last executing test programs: 4.921280181s ago: executing program 1 (id=697): r0 = fanotify_init(0x8, 0x40000) write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c4622000005"], 0x40) r1 = socket$inet(0x2, 0x3, 0x6) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@end, @cipso={0x86, 0x6}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x50}}], 0x2, 0x0) fanotify_init(0x8, 0x40000) (async) write$binfmt_elf64(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="7f454c4622000005"], 0x40) (async) socket$inet(0x2, 0x3, 0x6) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) (async) sendmmsg$inet(r1, &(0x7f0000000680)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}, {{&(0x7f0000000240)={0x2, 0x4e21, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@end, @cipso={0x86, 0x6}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x50}}], 0x2, 0x0) (async) 4.809047174s ago: executing program 1 (id=699): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xfffffff7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 4.767785634s ago: executing program 1 (id=701): pipe(&(0x7f0000000140)) io_setup(0x1, &(0x7f0000000200)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 4.621323332s ago: executing program 1 (id=702): mkdir(&(0x7f0000000040)='./bus\x00', 0x49) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413107d7b3a0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x4004804) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_CALL(r2, 0x4008af21, &(0x7f0000000780)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003c80)={0xa, 0x0, [{0xdddd0000, 0x63, &(0x7f00000001c0)=""/99}, {0xeeef0000, 0x1000, &(0x7f0000000bc0)=""/4096}, {0xffff1000, 0x8a, &(0x7f0000001bc0)=""/138}, {0x200000, 0xa3, &(0x7f0000001d40)=""/163}, {0x70000, 0x50, &(0x7f0000001e00)=""/80}, {0x1, 0x98, &(0x7f0000001e80)=""/152}, {0x137fffb, 0xba, &(0x7f0000001f40)=""/186}, {0x31004, 0x42, &(0x7f0000002000)=""/66}, {0x200000, 0xe3, &(0x7f0000002080)=""/227}, {0x0, 0x1000, &(0x7f0000002c80)=""/4096}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000380)={0x0, 0x3fb, 0x7fff}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000600)="c5819a27274164ec0f9eeb3cfd0fbd2a53", 0x6f}, {&(0x7f0000000080)="e5197b73b461aa28e26ce9a5c1233a6ffe98270817eee186f56d21e5fbdaebd4375ace4b9964c0f25220eb80ec287f08881027208b81a815a934330c64201846cbe68892766e59bb361dbbb17d9bfc593c5256a3e57d074ca11d15c71f636e47adb28e82575bcffd901f0ff6c53de894a43aae2e663be4b4c25741b7027e3ddb23c030ea", 0x84}, {&(0x7f00000001c0)="7484d70fdadb8e2f703f485e8351fca4f4e8fb253ef7e8d33df133a35c0c0d8fda02f3f04302510e7512c238f92c0164c70f702f973092c6a3d670", 0x3b}], 0x3, &(0x7f0000000280)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0xfece5538a3894cc4}], 0x1, 0x20000040) recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000480)=""/92, 0x5c}], 0x2}, 0x6}], 0x1, 0x10, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002c40)='/sys/power/image_size', 0x2, 0x100) read$FUSE(r5, &(0x7f0000008140)={0x2020}, 0x2020) readlinkat(r5, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/105, 0x69) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@index_off}]}) ioctl$VIDIOC_S_AUDOUT(r5, 0x40345632, &(0x7f0000000200)={0x8001, "a579639e1d9c16f9a212678a561d5747ddb7de40562b21f93d067c11daac972c", 0x1, 0x1}) 4.486344404s ago: executing program 2 (id=703): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(generic-gcm-aesni)\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x404040, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000080)=0x40000) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x7, 0x4, 0xa) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f0000003540)=@svm={0x10a, 0x1, 0x1080, {0x4}, {"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"}}) 4.307051446s ago: executing program 1 (id=705): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000240)={0xffffffffffffffff, 0x4a, 0x9, 0x1}) ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000280)={0x0, @reserved}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0x1098c0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000400)=0x4) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r1}}, './file0\x00'}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000140)=0x8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2003, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000a80)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4a, {0x2, 0x0, @rand_addr=0x64010101}, 'lo\x00'}) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000600)={{0x2, 0x200, @empty}, {0x306, @random="cf164ce7b443"}, 0x58, {0x2, 0x0, @empty}, 'veth0_to_batadv\x00'}) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40186f40, &(0x7f0000000100)={0x8, 0x8bffffff, 0xf3d, 0x1, 'syz1\x00', 0x5}) syz_usb_connect$uac1(0x2, 0x72, &(0x7f00000000c0)={{0x12, 0x1, 0x3b03fd8e257f1747, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x18, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x9, 0x10, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x7, 0x7, 0x0, {0x7, 0x25, 0x1, 0xc, 0x4, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x240, 0xaf, 0xbf, 0x2, {0x7, 0x25, 0x1, 0x8, 0x9, 0x1}}}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x49, 0x0}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0xfffffffffffffffc) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000340)) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r8, 0x40106e8c, &(0x7f00000003c0)=[0x1, 0xe]) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$KVM_SET_TSC_KHZ_cpu(r8, 0xaea2, 0x10000) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000001c0)={0x1fb, 0x8, 0x3, 0x800, r3}, 0x10) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r1, 0x0) 3.710109313s ago: executing program 2 (id=707): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000a40)={{0x12, 0x1, 0x110, 0xcc, 0xb3, 0x43, 0x40, 0x40a, 0x2, 0x9ce5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7f, 0x0, 0x50, 0xd, "", [{{0x9, 0x4, 0x54, 0x0, 0x0, 0x51, 0x36, 0xbb, 0x2c}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32=r0, @ANYRES16=r0], 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = dup(r1) write$char_usb(r2, 0x0, 0x0) 3.708042508s ago: executing program 0 (id=709): r0 = userfaultfd(0x80001) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) fcntl$setlease(r0, 0x400, 0x1) (async, rerun: 32) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) (async, rerun: 32) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000851}, 0x24044010) r3 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0xffffffffffff0000, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="89ff00000000e9ff", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x60) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r1, 0xc01c64a3, &(0x7f0000001880)={0x3, r4, 0xfff, 0x3ff, 0x2, 0x944}) (async) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000002240)={0x2a, 0xfffffffffffffff9, 0x4, 0x0, 0x0, [{{r0}, 0x6}, {{r1}, 0x7}, {{r0}, 0x40}, {{r0}, 0x2}]}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000002080), r5) (async, rerun: 32) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) (async, rerun: 32) syz_genetlink_get_family_id$batadv(&(0x7f0000002100), 0xffffffffffffffff) (async, rerun: 32) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002140), r6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0xfffffffffffffffb}, {0x0, 0x40000000000000, 0x200000000000000}, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) (async) socket$nl_xfrm(0x10, 0x3, 0x6) read$FUSE(r6, &(0x7f0000000040)={0x2020}, 0x2020) (async) sendmsg$NL80211_CMD_STOP_NAN(r5, &(0x7f0000002200)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000021c0)={&(0x7f0000002180)={0x14, r7, 0x4, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000801}, 0x4000000) 3.707599254s ago: executing program 0 (id=710): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='highspeed', 0x9) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 3.705868836s ago: executing program 3 (id=711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7}, 0x1c) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000180)='clear_refs\x00') writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}, {&(0x7f0000000080)='-6', 0x3f}], 0x2) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) r2 = fcntl$dupfd(r0, 0x0, r0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000d40)={0x14, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x1) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x14, r3, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x41) 3.60033269s ago: executing program 3 (id=712): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f00000000c0)=0x7, 0x4) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000056000106000000000000000007daaf948b49"], 0x1c}], 0x1}, 0x0) (async) r2 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) (async) syz_usb_control_io(r2, 0x0, 0x0) (async) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="4025c83a83620600000000"], 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYBLOB="240200001000130726bd700000000000e0000001000000000000000000000000000000000000000000000000000000004e2500004e230003020000003a000000", @ANYRES64=r2, @ANYRES32, @ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x240040c0}, 0x0) (async) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000280)={0x0, &(0x7f00000005c0)=[@out_dx={0x6a, 0x28, {0x5f10, 0x4, 0x400}}, @enable_nested={0x12c, 0x18}, @nested_load_code={0x12e, 0x5b, {0x1, "b8010000000f01c10f01cf420f2000c482fdaad466b8c8000f00d8440f20c0350d000000440f22c02e66460f38824d0a3e87dd406b4ca5f30166410f3882a388f30000"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x664, 0x4c, 0x0, 0x8001}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x176}}, @nested_amd_invlpga={0x17d, 0x20, {0x9000, 0x161e}}], 0x123}) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 2.955055478s ago: executing program 0 (id=713): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x8000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x2f, 0x0, 0x20, "d52b3d000000fa44966262631e07c11e00000000000000000000d8000100"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000040)=0x8001) r5 = getpgid(0x0) fcntl$setownex(r4, 0xf, &(0x7f0000000140)={0x2, r5}) sendmmsg$unix(r3, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="11", 0x1}], 0x1}}], 0x1, 0x40015) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000340)='westwood', 0x8) socket$inet6(0xa, 0x1, 0x32642cb0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.646268919s ago: executing program 3 (id=714): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(0xffffffffffffffff, 0xc400941d, &(0x7f0000000080)={0x0, 0x2, 0x9, 0x1}) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000480)={0x2, 0x0, {0x3, @usage=0x3, 0x0, 0xffffffffffffffff, 0x81, 0x81, 0x20c, 0x5, 0x18, @usage=0xffffffff00000000, 0x1, 0xf0e8, [0x4, 0xffffffff, 0x3, 0xffffffffffffffff, 0x7, 0x4]}, {0x1, @usage=0x7fffffff, 0x0, 0x0, 0x7ff, 0x1, 0x2, 0x81, 0x2, @struct={0x22ee, 0x9}, 0x4, 0x7, [0x1, 0xd4, 0x2, 0x4, 0x40, 0x80000000]}, {0x5, @usage=0x7b3, 0x0, 0x9, 0x6, 0xab, 0x6, 0x552, 0x20, @struct={0x0, 0x6}, 0x6, 0x7fff, [0x3, 0x1, 0x6cb4, 0x400, 0xfffffffffffffffc, 0x5]}, {0xa9dcd9b, 0x1, 0x3}}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000880)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000c80)={0x0, 0x7, {0x0, @struct={0x4, 0x1000}, r1, 0xfffffffffffff4a7, 0x352, 0x7fff, 0xd3f8, 0x6, 0x40, @usage=0x9, 0x9, 0x8e1, [0x9, 0x4, 0x9, 0x589524a9, 0x9, 0x80000001]}, {0x8000, @usage=0x4, r2, 0xffffffff, 0x40, 0xef1d, 0x9, 0x3ff, 0x40, @usage=0x2, 0x10001, 0x7f, [0x31, 0x7, 0x8, 0x3, 0x7, 0x7f]}, {0x8000000000000000, @struct={0x2, 0x7}, r3, 0x3, 0x3, 0xf4bb, 0x6, 0x89a4, 0x8, @struct={0x4, 0x6}, 0x9, 0x4, [0x9, 0x0, 0x7ff, 0x76403945, 0x200, 0x7]}, {0x46789da, 0x1, 0x9}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b"], 0x0) 2.628553583s ago: executing program 1 (id=715): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000200)=ANY=[], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0003060000000603"]}, 0x0) r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303006590f57f0770f64ebcee07962c220a2e11b44ee5d76641cb010852f426072a000000", 0x2a}], 0x1) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.529037582s ago: executing program 0 (id=716): syz_usb_connect(0x5, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fe857108480b0730644f010203010902120001000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = dup(r0) write$char_usb(r1, 