last executing test programs: 8.424097544s ago: executing program 2 (id=186): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x440440, 0x0) (async) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x440440, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) (async) ioctl$TCFLSH(r1, 0x400455c8, 0x400000009) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000640)=0x40000) 8.038435657s ago: executing program 0 (id=189): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103200009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a4}}, 0x0) mprotect(&(0x7f0000211000/0x3000)=nil, 0x3000, 0x5) 6.398302043s ago: executing program 0 (id=192): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000740)=ANY=[@ANYBLOB="b4000000000201040000000000000000020000003400018014000180080001000102030408000200050607081c0002800500010006000000060002002710000006000300001500003400028014000180080001000102030408000200050607081c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff000000"], 0xb4}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000a00)=ANY=[@ANYBLOB="b4000000000201040000000000020000020000003400018014000180080001000102030408000200050607081c0002800500010006000000060002002710000006000300001500003400028014000180080001000102030508000200050607081c00028005000100060000000600020000000000060003004e200000340003801400018008000100ffffffff08000200ffffffff1c00028005000100ff0000"], 0xb4}}, 0x0) 6.327044509s ago: executing program 0 (id=193): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000000c0)={0x1c, &(0x7f0000000100)={0x20, 0x16, 0x4, "54f505ad"}, 0x0, 0x0}) (async, rerun: 64) syz_usb_control_io(r0, 0x0, 0x0) (rerun: 64) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000180)={0x0, 0xb, 0x4, "0e477e6d"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, &(0x7f0000000200)={0x20, 0x7, 0x4, "60aadbbb"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000300)={0x40, 0x0, 0x4, "82116383"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000380)={0x20, 0x18, 0x4, "8de22fa0"}, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000400)={0x20, 0x15, 0x4, "85b9fe4f"}, 0x0, 0x0}) (async) syz_usb_control_io$uac3(r0, 0x0, 0x0) (async) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000640)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000700)="ee", 0xfffffe5e}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x588) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)={0x0, 0x14, 0x4, "34ee2cea"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000540)={0x34, &(0x7f0000000580)={0x20, 0x17, 0x4, "0f6dfedf"}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000840)={0x44, &(0x7f0000000600)={0x40, 0x15, 0x4, "c7fe4b81"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.199205802s ago: executing program 2 (id=194): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x0, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x10000, 0x1, 0x271}}], 0x1, 0x0, 0x0) (fail_nth: 17) 6.040716366s ago: executing program 2 (id=195): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, 0x0, 0x0) r2 = dup(r0) syz_ublk_setup_queues(r2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2020, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.851072993s ago: executing program 2 (id=196): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$key(0xf, 0x3, 0x2) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) socket$netlink(0x10, 0x3, 0xa) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/comedi4\x00', 0x109040, 0x0) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000400)={0x0, 0x200853, 0xfffffffe, 0x6, 0x4002004, 0x0, 0x100000}) (async, rerun: 32) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000280)=@ethtool_wolinfo={0x6, 0xf5, 0xa0, "8a51bbde2d5b"}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f00000002c0)={'tunl0\x00', 0x0}) (async, rerun: 32) dup(r1) (async, rerun: 32) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x128}, 0x4004000) (async, rerun: 64) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) (async) io_setup(0x9a, &(0x7f00000001c0)) (async, rerun: 64) io_submit(0x0, 0x0, 0x0) (rerun: 64) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) 4.836159484s ago: executing program 2 (id=197): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) getgroups(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0xff) mount(0x0, &(0x7f00000004c0)='./dev\x00', 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000640)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt\x00', 0x0, 0x21) bind$inet(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x402) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x1c, 0x2, 0xffd3, 0xf0, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./dev\x00', &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x5}, 0x16, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) 4.041312979s ago: executing program 1 (id=201): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d00010000600009040080020300000009210804000122050009058103200009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a4}}, 0x0) mprotect(&(0x7f0000211000/0x3000)=nil, 0x3000, 0x5) 3.321752827s ago: executing program 2 (id=206): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, 0x0, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f00000005c0)="00012c615bc20000") syz_usb_disconnect(r0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000700)={0x0, 0x1}, &(0x7f0000000740)=0x8) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000600), 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r9, 0x40103d0b, &(0x7f0000000640)={0x3c1, 0x8}) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f0000000080)=0x15) ioctl(r10, 0x404c4701, &(0x7f00000000c0)="0100000000000000010000000000000001000000000000000000000040000000400000000000000001") r11 = dup(r8) syz_ublk_setup_queues(r11, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f, 0x0, r11}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x20, 0x1000002, 0x199}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b04, 0x2, 0x5, 0x103aa, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4441, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x820d, 0x800, 0x1, 0x76}}], 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r12 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./tracing/events/sched/filter\x00', 0x1, 0x0) pwritev(r12, &(0x7f0000000340)=[{&(0x7f0000000380)="373c2e4b51fa553efcd713c628df21ccfed38d6462fe15901bae3965252ca36911b1d1c37dcb9901dab22fe5b19fac25cd9f3dd508c183eb8857f981ea285e4b69c982bd217ae427", 0x48}], 0x1, 0x20d, 0x5) 3.13133698s ago: executing program 3 (id=209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="144100001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001505000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) 3.028813707s ago: executing program 3 (id=210): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200119000000c9000000000000000a5984bac1fafa2c75ecdcfe164c10bcbd"], 0x0}) 2.518124767s ago: executing program 3 (id=211): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f00000004c0)="8f023f6ad405f9f7657a0b6571fffe05a1de7828d731d2c4d19a34891b0837aec3d17c91117955b9d527e73bd1e5b730a4", 0x31}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xd) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (fail_nth: 5) 2.302437306s ago: executing program 0 (id=212): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@redirect_dir_on}, {@volatile}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0) fsync(r0) splice(r0, &(0x7f00000001c0)=0x6, r0, &(0x7f0000000200)=0x8, 0x40, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8082, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./dev\x00', &(0x7f00000004c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='./dev/sda1\x00', &(0x7f0000000580)='./mnt\x00', &(0x7f00000005c0)='ext4\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt\x00', 0x149000, 0x19e) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) setresuid(r4, r4, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40086607, 0x0) ioctl$KVM_SET_TSC_KHZ_vm(r2, 0xaea2, 0xfffffffffffffffe) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000440)={0x4e65de53, 0x818, &(0x7f0000000280)="f8dd29919710a36792c19225d6c5a74bd620651d25144fa72d429cbab1b218506bad54714c6e628f4673290732f3fc131bf990130c01f5264a259077db85d2fafb35fde55344807c98f77c3aa1daf3c230f8ac51d3b0f6cc89dafae714849d19efdd76efc78dbf2d9aa38022ba9a1a02c5a1f634c8d4b15408d1b3e5ca253a2592c61cfcd97fbc14db4ae37965", &(0x7f0000000340)="21d58a71595e3870c50117619ca6f6053cdfc268b7eadc49c229efeea2347f141a9f845574c8c776c31c059d25aed9a70952a55d67d56a1871532c376e44bcdf30db72ff6605a0cd68a2edd32a1ce06fc5a27e08324ebc53aa1972b0b70c7a93c0fd4b7c7aab891949ba754679c35888f710074de31f9ca9ea1b6bf274dc6be70eb5ddfa51d3643b20223a828d1fa15bb573f60ee980a3c4e625848325a6ceb1e50ce64ff762de812ea7514c2f3c1ae34dea02fd51b62f3c17cf20a31e16370773ab5c5c68c263c9de52ad0ad4da3319d4ca7169242ac455", 0x8d, 0xd8}) 1.701984518s ago: executing program 1 (id=213): syz_usb_connect$midi(0x4, 0x9a, &(0x7f00000000c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x88, 0x1, 0x1, 0x2, 0x10, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x3, 0x1, 0x3, 0x5df2d89598874d0f, 0xd9, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x6, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x3, 0x3, 0x2, [{0x0, 0x1e}, {0xb, 0xf2}], 0x2}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0x3b, 0x9}, @midi_in_jack={0x6, 0x24, 0x2, 0x0, 0xdd, 0x33}, @midi_in_jack={0x6, 0x24, 0x2, 0x7, 0x80}, @midi_out_jack={0x15, 0x24, 0x3, 0x0, 0x3, 0x7, [{0x5, 0x2}, {0x93}, {0xef, 0x3}, {0xfd, 0x8}, {0xfc}, {0xe, 0x6}, {0x5, 0x8}], 0xbb}, @midi_out_jack={0xf, 0x24, 0x3, 0x2, 0x0, 0x4, [{0x10, 0x6}, {0xf9, 0x5}, {0xaf, 0x3}, {0xb4, 0x41}], 0x80}], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd5, 0xd, 0x0, {0x5, 0x25, 0x1, 0x1, '$'}}}, {{0x9, 0x5, 0x0, 0x0, 0x40, 0x2, 0x0, 0x0, {0x6, 0x25, 0x1, 0x2, "17e6"}}}, {{0x9, 0x5, 0x9, 0x4, 0x8, 0x5, 0x9, 0x3, {0x9, 0x25, 0x1, 0x5, "1e6f055eb5"}}}]}}}}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x6, 0x92, 0x5, 0x10, 0x7}, 0xf, &(0x7f00000001c0)={0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x0, 0xb, 0x101}]}, 0x2, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2809}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x44f}}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/rpc\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000680)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000006c0)='./proc\x00', &(0x7f0000000700)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./proc/net/rpc/auth.unix.gid/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000780)=' 294967 95 2\\\\00 0000 0\n', 0x18) r2 = openat(r0, &(0x7f0000000040)='nfsd.export/channel\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='loc', 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "12ad"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x1, &(0x7f0000000640)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r5, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002680)={&(0x7f00000026c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xd4ad1185e214d3bd}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0xd0}}, 0x0) 1.40478252s ago: executing program 0 (id=214): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setitimer(0x2, 0x0, 0x0) getgroups(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0xff) mount(0x0, &(0x7f00000004c0)='./dev\x00', 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./mnt\x00', 0x1ff) mount(&(0x7f0000000580)=@filename='./dev/sda1\x00', &(0x7f00000005c0)='./mnt\x00', &(0x7f0000000600)='ext4\x00', 0x8410, 0x0) chdir(&(0x7f0000000640)='./mnt\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mnt\x00', 0x0, 0x21) bind$inet(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x4, 0x402) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f00000000c0)={0x1c, 0x2, 0xffd3, 0xf0, "cd511591002a49500000008000000000f86a1d73f20000000000000000fbf29c"}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x0, 0x0) setxattr$trusted_overlay_nlink(&(0x7f0000000100)='./dev\x00', &(0x7f0000000140), &(0x7f0000000180)={'L+', 0x5}, 0x16, 0x1) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v2={0x2, @adiantum, 0x10, '\x00', @c}) 1.4042004s ago: executing program 3 (id=215): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffc000/0x3000)=nil) fcntl$getflags(r1, 0xb) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000200)=""/210, 0xd2}], 0x1) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000300)) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0xebc, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x683, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x1}, @broadcast, @broadcast, @from_mac, {0x8, 0xf0}, @value=@ver_80211n={0x0, 0xb22, 0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1}}, 0x10, @random=0x9, 0x2000, @val={0x0, 0x20, @random="293e8fbd5682e5c12c92699f5e82b6c783748acb53da4ab7f7b92aaedd7759f1"}, @val={0x1, 0x5, [{0x40}, {0x9}, {0x9}, {0x1b}, {0x60}]}, @val={0x3, 0x1, 0x9}, @val={0x4, 0x6, {0x5, 0x5, 0x1, 0x34}}, @val={0x6, 0x2, 0x4}, @void, @void, @void, @val={0x3c, 0x4, {0x0, 0x40, 0xb5, 0x7f}}, @val={0x2d, 0x1a, {0x8, 0x1, 0x0, 0x0, {0x4, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x3}, 0x800, 0x1, 0x1}}, @void, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x3, 0x28}}, @void, [{0xdd, 0x91, "fd015b1c89760af57994266f214bf21ba1e4b44ad30bceac4c115e06921e9b53714820dc6e2054067931e40c26586a6a2f6fc653b09f94f61ad80f978a0a7372a90ac27e3d9b5c661c8e0f623a7979896ce0cc3e701dabe4dfc4a6634e97551a5989db87f23d43a506882c3555be619c3595909f724bcc47fe8779eb6d4029895a98216039a19bcd1aea9f0986568ef012"}, {0xdd, 0xb7, "6d82513ba2c44c7bc227266b8f6ed76fed1174a2ef53217b24898f994e875fe78d597355e3190e31860b1d4712ecae117400d689299aca30755a37e1058bd3dc96bbc0e5eb28546697f38a7b3ab1f84264ea42d6993b0a114c143e9fdcfa364d23cff4e27d8a2635d67a2c35a169699c7d107c03b0eb519b9eba645cfd2696854e5e8f65d2eb08c17cf67e84943486e4e9fff53286e03b9d9650751e393374b2450e7fd7bd41b45897f2ab45b5e6667f7d5e7c0c500b7b"}, {0xdd, 0x58, "b1fafea03ef8a912220dca6f6e1158286410d09db884b84280a1bb45c131bb45399317eefa2c451aa3ea1799eb49cf064d1652822e7b0d4eb6c0df59dd3e23bfe055057f62caf3a1345048ffba329688596c8f9365e40778"}, {0xdd, 0x2c, "93d44a671085a65372a74a9cc8cdd3a50e40d437a8396cf1476a24cf21ca2ab64ee24e8ed09f07d83150dd8d"}, {0xdd, 0xcb, "3634dbd5eaca43bacfcf81c44fd79e4412bbba6a3d4a9bc7264765026380af9ae947139dde5f1bc252a5a1de160bea44c61f3f53a087a3a8e3d23d30437daa5d0d87370d30acd970b641d815d3634bdedd2b777099c17f9db799eadf079d6af0eec71e0962a8ab79f7f36f4553c635bafc524fe97744bd8f22b81774f355329ad59f46894583deaefb5abcc86eb3089ba2f1de8f5c4b4306f584e88b8f87eecdb31a4c53505798abdb38ca694d99211c1bfba512a139717d8518d5df1aa245d199eff1674896328a5fc8fe"}, {0xdd, 0xe3, "0850df5862f4ac0f12c64c5cd1d501b35cf238c8f723e1bd2adf2f2efa9a87df6dd35cd143969298446f0182e6dd6f9c68c9b13039508eb859faa0f9928a7f28174e6bd53e612b78bb563ffef4ee46a01340095e377d9164b52a35fdb75214d8239eed0bc337266ef96949b28c2e378a60cd5dd450c65fbdcfb59491e4b1301907d3f7d7b7ac68688ddffb8a1e6fd09348370731920f63243db94eb0db4fca4a73042cf9d86b1da14887732e40921548a9b34422882564a37a5ff88c5494847058e385273ae544a9dfdbd492df0b26fd19da87abb25a86dbcfd83a7c68d28b85b975ad"}, {0xdd, 0x69, "a3c675d2de4feb1077cc70de5dd0543c044c7e2763ec98533d97ae95dd1413ab62f991312a9ec1a7b3885dd2c04e69ba1d1120e26405e18a1781551838f9fab2681b5042cd295b3fb52bca856c481b129de0af97f230fdf42c265c48228f6e5d106f0d5f7902c4852c"}, {0xdd, 0xd4, "4e2508d4ea85e54ae9a4e3fc67591435d4dea99e8d170a099ddd48531ae1acc8ac2edffae060daebb0b3d65b4f02b4171c4022df96fec4a7e7e56f71fb659b3d08d3ada277ac225dae7d4e6d476ed85bf3c29ccf59feec6301b3b33fd079e45d4b3f96b7cb38639b2d150d579dff8c6fd2837628ac074b5d3235bc97122fce666abd356b911d1a961dada7b26e72dcf606fe1b4c1c05788772245b706ff676a83cccf71a8c4e3f6dc54e943fd7ad866d31adbacc81c2dca1df7b608ca96f318335239e582f40a88d8be7662f5bbb24ffc39edec6"}, {0xdd, 0xf3, "15674d917011064f0933854d4b0a01c62b7b9893a8d9d648e580125abc4c0f5d34afc80f189672f7f53713f6b7f342fa6d2877a22ad4340459b8b01ab5e4fc4c32a7bb79e4b0c44c4cfecb018a5bb7f63a389777d03388b4099af0c5729225d0dc6d979145f7b7cb66485590b197f0f865a1796fee9a13b306134734d81a3202615ca36b950d5bafe1ba2a3f2e330f292261b806c717f318d1690e77bd25c5a1ac4db94345e1fecce944234ad5e67bbde0ef17e7edb11903c53e22699dd31ffc16213b1c7745b7a9e328980d7f7159bec7374d7426bae3faa2a1143815bcd4d6b39b06e1aa878060ca90b9d21e6ffb21d42e33"}, {0xdd, 0x36, "0253b7ab6f09e2020f1c7d1f6bf28d2d7496abab76f964a1d5395291d01f1cf6cb7cfcf7eb68f1117fd3a57a66a90a754ab4a6b5d54e"}]}}, @NL80211_ATTR_PROBE_RESP={0x373, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x49b, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @device_a, @from_mac=@device_b, {0x8, 0x7}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1}}, 0xd9, @default, 0x1010, @void, @void, @val={0x3, 0x1, 0xa1}, @val={0x4, 0x6, {0x6, 0x1, 0x7, 0x9}}, @void, @val={0x5, 0x9e, {0x7f, 0xa4, 0x0, "ea4ad0f39ee1b5f14a7f84e2a796f617cc321cfd78f75683d214fb0ff7c53bd56bbb82f90f774c39976b134a61dd322c676c095fa74a438acd41aef7d7d8203ad1da4027a1ad2a4a9f97696e02b65f92ab942cd7acebd3355687f66a644836ef78a93dee79e4e939e07d85387994ae521e066aaa9b7dfcc631dda97d76db1ab189d274f93d6397161e6e1c2407fc7f5a3436aea4213388ccb09250"}}, @val={0x25, 0x3, {0x0, 0x24, 0x2}}, @val={0x2a, 0x1, {0x1}}, @val={0x3c, 0x4, {0x0, 0x6, 0x9f, 0x7}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0xffffffffffffffff, 0x1, 0x1, 0x2, 0x3, 0x40}}, @void, [{0xdd, 0x69, "4e373b9b84e7e47963634b5927e7982eaebbd5412aa028851427d99313e6808d955cea7a5405fb567c4784dbd9a978560f663a67c4f927dcbfbd20cb17f68b8c5b3fb9566950ab9bda8c2fbca082f45b71a3f0d0471704adcc0c66e2b800c462ebd3595bf734824ea9"}, {0xdd, 