last executing test programs: 7.660001484s ago: executing program 4 (id=7017): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000100)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x201, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f00000003c0), 0x0, 0x2}) 7.648411571s ago: executing program 4 (id=7018): syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) syz_clone3(0x0, 0x0) 7.372864903s ago: executing program 4 (id=7021): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x22401, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0xfffffffffffffff5, 0x0, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r2, 0x1, 0x460e, 0x3) syz_fuse_handle_req(r0, &(0x7f0000008340)="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", 0x2000, &(0x7f000000ab80)={&(0x7f000000a340)={0x50, 0x0, 0x5, {0x7, 0x2d, 0x1ba, 0x10da07e2, 0x7, 0x8000, 0x7, 0x36, 0x0, 0x0, 0x8, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) 5.764186744s ago: executing program 3 (id=7030): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 4.15675913s ago: executing program 4 (id=7039): setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000bcb7f620e90f01d55023010203010902130001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0xae00) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000040)={&(0x7f0000000300)=[{0x4, 0x1000, 0x0, 0x0}, {0x5, 0x801, 0x0, 0x0}], 0x2}) 4.072935335s ago: executing program 3 (id=7040): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000301, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000002c00)={0x90, 0x0, 0x0, {0x3, 0x0, 0xfffffffffffffffc, 0xdddb, 0x1, 0x8000, {0x3, 0x101, 0x4, 0x4, 0xfffffffffffffffd, 0x7, 0x0, 0x1ff, 0xff, 0x2000, 0x2, 0x0, 0x0, 0x5, 0x9}}}, 0x90) 3.75482054s ago: executing program 3 (id=7042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800001000087}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, 0x0, 0x442, 0x0) write$binfmt_aout(r4, 0x0, 0x20) splice(r4, 0x0, 0xffffffffffffffff, 0x0, 0x807, 0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x7) syz_usb_connect(0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) removexattr(0x0, 0x0) write(r5, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) 2.319236011s ago: executing program 3 (id=7046): socket(0x2b, 0x1, 0x1) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xb, 0x4, @empty, 0x8}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfe}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$l2tp6(0xa, 0x2, 0x73) pselect6(0x17, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x3, 0x5ed1, 0x0, 0x1000000000000007}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0xb, 0xa9, 0x3, 0x0, 0x1, 0x5}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = userfaultfd(0x80001) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) 1.669337327s ago: executing program 4 (id=7049): unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfdffa000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) 1.160273272s ago: executing program 4 (id=7051): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 1.122182224s ago: executing program 0 (id=7052): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x194) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000002c00)={0x90, 0x0, 0x0, {0x3, 0x0, 0xfffffffffffffffc, 0xdddb, 0x1, 0x8000, {0x3, 0x101, 0x4, 0x4, 0xfffffffffffffffd, 0x7, 0x0, 0x1ff, 0xff, 0x2000, 0x2, 0x0, 0x0, 0x5, 0x9}}}, 0x90) 993.170108ms ago: executing program 3 (id=7053): writev(0xffffffffffffffff, &(0x7f0000001a40)=[{&(0x7f00000000c0)="9211a3ee", 0x20000}, {0x0, 0xe4}], 0x2) 963.095747ms ago: executing program 0 (id=7054): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x6, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0xa, 0x8000000000000000, 0xf4a, 0x100000000, 0xbdb], 0xffff1001, 0x4000}) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, &(0x7f0000000000)) 921.347224ms ago: executing program 2 (id=7055): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0xaa27, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000000)=0x4) 835.5266ms ago: executing program 3 (id=7057): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000a40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x20, 0x1, 0x1, 0xc0}, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 813.84254ms ago: executing program 2 (id=7058): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x2, 0x1, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000140)="b8", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000080), &(0x7f00000000c0)=0x8) 718.498505ms ago: executing program 1 (id=7059): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) write$UHID_CREATE(r0, &(0x7f00000003c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f00000000c0)=""/43, 0x2b}}, 0x120) write$UHID_DESTROY(r0, &(0x7f0000000080), 0x4) 666.624659ms ago: executing program 2 (id=7060): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x8) 653.044677ms ago: executing program 2 (id=7061): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r3, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x9) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x8040ae9f, &(0x7f0000000280)=@arm64) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) r7 = socket(0x10, 0x803, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x24, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008004}, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01030003000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffdffffff00000000", @ANYRES32=0x0, @ANYBLOB="0002010000000000240012800b00010065727370616e000014000280050016000000000008000700ac1414bb08000a00", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000b40)={0x8, {"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", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) r10 = socket$pppl2tp(0x18, 0x1, 0x1) r11 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r10, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r11, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r12, @ANYBLOB="010026bd70100400000005000000080009000200000008000c00a80a000008000b000000000006000100070000000c000f0005000000000000000500050000000000"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r14 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r14, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) 393.276176ms ago: executing program 1 (id=7062): ioctl$HIDIOCGUSAGES(0xffffffffffffffff, 0xd01c4813, &(0x7f00000001c0)={{0x3, 0x200, 0x85c2, 0x1, 0x0, 0x4}, 0x348, [0x1, 0x84, 0x1, 0x9, 0x3, 0x9, 0xff, 0x7, 0x7, 0x0, 0x7, 0x5, 0x9c, 0x3, 0x6, 0xb9, 0x4, 0x6, 0x6, 0x7, 0x8, 0x8, 0x9, 0x1, 0x4c1b, 0x3, 0x7, 0x9, 0x4, 0x8295, 0x80000001, 0xb5, 0x8, 0x7, 0x8, 0x6, 0x7fffffff, 0x9, 0x1, 0x2, 0x4, 0x8, 0x2, 0x5, 0x81, 0xcc88, 0x2a6f, 0x10000, 0x6a, 0x0, 0x17, 0x800, 0xfc, 0x8, 0x2, 0x400, 0x0, 0xb22, 0x6, 0xc9a, 0xfff, 0x401, 0x8, 0x9c7d, 0x5, 0x0, 0x6, 0x7fff, 0x1000000, 0x3, 0xffff8382, 0x7fffffff, 0x1ff, 0x6, 0x9, 0x8, 0x0, 0xfffffffa, 0x8, 0x8c, 0x7, 0x400, 0x2, 0x2, 0x10, 0x6, 0x8000, 0xd3, 0x7f, 0x16cf, 0x1, 0x8, 0x2, 0xd7b, 0x9, 0x7fff, 0xffffff5c, 0x1, 0x666, 0x0, 0x8, 0x7, 0x3, 0x3, 0x3, 0x1, 0x4, 0x368, 0x8, 0x3, 0x580, 0x2, 0x6, 0x10, 0x70955bc4, 0x1, 0x2, 0xfffffffb, 0x2, 0x2, 0x3, 0xfffff38f, 0x2, 0xa000000, 0xeb, 0x5b2, 0x4, 0x960, 0x6, 0x79, 0x3, 0x30, 0x3, 0x7, 0x1, 0x7fff, 0xf2, 0x5, 0x7, 0xff, 0x4, 0x3, 0x12e4, 0x3, 0x0, 0x101, 0x200, 0x7, 0x40, 0x0, 0x1, 0x3, 0x2, 0xffffff00, 0x702, 0x7, 0x800, 0x81, 0xfffffff7, 0x7, 0x1, 0xd, 0x40, 0x10000, 0x3, 0xffffffff, 0x23db, 0x6, 0x0, 0x5, 0x7, 0xffffffff, 0x4, 0x7, 0x6, 0x2, 0x200040, 0xb7, 0x6, 0x638, 0x0, 0x800, 0x6, 0x6, 0x0, 0x8, 0x7, 0x2, 0x8, 0x2, 0xfffffffb, 0x2, 0x80, 0xffff7fff, 0x4, 0x200, 0x7f, 0x1, 0x5, 0x9, 0x1, 0xfffffffa, 0xc, 0x50c2, 0xc1ed, 0x401, 0x3, 0x7, 0x101, 0x800, 0x5, 0x5, 0x8, 0x1, 0x1, 0xfffffff8, 0xe9, 0x1, 0x7f, 0x7ff, 0x0, 0x7, 0xac, 0x80000000, 0x81, 0x80000001, 0x2, 0x80, 0x3ff, 0xa639, 0x0, 0x53647e6f, 0x2, 0xd792, 0x14b, 0x4, 0x3, 0xb36, 0xa, 0x1, 0x4, 0x94, 0x5f, 0x1, 0x8, 0xd8, 0x7fff, 0xf, 0x400, 0x7f, 0x80000001, 0xd08, 0x2, 0x1, 0x6, 0x9, 0x7d9, 0x1, 0x3, 0x3, 0x8, 0x6, 0x400, 0x86, 0x2, 0x1000, 0xbdf6, 0x41bf, 0xc, 0x2487005d, 0x2, 0x1, 0xaa1, 0x6, 0x80000001, 0x9, 0xe, 0x2, 0x0, 0x4, 0x401, 0x5, 0x87a0, 0xffffffff, 0x5, 0x3, 0xf, 0x7fffffff, 0x0, 0x8d, 0xe, 0x3, 0xb6, 0x5, 0x9, 0x100, 0xfff, 0x10, 0x1, 0x6, 0xb7, 0x7, 0xfffffffa, 0x4, 0x5, 0x81, 0x6, 0x5, 0xdcdf, 0x7ff, 0x9, 0xffffffe3, 0x1ff, 0x3, 0xf1c, 0x8021, 0xffffffff, 0x70, 0x10000, 0x7, 0x4, 0x1, 0x0, 0x4, 0x7aed, 0x4, 0x8, 0xe, 0xffffffc0, 0x8b7, 0x5, 0x5, 0x200, 0x40, 0x3ff, 0x4, 0x0, 0xa, 0xc, 0x7, 0xe324, 0xf, 0x7, 0x97a, 0x7fff, 0xffffffff, 0x8, 0x7, 0x40000000, 0x7, 0x6, 0x7, 0x6f007526, 0xa, 0x80000000, 0x0, 0x200, 0xaeb, 0x315c, 0x9, 0x1000, 0xd, 0x5, 0x0, 0xf0f, 0x6, 0x20, 0x2, 0x9, 0x2, 0x9, 0x4, 0x6, 0xb37, 0x8, 0x5, 0x8, 0xa6b7, 0x10001, 0x2, 0x1, 0xf, 0x8, 0x8, 0x3ff, 0x1, 0x4, 0xbe, 0x1, 0x10001, 0x7fa, 0xe7ad, 0x4, 0x2, 0x6, 0x81, 0x10000, 0x3, 0xbd7, 0x71e5119d, 0x62, 0xffd, 0x5, 0x6, 0x4, 0xc, 0x3, 0x7, 0x400, 0x4, 0x400277e, 0xe1, 0x3, 0x4, 0x3, 0x4, 0x6, 0xbf, 0x7, 0x6, 0x8, 0x5, 0x3ff, 0x9ad9, 0x8, 0x1, 0x0, 0x3, 0x400, 0x2, 0x9, 0x6, 0x40, 0x1000, 0x82, 0x4, 0x1000, 0x8, 0x3d, 0x2, 0xe, 0x4, 0x3, 0x1, 0x4, 0x8, 0x10, 0x6, 0x9, 0xffffffff, 0x10, 0x0, 0x1, 0x9225, 0x3be, 0xd, 0x401, 0x81, 0x13, 0x5, 0x3b1, 0x1, 0x9f18, 0x2, 0x8f86, 0x417db73f, 0x7, 0x1, 0x7, 0x5, 0x3, 0x6, 0x7, 0x0, 0xd, 0x0, 0x7, 0x7, 0x2, 0x8, 0x5, 0x0, 0xab, 0x5, 0x94, 0xb3ab, 0x5ae, 0x2, 0x40, 0x5, 0x0, 0x8001, 0x8, 0x800, 0xb, 0xa4, 0x50, 0x8, 0x99, 0x10, 0x5, 0x100, 0xfffff800, 0x5, 0xca, 0x3, 0x4, 0x6, 0x7ff, 0x6e15d2ec, 0x7, 0x5, 0x8, 0x7ba, 0x21c0, 0xe64, 0xc, 0x7, 0x6d4, 0x5, 0x3, 0x7fff, 0x121, 0x9, 0xe6d8, 0x1000, 0x1ff, 0x42db5dac, 0xffff, 0x6, 0xfffffff8, 0x3ff, 0xfcf, 0x1000, 0x7, 0x2, 0x2, 0x6, 0x7, 0x2, 0x7, 0x80000001, 0x7, 0x8, 0x7, 0xfffff000, 0xfffffffe, 0x5, 0x5, 0x7, 0x80000001, 0x4, 0x2, 0x53f, 0x8, 0x6, 0x0, 0xffff7ff8, 0x6, 0x8, 0x9, 0x8, 0x6d, 0x48, 0x8001, 0x1, 0x1, 0x2e7a, 0x8, 0x4, 0x10000, 0x5, 0x1ff, 0x1, 0x8, 0xfffffffd, 0xc217, 0x6, 0x59a, 0x2, 0x3, 0xba7a, 0x6d9c7f55, 0x4, 0x9, 0x1000, 0x3, 0x10001, 0x2, 0x2, 0x7, 0x6, 0x2, 0x1, 0x27a, 0x9, 0x2, 0xde26, 0x99, 0xfffffffe, 0x5, 0x1, 0xdba4b27, 0x6, 0x100, 0x0, 0x9, 0x7, 0x1, 0x7ff, 0x0, 0x2, 0xffff9369, 0x4, 0xff, 0x6, 0xed1, 0x6, 0x0, 0x3, 0x80000001, 0xe, 0x9, 0x1, 0xffff, 0x6, 0x9, 0x4, 0xef3, 0x1, 0xfffffffb, 0x7, 0x40, 0x6, 0x4, 0x9, 0x7f, 0x5, 0x1, 0x3, 0x2, 0xc15e, 0x6, 0x0, 0x6, 0x8, 0xffffffff, 0x8, 0x401, 0x0, 0x10, 0x3, 0x2, 0x4, 0x50d, 0x3, 0x4b, 0x7, 0x0, 0x2, 0x75, 0x80, 0x1, 0xdb, 0x401, 0x5, 0x1, 0x3, 0x6, 0xbf0d, 0x18, 0x1, 0x5, 0x95, 0x7fff, 0xe7, 0xa, 0x4, 0x0, 0xffffff16, 0x10, 0xae25, 0x908, 0x78e, 0x6, 0x1, 0xb2b7, 0xc, 0x7, 0x0, 0x5, 0x9, 0x8, 0x73, 0x9, 0xfffffffe, 0x5df, 0x1, 0x7, 0x81, 0xffffffaa, 0x3, 0x6, 0xd, 0xffffc4e6, 0xffff0001, 0x0, 0x5, 0x10001, 0x2, 0x3, 0x0, 0x6, 0x4, 0x3, 0x8, 0x3, 0x8, 0x5, 0x3, 0xc3f, 0x0, 0x2, 0x6, 0x6, 0xaed, 0x4, 0xed4, 0x7, 0x7, 0x8, 0xff, 0x8001, 0x5, 0x9, 0x4, 0xc2, 0x80000000, 0x80000000, 0x4, 0x8, 0xab84, 0xb4, 0xfffffc00, 0x908b, 0x8, 0xc9, 0xfffffffe, 0x1, 0x3, 0x8, 0xfffffffb, 0x0, 0xf8, 0xfffffff0, 0x637, 0x6, 0x4, 0xa, 0x80, 0xfffffff9, 0xfffffb6f, 0x0, 0x120e, 0x7, 0x0, 0x6, 0x2, 0x1000, 0xa, 0x6, 0x2, 0xd, 0x3ff, 0x5e18, 0xf, 0x9ebe, 0x7, 0x2, 0x1, 0x7, 0x7, 0x9e, 0x8, 0xedd3, 0x9, 0x1, 0xffffffff, 0x5, 0x1ff, 0x8, 0x1, 0x5, 0x2, 0x40, 0xe, 0x4, 0xc, 0xc65, 0x40, 0x7, 0xbb7d, 0x10, 0x2, 0x1ff, 0x8, 0x6, 0x80, 0x2, 0xf, 0x7, 0x80000000, 0x6e0, 0x1, 0x5, 0xd1, 0x9, 0x8, 0xfffffe00, 0x0, 0x1, 0x4, 0xe449, 0x4, 0x40, 0x10, 0x1000, 0x0, 0xca, 0xffff, 0x10001, 0xfffff891, 0x2, 0xfe, 0x200, 0xffffff81, 0xfffffff8, 0x4, 0x101, 0x68f0, 0xbfb, 0xdfe2, 0x0, 0x4, 0x9e74, 0x8, 0x7, 0x3ff, 0x80, 0xde7, 0x5, 0x51, 0x0, 0xb, 0x3, 0xad, 0x8, 0x2, 0x1, 0x8000, 0x4, 0x7, 0x8, 0x4, 0x10, 0x80000000, 0x6, 0x1400000, 0xf7, 0x8, 0x81, 0x4, 0x6790, 0x9, 0xfa6, 0x400, 0x7f, 0x3ff, 0x4, 0x2, 0x9, 0x6, 0x9107, 0x1, 0xcac, 0x40, 0x7, 0xc, 0x1, 0x5, 0x7, 0xb923, 0x2, 0xffff3818, 0x3, 0x1, 0x5, 0xe39, 0x4, 0x6, 0x7ff, 0xfff, 0x5, 0x5, 0x1, 0x101, 0xfffffff9, 0x3, 0x1, 0x400, 0xe59, 0x6, 0x8, 0x3ff, 0x6, 0x3ff, 0x9, 0x2, 0x6, 0x12dd, 0x0, 0x10, 0x6, 0x40, 0x0, 0xffffff80, 0x3, 0x0, 0x1, 0x7, 0x997, 0x7, 0x7fffffff, 0x81, 0x1, 0xe, 0x7e, 0x9, 0x3, 0x5, 0x7c, 0x4, 0x9, 0x3, 0x0, 0x1ff, 0x4, 0x926a, 0x9, 0x6, 0xea, 0x9, 0x9, 0xc0000, 0xf4d, 0x80000001, 0x1, 0x2, 0x1, 0x3, 0x7fff, 0x3, 0x1, 0x5851, 0x9fc, 0x0, 0x6, 0xcf4, 0x6, 0x1, 0xffb8, 0x0, 0x10001, 0x7, 0x8, 0x7b, 0x6, 0x89, 0xfffc0000, 0x9, 0x1, 0x4, 0xb, 0x9, 0x3, 0x5, 0xc2, 0x5, 0x2, 0x9, 0x3, 0x2c33, 0x5, 0x4, 0x0, 0x5, 0x9, 0x1, 0xa, 0x819, 0x5, 0x4, 0xeaa8, 0xb, 0x5, 0x8000, 0xffff, 0x8, 0x7fff, 0xe, 0x3, 0x6, 0xffffffff, 0x7, 0xba, 0x1, 0x2, 0xc7c, 0x8, 0xdc, 0x3, 0x5, 0x9, 0x1]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x66) 327.479241ms ago: executing program 2 (id=7063): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000040000000800005695"], 0x50) 327.067136ms ago: executing program 1 (id=7064): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000240)="44001d000000000000ffff0100006bddc65b99fba9d5c8ef68", 0x19, 0x2004c015, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xd, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 313.770735ms ago: executing program 0 (id=7065): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x194) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, 0x0, 0x0) write$FUSE_ENTRY(r0, &(0x7f0000002c00)={0x90, 0x0, 0x0, {0x3, 0x0, 0xfffffffffffffffc, 0xdddb, 0x1, 0x8000, {0x3, 0x101, 0x4, 0x4, 0xfffffffffffffffd, 0x7, 0x0, 0x1ff, 0xff, 0x2000, 0x2, 0x0, 0x0, 0x5, 0x9}}}, 0x90) 244.320921ms ago: executing program 2 (id=7066): syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev\x00', 0x1df) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0xf000, 0x0) 220.862856ms ago: executing program 1 (id=7067): r0 = syz_open_dev$mtd(0x0, 0x46, 0x1) writev(r0, &(0x7f0000001a40)=[{&(0x7f00000000c0)="9211a3ee", 0x20000}, {0x0, 0xe4}], 0x2) 190.069497ms ago: executing program 0 (id=7068): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000640)) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000300)) process_madvise(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000000)="96", 0x1}], 0x1, 0x8, 0x0) ioctl(r0, 0xfffff000, &(0x7f0000000000)) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000240)) recvmmsg(0xffffffffffffffff, &(0x7f0000007a80)=[{{0x0, 0x0, &(0x7f0000004f40)=[{0x0}], 0x1}, 0xfff}], 0x1, 0x10022, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20000000) 107.732637ms ago: executing program 1 (id=7069): r0 = syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000c00)={0xe9, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffdfff, 0xffffffff, 0xffffffff]], '\x00', [{0xd, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x4, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0xaa27, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000000)=0x4) 58.76498ms ago: executing program 1 (id=7070): socket(0x2b, 0x1, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x83, 0x2, 0x3, 0x7f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x8006, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x5, 0x5, 0x3e, 0x18e, 0x5, 0x6, 0x454f, 0x6, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0xa, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x9, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x9, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x1, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x13, 0x3, 0x4000009, 0x6, 0x4000000, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x4, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x8002, 0x0, 0x9, 0xb, 0x4, 0x45, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x0, 0xac8, 0xbf, 0x2, 0x80, 0x7ff, 0x12b, 0x1, 0xc921, 0xa, 0xffffffff, 0x5, 0x2, 0x120000, 0x807ff, 0x2006, 0x80a2ed, 0x1, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x1938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x6, 