0x0, 0x0) (fail_nth: 2) 2.318402486s ago: executing program 2 (id=717): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendto$packet(r2, &(0x7f0000000300)="3303120081fd140000007ef52f555f2a0c09000000fd88a800f788a83baa99000f8588a832f4", 0x26, 0x240008c1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0xcf}, 0x14) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000400)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x4c, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfffffffc}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7ff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x4000000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x238, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x50, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac, {0x0, 0x20}}, 0x0, @random=0xfffe, 0x1, @val, @void, @val={0x3, 0x1, 0x6}, @void, @val={0x6, 0x2, 0x1}, @void, @val={0x25, 0x3, {0x1, 0xae, 0x4}}, @val={0x2a, 0x1, {0x1, 0x1, 0x1}}, @val={0x3c, 0x4, {0x0, 0x81, 0xaf, 0x3}}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x85, 0x41}}, @void}}, @NL80211_ATTR_IE={0x1b3, 0x2a, [@rann={0x7e, 0x15, {{0x1, 0x5}, 0xe, 0x6, @device_b, 0x7f, 0x4, 0x9}}, @tim={0x5, 0xe4, {0x7, 0x7, 0x39, "852009961fe77b401f48f8ae7da56d7a0345d0e1a411f8e5a41467b79b2e74b72df3e366944611acf0a5bd3e06d9272a6a348c3917c0d646cee5738cfac7bf386c1902cbca680ea7a9fb8120db423f5922868cffeba42ab659a9a5388382ef52a84b7e4e198ca907ffd4e832ec0930d6929bd30e401156968b9e37c82e1eeaec48c4d71d7582774daeefc8b8e3c881e7ca269c6121a5971b600b984119c4a4e0f6b8067bd2e48be66d6a2c0c293a8f65141b2e7047b7f5a917c1916ded081094fbd6e9f7438f3f19a06a2fec517f8a4222155910d50891c68ee41c29709422a814"}}, @ssid={0x0, 0x6, @default_ibss_ssid}, @peer_mgmt={0x75, 0x4, {0x1, 0x0, @void, @void, @void}}, @mic={0x8c, 0x18, {0x739b, "2e8c4bbe0dbb", @long="7e724d908d5a3bc41b55314f22042f3d"}}, @ext_channel_switch={0x3c, 0x4, {0x1, 0x8, 0x9d, 0x8}}, @random={0xf5, 0x7f, "83e704ae18d41a8ad5d25ad69d791fff75125b851243ab280f6695f293f8fe540eaffaad99b5e68dcea7c4bfbe7d2014f8b636812a58f0fa2b15e7b06cd49ad01368e542d4cb179073a7b1eeec2fba4ed009316698426b09fd3fadc4c498e6d25dffb4a0c7ce6c09b6aa46b245ebd44537a401a4b4767dcb87bca366f81cb4"}, @challenge={0x10, 0x1, 0xf2}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x238}}, 0x0) 2.290637729s ago: executing program 2 (id=718): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000240)='./file0\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0xb00013, 0x0) 2.146177597s ago: executing program 2 (id=719): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272", 0x7e}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af", 0x17}], 0x2, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e000100000008ac1414320000"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0x7c9}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.125860871s ago: executing program 0 (id=720): r0 = eventfd(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0xc002, 0x0) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_usb_connect(0x2, 0x35, &(0x7f0000000300)=ANY=[@ANYBLOB="120150029ba5cc40030e31c63cb10102030109022300017f0380f70904f3d901bcb1c80609050c000000097009080b739d5c86c945"], &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x7040, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050029bd7800000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="050034002f0000001400490004ac0f0004ac0f00"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x810) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f00030100d0000904000000010100000a2401f6ffff0101020d240600fe03080000000000000c24020202020608000010000c2402000000030000170000092406000501000000092403030000000500092406050001"], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = eventfd(0x3) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f00000000c0)=0xf3e, 0x4) sendto$packet(r5, &(0x7f0000000280)="81", 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0xf6, 0x6, @random="5afe8b181d50"}, 0x14) read$eventfd(r4, &(0x7f0000000000), 0x8) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x3, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x4, 0x10, 0x3, 0x8, 0x6}, 0x1e, &(0x7f00000002c0)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6a, 0x6, 0x5, 0x6, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xfe, 0x9, 0x4, 0x7}, @ptm_cap={0x3}]}, 0x7, [{0x51, &(0x7f0000000340)=@string={0x51, 0x3, "5f9ab4293212f0891a44b6cc196e0c376dde834072b48e1b5ef9675da374072e27f5ef00d1be1a976fa1a29c12420a6613fdec210693e8f47041a532d5f50de39d99a083d7c9420ab9bddf1e5bc970"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "1f02fb111d0e111b0ac26afae14c2602555fcc4eec016722d1fe75d76a0075a80c5ac62dd00c13fd5f4f3675b217deded2bd266d0767079de1235a39e2d18478c26f5db785eea593c5aa89921ed282f97a0aceeb5485572595d7c0d2abc3b8dcba10ef0f0a6bb18479ece501d4cb2f499d7c0a5f18ad41caac695ab37b9f4b77357c8a577e61a6c00937117fe2bc5daf71783a67365c63a8badc456fb4eec9b427ed264e9cefdd0f70e2fb16312846f464a16956437a59995a0aced56ed9c54d82b21874565aa279614d"}}, {0xfa, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x425}}, {0x8e, &(0x7f00000006c0)=@string={0x8e, 0x3, "4bd8965272a72a68f27823faf9cf75bf4d75fae0875fe226617c03de86543e69c32d7fa7ef160867c100721e31cd115c997fc53c21dd3e890327d50dfac2fb78f2ed8d0c0d593eb0f1cce7768554d473e6435a4d9a25a2406d48822d762d9199dfec519ca24770eafbc865ad92b8903f15aecf03cf1e9289d86f6245334858d7ac58e328a102778a82129280"}}]}) eventfd(0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0xc002, 0x0) (async) syz_clone3(&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x2}, 0xa0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_usb_connect(0x2, 0x35, &(0x7f0000000300)=ANY=[@ANYBLOB="120150029ba5cc40030e31c63cb10102030109022300017f0380f70904f3d901bcb1c80609050c000000097009080b739d5c86c945"], &(0x7f0000000e40)={0x0, 0x0, 0x0, 0x0}) (async) openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0) (async) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x7040, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050029bd7800000000002e00000008000300", @ANYRES32=r3, @ANYBLOB="050034002f0000001400490004ac0f0004ac0f00"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x810) (async) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f00030100d0000904000000010100000a2401f6ffff0101020d240600fe03080000000000000c24020202020608000010000c2402000000030000170000092406000501000000092403030000000500092406050001"], 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) eventfd(0x3) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async) setsockopt$packet_int(r5, 0x107, 0xc, &(0x7f00000000c0)=0xf3e, 0x4) (async) sendto$packet(r5, &(0x7f0000000280)="81", 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r6, 0x1, 0xf6, 0x6, @random="5afe8b181d50"}, 0x14) (async) read$eventfd(r4, &(0x7f0000000000), 0x8) (async) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000100)={{0x12, 0x1, 0x300, 0x7, 0x1, 0x3, 0x40, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x80, 0x7, "", [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x9, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x7, 0x0, 0x1}}}}}]}}]}}, &(0x7f0000000780)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x200, 0x4, 0x10, 0x3, 0x8, 0x6}, 0x1e, &(0x7f00000002c0)={0x5, 0xf, 0x1e, 0x3, [@wireless={0xb, 0x10, 0x1, 0xc, 0x6a, 0x6, 0x5, 0x6, 0x9}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0xfe, 0x9, 0x4, 0x7}, @ptm_cap={0x3}]}, 0x7, [{0x51, &(0x7f0000000340)=@string={0x51, 0x3, "5f9ab4293212f0891a44b6cc196e0c376dde834072b48e1b5ef9675da374072e27f5ef00d1be1a976fa1a29c12420a6613fdec210693e8f47041a532d5f50de39d99a083d7c9420ab9bddf1e5bc970"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x3c0a}}, {0xcc, &(0x7f0000000400)=@string={0xcc, 0x3, "1f02fb111d0e111b0ac26afae14c2602555fcc4eec016722d1fe75d76a0075a80c5ac62dd00c13fd5f4f3675b217deded2bd266d0767079de1235a39e2d18478c26f5db785eea593c5aa89921ed282f97a0aceeb5485572595d7c0d2abc3b8dcba10ef0f0a6bb18479ece501d4cb2f499d7c0a5f18ad41caac695ab37b9f4b77357c8a577e61a6c00937117fe2bc5daf71783a67365c63a8badc456fb4eec9b427ed264e9cefdd0f70e2fb16312846f464a16956437a59995a0aced56ed9c54d82b21874565aa279614d"}}, {0xfa, &(0x7f0000000800)=ANY=[@ANYBLOB="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"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41d}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x425}}, {0x8e, &(0x7f00000006c0)=@string={0x8e, 0x3, "4bd8965272a72a68f27823faf9cf75bf4d75fae0875fe226617c03de86543e69c32d7fa7ef160867c100721e31cd115c997fc53c21dd3e890327d50dfac2fb78f2ed8d0c0d593eb0f1cce7768554d473e6435a4d9a25a2406d48822d762d9199dfec519ca24770eafbc865ad92b8903f15aecf03cf1e9289d86f6245334858d7ac58e328a102778a82129280"}}]}) (async) 1.06143769s ago: executing program 3 (id=721): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') r0 = creat(&(0x7f0000000440)='./bus\x00', 0xf2) open_by_handle_at(r0, &(0x7f00000001c0)=@OVL_FILEID_V0={0x15, 0xfb, {0x0, 0xfb, 0x15, 0x0, 0x1, "6c8a065af911b34ec128b4ae91f04417"}}, 0x5f1502) 933.676992ms ago: executing program 3 (id=722): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, 0x0, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x8}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}}, 0x4000000) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, 0x1, 0x8, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004000) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, 0x0}, 0x430a3011}], 0x1, 0x40000000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0xfffffffffffffe41}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip,mac\x00'}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x24, r2, 0x201, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) 826.6222ms ago: executing program 2 (id=723): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lseek(r4, 0x2004, 0x0) open$dir(0x0, 0x800, 0x20) 678.465475ms ago: executing program 3 (id=724): syz_usb_connect(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x201, 0x94, 0x82, 0xff, 0x40, 0x586, 0x1000, 0xaa5e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x62, 0x40, 0x0, "", [{{0x9, 0x4, 0x56, 0x4, 0x2, 0x45, 0x43, 0xda, 0xb9, [], [{{0x9, 0x5, 0xe, 0x2, 0x8, 0x9, 0x4, 0x66}}, {{0x9, 0x5, 0xc, 0x2, 0x20, 0x31, 0x9, 0x16}}]}}]}}]}}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') close(r0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x3, 0xff3, 'a\f4', 0x9, 0x10}) 0s ago: executing program 0 (id=725): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r5, &(0x7f0000002540)="0b040700e0ff030002004788aa96a13bb100000000004305400f", 0xfcb6, 0x0, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x11, 0x6, @broadcast}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000040)={{{@in=@broadcast, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000180)=@updpolicy={0x19c, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0x5, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x29, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x7f, 0x0, 0xffffffffffffffff, 0x0, 0x4}, {0x0, 0xa00, 0x40, 0x800000000000000}, 0x0, 0x1, 0x2}, [@sa={0xe4, 0x6, {{@in6=@mcast1, @in6=@local, 0x4e20, 0x9cb, 0x4e24, 0x0, 0x2, 0x0, 0xa0, 0x73, r7, r8}, {@in6=@local, 0x4d6, 0x6c}, @in6=@ipv4={'\x00', '\xff\xff', @remote}, {0xffff, 0x70cf, 0x7ff, 0x8, 0x8000, 0x0, 0x6, 0x4}, {0x44, 0x9, 0x94e8, 0x2}, {0x3, 0x5aae}, 0x70bd28, 0x3504, 0xa, 0x0, 0x10, 0x90}}]}, 0x19c}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc010000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRESHEX=r1, @ANYBLOB="02000000000000009c001100fe80000000000000000000000000001164010102000000000000000000000000fe80000000ec00000000000000000013fe80000000000000000000000000004e3c00f3ffff"], 0xec}}, 0x40000) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e1f, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) kernel console output (not intermixed with test programs): 9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 182.183023][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.187737][ T5706] holtek_kbd 0003:04D9:A055.0004: input,hidraw1: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.0-1/input1 [ 182.247286][ T5706] usb 1-1: USB disconnect, device number 25 [ 182.297233][ T9] usb 3-1: config 0 descriptor?? [ 182.486313][ T7128] fido_id[7128]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 183.036293][ T9] koneplus 0003:1E7D:2D51.0005: reserved main