0x8f, "af722f7ef37b1d8947bf084be34406e0ab1d6cfbf66403bbf9a8cf138f548152664eaa9111cb5cc6b7e99cd96678685065af2113f3fa8b6d6786a598c752ab1a5954ec928194fde3c2ae87015aadffe103e25094572f8da2fe2b79fe1e00ece1ff74b552122e1ad2511f665b66934581b20b0e97050266b84a338b41b52fa8d407e9ea45742349ea1ed4f6f6802a0b"}, {0xdd, 0xa2, "3aaf59eeb7519f8e277a458004e97ec5b6077ff1cff561dd56ed4676192a366229035df79a3ec249575efa6809a78c57abcc45caa61eb004fe28594adfb0fa248962a1df59d8497aea725b43a0c7610d0e57be773d324dc0d37eafd69c2782dc575f17f39d004794509b19df56c8bfea2c2ccef53200a53abf4f905763cf4dd0ad015933a3be367209a8e34db308970baf1890233bb0a7ccde269b85bee59a9d3d22"}, {0xdd, 0x93, "d6aaa0237d57ecb1e1e5130240195da426ea634cd67570cf22f674057565f58d3a475ac4a67076d207de833d85ca06d3afd686f729906f6eb02c9036266bac41fefed6e13b440e5e9df7cda37455f772e8f51b55e816c9287a39dfbccca519ddf21ff3cd1b38b21564d42a7239c8cbefbc18c133ea0fdbeefe1b60bfad7f83a8b6cda6cecaf16ff47df52428c3e34bf602746e"}, {0xdd, 0x9e, "709ad0aa2911aed07d1efd0b0dc4d48f0d020152c944cb97eda26367866a1add1b40ac8cc8f55c8ef913c219323936e1fa2fc30e1a0a061bec35c7a0701964c3f3736aae4077c189b8708605a0913b9714323c79c527bd68939b67b85e4fc9650318caff22970b574a7aa5005267b8b3cb425f678ff8afc62c1f01edaf4eef89bece6ae1aa75ee1372b89c5b6cb2f6426de57f9526f3f9f1827ed5f94fa5"}, {0xdd, 0xce, "577d244a7e33eacdc2cd57a59a877d12c1d5fed72247f1c872f9e89bb047b4ad5fc44d19e0966ee164da6f9ab31c3ac2e381ce25723e60a2fd9fa0a7f528c93794194725beca68566dede791bf52eafcbded73d1b3d2db9956fad53301345e36f0a68904bc2ec549044036ffb0b20ebb44a2b9956e86d11a683dd1020445fe9afebe318c799eb94f3e41f28f00b09be104be7242cf754d5eef749f701f80acfb256526371e68fdb62bf710f8ce13cdcc9affc25a0dbd8c30d6208b03c8eb8676c42c600228c89dc16be4e2a3d0ab"}]}}], @chandef_params, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0xebc}}, 0x0) 982.997898ms ago: executing program 1 (id=216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x8814}, 0x24000000) (async, rerun: 32) r1 = openat$md_new_array(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (rerun: 32) write$md_new_array(r1, &(0x7f0000000080)={'md', @num=0x0}, 0x3) 807.854832ms ago: executing program 3 (id=217): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000006c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000700)='./proc\x00', &(0x7f0000000740)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./proc/sys/kernel/watchdog\x00', 0x2, 0x0) write(r1, &(0x7f00000007c0)='2', 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000540)={0x4, {{0x2, 0x4e22, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x4e22, @multicast2}}}, 0x88) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) write$uinput_user_dev(r0, &(0x7f0000000080)={'syz0\x00', {0x2, 0x0, 0x0, 0x3dde}, 0x0, [0x0, 0x0, 0x200, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x40003, 0x0, 0x0, 0x0, 0x0, 0x5], [0x0, 0x0, 0x8, 0xb16, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x2, 0x0, 0x9, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x9, 0xd, 0x1000, 0x0, 0xf, 0x0, 0x2, 0x0, 0x2, 0x0, 0xfffffffe, 0x4, 0xffffffff, 0xfffffffe, 0x0, 0xff, 0xfffffffd, 0xfffffffd, 0x0, 0xfffffffa, 0x0, 0x80000000, 0x0, 0x0, 0x800, 0x0, 0x0, 0x9148, 0x0, 0x2, 0x0, 0xd, 0xffffffff], [0x80000001, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xddc, 0x0, 0x0, 0xfffffffc, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x3, 0x8, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x5, 0x2, 0x0, 0x8000000, 0x0, 0x0, 0xffffffff, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x7, 0x4], [0x101, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x8, 0x0, 0xc045, 0x10, 0x16, 0x0, 0x4, 0x0, 0x80, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0xfffffffe, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0xfffffffe, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x3, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x4, 0x0, 0x0, 0xfffffffd, 0x80, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c) syz_open_dev$evdev(&(0x7f0000000500), 0x0, 0x549000) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="048ef200317910"], 0xa) 608.448931ms ago: executing program 1 (id=218): mknodat$md(0xffffffffffffff9c, &(0x7f0000000000)='./md0\x00', 0x6180, 0x0) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) r2 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000080)='./md0\x00', 0x2, 0x0) ioctl$BLKROSET(r2, 0x125d, &(0x7f00000000c0)=0x5) 578.756772ms ago: executing program 1 (id=219): r0 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\v'], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000180)=ANY=[@ANYBLOB="00140d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="200119000000c9000000000000000a5984bac1fafa2c75ecdcfe164c10bcbd"], 0x0}) 128.40929ms ago: executing program 0 (id=220): ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='270', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0xac, 0x2, 0xf, 0xb}, {0x5, 0x6, 0x9, 0x9}]}) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ed) (async) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) (async) write(r0, &(0x7f0000000140)='270', 0x3) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000240)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) (async) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') (async) openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) (async) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000180)={0x2, &(0x7f0000000080)=[{0xac, 0x2, 0xf, 0xb}, {0x5, 0x6, 0x9, 0x9}]}) (async) 28.268724ms ago: executing program 3 (id=221): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000201c1b091c00000000000109022d0001000060000904008002030000000921080400012205000905810320000908070905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x2, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000700)={0x84, &(0x7f00000005c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1a4}}, 0x0) mprotect(&(0x7f0000211000/0x3000)=nil, 0x3000, 0x5) 0s ago: executing program 1 (id=222): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002040)={0x0, 0x1100, &(0x7f0000002080)=[{&(0x7f00000020c0)="2e00000010008188e6b62aa73f72cc9f0ba1f848030000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1, 0x0, 0x0, 0x20}, 0x24088054) kernel console output (not intermixed with test programs): vice number 5 using dummy_hcd [ 105.026676][ T10] usb 4-1: device descriptor read/8, error -71 [ 105.135840][ T10] usb usb4-port1: unable to enumerate USB device [ 105.212630][ T5829] FAULT_INJECTION: forcing a failure. [ 105.212630][ T5829] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.212667][ T5829] CPU: 1 UID: 0 PID: 5829 Comm: syz.2.11 Not tainted syzkaller #0 PREEMPT(full) [ 105.212694][ T5829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 105.212708][ T5829] Call Trace: [ 105.212719][ T5829] [ 105.212729][ T5829] dump_stack_lvl+0xe8/0x150 [ 105.212770][ T5829] should_fail_ex+0x3eb/0x540 [ 105.212812][ T5829] strncpy_from_user+0x36/0x2c0 [ 105.212851][ T5829] do_getname+0x77/0x250 [ 105.212876][ T5829] do_sys_openat2+0xce/0x200 [ 105.212899][ T5829] ? __se_sys_futex+0x3a8/0x450 [ 105.212934][ T5829] ? __pfx_do_sys_openat2+0x10/0x10 [ 105.212964][ T5829] ? rcu_is_watching+0x16/0xb0 [ 105.213001][ T5829] __x64_sys_openat+0x138/0x170 [ 105.213030][ T5829] do_syscall_64+0x166/0x520 [ 105.213064][ T5829] ? trace_irq_disable+0x3b/0x140 [ 105.213092][ T5829] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.213126][ T5829] ? clear_bhb_loop+0x70/0xc0 [ 105.213155][ T5829] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.213178][ T5829] RIP: 0033:0x7f3f2259f559 [ 105.213200][ T5829] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.213219][ T5829] RSP: 002b:00007f3f2343c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 105.213244][ T5829] RAX: ffffffffffffffda RBX: 00007f3f22826090 RCX: 00007f3f2259f559 [ 105.213260][ T5829] RDX: 0000000000141202 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 105.213276][ T5829] RBP: 00007f3f22636b50 R08: 0000000000000000 R09: 0000000000000000 [ 105.213290][ T5829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.213303][ T5829] R13: 00007f3f22826128 R14: 00007f3f22826090 R15: 00007ffddbc31e28 [ 105.213339][ T5829] [ 105.700305][ T27] rxe_eth0 speed is unknown, defaulting to 1000 [ 105.904360][ T5843] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 106.015254][ T5371] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.165188][ T5371] usb 2-1: Using ep0 maxpacket: 32 [ 106.165927][ T5371] usb 2-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 106.168219][ T5371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.168251][ T5371] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.168289][ T5371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.225869][ T5371] usb 2-1: config 0 descriptor?? [ 106.442333][ T5646] Bluetooth: hci2: connection err: -111 [ 106.535374][ T195] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.683257][ T5371] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 106.683314][ T5371] ft260 0003:0403:6030.0001: unknown main item tag 0x0 [ 106.700470][ T195] usb 4-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 106.702664][ T195] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 106.702693][ T195] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 106.734646][ T195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.734675][ T195] usb 4-1: Product: syz [ 106.734692][ T195] usb 4-1: Manufacturer: syz [ 106.734736][ T195] usb 4-1: SerialNumber: syz [ 106.765937][ T195] usb 4-1: config 0 descriptor?? [ 106.772564][ T195] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 106.809827][ T5742] scsi host1: usb-storage 3-1:1.0 [ 106.840424][ T5742] usb 3-1: USB disconnect, device number 2 [ 106.858066][ T5371] ft260 0003:0403:6030.0001: chip code: 0000 0000 [ 106.973037][ T195] gspca_sunplus: reg_r err -32 [ 106.973159][ T195] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 107.059192][ T5371] ft260 0003:0403:6030.0001: failed to retrieve system status [ 107.059923][ T5371] ft260 0003:0403:6030.0001: probe with driver ft260 failed with error -71 [ 107.089744][ T5371] usb 2-1: USB disconnect, device number 3 [ 107.255361][ T5742] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.407547][ T5742] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 107.408627][ T5742] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 107.408662][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.409632][ T5742] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 107.409648][ T5742] usb 3-1: Manufacturer: syz [ 107.412924][ T5742] usb 3-1: config 0 descriptor?? [ 107.515250][ T5742] rc_core: IR keymap rc-hauppauge not found [ 107.515272][ T5742] Registered IR keymap rc-empty [ 107.528461][ T5742] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 107.542359][ T5742] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input6 [ 107.639639][ T5871] jffs2: notice: (5871) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.681000][ T5762] usb 3-1: USB disconnect, device number 3 [ 107.843759][ T5880] netlink: 'syz.0.25': attribute type 29 has an invalid length. [ 107.854683][ T5877] capability: warning: `syz.1.24' uses deprecated v2 capabilities in a way that may be insecure [ 108.095364][ T5742] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.255250][ T5742] usb 1-1: Using ep0 maxpacket: 16 [ 108.260213][ T5742] usb 1-1: unable to get BOS descriptor or descriptor too short [ 108.260266][ T5742] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 108.262244][ T5742] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.262270][ T5742] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 108.262314][ T5742] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 108.280359][ T5742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.280389][ T5742] usb 1-1: Product: syz [ 108.280405][ T5742] usb 1-1: Manufacturer: syz [ 108.280420][ T5742] usb 1-1: SerialNumber: syz [ 108.507278][ T27] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 108.554907][ T5880] netlink: 'syz.0.25': attribute type 29 has an invalid length. [ 108.563575][ T5880] netlink: 'syz.0.25': attribute type 29 has an invalid length. [ 108.572365][ T5880] FAULT_INJECTION: forcing a failure. [ 108.572365][ T5880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 108.572398][ T5880] CPU: 1 UID: 0 PID: 5880 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 108.572435][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 108.572453][ T5880] Call Trace: [ 108.572462][ T5880] [ 108.572472][ T5880] dump_stack_lvl+0xe8/0x150 [ 108.572512][ T5880] should_fail_ex+0x3eb/0x540 [ 108.572552][ T5880] _copy_from_user+0x2d/0xb0 [ 108.572576][ T5880] do_sock_getsockopt+0x1fa/0x640 [ 108.572614][ T5880] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 108.572661][ T5880] ? __fget_files+0x3a2/0x420 [ 108.572686][ T5880] ? __fget_files+0x2a/0x420 [ 108.572719][ T5880] __x64_sys_getsockopt+0x1a4/0x240 [ 108.572759][ T5880] do_syscall_64+0x166/0x520 [ 108.572793][ T5880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.572817][ T5880] ? clear_bhb_loop+0x70/0xc0 [ 108.572845][ T5880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.572868][ T5880] RIP: 0033:0x7f6f94d9f559 [ 108.572889][ T5880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.572908][ T5880] RSP: 002b:00007f6f95bfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 108.572931][ T5880] RAX: ffffffffffffffda RBX: 00007f6f95025fa0 RCX: 00007f6f94d9f559 [ 108.572948][ T5880] RDX: 0000000000000011 RSI: 0000000000000001 RDI: 0000000000000003 [ 108.572961][ T5880] RBP: 00007f6f94e36b50 R08: 00002000000015c0 R09: 0000000000000000 [ 108.572975][ T5880] R10: 0000200000001580 R11: 0000000000000246 R12: 0000000000000000 [ 108.572988][ T5880] R13: 00007f6f95026038 R14: 00007f6f95025fa0 R15: 00007ffdc6852de8 [ 108.573032][ T5880] [ 108.752930][ T27] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 108.769777][ T27] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 108.769863][ T27] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.771554][ T27] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 108.771579][ T27] usb 3-1: Manufacturer: syz [ 108.811987][ T5742] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 108.812026][ T5742] cdc_ncm 1-1:1.0: bind() failure [ 108.814598][ T27] usb 3-1: config 0 descriptor?? [ 108.852391][ T5742] usb 1-1: USB disconnect, device number 3 [ 108.925502][ T27] rc_core: IR keymap rc-hauppauge not found [ 108.925522][ T27] Registered IR keymap rc-empty [ 108.933029][ T27] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 108.950445][ T27] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 109.071218][ T5889] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 109.091984][ T27] usb 3-1: USB disconnect, device number 4 [ 109.339767][ T5371] usb 4-1: USB disconnect, device number 6 [ 109.418118][ T5901] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 109.506705][ T5905] bond0: invalid ARP target specified [ 109.765722][ T5371] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 109.795232][ T195] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.945336][ T5371] usb 4-1: Using ep0 maxpacket: 32 [ 109.946497][ T5371] usb 4-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 109.946812][ T195] usb 2-1: New USB device found: idVendor=0867, idProduct=9812, bcdDevice=1.00 [ 109.948489][ T5371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.948527][ T5371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.948682][ T5371] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.949929][ T195] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 109.949951][ T195] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 109.949968][ T195] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 109.949985][ T195] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 109.950002][ T195] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 109.954670][ T195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.954698][ T195] usb 2-1: Product: syz [ 109.954731][ T195] usb 2-1: Manufacturer: syz [ 109.954748][ T195] usb 2-1: SerialNumber: syz [ 109.956958][ T5742] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 110.032779][ T5371] usb 4-1: config 0 descriptor?? [ 110.086633][ T5742] usb 3-1: device descriptor read/64, error -71 [ 110.111371][ T5905] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.111510][ T5905] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.111632][ T5905] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.111754][ T5905] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 110.325252][ T5742] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 110.455269][ T5742] usb 3-1: device descriptor read/64, error -71 [ 110.486920][ T5371] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 110.486949][ T5371] ft260 0003:0403:6030.0002: unknown main item tag 0x0 [ 110.567689][ T5742] usb usb3-port1: attempt power cycle [ 110.681999][ T5371] ft260 0003:0403:6030.0002: chip code: 0000 0000 [ 110.686892][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 110.836268][ T10] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 110.838061][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 110.838114][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 110.839791][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 110.839816][ T10] usb 1-1: Manufacturer: syz [ 110.859999][ T10] usb 1-1: config 0 descriptor?? [ 110.880561][ T195] comedi comedi5: unable to reset configuration [ 110.880623][ T195] dt9812 2-1:1.0: driver 'dt9812' failed to auto-configure device. [ 110.922800][ T195] dt9812 2-1:1.0: probe with driver dt9812 failed with error -22 [ 110.923180][ T5371] ft260 0003:0403:6030.0002: failed to retrieve system status [ 110.923622][ T5371] ft260 0003:0403:6030.0002: probe with driver ft260 failed with error -71 [ 110.965576][ T5742] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 110.976262][ T195] usb 2-1: USB disconnect, device number 4 [ 110.977126][ T5371] usb 4-1: USB disconnect, device number 7 [ 110.997716][ T5742] usb 3-1: device descriptor read/8, error -71 [ 111.055238][ T10] rc_core: IR keymap rc-hauppauge not found [ 111.055257][ T10] Registered IR keymap rc-empty [ 111.064916][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 111.109405][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 111.162792][ T10] usb 1-1: USB disconnect, device number 4 [ 111.235501][ T5742] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 111.256911][ T5742] usb 3-1: device descriptor read/8, error -71 [ 111.366095][ T5742] usb usb3-port1: unable to enumerate USB device [ 111.513224][ T5930] trusted_key: encrypted_key: insufficient parameters specified [ 111.514647][ T5930] trusted_key: encrypted_key: insufficient parameters specified [ 111.553816][ T5932] IPVS: set_ctl: invalid protocol: 255 255.255.255.255:20003 [ 111.675369][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.0.41'. [ 111.775288][ T5742] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 111.845320][ T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 111.915632][ T5742] usb 4-1: device descriptor read/64, error -71 [ 111.975303][ T33] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 111.996177][ T10] usb 2-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 111.997466][ T10] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 111.997487][ T10] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 112.000768][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.000795][ T10] usb 2-1: Product: syz [ 112.000811][ T10] usb 2-1: Manufacturer: syz [ 112.000827][ T10] usb 2-1: SerialNumber: syz [ 112.003867][ T10] usb 2-1: config 0 descriptor?? [ 112.017915][ T10] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 112.126844][ T33] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 112.128389][ T33] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 112.128437][ T33] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.129885][ T33] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 112.129921][ T33] usb 1-1: Manufacturer: syz [ 112.134280][ T33] usb 1-1: config 0 descriptor?? [ 112.188573][ T5742] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 112.212457][ T10] gspca_sunplus: reg_r err -32 [ 112.212522][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 112.275333][ T33] rc_core: IR keymap rc-hauppauge not found [ 112.275355][ T33] Registered IR keymap rc-empty [ 112.276661][ T33] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 112.280419][ T33] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input9 [ 112.327094][ T5742] usb 4-1: device descriptor read/64, error -71 [ 112.366696][ T5938] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 112.371706][ T10] usb 1-1: USB disconnect, device number 5 [ 112.436245][ T5742] usb usb4-port1: attempt power cycle [ 112.742099][ T5943] FAULT_INJECTION: forcing a failure. [ 112.742099][ T5943] name failslab, interval 1, probability 0, space 0, times 0 [ 112.742132][ T5943] CPU: 0 UID: 0 PID: 5943 Comm: syz.2.43 Not tainted syzkaller #0 PREEMPT(full) [ 112.742150][ T5943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 112.742160][ T5943] Call Trace: [ 112.742166][ T5943] [ 112.742173][ T5943] dump_stack_lvl+0xe8/0x150 [ 112.742212][ T5943] should_fail_ex+0x3eb/0x540 [ 112.742246][ T5943] should_failslab+0xa8/0x100 [ 112.742271][ T5943] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 112.742292][ T5943] ? __lock_acquire+0x747/0x2de0 [ 112.742309][ T5943] ? __kernfs_new_node+0xa9/0x980 [ 112.742333][ T5943] ? __kernfs_new_node+0xa9/0x980 [ 112.742363][ T5943] kstrdup+0x42/0x100 [ 112.742379][ T5943] __kernfs_new_node+0xa9/0x980 [ 112.742413][ T5943] ? __pfx___kernfs_new_node+0x10/0x10 [ 112.742438][ T5943] ? lock_acquire+0x115/0x350 [ 112.742455][ T5943] ? kernfs_root+0x1c/0x230 [ 112.742484][ T5943] ? kernfs_root+0x1c/0x230 [ 112.742507][ T5943] ? kernfs_root+0x1c/0x230 [ 112.742529][ T5943] ? kernfs_root+0x1c/0x230 [ 112.742556][ T5943] kernfs_new_node+0xeb/0x140 [ 112.742585][ T5943] kernfs_create_link+0xe3/0x240 [ 112.742608][ T5943] sysfs_do_create_link_sd+0x83/0x110 [ 112.742633][ T5943] driver_sysfs_add+0x89/0x210 [ 112.742659][ T5943] really_probe+0x142/0xae0 [ 112.742690][ T5943] __driver_probe_device+0x1e8/0x360 [ 112.742717][ T5943] driver_probe_device+0x4f/0x240 [ 112.742745][ T5943] __driver_attach+0x34e/0x630 [ 112.742772][ T5943] bus_for_each_dev+0x23b/0x2c0 [ 112.742790][ T5943] ? __pfx___driver_attach+0x10/0x10 [ 112.742813][ T5943] ? __pfx_bus_for_each_dev+0x10/0x10 [ 112.742834][ T5943] ? do_raw_spin_unlock+0xf5/0x200 [ 112.742861][ T5943] bus_add_driver+0x38f/0x6e0 [ 112.742886][ T5943] driver_register+0x23a/0x320 [ 112.742911][ T5943] usb_gadget_register_driver_owner+0xf9/0x270 [ 112.742937][ T5943] raw_ioctl+0x1541/0x41c0 [ 112.742960][ T5943] ? tomoyo_path_number_perm+0x219/0x5f0 [ 112.742984][ T5943] ? do_vfs_ioctl+0x116f/0x1530 [ 112.743009][ T5943] ? __pfx_raw_ioctl+0x10/0x10 [ 112.743052][ T5943] ? __fget_files+0x2a/0x420 [ 112.743072][ T5943] ? __fget_files+0x2a/0x420 [ 112.743090][ T5943] ? __fget_files+0x2a/0x420 [ 112.743110][ T5943] ? bpf_lsm_file_ioctl+0x9/0x20 [ 112.743132][ T5943] ? __pfx_raw_ioctl+0x10/0x10 [ 112.743147][ T5943] __se_sys_ioctl+0xfc/0x170 [ 112.743171][ T5943] do_syscall_64+0x166/0x520 [ 112.743194][ T5943] ? trace_irq_disable+0x3b/0x140 [ 112.743214][ T5943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.743230][ T5943] ? clear_bhb_loop+0x70/0xc0 [ 112.743249][ T5943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.743265][ T5943] RIP: 0033:0x7f3f2259f1eb [ 112.743284][ T5943] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 112.743297][ T5943] RSP: 002b:00007f3f2345af00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 112.743317][ T5943] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f3f2259f1eb [ 112.743328][ T5943] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000006 [ 112.743338][ T5943] RBP: 00007f3f2345bfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 112.743348][ T5943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.743357][ T5943] R13: 0000200000000100 R14: 0000000000000000 R15: 0000000000000000 [ 112.743380][ T5943] [ 112.743390][ T5943] raw-gadget.2 gadget.2: really_probe: driver_sysfs_add failed [ 112.743848][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.744722][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.776219][ T5742] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 112.799909][ T5742] usb 4-1: device descriptor read/8, error -71 [ 113.081010][ T5742] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 113.116716][ T5742] usb 4-1: device descriptor read/8, error -71 [ 113.158258][ T5946] FAULT_INJECTION: forcing a failure. [ 113.158258][ T5946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 113.158291][ T5946] CPU: 0 UID: 0 PID: 5946 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(full) [ 113.158321][ T5946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 113.158348][ T5946] Call Trace: [ 113.158356][ T5946] [ 113.158365][ T5946] dump_stack_lvl+0xe8/0x150 [ 113.158403][ T5946] should_fail_ex+0x3eb/0x540 [ 113.158443][ T5946] _copy_from_user+0x2d/0xb0 [ 113.158466][ T5946] kstrtouint_from_user+0xd6/0x180 [ 113.158498][ T5946] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 113.158538][ T5946] ? lock_acquire+0x115/0x350 [ 113.158568][ T5946] proc_fail_nth_write+0x8e/0x210 [ 113.158601][ T5946] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 113.158641][ T5946] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 113.158672][ T5946] vfs_write+0x296/0xba0 [ 113.158708][ T5946] ? __pfx_vfs_write+0x10/0x10 [ 113.158737][ T5946] ? __fget_files+0x2a/0x420 [ 113.158762][ T5946] ? __fget_files+0x3a2/0x420 [ 113.158785][ T5946] ? __fget_files+0x2a/0x420 [ 113.158814][ T5946] ? fdget+0x1ac/0x250 [ 113.158847][ T5946] ksys_write+0x150/0x270 [ 113.158876][ T5946] ? __pfx_ksys_write+0x10/0x10 [ 113.158914][ T5946] do_syscall_64+0x166/0x520 [ 113.158946][ T5946] ? trace_irq_disable+0x3b/0x140 [ 113.158973][ T5946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.159005][ T5946] ? clear_bhb_loop+0x70/0xc0 [ 113.159033][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.159055][ T5946] RIP: 0033:0x7f6f94d5fd8e [ 113.159075][ T5946] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 113.159093][ T5946] RSP: 002b:00007f6f95bfbfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 113.159116][ T5946] RAX: ffffffffffffffda RBX: 00007f6f95bfc6c0 RCX: 00007f6f94d5fd8e [ 113.159132][ T5946] RDX: 0000000000000001 RSI: 00007f6f95bfc0a0 RDI: 0000000000000004 [ 113.159146][ T5946] RBP: 00007f6f95bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 113.159159][ T5946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 113.159172][ T5946] R13: 00007f6f95026038 R14: 00007f6f95025fa0 R15: 00007ffdc6852de8 [ 113.159205][ T5946] [ 113.226196][ T5742] usb usb4-port1: unable to enumerate USB device [ 113.716386][ T27] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 113.875268][ T27] usb 1-1: Using ep0 maxpacket: 8 [ 113.877198][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.877251][ T27] usb 1-1: New USB device found: idVendor=0525, idProduct=a4a1, bcdDevice=0.40 [ 113.878376][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.878401][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 113.878447][ T27] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 113.881116][ T27] usb 1-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 113.881141][ T27] usb 1-1: Product: syz [ 113.881156][ T27] usb 1-1: Manufacturer: syz [ 113.881170][ T27] usb 1-1: SerialNumber: syz [ 114.160020][ T27] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 114.160074][ T27] cdc_ncm 1-1:1.0: bind() failure [ 114.184160][ T27] usb 1-1: USB disconnect, device number 6 [ 114.630990][ T195] usb 2-1: USB disconnect, device number 5 [ 114.852961][ T5965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50'. [ 114.895213][ T10] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 114.950249][ T14] Bluetooth: hci4: Frame reassembly failed (-84) [ 115.045283][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 115.045900][ T10] usb 4-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 115.047251][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.047274][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.047315][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.050527][ T10] usb 4-1: config 0 descriptor?? [ 115.066547][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 115.233825][ T27] usb 2-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 115.244916][ T27] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 115.244971][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.250234][ T27] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 115.250318][ T27] usb 2-1: Manufacturer: syz [ 115.271114][ T27] usb 2-1: config 0 descriptor?? [ 115.367205][ T27] rc_core: IR keymap rc-hauppauge not found [ 115.367227][ T27] Registered IR keymap rc-empty [ 115.370070][ T27] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 115.372635][ T27] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input10 [ 115.467332][ T195] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 115.499635][ T10] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 115.499727][ T10] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 115.514308][ T33] usb 2-1: USB disconnect, device number 6 [ 115.619422][ T195] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 115.620766][ T195] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 115.620815][ T195] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 115.621964][ T195] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 115.621993][ T195] usb 3-1: Manufacturer: syz [ 115.624654][ T195] usb 3-1: config 0 descriptor?? [ 115.690110][ T10] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 115.747748][ T195] rc_core: IR keymap rc-hauppauge not found [ 115.747764][ T195] Registered IR keymap rc-empty [ 115.749081][ T195] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 115.751132][ T195] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input11 [ 115.874059][ T5969] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 115.891580][ T33] usb 3-1: USB disconnect, device number 9 [ 115.910540][ T10] ft260 0003:0403:6030.0003: failed to retrieve system status [ 115.911008][ T10] ft260 0003:0403:6030.0003: probe with driver ft260 failed with error -71 [ 115.921396][ T10] usb 4-1: USB disconnect, device number 12 [ 116.635270][ T33] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 116.785351][ T195] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 116.806074][ T5749] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 116.829538][ T33] usb 2-1: unable to get BOS descriptor or descriptor too short [ 116.829593][ T33] usb 2-1: New USB device found: idVendor=2a39, idProduct=3fd3, bcdDevice=0.40 [ 116.830814][ T33] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 72, changing to 7 [ 116.834558][ T33] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.834584][ T33] usb 2-1: Product: syz [ 116.834600][ T33] usb 2-1: Manufacturer: syz [ 116.834616][ T33] usb 2-1: SerialNumber: syz [ 116.938313][ T195] usb 4-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 116.940151][ T195] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 116.940182][ T195] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 116.943659][ T195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.943688][ T195] usb 4-1: Product: syz [ 116.943704][ T195] usb 4-1: Manufacturer: syz [ 116.943720][ T195] usb 4-1: SerialNumber: syz [ 116.958031][ T5749] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 116.963347][ T5749] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 116.963460][ T5749] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 116.963521][ T5749] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 116.963761][ T5749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 116.963831][ T5749] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 116.975892][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 116.975920][ T5749] usb 3-1: Product: syz [ 116.975935][ T5749] usb 3-1: Manufacturer: syz [ 116.981180][ T195] usb 4-1: config 0 descriptor?? [ 116.989107][ T5646] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 117.065766][ T5749] cdc_wdm 3-1:1.0: skipping garbage [ 117.065838][ T5749] cdc_wdm 3-1:1.0: skipping garbage [ 117.090428][ T195] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 117.136174][ T5749] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 117.136243][ T5749] cdc_wdm 3-1:1.0: Unknown control protocol [ 117.183575][ T33] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 117.206384][ T33] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 117.349092][ T6005] FAULT_INJECTION: forcing a failure. [ 117.349092][ T6005] name failslab, interval 1, probability 0, space 0, times 0 [ 117.349123][ T6005] CPU: 0 UID: 0 PID: 6005 Comm: syz.0.57 Not tainted syzkaller #0 PREEMPT(full) [ 117.349146][ T6005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 117.349159][ T6005] Call Trace: [ 117.349168][ T6005] [ 117.349177][ T6005] dump_stack_lvl+0xe8/0x150 [ 117.349214][ T6005] should_fail_ex+0x3eb/0x540 [ 117.349259][ T6005] should_failslab+0xa8/0x100 [ 117.349289][ T6005] ? skb_clone+0x212/0x3a0 [ 117.349321][ T6005] kmem_cache_alloc_noprof+0x9c/0x600 [ 117.349349][ T6005] ? skb_clone+0x212/0x3a0 [ 117.349389][ T6005] skb_clone+0x212/0x3a0 [ 117.349423][ T6005] __netlink_deliver_tap+0x355/0x6e0 [ 117.349460][ T6005] ? netlink_deliver_tap+0x2e/0x1b0 [ 117.349486][ T6005] netlink_deliver_tap+0x19c/0x1b0 [ 117.349512][ T6005] netlink_unicast+0x8c1/0xa80 [ 117.349566][ T6005] netlink_sendmsg+0x7f0/0xb20 [ 117.349599][ T6005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.349628][ T6005] ? aa_sock_msg_perm+0x144/0x210 [ 117.349677][ T6005] ? apparmor_socket_sendmsg+0x98/0x360 [ 117.349707][ T6005] ? __pfx_netlink_sendmsg+0x10/0x10 [ 117.349731][ T6005] sock_sendmsg_nosec+0x14e/0x190 [ 117.349757][ T6005] ____sys_sendmsg+0x54e/0x850 [ 117.349793][ T6005] ? __pfx_____sys_sendmsg+0x10/0x10 [ 117.349833][ T6005] ? import_iovec+0x73/0xa0 [ 117.349871][ T6005] ___sys_sendmsg+0x2a6/0x360 [ 117.349899][ T6005] ? __lock_acquire+0x747/0x2de0 [ 117.349929][ T6005] ? __pfx____sys_sendmsg+0x10/0x10 [ 117.349998][ T6005] ? __fget_files+0x3a2/0x420 [ 117.350022][ T6005] ? __fget_files+0x2a/0x420 [ 117.350057][ T6005] __x64_sys_sendmsg+0x1b1/0x290 [ 117.350090][ T6005] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 117.350143][ T6005] do_syscall_64+0x166/0x520 [ 117.350176][ T6005] ? trace_irq_disable+0x3b/0x140 [ 117.350203][ T6005] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.350225][ T6005] ? clear_bhb_loop+0x70/0xc0 [ 117.350253][ T6005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.350275][ T6005] RIP: 0033:0x7f6f94d9f559 [ 117.350295][ T6005] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.350313][ T6005] RSP: 