519.942992][T10249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 519.943003][T10249] Call Trace: [ 519.943012][T10249] [ 519.943020][T10249] dump_stack_lvl+0x189/0x250 [ 519.943053][T10249] ? __pfx____ratelimit+0x10/0x10 [ 519.943076][T10249] ? __pfx_dump_stack_lvl+0x10/0x10 [ 519.943101][T10249] ? __pfx__printk+0x10/0x10 [ 519.943127][T10249] ? __pfx___might_resched+0x10/0x10 [ 519.943155][T10249] should_fail_ex+0x414/0x560 [ 519.943185][T10249] should_failslab+0xa8/0x100 [ 519.943207][T10249] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 519.943228][T10249] ? __alloc_skb+0x112/0x2d0 [ 519.943259][T10249] __alloc_skb+0x112/0x2d0 [ 519.943289][T10249] netlink_sendmsg+0x5c6/0xb30 [ 519.943329][T10249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.943366][T10249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 519.943385][T10249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.943413][T10249] __sock_sendmsg+0x219/0x270 [ 519.943440][T10249] ____sys_sendmsg+0x505/0x830 [ 519.943466][T10249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.943496][T10249] ? import_iovec+0x74/0xa0 [ 519.943520][T10249] ___sys_sendmsg+0x21f/0x2a0 [ 519.943541][T10249] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.943600][T10249] ? __fget_files+0x2a/0x420 [ 519.943621][T10249] ? __fget_files+0x3a0/0x420 [ 519.943654][T10249] __x64_sys_sendmsg+0x19b/0x260 [ 519.943677][T10249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.943707][T10249] ? __pfx_ksys_write+0x10/0x10 [ 519.943722][T10249] ? rcu_is_watching+0x15/0xb0 [ 519.943750][T10249] ? do_syscall_64+0xbe/0x3b0 [ 519.943776][T10249] do_syscall_64+0xfa/0x3b0 [ 519.943797][T10249] ? lockdep_hardirqs_on+0x9c/0x150 [ 519.943838][T10249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.943856][T10249] ? clear_bhb_loop+0x60/0xb0 [ 519.943879][T10249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.943896][T10249] RIP: 0033:0x7efe46d8e969 [ 519.943913][T10249] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 519.943929][T10249] RSP: 002b:00007efe47b6f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.943950][T10249] RAX: ffffffffffffffda RBX: 00007efe46fb5fa0 RCX: 00007efe46d8e969 [ 519.943963][T10249] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 519.943974][T10249] RBP: 00007efe47b6f090 R08: 0000000000000000 R09: 0000000000000000 [ 519.943985][T10249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.943996][T10249] R13: 0000000000000000 R14: 00007efe46fb5fa0 R15: 00007fffd04e9038 [ 519.944028][T10249] [ 520.394229][ T24] usb 4-1: USB disconnect, device number 31 [ 521.072308][T10267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 521.096063][ T9] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 522.322440][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 522.582092][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 522.633860][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 522.787781][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.833297][ T9] usb 2-1: config 0 descriptor?? [ 522.863001][ T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 523.023205][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 523.036957][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 523.063759][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 523.119399][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 523.129169][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.151755][ T10] usb 4-1: Product: syz [ 523.156808][ T10] usb 4-1: Manufacturer: syz [ 523.164821][ T10] usb 4-1: SerialNumber: syz [ 523.188300][ T10] usb 4-1: config 0 descriptor?? [ 523.211379][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 523.233219][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 523.310434][ T9] ryos 0003:1E7D:3138.000C: hidraw0: USB HID v0.06 Device [HID 1e7d:3138] on usb-dummy_hcd.1-1/input0 [ 523.497488][ T9] usb 2-1: USB disconnect, device number 28 [ 