item tag 0xe [ 183.036335][ T9] hid_parser_main: 27 callbacks suppressed [ 183.036354][ T9] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x6 [ 183.036381][ T9] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 183.036407][ T9] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x2 [ 183.036448][ T9] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 183.036474][ T9] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 183.036499][ T9] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 183.036525][ T9] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 183.036552][ T9] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 183.036585][ T9] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 183.036610][ T9] koneplus 0003:1E7D:2D51.0005: unknown main item tag 0x0 [ 183.140718][ T9] koneplus 0003:1E7D:2D51.0005: hidraw2: USB HID vff.fe Device [HID 1e7d:2d51] on usb-dummy_hcd.2-1/input0 [ 183.979437][ T5706] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 184.109165][ T5706] usb 1-1: device descriptor read/64, error -71 [ 184.329071][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 184.358397][ T5706] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 184.459164][ T9] usb 4-1: device descriptor read/64, error -71 [ 184.489321][ T5706] usb 1-1: device descriptor read/64, error -71 [ 184.601034][ T5706] usb usb1-port1: attempt power cycle [ 184.699435][ T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 184.787247][ T5696] usb 3-1: USB disconnect, device number 26 [ 184.835282][ T5649] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 184.835419][ T9] usb 4-1: device descriptor read/64, error -71 [ 184.943846][ T9] usb usb4-port1: attempt power cycle [ 185.001875][ T5649] usb 2-1: Using ep0 maxpacket: 8 [ 185.008032][ T5649] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 185.008089][ T5649] usb 2-1: config 0 has no interface number 0 [ 185.008113][ T5649] usb 2-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 185.008126][ T5649] usb 2-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 185.008143][ T5649] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 185.008156][ T5649] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.013940][ T5649] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 185.013968][ T5649] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.013986][ T5649] usb 2-1: Product: syz [ 185.013999][ T5649] usb 2-1: Manufacturer: syz [ 185.014011][ T5649] usb 2-1: SerialNumber: syz [ 185.033703][ T5649] usb 2-1: config 0 descriptor?? [ 185.266117][ T5649] iowarrior 2-1:0.186: IOWarrior product=0x1505, serial= interface=186 now attached to iowarrior0 [ 185.339579][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 185.370668][ T9] usb 4-1: device descriptor read/8, error -71 [ 185.385470][ T7172] FAULT_INJECTION: forcing a failure. [ 185.385470][ T7172] name failslab, interval 1, probability 0, space 0, times 0 [ 185.385513][ T7172] CPU: 1 UID: 0 PID: 7172 Comm: syz.2.466 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 185.385536][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 185.385545][ T7172] Call Trace: [ 185.385551][ T7172] [ 185.385561][ T7172] dump_stack_lvl+0xe8/0x150 [ 185.385587][ T7172] should_fail_ex+0x46b/0x600 [ 185.385611][ T7172] should_failslab+0xa8/0x100 [ 185.385632][ T7172] __kvmalloc_node_noprof+0x170/0x8e0 [ 185.385653][ T7172] ? file_tty_write+0x2ec/0xa10 [ 185.385674][ T7172] ? _mutex_trylock_nest_lock+0x128/0x180 [ 185.385698][ T7172] file_tty_write+0x2ec/0xa10 [ 185.385724][ T7172] vfs_write+0x629/0xba0 [ 185.385756][ T7172] ? __pfx_vfs_write+0x10/0x10 [ 185.385785][ T7172] ? __fget_files+0x2a/0x420 [ 185.385810][ T7172] ksys_write+0x156/0x270 [ 185.385831][ T7172] ? __pfx_ksys_write+0x10/0x10 [ 185.385856][ T7172] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.385876][ T7172] do_syscall_64+0x15f/0xf80 [ 185.385895][ T7172] ? trace_irq_disable+0x3b/0x140 [ 185.385915][ T7172] ? clear_bhb_loop+0x40/0x90 [ 185.385957][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.385979][ T7172] RIP: 0033:0x7fd478d4cdd9 [ 185.385996][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 185.386012][ T7172] RSP: 002b:00007fd476fa6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 185.386033][ T7172] RAX: ffffffffffffffda RBX: 00007fd478fc5fa0 RCX: 00007fd478d4cdd9 [ 185.386045][ T7172] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000003 [ 185.386055][ T7172] RBP: 00007fd476fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 185.386065][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 185.386074][ T7172] R13: 00007fd478fc6038 R14: 00007fd478fc5fa0 R15: 00007ffc2dad0338 [ 185.386099][ T7172] [ 185.664271][ T5714] usb 2-1: USB disconnect, device number 25 [ 185.699081][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 185.720075][ T9] usb 4-1: device descriptor read/8, error -71 [ 185.721110][ T7175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.468'. [ 185.721339][ T7175] openvswitch: netlink: Missing key (keys=40, expected=80) [ 185.806149][ T7179] pim6reg: entered allmulticast mode [ 185.829461][ T9] usb usb4-port1: unable to enumerate USB device [ 185.979177][ T5719] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 186.069399][ T823] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 186.129071][ T5719] usb 3-1: Using ep0 maxpacket: 8 [ 186.130898][ T5719] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.130929][ T5719] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 186.130972][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 186.130990][ T5719] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 186.131013][ T5719] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 186.131028][ T5719] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.150970][ T5719] hub 3-1:1.0: bad descriptor, ignoring hub [ 186.151010][ T5719] hub 3-1:1.0: probe with driver hub failed with error -5 [ 186.151946][ T5719] cdc_wdm 3-1:1.0: skipping garbage [ 186.151959][ T5719] cdc_wdm 3-1:1.0: skipping garbage [ 186.156234][ T5719] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 186.156253][ T5719] cdc_wdm 3-1:1.0: Unknown control protocol [ 186.241612][ T823] usb 1-1: config index 0 descriptor too short (expected 64874, got 72) [ 186.259323][ T823] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 186.259366][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.259385][ T823] usb 1-1: Product: syz [ 186.259398][ T823] usb 1-1: Manufacturer: syz [ 186.259411][ T823] usb 1-1: SerialNumber: syz [ 186.288793][ T823] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 186.344353][ T5649] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 186.354456][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.412594][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.426797][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.428148][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.446506][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.447451][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.448506][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.456035][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.464683][ T7175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.503626][ T7175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.760074][ T7179] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.760555][ T7179] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.788573][ T7179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.467'. [ 186.854534][ T5714] usb 1-1: USB disconnect, device number 29 [ 187.269225][ T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 187.427592][ T9] usb 2-1: config 0 has no interfaces? [ 187.427630][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 187.427644][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.434207][ T9] usb 2-1: config 0 descriptor?? [ 187.460840][ T5696] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 187.471012][ T5649] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 187.471196][ T5649] ath9k_htc: Failed to initialize the device [ 187.494049][ T5714] usb 1-1: ath9k_htc: USB layer deinitialized [ 187.528279][ T7196] FAULT_INJECTION: forcing a failure. [ 187.528279][ T7196] name failslab, interval 1, probability 0, space 0, times 0 [ 187.528300][ T7196] CPU: 0 UID: 0 PID: 7196 Comm: syz.0.475 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.528312][ T7196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.528320][ T7196] Call Trace: [ 187.528324][ T7196] [ 187.528328][ T7196] dump_stack_lvl+0xe8/0x150 [ 187.528351][ T7196] should_fail_ex+0x46b/0x600 [ 187.528369][ T7196] should_failslab+0xa8/0x100 [ 187.528384][ T7196] __kmalloc_noprof+0xdf/0x7b0 [ 187.528398][ T7196] ? tomoyo_encode+0x28b/0x550 [ 187.528414][ T7196] tomoyo_encode+0x28b/0x550 [ 187.528430][ T7196] tomoyo_realpath_from_path+0x58d/0x5d0 [ 187.528449][ T7196] ? tomoyo_path_number_perm+0x219/0x630 [ 187.528460][ T7196] tomoyo_path_number_perm+0x246/0x630 [ 187.528473][ T7196] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.528484][ T7196] ? __lock_acquire+0x6b5/0x2d10 [ 187.528501][ T7196] ? do_raw_spin_lock+0x12b/0x2f0 [ 187.528528][ T7196] ? __fget_files+0x2a/0x420 [ 187.528541][ T7196] ? __fget_files+0x2a/0x420 [ 187.528550][ T7196] ? __fget_files+0x3a6/0x420 [ 187.528560][ T7196] ? __fget_files+0x2a/0x420 [ 187.528572][ T7196] security_file_ioctl+0xc3/0x2a0 [ 187.528584][ T7196] __se_sys_ioctl+0x47/0x170 [ 187.528598][ T7196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.528610][ T7196] do_syscall_64+0x15f/0xf80 [ 187.528623][ T7196] ? trace_irq_disable+0x3b/0x140 [ 187.528637][ T7196] ? clear_bhb_loop+0x40/0x90 [ 187.528653][ T7196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.528664][ T7196] RIP: 0033:0x7f094676cdd9 [ 187.528678][ T7196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.528687][ T7196] RSP: 002b:00007f09449c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.528701][ T7196] RAX: ffffffffffffffda RBX: 00007f09469e5fa0 RCX: 00007f094676cdd9 [ 187.528708][ T7196] RDX: 0000200000000140 RSI: 00000000c0306201 RDI: 0000000000000003 [ 187.528715][ T7196] RBP: 00007f09449c6090 R08: 0000000000000000 R09: 0000000000000000 [ 187.528721][ T7196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.528727][ T7196] R13: 00007f09469e6038 R14: 00007f09469e5fa0 R15: 00007ffeef267988 [ 187.528742][ T7196] [ 187.528762][ T7196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.619097][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 187.631650][ T5696] usb 4-1: config 6 has an invalid interface number: 166 but max is 1 [ 187.631678][ T5696] usb 4-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 187.631694][ T5696] usb 4-1: config 6 has an invalid interface number: 11 but max is 1 [ 187.631711][ T5696] usb 4-1: config 6 has an invalid interface number: 77 but max is 1 [ 187.631730][ T5696] usb 4-1: config 6 has 3 interfaces, different from the descriptor's value: 2 [ 187.631749][ T5696] usb 4-1: config 6 has no interface number 0 [ 187.631762][ T5696] usb 4-1: config 6 has no interface number 1 [ 187.631777][ T5696] usb 4-1: config 6 has no interface number 2 [ 187.631839][ T5696] usb 4-1: config 6 interface 166 altsetting 247 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 187.631862][ T5696] usb 4-1: config 6 interface 166 altsetting 247 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 187.631886][ T5696] usb 4-1: config 6 interface 166 altsetting 247 has a duplicate endpoint with address 0x89, skipping [ 187.631921][ T5696] usb 4-1: config 6 interface 11 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 187.631943][ T5696] usb 4-1: config 6 interface 11 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 187.631967][ T5696] usb 4-1: too many endpoints for config 6 interface 77 altsetting 149: 78, using maximum allowed: 30 [ 187.632013][ T5696] usb 4-1: config 6 interface 77 altsetting 149 has a duplicate endpoint with address 0x1, skipping [ 187.632031][ T5696] usb 4-1: config 6 interface 77 altsetting 149 has an invalid descriptor for endpoint zero, skipping [ 187.632049][ T5696] usb 4-1: config 6 interface 77 altsetting 149 has a duplicate endpoint with address 0xB, skipping [ 187.632085][ T5696] usb 4-1: config 6 interface 77 altsetting 149 bulk endpoint 0x8 has invalid maxpacket 1024 [ 187.632106][ T5696] usb 4-1: config 6 interface 77 altsetting 149 has a duplicate endpoint with