002b:00007f6f95bfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.350336][ T6005] RAX: ffffffffffffffda RBX: 00007f6f95025fa0 RCX: 00007f6f94d9f559 [ 117.350352][ T6005] RDX: 0000000000000000 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 117.350365][ T6005] RBP: 00007f6f95bfc090 R08: 0000000000000000 R09: 0000000000000000 [ 117.350379][ T6005] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.350391][ T6005] R13: 00007f6f95026038 R14: 00007f6f95025fa0 R15: 00007ffdc6852de8 [ 117.350426][ T6005] [ 117.514663][ T195] usb 3-1: USB disconnect, device number 10 [ 117.658516][ T33] usb 2-1: USB disconnect, device number 7 [ 117.813386][ T5653] udevd[5653]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 117.863980][ T6013] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 117.935179][ T6016] netlink: 14 bytes leftover after parsing attributes in process `syz.1.60'. [ 117.987918][ T6019] usb usb1: usbfs: interface 0 claimed by hub while 'syz.1.60' sets config #1 [ 118.051921][ T6015] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 118.518749][ T6015] device-mapper: table: 248:1: raid: Bogus data_offset value (-EINVAL) [ 118.518776][ T6015] device-mapper: ioctl: error adding target to table [ 118.670088][ T6037] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 118.715237][ T33] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 118.876072][ T33] usb 2-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 118.878903][ T33] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 118.878957][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.880335][ T33] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 118.880362][ T33] usb 2-1: Manufacturer: syz [ 118.927890][ T33] usb 2-1: config 0 descriptor?? [ 119.055948][ T33] rc_core: IR keymap rc-hauppauge not found [ 119.055968][ T33] Registered IR keymap rc-empty [ 119.057208][ T33] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 119.060944][ T33] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input12 [ 119.154469][ T33] usb 2-1: USB disconnect, device number 8 [ 119.245218][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 119.415951][ T27] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 119.419243][ T27] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 119.419299][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.420676][ T27] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 119.420703][ T27] usb 1-1: Manufacturer: syz [ 119.424246][ T27] usb 1-1: config 0 descriptor?? [ 119.559124][ T27] rc_core: IR keymap rc-hauppauge not found [ 119.559153][ T27] Registered IR keymap rc-empty [ 119.560107][ T27] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 119.564718][ T27] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13 [ 119.619175][ T27] usb 4-1: USB disconnect, device number 13 [ 119.735670][ T6047] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 119.764955][ T195] usb 1-1: USB disconnect, device number 7 [ 119.892688][ T6064] device-mapper: raid: Ignoring chunk size parameter for RAID 1 [ 120.071795][ T6064] device-mapper: table: 248:2: raid: Bogus data_offset value (-EINVAL) [ 120.071836][ T6064] device-mapper: ioctl: error adding target to table [ 120.101418][ T6071] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.414655][ T6082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.68'. [ 120.429286][ T27] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 120.586088][ T27] usb 2-1: New USB device found: idVendor=8087, idProduct=0025, bcdDevice=0.01 [ 120.587260][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 120.587290][ T27] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 120.587313][ T27] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 120.587351][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.642869][ T6071] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 120.775335][ T195] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 120.851431][ T27] usb 2-1: USB disconnect, device number 9 [ 120.852603][ T5646] Bluetooth: hci4: Reading Intel version command failed (-71) [ 120.939203][ T195] usb 1-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 120.940236][ T195] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.940288][ T195] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 120.940332][ T195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.336553][ T33] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 121.342531][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.343724][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.363740][ T195] cxacru 1-1:1.0: invalid response length to cm 0x90: 0 [ 121.363830][ T195] cxacru 1-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 121.364270][ T195] cxacru 1-1:1.0: probe with driver cxacru failed with error -22 [ 121.405849][ T5742] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 121.486062][ T33] usb 4-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 121.487391][ T33] usb 4-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 121.487421][ T33] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 121.490110][ T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.490138][ T33] usb 4-1: Product: syz [ 121.490154][ T33] usb 4-1: Manufacturer: syz [ 121.490169][ T33] usb 4-1: SerialNumber: syz [ 121.493124][ T33] usb 4-1: config 0 descriptor?? [ 121.502703][ T33] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 121.591471][ T5742] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 121.592655][ T5742] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 121.592708][ T5742] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.593803][ T5742] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 121.593835][ T5742] usb 3-1: Manufacturer: syz [ 121.618813][ T5742] usb 3-1: config 0 descriptor?? [ 121.725303][ T5742] rc_core: IR keymap rc-hauppauge not found [ 121.725323][ T5742] Registered IR keymap rc-empty [ 121.733664][ T5742] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 121.741544][ T5742] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14 [ 121.914710][ T5742] usb 3-1: USB disconnect, device number 11 [ 122.115311][ T33] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 122.266049][ T33] usb 2-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 122.267221][ T33] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 122.267274][ T33] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.268304][ T33] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 122.268330][ T33] usb 2-1: Manufacturer: syz [ 122.270628][ T33] usb 2-1: config 0 descriptor?? [ 122.375298][ T33] rc_core: IR keymap rc-hauppauge not found [ 122.375314][ T33] Registered IR keymap rc-empty [ 122.381318][ T33] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 122.399930][ T33] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input15 [ 122.501152][ T6111] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 122.522174][ T5742] usb 2-1: USB disconnect, device number 10 [ 122.543434][ T6117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.77'. [ 122.865229][ T27] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 123.016046][ T27] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 123.016987][ T27] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.017006][ T27] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 123.017020][ T27] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 123.017051][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 123.017070][ T27] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 123.018815][ T27] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 123.018833][ T27] usb 3-1: Product: syz [ 123.018843][ T27] usb 3-1: Manufacturer: syz [ 123.035202][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 123.035258][ T27] cdc_wdm 3-1:1.0: skipping garbage [ 123.081143][ T27] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 123.081208][ T27] cdc_wdm 3-1:1.0: Unknown control protocol [ 123.445244][ T5371] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 123.512877][ T195] usb 1-1: USB disconnect, device number 8 [ 123.539332][ C1] cdc_wdm 3-1:1.0: Unexpected error -71 [ 123.539901][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 123.540013][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 123.540270][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 123.540292][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 123.540581][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 123.540603][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 123.540843][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 123.540864][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 123.540974][ T27] usb 3-1: USB disconnect, device number 12 [ 123.541085][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 123.541104][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 123.541142][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 123.645209][ T5371] usb 2-1: Using ep0 maxpacket: 32 [ 123.646001][ T5371] usb 2-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 123.647167][ T5371] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.647219][ T5371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.681785][ T5371] usb 2-1: config 0 descriptor?? [ 123.751337][ T6129] device-mapper: table: 248:3: striped: Target length not divisible by chunk size (-EINVAL) [ 123.751356][ T6129] device-mapper: ioctl: error adding target to table [ 123.813792][ T6129] openvswitch: netlink: Key type 31 is not supported [ 123.842607][ T6129] loop9: detected capacity change from 0 to 524287998 [ 124.240226][ T5371] usb 4-1: USB disconnect, device number 14 [ 124.300575][ T6138] syz.0.81 uses obsolete (PF_INET,SOCK_PACKET) [ 124.411377][ T6142] netlink: 32 bytes leftover after parsing attributes in process `syz.3.83'. [ 124.755240][ T5371] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 124.850437][ T6149] netlink: 8 bytes leftover after parsing attributes in process `syz.0.86'. [ 124.908677][ T5371] usb 4-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 124.910257][ T5371] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 124.910311][ T5371] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 124.914207][ T5371] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 124.914234][ T5371] usb 4-1: Manufacturer: syz [ 124.947157][ T5371] usb 4-1: config 0 descriptor?? [ 125.025262][ T5371] rc_core: IR keymap rc-hauppauge not found [ 125.025279][ T5371] Registered IR keymap rc-empty [ 125.026273][ T5371] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 125.028846][ T5371] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input16 [ 125.155232][ T27] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 125.174618][ T5742] usb 4-1: USB disconnect, device number 15 [ 125.306532][ T27] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 125.307915][ T27] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 125.307952][ T27] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.308965][ T27] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 125.308988][ T27] usb 1-1: Manufacturer: syz [ 125.313334][ T27] usb 1-1: config 0 descriptor?? [ 125.427522][ T27] rc_core: IR keymap rc-hauppauge not found [ 125.427538][ T27] Registered IR keymap rc-empty [ 125.442666][ T27] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 125.455506][ T27] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 125.532795][ T6151] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 125.556398][ T195] usb 1-1: USB disconnect, device number 9 [ 125.856017][ T6160] netlink: 196 bytes leftover after parsing attributes in process `syz.3.89'. [ 125.856079][ T6160] netlink: 'syz.3.89': attribute type 5 has an invalid length. [ 126.242881][ T195] usb 2-1: USB disconnect, device number 11 [ 126.425623][ T5646] Bluetooth: hci1: command 0x0406 tx timeout [ 126.531759][ T6169] FAULT_INJECTION: forcing a failure. [ 126.531759][ T6169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.531786][ T6169] CPU: 1 UID: 0 PID: 6169 Comm: syz.0.92 Not tainted syzkaller #0 PREEMPT(full) [ 126.531806][ T6169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.531820][ T6169] Call Trace: [ 126.531827][ T6169] [ 126.531834][ T6169] dump_stack_lvl+0xe8/0x150 [ 126.531866][ T6169] should_fail_ex+0x3eb/0x540 [ 126.531899][ T6169] _copy_from_user+0x2d/0xb0 [ 126.531917][ T6169] _RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x88a/0xcf60 [ 126.532020][ T6169] ? __pfx__RNvMs2_NtCswPamI0U300_11rust_binder6threadNtB5_6Thread5write+0x10/0x10 [ 126.532453][ T6169] ? __lock_acquire+0x747/0x2de0 [ 126.532486][ T6169] ? __lock_acquire+0x747/0x2de0 [ 126.532516][ T6169] ? __lock_acquire+0x747/0x2de0 [ 126.532543][ T6169] ? lock_acquire+0x115/0x350 [ 126.532565][ T6169] ? lock_acquire+0x115/0x350 [ 126.532589][ T6169] ? lock_acquire+0x115/0x350 [ 126.532624][ T6169] ? is_bpf_text_address+0x26/0x2b0 [ 126.532656][ T6169] ? is_bpf_text_address+0x292/0x2b0 [ 126.532683][ T6169] ? is_bpf_text_address+0x26/0x2b0 [ 126.532713][ T6169] ? kernel_text_address+0xa5/0xe0 [ 126.532734][ T6169] ? __kernel_text_address+0xd/0x30 [ 126.532753][ T6169] ? unwind_get_return_address+0x4d/0x90 [ 126.532776][ T6169] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 126.532797][ T6169] ? arch_stack_walk+0xfb/0x150 [ 126.532827][ T6169] ? stack_trace_save+0xa9/0x100 [ 126.532847][ T6169] ? __pfx_stack_trace_save+0x10/0x10 [ 126.532875][ T6169] ? stack_depot_save_flags+0x33/0x810 [ 126.532904][ T6169] ? kasan_save_track+0x4f/0x80 [ 126.532925][ T6169] ? kasan_save_track+0x3e/0x80 [ 126.532949][ T6169] ? kasan_save_track+0x4f/0x80 [ 126.532978][ T6169] ? kasan_save_track+0x3e/0x80 [ 126.532998][ T6169] ? __kasan_kmalloc+0x93/0xb0 [ 126.533019][ T6169] ? __kmalloc_node_track_caller_noprof+0x4af/0x720 [ 126.533040][ T6169] ? krealloc_node_align_noprof+0x19a/0x390 [ 126.533061][ T6169] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0x795/0x13f0 [ 126.533089][ T6169] ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x36b/0x3ec0 [ 126.533123][ T6169] ? __se_sys_ioctl+0xfc/0x170 [ 126.533146][ T6169] ? do_syscall_64+0x166/0x520 [ 126.533172][ T6169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.533209][ T6169] ? __lock_acquire+0x747/0x2de0 [ 126.533241][ T6169] ? rcu_is_watching+0x16/0xb0 [ 126.533266][ T6169] ? trace_kmalloc+0x2a/0xf0 [ 126.533287][ T6169] ? __lock_acquire+0x747/0x2de0 [ 126.533316][ T6169] ? do_raw_spin_unlock+0xf5/0x200 [ 126.533346][ T6169] ? _raw_spin_unlock+0x28/0x50 [ 126.533368][ T6169] ? _RNvMs4_NtCswPamI0U300_11rust_binder7processNtB5_7Process18get_current_thread+0xdc6/0x13f0 [ 126.533400][ T6169] ? lock_acquire+0x115/0x350 [ 126.533431][ T6169] ? __might_fault+0xaf/0x130 [ 126.533458][ T6169] ? _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x18af/0x3ec0 [ 126.533557][ T6169] _RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x1901/0x3ec0 [ 126.533610][ T6169] ? stack_depot_save_flags+0x33/0x810 [ 126.533642][ T6169] ? __lock_acquire+0x747/0x2de0 [ 126.533665][ T6169] ? kasan_save_track+0x4f/0x80 [ 126.533685][ T6169] ? kasan_save_track+0x3e/0x80 [ 126.533705][ T6169] ? kasan_save_free_info+0x40/0x50 [ 126.533721][ T6169] ? __kasan_slab_free+0x5c/0x80 [ 126.533743][ T6169] ? kfree+0x1c5/0x650 [ 126.533757][ T6169] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 126.533778][ T6169] ? security_file_ioctl+0xc3/0x2a0 [ 126.533799][ T6169] ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 126.533864][ T6169] ? kasan_quarantine_put+0xbb/0x1f0 [ 126.533893][ T6169] ? tomoyo_path_number_perm+0x219/0x5f0 [ 126.533923][ T6169] ? tomoyo_path_number_perm+0x219/0x5f0 [ 126.533952][ T6169] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 126.534008][ T6169] ? __fget_files+0x2a/0x420 [ 126.534030][ T6169] ? __fget_files+0x2a/0x420 [ 126.534049][ T6169] ? __fget_files+0x2a/0x420 [ 126.534079][ T6169] ? bpf_lsm_file_ioctl+0x9/0x20 [ 126.534102][ T6169] ? __pfx__RNvCswPamI0U300_11rust_binder17rust_binder_ioctl+0x10/0x10 [ 126.534131][ T6169] __se_sys_ioctl+0xfc/0x170 [ 126.534160][ T6169] do_syscall_64+0x166/0x520 [ 126.534186][ T6169] ? trace_irq_disable+0x3b/0x140 [ 126.534209][ T6169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.534226][ T6169] ? clear_bhb_loop+0x70/0xc0 [ 126.534248][ T6169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.534266][ T6169] RIP: 0033:0x7f6f94d9f559 [ 126.534283][ T6169] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.534297][ T6169] RSP: 002b:00007f6f95bdb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 126.534316][ T6169] RAX: ffffffffffffffda RBX: 00007f6f95026090 RCX: 00007f6f94d9f559 [ 126.534328][ T6169] RDX: 00002000000003c0 RSI: 00000000c0306201 RDI: 0000000000000004 [ 126.534340][ T6169] RBP: 00007f6f95bdb090 R08: 0000000000000000 R09: 0000000000000000 [ 126.534350][ T6169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.534360][ T6169] R13: 00007f6f95026128 R14: 00007f6f95026090 R15: 00007ffdc6852de8 [ 126.534387][ T6169] [ 126.549451][ T6169] binder: Write failure EFAULT in pid:80 [ 126.596164][ T195] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 126.754488][ T195] usb 2-1: New USB device found: idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 126.777418][ T195] usb 2-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 126.777512][ T195] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 126.815042][ T195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.818325][ T195] usb 2-1: Product: syz [ 126.818385][ T195] usb 2-1: Manufacturer: syz [ 126.818429][ T195] usb 2-1: SerialNumber: syz [ 126.894131][ T195] usb 2-1: config 0 