523.529219][T10285] fido_id[10285]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:1E7D:3138.000C/report_descriptor': No such device [ 523.689223][T10283] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 523.780608][T10284] 8021q: adding VLAN 0 to HW filter on device bond2 [ 523.905279][T10264] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.987606][T10264] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.033950][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (86) [ 524.246524][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 524.291414][ T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 524.327318][ T10] em28xx 4-1:0.0: No AC97 audio processor [ 524.355216][ T10] usb 4-1: USB disconnect, device number 32 [ 524.362278][ T10] em28xx 4-1:0.0: Disconnecting em28xx [ 524.374124][ T10] em28xx 4-1:0.0: Freeing device [ 524.408109][ T9] libceph: connect (1)[c::]:6789 error -101 [ 524.545338][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 525.519101][ T9] libceph: connect (1)[c::]:6789 error -101 [ 525.569772][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 526.212879][T10323] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 526.289059][T10305] ceph: No mds server is up or the cluster is laggy [ 526.393229][ T9] libceph: connect (1)[c::]:6789 error -101 [ 526.399299][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 526.514083][T10309] ceph: No mds server is up or the cluster is laggy [ 531.536761][T10417] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.353519][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1030'. [ 532.643221][ T5822] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 532.815111][T10445] 9pnet_fd: Insufficient options for proto=fd [ 532.843065][ T5822] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 532.892158][ T5822] usb 5-1: config 0 has no interface number 0 [ 532.922961][ T5822] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 532.982412][ T5822] usb 5-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 533.006276][ T5822] usb 5-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 533.964857][ T5822] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.976442][ T5822] usb 5-1: config 0 descriptor?? [ 533.994325][ T5822] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.120/input/input17 [ 534.143730][T10454] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 534.249940][ T5822] usb 5-1: USB disconnect, device number 30 [ 534.843160][ T10] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 535.173631][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 535.324868][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 535.354545][ T10] usb 4-1: config 218 has an invalid interface number: 135 but max is 0 [ 535.386733][ T10] usb 4-1: config 218 has no interface number 0 [ 535.430107][ T10] usb 4-1: config 218 interface 135 has no altsetting 0 [ 535.505919][ T10] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=38.d9 [ 535.539540][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.771182][ T5822] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 536.523112][ T10] usb 4-1: Product: syz [ 536.527356][ T10] usb 4-1: Manufacturer: syz [ 536.531985][ T10] usb 4-1: SerialNumber: syz [ 537.082959][ T5822] usb 1-1: Using ep0 maxpacket: 16 [ 537.111842][ T5822] usb 1-1: config 1 has an invalid descriptor of length 233, skipping remainder of the config [ 537.187365][ T5822] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 537.245554][ T5822] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 537.271437][ T10] ------------[ cut here ]------------ [ 537.286050][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 537.302561][ T10] UBSAN: array-index-out-of-bounds in drivers/hid/usbhid/hid-core.c:1026:7 [ 537.328071][ T5822] usb 1-1: Product: syz [ 537.332432][ T10] index 1 is out of range for type 'struct hid_class_descriptor[1]' [ 537.352477][ T5822] usb 1-1: Manufacturer: syz [ 537.359405][ T5822] usb 1-1: SerialNumber: syz [ 