0x57, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffe, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x7, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x3, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x3, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0xf1, 0x803, 0xd7, 0x200, 0xfffffffa, 0xfff]}, 0x45c) syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x2) r0 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xb, 0x4, @empty, 0x8}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0), 0x0, 0x4001c00) socket$tipc(0x1e, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r3 = dup(r1) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) socket$l2tp6(0xa, 0x2, 0x73) pselect6(0x17, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x40, 0x3, 0x5ed1, 0x0, 0x1000000000000007}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0xb, 0xa9, 0x3, 0x0, 0x1, 0x5}, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) r4 = userfaultfd(0x80001) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x358}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 55.46528ms ago: executing program 0 (id=7071): r0 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r0, 0x8) 0s ago: executing program 0 (id=7072): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1241, 0x5015, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x12, 0xd, 0x9}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0] ? kobject_put+0xb9/0x640 [ 1174.172209][T26330] device_add+0x294/0x1970 [ 1174.172238][T26330] ? lockdep_init_map_type+0x5c/0x250 [ 1174.172262][T26330] ? __pfx_device_add+0x10/0x10 [ 1174.172287][T26330] ? lockdep_init_map_type+0x5c/0x250 [ 1174.172310][T26330] ? __init_waitqueue_head+0xca/0x150 [ 1174.172343][T26330] tty_register_device_attr+0x388/0x7f0 [ 1174.172368][T26330] ? lockdep_init_map_type+0x5c/0x250 [ 1174.172391][T26330] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1174.172420][T26330] ? tty_port_init+0x156/0x1c0 [ 1174.172448][T26330] gsm_activate_mux+0x155/0x2a0 [ 1174.172473][T26330] gsmld_ioctl+0xbbc/0x15c0 [ 1174.172504][T26330] ? kasan_quarantine_put+0x104/0x240 [ 1174.172527][T26330] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1174.172557][T26330] ? __ldsem_down_read_nested+0xf3/0x890 [ 1174.172590][T26330] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1174.172624][T26330] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1174.172652][T26330] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1174.172677][T26330] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1174.172708][T26330] tty_ioctl+0x11b4/0x1640 [ 1174.172730][T26330] ? __pfx_tty_ioctl+0x10/0x10 [ 1174.172754][T26330] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1174.172790][T26330] ? __fget_files+0x215/0x3d0 [ 1174.172808][T26330] ? hook_file_ioctl_common+0x140/0x440 [ 1174.172837][T26330] ? selinux_file_ioctl+0x13b/0x290 [ 1174.172864][T26330] ? selinux_file_ioctl+0xb6/0x290 [ 1174.172893][T26330] ? __pfx_tty_ioctl+0x10/0x10 [ 1174.172917][T26330] __x64_sys_ioctl+0x18e/0x210 [ 1174.172945][T26330] do_syscall_64+0x115/0x870 [ 1174.172967][T26330] ? clear_bhb_loop+0x40/0x90 [ 1174.172997][T26330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1174.173018][T26330] RIP: 0033:0x7f5620b9e019 [ 1174.173036][T26330] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1174.173054][T26330] RSP: 002b:00007f5621a7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1174.173074][T26330] RAX: ffffffffffffffda RBX: 00007f5620e26090 RCX: 00007f5620b9e019 [ 1174.173087][T26330] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000004 [ 1174.173100][T26330] RBP: 00007f5620c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1174.173113][T26330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1174.173124][T26330] R13: 00007f5620e26128 R14: 00007f5620e26090 R15: 00007ffc0a160828 [ 1174.173150][T26330] [ 1174.173190][T26330] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1174.451066][T22807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1174.528518][T13804] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.542083][T22807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1174.542586][T13804] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1174.551949][T22807] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1174.551973][T22807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.566903][T22807] usb 2-1: config 0 descriptor?? [ 1174.571618][T13804] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1174.605747][T13804] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1174.621298][T13804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1174.629600][T13804] usb 4-1: Product: syz [ 1174.635378][T13804] usb 4-1: Manufacturer: syz [ 1174.640461][T13804] usb 4-1: SerialNumber: syz [ 1174.650353][T13804] cdc_mbim 4-1:1.0: skipping garbage [ 1174.655735][T13804] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 1174.663191][T13804] cdc_mbim 4-1:1.0: bind() failure [ 1175.502690][T22807] usb 2-1: language id specifier not provided by device, defaulting to English [ 1175.648011][ T11] usb 1-1: USB disconnect, device number 13 [ 1175.703965][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1175.720282][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1175.729381][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1175.736716][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1175.744188][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1175.751599][ C0] raw-gadget.2 gadget.1: ignoring, device is not running [ 1175.759468][T22807] uclogic 0003:256C:006D.001B: interface is invalid, ignoring [ 1175.800289][T22807] usb 2-1: USB disconnect, device number 12 [ 1175.835322][T26345] netlink: 'syz.2.6739': attribute type 1 has an invalid length. [ 1175.887132][T26349] netlink: 76 bytes leftover after parsing attributes in process `syz.2.6739'. [ 1176.217677][ T11] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 1176.499263][T26364] binder: 26358:26364 ioctl c0306201 0 returned -14 [ 1176.625663][T26366] input: syz1 as /devices/virtual/input/input136 [ 1176.632133][T26366] input: failed to attach handler leds to device input136, error: -6 [ 1177.347841][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1177.362618][ T11] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 1177.465452][ T11] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1177.612057][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.620860][ T11] usb 3-1: Product: syz [ 1177.625236][ T11] usb 3-1: Manufacturer: syz [ 1177.631246][ T11] usb 3-1: SerialNumber: syz [ 1177.641915][ T11] usb 3-1: config 0 descriptor?? [ 1177.643857][T13804] usb 4-1: USB disconnect, device number 22 [ 1177.650445][T26345] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1177.788861][ T11] usb 3-1: ucan: probing device on interface #0 [ 1177.807966][ T11] usb 3-1: ucan: invalid endpoint configuration [ 1177.816852][ T11] usb 3-1: ucan: probe failed; try to update the device firmware [ 1177.995602][ T5727] usb 3-1: USB disconnect, device number 18 [ 1178.069443][T26378] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1178.647282][ T5735] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 1178.770846][T26382] random: crng reseeded on system resumption [ 1179.347259][ T5735] usb 1-1: device descriptor read/64, error -71 [ 1179.728026][ T5735] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 1180.069780][ T5735] usb 1-1: device descriptor read/64, error -71 [ 1180.294289][ T5735] usb usb1-port1: attempt power cycle [ 1181.493175][T26401] input: syz1 as /devices/virtual/input/input138 [ 1181.557390][ T5735] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 1181.565129][ T5727] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1181.585357][T26401] input: failed to attach handler leds to device input138, error: -6 [ 1181.619718][ T5735] usb 1-1: device descriptor read/8, error -71 [ 1181.747249][ T5727] usb 4-1: Using ep0 maxpacket: 16 [ 1181.766599][ T5727] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.797258][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.816059][ T5727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1181.837224][ T5727] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1181.857393][ T5727] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1181.890700][ T5727] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1181.925286][ T5727] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1182.129213][ T5727] usb 4-1: Manufacturer: syz [ 1182.318266][T26421] input: syz1 as /devices/virtual/input/input139 [ 1182.324719][T26421] input: failed to attach handler leds to device input139, error: -6 [ 1182.449447][ T5727] usb 4-1: config 0 descriptor?? [ 1182.937801][ T5727] rc_core: IR keymap rc-hauppauge not found [ 1182.953978][ T5727] Registered IR keymap rc-empty [ 1182.964493][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1182.998212][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.028035][ T5727] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1183.040664][ T5727] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input140 [ 1183.055647][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.077358][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.114726][T26434] Config c/1 of g1 needs at least one function. [ 1183.121557][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.128956][T26434] udc dummy_udc.0: failed to start g1: -22 [ 1183.134907][T26434] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1183.147288][T26434] UDC core: g1: couldn't find an available UDC or it's busy [ 1183.157310][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.158253][ T5842] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1183.175813][ T11] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1183.177300][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.217287][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.249366][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.277304][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.298710][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.314687][T26402] input: syz1 as /devices/virtual/input/input137 [ 1183.338256][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 1183.339494][ T5727] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1183.349199][ T11] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1183.366427][ T11] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1183.381306][ T11] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1183.395765][ T5842] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1183.401343][ T5727] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1183.404239][ T5842] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1183.433122][ T5727] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1183.443014][ T5842] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1183.457676][ T11] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1183.468718][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.476825][ T5842] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1183.488695][ T11] usb 5-1: Product: syz [ 1183.492948][ T11] usb 5-1: Manufacturer: syz [ 1183.497677][ T5842] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1183.509166][ T11] usb 5-1: SerialNumber: syz [ 1183.517658][ T5842] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1183.525421][ T5842] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1183.537949][ T5842] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1183.550094][ T5842] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1183.561799][ T5842] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1183.574780][ T5842] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1183.590487][ T11] cdc_mbim 5-1:1.0: skipping garbage [ 1183.596397][ T5842] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1183.607838][T24742] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1183.617019][ T11] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found [ 1183.633331][ T11] cdc_mbim 5-1:1.0: bind() failure [ 1183.641567][ T5842] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1183.679107][ T5842] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1183.691079][ T5842] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1183.707019][ T5842] usb 2-1: string descriptor 0 read error: -22 [ 1183.713646][ T5842] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1183.723050][ T5842] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1183.787346][T24742] usb 1-1: Using ep0 maxpacket: 8 [ 1183.842920][T24742] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1183.858164][ T5842] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1183.886422][T24742] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1183.923455][T24742] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1183.936619][T24742] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1183.953434][T24742] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1183.970601][T24742] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1183.996698][T24742] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1184.044516][T24742] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1184.110417][T24742] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1184.121962][T24742] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1184.135908][T24742] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 1184.143822][T24742] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1184.155403][T24742] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1184.167212][T24742] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1184.180531][T24742] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1184.194378][T24742] usb 1-1: string descriptor 0 read error: -22 [ 1184.200693][T24742] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1184.210048][T24742] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.227360][T24742] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1184.408415][T22807] usb 4-1: USB disconnect, device number 23 [ 1185.506911][T26456] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1185.787421][T22807] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1185.934891][ T5727] usb 2-1: USB disconnect, device number 13 [ 1185.998661][T22807] usb 4-1: device descriptor read/64, error -71 [ 1186.012328][ T5700] usb 5-1: USB disconnect, device number 59 [ 1187.322429][T22807] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1187.557404][T22807] usb 4-1: device descriptor read/64, error -71 [ 1187.581415][T26479] Config c/1 of g1 needs at least one function. [ 1187.594144][T26480] binder: 26473:26480 ioctl c0306201 0 returned -14 [ 1187.950737][ T5616] usb 1-1: USB disconnect, device number 18 [ 1187.951434][T22807] usb usb4-port1: attempt power cycle [ 1187.981812][T26479] udc dummy_udc.0: failed to start g1: -22 [ 1188.002223][T26479] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1188.019253][T26479] UDC core: g1: couldn't find an available UDC or it's busy [ 1188.372098][T26490] random: crng reseeded on system resumption [ 1188.567390][ T5616] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1188.877264][ T5616] usb 2-1: Using ep0 maxpacket: 16 [ 1188.892404][ T5616] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1188.914641][ T5616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1189.075132][T26498] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1189.376520][ T5727] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1189.387269][ T5616] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1189.406090][ T5616] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1189.431952][ T5616] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1189.460429][ T5616] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1189.486057][ T5616] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1189.506581][ T5616] usb 2-1: Manufacturer: syz [ 1189.540958][ T5616] usb 2-1: config 0 descriptor?? [ 1189.551786][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1189.676480][ T5727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1189.709456][ T5727] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1189.736317][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1189.780390][ T5727] usb 3-1: config 0 descriptor?? [ 1190.636825][ T5727] usb 3-1: language id specifier not provided by device, defaulting to English [ 1191.159130][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 1191.166544][ T5727] uclogic 0003:256C:006D.001C: failed retrieving Huion firmware version: -71 [ 1191.177929][ T5727] uclogic 0003:256C:006D.001C: failed probing parameters: -71 [ 1191.195656][ T5727] uclogic 0003:256C:006D.001C: probe with driver uclogic failed with error -71 [ 1191.220028][ T5727] usb 3-1: USB disconnect, device number 19 [ 1191.394715][ T5735] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1191.402853][ T5616] rc_core: IR keymap rc-hauppauge not found [ 1191.417230][ T5616] Registered IR keymap rc-empty [ 1191.422623][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.467278][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.481131][T26524] binder: 26522:26524 ioctl c0306201 0 returned -14 [ 1191.489405][ T5616] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1191.519282][ T5616] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input141 [ 1191.549292][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.577227][ T5735] usb 5-1: Using ep0 maxpacket: 8 [ 1191.582382][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.622714][ T5735] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1191.632923][ T5735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1191.644530][ T5735] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1191.656492][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.663941][ T5735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1191.675324][ T5735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1191.687782][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.696859][ T5735] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1191.709684][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.720686][ T5735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1191.747835][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.755805][ T5735] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1191.767862][ T5735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1191.787279][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.796291][ T5735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1191.814843][ T5735] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1191.825151][ T5735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1191.838494][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.852030][ T5735] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1191.864023][ T5735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1191.875376][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.882713][ T5735] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1191.897282][ T5616] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1191.905225][ T5735] usb 5-1: string descriptor 0 read error: -22 [ 1191.911718][ T5735] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1191.921751][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1191.941078][ T5616] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1191.950503][ T5616] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1191.964159][ T5735] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1191.977239][ T5727] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1191.996365][ T5616] usb 2-1: USB disconnect, device number 14 [ 1192.200030][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1192.224186][ T5727] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1192.255906][ T5727] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1192.282622][ T5727] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.300034][ T5727] usb 1-1: config 0 descriptor?? [ 1192.459244][T26544] binder: 26539:26544 ioctl c0306201 0 returned -14 [ 1192.620224][T26546] binder: 26541:26546 ioctl c0306201 0 returned -14 [ 1194.089872][ T5727] usb 1-1: language id specifier not provided by device, defaulting to English [ 1194.292835][ T5727] uclogic 0003:256C:006D.001D: failed retrieving Huion firmware version: -71 [ 1194.307053][ T5616] usb 5-1: USB disconnect, device number 60 [ 1194.383170][T26566] random: crng reseeded on system resumption [ 1194.825768][ T5727] uclogic 0003:256C:006D.001D: failed probing parameters: -71 [ 1194.859158][ T5727] uclogic 0003:256C:006D.001D: probe with driver uclogic failed with error -71 [ 1195.030344][ T5727] usb 1-1: USB disconnect, device number 19 [ 1195.276946][T26572] binder: 26570:26572 ioctl c0306201 0 returned -14 [ 1196.142420][T26568] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1196.571662][T26590] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1197.489361][ T5727] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1197.754828][ T5727] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1197.839219][ T5727] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1197.911655][ T5727] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1198.034529][ T5727] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1198.166326][ T5727] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1198.243520][ T5727] usb 5-1: Product: syz [ 1198.285001][ T5727] usb 5-1: Manufacturer: syz [ 1198.402899][ T5727] usb 5-1: SerialNumber: syz [ 1199.008754][ T5727] cdc_mbim 5-1:1.0: skipping garbage [ 1199.032470][ T5727] cdc_mbim 5-1:1.0: skipping garbage [ 1199.038290][T26616] UDC core: g1: couldn't find an available UDC or it's busy [ 1199.086312][ T5727] cdc_mbim 5-1:1.0: CDC Union missing and no IAD found [ 1199.103905][ T5727] cdc_mbim 5-1:1.0: bind() failure [ 1199.195436][T26623] random: crng reseeded on system resumption [ 1200.187221][ T5616] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1200.770791][ T5700] usb 5-1: USB disconnect, device number 61 [ 1200.887237][ T5616] usb 3-1: Using ep0 maxpacket: 16 [ 1200.898877][ T5616] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1200.910618][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1200.921902][ T5616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1200.931886][ T5616] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1200.970305][ T5616] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1200.986269][ T5616] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1200.999518][ T5616] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1201.015410][ T5616] usb 3-1: Manufacturer: syz [ 1201.096954][T26650] input: syz1 as /devices/virtual/input/input143 [ 1201.103448][T26650] input: failed to attach handler leds to device input143, error: -6 [ 1201.499977][ T5616] usb 3-1: config 0 descriptor?? [ 1201.713700][T26657] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1202.314392][T26662] input: syz1 as /devices/virtual/input/input142 [ 1202.399733][ T5616] rc_core: IR keymap rc-hauppauge not found [ 1202.894815][ T5616] Registered IR keymap rc-empty [ 1202.899887][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1202.977865][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1203.007908][ T5616] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1203.032707][ T5616] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input144 [ 1203.050287][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1203.079109][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1203.117777][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1203.523875][T20858] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1203.548878][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1203.986666][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 1204.007323][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1204.028821][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1204.047350][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1204.067280][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1204.179937][T20858] usb 4-1: device descriptor read/64, error -32 [ 1204.188567][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1204.217265][ T5616] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1204.239594][ T5616] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1204.783963][ T5616] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1204.799296][ T5616] usb 3-1: USB disconnect, device number 20 [ 1205.031861][T20858] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1205.152198][T26685] random: crng reseeded on system resumption [ 1205.611435][T26684] bridge6: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1205.678833][T20858] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.700172][T20858] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1205.722240][T20858] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1205.777263][ T5727] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1205.800935][T20858] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1205.825468][T20858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.862817][T20858] usb 4-1: Product: syz [ 1205.899527][T20858] usb 4-1: Manufacturer: syz [ 1205.920644][T20858] usb 4-1: SerialNumber: syz [ 1205.948984][ T5727] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.022221][T26692] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1206.032602][ T5727] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1206.064018][T20858] cdc_mbim 4-1:1.0: skipping garbage [ 1206.114278][T26692] CPU: 1 UID: 0 PID: 26692 Comm: syz.4.6832 Tainted: G L syzkaller #0 PREEMPT(full) [ 1206.114308][T26692] Tainted: [L]=SOFTLOCKUP [ 1206.114316][T26692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1206.114335][T26692] Call Trace: [ 1206.114343][T26692] [ 1206.114351][T26692] dump_stack_lvl+0x100/0x190 [ 1206.114379][T26692] sysfs_warn_dup.cold+0x1c/0x28 [ 1206.114409][T26692] sysfs_create_dir_ns+0x24b/0x2b0 [ 1206.114430][T26692] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1206.114448][T26692] ? find_held_lock+0x2b/0x80 [ 1206.114467][T26692] ? kobject_add_internal+0x25f/0x930 [ 1206.114498][T26692] ? kobject_add_internal+0x25f/0x930 [ 1206.114532][T26692] ? class_dir_child_ns_type+0xd/0x60 [ 1206.114562][T26692] kobject_add_internal+0x2c8/0x930 [ 1206.114597][T26692] kobject_add+0x16a/0x1e0 [ 1206.114622][T26692] ? __pfx_kobject_add+0x10/0x10 [ 1206.114649][T26692] ? get_device_parent+0x1b3/0x4c0 [ 1206.114673][T26692] ? kobject_put+0xb9/0x640 [ 1206.114705][T26692] device_add+0x294/0x1970 [ 1206.114731][T26692] ? lockdep_init_map_type+0x5c/0x250 [ 1206.114757][T26692] ? __pfx_device_add+0x10/0x10 [ 1206.114783][T26692] ? lockdep_init_map_type+0x5c/0x250 [ 1206.114803][T26692] ? __init_waitqueue_head+0xca/0x150 [ 1206.114831][T26692] tty_register_device_attr+0x388/0x7f0 [ 1206.114855][T26692] ? lockdep_init_map_type+0x5c/0x250 [ 1206.114880][T26692] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1206.114908][T26692] ? tty_port_init+0x156/0x1c0 [ 1206.114935][T26692] gsm_activate_mux+0x155/0x2a0 [ 1206.114960][T26692] gsmld_ioctl+0xbbc/0x15c0 [ 1206.114991][T26692] ? kasan_quarantine_put+0x104/0x240 [ 1206.115012][T26692] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1206.115041][T26692] ? __ldsem_down_read_nested+0xf3/0x890 [ 1206.115071][T26692] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1206.115105][T26692] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1206.115128][T26692] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1206.115150][T26692] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1206.115175][T26692] tty_ioctl+0x11b4/0x1640 [ 1206.115199][T26692] ? __pfx_tty_ioctl+0x10/0x10 [ 1206.115222][T26692] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1206.115261][T26692] ? __fget_files+0x215/0x3d0 [ 1206.115279][T26692] ? hook_file_ioctl_common+0x140/0x440 [ 1206.115308][T26692] ? selinux_file_ioctl+0x13b/0x290 [ 1206.115343][T26692] ? selinux_file_ioctl+0xb6/0x290 [ 1206.115374][T26692] ? __pfx_tty_ioctl+0x10/0x10 [ 1206.115397][T26692] __x64_sys_ioctl+0x18e/0x210 [ 1206.115427][T26692] do_syscall_64+0x115/0x870 [ 1206.115449][T26692] ? clear_bhb_loop+0x40/0x90 [ 1206.115473][T26692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.115493][T26692] RIP: 0033:0x7ff1ea79e019 [ 1206.115510][T26692] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.115527][T26692] RSP: 002b:00007ff1eb60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1206.115547][T26692] RAX: ffffffffffffffda RBX: 00007ff1eaa26090 RCX: 00007ff1ea79e019 [ 1206.115560][T26692] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000004 [ 1206.115571][T26692] RBP: 00007ff1ea83500c R08: 0000000000000000 R09: 0000000000000000 [ 1206.115582][T26692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.115594][T26692] R13: 00007ff1eaa26128 R14: 00007ff1eaa26090 R15: 00007ffebf36d278 [ 1206.115619][T26692] [ 1206.452056][T20858] cdc_mbim 4-1:1.0: CDC Union missing and no IAD found [ 1206.458979][T20858] cdc_mbim 4-1:1.0: bind() failure [ 1206.464201][T26692] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1206.478173][ T5727] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1206.513000][ T5727] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1206.522541][ T5727] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.530824][ T5727] usb 2-1: Product: syz [ 1206.535026][ T5727] usb 2-1: Manufacturer: syz [ 1206.539670][ T5727] usb 2-1: SerialNumber: syz [ 1206.552408][T20858] usb 4-1: USB disconnect, device number 28 [ 1206.568652][ T5727] cdc_mbim 2-1:1.0: skipping garbage [ 1206.573971][ T5727] cdc_mbim 2-1:1.0: skipping garbage [ 1206.579427][ T5727] cdc_mbim 2-1:1.0: CDC Union missing and no IAD found [ 1206.586325][ T5727] cdc_mbim 2-1:1.0: bind() failure [ 1207.043692][T26706] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1207.597440][T20858] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1207.933744][T20858] usb 1-1: Using ep0 maxpacket: 16 [ 1207.949340][T20858] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1207.977096][T26715] UDC core: g1: couldn't find an available UDC or it's busy [ 1207.979747][T20858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1208.004648][T20858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1208.019799][T20858] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1208.031345][T20858] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1208.074570][T20858] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1208.081381][T22807] usb 2-1: USB disconnect, device number 15 [ 1208.094409][T20858] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1208.105530][T20858] usb 1-1: Manufacturer: syz [ 1208.127262][ T5727] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1208.128738][T26718] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1208.151936][T26718] CPU: 0 UID: 0 PID: 26718 Comm: syz.4.6841 Tainted: G L syzkaller #0 PREEMPT(full) [ 1208.151966][T26718] Tainted: [L]=SOFTLOCKUP [ 1208.151973][T26718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1208.151984][T26718] Call Trace: [ 1208.151990][T26718] [ 1208.151996][T26718] dump_stack_lvl+0x100/0x190 [ 1208.152022][T26718] sysfs_warn_dup.cold+0x1c/0x28 [ 1208.152045][T26718] sysfs_create_dir_ns+0x24b/0x2b0 [ 1208.152061][T26718] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1208.152077][T26718] ? find_held_lock+0x2b/0x80 [ 1208.152092][T26718] ? kobject_add_internal+0x25f/0x930 [ 1208.152121][T26718] ? kobject_add_internal+0x25f/0x930 [ 1208.152154][T26718] ? class_dir_child_ns_type+0xd/0x60 [ 1208.152184][T26718] kobject_add_internal+0x2c8/0x930 [ 1208.152218][T26718] kobject_add+0x16a/0x1e0 [ 1208.152248][T26718] ? __pfx_kobject_add+0x10/0x10 [ 1208.152279][T26718] ? get_device_parent+0x1b3/0x4c0 [ 1208.152305][T26718] ? kobject_put+0xb9/0x640 [ 1208.152339][T26718] device_add+0x294/0x1970 [ 1208.152372][T26718] ? lockdep_init_map_type+0x5c/0x250 [ 1208.152397][T26718] ? __pfx_device_add+0x10/0x10 [ 1208.152422][T26718] ? lockdep_init_map_type+0x5c/0x250 [ 1208.152445][T26718] ? __init_waitqueue_head+0xca/0x150 [ 1208.152476][T26718] tty_register_device_attr+0x388/0x7f0 [ 