descriptor?? [ 126.953783][ T195] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 127.164347][ T6171] netlink: 32 bytes leftover after parsing attributes in process `syz.2.94'. [ 127.243238][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.95'. [ 127.301126][ T6166] syz.0.92 (6166) used greatest stack depth: 12224 bytes left [ 127.565585][ T27] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 127.675358][ T195] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 127.717322][ T27] usb 4-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 127.718815][ T27] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 127.718870][ T27] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.720097][ T27] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 127.720124][ T27] usb 4-1: Manufacturer: syz [ 127.724882][ T27] usb 4-1: config 0 descriptor?? [ 127.838027][ T195] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 127.841473][ T195] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 127.841529][ T195] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.842578][ T195] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 127.842596][ T195] usb 1-1: Manufacturer: syz [ 127.844649][ T195] usb 1-1: config 0 descriptor?? [ 127.895706][ T27] rc_core: IR keymap rc-hauppauge not found [ 127.895725][ T27] Registered IR keymap rc-empty [ 127.897062][ T27] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 127.901419][ T27] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 127.979137][ T10] usb 4-1: USB disconnect, device number 16 [ 127.986432][ T195] rc_core: IR keymap rc-hauppauge not found [ 127.986476][ T195] Registered IR keymap rc-empty [ 128.010656][ T195] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 128.031667][ T195] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input19 [ 128.066553][ T5371] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 128.098006][ T6181] fscrypt (sda1, inode 1262): Can't use IV_INO_LBLK_32 policy with contents mode other than AES-256-XTS [ 128.123699][ T195] usb 1-1: USB disconnect, device number 10 [ 128.215319][ T5371] usb 3-1: Using ep0 maxpacket: 32 [ 128.216422][ T5371] usb 3-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 128.217588][ T5371] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.217626][ T5371] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.219803][ T5371] usb 3-1: config 0 descriptor?? [ 128.775472][ T195] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 128.844882][ T6202] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 128.852442][ T6202] ======================================================= [ 128.852442][ T6202] WARNING: The mand mount option has been deprecated and [ 128.852442][ T6202] and is ignored by this kernel. Remove the mand [ 128.852442][ T6202] option from the mount to silence this warning. [ 128.852442][ T6202] ======================================================= [ 128.926184][ T195] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 128.927922][ T195] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 128.927952][ T195] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 128.927974][ T195] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 128.928079][ T195] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 128.928113][ T195] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 128.931189][ T195] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 128.931217][ T195] usb 4-1: Product: syz [ 128.931235][ T195] usb 4-1: Manufacturer: syz [ 128.975066][ T195] cdc_wdm 4-1:1.0: skipping garbage [ 128.976192][ T195] cdc_wdm 4-1:1.0: skipping garbage [ 129.030483][ T195] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 129.030507][ T195] cdc_wdm 4-1:1.0: Unknown control protocol [ 129.339538][ T195] usb 2-1: USB disconnect, device number 12 [ 129.463011][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 129.463491][ T27] usb 4-1: USB disconnect, device number 17 [ 129.464101][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 129.464126][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 129.464145][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 129.655367][ T33] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 129.806657][ T33] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 129.808588][ T33] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 129.808627][ T33] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.810042][ T33] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 129.810068][ T33] usb 1-1: Manufacturer: syz [ 129.867733][ T195] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 129.884014][ T33] usb 1-1: config 0 descriptor?? [ 129.979358][ T33] rc_core: IR keymap rc-hauppauge not found [ 129.979377][ T33] Registered IR keymap rc-empty [ 129.980616][ T33] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 130.010763][ T33] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input20 [ 130.028394][ T195] usb 2-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 130.031155][ T195] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 130.031208][ T195] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.041042][ T195] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 130.041116][ T195] usb 2-1: Manufacturer: syz [ 130.087054][ T195] usb 2-1: config 0 descriptor?? [ 130.150200][ T5371] usb 1-1: USB disconnect, device number 11 [ 130.367507][ T195] rc_core: IR keymap rc-hauppauge not found [ 130.367528][ T195] Registered IR keymap rc-empty [ 130.381451][ T195] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1 [ 130.393649][ T195] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc1/input21 [ 130.428522][ T195] usb 2-1: USB disconnect, device number 13 [ 130.848724][ T5762] usb 3-1: USB disconnect, device number 13 [ 130.923155][ T195] libceph: connect (1)[c::]:6789 error -101 [ 130.923636][ T195] libceph: mon0 (1)[c::]:6789 connect error [ 130.937832][ T195] libceph: connect (1)[c::]:6789 error -101 [ 130.939417][ T195] libceph: mon0 (1)[c::]:6789 connect error [ 131.075759][ T33] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 131.206657][ T195] libceph: connect (1)[c::]:6789 error -101 [ 131.206834][ T195] libceph: mon0 (1)[c::]:6789 connect error [ 131.255753][ T33] usb 1-1: Using ep0 maxpacket: 32 [ 131.256750][ T33] usb 1-1: New USB device found: idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 131.258130][ T33] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 131.258178][ T33] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 131.258205][ T33] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 131.258233][ T33] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 131.261842][ T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.261870][ T33] usb 1-1: Product: syz [ 131.261886][ T33] usb 1-1: Manufacturer: syz [ 131.261901][ T33] usb 1-1: SerialNumber: syz [ 131.359456][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 131.377715][ T33] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input22 [ 131.555224][ T33] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 131.555241][ T33] (id 0x00) [ 131.595818][ T195] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 131.645378][ T33] rc_core: IR keymap rc-imon-pad not found [ 131.645401][ T33] Registered IR keymap rc-empty [ 131.646415][ T33] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 131.646436][ T33] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 131.726607][ T10] libceph: connect (1)[c::]:6789 error -101 [ 131.730740][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 131.731474][ T6231] ceph: No mds server is up or the cluster is laggy [ 131.758560][ T195] usb 2-1: Using ep0 maxpacket: 32 [ 131.773189][ T195] usb 2-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 131.779748][ T195] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 131.779843][ T195] usb 2-1: config 0 has no interface number 0 [ 131.779957][ T195] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 131.801075][ T195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.801157][ T195] usb 2-1: Product: syz [ 131.801199][ T195] usb 2-1: Manufacturer: syz [ 131.801240][ T195] usb 2-1: SerialNumber: syz [ 131.813338][ T33] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 131.822315][ T195] usb 2-1: config 0 descriptor?? [ 131.834125][ T6240] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 131.880464][ T33] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input23 [ 131.903902][ T33] imon 1-1:155.0: iMON device (15c2:ffdc) on usb<1:12> initialized [ 132.004226][ T5371] usb 1-1: USB disconnect, device number 12 [ 132.084657][ T6240] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 132.500441][ T195] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 132.500625][ T195] asix 2-1:0.188: probe with driver asix failed with error -61 [ 132.701854][ T5371] usb 2-1: USB disconnect, device number 14 [ 132.895225][ T195] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 133.057653][ T195] usb 4-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 133.061327][ T195] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 133.061382][ T195] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.062599][ T195] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 133.062626][ T195] usb 4-1: Manufacturer: syz [ 133.084498][ T195] usb 4-1: config 0 descriptor?? [ 133.147901][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.147983][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.206579][ T195] rc_core: IR keymap rc-hauppauge not found [ 133.206596][ T195] Registered IR keymap rc-empty [ 133.207512][ T195] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 133.209955][ T195] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input24 [ 133.255274][ T5762] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 133.347591][ T195] usb 4-1: USB disconnect, device number 18 [ 133.385402][ T5749] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 133.417140][ T5762] usb 1-1: Using ep0 maxpacket: 32 [ 133.419726][ T5762] usb 1-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 133.420915][ T5762] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.420959][ T5762] usb 1-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 133.420984][ T5762] usb 1-1: config 0 interface 0 has no altsetting 0 [ 133.421013][ T5762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.481181][ T5762] usb 1-1: config 0 descriptor?? [ 133.493971][ T5762] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 133.537774][ T5749] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 133.538942][ T5749] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 133.538984][ T5749] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.540084][ T5749] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 133.540102][ T5749] usb 3-1: Manufacturer: syz [ 133.542562][ T5749] usb 3-1: config 0 descriptor?? [ 133.655812][ T5749] rc_core: IR keymap rc-hauppauge not found [ 133.655833][ T5749] Registered IR keymap rc-empty [ 133.657103][ T5749] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 133.660509][ T5749] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input25 [ 133.778323][ T5749] usb 3-1: USB disconnect, device number 14 [ 133.916660][ T6276] IPv6: Can't replace route, no match found [ 134.215260][ T5749] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 134.365245][ T33] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 134.368636][ T5749] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 134.369904][ T5749] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 134.369932][ T5749] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 134.369952][ T5749] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 134.369998][ T5749] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 134.370026][ T5749] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 134.371603][ T5749] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 134.371628][ T5749] usb 4-1: Product: syz [ 134.371644][ T5749] usb 4-1: Manufacturer: syz [ 134.472941][ T5749] cdc_wdm 4-1:1.0: skipping garbage [ 134.472966][ T5749] cdc_wdm 4-1:1.0: skipping garbage [ 134.487681][ T5749] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 134.487707][ T5749] cdc_wdm 4-1:1.0: Unknown control protocol [ 134.491583][ T6289] netlink: 'syz.2.131': attribute type 11 has an invalid length. [ 134.508148][ T33] usb 2-1: device descriptor read/64, error -71 [ 134.745421][ T33] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 134.875224][ T33] usb 2-1: device descriptor read/64, error -71 [ 134.977215][ C0] cdc_wdm 4-1:1.0: Unexpected error -71 [ 134.977643][ T27] usb 4-1: USB disconnect, device number 19 [ 134.978837][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 134.978861][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 134.978880][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 135.013024][ T33] usb usb2-port1: attempt power cycle [ 135.366307][ T33] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 135.388634][ T33] usb 2-1: device descriptor read/8, error -71 [ 135.625975][ T33] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 135.656084][ T33] usb 2-1: device descriptor read/8, error -71 [ 135.765794][ T33] usb usb2-port1: unable to enumerate USB device [ 136.050175][ T33] usb 1-1: USB disconnect, device number 13 [ 136.485230][ T33] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 136.635217][ T33] usb 1-1: Using ep0 maxpacket: 32 [ 136.636257][ T33] usb 1-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 136.637950][ T33] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 136.637982][ T33] usb 1-1: config 0 has no interface number 0 [ 136.638036][ T33] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 136.641663][ T33] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.641695][ T33] usb 1-1: Product: syz [ 136.641715][ T33] usb 1-1: Manufacturer: syz [ 136.641737][ T33] usb 1-1: SerialNumber: syz [ 136.651137][ T33] usb 1-1: config 0 descriptor?? [ 136.660550][ T6297] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 136.875279][ T6297] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 137.284414][ T33] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 137.284698][ T33] asix 1-1:0.188: probe with driver asix failed with error -61 [ 137.523331][ T27] usb 1-1: USB disconnect, device number 14 [ 137.605535][ T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 137.761051][ T10] usb 2-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 137.763037][ T10] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 137.763092][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.794306][ T10] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 137.794336][ T10] usb 2-1: Manufacturer: syz [ 137.815022][ T10] usb 2-1: config 0 descriptor?? [ 137.975465][ T10] rc_core: IR keymap rc-hauppauge not found [ 137.975485][ T10] Registered IR keymap rc-empty [ 137.978487][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 137.984811][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input26 [ 138.069647][ T10] usb 2-1: USB disconnect, device number 19 [ 138.668786][ T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 138.712011][ T6330] FAULT_INJECTION: forcing a failure. [ 138.712011][ T6330] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 138.712045][ T6330] CPU: 1 UID: 0 PID: 6330 Comm: syz.3.140 Not tainted syzkaller #0 PREEMPT(full) [ 138.712069][ T6330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 138.712082][ T6330] Call Trace: [ 138.712090][ T6330] [ 138.712099][ T6330] dump_stack_lvl+0xe8/0x150 [ 138.712137][ T6330] should_fail_ex+0x3eb/0x540 [ 138.712176][ T6330] _copy_from_user+0x2d/0xb0 [ 138.712197][ T6330] ___sys_sendmsg+0x1c6/0x360 [ 138.712227][ T6330] ? __lock_acquire+0x747/0x2de0 [ 138.712257][ T6330] ? __pfx____sys_sendmsg+0x10/0x10 [ 138.712327][ T6330] ? __fget_files+0x3a2/0x420 [ 138.712351][ T6330] ? __fget_files+0x2a/0x420 [ 138.712385][ T6330] __x64_sys_sendmsg+0x1b1/0x290 [ 138.712419][ T6330] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 138.712477][ T6330] do_syscall_64+0x166/0x520 [ 138.712508][ T6330] ? trace_irq_disable+0x3b/0x140 [ 138.712535][ T6330] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.712557][ T6330] ? clear_bhb_loop+0x70/0xc0 [ 138.712582][ T6330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.712602][ T6330] RIP: 0033:0x7f818a79f559 [ 138.712621][ T6330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.712638][ T6330] RSP: 002b:00007f818b6ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.712659][ T6330] RAX: ffffffffffffffda RBX: 00007f818aa25fa0 RCX: 00007f818a79f559 [ 138.712674][ T6330] RDX: 0000000000000040 RSI: 0000200000000100 RDI: 0000000000000003 [ 138.712685][ T6330] RBP: 00007f818b6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 138.712696][ T6330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.712707][ T6330] R13: 00007f818aa26038 R14: 00007f818aa25fa0 R15: 00007ffc40d3d628 [ 138.712741][ T6330] [ 138.785859][ T6332] capability: warning: `syz.1.142' uses 32-bit capabilities (legacy support in use) [ 138.841657][ T10] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 138.895614][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 138.895671][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.954087][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 138.954113][ T10] usb 1-1: Manufacturer: syz [ 138.972251][ T10] usb 1-1: config 0 descriptor?? [ 139.078903][ T10] rc_core: IR keymap rc-hauppauge not found [ 139.078924][ T10] Registered IR keymap rc-empty [ 