537.367728][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 537.367755][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.367769][ T10] Workqueue: usb_hub_wq hub_event [ 537.367803][ T10] Call Trace: [ 537.367812][ T10] [ 537.367820][ T10] dump_stack_lvl+0x189/0x250 [ 537.367858][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.367888][ T10] ? __pfx__printk+0x10/0x10 [ 537.367924][ T10] ubsan_epilogue+0xa/0x40 [ 537.367944][ T10] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 537.367985][ T10] usbhid_parse+0x4ec/0xbd0 [ 537.368013][ T10] ? __pfx_usbhid_parse+0x10/0x10 [ 537.368042][ T10] ? hid_ignore+0x615/0x820 [ 537.368066][ T10] hid_add_device+0x125/0x540 [ 537.368102][ T10] usbhid_probe+0xe13/0x12a0 [ 537.368138][ T10] usb_probe_interface+0x644/0xbc0 [ 537.368173][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 537.368191][ T10] really_probe+0x26a/0x9a0 [ 537.368224][ T10] __driver_probe_device+0x18c/0x2f0 [ 537.368252][ T10] driver_probe_device+0x4f/0x430 [ 537.368280][ T10] __device_attach_driver+0x2ce/0x530 [ 537.368309][ T10] bus_for_each_drv+0x251/0x2e0 [ 537.368351][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 537.368374][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 537.368425][ T10] __device_attach+0x2b8/0x400 [ 537.368452][ T10] ? __pfx___device_attach+0x10/0x10 [ 537.368477][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 537.368514][ T10] bus_probe_device+0x185/0x260 [ 537.368547][ T10] device_add+0x7b6/0xb50 [ 537.368574][ T10] usb_set_configuration+0x1a87/0x20e0 [ 537.368643][ T10] usb_generic_driver_probe+0x8d/0x150 [ 537.368674][ T10] usb_probe_device+0x1c4/0x390 [ 537.368698][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 537.368715][ T10] really_probe+0x26a/0x9a0 [ 537.368753][ T10] __driver_probe_device+0x18c/0x2f0 [ 537.368779][ T10] driver_probe_device+0x4f/0x430 [ 537.368807][ T10] __device_attach_driver+0x2ce/0x530 [ 537.368836][ T10] bus_for_each_drv+0x251/0x2e0 [ 537.368865][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 537.368888][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 537.368930][ T10] __device_attach+0x2b8/0x400 [ 537.368956][ T10] ? __pfx___device_attach+0x10/0x10 [ 537.368984][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 537.369019][ T10] bus_probe_device+0x185/0x260 [ 537.369052][ T10] device_add+0x7b6/0xb50 [ 537.369078][ T10] usb_new_device+0xa39/0x16c0 [ 537.369121][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 537.369149][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.369171][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.369198][ T10] hub_event+0x2941/0x4a00 [ 537.369296][ T10] ? __pfx_hub_event+0x10/0x10 [ 537.369331][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 537.369363][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.369383][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 537.369412][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 537.369438][ T10] process_scheduled_works+0xae1/0x17b0 [ 537.369500][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 537.369547][ T10] worker_thread+0x8a0/0xda0 [ 537.369607][ T10] kthread+0x711/0x8a0 [ 537.369640][ T10] ? __pfx_worker_thread+0x10/0x10 [ 537.369674][ T10] ? __pfx_kthread+0x10/0x10 [ 537.369720][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 537.369740][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 537.369761][ T10] ? __pfx_kthread+0x10/0x10 [ 537.369790][ T10] ret_from_fork+0x3fc/0x770 [ 537.369817][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 537.369847][ T10] ? __switch_to_asm+0x39/0x70 [ 537.369864][ T10] ? __switch_to_asm+0x33/0x70 [ 537.369881][ T10] ? __pfx_kthread+0x10/0x10 [ 537.369910][ T10] ret_from_fork_asm+0x1a/0x30 [ 537.369951][ T10] [ 537.370082][ T10] ---[ end trace ]--- [ 537.784755][ T10] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 537.792020][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.15.0-syzkaller-10820-gcd2e103d57e5 #0 PREEMPT(full) [ 