address 0x9, skipping [ 187.632126][ T5696] usb 4-1: config 6 interface 77 altsetting 149 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 187.632152][ T5696] usb 4-1: config 6 interface 77 altsetting 149 endpoint 0xD has invalid maxpacket 624, setting to 64 [ 187.632176][ T5696] usb 4-1: config 6 interface 77 altsetting 149 has an invalid descriptor for endpoint zero, skipping [ 187.632195][ T5696] usb 4-1: config 6 interface 77 altsetting 149 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 187.632221][ T5696] usb 4-1: config 6 interface 77 altsetting 149 has a duplicate endpoint with address 0x8, skipping [ 187.632240][ T5696] usb 4-1: config 6 interface 77 altsetting 149 has a duplicate endpoint with address 0x6, skipping [ 187.632259][ T5696] usb 4-1: config 6 interface 77 altsetting 149 has a duplicate endpoint with address 0xF, skipping [ 187.632278][ T5696] usb 4-1: config 6 interface 77 altsetting 149 has 12 endpoint descriptors, different from the interface descriptor's value: 78 [ 187.632300][ T5696] usb 4-1: config 6 interface 166 has no altsetting 0 [ 187.632315][ T5696] usb 4-1: config 6 interface 77 has no altsetting 0 [ 187.640146][ T5696] usb 4-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=83.d4 [ 187.640181][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.640198][ T5696] usb 4-1: Product: syz [ 187.640211][ T5696] usb 4-1: Manufacturer: syz [ 187.640223][ T5696] usb 4-1: SerialNumber: syz [ 187.709882][ T7188] FAULT_INJECTION: forcing a failure. [ 187.709882][ T7188] name failslab, interval 1, probability 0, space 0, times 0 [ 187.709915][ T7188] CPU: 1 UID: 0 PID: 7188 Comm: syz.1.472 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 187.709935][ T7188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 187.709945][ T7188] Call Trace: [ 187.709952][ T7188] [ 187.709959][ T7188] dump_stack_lvl+0xe8/0x150 [ 187.709988][ T7188] should_fail_ex+0x46b/0x600 [ 187.710025][ T7188] should_failslab+0xa8/0x100 [ 187.710051][ T7188] __kmalloc_noprof+0xdf/0x7b0 [ 187.710072][ T7188] ? tomoyo_encode+0x28b/0x550 [ 187.710100][ T7188] tomoyo_encode+0x28b/0x550 [ 187.710127][ T7188] tomoyo_realpath_from_path+0x58d/0x5d0 [ 187.710153][ T7188] ? tomoyo_domain+0xd7/0x130 [ 187.710180][ T7188] ? tomoyo_path_number_perm+0x219/0x630 [ 187.710201][ T7188] tomoyo_path_number_perm+0x246/0x630 [ 187.710223][ T7188] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 187.710243][ T7188] ? __lock_acquire+0x6b5/0x2d10 [ 187.710270][ T7188] ? do_raw_spin_lock+0x12b/0x2f0 [ 187.710319][ T7188] ? __fget_files+0x2a/0x420 [ 187.710341][ T7188] ? __fget_files+0x2a/0x420 [ 187.710358][ T7188] ? __fget_files+0x3a6/0x420 [ 187.710375][ T7188] ? __fget_files+0x2a/0x420 [ 187.710396][ T7188] security_file_ioctl+0xc3/0x2a0 [ 187.710417][ T7188] __se_sys_ioctl+0x47/0x170 [ 187.710439][ T7188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.710459][ T7188] do_syscall_64+0x15f/0xf80 [ 187.710483][ T7188] ? trace_irq_disable+0x3b/0x140 [ 187.710504][ T7188] ? clear_bhb_loop+0x40/0x90 [ 187.710523][ T7188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.710539][ T7188] RIP: 0033:0x7efcdb59cdd9 [ 187.710555][ T7188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.710569][ T7188] RSP: 002b:00007efcd97ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 187.710590][ T7188] RAX: ffffffffffffffda RBX: 00007efcdb815fa0 RCX: 00007efcdb59cdd9 [ 187.710603][ T7188] RDX: 0000200000000580 RSI: 0000000040086200 RDI: 0000000000000007 [ 187.710619][ T7188] RBP: 00007efcd97ee090 R08: 0000000000000000 R09: 0000000000000000 [ 187.710630][ T7188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 187.710641][ T7188] R13: 00007efcdb816038 R14: 00007efcdb815fa0 R15: 00007ffda23963e8 [ 187.710671][ T7188] [ 187.742793][ T7188] ERROR: Out of memory at tomoyo_realpath_from_path. [ 187.754381][ T9] usb 2-1: USB disconnect, device number 26 [ 188.214618][ T5696] cdc_acm 4-1:6.166: skipping garbage [ 188.336672][ T5696] cdc_acm 4-1:6.11: Zero length descriptor references [ 188.336714][ T5696] cdc_acm 4-1:6.11: probe with driver cdc_acm failed with error -22 [ 188.368410][ T5696] cdc_acm 4-1:6.77: skipping garbage [ 188.419709][ T5714] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 188.423493][ T5696] usb 4-1: USB disconnect, device number 28 [ 188.569078][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 188.573295][ T5714] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=ba.be [ 188.573320][ T5714] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 188.573330][ T5714] usb 1-1: Product: syz [ 188.573337][ T5714] usb 1-1: Manufacturer: syz [ 188.573344][ T5714] usb 1-1: SerialNumber: syz [ 188.578571][ T5714] usb 1-1: config 0 descriptor?? [ 188.759476][ T5696] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 188.861963][ T7198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.866186][ T7198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.877900][ T5714] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 188.877920][ T5714] peak_usb 1-1:0.0: unable to read PCAN-Chip USB firmware info (err -71) [ 188.925192][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 188.943363][ T5696] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 188.943390][ T5696] usb 4-1: config 0 has no interface number 0 [ 188.943434][ T5696] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 188.980126][ T5696] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 188.980156][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.980174][ T5696] usb 4-1: Product: syz [ 188.980189][ T5696] usb 4-1: Manufacturer: syz [ 188.980212][ T5696] usb 4-1: SerialNumber: syz [ 189.034276][ T5696] usb 4-1: config 0 descriptor?? [ 189.099963][ T7202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.150931][ T5714] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 189.177822][ T5714] usb 1-1: USB disconnect, device number 30 [ 189.312404][ T7202] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 189.629196][ T5714] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 189.719079][ T5706] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 189.779008][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 189.781072][ T5714] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 189.781098][ T5714] usb 2-1: config 0 has no interface number 0 [ 189.781141][ T5714] usb 2-1: config 0 interface 184 has no altsetting 0 [ 189.783432][ T5714] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 189.783458][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.783481][ T5714] usb 2-1: Product: syz [ 189.783494][ T5714] usb 2-1: Manufacturer: syz [ 189.783506][ T5714] usb 2-1: SerialNumber: syz [ 189.805055][ T5714] usb 2-1: config 0 descriptor?? [ 189.889068][ T5706] usb 1-1: Using ep0 maxpacket: 8 [ 189.902288][ T5706] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 189.902319][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.902393][ T5706] usb 1-1: Product: syz [ 189.902414][ T5706] usb 1-1: Manufacturer: syz [ 189.902427][ T5706] usb 1-1: SerialNumber: syz [ 189.942855][ T5706] usb 1-1: config 0 descriptor?? [ 189.961761][ T5706] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 189.961880][ T5706] pctv452e: pctv452e_power_ctrl: 1 [ 189.961880][ T5706] [ 189.961932][ T5706] usb 1-1: selecting invalid altsetting 3 [ 189.961948][ T5706] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 189.961948][ T5706] [ 189.961963][ T5706] dvb-usb: bulk message failed: -22 (5/0) [ 190.047433][ T5706] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 190.048473][ T5706] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 190.067088][ T5706] usb 1-1: media controller created [ 190.081733][ T5706] dvb-usb: bulk message failed: -22 (8/0) [ 190.081758][ T5706] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 190.081909][ T5706] dvb-usb: MAC address reading failed. [ 190.148434][ T5706] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 190.291795][ T5706] DVB: Unable to find symbol stb0899_attach() [ 190.291812][ T5706] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 190.392246][ T7202] netlink: 236 bytes leftover after parsing attributes in process `syz.3.477'. [ 190.392288][ T7202] netlink: 236 bytes leftover after parsing attributes in process `syz.3.477'. [ 190.421020][ T5706] rc_core: IR keymap rc-tt-1500 not found [ 190.421039][ T5706] Registered IR keymap rc-empty [ 190.442592][ T5706] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 190.447569][ T5714] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 190.447600][ T5714] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 190.455988][ T823] usb 3-1: USB disconnect, device number 27 [ 190.465286][ T7175] cdc_wdm 3-1:1.0: Error autopm - -16 [ 190.496132][ T5706] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input17 [ 190.536269][ T5706] dvb-usb: schedule remote query interval to 100 msecs. [ 190.536346][ T5706] pctv452e: pctv452e_power_ctrl: 0 [ 190.536346][ T5706] [ 190.536358][ T5706] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 190.583043][ T5706] usb 1-1: USB disconnect, device number 31 [ 190.993225][ T5706] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 191.089170][ T823] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 191.173977][ T7224] warning: `syz.0.485' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 191.182136][ T7224] afs: Unknown parameter 'dyn' [ 191.275364][ T5714] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 191.275398][ T5714] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 191.275416][ T5714] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 191.275707][ T5714] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 191.287765][ T5714] usb 2-1: USB disconnect, device number 27 [ 191.300558][ T823] usb 3-1: Using ep0 maxpacket: 16 [ 191.336046][ T823] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 191.336080][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 191.338620][ T823] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 191.338648][ T823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.338667][ T823] usb 3-1: Product: syz [ 191.338679][ T823] usb 3-1: Manufacturer: syz [ 191.338691][ T823] usb 3-1: SerialNumber: syz [ 191.421548][ T823] usb 3-1: config 0 descriptor?? [ 191.462511][ T823] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 191.462533][ T823] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 191.631830][ T5696] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 191.631868][ T5696] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 191.632503][ T5696] asix 4-1:0.188: probe with driver asix failed with error -71 [ 191.682480][ T5696] usb 4-1: USB disconnect, device number 29 [ 191.749125][ T5714] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 191.855070][ T38] audit: type=1326 audit(1777900321.526:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7227 comm="syz.1.487" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7efcdb59cdd9 code=0x0 [ 191.911802][ T5714] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 191.911833][ T5714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.922253][ T5714] usb 1-1: config 0 descriptor?? [ 192.038598][ T823] em28xx 3-1:0.0: chip ID is em2874 [ 192.198650][ T38] audit: type=1326 audit(1777900321.866:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7230 comm="syz.3.488" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faf0f62cdd9 code=0x0 [ 192.245283][ T5706] usb 3-1: USB disconnect, device number 28 [ 192.275676][ T5706] em28xx 3-1:0.0: Disconnecting em28xx [ 192.281954][ T5706] em28xx 3-1:0.0: Freeing device [ 193.134187][ T7248] FAULT_INJECTION: forcing a failure. [ 193.134187][ T7248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 193.135078][ T7248] CPU: 1 UID: 0 PID: 7248 Comm: syz.1.493 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 193.135103][ T7248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 193.135114][ T7248] Call Trace: [ 193.135122][ T7248] [ 193.135129][ T7248] dump_stack_lvl+0xe8/0x150 [ 193.135157][ T7248] should_fail_ex+0x46b/0x600 [ 193.135189][ T7248] _copy_to_iter+0x404/0x17d0 [ 193.135223][ T7248] ? rt_mutex_slowunlock+0x1cb/0x300 [ 193.135245][ T7248] ? __pfx__copy_to_iter+0x10/0x10 [ 193.135281][ T7248] seq_read_iter+0xbf6/0xe20 [ 193.135322][ T7248] seq_read+0x36a/0x490 [ 193.135352][ T7248] ? __pfx_seq_read+0x10/0x10 [ 193.135376][ T7248] ? __debugfs_file_get+0x5d5/0x710 [ 