139.080173][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 139.110598][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input27 [ 139.289697][ T5371] usb 1-1: USB disconnect, device number 15 [ 139.436731][ T10] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 139.465389][ T5749] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 139.565414][ T195] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 139.585232][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 139.586163][ T10] usb 3-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 139.587467][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.587499][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.587540][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.589790][ T10] usb 3-1: config 0 descriptor?? [ 139.648604][ T5749] usb 2-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 139.649792][ T5749] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 139.649829][ T5749] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 139.649854][ T5749] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 139.649885][ T5749] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 139.649936][ T5749] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 139.651701][ T5749] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 139.651719][ T5749] usb 2-1: Product: syz [ 139.651730][ T5749] usb 2-1: Manufacturer: syz [ 139.699282][ T5749] cdc_wdm 2-1:1.0: skipping garbage [ 139.699394][ T5749] cdc_wdm 2-1:1.0: skipping garbage [ 139.716014][ T5749] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 139.719714][ T5749] cdc_wdm 2-1:1.0: Unknown control protocol [ 139.726511][ T195] usb 4-1: Using ep0 maxpacket: 32 [ 139.732007][ T195] usb 4-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 139.773313][ T195] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 139.773482][ T195] usb 4-1: config 0 has no interface number 0 [ 139.773655][ T195] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 139.804504][ T195] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.804535][ T195] usb 4-1: Product: syz [ 139.804550][ T195] usb 4-1: Manufacturer: syz [ 139.804614][ T195] usb 4-1: SerialNumber: syz [ 139.830671][ T195] usb 4-1: config 0 descriptor?? [ 139.838115][ T6347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 139.973217][ T6350] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 139.973667][ T6350] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.001318][ T6350] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 140.012966][ T6350] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.013134][ T6350] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.036792][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 140.040242][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 140.040376][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 140.041771][ T6350] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 140.072274][ T10] usb 3-1: USB disconnect, device number 15 [ 140.086249][ T6347] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 140.106611][ T6350] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.106753][ T6350] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 140.142145][ T6350] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.142244][ T6350] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.173467][ T6350] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 140.202838][ C1] cdc_wdm 2-1:1.0: Unexpected error -71 [ 140.202954][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 140.202975][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 140.203388][ T5749] usb 2-1: USB disconnect, device number 20 [ 140.203719][ C1] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 140.203744][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 140.203764][ C1] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 140.277934][ T6353] syzkaller0: entered promiscuous mode [ 140.492412][ T195] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 140.492659][ T195] asix 4-1:0.188: probe with driver asix failed with error -61 [ 140.727670][ T33] usb 4-1: USB disconnect, device number 20 [ 141.296047][ T33] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 141.470487][ T33] usb 3-1: Using ep0 maxpacket: 16 [ 141.472248][ T33] usb 3-1: New USB device found: idVendor=1781, idProduct=0898, bcdDevice=0.00 [ 141.496727][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.496761][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.496785][ T33] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 141.496843][ T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.502641][ T33] usb 3-1: config 0 descriptor?? [ 141.568525][ T33] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input28 [ 141.572080][ T4990] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 141.616350][ T4990] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 141.617444][ T4990] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 141.624499][ T4990] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 141.745593][ T34] audit: type=1326 audit(1793513291.136:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.0.151" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f94d9f559 code=0x7fc00000 [ 141.747816][ T5658] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 141.751789][ T4990] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 141.753298][ T34] audit: type=1326 audit(1793513291.146:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.0.151" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f6f94d9f559 code=0x7fc00000 [ 141.841698][ T6374] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 141.852948][ T6374] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 141.870632][ T6374] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 141.906691][ T4990] pxrc 3-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 141.907647][ T5749] usb 3-1: USB disconnect, device number 16 [ 142.027353][ T5646] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.027374][ T5656] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.185575][ T5646] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.185635][ T5646] Bluetooth: hci1: command 0x0406 tx timeout [ 142.285288][ T33] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 142.436372][ T33] usb 1-1: Using ep0 maxpacket: 8 [ 142.440850][ T33] usb 1-1: New USB device found: idVendor=055f, idProduct=a800, bcdDevice=1.00 [ 142.444067][ T33] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 142.444102][ T33] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 142.444131][ T33] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 142.444223][ T33] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.507920][ T6393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.508198][ T6393] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 142.533939][ T33] mdc800 1-1:1.0: probe fails -> Wrong Endpoints. [ 142.965367][ T33] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 143.135930][ T33] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 143.136891][ T33] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 143.136943][ T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.138435][ T33] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 143.138468][ T33] usb 3-1: Manufacturer: syz [ 143.141008][ T33] usb 3-1: config 0 descriptor?? [ 143.247082][ T33] rc_core: IR keymap rc-hauppauge not found [ 143.247105][ T33] Registered IR keymap rc-empty [ 143.248948][ T33] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 143.252263][ T33] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 143.256583][ T5371] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 143.285951][ T5749] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 143.360275][ T33] usb 3-1: USB disconnect, device number 17 [ 143.405960][ T5371] usb 2-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=0.00 [ 143.407574][ T5371] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.435824][ T5749] usb 4-1: Using ep0 maxpacket: 32 [ 143.436778][ T5749] usb 4-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 143.439389][ T5749] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.439443][ T5749] usb 4-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.439498][ T5749] usb 4-1: config 0 interface 0 has no altsetting 0 [ 143.439531][ T5749] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.443602][ T5749] usb 4-1: config 0 descriptor?? [ 143.470800][ T5749] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 144.105362][ T5646] Bluetooth: hci2: command 0x0c1a tx timeout [ 144.105493][ T5656] Bluetooth: hci3: command 0x0c1a tx timeout [ 144.190577][ T5371] usb 2-1: Firmware: major: 254, minor: 206, hardware type: UNKNOWN (200) [ 144.265372][ T5646] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.265542][ T5656] Bluetooth: hci1: command 0x0406 tx timeout [ 144.325245][ T5749] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 144.393136][ T5371] usb 2-1: Firmware: build [ 144.485280][ T5749] usb 3-1: Using ep0 maxpacket: 32 [ 144.486149][ T5749] usb 3-1: New USB device found: idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 144.487361][ T5749] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 144.487387][ T5749] usb 3-1: config 0 has no interface number 0 [ 144.487460][ T5749] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 144.489779][ T5749] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.489805][ T5749] usb 3-1: Product: syz [ 144.489849][ T5749] usb 3-1: Manufacturer: syz [ 144.489877][ T5749] usb 3-1: SerialNumber: syz [ 144.492798][ T5749] usb 3-1: config 0 descriptor?? [ 144.493982][ T6417] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 144.594578][ T6407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.603895][ T6407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.613125][ T34] audit: type=1326 audit(1793513294.006:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6390 comm="syz.0.151" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f94d9f559 code=0x7fc00000 [ 144.660194][ T33] usb 1-1: USB disconnect, device number 16 [ 144.701173][ T6417] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 144.888830][ T6425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 145.070427][ T6434] rxe_eth0 speed is unknown, defaulting to 1000 [ 145.105151][ T5749] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 145.105416][ T5749] asix 3-1:0.188: probe with driver asix failed with error -61 [ 145.314000][ T33] usb 3-1: USB disconnect, device number 18 [ 145.467096][ T5371] usb 2-1: failed to fetch extended address, random address set [ 145.467180][ T5371] usb 2-1: atusb_probe: initialization failed, error = -524 [ 145.467654][ T5371] atusb 2-1:1.0: probe with driver atusb failed with error -524 [ 145.985588][ T5371] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 146.134684][ T5749] usb 4-1: USB disconnect, device number 21 [ 146.144802][ T5371] usb 1-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 146.152640][ T5371] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.152721][ T5371] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 146.152773][ T5371] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.152903][ T5371] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 146.152976][ T5371] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 146.185837][ T5656] Bluetooth: hci3: command 0x0c1a tx timeout [ 146.186005][ T5656] Bluetooth: hci2: command 0x0c1a tx timeout [ 146.192338][ T5371] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.192406][ T5371] usb 1-1: Product: syz [ 146.192447][ T5371] usb 1-1: Manufacturer: syz [ 146.284014][ T5371] cdc_wdm 1-1:1.0: skipping garbage [ 146.284038][ T5371] cdc_wdm 1-1:1.0: skipping garbage [ 146.345351][ T5646] Bluetooth: hci0: command 0x0c1a tx timeout [ 146.348200][ T5371] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 146.348224][ T5371] cdc_wdm 1-1:1.0: Unknown control protocol [ 146.409077][ T10] usb 2-1: USB disconnect, device number 21 [ 146.539781][ T5371] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 146.688538][ T5371] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 146.689980][ T5371] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 146.690034][ T5371] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.691460][ T5371] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 146.691485][ T5371] usb 3-1: Manufacturer: syz [ 146.716182][ T5371] usb 3-1: config 0 descriptor?? [ 146.835283][ T5371] rc_core: IR keymap rc-hauppauge not found [ 146.835304][ T5371] Registered IR keymap rc-empty [ 146.836383][ T5371] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 146.838281][ T5371] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input30 [ 146.844014][ C0] cdc_wdm 1-1:1.0: Unexpected error -71 [ 146.844103][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 146.844126][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 146.844338][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 146.844358][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 146.844571][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 146.844589][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 146.844799][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 146.844819][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 146.845031][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 146.845052][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 146.845469][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 146.845521][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 146.845864][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 146.845908][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 146.846214][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 146.846263][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 146.846779][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 146.846836][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 146.847192][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 146.847243][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 146.848328][ T10] usb 1-1: USB disconnect, device number 17 [ 146.848463][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 146.905874][ T33] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 147.048411][ T6476] jffs2: notice: (6476) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 147.084970][ T27] usb 3-1: USB disconnect, device number 19 [ 147.106403][ T6476] netlink: 'syz.1.170': attribute type 2 has an invalid length. [ 147.106426][ T6476] netlink: 48 bytes leftover after parsing attributes in process `syz.1.170'. [ 147.106880][ T6476] device-mapper: ioctl: Unable to rename non-existent device, to uuid LVM-syzb0 [ 147.148441][ T33] usb 4-1: New USB device found: idVendor=0572, idProduct=cafe, bcdDevice=1.00 [ 147.152723][ T33] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.152786][ T33] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 147.152870][ T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.418364][ T6471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.440696][ T6471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.915188][ T27] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 148.006792][ T6491] loop0: detected capacity change from 0 to 4096 [ 148.063324][ T6491] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 148.063351][ T6491] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 148.063420][ T6491] loop0: [ 148.084946][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 148.086747][ T27] usb 2-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 148.098540][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 148.098640][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.098847][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.120861][ T27] usb 2-1: config 0 descriptor?? [ 148.545302][ T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 148.567650][ T27] usbhid 2-1:0.0: can't add hid device: -71 [ 148.567856][ T27] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 148.579364][ T27] usb 2-1: USB disconnect, device number 22 [ 148.696251][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 148.697026][ T10] usb 3-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 148.698207][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.698256][ T10] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.698286][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 148.698320][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.702695][ T10] usb 3-1: config 0 descriptor?? [ 149.213148][ T10] corsair-psu 0003:1B1C:1C09.0004: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.2-1/input0 [ 149.276812][ T10] corsair-psu 0003:1B1C:1C09.0004: unable to initialize device (-38) [ 149.283776][ T10] corsair-psu 0003:1B1C:1C09.0004: probe with driver corsair-psu failed with error -38 [ 149.402716][ T10] usb 3-1: USB disconnect, device number 20 [ 149.439474][ T6497] fido_id[6497]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 149.465982][ T33] cxacru 4-1:1.0: receive of cm 0x90 failed (-104) [ 149.466019][ T33] cxacru 4-1:1.0: usbatm_usb_probe: invalid endpoint 02! [ 149.466429][ T33] cxacru 4-1:1.0: probe with driver cxacru failed with error -22 [ 149.635842][ T33] usb 4-1: USB disconnect, device number 22 [ 150.316045][ T6529] FAULT_INJECTION: forcing a failure. [ 150.316045][ T6529] name failslab, interval 1, probability 0, space 0, times 0 [ 150.316087][ T6529] CPU: 1 UID: 0 PID: 6529 Comm: syz.1.182 Not tainted