1208.152502][T26718] ? lockdep_init_map_type+0x5c/0x250 [ 1208.152526][T26718] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1208.152556][T26718] ? tty_port_init+0x156/0x1c0 [ 1208.152577][T26718] gsm_activate_mux+0x155/0x2a0 [ 1208.152596][T26718] gsmld_ioctl+0xbbc/0x15c0 [ 1208.152622][T26718] ? kasan_quarantine_put+0x104/0x240 [ 1208.152639][T26718] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1208.152663][T26718] ? __ldsem_down_read_nested+0xf3/0x890 [ 1208.152687][T26718] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1208.152721][T26718] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1208.152744][T26718] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1208.152764][T26718] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1208.152789][T26718] tty_ioctl+0x11b4/0x1640 [ 1208.152813][T26718] ? __pfx_tty_ioctl+0x10/0x10 [ 1208.152836][T26718] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1208.152884][T26718] ? __fget_files+0x215/0x3d0 [ 1208.152904][T26718] ? hook_file_ioctl_common+0x140/0x440 [ 1208.152931][T26718] ? selinux_file_ioctl+0x13b/0x290 [ 1208.152957][T26718] ? selinux_file_ioctl+0xb6/0x290 [ 1208.152984][T26718] ? __pfx_tty_ioctl+0x10/0x10 [ 1208.153007][T26718] __x64_sys_ioctl+0x18e/0x210 [ 1208.153035][T26718] do_syscall_64+0x115/0x870 [ 1208.153056][T26718] ? clear_bhb_loop+0x40/0x90 [ 1208.153080][T26718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1208.153099][T26718] RIP: 0033:0x7ff1ea79e019 [ 1208.153115][T26718] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1208.153132][T26718] RSP: 002b:00007ff1eb60b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1208.153151][T26718] RAX: ffffffffffffffda RBX: 00007ff1eaa26090 RCX: 00007ff1ea79e019 [ 1208.153164][T26718] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000004 [ 1208.153175][T26718] RBP: 00007ff1ea83500c R08: 0000000000000000 R09: 0000000000000000 [ 1208.153186][T26718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1208.153197][T26718] R13: 00007ff1eaa26128 R14: 00007ff1eaa26090 R15: 00007ffebf36d278 [ 1208.153222][T26718] [ 1208.157079][T26718] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1208.159388][T20858] usb 1-1: config 0 descriptor?? [ 1208.231726][T26718] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6841'. [ 1208.235282][ T5616] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1208.597703][ T5727] usb 3-1: Using ep0 maxpacket: 8 [ 1208.610222][ T5727] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1208.628980][ T5727] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1208.647614][ T5727] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.661765][ T5727] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1208.674675][ T5727] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1208.691054][ T5616] usb 4-1: Using ep0 maxpacket: 8 [ 1208.704542][ T5727] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1208.713332][ T5727] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1208.737256][ T5727] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.749900][ T5616] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1208.760864][ T5616] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1208.779852][ T5616] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.793150][ T5727] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1208.829291][ T5616] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1208.843567][ T5727] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1208.858189][ T5616] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1208.890203][ T5727] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1208.899102][ T5727] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1208.920390][ T5727] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.937118][ T5616] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1208.952731][ T5616] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1208.968324][ T5727] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1208.981275][ T5616] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1208.993101][ T5727] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1209.004838][ T5616] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1209.016910][ T5616] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1209.031199][ T5727] usb 3-1: string descriptor 0 read error: -22 [ 1209.037757][ T5727] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1209.046932][ T5616] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1209.054767][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.078070][ T5616] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1209.106105][ T5727] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1209.115954][ T5616] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1209.136668][ T5616] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1209.148749][ T5616] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1209.279760][ T5616] usb 4-1: string descriptor 0 read error: -22 [ 1209.287349][ T5616] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1209.297367][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.337743][ T5616] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1209.364875][T26725] binder: 26723:26725 ioctl c0306201 0 returned -14 [ 1211.824028][T13754] usb 3-1: USB disconnect, device number 21 [ 1211.987212][T20858] rc_core: IR keymap rc-hauppauge not found [ 1211.993254][T20858] Registered IR keymap rc-empty [ 1211.994251][ T5700] usb 4-1: USB disconnect, device number 29 [ 1212.010563][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.047813][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.100602][T20858] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1212.152824][T20858] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input145 [ 1212.227750][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.288084][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.327519][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.358826][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.397319][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.445107][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.470481][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.497260][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.527294][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.559227][T20858] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1212.603329][T20858] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 1212.626607][T20858] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1212.669837][T20858] usb 1-1: USB disconnect, device number 20 [ 1212.837509][ T5700] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1213.001282][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 1213.012830][ T5700] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1213.027263][ T5700] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1213.041801][ T5700] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1213.057080][ T5700] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1213.068408][ T5700] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1213.087612][ T5700] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1213.095939][ T5700] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1213.125035][ T5700] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1213.127254][T20858] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1213.150983][ T5700] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1213.195650][ T5700] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1213.226713][T26779] UDC core: g1: couldn't find an available UDC or it's busy [ 1213.242024][ T5700] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 1213.252069][ T5700] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1213.277194][ T5700] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1213.306854][ T5700] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1213.338557][T20858] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.340023][ T5700] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1213.361554][T20858] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1213.384225][T20858] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1213.389751][ T5700] usb 3-1: string descriptor 0 read error: -22 [ 1213.419463][T20858] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1213.427456][ T5700] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1213.434505][T20858] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.447186][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.477776][T20858] usb 1-1: Product: syz [ 1213.483802][ T5700] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1213.485340][T20858] usb 1-1: Manufacturer: syz [ 1213.509563][T20858] usb 1-1: SerialNumber: syz [ 1213.531750][T20858] cdc_mbim 1-1:1.0: skipping garbage [ 1213.548630][T20858] cdc_mbim 1-1:1.0: CDC Union missing and no IAD found [ 1213.565737][T20858] cdc_mbim 1-1:1.0: bind() failure [ 1213.737216][T13754] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1214.370250][T13754] usb 5-1: Using ep0 maxpacket: 8 [ 1214.403212][T26795] input: syz1 as /devices/virtual/input/input146 [ 1214.409740][T26795] input: failed to attach handler leds to device input146, error: -6 [ 1214.473536][T13754] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1214.481858][T13754] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1214.493654][T13754] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1214.511124][T13754] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1214.523443][T13754] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1214.554104][T13754] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1214.586757][T13754] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1214.641395][T13754] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1214.718087][T13754] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1214.735575][T13754] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1214.762113][T13754] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1214.771137][T13754] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1214.784443][T13754] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1214.800100][T13754] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1214.835193][T13754] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1214.870202][T13754] usb 5-1: string descriptor 0 read error: -22 [ 1214.876639][T13754] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1214.887211][T13754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.963955][T13754] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 1215.075164][T26798] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1215.315562][T13754] usb 1-1: USB disconnect, device number 21 [ 1215.408609][ T5616] usb 3-1: USB disconnect, device number 22 [ 1215.863356][T26822] random: crng reseeded on system resumption [ 1215.987286][ T5616] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1216.179037][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.190280][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1216.200462][ T5616] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1216.211401][ T5616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.222190][ T5616] usb 4-1: config 0 descriptor?? [ 1216.626948][ T5727] usb 5-1: USB disconnect, device number 62 [ 1216.767909][T26832] binder: 26827:26832 ioctl c0306201 0 returned -14 [ 1217.528923][ T5616] usb 4-1: string descriptor 0 read error: -71 [ 1218.140295][ T5616] uclogic 0003:256C:006D.001E: failed retrieving string descriptor #200: -71 [ 1218.149302][ T5616] uclogic 0003:256C:006D.001E: failed retrieving pen parameters: -71 [ 1218.157428][ T5616] uclogic 0003:256C:006D.001E: failed probing pen v2 parameters: -71 [ 1218.163144][T13754] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1218.165526][ T5616] uclogic 0003:256C:006D.001E: failed probing parameters: -71 [ 1218.165614][ T5616] uclogic 0003:256C:006D.001E: probe with driver uclogic failed with error -71 [ 1218.168043][ T5616] usb 4-1: USB disconnect, device number 30 [ 1218.706272][T13754] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1218.856069][T13754] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1218.874722][T13754] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1218.903641][T13754] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1218.962566][T13754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.972497][T13754] usb 3-1: Product: syz [ 1218.976855][T13754] usb 3-1: Manufacturer: syz [ 1218.986316][T13754] usb 3-1: SerialNumber: syz [ 1219.150837][ T5700] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1219.206196][T13754] cdc_mbim 3-1:1.0: skipping garbage [ 1219.222685][T13754] cdc_mbim 3-1:1.0: CDC Union missing and no IAD found [ 1219.247048][T13754] cdc_mbim 3-1:1.0: bind() failure [ 1219.367337][ T5700] usb 1-1: Using ep0 maxpacket: 16 [ 1219.384461][ T5700] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1219.411427][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1219.428726][ T5700] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1219.440651][ T5700] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1219.450396][ T5700] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1219.466504][ T5700] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1219.476318][ T5700] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1219.484631][ T5700] usb 1-1: Manufacturer: syz [ 1219.945696][ T5700] usb 1-1: config 0 descriptor?? [ 1219.997372][T13754] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1220.147257][T13754] usb 4-1: Using ep0 maxpacket: 8 [ 1220.206421][T13754] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1220.226586][T13754] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1220.255604][T13754] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1220.270163][T13754] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1220.281921][ T5700] rc_core: IR keymap rc-hauppauge not found [ 1220.288734][ T5700] Registered IR keymap rc-empty [ 1220.293848][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.301797][T13754] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1220.316909][T13754] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1220.327449][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.336159][T13754] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1220.349153][ T5700] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1220.377246][T13754] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1220.391745][ T5700] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input148 [ 1220.404408][T13754] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1220.424091][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.441911][T13754] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1220.455752][T13754] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1220.464098][T13754] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1220.476443][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.484533][T13754] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1220.496846][T13754] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1220.508512][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.516344][T13754] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1220.532331][T13754] usb 4-1: string descriptor 0 read error: -22 [ 1220.540836][T13754] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1220.550343][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.558331][T13754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.577395][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.608518][T13754] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1220.620155][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.647415][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1220.724209][T26882] binder: 26876:26882 ioctl c0306201 0 returned -14 [ 1220.757025][T26857] input: syz1 as /devices/virtual/input/input147 [ 1221.261674][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1221.293141][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1221.320531][ T5700] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1221.494320][ T5700] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1221.499709][ T5727] usb 3-1: USB disconnect, device number 23 [ 1221.512463][ T5700] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1221.737491][ T5616] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1221.925446][ T5700] usb 1-1: USB disconnect, device number 22 [ 1221.937549][ T5616] usb 5-1: Using ep0 maxpacket: 8 [ 1222.037986][ T5616] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1222.105011][ T5616] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1222.218858][ T5616] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1222.339065][ T5616] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1222.471840][ T5616] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1222.574055][ T5616] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1222.618329][ T5616] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1222.734248][ T5842] usb 4-1: USB disconnect, device number 31 [ 1223.412605][ T5616] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1223.430643][ T5616] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1223.442850][ T5616] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1223.578202][ T5616] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1223.585809][ T5616] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1223.618678][ T5616] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1223.677874][ T5616] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1223.726511][ T5616] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1223.749299][ T5616] usb 5-1: string descriptor 0 read error: -22 [ 1223.760811][ T5616] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1224.023963][T26920] random: crng reseeded on system resumption [ 1224.534435][T26925] binder: 26915:26925 ioctl c0306201 0 returned -14 [ 1224.725860][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1225.119766][ T5616] usb 5-1: can't set config #168, error -71 [ 1225.131164][T13804] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1225.230695][ T5616] usb 5-1: USB disconnect, device number 63 [ 1225.397295][T13804] usb 3-1: Using ep0 maxpacket: 16 [ 1225.496728][T26938] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 1225.513954][T26938] random: crng reseeded on system resumption [ 1225.657686][T26940] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1225.715743][T13804] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1225.738869][T13804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1225.775740][T13804] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1225.819109][T13804] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1225.864274][T13804] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1225.911411][T13804] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1225.949059][T13804] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1225.959310][T13804] usb 3-1: Manufacturer: syz [ 1225.976103][T13804] usb 3-1: config 0 descriptor?? [ 1227.177195][T13804] rc_core: IR keymap rc-hauppauge not found [ 1227.185088][T13804] Registered IR keymap rc-empty [ 1227.271267][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.298378][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.840875][T13804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1227.865583][T13804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input150 [ 1227.880835][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.920248][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.947299][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.967281][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1227.992132][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1228.069024][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1229.468590][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1230.887262][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1230.907280][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1230.969465][T13804] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 1231.557805][T13804] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1232.088475][T13804] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1232.258852][T13804] usb 3-1: USB disconnect, device number 24 [ 1233.169686][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 1233.225861][T27002] Config c/1 of g1 needs at least one function. [ 1233.344547][T27002] udc dummy_udc.0: failed to start g1: -22 [ 1233.356967][T27002] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 1233.938581][T27013] binder: 27010:27013 ioctl c0306201 0 returned -14 [ 1233.960467][T27002] UDC core: g1: couldn't find an available UDC or it's busy [ 1234.217299][T13804] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1234.360320][T27026] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty1' [ 1234.378873][T27026] CPU: 0 UID: 0 PID: 27026 Comm: syz.1.6931 Tainted: G L syzkaller #0 PREEMPT(full) [ 1234.378908][T27026] Tainted: [L]=SOFTLOCKUP [ 1234.378915][T27026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1234.378928][T27026] Call Trace: [ 1234.378936][T27026] [ 1234.378944][T27026] dump_stack_lvl+0x100/0x190 [ 1234.378976][T27026] sysfs_warn_dup.cold+0x1c/0x28 [ 1234.379008][T27026] sysfs_create_dir_ns+0x24b/0x2b0 [ 1234.379030][T27026] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1234.379048][T27026] ? find_held_lock+0x2b/0x80 [ 1234.379065][T27026] ? kobject_add_internal+0x25f/0x930 [ 1234.379096][T27026] ? kobject_add_internal+0x25f/0x930 [ 1234.379135][T27026] ? class_dir_child_ns_type+0xd/0x60 [ 1234.379166][T27026] kobject_add_internal+0x2c8/0x930 [ 1234.379200][T27026] kobject_add+0x16a/0x1e0 [ 1234.379232][T27026] ? __pfx_kobject_add+0x10/0x10 [ 1234.379266][T27026] ? get_device_parent+0x1b3/0x4c0 [ 1234.379308][T27026] ? kobject_put+0xb9/0x640 [ 1234.379343][T27026] device_add+0x294/0x1970 [ 1234.379372][T27026] ? lockdep_init_map_type+0x5c/0x250 [ 1234.379401][T27026] ? __pfx_device_add+0x10/0x10 [ 1234.379429][T27026] ? lockdep_init_map_type+0x5c/0x250 [ 1234.379454][T27026] ? __init_waitqueue_head+0xca/0x150 [ 1234.379487][T27026] tty_register_device_attr+0x388/0x7f0 [ 1234.379514][T27026] ? lockdep_init_map_type+0x5c/0x250 [ 1234.379539][T27026] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1234.379570][T27026] ? tty_port_init+0x156/0x1c0 [ 1234.379599][T27026] gsm_activate_mux+0x155/0x2a0 [ 1234.379625][T27026] gsmld_ioctl+0xbbc/0x15c0 [ 1234.379659][T27026] ? kasan_quarantine_put+0x104/0x240 [ 1234.379682][T27026] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1234.379714][T27026] ? __ldsem_down_read_nested+0xf3/0x890 [ 1234.379747][T27026] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1234.379784][T27026] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1234.379809][T27026] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1234.379831][T27026] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1234.379859][T27026] tty_ioctl+0x11b4/0x1640 [ 1234.379884][T27026] ? __pfx_tty_ioctl+0x10/0x10 [ 1234.379908][T27026] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1234.379950][T27026] ? __fget_files+0x215/0x3d0 [ 1234.379969][T27026] ? hook_file_ioctl_common+0x140/0x440 [ 1234.380000][T27026] ? selinux_file_ioctl+0x13b/0x290 [ 1234.380029][T27026] ? selinux_file_ioctl+0xb6/0x290 [ 1234.380060][T27026] ? __pfx_tty_ioctl+0x10/0x10 [ 1234.380086][T27026] __x64_sys_ioctl+0x18e/0x210 [ 1234.380123][T27026] do_syscall_64+0x115/0x870 [ 1234.380147][T27026] ? clear_bhb_loop+0x40/0x90 [ 1234.380172][T27026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1234.380193][T27026] RIP: 0033:0x7fc350d9e019 [ 1234.380212][T27026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1234.380230][T27026] RSP: 002b:00007fc351bfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1234.380253][T27026] RAX: ffffffffffffffda RBX: 00007fc351026090 RCX: 00007fc350d9e019 [ 1234.380267][T27026] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000004 [ 1234.380280][T27026] RBP: 00007fc350e3500c R08: 0000000000000000 R09: 0000000000000000 [ 1234.380293][T27026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1234.380304][T27026] R13: 00007fc351026128 R14: 00007fc351026090 R15: 00007ffcbf18cd58 [ 1234.380330][T27026] [ 1234.384051][T27026] kobject: kobject_add_internal failed for gsmtty1 with -EEXIST, don't try to register things with the same name in the same directory. [ 1234.427860][T27027] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6931'. [ 1234.705617][T27029] binder: 27020:27029 ioctl c0306201 0 returned -14 [ 1234.833944][T13804] usb 1-1: Using ep0 maxpacket: 16 [ 1234.851164][T13804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.868044][T13804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1234.880336][T13804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1235.025881][T13804] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1235.036930][T13804] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1235.069163][T13804] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1235.087182][T13804] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1235.104888][T13804] usb 1-1: Manufacturer: syz [ 1235.653479][T27033] input: syz1 as /devices/virtual/input/input151 [ 1235.660018][T27033] input: failed to attach handler leds to device input151, error: -6 [ 1235.683760][T13804] usb 1-1: config 0 descriptor?? [ 1236.103942][T27047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6934'. [ 1236.137629][T27043] sysfs: cannot create duplicate filename '/devices/virtual/tty/gsmtty65' [ 1236.162993][T27043] CPU: 1 UID: 0 PID: 27043 Comm: syz.2.6934 Tainted: G L syzkaller #0 PREEMPT(full) [ 1236.163037][T27043] Tainted: [L]=SOFTLOCKUP [ 1236.163045][T27043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1236.163058][T27043] Call Trace: [ 1236.163065][T27043] [ 1236.163074][T27043] dump_stack_lvl+0x100/0x190 [ 1236.163104][T27043] sysfs_warn_dup.cold+0x1c/0x28 [ 1236.163133][T27043] sysfs_create_dir_ns+0x24b/0x2b0 [ 1236.163152][T27043] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1236.163170][T27043] ? find_held_lock+0x2b/0x80 [ 1236.163190][T27043] ? kobject_add_internal+0x25f/0x930 [ 1236.163219][T27043] ? kobject_add_internal+0x25f/0x930 [ 1236.163251][T27043] ? class_dir_child_ns_type+0xd/0x60 [ 1236.163282][T27043] kobject_add_internal+0x2c8/0x930 [ 1236.163316][T27043] kobject_add+0x16a/0x1e0 [ 1236.163346][T27043] ? __pfx_kobject_add+0x10/0x10 [ 1236.163379][T27043] ? get_device_parent+0x1b3/0x4c0 [ 1236.163406][T27043] ? kobject_put+0xb9/0x640 [ 1236.163440][T27043] device_add+0x294/0x1970 [ 1236.163468][T27043] ? lockdep_init_map_type+0x5c/0x250 [ 1236.163494][T27043] ? __pfx_device_add+0x10/0x10 [ 1236.163521][T27043] ? lockdep_init_map_type+0x5c/0x250 [ 1236.163545][T27043] ? __init_waitqueue_head+0xca/0x150 [ 1236.163578][T27043] tty_register_device_attr+0x388/0x7f0 [ 1236.163603][T27043] ? lockdep_init_map_type+0x5c/0x250 [ 1236.163627][T27043] ? __pfx_tty_register_device_attr+0x10/0x10 [ 1236.163658][T27043] ? tty_port_init+0x156/0x1c0 [ 1236.163685][T27043] gsm_activate_mux+0x155/0x2a0 [ 1236.163711][T27043] gsmld_ioctl+0xbbc/0x15c0 [ 1236.163743][T27043] ? kasan_quarantine_put+0x104/0x240 [ 1236.163766][T27043] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1236.163796][T27043] ? __ldsem_down_read_nested+0xf3/0x890 [ 1236.163828][T27043] ? __pfx___ldsem_down_read_nested+0x10/0x10 [ 1236.163864][T27043] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1236.163888][T27043] ? __pfx_pty_unix98_ioctl+0x10/0x10 [ 1236.163910][T27043] ? __pfx_gsmld_ioctl+0x10/0x10 [ 1236.163937][T27043] tty_ioctl+0x11b4/0x1640 [ 1236.163961][T27043] ? __pfx_tty_ioctl+0x10/0x10 [ 1236.163985][T27043] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1236.164025][T27043] ? __fget_files+0x215/0x3d0 [ 1236.164048][T27043] ? hook_file_ioctl_common+0x140/0x440 [ 1236.164078][T27043] ? selinux_file_ioctl+0x13b/0x290 [ 1236.164107][T27043] ? selinux_file_ioctl+0xb6/0x290 [ 1236.164137][T27043] ? __pfx_tty_ioctl+0x10/0x10 [ 1236.164161][T27043] __x64_sys_ioctl+0x18e/0x210 [ 1236.164193][T27043] do_syscall_64+0x115/0x870 [ 1236.164217][T27043] ? clear_bhb_loop+0x40/0x90 [ 1236.164240][T27043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.164260][T27043] RIP: 0033:0x7f5620b9e019 [ 1236.164277][T27043] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.164296][T27043] RSP: 002b:00007f5621a7f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1236.164315][T27043] RAX: ffffffffffffffda RBX: 00007f5620e26090 RCX: 00007f5620b9e019 [ 1236.164328][T27043] RDX: 00002000000001c0 RSI: 00000000404c4701 RDI: 0000000000000004 [ 1236.164340][T27043] RBP: 00007f5620c3500c R08: 0000000000000000 R09: 0000000000000000 [ 1236.164351][T27043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1236.164362][T27043] R13: 00007f5620e26128 R14: 00007f5620e26090 R15: 00007ffc0a160828 [ 1236.164387][T27043] [ 1236.164524][T27043] kobject: kobject_add_internal failed for gsmtty65 with -EEXIST, don't try to register things with the same name in the same directory. [ 1236.333715][T27049] binder: 27040:27049 ioctl c0306201 0 returned -14 [ 1236.579759][T27051] random: crng reseeded on system resumption [ 1236.928773][T13804] rc_core: IR keymap rc-hauppauge not found [ 1236.934795][T13804] Registered IR keymap rc-empty [ 1236.939847][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1236.957251][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.040600][T13804] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 1237.086671][T13804] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input152 [ 1237.168101][T27055] random: crng reseeded on system resumption [ 1237.170166][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.185133][ T30] audit: type=1400 audit(1785790253.536:5850): avc: denied { ioctl } for pid=27054 comm="syz.4.6939" path="/dev/snapshot" dev="devtmpfs" ino=92 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1237.237551][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.250808][T27059] netlink: 'syz.1.6940': attribute type 11 has an invalid length. [ 1237.262204][T27059] netlink: 112 bytes leftover after parsing attributes in process `syz.1.6940'. [ 1237.277549][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.337248][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.359053][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.389882][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.421545][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.467277][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.507475][ T5700] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1237.517809][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.549645][T13804] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 1237.593314][T13804] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1237.604460][T13804] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1237.656730][T13804] usb 1-1: USB disconnect, device number 23 [ 1237.667356][ T5700] usb 4-1: Using ep0 maxpacket: 32 [ 1237.675196][ T5700] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1237.706379][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1237.747674][ T5700] usb 4-1: config 0 descriptor?? [ 1237.759642][ T5700] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1237.957218][ T5727] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1237.977219][ T5616] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1238.017232][T13804] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1238.057225][ T5735] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1238.110444][ T5727] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1238.119029][ T5727] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.129419][ T5727] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1238.138996][ T5727] usb 3-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 1238.149971][ T5727] usb 3-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 1238.163332][ T5727] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1238.174328][ T5727] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1238.181086][ T5616] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.191232][T13804] usb 1-1: Using ep0 maxpacket: 32 [ 1238.196690][ T5616] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1238.207322][ T5616] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1238.217223][T13804] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 1238.228257][ T5616] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1238.241499][T13804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 18, changing to 8 [ 1238.252948][T13804] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1238.266741][ T5727] usb 3-1: string descriptor 0 read error: -22 [ 1238.273313][ T5727] usb 3-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 1238.283229][ T5735] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1238.293649][T13804] usb 1-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1238.302956][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.311095][ T5735] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x77, changing to 0x7 [ 1238.323289][ T5616] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1238.333503][T13804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.342498][ T5616] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.350659][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10 [ 1238.365865][ T5616] usb 5-1: Product: syz [ 1238.370955][T13804] usb 1-1: config 0 descriptor?? [ 1238.375964][ T5616] usb 5-1: Manufacturer: syz [ 1238.380676][ T5735] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1238.390597][ T5616] usb 5-1: SerialNumber: syz [ 1238.399203][ T5735] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1238.415603][ T5735] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1238.425878][ T5735] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1238.434031][ T5735] usb 2-1: Manufacturer: syz [ 1238.445168][ T5735] usb 2-1: config 0 descriptor?? [ 1238.597283][ T5700] gspca_sq930x: reg_w 0105 bf00 failed -71 [ 1238.618463][ T5616] usb 5-1: usb_control_msg returned -71 [ 1238.624122][ T5616] usbtmc 5-1:1.0: can't read capabilities [ 1238.634290][ T5616] usb 5-1: USB disconnect, device number 64 [ 1238.657336][ T5700] sq930x 4-1:0.0: probe with driver sq930x failed with error -71 [ 1238.658234][ T5735] usb 2-1: USB disconnect, device number 16 [ 1238.680289][ T5700] usb 4-1: USB disconnect, device number 32 [ 1238.764031][ T5727] usb 3-1: 2:0: cannot get min/max values for control 2 (id 2) [ 1238.771955][ T5727] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 1238.783486][ T5727] usb 3-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 1238.814360][T13804] hid_parser_main: 222 callbacks suppressed [ 1238.814401][T13804] holtek 0003:1241:5015.001F: unknown main item tag 0x0 [ 1238.829402][T13804] holtek 0003:1241:5015.001F: unknown main item tag 0x0 [ 1238.836437][T13804] holtek 0003:1241:5015.001F: unknown main item tag 0x0 [ 1238.844104][T13804] holtek 0003:1241:5015.001F: unknown main item tag 0x0 [ 1238.851565][T13804] holtek 0003:1241:5015.001F: unknown main item tag 0x0 [ 1238.858790][T13804] holtek 0003:1241:5015.001F: unknown main item tag 0x0 [ 1238.865761][T13804] holtek 0003:1241:5015.001F: unknown main item tag 0x0 [ 1238.873709][T13804] holtek 0003:1241:5015.001F: unknown main item tag 0x0 [ 1238.880749][T13804] holtek 0003:1241:5015.001F: item fetching failed at offset 15/40 [ 1238.889870][T13804] holtek 0003:1241:5015.001F: parse failed [ 1238.895748][T13804] holtek 0003:1241:5015.001F: probe with driver holtek failed with error -22 [ 1239.016901][T13754] usb 1-1: USB disconnect, device number 24 [ 1239.069138][ T5842] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1239.228810][ T5842] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1239.240164][ T5842] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1239.243881][ T5727] usb 3-1: USB disconnect, device number 25 [ 1239.251321][ T5842] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1239.267184][ T5842] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1239.307276][ T5842] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 1239.321072][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.333122][ T5842] usb 5-1: Product: syz [ 1239.338046][ T5842] usb 5-1: Manufacturer: syz [ 1239.343405][ T5842] usb 5-1: SerialNumber: syz [ 1239.572872][ T5842] usb 5-1: usb_control_msg returned -32 [ 1239.588069][ T5842] usbtmc 5-1:1.0: can't read capabilities [ 1239.608940][ T30] audit: type=1400 audit(1785790255.956:5851): avc: denied { bind } for pid=27094 comm="syz.0.6955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1239.632409][ T30] audit: type=1400 audit(1785790255.956:5852): avc: denied { listen } for pid=27094 comm="syz.0.6955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1239.688432][T27099] syzkaller1: entered promiscuous mode [ 1239.694000][T27099] syzkaller1: entered allmulticast mode [ 1239.925821][T27110] Bluetooth: MGMT ver 1.23 [ 1240.011905][T27119] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=27119 comm=syz.3.6963 [ 1240.177219][T13754] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1240.297214][T13804] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1240.327272][T13754] usb 3-1: Using ep0 maxpacket: 16 [ 1240.332496][ T5700] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1240.342286][T13754] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 1240.354522][T13754] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1240.364209][T13754] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.372246][T13754] usb 3-1: Product: syz [ 1240.376558][T13754] usb 3-1: Manufacturer: syz [ 1240.381181][T13754] usb 3-1: SerialNumber: syz [ 1240.387544][T13754] usb 3-1: config 0 descriptor?? [ 1240.394722][T13754] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1240.404010][T13754] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 1240.447270][T13804] usb 2-1: Using ep0 maxpacket: 32 [ 1240.454466][T13804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 1240.465653][T13804] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8240, setting to 1024 [ 1240.476996][T13804] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1240.486088][T13804] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.495999][T13804] usb 2-1: config 0 descriptor?? [ 1240.504030][ T5700] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1240.504909][T13804] hub 2-1:0.0: USB hub found [ 1240.513438][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1240.531308][ T5700] usb 4-1: config 0 descriptor?? [ 1240.547070][ T5700] cp210x 4-1:0.0: cp210x converter detected [ 1240.548955][ T5727] usb 5-1: USB disconnect, device number 65 [ 1240.704577][T13804] hub 2-1:0.0: 1 port detected [ 1240.958545][ T5700] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1240.978081][ T5700] cp210x 4-1:0.0: GPIO initialisation failed: -524 [ 1240.998937][T13754] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1241.005194][ T5700] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1241.198590][T13804] usb 4-1: USB disconnect, device number 33 [ 1241.210130][T13804] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1241.218739][T13804] cp210x 4-1:0.0: device disconnected [ 1241.277211][ T5735] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1241.357998][ T5700] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1241.428507][ T5735] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 1241.437753][ T5735] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.507218][ T5700] usb 5-1: Using ep0 maxpacket: 32 [ 1241.514021][ T5700] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1241.516842][T13804] usb 2-1: USB disconnect, device number 17 [ 1241.522760][ T5700] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1241.528636][ T5727] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 1241.537417][ T5700] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1241.556088][ T5700] usb 5-1: config 1 has no interface number 0 [ 1241.564937][ T5700] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1241.576105][ T5700] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1241.590153][ T5700] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1241.599474][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.615596][ T5700] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1241.630923][T13754] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 1241.639534][T13754] em28xx 3-1:0.0: board has no eeprom [ 1241.651815][ T5735] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 1241.708825][T13754] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 1241.716771][T13754] em28xx 3-1:0.0: dvb set to bulk mode. [ 1241.723535][ T5842] em28xx 3-1:0.0: Binding DVB extension [ 1241.736932][T13754] usb 3-1: USB disconnect, device number 26 [ 1241.761920][T13754] em28xx 3-1:0.0: Disconnecting em28xx [ 1241.787025][ T30] audit: type=1400 audit(1785790258.126:5853): avc: denied { read write } for pid=27144 comm="syz.3.6975" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1241.822359][ T30] audit: type=1400 audit(1785790258.126:5854): avc: denied { open } for pid=27144 comm="syz.3.6975" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1241.862907][ T5700] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1241.898118][ T5842] em28xx 3-1:0.0: Registering input extension [ 1241.904650][T13754] em28xx 3-1:0.0: Closing input extension [ 1241.932166][T13754] em28xx 3-1:0.0: Freeing device [ 1242.123410][ T30] audit: type=1400 audit(1785790258.466:5855): avc: denied { unmount } for pid=22437 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 1242.127310][ T5735] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1242.297206][ T5735] usb 4-1: Using ep0 maxpacket: 16 [ 1242.304022][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1242.318218][T13804] usb 5-1: USB disconnect, device number 66 [ 1242.324946][ T5735] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1242.335369][T13804] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1242.342632][ T5735] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.358115][ T5735] usb 4-1: config 0 descriptor?? [ 1242.447291][ T5727] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1242.600790][ T5727] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1242.609971][ T5727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.618055][ T5727] usb 3-1: Product: syz [ 1242.622261][ T5727] usb 3-1: Manufacturer: syz [ 1242.626948][ T5727] usb 3-1: SerialNumber: syz [ 1242.776347][ T5735] mcp2221 0003:04D8:00DD.0020: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 1243.048742][ T5727] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1243.061034][ T5727] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1243.096445][ T30] audit: type=1400 audit(1785790259.436:5856): avc: denied { mounton } for pid=27158 comm="syz.1.6981" path="/237/file0" dev="tmpfs" ino=1249 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 1243.128591][T13754] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1243.179309][ T5842] usb 4-1: USB disconnect, device number 34 [ 1243.277362][T13754] usb 5-1: Using ep0 maxpacket: 32 [ 1243.283903][T13754] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 1243.293172][T13754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.303408][T13754] usb 5-1: config 0 descriptor?? [ 1243.311817][T13754] gspca_main: sq930x-2.14.0 probing 041e:403c [ 1243.922622][T27167] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 1243.929164][T27167] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1243.939467][T27167] vhci_hcd vhci_hcd.0: Device attached [ 1243.946429][T27168] vhci_hcd: connection closed [ 1243.948202][T21801] vhci_hcd vhci_hcd.3: stop threads [ 1243.958680][T21801] vhci_hcd vhci_hcd.3: release socket [ 1243.964066][T21801] vhci_hcd vhci_hcd.3: disconnect device [ 1244.273727][ T30] audit: type=1400 audit(1785790260.616:5857): avc: denied { read } for pid=27172 comm="syz.1.6986" name="ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1244.296756][ T30] audit: type=1400 audit(1785790260.616:5858): avc: denied { open } for pid=27172 comm="syz.1.6986" path="/dev/ppp" dev="devtmpfs" ino=710 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1244.314338][T13754] gspca_sq930x: ucbus_write failed -71 [ 1244.332760][T13754] sq930x 5-1:0.0: probe with driver sq930x failed with error -71 [ 1244.336552][ T30] audit: type=1400 audit(1785790260.626:5859): avc: denied { ioctl } for pid=27172 comm="syz.1.6986" path="/dev/ppp" dev="devtmpfs" ino=710 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 1244.345629][T13754] usb 5-1: USB disconnect, device number 67 [ 1244.583456][ T30] audit: type=1400 audit(1785790260.926:5860): avc: denied { unmount } for pid=22437 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 1244.787438][ T5842] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1244.896488][ T30] audit: type=1400 audit(1785790261.236:5861): avc: denied { setopt } for pid=27190 comm="syz.4.6995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 1244.932730][ T5727] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 1244.942022][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 1244.965908][ T5727] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1244.972060][ T5842] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1244.990378][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1244.993734][ T5727] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1245.012174][ T5842] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024 [ 1245.020610][ T5727] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1245.027554][ T30] audit: type=1400 audit(1785790261.356:5862): avc: denied { ioctl } for pid=27193 comm="syz.4.6996" path="/dev/usbmon7" dev="devtmpfs" ino=738 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 1245.033662][ T5727] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1245.069959][ T5842] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1245.089795][ T5842] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1245.092447][ T5727] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1245.113358][ T5842] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1245.141890][ T5727] usb 3-1: USB disconnect, device number 27 [ 1245.156925][ T5842] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1245.391176][ T5842] usb 4-1: GET_CAPABILITIES returned 0 [ 1245.404816][ T5842] usbtmc 4-1:16.0: can't read capabilities [ 1245.600614][T23200] svc: failed to register nfsdv3 RPC service (errno 111). [ 1245.609656][T13754] usb 4-1: USB disconnect, device number 35 [ 1245.620455][T23200] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1245.630340][T23200] failed to unregister tcp with rpcbind [ 1245.641740][T23200] svc: failed to register nfsdv3 RPC service (errno 97). [ 1245.650399][T23200] svc: failed to register nfsaclv3 RPC service (errno 97). [ 1245.659680][T23200] failed to unregister tcp with rpcbind [ 1245.754231][ T30] audit: type=1400 audit(1785790262.096:5863): avc: denied { open } for pid=27218 comm="syz.4.7007" path="/dev/ptyqc" dev="devtmpfs" ino=131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 1245.827234][ T5842] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1245.907220][ T5703] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1245.978540][ T5842] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1245.988751][ T5842] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1245.997836][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.008228][T24742] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1246.015855][ T5842] usb 2-1: config 0 descriptor?? [ 1246.023989][ T5842] pwc: Askey VC010 type 2 USB webcam detected. [ 1246.057293][ T5703] usb 3-1: Using ep0 maxpacket: 8 [ 1246.065292][ T5703] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 1246.074539][ T5703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1246.082669][ T5703] usb 3-1: Product: syz [ 1246.086846][ T5703] usb 3-1: Manufacturer: syz [ 