193.135398][ T7248] ? __pfx___debugfs_file_get+0x10/0x10 [ 193.135421][ T7248] ? apparmor_file_permission+0x1f4/0x300 [ 193.135453][ T7248] full_proxy_read+0x127/0x1f0 [ 193.135473][ T7248] ? __pfx_full_proxy_read+0x10/0x10 [ 193.135494][ T7248] vfs_read+0x212/0xa80 [ 193.135525][ T7248] ? __pfx_vfs_read+0x10/0x10 [ 193.135549][ T7248] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 193.135571][ T7248] ? lockdep_hardirqs_on+0x7a/0x110 [ 193.135594][ T7248] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 193.135617][ T7248] ? mutex_lock_nested+0x152/0x1d0 [ 193.135634][ T7248] ? fdget_pos+0x252/0x320 [ 193.135661][ T7248] ksys_read+0x156/0x270 [ 193.135684][ T7248] ? __pfx_ksys_read+0x10/0x10 [ 193.135712][ T7248] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.135731][ T7248] do_syscall_64+0x15f/0xf80 [ 193.135760][ T7248] ? clear_bhb_loop+0x40/0x90 [ 193.135783][ T7248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.135801][ T7248] RIP: 0033:0x7efcdb59cdd9 [ 193.135819][ T7248] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 193.135833][ T7248] RSP: 002b:00007efcd97ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 193.135854][ T7248] RAX: ffffffffffffffda RBX: 00007efcdb815fa0 RCX: 00007efcdb59cdd9 [ 193.135868][ T7248] RDX: 0000000000002020 RSI: 0000200000000480 RDI: 0000000000000006 [ 193.135879][ T7248] RBP: 00007efcd97ee090 R08: 0000000000000000 R09: 0000000000000000 [ 193.135890][ T7248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.135901][ T7248] R13: 00007efcdb816038 R14: 00007efcdb815fa0 R15: 00007ffda23963e8 [ 193.135931][ T7248] [ 193.889079][ T823] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 194.059409][ T823] usb 2-1: Using ep0 maxpacket: 8 [ 194.090860][ T823] usb 2-1: config 184 has an invalid descriptor of length 214, skipping remainder of the config [ 194.090888][ T823] usb 2-1: config 184 has 0 interfaces, different from the descriptor's value: 1 [ 194.093761][ T823] usb 2-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 194.093789][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.093806][ T823] usb 2-1: Product: syz [ 194.093819][ T823] usb 2-1: Manufacturer: syz [ 194.093832][ T823] usb 2-1: SerialNumber: syz [ 194.400277][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.400493][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.560707][ T38] audit: type=1326 audit(1777900324.236:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7225 comm="syz.0.486" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f094676cdd9 code=0x7fc00000 [ 194.723586][ T5714] usb 1-1: Cannot set autoneg [ 194.723818][ T5714] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 194.768928][ T5714] usb 1-1: USB disconnect, device number 32 [ 194.997456][ T7267] FAULT_INJECTION: forcing a failure. [ 194.997456][ T7267] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.997492][ T7267] CPU: 1 UID: 0 PID: 7267 Comm: syz.0.499 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 194.997512][ T7267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 194.997523][ T7267] Call Trace: [ 194.997530][ T7267] [ 194.997537][ T7267] dump_stack_lvl+0xe8/0x150 [ 194.997565][ T7267] should_fail_ex+0x46b/0x600 [ 194.997594][ T7267] _copy_from_iter+0x1d3/0x1670 [ 194.997629][ T7267] ? __pfx__copy_from_iter+0x10/0x10 [ 194.997650][ T7267] ? kasan_quarantine_put+0xbb/0x1f0 [ 194.997671][ T7267] ? lockdep_hardirqs_on+0x7a/0x110 [ 194.997700][ T7267] ? file_tty_write+0x32d/0xa10 [ 194.997729][ T7267] file_tty_write+0x4c9/0xa10 [ 194.997761][ T7267] vfs_write+0x629/0xba0 [ 194.997790][ T7267] ? __pfx_vfs_write+0x10/0x10 [ 194.997818][ T7267] ? __fget_files+0x2a/0x420 [ 194.997845][ T7267] ksys_write+0x156/0x270 [ 194.997890][ T7267] ? __pfx_ksys_write+0x10/0x10 [ 194.997918][ T7267] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.997938][ T7267] do_syscall_64+0x15f/0xf80 [ 194.997962][ T7267] ? clear_bhb_loop+0x40/0x90 [ 194.997984][ T7267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.998006][ T7267] RIP: 0033:0x7f094676cdd9 [ 194.998024][ T7267] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.998039][ T7267] RSP: 002b:00007f09449a5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 194.998061][ T7267] RAX: ffffffffffffffda RBX: 00007f09469e6090 RCX: 00007f094676cdd9 [ 194.998074][ T7267] RDX: 0000000000003f00 RSI: 0000000000000000 RDI: 0000000000000004 [ 194.998084][ T7267] RBP: 00007f09449a5090 R08: 0000000000000000 R09: 0000000000000000 [ 194.998096][ T7267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.998110][ T7267] R13: 00007f09469e6128 R14: 00007f09469e6090 R15: 00007ffeef267988 [ 194.998139][ T7267] [ 195.310143][ T5714] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 195.454554][ T7271] netlink: 128 bytes leftover after parsing attributes in process `syz.2.501'. [ 195.469309][ T5714] usb 4-1: Using ep0 maxpacket: 16 [ 195.479533][ T5714] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 195.479566][ T5714] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 195.514854][ T5714] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 195.514879][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.514898][ T5714] usb 4-1: Product: syz [ 195.514910][ T5714] usb 4-1: Manufacturer: syz [ 195.514923][ T5714] usb 4-1: SerialNumber: syz [ 195.577462][ T5714] usb 4-1: config 0 descriptor?? [ 195.605678][ T5714] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 195.605700][ T5714] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 195.875826][ T7277] syzkaller1: entered promiscuous mode [ 195.875855][ T7277] syzkaller1: entered allmulticast mode [ 195.969118][ T5719] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 196.194899][ T5714] em28xx 4-1:0.0: chip ID is em2874 [ 196.206488][ T5719] usb 3-1: unable to get BOS descriptor or descriptor too short [ 196.207866][ T5719] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 196.207901][ T5719] usb 3-1: can't read configurations, error -71 [ 196.418824][ T5720] usb 4-1: USB disconnect, device number 30 [ 196.432973][ T823] usb 2-1: USB disconnect, device number 28 [ 196.453031][ T5720] em28xx 4-1:0.0: Disconnecting em28xx [ 196.477963][ T5720] em28xx 4-1:0.0: Freeing device [ 196.528781][ T7281] syzkaller1: entered promiscuous mode [ 196.528802][ T7281] syzkaller1: entered allmulticast mode [ 196.599096][ T5706] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 196.750239][ T5706] usb 1-1: Using ep0 maxpacket: 8 [ 196.755625][ T5706] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 196.765159][ T5706] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 196.765186][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.765205][ T5706] usb 1-1: Product: syz [ 196.765217][ T5706] usb 1-1: Manufacturer: syz [ 196.765229][ T5706] usb 1-1: SerialNumber: syz [ 196.783942][ T5706] usb 1-1: config 0 descriptor?? [ 196.824685][ T5706] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 196.879198][ T823] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 197.030596][ T823] usb 2-1: Using ep0 maxpacket: 16 [ 197.047012][ T823] usb 2-1: config 3 has an invalid interface number: 114 but max is 0 [ 197.047039][ T823] usb 2-1: config 3 has no interface number 0 [ 197.047070][ T823] usb 2-1: config 3 interface 114 has no altsetting 0 [ 197.071738][ T823] usb 2-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice= d.d3 [ 197.071778][ T823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.071797][ T823] usb 2-1: Product: syz [ 197.071810][ T823] usb 2-1: Manufacturer: syz [ 197.071822][ T823] usb 2-1: SerialNumber: syz [ 197.306108][ T37] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 197.306599][ T5719] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 197.311468][ T823] gspca_main: sn9c2028-2.14.0 probing 0c45:800a [ 197.332861][ T823] gspca_sn9c2028: read1 error -71 [ 197.333269][ T823] gspca_sn9c2028: read1 error -71 [ 197.333656][ T823] gspca_sn9c2028: read1 error -71 [ 197.333743][ T823] sn9c2028 2-1:3.114: probe with driver sn9c2028 failed with error -71 [ 197.366447][ T823] usb 2-1: USB disconnect, device number 29 [ 197.488467][ T37] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 197.488490][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.488500][ T37] usb 4-1: Product: syz [ 197.488554][ T37] usb 4-1: Manufacturer: syz [ 197.488567][ T37] usb 4-1: SerialNumber: syz [ 197.527322][ T5719] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 197.527357][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.527376][ T5719] usb 3-1: Product: syz [ 197.527389][ T5719] usb 3-1: Manufacturer: syz [ 197.527401][ T5719] usb 3-1: SerialNumber: syz [ 197.937913][ T7287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.955735][ T7287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.976980][ T37] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 197.996522][ T5719] usblp 3-1:1.0: usblp1: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 198.394201][ T7285] FAULT_INJECTION: forcing a failure. [ 198.394201][ T7285] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 198.394235][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.2.506 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 198.394255][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 198.394265][ T7285] Call Trace: [ 198.394273][ T7285] [ 198.394280][ T7285] dump_stack_lvl+0xe8/0x150 [ 198.394311][ T7285] should_fail_ex+0x46b/0x600 [ 198.394339][ T7285] _copy_from_user+0x2d/0xb0 [ 198.394366][ T7285] kstrtouint_from_user+0xd6/0x180 [ 198.394390][ T7285] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 198.394426][ T7285] proc_fail_nth_write+0x8e/0x210 [ 198.394451][ T7285] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 198.394479][ T7285] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 198.394504][ T7285] vfs_write+0x2a3/0xba0 [ 198.394538][ T7285] ? __pfx_vfs_write+0x10/0x10 [ 198.394562][ T7285] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 198.394586][ T7285] ? lockdep_hardirqs_on+0x7a/0x110 [ 198.394609][ T7285] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 198.394632][ T7285] ? mutex_lock_nested+0x152/0x1d0 [ 198.394650][ T7285] ? fdget_pos+0x252/0x320 [ 198.394684][ T7285] ksys_write+0x156/0x270 [ 198.394712][ T7285] ? __pfx_ksys_write+0x10/0x10 [ 198.394745][ T7285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.394766][ T7285] do_syscall_64+0x15f/0xf80 [ 198.394788][ T7285] ? clear_bhb_loop+0x40/0x90 [ 198.394812][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.394830][ T7285] RIP: 0033:0x7fd478d0d60e [ 198.394848][ T7285] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 198.394863][ T7285] RSP: 002b:00007fd476fa5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 198.394885][ T7285] RAX: ffffffffffffffda RBX: 00007fd476fa66c0 RCX: 00007fd478d0d60e [ 198.394899][ T7285] RDX: 0000000000000001 RSI: 00007fd476fa60a0 RDI: 0000000000000004 [ 198.394910][ T7285] RBP: 00007fd476fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 198.394921][ T7285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 198.394931][ T7285] R13: 00007fd478fc6038 R14: 00007fd478fc5fa0 R15: 00007ffc2dad0338 [ 198.394959][ T7285] [ 198.524302][ T5714] usb 3-1: USB disconnect, device number 30 [ 198.707551][ T5714] usblp1: removed [ 198.891645][ T5706] gspca_zc3xx: reg_r err -71 [ 199.109397][ T5714] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 199.239087][ T5714] usb 3-1: device descriptor read/64, error -71 [ 199.592770][ T5714] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 199.613113][ T5706] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 199.613217][ T5706] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 199.656055][ T5706] usb 1-1: USB disconnect, device number 33 [ 199.760708][ T5714] usb 3-1: device descriptor read/64, error -71 [ 199.870688][ T5714] usb usb3-port1: attempt power cycle [ 200.006557][ T32] usb 4-1: USB disconnect, device number 31 [ 200.023886][ T32] usblp0: removed [ 200.089382][ T5706] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 200.221270][ T5714] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 200.241347][ T5714] usb 3-1: device descriptor read/8, error -71 [ 200.252239][ T5706] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 200.252268][ T5706] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.252285][ T5706] usb 1-1: Product: syz [ 200.252297][ T5706] usb 1-1: Manufacturer: syz [ 200.252310][ T5706] usb 1-1: SerialNumber: syz [ 200.483788][ T5714] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 200.506777][ T5714] usb 3-1: device descriptor read/8, error -71 [ 200.609894][ T5714] usb usb3-port1: unable to enumerate USB device [ 200.686069][ T7309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.686616][ T7309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.694819][ T5706] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 200.694881][ T5706] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 201.309858][ T5719] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 201.461042][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 201.461098][ T5719] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 201.461120][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.466183][ T5719] usb 4-1: config 0 descriptor?? [ 201.549049][ T7306] Bluetooth: hci0: command 0x0406 tx timeout [ 201.634050][ T7306] Bluetooth: hci2: command 0x0406 tx timeout [ 201.719226][ T7306] Bluetooth: hci1: command 0x0406 tx timeout [ 201.844871][ T5719] usbhid 4-1:0.0: can't add hid device: -71 [ 201.844994][ T5719] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 201.862882][ T5706] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 201.862952][ T5706] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 202.080032][ T5706] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 202.103027][ T5706] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 202.160148][ T5719] usb 4-1: USB disconnect, device number 32 [ 202.435869][ T7337] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 202.510082][ T5719] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 202.642262][ T5696] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 202.661350][ T5719] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.661394][ T5719] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 202.661407][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.666447][ T5719] usb 4-1: config 0 descriptor?? [ 202.797150][ T5696] usb 2-1: not running at top speed; connect to a high speed hub [ 202.810383][ T5696] usb 2-1: New USB device found, idVendor=0499, idProduct=1044, bcdDevice= 0.40 [ 202.810408][ T5696] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.810479][ T5696] usb 2-1: Product: syz [ 202.810491][ T5696] usb 2-1: Manufacturer: 䦪袩篛틚䞸蠖딭㠔爖腹馕Ᏽስྱ燌ꍡ頇㭝꒡㳕♣㸿䐵㎓踒י뵋썋녟ퟎₘ⠦뚅怣ⵕ꺠뼘掝鶁ť놉熧䵉␀훻埻聂鏅邮ᙗկ兂἗ᘜ鐪鴆㰌塀莢锽踉敖藅䜁镱쿂౪憩쳵覅䥙欶殶두ʷᕟ超㉺譻ꣀꅵᓒ늀눛푦핾倸婕㌙἗뜢ᗥ璇텥亐䶸ਅ阎栞䞧驌䳩냐顓ᡝㅏ挢앒꿕熟ÒԐ겻亶窃 [ 202.810516][ T5696] usb 2-1: SerialNumber: syz [ 202.966713][ T7345] FAULT_INJECTION: forcing a failure. [ 202.966713][ T7345] name failslab, interval 1, probability 0, space 0, times 0 [ 202.966747][ T7345] CPU: 1 UID: 0 PID: 7345 Comm: syz.2.527 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 202.966759][ T7345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 202.966766][ T7345] Call Trace: [ 202.966770][ T7345] [ 202.966779][ T7345] dump_stack_lvl+0xe8/0x150 [ 202.966811][ T7345] should_fail_ex+0x46b/0x600 [ 202.966840][ T7345] should_failslab+0xa8/0x100 [ 202.966869][ T7345] kmem_cache_alloc_noprof+0x87/0x680 [ 202.966890][ T7345] ? security_inode_alloc+0x39/0x310 [ 202.966912][ T7345] security_inode_alloc+0x39/0x310 [ 202.966926][ T7345] inode_init_always_gfp+0x99a/0xd50 [ 202.966945][ T7345] ? __pfx_sock_alloc_inode+0x10/0x10 [ 202.966962][ T7345] alloc_inode+0x82/0x1b0 [ 202.966988][ T7345] do_accept+0x147/0x930 [ 202.967010][ T7345] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 202.967034][ T7345] ? __pfx_do_accept+0x10/0x10 [ 202.967071][ T7345] __sys_accept4+0x139/0x230 [ 202.967084][ T7345] ? __pfx___sys_accept4+0x10/0x10 [ 202.967095][ T7345] ? __pfx_ksys_write+0x10/0x10 [ 202.967110][ T7345] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.967127][ T7345] __x64_sys_accept+0x7d/0x90 [ 202.967148][ T7345] do_syscall_64+0x15f/0xf80 [ 202.967170][ T7345] ? trace_irq_disable+0x3b/0x140 [ 202.967192][ T7345] ? clear_bhb_loop+0x40/0x90 [ 202.967214][ T7345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 202.967231][ T7345] RIP: 0033:0x7fd478d4cdd9 [ 202.967243][ T7345] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.967252][ T7345] RSP: 002b:00007fd476fa6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 202.967266][ T7345] RAX: ffffffffffffffda RBX: 00007fd478fc5fa0 RCX: 00007fd478d4cdd9 [ 202.967273][ T7345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 202.967281][ T7345] RBP: 00007fd476fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 202.967291][ T7345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 202.967302][ T7345] R13: 00007fd478fc6038 R14: 00007fd478fc5fa0 R15: 00007ffc2dad0338 [ 202.967330][ T7345] [ 203.199287][ T5719] usbhid 4-1:0.0: can't add hid device: -71 [ 203.199431][ T5719] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 203.206436][ T5696] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.207344][ T5719] usb 4-1: USB disconnect, device number 33 [ 203.209507][ T5696] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 203.221027][ T5696] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.223760][ T5696] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 203.281414][ T5696] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.331916][ T5720] usb 1-1: USB disconnect, device number 34 [ 203.466323][ T5696] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 203.483228][ T5696] usb 2-1: USB disconnect, device number 30 [ 203.523598][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 203.721650][ T5606] Bluetooth: hci2: unexpected event for opcode 0x1009 [ 203.829109][ T5720] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 203.974566][ T7359] FAULT_INJECTION: forcing a failure. [ 203.974566][ T7359] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 203.974594][ T7359] CPU: 1 UID: 0 PID: 7359 Comm: syz.1.531 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 203.974610][ T7359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 203.974618][ T7359] Call Trace: [ 203.974623][ T7359] [ 203.974629][ T7359] dump_stack_lvl+0xe8/0x150 [ 203.974651][ T7359] should_fail_ex+0x46b/0x600 [ 203.974673][ T7359] _copy_from_iter+0x1d3/0x1670 [ 203.974697][ T7359] ? trace_kmem_cache_alloc+0x29/0xe0 [ 203.974714][ T7359] ? __alloc_skb+0x27d/0x7d0 [ 203.974738][ T7359] ? __pfx__copy_from_iter+0x10/0x10 [ 203.974754][ T7359] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 203.974770][ T7359] ? __alloc_skb+0x27d/0x7d0 [ 203.974789][ T7359] ? netlink_sendmsg+0x650/0xb40 [ 203.974805][ T7359] ? skb_put+0x11b/0x210 [ 203.974824][ T7359] netlink_sendmsg+0x6c0/0xb40 [ 203.974847][ T7359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.974866][ T7359] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 203.974892][ T7359] ? aa_sock_msg_perm+0x122/0x200 [ 203.974913][ T7359] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.974930][ T7359] sock_sendmsg_nosec+0x112/0x150 [ 203.974958][ T7359] ____sys_sendmsg+0x55c/0x870 [ 203.974981][ T7359] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.975006][ T7359] ? import_iovec+0x73/0xa0 [ 203.975027][ T7359] ___sys_sendmsg+0x2a5/0x360 [ 203.975043][ T7359] ? __lock_acquire+0x6b5/0x2d10 [ 203.975070][ T7359] ? __pfx____sys_sendmsg+0x10/0x10 [ 203.975112][ T7359] ? __fget_files+0x2a/0x420 [ 203.975127][ T7359] ? __fget_files+0x3a6/0x420 [ 203.975152][ T7359] __x64_sys_sendmsg+0x1c3/0x2a0 [ 203.975170][ T7359] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 203.975193][ T7359] ? __pfx_ksys_write+0x10/0x10 [ 203.975216][ T7359] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.975231][ T7359] do_syscall_64+0x15f/0xf80 [ 203.975249][ T7359] ? trace_irq_disable+0x3b/0x140 [ 203.975267][ T7359] ? clear_bhb_loop+0x40/0x90 [ 203.975284][ T7359] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.975298][ T7359] RIP: 0033:0x7efcdb59cdd9 [ 203.975313][ T7359] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.975325][ T7359] RSP: 002b:00007efcd97ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.975344][ T7359] RAX: ffffffffffffffda RBX: 00007efcdb815fa0 RCX: 00007efcdb59cdd9 [ 203.975355][ T7359] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 203.975372][ T7359] RBP: 00007efcd97ee090 R08: 0000000000000000 R09: 0000000000000000 [ 203.975380][ T7359] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.975388][ T7359] R13: 00007efcdb816038 R14: 00007efcdb815fa0 R15: 00007ffda23963e8 [ 203.975409][ T7359] [ 203.994786][ T5720] usb 1-1: unable to get BOS descriptor or descriptor too short [ 203.995878][ T5720] usb 1-1: not running at top speed; connect to a high speed hub [ 204.006293][ T5720] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 204.006320][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.006337][ T5720] usb 1-1: Product: 㠁 [ 204.006349][ T5720] usb 1-1: SerialNumber: syz [ 204.319892][ T5720] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 204.480788][ T7368] netlink: 44 bytes leftover after parsing attributes in process `syz.2.534'. [ 204.522276][ T5720] usb 1-1: USB disconnect, device number 35 [ 204.569015][ T823] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 204.655818][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.701657][ T823] usb 2-1: device descriptor read/64, error -71 [ 204.949234][ T823] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 205.091191][ T823] usb 2-1: device descriptor read/64, error -71 [ 205.200763][ T823] usb usb2-port1: attempt power cycle [ 205.271938][ T5706] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 205.431350][ T5706] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 205.431398][ T5706] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 205.431419][ T5706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.438354][ T5706] usb 4-1: config 0 descriptor?? [ 205.565493][ T823] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 205.580295][ T823] usb 2-1: device descriptor read/8, error -71 [ 205.661170][ T5706] usbhid 4-1:0.0: can't add hid device: -71 [ 205.661291][ T5706] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 205.680180][ T5706] usb 4-1: USB disconnect, device number 34 [ 205.829003][ T823] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 205.849609][ T823] usb 2-1: device descriptor read/8, error -71 [ 205.859095][ T5720] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 205.970711][ T823] usb usb2-port1: unable to enumerate USB device [ 206.009027][ T5720] usb 3-1: Using ep0 maxpacket: 8 [ 206.011162][ T5720] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.011217][ T5720] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 206.011251][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.011275][ T5720] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 206.013454][ T5720] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 206.013482][ T5720] usb 3-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 206.013501][ T5720] usb 3-1: Product: syz [ 206.013514][ T5720] usb 3-1: Manufacturer: syz [ 206.013525][ T5720] usb 3-1: SerialNumber: syz [ 206.018380][ T5720] usb 3-1: config 0 descriptor?? [ 206.119403][ T5696] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 206.139732][ T5720] rc_core: IR keymap rc-imon-rsc not found [ 206.139746][ T5720] Registered IR keymap rc-empty [ 206.140886][ T5720] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 206.142960][ T5720] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input18 [ 206.145626][ T5720] imon_raw 3-1:0.0: probe with driver imon_raw failed with error -90 [ 206.282639][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.282685][ T5696] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 206.282697][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.292886][ T5696] usb 4-1: config 0 descriptor?? [ 206.681326][ T5706] usb 3-1: USB disconnect, device number 35 [ 206.737958][ T5696] usbhid 4-1:0.0: can't add hid device: -71 [ 206.738180][ T5696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 206.749267][ T5696] usb 4-1: USB disconnect, device number 35 [ 207.391591][ T7408] netlink: 132 bytes leftover after parsing attributes in process `syz.1.548'. [ 207.531006][ T5696] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 207.681619][ T5696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.681650][ T5696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.681683][ T5696] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 207.681695][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.685168][ T5696] usb 