syzkaller #0 PREEMPT(full) [ 150.316113][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 150.316128][ T6529] Call Trace: [ 150.316136][ T6529] [ 150.316145][ T6529] dump_stack_lvl+0xe8/0x150 [ 150.316186][ T6529] should_fail_ex+0x3eb/0x540 [ 150.316226][ T6529] should_failslab+0xa8/0x100 [ 150.316258][ T6529] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 150.316294][ T6529] kmem_cache_alloc_noprof+0x9c/0x600 [ 150.316317][ T6529] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 150.316350][ T6529] ? kmem_cache_alloc_noprof+0x151/0x600 [ 150.316373][ T6529] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 150.316417][ T6529] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 150.316466][ T6529] mmu_topup_memory_caches+0x21/0x1a0 [ 150.316494][ T6529] kvm_mmu_load+0x9d/0x21e0 [ 150.316522][ T6529] ? kvm_msr_allowed+0x9a/0x490 [ 150.316545][ T6529] ? kvm_msr_allowed+0x9a/0x490 [ 150.316569][ T6529] ? kvm_msr_allowed+0x9a/0x490 [ 150.316590][ T6529] ? kvm_msr_allowed+0x3f4/0x490 [ 150.316613][ T6529] ? kvm_msr_allowed+0x9a/0x490 [ 150.316635][ T6529] ? kvm_apic_has_interrupt+0x740/0x770 [ 150.316681][ T6529] vcpu_run+0x4f5b/0x7a90 [ 150.316788][ T6529] ? __pfx_vcpu_run+0x10/0x10 [ 150.316815][ T6529] ? lock_acquire+0x115/0x350 [ 150.316846][ T6529] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 150.316876][ T6529] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 150.316920][ T6529] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 150.316946][ T6529] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 150.316969][ T6529] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 150.316999][ T6529] kvm_vcpu_ioctl+0xa61/0xfd0 [ 150.317029][ T6529] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 150.317090][ T6529] ? __fget_files+0x2a/0x420 [ 150.317118][ T6529] ? __fget_files+0x2a/0x420 [ 150.317149][ T6529] ? __fget_files+0x2a/0x420 [ 150.317178][ T6529] ? bpf_lsm_file_ioctl+0x9/0x20 [ 150.317206][ T6529] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 150.317229][ T6529] __se_sys_ioctl+0xfc/0x170 [ 150.317262][ T6529] do_syscall_64+0x166/0x520 [ 150.317293][ T6529] ? trace_irq_disable+0x3b/0x140 [ 150.317319][ T6529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.317341][ T6529] ? clear_bhb_loop+0x70/0xc0 [ 150.317368][ T6529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.317390][ T6529] RIP: 0033:0x7f85f379f559 [ 150.317409][ T6529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.317427][ T6529] RSP: 002b:00007f85f460f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 150.317449][ T6529] RAX: ffffffffffffffda RBX: 00007f85f3a26090 RCX: 00007f85f379f559 [ 150.317464][ T6529] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 150.317477][ T6529] RBP: 00007f85f460f090 R08: 0000000000000000 R09: 0000000000000000 [ 150.317490][ T6529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 150.317502][ T6529] R13: 00007f85f3a26128 R14: 00007f85f3a26090 R15: 00007ffc6d8685d8 [ 150.317536][ T6529] [ 150.373333][ T33] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 150.555604][ T33] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 150.568239][ T33] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 150.568439][ T33] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.580582][ T33] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 150.580663][ T33] usb 1-1: Manufacturer: syz [ 150.631163][ T33] usb 1-1: config 0 descriptor?? [ 150.805635][ T34] audit: type=1800 audit(1793513300.196:5): pid=6534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.184" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=-22 [ 150.876180][ T33] rc_core: IR keymap rc-hauppauge not found [ 150.876201][ T33] Registered IR keymap rc-empty [ 150.877487][ T33] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 150.904401][ T33] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input31 [ 150.945250][ T33] usb 1-1: USB disconnect, device number 18 [ 151.036642][ T6534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 151.475517][ T5742] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 151.636060][ T5742] usb 4-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 151.637274][ T5742] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 151.637302][ T5742] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 151.637322][ T5742] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 151.637374][ T5742] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 151.637395][ T5742] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 151.639197][ T5742] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 151.639222][ T5742] usb 4-1: Product: syz [ 151.639237][ T5742] usb 4-1: Manufacturer: syz [ 151.644108][ T5742] cdc_wdm 4-1:1.0: skipping garbage [ 151.644129][ T5742] cdc_wdm 4-1:1.0: skipping garbage [ 151.686631][ T5742] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 151.686697][ T5742] cdc_wdm 4-1:1.0: Unknown control protocol [ 151.707668][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 151.875222][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 151.876183][ T10] usb 1-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 151.877593][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.877645][ T10] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 151.877674][ T10] usb 1-1: config 0 interface 0 has no altsetting 0 [ 151.877710][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.881001][ T10] usb 1-1: config 0 descriptor?? [ 152.062439][ T6553] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 152.195678][ C1] cdc_wdm 4-1:1.0: Unexpected error -71 [ 152.195779][ C1] wdm_int_callback: 4 callbacks suppressed [ 152.195799][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 152.195816][ C1] wdm_int_callback: 4 callbacks suppressed [ 152.195831][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 152.196138][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 152.196159][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 152.196372][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 152.196400][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 152.196602][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 152.196656][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 152.197683][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 152.197708][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 152.197955][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 152.197970][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 152.198161][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 152.198178][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 152.198370][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 152.198396][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 152.198486][ T33] usb 4-1: USB disconnect, device number 23 [ 152.198614][ C1] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 152.198638][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 152.198655][ C1] cdc_wdm 4-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 152.339911][ T10] corsair-psu 0003:1B1C:1C09.0005: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.0-1/input0 [ 152.395345][ T5742] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 152.398014][ T10] corsair-psu 0003:1B1C:1C09.0005: unable to initialize device (-38) [ 152.401880][ T10] corsair-psu 0003:1B1C:1C09.0005: probe with driver corsair-psu failed with error -38 [ 152.518585][ T5762] usb 1-1: USB disconnect, device number 19 [ 152.525752][ T5742] usb 2-1: device descriptor read/64, error -71 [ 152.767321][ T5742] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 152.895453][ T5742] usb 2-1: device descriptor read/64, error -71 [ 153.005757][ T5742] usb usb2-port1: attempt power cycle [ 153.072708][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 153.072795][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.192'. [ 153.073471][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.0.192'. [ 153.073498][ T6558] netlink: 16 bytes leftover after parsing attributes in process `syz.0.192'. [ 153.145290][ T5646] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 153.223774][ T6562] FAULT_INJECTION: forcing a failure. [ 153.223774][ T6562] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 153.223800][ T6562] CPU: 0 UID: 0 PID: 6562 Comm: syz.2.194 Not tainted syzkaller #0 PREEMPT(full) [ 153.223818][ T6562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 153.223828][ T6562] Call Trace: [ 153.223834][ T6562] [ 153.223841][ T6562] dump_stack_lvl+0xe8/0x150 [ 153.223869][ T6562] should_fail_ex+0x3eb/0x540 [ 153.223897][ T6562] _copy_to_user+0x31/0xb0 [ 153.223914][ T6562] io_uring_create+0x4e5/0x980 [ 153.223935][ T6562] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 153.223959][ T6562] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.223986][ T6562] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 153.224024][ T6562] ? __pfx_ksys_write+0x10/0x10 [ 153.224053][ T6562] do_syscall_64+0x166/0x520 [ 153.224076][ T6562] ? trace_irq_disable+0x3b/0x140 [ 153.224096][ T6562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.224112][ T6562] ? clear_bhb_loop+0x70/0xc0 [ 153.224131][ T6562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.224147][ T6562] RIP: 0033:0x7f3f2259f559 [ 153.224161][ T6562] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 153.224175][ T6562] RSP: 002b:00007f3f2345cee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 153.224192][ T6562] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007f3f2259f559 [ 153.224204][ T6562] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 153.224215][ T6562] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 153.224225][ T6562] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 153.224236][ T6562] R13: 0000200000000b10 R14: 00007f3f2345cfd8 R15: 0000000000000000 [ 153.224260][ T6562] [ 153.411564][ T5742] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 153.446980][ T5742] usb 2-1: device descriptor read/8, error -71 [ 153.485217][ T10] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 153.635874][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 153.638098][ T10] usb 1-1: New USB device found: idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 153.641515][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 153.641545][ T10] usb 1-1: config 0 has no interface number 0 [ 153.668609][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.668639][ T10] usb 1-1: Product: syz [ 153.668655][ T10] usb 1-1: Manufacturer: syz [ 153.668671][ T10] usb 1-1: SerialNumber: syz [ 153.696173][ T5742] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 153.710554][ T10] usb 1-1: config 0 descriptor?? [ 153.722220][ T5742] usb 2-1: device descriptor read/8, error -71 [ 153.825704][ T5742] usb usb2-port1: unable to enumerate USB device [ 153.919636][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 153.919668][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 153.959127][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 153.959529][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 154.937623][ T5762] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 155.086060][ T5762] usb 3-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 155.087590][ T5762] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 155.087627][ T5762] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 155.088838][ T5762] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 155.088864][ T5762] usb 3-1: Manufacturer: syz [ 155.092757][ T5762] usb 3-1: config 0 descriptor?? [ 155.205207][ T5762] rc_core: IR keymap rc-hauppauge not found [ 155.205230][ T5762] Registered IR keymap rc-empty [ 155.207566][ T5762] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 155.210317][ T5762] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 155.285646][ T6608] overlay: Unknown parameter 'euid' [ 155.358028][ T10] usb 3-1: USB disconnect, device number 21 [ 155.653296][ T6618] overlayfs: failed to decode file handle (len=8, type=248, flags=0, err=-22) [ 155.676063][ T5749] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 155.731965][ T6631] FAULT_INJECTION: forcing a failure. [ 155.731965][ T6631] name failslab, interval 1, probability 0, space 0, times 0 [ 155.731990][ T6631] CPU: 0 UID: 0 PID: 6631 Comm: syz.3.204 Not tainted syzkaller #0 PREEMPT(full) [ 155.732007][ T6631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 155.732017][ T6631] Call Trace: [ 155.732023][ T6631] [ 155.732030][ T6631] dump_stack_lvl+0xe8/0x150 [ 155.732059][ T6631] should_fail_ex+0x3eb/0x540 [ 155.732089][ T6631] should_failslab+0xa8/0x100 [ 155.732112][ T6631] ? ptlock_alloc+0x20/0x70 [ 155.732136][ T6631] kmem_cache_alloc_noprof+0x9c/0x600 [ 155.732157][ T6631] ? ptlock_alloc+0x20/0x70 [ 155.732185][ T6631] ptlock_alloc+0x20/0x70 [ 155.732209][ T6631] pte_alloc_one+0x7a/0x3d0 [ 155.732231][ T6631] __pte_alloc+0x25/0x1a0 [ 155.732251][ T6631] do_pte_missing+0x2ddb/0x3570 [ 155.732283][ T6631] handle_mm_fault+0x1807/0x2f80 [ 155.732315][ T6631] ? handle_mm_fault+0xee/0x2f80 [ 155.732345][ T6631] ? __pfx_handle_mm_fault+0x10/0x10 [ 155.732380][ T6631] ? __lock_acquire+0x747/0x2de0 [ 155.732400][ T6631] ? lock_mm_and_find_vma+0xa7/0x340 [ 155.732427][ T6631] do_user_addr_fault+0x7f6/0x1480 [ 155.732457][ T6631] exc_page_fault+0x6a/0xc0 [ 155.732483][ T6631] asm_exc_page_fault+0x26/0x30 [ 155.732498][ T6631] RIP: 0010:rep_movs_alternative+0x33/0xa0 [ 155.732518][ T6631] Code: 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 e9 7d 81 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb [ 155.732532][ T6631] RSP: 0018:ffffc90004befc68 EFLAGS: 00050202 [ 155.732546][ T6631] RAX: 000004003d090000 RBX: 0000000000000028 RCX: 0000000000000028 [ 155.732557][ T6631] RDX: 0000000000000000 RSI: ffffc90004befce0 RDI: 00002000000006c0 [ 155.732568][ T6631] RBP: ffffc90004befd90 R08: ffffc90004befd07 R09: 1ffff9200097dfa0 [ 155.732580][ T6631] R10: dffffc0000000000 R11: fffff5200097dfa1 R12: 00002000000006e8 [ 155.732592][ T6631] R13: 00007ffffffff000 R14: ffffc90004befce0 R15: 00002000000006c0 [ 155.732617][ T6631] _copy_to_user+0x8a/0xb0 [ 155.732634][ T6631] semctl_info+0x2fe/0x4e0 [ 155.732665][ T6631] ? __pfx_semctl_info+0x10/0x10 [ 155.732688][ T6631] ? __mutex_unlock_slowpath+0x731/0x900 [ 155.732721][ T6631] __se_sys_semctl+0x2ce/0x3e0 [ 155.732740][ T6631] ? __pfx___se_sys_semctl+0x10/0x10 [ 155.732773][ T6631] ? __pfx_ksys_write+0x10/0x10 [ 155.732802][ T6631] do_syscall_64+0x166/0x520 [ 155.732864][ T6631] ? trace_irq_disable+0x3b/0x140 [ 155.732885][ T6631] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.732901][ T6631] ? clear_bhb_loop+0x70/0xc0 [ 155.732920][ T6631] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.732936][ T6631] RIP: 0033:0x7f818a79f559 [ 155.732950][ T6631] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.732963][ T6631] RSP: 002b:00007f818b6ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000042 [ 155.732988][ T6631] RAX: ffffffffffffffda RBX: 00007f818aa25fa0 RCX: 00007f818a79f559 [ 155.733000][ T6631] RDX: 0000000000000003 RSI: 0000000000000004 RDI: 0000000000000000 [ 155.733010][ T6631] RBP: 00007f818b6ac090 R08: 0000000000000000 R09: 0000000000000000 [ 155.733019][ T6631] R10: 00002000000006c0 R11: 0000000000000246 R12: 0000000000000001 [ 155.733029][ T6631] R13: 00007f818aa26038 R14: 00007f818aa25fa0 R15: 00007ffc40d3d628 [ 155.733054][ T6631] [ 155.858331][ T5749] usb 2-1: Using ep0 maxpacket: 32 [ 155.868248][ T5749] usb 2-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 155.917464][ T5749] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 155.917523][ T5749] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.917552][ T5749] usb 2-1: config 0 interface 0 has no altsetting 0 [ 155.917588][ T5749] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.140681][ T5749] usb 2-1: config 0 descriptor?? [ 156.141808][ T6633] Cannot find add_set index 0 as target [ 156.455316][ T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 156.563079][ T5749] corsair-psu 0003:1B1C:1C09.0006: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.1-1/input0 [ 156.607740][ T10] usb 3-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 156.609348][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 156.609379][ T10] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 156.609704][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 156.609786][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 156.609816][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 156.612248][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 156.612281][ T10] usb 3-1: Product: syz [ 156.612325][ T10] usb 3-1: Manufacturer: syz [ 156.615649][ T5749] corsair-psu 0003:1B1C:1C09.0006: unable to initialize device (-38) [ 156.654386][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 156.654408][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 156.688492][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 156.688517][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 156.715651][ T5749] corsair-psu 0003:1B1C:1C09.0006: probe with driver corsair-psu failed with error -38 [ 156.759351][ T5762] usb 2-1: USB disconnect, device number 27 [ 156.788237][ T6644] fido_id[6644]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 157.114629][ T10] usb 1-1: USB disconnect, device number 20 [ 157.173532][ C0] cdc_wdm 3-1:1.0: Unexpected error -71 [ 157.173621][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 157.173643][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 157.200297][ T6649] FAULT_INJECTION: forcing a failure. [ 157.200297][ T6649] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 157.200333][ T6649] CPU: 0 UID: 0 PID: 6649 Comm: syz.3.211 Not tainted syzkaller #0 PREEMPT(full) [ 157.200362][ T6649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 157.200375][ T6649] Call Trace: [ 157.200384][ T6649] [ 157.200394][ T6649] dump_stack_lvl+0xe8/0x150 [ 157.200433][ T6649] should_fail_ex+0x3eb/0x540 [ 157.200475][ T6649] prepare_alloc_pages+0x21e/0x5f0 [ 157.200520][ T6649] __alloc_frozen_pages_noprof+0x17c/0x410 [ 157.200553][ T6649] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 157.200601][ T6649] alloc_pages_mpol+0x21e/0x390 [ 157.200641][ T6649] folio_alloc_mpol_noprof+0x39/0x160 [ 157.200676][ T6649] __swap_cache_alloc_folio+0x2c1/0x990 [ 157.200721][ T6649] ? swap_cache_get_folio+0x315/0x390 [ 157.200761][ T6649] swap_cache_read_folio+0x44/0x130 [ 157.200787][ T6649] swap_cluster_readahead+0x392/0x640 [ 157.200818][ T6649] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 157.200857][ T6649] swapin_readahead+0x1a3/0xc60 [ 157.200884][ T6649] ? lock_acquire+0x115/0x350 [ 157.200903][ T6649] ? __pfx_swapin_readahead+0x10/0x10 [ 157.200919][ T6649] ? swap_table_get+0x1e/0x260 [ 157.200951][ T6649] ? swap_table_get+0x1e/0x260 [ 157.200979][ T6649] ? swap_table_get+0x1e/0x260 [ 157.201022][ T6649] ? swap_table_get+0x1e/0x260 [ 157.201054][ T6649] ? swap_cache_get_folio+0x315/0x390 [ 157.201081][ T6649] ? get_swap_device+0xd7/0x1c0 [ 157.201102][ T6649] do_swap_page+0x7c2/0x4dd0 [ 157.201142][ T6649] ? lock_acquire+0x115/0x350 [ 157.201170][ T6649] ? do_swap_page+0x120/0x4dd0 [ 157.201207][ T6649] ? __pfx_do_swap_page+0x10/0x10 [ 157.201235][ T6649] ? __pte_offset_map+0x1ae/0x240 [ 157.201269][ T6649] ? pte_offset_map_rw_nolock+0xea/0x160 [ 157.201299][ T6649] handle_mm_fault+0x1327/0x2f80 [ 157.201336][ T6649] ? handle_mm_fault+0xee/0x2f80 [ 157.201367][ T6649] ? do_getname+0x2e/0x250 [ 157.201383][ T6649] ? __pfx_handle_mm_fault+0x10/0x10 [ 157.201435][ T6649] ? lock_mm_and_find_vma+0xa7/0x340 [ 157.201465][ T6649] do_user_addr_fault+0x7f6/0x1480 [ 157.201506][ T6649] exc_page_fault+0x6a/0xc0 [ 157.201534][ T6649] asm_exc_page_fault+0x26/0x30 [ 157.201552][ T6649] RIP: 0010:strncpy_from_user+0xb7/0x2c0 [ 157.201579][ T6649] Code: 00 00 4c 89 f6 e8 b9 e3 92 fc 49 83 fe 07 0f 86 9d 00 00 00 4c 89 24 24 4c 89 74 24 08 48 c7 c5 f8 ff ff ff 45 31 ff 49 89 dc <4e> 8b 34 3b 48 b8 ff fe fe fe fe fe fe fe 49 8d 1c 06 4d 89 f5 49 [ 157.201594][ T6649] RSP: 0018:ffffc9000502fe30 EFLAGS: 00050246 [ 157.201610][ T6649] RAX: ffffffff85366667 RBX: 0000200000000000 RCX: ffff888031678000 [ 157.201624][ T6649] RDX: 0000000000000000 RSI: 00000000000000a8 RDI: 0000000000000007 [ 157.201635][ T6649] RBP: fffffffffffffff8 R08: ffff88803655ccbf R09: 1ffff11006cab997 [ 157.201648][ T6649] R10: dffffc0000000000 R11: ffffed1006cab998 R12: 0000200000000000 [ 157.201681][ T6649] R13: 0000200000000000 R14: 00000000000000a8 R15: 0000000000000000 [ 157.201699][ T6649] ? strncpy_from_user+0x97/0x2c0 [ 157.201736][ T6649] do_getname+0x77/0x250 [ 157.201756][ T6649] __se_sys_mkdirat+0x24/0x150 [ 157.201784][ T6649] do_syscall_64+0x166/0x520 [ 157.201811][ T6649] ? trace_irq_disable+0x3b/0x140 [ 157.201832][ T6649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.201852][ T6649] ? clear_bhb_loop+0x70/0xc0 [ 157.201874][ T6649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.201891][ T6649] RIP: 0033:0x7f818a79f559 [ 157.201907][ T6649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 157.201922][ T6649] RSP: 002b:00007f818b68b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 157.201939][ T6649] RAX: ffffffffffffffda RBX: 00007f818aa26090 RCX: 00007f818a79f559 [ 157.201951][ T6649] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c [ 157.201963][ T6649] RBP: 00007f818b68b090 R08: 0000000000000000 R09: 0000000000000000 [ 157.201974][ T6649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.201984][ T6649] R13: 00007f818aa26128 R14: 00007f818aa26090 R15: 00007ffc40d3d628 [ 157.202013][ T6649] [ 157.205192][ C0] wdm_int_callback: 117 callbacks suppressed [ 157.205293][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 157.205324][ C0] wdm_int_callback: 117 callbacks suppressed [ 157.205375][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 157.205710][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 157.205773][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 157.206094][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 157.206145][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 157.206507][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 157.206557][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 157.206940][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 157.206995][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 157.207319][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 157.207369][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 157.207661][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 157.207712][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 157.208000][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 157.208016][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 157.208336][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 157.208389][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 157.208773][ C0] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 157.208817][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 157.233796][ T5749] usb 3-1: USB disconnect, device number 22 [ 157.233946][ C0] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 157.814211][ T6651] overlayfs: missing 'workdir' [ 158.315893][ T5762] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 158.467567][ T5762] usb 1-1: New USB device found: idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 158.470384][ T5762] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 158.470423][ T5762] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.471592][ T5762] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 158.471619][ T5762] usb 1-1: Manufacturer: syz [ 158.519904][ T5762] usb 1-1: config 0 descriptor?? [ 158.613438][ T6662] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 158.627021][ T5762] rc_core: IR keymap rc-hauppauge not found [ 158.627040][ T5762] Registered IR keymap rc-empty [ 158.628344][ T5762] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 158.634302][ T5762] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input33 [ 158.775663][ T10] usb 1-1: USB disconnect, device number 21 [ 159.533877][ T6673] FAULT_INJECTION: forcing a failure. [ 159.533877][ T6673] name failslab, interval 1, probability 0, space 0, times 0 [ 159.533924][ T6673] CPU: 0 UID: 0 PID: 6673 Comm: syz.0.220 Not tainted syzkaller #0 PREEMPT(full) [ 159.533949][ T6673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 159.533963][ T6673] Call Trace: [ 159.533983][ T6673] [ 159.533993][ T6673] dump_stack_lvl+0xe8/0x150 [ 159.534033][ T6673] should_fail_ex+0x3eb/0x540 [ 159.534079][ T6673] should_failslab+0xa8/0x100 [ 159.534111][ T6673] ? __kernfs_new_node+0xe6/0x980 [ 159.534146][ T6673] kmem_cache_alloc_noprof+0x9c/0x600 [ 159.534174][ T6673] ? __kernfs_new_node+0xe6/0x980 [ 159.534217][ T6673] __kernfs_new_node+0xe6/0x980 [ 159.534265][ T6673] ? __pfx___kernfs_new_node+0x10/0x10 [ 159.534298][ T6673] ? lock_acquire+0x115/0x350 [ 159.534325][ T6673] ? kernfs_root+0x1c/0x230 [ 159.534367][ T6673] ? kernfs_root+0x1c/0x230 [ 159.534399][ T6673] ? kernfs_root+0x1c/0x230 [ 159.534430][ T6673] ? kernfs_root+0x1c/0x230 [ 159.534470][ T6673] kernfs_new_node+0xeb/0x140 [ 159.534510][ T6673] __kernfs_create_file+0x4b/0x2e0 [ 159.534541][ T6673] sysfs_add_file_mode_ns+0x237/0x300 [ 159.534581][ T6673] internal_create_group+0x679/0x1180 [ 159.534652][ T6673] ? __pfx_internal_create_group+0x10/0x10 [ 159.534687][ T6673] ? driver_probe_device+0x4f/0x240 [ 159.534722][ T6673] ? __pfx_internal_create_group+0x10/0x10 [ 159.534753][ T6673] ? driver_register+0x23a/0x320 [ 159.534780][ T6673] ? sysfs_create_groups+0xfa/0x120 [ 159.534816][ T6673] netdev_queue_update_kobjects+0x317/0x6b0 [ 159.534857][ T6673] netdev_register_kobject+0x277/0x350 [ 159.534897][ T6673] register_netdevice+0x17be/0x2280 [ 159.534965][ T6673] ? __pfx_register_netdevice+0x10/0x10 [ 159.535005][ T6673] ? dev_addr_mod+0x174/0x350 [ 159.535043][ T6673] ? dev_addr_mod+0x1ba/0x350 [ 159.535077][ T6673] register_netdev+0x40/0x60 [ 159.535109][ T6673] gether_register_netdev+0x84/0x180 [ 159.535147][ T6673] ecm_bind+0x201/0xa30 [ 159.535184][ T6673] usb_add_function+0x2e1/0x9f0 [ 159.535207][ T6673] ? check_remote_wakeup_config+0x58/0x1c0 [ 159.535235][ T6673] configfs_composite_bind+0xde0/0x1410 [ 159.535275][ T6673] ? __pfx_configfs_composite_bind+0x10/0x10 [ 159.535299][ T6673] gadget_bind_driver+0x2ca/0x9e0 [ 159.535345][ T6673] ? __pfx_gadget_bind_driver+0x10/0x10 [ 159.535374][ T6673] really_probe+0x254/0xae0 [ 159.535414][ T6673] __driver_probe_device+0x1e8/0x360 [ 159.535451][ T6673] driver_probe_device+0x4f/0x240 [ 159.535490][ T6673] __driver_attach+0x34e/0x630 [ 159.535529][ T6673] bus_for_each_dev+0x23b/0x2c0 [ 159.535555][ T6673] ? __pfx___driver_attach+0x10/0x10 [ 159.535587][ T6673] ? __pfx_bus_for_each_dev+0x10/0x10 [ 159.535617][ T6673] ? do_raw_spin_unlock+0xf5/0x200 [ 159.535657][ T6673] bus_add_driver+0x38f/0x6e0 [ 159.535714][ T6673] driver_register+0x23a/0x320 [ 159.535741][ T6673] usb_gadget_register_driver_owner+0xf9/0x270 [ 159.535777][ T6673] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 159.535810][ T6673] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 159.535844][ T6673] configfs_write_iter+0x337/0x430 [ 159.535895][ T6673] vfs_write+0x612/0xba0 [ 159.535937][ T6673] ? __pfx_vfs_write+0x10/0x10 [ 159.535970][ T6673] ? __fget_files+0x3a2/0x420 [ 159.535994][ T6673] ? __fget_files+0x2a/0x420 [ 159.536025][ T6673] ? fdget+0x1ac/0x250 [ 159.536060][ T6673] ksys_write+0x150/0x270 [ 159.536092][ T6673] ? __pfx_ksys_write+0x10/0x10 [ 159.536135][ T6673] do_syscall_64+0x166/0x520 [ 159.536168][ T6673] ? trace_irq_disable+0x3b/0x140 [ 159.536196][ T6673] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.536219][ T6673] ? clear_bhb_loop+0x70/0xc0 [ 159.536248][ T6673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.536271][ T6673] RIP: 0033:0x7f6f94d9f559 [ 159.536292][ T6673] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.536312][ T6673] RSP: 002b:00007f6f95bfc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.536337][ T6673] RAX: ffffffffffffffda RBX: 00007f6f95025fa0 RCX: 00007f6f94d9f559 [ 159.536353][ T6673] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000004 [ 159.536368][ T6673] RBP: 00007f6f94e36b50 R08: 0000000000000000 R09: 0000000000000000 [ 159.536382][ T6673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.536395][ T6673] R13: 00007f6f95026038 R14: 00007f6f95025fa0 R15: 00007ffdc6852de8 [ 159.536435][ T6673] [ 159.608167][ T6677] netlink: 'syz.1.222': attribute type 10 has an invalid length. [ 159.715796][ T10] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 159.898420][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 159.909289][ T10] usb 4-1: New USB device found: idVendor=1b1c, idProduct=1c09, bcdDevice=0.00 [ 159.943637][ T10] usb 4-1: config 0 interface 0 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 159.943669][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 159.943767][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.042701][ T10] usb 4-1: config 0 descriptor?? [ 160.053304][ T6673] udc dummy_udc.0: failed to start g1: -12 [ 160.053333][ T6673] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -12 [ 160.074889][ T6673] UDC core: g1: couldn't find an available UDC or it's busy [ 160.131619][ T6677] team0: Device gre0 is of different type [ 160.175434][ T6679] ------------[ cut here ]------------ [ 160.175452][ T6679] kernel BUG at net/core/dev.c:11605! [ 160.175507][ T6679] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 160.192670][ T6679] CPU: 1 UID: 0 PID: 6679 Comm: syz.0.220 Not tainted syzkaller #0 PREEMPT(full) [ 160.201907][ T6679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 160.211996][ T6679] RIP: 0010:register_netdevice+0x2225/0x2280 [ 160.218029][ T6679] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 de 16 5b f8 e9 16 fb ff ff e8 34 f6 e3 f7 90 0f 0b e8 2c f6 e3 f7 90 <0f> 0b e8 24 f6 e3 f7 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9 [ 160.237683][ T6679] RSP: 0018:ffffc90004fcf580 EFLAGS: 00010293 [ 160.243794][ T6679] RAX: ffffffff89e54e24 RBX: 1ffff920009f9ec4 RCX: ffff888028b83e80 [ 160.251955][ T6679] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 160.260058][ T6679] RBP: ffffc90004fcf6f0 R08: ffffffff916bff87 R09: 1ffffffff22d7ff0 [ 160.268083][ T6679] R10: dffffc0000000000 R11: fffffbfff22d7ff1 R12: ffff88802f3607a8 [ 160.276098][ T6679] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff88802f360000 [ 160.284138][ T6679] FS: 00007f6f95bba6c0(0000) GS:ffff888123476000(0000) knlGS:0000000000000000 [ 160.293118][ T6679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.299749][ T6679] CR2: 00007f6f92fd4ff8 CR3: 0000000035e9a000 CR4: 00000000003526f0 [ 160.307819][ T6679] Call Trace: [ 160.311143][ T6679] [ 160.314108][ T6679] ? __mutex_lock+0x5cd/0x15a0 [ 160.318967][ T6679] ? __pfx___mutex_lock+0x10/0x10 [ 160.324048][ T6679] ? __pfx_register_netdevice+0x10/0x10 [ 160.329670][ T6679] ? dev_addr_mod+0x174/0x350 [ 160.334420][ T6679] ? dev_addr_mod+0x1ba/0x350 [ 160.339172][ T6679] register_netdev+0x40/0x60 [ 160.343838][ T6679] gether_register_netdev+0x84/0x180 [ 160.349187][ T6679] ecm_bind+0x201/0xa30 [ 160.353401][ T6679] ? rcu_is_watching+0x16/0xb0 [ 160.358237][ T6679] usb_add_function+0x2e1/0x9f0 [ 160.363134][ T6679] ? check_remote_wakeup_config+0x58/0x1c0 [ 160.368997][ T6679] configfs_composite_bind+0xde0/0x1410 [ 160.374596][ T6679] ? __pfx_configfs_composite_bind+0x10/0x10 [ 160.380615][ T6679] gadget_bind_driver+0x2ca/0x9e0 [ 160.385690][ T6679] ? __pfx_gadget_bind_driver+0x10/0x10 [ 160.391280][ T6679] really_probe+0x254/0xae0 [ 160.395838][ T6679] __driver_probe_device+0x1e8/0x360 [ 160.401195][ T6679] driver_probe_device+0x4f/0x240 [ 160.406372][ T6679] __driver_attach+0x34e/0x630 [ 160.411186][ T6679] bus_for_each_dev+0x23b/0x2c0 [ 160.416095][ T6679] ? __pfx___driver_attach+0x10/0x10 [ 160.421451][ T6679] ? __pfx_bus_for_each_dev+0x10/0x10 [ 160.426871][ T6679] ? do_raw_spin_unlock+0xf5/0x200 [ 160.432042][ T6679] bus_add_driver+0x38f/0x6e0 [ 160.436774][ T6679] driver_register+0x23a/0x320 [ 160.441578][ T6679] usb_gadget_register_driver_owner+0xf9/0x270 [ 160.447873][ T6679] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 160.453566][ T6679] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 160.459790][ T6679] configfs_write_iter+0x337/0x430 [ 160.464955][ T6679] vfs_write+0x612/0xba0 [ 160.469263][ T6679] ? __pfx_vfs_write+0x10/0x10 [ 160.474076][ T6679] ? __fget_files+0x3a2/0x420 [ 160.478800][ T6679] ? __fget_files+0x2a/0x420 [ 160.483439][ T6679] ? fdget+0x1ac/0x250 [ 160.487553][ T6679] ksys_write+0x150/0x270 [ 160.491917][ T6679] ? __pfx_ksys_write+0x10/0x10 [ 160.496812][ T6679] do_syscall_64+0x166/0x520 [ 160.501468][ T6679] ? trace_irq_disable+0x3b/0x140 [ 160.506534][ T6679] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.512649][ T6679] ? clear_bhb_loop+0x70/0xc0 [ 160.517359][ T6679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.523276][ T6679] RIP: 0033:0x7f6f94d9f559 [ 160.527722][ T6679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.547365][ T6679] RSP: 002b:00007f6f95bba028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 160.555819][ T6679] RAX: ffffffffffffffda RBX: 00007f6f95026180 RCX: 00007f6f94d9f559 [ 160.563819][ T6679] RDX: 000000000000000b RSI: 0000200000000400 RDI: 0000000000000004 [ 160.571912][ T6679] RBP: 00007f6f94e36b50 R08: 0000000000000000 R09: 0000000000000000 [ 160.579951][ T6679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.587965][ T6679] R13: 00007f6f95026218 R14: 00007f6f95026180 R15: 00007ffdc6852de8 [ 160.595994][ T6679] [ 160.599167][ T6679] Modules linked in: [ 160.604565][ T6679] ---[ end trace 0000000000000000 ]--- [ 160.622220][ T10] corsair-psu 0003:1B1C:1C09.0007: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0 [ 160.642991][ T6679] RIP: 0010:register_netdevice+0x2225/0x2280 [ 160.643038][ T6679] Code: e9 1e fa ff ff 89 f9 80 e1 07 38 c1 0f 8c 20 fb ff ff e8 de 16 5b f8 e9 16 fb ff ff e8 34 f6 e3 f7 90 0f 0b e8 2c f6 e3 f7 90 <0f> 0b e8 24 f6 e3 f7 90 0f 0b 44 89 f9 80 e1 07 38 c1 0f 8c 34 f9 [ 160.643072][ T6679] RSP: 0018:ffffc90004fcf580 EFLAGS: 00010293 [ 160.643091][ T6679] RAX: ffffffff89e54e24 RBX: 1ffff920009f9ec4 RCX: ffff888028b83e80 [ 160.643108][ T6679] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 160.643121][ T6679] RBP: ffffc90004fcf6f0 R08: ffffffff916bff87 R09: 1ffffffff22d7ff0 [ 160.643136][ T6679] R10: dffffc0000000000 R11: fffffbfff22d7ff1 R12: ffff88802f3607a8 [ 160.643151][ T6679] R13: dffffc0000000000 R14: 0000000000000003 R15: ffff88802f360000 [ 160.643167][ T6679] FS: 00007f6f95bba6c0(0000) GS:ffff888123476000(0000) knlGS:0000000000000000 [ 160.643185][ T6679] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 160.643199][ T6679] CR2: 00007f6f92fd4ff8 CR3: 0000000035e9a000 CR4: 00000000003526f0 [ 160.643221][ T6679] Kernel panic - not syncing: Fatal exception [ 160.746482][ T6679] Kernel Offset: disabled [ 160.750842][ T6679] Rebooting in 86400 seconds..