1246.091543][ T5703] usb 3-1: SerialNumber: syz [ 1246.098409][ T5703] usb 3-1: config 0 descriptor?? [ 1246.105513][ T5703] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 1246.152995][T27221] random: crng reseeded on system resumption [ 1246.177219][T24742] usb 5-1: Using ep0 maxpacket: 16 [ 1246.183880][T24742] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.194954][T24742] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1246.204343][T24742] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.215057][T24742] usb 5-1: config 0 descriptor?? [ 1246.228581][ T5842] pwc: send_video_command error -71 [ 1246.233865][ T5842] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1246.241464][ T5842] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1246.253918][ T5842] usb 2-1: USB disconnect, device number 18 [ 1246.633671][T24742] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 1246.667224][ T5727] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1246.818722][ T5727] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1246.829220][ T5727] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1246.838963][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.850074][ T5727] usb 2-1: config 0 descriptor?? [ 1246.868628][ T5727] pwc: Askey VC010 type 2 USB webcam detected. [ 1247.060334][ T5735] usb 5-1: USB disconnect, device number 68 [ 1247.158920][T13804] usb 1-1: USB disconnect, device number 25 [ 1247.225418][ T30] audit: type=1400 audit(1785790263.566:5864): avc: denied { create } for pid=27222 comm="syz.0.7009" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1247.248201][ T30] audit: type=1400 audit(1785790263.566:5865): avc: denied { unlink } for pid=27222 comm="syz.0.7009" name="file0" dev="tmpfs" ino=1124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 1247.269184][ T5727] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1247.291171][ T5727] pwc: recv_control_msg error -32 req 02 val 2700 [ 1247.298455][ T5727] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1247.305502][ T5727] pwc: recv_control_msg error -32 req 04 val 1000 [ 1247.315623][ T5727] pwc: recv_control_msg error -32 req 04 val 1300 [ 1247.323300][ T5727] pwc: recv_control_msg error -32 req 04 val 1400 [ 1247.331000][ T5727] pwc: recv_control_msg error -32 req 02 val 2000 [ 1247.338569][ T5727] pwc: recv_control_msg error -32 req 02 val 2100 [ 1247.345723][ T5727] pwc: recv_control_msg error -32 req 04 val 1500 [ 1247.353365][ T5727] pwc: recv_control_msg error -32 req 02 val 2500 [ 1247.561796][ T5727] pwc: recv_control_msg error -71 req 02 val 2600 [ 1247.568651][ T5727] pwc: recv_control_msg error -71 req 02 val 2900 [ 1247.575333][ T5727] pwc: recv_control_msg error -71 req 02 val 2800 [ 1247.582431][ T5727] pwc: recv_control_msg error -71 req 04 val 1100 [ 1247.589483][ T5727] pwc: recv_control_msg error -71 req 04 val 1200 [ 1247.599922][ T5727] pwc: Registered as video103. [ 1247.607391][ T5842] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1247.619706][ T5727] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input154 [ 1247.645070][ T5727] usb 2-1: USB disconnect, device number 19 [ 1247.738400][ T5703] gspca_sonixj: i2c_w8 err -71 [ 1247.767381][ T5703] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 1247.786656][ T5703] usb 3-1: USB disconnect, device number 28 [ 1247.797480][ T5842] usb 1-1: Using ep0 maxpacket: 8 [ 1247.809366][ T5842] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1247.826302][ T5842] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.849193][ T5842] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1247.868981][ T5842] usb 1-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 1247.888422][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1247.896459][ T5842] usb 1-1: Product: syz [ 1247.901341][ T5842] usb 1-1: Manufacturer: syz [ 1247.906315][ T5842] usb 1-1: SerialNumber: syz [ 1248.052652][T27245] loop5: detected capacity change from 0 to 7 [ 1248.064660][T27245] Dev loop5: unable to read RDB block 7 [ 1248.073285][T27245] loop5: AHDI p1 p3 p4 [ 1248.079044][T27245] loop5: partition table partially beyond EOD, truncated [ 1248.086370][T27245] loop5: p1 size 100663296 extends beyond EOD, truncated [ 1248.115087][T27245] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 1248.139492][ T5842] usb 1-1: 0:1 : does not exist [ 1248.167106][T27246] Dev loop5: unable to read RDB block 7 [ 1248.179116][T27246] loop5: AHDI p1 p3 p4 [ 1248.183607][T27246] loop5: partition table partially beyond EOD, truncated [ 1248.192222][T27246] loop5: p1 size 100663296 extends beyond EOD, truncated [ 1248.195389][ T5842] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1248.202839][T27246] loop5: p3 size 4261412863 extends beyond EOD, truncated [ 1248.214212][ T5842] usb 1-1: USB disconnect, device number 26 [ 1248.241872][ T5610] udevd[5610]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1248.421083][T13877] udevd[13877]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 1248.421159][ T5610] udevd[5610]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 1248.667237][ T5727] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1248.786948][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 1248.786963][ T30] audit: type=1400 audit(1785790265.126:5867): avc: denied { write } for pid=27261 comm="syz.0.7024" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 1248.837061][ T30] audit: type=1400 audit(1785790265.146:5868): avc: denied { call } for pid=27261 comm="syz.0.7024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 1248.863651][ T5727] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.880071][ T5727] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1248.892798][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.910085][ T5727] usb 2-1: config 0 descriptor?? [ 1248.917703][ T5842] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1248.940918][ T5727] pwc: Askey VC010 type 2 USB webcam detected. [ 1248.954042][T27268] ieee802154 phy0 wpan0: encryption failed: -22 [ 1249.004882][T27270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7028'. [ 1249.070103][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.081760][ T5842] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1249.091492][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.102174][ T5842] usb 3-1: config 0 descriptor?? [ 1249.112758][ T5842] pwc: Askey VC010 type 2 USB webcam detected. [ 1249.137257][T13804] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1249.152193][ T5727] pwc: send_video_command error -71 [ 1249.157760][ T5727] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1249.165925][ T5727] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 1249.177867][ T5727] usb 2-1: USB disconnect, device number 20 [ 1249.307305][T13804] usb 1-1: Using ep0 maxpacket: 8 [ 1249.315480][T13804] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1249.324335][T13804] usb 1-1: config 0 has no interface number 0 [ 1249.326061][ T5842] pwc: send_video_command error -71 [ 1249.330684][T13804] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1249.360692][T13804] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1249.372663][ T5842] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1249.387315][T13804] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1249.402029][ T5842] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 1249.410728][T13804] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1249.415294][ T5842] usb 3-1: USB disconnect, device number 29 [ 1249.430000][T13804] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1249.439956][T13804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.450702][T13804] usb 1-1: config 0 descriptor?? [ 1249.465098][T13804] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1249.637225][ T5727] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1249.682348][T13804] usb 1-1: USB disconnect, device number 27 [ 1249.693287][T13804] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1249.798518][ T5727] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.808759][ T5727] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1249.817811][ T5727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.827208][ T5727] usb 2-1: config 0 descriptor?? [ 1249.836065][ T5727] pwc: Askey VC010 type 2 USB webcam detected. [ 1249.897816][ T5842] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1250.058585][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1250.069746][ T5842] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1250.079110][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.090197][ T5842] usb 3-1: config 0 descriptor?? [ 1250.100546][ T5842] pwc: Askey VC010 type 2 USB webcam detected. [ 1250.187248][ T5703] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1250.238785][ T5727] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1250.247223][ T5727] pwc: recv_control_msg error -32 req 02 val 2700 [ 1250.259523][ T5727] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1250.271355][ T5727] pwc: recv_control_msg error -32 req 04 val 1000 [ 1250.279188][ T5727] pwc: recv_control_msg error -32 req 04 val 1300 [ 1250.286333][ T5727] pwc: recv_control_msg error -32 req 04 val 1400 [ 1250.293906][ T5727] pwc: recv_control_msg error -32 req 02 val 2000 [ 1250.301882][ T5727] pwc: recv_control_msg error -32 req 02 val 2100 [ 1250.308994][ T5727] pwc: recv_control_msg error -32 req 04 val 1500 [ 1250.359971][ T5703] usb 4-1: Using ep0 maxpacket: 32 [ 1250.366008][T27282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1250.375895][ T5703] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 1250.385903][T27282] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7032'. [ 1250.386504][ T5703] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1250.403938][ T5703] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1250.413377][ T5703] usb 4-1: config 1 has no interface number 0 [ 1250.421347][ T5703] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1250.432555][ T5703] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1250.457415][ T5703] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1250.466567][ T5703] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1250.487958][ T5703] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 1250.506989][ T5842] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1250.520742][ T5727] pwc: recv_control_msg error -71 req 02 val 2400 [ 1250.528121][ T5842] pwc: recv_control_msg error -32 req 02 val 2700 [ 1250.540425][ T5842] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1250.541864][ T5727] pwc: recv_control_msg error -71 req 02 val 2600 [ 1250.549333][ T5842] pwc: recv_control_msg error -32 req 04 val 1000 [ 1250.556423][ T5727] pwc: recv_control_msg error -71 req 02 val 2900 [ 1250.569775][ T5842] pwc: recv_control_msg error -32 req 04 val 1300 [ 1250.571473][ T5727] pwc: recv_control_msg error -71 req 02 val 2800 [ 1250.576897][ T5842] pwc: recv_control_msg error -32 req 04 val 1400 [ 1250.583992][ T5727] pwc: recv_control_msg error -71 req 04 val 1100 [ 1250.590619][ T5842] pwc: recv_control_msg error -32 req 02 val 2000 [ 1250.603773][ T5842] pwc: recv_control_msg error -32 req 02 val 2100 [ 1250.611458][ T5842] pwc: recv_control_msg error -32 req 04 val 1500 [ 1250.613279][ T5727] pwc: recv_control_msg error -71 req 04 val 1200 [ 1250.619241][ T5842] pwc: recv_control_msg error -32 req 02 val 2500 [ 1250.631491][ T5727] pwc: Registered as video103. [ 1250.631892][ T5842] pwc: recv_control_msg error -32 req 02 val 2400 [ 1250.638158][ T5727] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input155 [ 1250.672418][ T5842] pwc: recv_control_msg error -32 req 02 val 2600 [ 1250.689532][ T5842] pwc: recv_control_msg error -32 req 02 val 2900 [ 1250.699477][ T5727] usb 2-1: USB disconnect, device number 21 [ 1250.700166][ T5703] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 1250.846888][T27291] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.904954][T27294] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7037'. [ 1250.907076][T13804] usb 4-1: USB disconnect, device number 36 [ 1250.921635][ T5842] pwc: recv_control_msg error -71 req 04 val 1100 [ 1250.931368][T13804] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 1250.935990][ T5842] pwc: recv_control_msg error -71 req 04 val 1200 [ 1250.952646][ T5842] pwc: Registered as video103. [ 1250.969386][ T5842] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input156 [ 1251.007058][ T5842] usb 3-1: USB disconnect, device number 30 [ 1251.195597][T27294] syz.0.7037: vmalloc error: size 36864, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1251.213504][T27294] CPU: 1 UID: 0 PID: 27294 Comm: syz.0.7037 Tainted: G L syzkaller #0 PREEMPT(full) [ 1251.213534][T27294] Tainted: [L]=SOFTLOCKUP [ 1251.213541][T27294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1251.213551][T27294] Call Trace: [ 1251.213557][T27294] [ 1251.213563][T27294] dump_stack_lvl+0x100/0x190 [ 1251.213586][T27294] warn_alloc.cold+0x94/0xa8 [ 1251.213603][T27294] ? __pfx_warn_alloc+0x10/0x10 [ 1251.213617][T27294] ? policy_nodemask+0xed/0x4f0 [ 1251.213638][T27294] ? alloc_pages_mpol+0x25a/0x540 [ 1251.213659][T27294] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1251.213677][T27294] ? __kmalloc_node_noprof+0x357/0x830 [ 1251.213695][T27294] ? __get_vm_area_node+0x160/0x330 [ 1251.213714][T27294] ? __get_vm_area_node+0x208/0x330 [ 1251.213737][T27294] __vmalloc_node_range_noprof+0x13f6/0x1630 [ 1251.213765][T27294] ? hash_ipportip6_resize+0x1f2/0x1da0 [ 1251.213793][T27294] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1251.213818][T27294] ? rcu_is_watching+0x12/0xc0 [ 1251.213849][T27294] __kvmalloc_node_noprof+0x3d3/0x970 [ 1251.213869][T27294] ? hash_ipportip6_resize+0x1f2/0x1da0 [ 1251.213893][T27294] ? hash_ipportip6_resize+0x1f2/0x1da0 [ 1251.213921][T27294] hash_ipportip6_resize+0x1f2/0x1da0 [ 1251.213946][T27294] ? __pfx_hash_ipportip6_add+0x10/0x10 [ 1251.213970][T27294] ? __pfx_hash_ipportip6_uadt+0x10/0x10 [ 1251.214002][T27294] ? __pfx_hash_ipportip6_resize+0x10/0x10 [ 1251.214028][T27294] ? __local_bh_enable_ip+0x9e/0x120 [ 1251.214053][T27294] call_ad.isra.0+0x36d/0x940 [ 1251.214083][T27294] ? __pfx_hash_ipportip6_resize+0x10/0x10 [ 1251.214109][T27294] ? __pfx_call_ad.isra.0+0x10/0x10 [ 1251.214127][T27294] ? __pfx___nla_validate_parse+0x10/0x10 [ 1251.214152][T27294] ? __nla_parse+0x40/0x60 [ 1251.214168][T27294] ip_set_ad.isra.0+0x3eb/0x8a0 [ 1251.214192][T27294] ? __pfx_ip_set_ad.isra.0+0x10/0x10 [ 1251.214212][T27294] ? trace_contention_end+0x126/0x160 [ 1251.214248][T27294] ? find_held_lock+0x2b/0x80 [ 1251.214267][T27294] nfnetlink_rcv_msg+0x9d5/0x11e0 [ 1251.214294][T27294] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1251.214316][T27294] ? __lock_acquire+0x49f/0x1a40 [ 1251.214353][T27294] ? avc_has_perm_noaudit+0x145/0x3b0 [ 1251.214377][T27294] netlink_rcv_skb+0x159/0x420 [ 1251.214393][T27294] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1251.214414][T27294] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1251.214438][T27294] ? ns_capable+0xd2/0xf0 [ 1251.214459][T27294] nfnetlink_rcv+0x1b3/0x440 [ 1251.214479][T27294] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1251.214497][T27294] ? rcu_is_watching+0x12/0xc0 [ 1251.214523][T27294] netlink_unicast+0x585/0x850 [ 1251.214541][T27294] ? __pfx_netlink_unicast+0x10/0x10 [ 1251.214562][T27294] netlink_sendmsg+0x8b0/0xda0 [ 1251.214581][T27294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.214598][T27294] ? selinux_socket_sendmsg+0x198/0x2f0 [ 1251.214623][T27294] ____sys_sendmsg+0xa4d/0xbe0 [ 1251.214646][T27294] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1251.214662][T27294] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1251.214683][T27294] ? futex_hash+0x311/0x400 [ 1251.214707][T27294] ? plist_del+0x308/0x510 [ 1251.214724][T27294] ___sys_sendmsg+0x190/0x1e0 [ 1251.214740][T27294] ? __pfx____sys_sendmsg+0x10/0x10 [ 1251.214753][T27294] ? __lock_acquire+0x49f/0x1a40 [ 1251.214771][T27294] ? futex_wake+0x220/0x5e0 [ 