3-1: config 0 descriptor?? [ 207.909480][ T37] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 208.059231][ T37] usb 4-1: device descriptor read/64, error -71 [ 208.095141][ T5696] hid_parser_main: 17 callbacks suppressed [ 208.095168][ T5696] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 208.095201][ T5696] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 208.095228][ T5696] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 208.095254][ T5696] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 208.095282][ T5696] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 208.095308][ T5696] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 208.095332][ T5696] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 208.095357][ T5696] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 208.095382][ T5696] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 208.095407][ T5696] hid-picolcd 0003:04D8:C002.0006: unknown main item tag 0x0 [ 208.140243][ T7421] FAULT_INJECTION: forcing a failure. [ 208.140243][ T7421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 208.140276][ T7421] CPU: 0 UID: 0 PID: 7421 Comm: syz.1.552 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 208.140295][ T7421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 208.140306][ T7421] Call Trace: [ 208.140313][ T7421] [ 208.140320][ T7421] dump_stack_lvl+0xe8/0x150 [ 208.140346][ T7421] should_fail_ex+0x46b/0x600 [ 208.140374][ T7421] _copy_from_user+0x2d/0xb0 [ 208.140402][ T7421] kstrtouint_from_user+0xd6/0x180 [ 208.140459][ T7421] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 208.140497][ T7421] proc_fail_nth_write+0x8e/0x210 [ 208.140516][ T7421] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 208.140542][ T7421] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 208.140563][ T7421] vfs_write+0x2a3/0xba0 [ 208.140592][ T7421] ? __pfx_vfs_write+0x10/0x10 [ 208.140617][ T7421] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 208.140640][ T7421] ? lockdep_hardirqs_on+0x7a/0x110 [ 208.140662][ T7421] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 208.140687][ T7421] ? mutex_lock_nested+0x152/0x1d0 [ 208.140704][ T7421] ? fdget_pos+0x252/0x320 [ 208.140729][ T7421] ksys_write+0x156/0x270 [ 208.140755][ T7421] ? __pfx_ksys_write+0x10/0x10 [ 208.140784][ T7421] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.140803][ T7421] do_syscall_64+0x15f/0xf80 [ 208.140823][ T7421] ? trace_irq_disable+0x3b/0x140 [ 208.140845][ T7421] ? clear_bhb_loop+0x40/0x90 [ 208.140867][ T7421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.140884][ T7421] RIP: 0033:0x7efcdb55d60e [ 208.140902][ T7421] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 208.140916][ T7421] RSP: 002b:00007efcd97ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 208.140937][ T7421] RAX: ffffffffffffffda RBX: 00007efcd97cd6c0 RCX: 00007efcdb55d60e [ 208.140950][ T7421] RDX: 0000000000000001 RSI: 00007efcd97cd0a0 RDI: 0000000000000004 [ 208.140961][ T7421] RBP: 00007efcd97cd090 R08: 0000000000000000 R09: 0000000000000000 [ 208.140972][ T7421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 208.140982][ T7421] R13: 00007efcdb816128 R14: 00007efcdb816090 R15: 00007ffda23963e8 [ 208.141017][ T7421] [ 208.174576][ T5696] hid-picolcd 0003:04D8:C002.0006: No report with id 0x11 found [ 208.306384][ T5696] usb 3-1: USB disconnect, device number 36 [ 208.399036][ T37] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 208.561694][ T37] usb 4-1: device descriptor read/64, error -71 [ 208.670206][ T37] usb usb4-port1: attempt power cycle [ 208.825903][ T5696] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 208.973752][ T5696] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.973800][ T5696] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 208.973822][ T5696] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.979586][ T5696] usb 3-1: config 0 descriptor?? [ 209.009068][ T37] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 209.034336][ T37] usb 4-1: device descriptor read/8, error -71 [ 209.215106][ T5696] usbhid 3-1:0.0: can't add hid device: -71 [ 209.215221][ T5696] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 209.228139][ T5696] usb 3-1: USB disconnect, device number 37 [ 209.269145][ T37] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 209.290719][ T37] usb 4-1: device descriptor read/8, error -71 [ 209.407511][ T37] usb usb4-port1: unable to enumerate USB device [ 209.671046][ T37] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 209.829048][ T5714] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 209.831967][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 209.832003][ T37] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 209.832014][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.836317][ T37] usb 3-1: config 0 descriptor?? [ 209.989106][ T5714] usb 1-1: Using ep0 maxpacket: 16 [ 209.990968][ T5714] usb 1-1: config 4 has an invalid interface number: 209 but max is 0 [ 209.990993][ T5714] usb 1-1: config 4 has no interface number 0 [ 209.991025][ T5714] usb 1-1: config 4 interface 209 altsetting 5 bulk endpoint 0x4 has invalid maxpacket 8 [ 209.991037][ T5714] usb 1-1: config 4 interface 209 has no altsetting 0 [ 209.993376][ T5714] usb 1-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=75.db [ 209.993393][ T5714] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.993403][ T5714] usb 1-1: Product: syz [ 209.993410][ T5714] usb 1-1: Manufacturer: syz [ 209.993419][ T5714] usb 1-1: SerialNumber: syz [ 210.087230][ T7443] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 210.242438][ T37] usbhid 3-1:0.0: can't add hid device: -71 [ 210.242516][ T37] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 210.268084][ T37] usb 3-1: USB disconnect, device number 38 [ 210.318861][ T5714] aircable 1-1:4.209: aircable converter detected [ 210.328529][ T5714] usb 1-1: aircable converter now attached to ttyUSB0 [ 210.355701][ T5714] usb 1-1: USB disconnect, device number 36 [ 210.374533][ T5714] aircable ttyUSB0: aircable converter now disconnected from ttyUSB0 [ 210.375324][ T5714] aircable 1-1:4.209: device disconnected [ 210.739904][ T37] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 210.889022][ T37] usb 2-1: Using ep0 maxpacket: 16 [ 210.892446][ T37] usb 2-1: unable to get BOS descriptor or descriptor too short [ 210.893588][ T37] usb 2-1: config 1 has an invalid interface number: 183 but max is 0 [ 210.893612][ T37] usb 2-1: config 1 has no interface number 0 [ 210.893653][ T37] usb 2-1: config 1 interface 183 altsetting 6 bulk endpoint 0x85 has invalid maxpacket 1024 [ 210.893677][ T37] usb 2-1: config 1 interface 183 has no altsetting 0 [ 210.897446][ T37] usb 2-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=7c.05 [ 210.897472][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.897484][ T37] usb 2-1: Product: syz [ 210.897491][ T37] usb 2-1: Manufacturer: syz [ 210.897498][ T37] usb 2-1: SerialNumber: syz [ 210.986557][ T7451] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 211.157424][ T7466] batadv_slave_0: entered promiscuous mode [ 211.210245][ T5649] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 211.285210][ T37] opticon 2-1:1.183: opticon converter detected [ 211.335648][ T37] usb 2-1: opticon converter now attached to ttyUSB0 [ 211.347579][ T37] usb 2-1: USB disconnect, device number 35 [ 211.371327][ T5649] usb 1-1: Using ep0 maxpacket: 16 [ 211.385554][ T5649] usb 1-1: unable to get BOS descriptor or descriptor too short [ 211.387895][ T5649] usb 1-1: config 174 has an invalid interface number: 197 but max is 0 [ 211.387920][ T5649] usb 1-1: config 174 has no interface number 0 [ 211.387961][ T5649] usb 1-1: config 174 interface 197 has no altsetting 0 [ 211.428693][ T5649] usb 1-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=bd.a1 [ 211.428723][ T5649] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.428740][ T5649] usb 1-1: Product: 믆牻̏蜴ꋓ祴ꣽ랿ᶃ짎숛হ▣Ϙ蚇항얰癱爁Ղ㘭᪯璆ୟ媚驇⠠錼涀饁䭻ᰩꤑᄯꍳ酞썇㛘ᩕ [ 211.428758][ T5649] usb 1-1: Manufacturer: я [ 211.428772][ T5649] usb 1-1: SerialNumber: syz [ 211.481413][ T37] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 211.483167][ T37] opticon 2-1:1.183: device disconnected [ 211.649080][ T5696] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 211.799136][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 211.801409][ T5696] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 211.801431][ T5696] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.801441][ T5696] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.805790][ T5696] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.805808][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.805819][ T5696] usb 4-1: Product: syz [ 211.805826][ T5696] usb 4-1: Manufacturer: syz [ 211.805833][ T5696] usb 4-1: SerialNumber: syz [ 211.869357][ T7460] batadv_slave_0: left promiscuous mode [ 211.943659][ T5696] usb 4-1: 0:2 : does not exist [ 212.229051][ T5719] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 212.379067][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 212.384923][ T5719] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.404090][ T5719] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 212.404108][ T5719] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 212.404119][ T5719] usb 2-1: SerialNumber: syz [ 212.647700][ T5719] usb 2-1: 0:2 : does not exist [ 212.681139][ T5696] usb 4-1: USB disconnect, device number 40 [ 212.806451][ T5719] usb 2-1: 5:0: failed to get current value for ch 1 (-22) [ 212.822883][ T5719] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 212.891273][ T5719] usb 2-1: 5:0: cannot get min/max values for control 5 (id 5) [ 212.933646][ T5719] usb 2-1: USB disconnect, device number 36 [ 213.345895][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.1.572'. [ 213.459082][ T5696] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 213.609125][ T5696] usb 4-1: Using ep0 maxpacket: 16 [ 213.623746][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 213.623777][ T5696] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.623848][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 213.623887][ T5696] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 213.623907][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.633185][ T5696] usb 4-1: config 0 descriptor?? [ 213.840785][ T7473] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.843003][ T7473] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.023571][ T7461] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 214.050752][ T5696] usbhid 4-1:0.0: can't add hid device: -71 [ 214.050974][ T5696] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 214.175233][ T5696] usb 4-1: USB disconnect, device number 41 [ 214.412252][ T5649] peak_usb 1-1:174.197 can0: unable to request usb[type=0 value=1] err=-71 [ 214.412272][ T5649] peak_usb 1-1:174.197: unable to read PCAN-Chip USB firmware info (err -71) [ 214.534155][ T7488] Bluetooth: MGMT ver 1.23 [ 214.539075][ T823] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 214.686411][ T37] hid_parser_main: 424 callbacks suppressed [ 214.686436][ T37] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 214.686465][ T37] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 214.686490][ T37] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 214.686514][ T37] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 214.686538][ T37] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 214.686562][ T37] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 214.686587][ T37] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 214.686611][ T37] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 214.686636][ T37] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 214.686660][ T37] hid-generic 0006:0004:0009.0007: unknown main item tag 0x0 [ 214.703263][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 214.703308][ T823] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 214.703329][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.728066][ T823] usb 2-1: config 0 descriptor?? [ 214.869947][ T37] hid-generic 0006:0004:0009.0007: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 214.899480][ T5649] peak_usb 1-1:174.197: probe with driver peak_usb failed with error -71 [ 215.028373][ T823] usbhid 2-1:0.0: can't add hid device: -71 [ 215.028488][ T823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 