537.803566][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 537.813633][ T10] Workqueue: usb_hub_wq hub_event [ 537.818681][ T10] Call Trace: [ 537.821963][ T10] [ 537.824902][ T10] dump_stack_lvl+0x99/0x250 [ 537.829507][ T10] ? __asan_memcpy+0x40/0x70 [ 537.834108][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 537.839323][ T10] ? __pfx__printk+0x10/0x10 [ 537.843932][ T10] panic+0x2db/0x790 [ 537.847847][ T10] ? __pfx_panic+0x10/0x10 [ 537.852276][ T10] ? _printk+0xcf/0x120 [ 537.856483][ T10] ? __pfx__printk+0x10/0x10 [ 537.861086][ T10] check_panic_on_warn+0x89/0xb0 [ 537.866049][ T10] __ubsan_handle_out_of_bounds+0xe9/0xf0 [ 537.871801][ T10] usbhid_parse+0x4ec/0xbd0 [ 537.876316][ T10] ? __pfx_usbhid_parse+0x10/0x10 [ 537.881348][ T10] ? hid_ignore+0x615/0x820 [ 537.885867][ T10] hid_add_device+0x125/0x540 [ 537.890564][ T10] usbhid_probe+0xe13/0x12a0 [ 537.895286][ T10] usb_probe_interface+0x644/0xbc0 [ 537.900435][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 537.906094][ T10] really_probe+0x26a/0x9a0 [ 537.910623][ T10] __driver_probe_device+0x18c/0x2f0 [ 537.915927][ T10] driver_probe_device+0x4f/0x430 [ 537.920964][ T10] __device_attach_driver+0x2ce/0x530 [ 537.926355][ T10] bus_for_each_drv+0x251/0x2e0 [ 537.931233][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 537.937141][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 537.942621][ T10] __device_attach+0x2b8/0x400 [ 537.947397][ T10] ? __pfx___device_attach+0x10/0x10 [ 537.952692][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 537.957921][ T10] bus_probe_device+0x185/0x260 [ 537.962788][ T10] device_add+0x7b6/0xb50 [ 537.967146][ T10] usb_set_configuration+0x1a87/0x20e0 [ 537.972645][ T10] usb_generic_driver_probe+0x8d/0x150 [ 537.978121][ T10] usb_probe_device+0x1c4/0x390 [ 537.982980][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 537.988353][ T10] really_probe+0x26a/0x9a0 [ 537.992877][ T10] __driver_probe_device+0x18c/0x2f0 [ 537.998171][ T10] driver_probe_device+0x4f/0x430 [ 538.003207][ T10] __device_attach_driver+0x2ce/0x530 [ 538.008592][ T10] bus_for_each_drv+0x251/0x2e0 [ 538.013562][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 538.019485][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 538.024899][ T10] __device_attach+0x2b8/0x400 [ 538.029695][ T10] ? __pfx___device_attach+0x10/0x10 [ 538.035002][ T10] ? do_raw_spin_unlock+0x122/0x240 [ 538.040222][ T10] bus_probe_device+0x185/0x260 [ 538.045093][ T10] device_add+0x7b6/0xb50 [ 538.049434][ T10] usb_new_device+0xa39/0x16c0 [ 538.054224][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 538.059437][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 538.064669][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.069965][ T10] hub_event+0x2941/0x4a00 [ 538.074453][ T10] ? __pfx_hub_event+0x10/0x10 [ 538.079235][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 538.084976][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 538.090179][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 538.095901][ T10] ? process_scheduled_works+0x9ef/0x17b0 [ 538.101636][ T10] process_scheduled_works+0xae1/0x17b0 [ 538.107225][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 538.113232][ T10] worker_thread+0x8a0/0xda0 [ 538.117858][ T10] kthread+0x711/0x8a0 [ 538.121953][ T10] ? __pfx_worker_thread+0x10/0x10 [ 538.127075][ T10] ? __pfx_kthread+0x10/0x10 [ 538.131682][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 538.136892][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 538.142101][ T10] ? __pfx_kthread+0x10/0x10 [ 538.146708][ T10] ret_from_fork+0x3fc/0x770 [ 538.151310][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 538.156433][ T10] ? __switch_to_asm+0x39/0x70 [ 538.161203][ T10] ? __switch_to_asm+0x33/0x70 [ 538.165976][ T10] ? __pfx_kthread+0x10/0x10 [ 538.170579][ T10] ret_from_fork_asm+0x1a/0x30 [ 538.175371][ T10] [ 538.178545][ T10] Kernel Offset: disabled [ 538.182922][ T10] Rebooting in 86400 seconds..