1251.214808][T27294] __sys_sendmsg+0x160/0x210 [ 1251.214827][T27294] ? __pfx___sys_sendmsg+0x10/0x10 [ 1251.214857][T27294] do_syscall_64+0x115/0x870 [ 1251.214874][T27294] ? clear_bhb_loop+0x40/0x90 [ 1251.214892][T27294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.214907][T27294] RIP: 0033:0x7f9a2a99e019 [ 1251.214920][T27294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.214934][T27294] RSP: 002b:00007f9a2b7c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1251.214950][T27294] RAX: ffffffffffffffda RBX: 00007f9a2ac25fa0 RCX: 00007f9a2a99e019 [ 1251.214960][T27294] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1251.214968][T27294] RBP: 00007f9a2aa3500c R08: 0000000000000000 R09: 0000000000000000 [ 1251.214977][T27294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1251.214985][T27294] R13: 00007f9a2ac26038 R14: 00007f9a2ac25fa0 R15: 00007ffe2abd0988 [ 1251.215005][T27294] [ 1251.215074][T27294] Mem-Info: [ 1251.253393][T27298] kernel kvm profiling enabled (shift: 0) [ 1251.258131][T27294] active_anon:13471 inactive_anon:0 isolated_anon:0 [ 1251.258131][T27294] active_file:3103 inactive_file:58212 isolated_file:0 [ 1251.258131][T27294] unevictable:768 dirty:247 writeback:0 [ 1251.258131][T27294] slab_reclaimable:12327 slab_unreclaimable:103682 [ 1251.258131][T27294] mapped:31895 shmem:1293 pagetables:1406 [ 1251.258131][T27294] sec_pagetables:0 bounce:0 [ 1251.258131][T27294] kernel_misc_reclaimable:0 [ 1251.258131][T27294] free:1279999 free_pcp:10316 free_cma:0 [ 1251.811539][T27294] Node 0 active_anon:53560kB inactive_anon:0kB active_file:12412kB inactive_file:232384kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127244kB dirty:1040kB writeback:0kB shmem:3620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13408kB pagetables:5520kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1251.846682][T27294] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:464kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:248kB dirty:96kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1251.882628][T27294] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1251.917822][T27294] lowmem_reserve[]: 0 2472 2473 2473 2473 [ 1251.924692][T27294] Node 0 DMA32 free:921040kB boost:0kB min:34012kB low:42512kB high:51012kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53660kB inactive_anon:0kB active_file:12412kB inactive_file:232384kB unevictable:1536kB writepending:1040kB zspages:0kB present:3129332kB managed:2532144kB mlocked:0kB bounce:0kB free_pcp:42412kB local_pcp:21820kB free_cma:0kB [ 1251.967374][T27294] lowmem_reserve[]: 0 0 0 0 0 [ 1252.416179][T27294] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:376kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.476422][T27309] dummy_hcd dummy_hcd.0: remove, state 4 [ 1252.482690][T27309] usb usb1: USB disconnect, device number 1 [ 1252.530978][ T5842] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1252.546428][T27309] dummy_hcd dummy_hcd.0: stopped [ 1252.551554][T27309] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 1252.849333][T27294] lowmem_reserve[]: 0 0 0 0 0 [ 1252.859106][T27294] Node 1 Normal free:3946360kB boost:0kB min:55880kB low:69848kB high:83816kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:464kB unevictable:1536kB writepending:96kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1252.896184][T27294] lowmem_reserve[]: 0 0 0 0 0 [ 1252.897546][ T5842] usb 5-1: Using ep0 maxpacket: 32 [ 1252.901844][T27294] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1252.920031][T27294] Node 0 DMA32: 2*4kB (UM) 2*8kB (ME) 3*16kB (UME) 1558*32kB (UM) 1101*64kB (UM) 688*128kB (M) 230*256kB (UM) 47*512kB (UME) 22*1024kB (ME) 17*2048kB (UM) 31*4096kB (M) = 475720kB [ 1252.939861][ T5842] usb 5-1: config index 0 descriptor too short (expected 19, got 18) [ 1252.939960][T27294] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1252.960151][T27294] Node 1 Normal: 4*4kB (M) 5*8kB (UM) 12*16kB (UM) 8*32kB (UM) 10*64kB (UM) 4*128kB (UM) 5*256kB (UM) 2*512kB (UM) 2*1024kB (UM) 2*2048kB (UM) 961*4096kB (M) = 3946360kB [ 1252.977677][T27294] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1252.987758][T27294] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1252.997634][ T5842] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1253.001073][T27294] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1253.016440][T27294] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1253.017187][ T5842] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.025822][T27294] 79534 total pagecache pages [ 1253.038675][T27294] 0 pages in swap cache [ 1253.042835][T27294] Free swap = 124996kB [ 1253.046974][T27294] Total swap = 124996kB [ 1253.051555][ T5842] usb 5-1: Product: syz [ 1253.055936][T27294] 2097051 pages RAM [ 1253.059799][ T5842] usb 5-1: Manufacturer: syz [ 1253.064519][T27294] 0 pages HighMem/MovableOnly [ 1253.067425][ T5842] usb 5-1: SerialNumber: syz [ 1253.069889][T27294] 432306 pages reserved [ 1253.078276][T27294] 0 pages cma reserved [ 1253.088931][ T5842] usb 5-1: config 0 descriptor?? [ 1253.095930][ T5842] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1253.117831][ T5842] dvb-usb: bulk message failed: -22 (2/0) [ 1253.127262][ T5727] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 1253.142525][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1253.159251][ T5842] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1253.167866][ T5842] usb 5-1: media controller created [ 1253.184379][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1253.205225][ T5842] usb 5-1: selecting invalid altsetting 7 [ 1253.211044][ T5842] cxusb: set interface failed [ 1253.216171][ T5842] dvb-usb: bulk message failed: -22 (1/0) [ 1253.247477][ T5842] DVB: Unable to find symbol lgdt330x_attach() [ 1253.253797][ T5842] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1253.299092][ T5727] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1253.300265][T27304] dvb-usb: bulk message failed: -22 (3/0) [ 1253.309002][ T5727] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1253.332972][ T5727] usb 3-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 1253.333345][ T5842] rc_core: IR keymap rc-dvico-portable not found [ 1253.345174][ T5727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1253.371194][ T5842] Registered IR keymap rc-empty [ 1253.382228][ T5842] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 1253.386691][ T5727] spcp8x5 3-1:1.0: SPCP8x5 converter detected [ 1253.413770][ T5727] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 1253.413869][ T5842] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input157 [ 1253.450479][ T5842] dvb-usb: schedule remote query interval to 100 msecs. [ 1253.458442][ T5842] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1253.477258][ T5842] usb 5-1: USB disconnect, device number 69 [ 1253.557106][ T5842] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1253.740577][ T30] audit: type=1400 audit(1785790270.086:5869): avc: denied { read write } for pid=27320 comm="syz.3.7046" name="mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1253.765556][ T30] audit: type=1400 audit(1785790270.086:5870): avc: denied { open } for pid=27320 comm="syz.3.7046" path="/dev/input/mouse0" dev="devtmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 1253.797900][T27311] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 1253.806663][T27311] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 1253.815055][T27311] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 1253.964876][T27324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1254.146545][ T5727] usb 3-1: USB disconnect, device number 31 [ 1254.186338][ T5727] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 1254.204449][ T5727] spcp8x5 3-1:1.0: device disconnected [ 1254.747443][ T5842] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1254.816055][ T30] audit: type=1400 audit(1785790271.156:5871): avc: denied { map } for pid=27345 comm="syz.1.7056" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1254.894040][ T30] audit: type=1400 audit(1785790271.236:5872): avc: denied { execute } for pid=27345 comm="syz.1.7056" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 1254.927953][ T5842] usb 5-1: Using ep0 maxpacket: 32 [ 1254.940919][ T5842] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 1254.971425][ T5842] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1254.994754][ T5842] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1255.006234][ T5842] usb 5-1: config 1 has no interface number 0 [ 1255.013084][ T5842] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1255.029406][ T5842] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1255.048437][ T5842] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1255.062251][ T5700] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1255.072391][ T5700] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1255.080213][ T5700] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1255.087753][ T5700] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1255.097457][ T5842] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1255.105549][ T5700] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1255.109635][T27360] erspan1: entered allmulticast mode [ 1255.118679][ T5842] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 1255.127898][ T5700] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1255.135833][ T5700] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1255.137220][ T5616] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 1255.144772][ T5700] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1255.160966][ T5700] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1255.162015][T27361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7061'. [ 1255.171544][ T5700] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 1255.206972][ T5700] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz0] on syz0 [ 1255.308555][ T5616] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.340621][ T5842] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 1255.348061][ T5616] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1255.392815][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1255.419820][ T5616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1255.439870][ T5616] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1255.469205][ T5616] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1255.483261][ T5616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1255.503522][ T5616] usb 4-1: Product: syz [ 1255.513644][ T5616] usb 4-1: Manufacturer: syz [ 1255.523756][ T5616] usb 4-1: SerialNumber: syz [ 1255.540542][ T5616] usb 4-1: config 0 descriptor?? [ 1255.552998][ T5842] usb 5-1: USB disconnect, device number 70 [ 1255.575678][ T5842] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 1255.584772][ T30] audit: type=1400 audit(1785790271.936:5873): avc: denied { execute } for pid=27377 comm="syz.0.7068" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 1255.713381][T27386] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 1255.725454][T27386] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 1255.733876][T27386] CPU: 0 UID: 0 PID: 27386 Comm: syz.0.7072 Tainted: G L syzkaller #0 PREEMPT(full) [ 1255.744805][T27386] Tainted: [L]=SOFTLOCKUP [ 1255.749129][T27386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1255.759175][T27386] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 1255.764645][T27386] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 1255.767279][T13804] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1255.784234][T27386] RSP: 0018:ffffc90010e87b48 EFLAGS: 00010246 [ 1255.784260][T27386] RAX: dffffc0000000000 RBX: ffff88802ae1cc00 RCX: ffffc90012549000 [ 1255.784273][T27386] RDX: 0000000000000000 RSI: ffffffff87d05527 RDI: ffff88802ae1d290 [ 1255.784286][T27386] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 1255.784297][T27386] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880554b8050 [ 1255.829623][T27386] R13: 0000000000000000 R14: ffff8880265214f1 R15: ffff888026521008 [ 1255.837582][T27386] FS: 00007f9a2b7c36c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 1255.846490][T27386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1255.853054][T27386] CR2: 00007f9a2a987640 CR3: 000000003474e000 CR4: 00000000003526f0 [ 1255.861006][T27386] DR0: 0000000000000000 DR1: 0000000000000009 DR2: 0000000000000000 [ 1255.868953][T27386] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1255.876901][T27386] Call Trace: [ 1255.880159][T27386] [ 1255.883069][T27386] gadget_bind_driver+0x4ac/0xbf0 [ 1255.888087][T27386] ? __pfx_gadget_bind_driver+0x10/0x10 [ 1255.893634][T27386] really_probe+0x241/0xa60 [ 1255.898136][T27386] __driver_probe_device+0x20e/0x450 [ 1255.903406][T27386] driver_probe_device+0x4a/0x140 [ 1255.908411][T27386] __driver_attach+0x21f/0x5b0 [ 1255.913160][T27386] ? __pfx___driver_attach+0x10/0x10 [ 1255.918443][T27386] bus_for_each_dev+0x13e/0x1d0 [ 1255.923272][T27386] ? __pfx_bus_for_each_dev+0x10/0x10 [ 1255.928632][T27386] ? bus_add_driver+0x2b5/0x5b0 [ 1255.933463][T27386] bus_add_driver+0x305/0x5b0 [ 1255.938121][T27386] driver_register+0x1e2/0x360 [ 1255.942867][T27386] ? rcu_is_watching+0x12/0xc0 [ 1255.947618][T27386] usb_gadget_register_driver_owner+0x132/0x210 [ 1255.953848][T27386] raw_ioctl+0x1a85/0x2b80 [ 1255.958255][T27386] ? __pfx_raw_ioctl+0x10/0x10 [ 1255.963016][T27386] ? selinux_file_ioctl+0x13b/0x290 [ 1255.968208][T27386] ? selinux_file_ioctl+0xb6/0x290 [ 1255.973307][T27386] ? __pfx_raw_ioctl+0x10/0x10 [ 1255.978067][T27386] __x64_sys_ioctl+0x18e/0x210 [ 1255.982817][T27386] do_syscall_64+0x115/0x870 [ 1255.987399][T27386] ? clear_bhb_loop+0x40/0x90 [ 1255.992064][T27386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.997937][T27386] RIP: 0033:0x7f9a2a99dcab [ 1256.002336][T27386] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 1256.021925][T27386] RSP: 002b:00007f9a2b7c0f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1256.030325][T27386] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f9a2a99dcab [ 1256.038280][T27386] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 1256.046259][T27386] RBP: 00007f9a2b7c1fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 1256.054209][T27386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1256.062159][T27386] R13: 0000200000000040 R14: 0000000000000005 R15: 0000000000000000 [ 1256.070116][T27386] [ 1256.073115][T27386] Modules linked in: [ 1256.078069][T27386] ---[ end trace 0000000000000000 ]--- [ 1256.085626][ T5616] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 1256.097648][ T5616] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1256.108847][T27386] RIP: 0010:dummy_udc_start+0x91/0x1d0 [ 1256.114617][T27386] Code: df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 28 01 00 00 4c 8b ab 90 06 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c1 ea 03 <80> 3c 02 00 0f 85 10 01 00 00 83 ed 01 bf 02 00 00 00 49 8b 5d 00 [ 1256.138614][T27386] RSP: 0018:ffffc90010e87b48 EFLAGS: 00010246 [ 1256.152788][T27386] RAX: dffffc0000000000 RBX: ffff88802ae1cc00 RCX: ffffc90012549000 [ 1256.167761][T27386] RDX: 0000000000000000 RSI: ffffffff87d05527 RDI: ffff88802ae1d290 [ 1256.175926][T27386] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000005 [ 1256.183985][T27386] R10: 0000000000000003 R11: 0000000000000000 R12: ffff8880554b8050 [ 1256.192927][T27386] R13: 0000000000000000 R14: ffff8880265214f1 R15: ffff888026521008 [ 1256.201215][T27386] FS: 00007f9a2b7c36c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 1256.210462][T27386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1256.217102][T27386] CR2: 000020000014f000 CR3: 000000003474e000 CR4: 00000000003526f0 [ 1256.225405][T27386] DR0: 0000000000000000 DR1: 0000000000000009 DR2: 0000000000000000 [ 1256.237205][T27386] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1256.245227][T27386] Kernel panic - not syncing: Fatal exception [ 1256.251504][T27386] Kernel Offset: disabled [ 1256.255811][T27386] Rebooting in 86400 seconds..