215.043573][ T5649] usb 1-1: USB disconnect, device number 37 [ 215.095551][ T823] usb 2-1: USB disconnect, device number 37 [ 216.271464][ T823] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 216.423989][ T823] usb 2-1: Using ep0 maxpacket: 32 [ 216.443958][ T823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.443999][ T823] usb 2-1: New USB device found, idVendor=0911, idProduct=3333, bcdDevice= 0.40 [ 216.444010][ T823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.455703][ T823] usb 2-1: config 0 descriptor?? [ 216.905995][ T823] usbhid 2-1:0.0: can't add hid device: -71 [ 216.906135][ T823] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 216.925352][ T823] usb 2-1: USB disconnect, device number 38 [ 217.038788][ T7527] FAULT_INJECTION: forcing a failure. [ 217.038788][ T7527] name failslab, interval 1, probability 0, space 0, times 0 [ 217.038810][ T7527] CPU: 0 UID: 0 PID: 7527 Comm: syz.2.589 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 217.038822][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 217.038829][ T7527] Call Trace: [ 217.038833][ T7527] [ 217.038838][ T7527] dump_stack_lvl+0xe8/0x150 [ 217.038853][ T7527] should_fail_ex+0x46b/0x600 [ 217.038882][ T7527] should_failslab+0xa8/0x100 [ 217.038909][ T7527] kmem_cache_alloc_node_noprof+0x8f/0x6e0 [ 217.038934][ T7527] ? __alloc_skb+0x1d0/0x7d0 [ 217.038951][ T7527] ? lockdep_hardirqs_on+0x7a/0x110 [ 217.038977][ T7527] __alloc_skb+0x1d0/0x7d0 [ 217.038999][ T7527] alloc_skb_with_frags+0xc8/0x760 [ 217.039024][ T7527] ? rt_spin_unlock+0x160/0x200 [ 217.039037][ T7527] ? save_netdev_trace_buffer+0x4ba/0x5f0 [ 217.039055][ T7527] sock_alloc_send_pskb+0x884/0x9a0 [ 217.039072][ T7527] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 217.039091][ T7527] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 217.039106][ T7527] ? dev_getfirstbyhwtype+0x24/0x290 [ 217.039127][ T7527] ? dev_getfirstbyhwtype+0x24/0x290 [ 217.039141][ T7527] ? dev_getfirstbyhwtype+0x24/0x290 [ 217.039156][ T7527] ? dev_getfirstbyhwtype+0x250/0x290 [ 217.039173][ T7527] dgram_sendmsg+0x40a/0xe90 [ 217.039195][ T7527] ? __pfx_dgram_sendmsg+0x10/0x10 [ 217.039222][ T7527] ? __pfx_aa_sk_perm+0x10/0x10 [ 217.039250][ T7527] ? aa_sock_msg_perm+0x122/0x200 [ 217.039272][ T7527] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 217.039288][ T7527] sock_sendmsg_nosec+0x112/0x150 [ 217.039314][ T7527] __sys_sendto+0x402/0x590 [ 217.039336][ T7527] ? __pfx___sys_sendto+0x10/0x10 [ 217.039376][ T7527] ? exc_page_fault+0x6a/0xc0 [ 217.039400][ T7527] ? do_user_addr_fault+0xc6f/0x1340 [ 217.039426][ T7527] __x64_sys_sendto+0xde/0x100 [ 217.039447][ T7527] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.039466][ T7527] do_syscall_64+0x15f/0xf80 [ 217.039487][ T7527] ? trace_irq_disable+0x3b/0x140 [ 217.039501][ T7527] ? clear_bhb_loop+0x40/0x90 [ 217.039514][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.039524][ T7527] RIP: 0033:0x7fd478d0d60e [ 217.039535][ T7527] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 217.039543][ T7527] RSP: 002b:00007fd476fa4e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 217.039558][ T7527] RAX: ffffffffffffffda RBX: 00007fd476fa66c0 RCX: 00007fd478d0d60e [ 217.039565][ T7527] RDX: 0000000000000020 RSI: 00007fd476fa5000 RDI: 0000000000000004 [ 217.039572][ T7527] RBP: 0000000000000000 R08: 00007fd476fa4f04 R09: 000000000000000c [ 217.039578][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 217.039584][ T7527] R13: 00007fd476fa4f58 R14: 00007fd476fa5000 R15: 0000000000000000 [ 217.039598][ T7527] [ 217.173444][ T38] audit: type=1326 audit(1777900346.846:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7528 comm="syz.2.590" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd478d4cdd9 code=0x0 [ 217.249038][ T37] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 217.459009][ T37] usb 1-1: Using ep0 maxpacket: 32 [ 217.466233][ T37] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 217.466258][ T37] usb 1-1: config 0 has no interface number 0 [ 217.485255][ T37] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 217.485283][ T37] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.485302][ T37] usb 1-1: Product: syz [ 217.485313][ T37] usb 1-1: Manufacturer: syz [ 217.485326][ T37] usb 1-1: SerialNumber: syz [ 217.552472][ T37] usb 1-1: config 0 descriptor?? [ 217.871784][ T7536] batadv_slave_0: entered promiscuous mode [ 217.977217][ T37] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 217.977236][ T37] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 218.153226][ T7540] netlink: 'syz.2.594': attribute type 2 has an invalid length. [ 218.186336][ T7525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.188601][ T7525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.216803][ T7535] batadv_slave_0: left promiscuous mode [ 218.360088][ T7543] FAULT_INJECTION: forcing a failure. [ 218.360088][ T7543] name failslab, interval 1, probability 0, space 0, times 0 [ 218.360121][ T7543] CPU: 0 UID: 0 PID: 7543 Comm: syz.3.596 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 218.360142][ T7543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 218.360152][ T7543] Call Trace: [ 218.360164][ T7543] [ 218.360176][ T7543] dump_stack_lvl+0xe8/0x150 [ 218.360202][ T7543] should_fail_ex+0x46b/0x600 [ 218.360231][ T7543] should_failslab+0xa8/0x100 [ 218.360259][ T7543] __kvmalloc_node_noprof+0x170/0x8e0 [ 218.360284][ T7543] ? file_tty_write+0x2ec/0xa10 [ 218.360308][ T7543] ? _mutex_trylock_nest_lock+0x128/0x180 [ 218.360337][ T7543] file_tty_write+0x2ec/0xa10 [ 218.360372][ T7543] vfs_write+0x629/0xba0 [ 218.360406][ T7543] ? __pfx_vfs_write+0x10/0x10 [ 218.360436][ T7543] ? __fget_files+0x2a/0x420 [ 218.360462][ T7543] ksys_write+0x156/0x270 [ 218.360483][ T7543] ? __pfx_ksys_write+0x10/0x10 [ 218.360512][ T7543] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.360535][ T7543] do_syscall_64+0x15f/0xf80 [ 218.360557][ T7543] ? trace_irq_disable+0x3b/0x140 [ 218.360579][ T7543] ? clear_bhb_loop+0x40/0x90 [ 218.360602][ T7543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.360620][ T7543] RIP: 0033:0x7faf0f62cdd9 [ 218.360637][ T7543] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.360652][ T7543] RSP: 002b:00007faf0d87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 218.360674][ T7543] RAX: ffffffffffffffda RBX: 00007faf0f8a5fa0 RCX: 00007faf0f62cdd9 [ 218.360687][ T7543] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000003 [ 218.360698][ T7543] RBP: 00007faf0d87e090 R08: 0000000000000000 R09: 0000000000000000 [ 218.360709][ T7543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.360719][ T7543] R13: 00007faf0f8a6038 R14: 00007faf0f8a5fa0 R15: 00007ffceda874f8 [ 218.360750][ T7543] [ 219.286445][ T7590] FAULT_INJECTION: forcing a failure. [ 219.286445][ T7590] name failslab, interval 1, probability 0, space 0, times 0 [ 219.286479][ T7590] CPU: 1 UID: 0 PID: 7590 Comm: syz.3.599 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 219.286502][ T7590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 219.286513][ T7590] Call Trace: [ 219.286520][ T7590] [ 219.286527][ T7590] dump_stack_lvl+0xe8/0x150 [ 219.286555][ T7590] should_fail_ex+0x46b/0x600 [ 219.286584][ T7590] should_failslab+0xa8/0x100 [ 219.286608][ T7590] __kmalloc_node_track_caller_noprof+0xe2/0x7e0 [ 219.286631][ T7590] ? resume_store+0x14e/0x4f0 [ 219.286665][ T7590] kstrndup+0x80/0x160 [ 219.286685][ T7590] resume_store+0x14e/0x4f0 [ 219.286702][ T7590] ? sysfs_file_kobj+0x1a/0x230 [ 219.286733][ T7590] ? __pfx_resume_store+0x10/0x10 [ 219.286758][ T7590] ? sysfs_file_kobj+0x1a/0x230 [ 219.286780][ T7590] ? sysfs_file_kobj+0x1a/0x230 [ 219.286801][ T7590] ? sysfs_file_kobj+0x1a/0x230 [ 219.286825][ T7590] ? sysfs_file_kobj+0x1e4/0x230 [ 219.286850][ T7590] ? sysfs_kf_write+0x166/0x260 [ 219.286885][ T7590] ? __pfx_sysfs_kf_write+0x10/0x10 [ 219.286910][ T7590] kernfs_fop_write_iter+0x3b0/0x540 [ 219.286938][ T7590] vfs_write+0x629/0xba0 [ 219.286968][ T7590] ? __pfx_vfs_write+0x10/0x10 [ 219.286991][ T7590] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 219.287015][ T7590] ? lockdep_hardirqs_on+0x7a/0x110 [ 219.287041][ T7590] ? mutex_lock_nested+0x152/0x1d0 [ 219.287058][ T7590] ? fdget_pos+0x252/0x320 [ 219.287085][ T7590] ksys_write+0x156/0x270 [ 219.287107][ T7590] ? __pfx_ksys_write+0x10/0x10 [ 219.287137][ T7590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.287157][ T7590] do_syscall_64+0x15f/0xf80 [ 219.287182][ T7590] ? clear_bhb_loop+0x40/0x90 [ 219.287205][ T7590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.287223][ T7590] RIP: 0033:0x7faf0f62cdd9 [ 219.287240][ T7590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.287254][ T7590] RSP: 002b:00007faf0d85d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 219.287274][ T7590] RAX: ffffffffffffffda RBX: 00007faf0f8a6090 RCX: 00007faf0f62cdd9 [ 219.287289][ T7590] RDX: 0000000000000012 RSI: 0000200000000040 RDI: 0000000000000004 [ 219.287302][ T7590] RBP: 00007faf0d85d090 R08: 0000000000000000 R09: 0000000000000000 [ 219.287312][ T7590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.287322][ T7590] R13: 00007faf0f8a6128 R14: 00007faf0f8a6090 R15: 00007ffceda874f8 [ 219.287349][ T7590] [ 219.651168][ T7592] syzkaller1: entered promiscuous mode [ 219.651197][ T7592] syzkaller1: entered allmulticast mode [ 220.235653][ T7605] batadv_slave_0: entered promiscuous mode [ 220.245904][ T7604] batadv_slave_0: left promiscuous mode [ 220.445714][ T37] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 220.446000][ T37] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 220.516793][ T37] usb 1-1: USB disconnect, device number 38 [ 220.749908][ T5706] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 220.879162][ T5720] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 220.912791][ T5706] usb 2-1: Using ep0 maxpacket: 32 [ 220.925003][ T5706] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 220.925020][ T5706] usb 2-1: config 0 has no interface number 0 [ 220.925046][ T5706] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 220.927319][ T5706] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 220.927343][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.927353][ T5706] usb 2-1: Product: syz [ 220.927360][ T5706] usb 2-1: Manufacturer: syz [ 220.927373][ T5706] usb 2-1: SerialNumber: syz [ 220.937151][ T5706] usb 2-1: config 0 descriptor?? [ 220.967619][ T7615] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.090103][ T5720] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 221.090129][ T5720] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.113102][ T5720] usb 4-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice= 0.40 [ 221.113134][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.113151][ T5720] usb 4-1: Product: syz [ 221.113164][ T5720] usb 4-1: Manufacturer: syz [ 221.113176][ T5720] usb 4-1: SerialNumber: syz [ 221.237764][ T7615] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 221.394575][ T5720] usb 4-1: skipping empty audio interface (v1) [ 221.479017][ T5720] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 221.524075][ T5720] usb 4-1: USB disconnect, device number 42 [ 221.547397][ T5808] udevd[5808]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.109156][ T5720] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 222.254836][ T7615] netlink: 236 bytes leftover after parsing attributes in process `syz.1.607'. [ 222.254862][ T7615] netlink: 236 bytes leftover after parsing attributes in process `syz.1.607'. [ 222.286361][ T5720] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.286390][ T5720] usb 1-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 222.286417][ T5720] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 19125, setting to 1024 [ 222.286438][ T5720] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 222.286455][ T5720] usb 1-1: config 1 interface 1 has no altsetting 0 [ 222.338987][ T5720] usb 1-1: New USB device found, idVendor=1825, idProduct=a4a1, bcdDevice= 0.40 [ 222.339023][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.339041][ T5720] usb 1-1: Product: syz [ 222.339057][ T5720] usb 1-1: Manufacturer: syz [ 222.339070][ T5720] usb 1-1: SerialNumber: syz [ 222.746110][ T5720] usb 1-1: selecting invalid altsetting 0 [ 222.746156][ T5720] usb 1-1: selecting invalid altsetting 0 [ 222.746219][ T5720] cdc_ncm 1-1:1.0: bind() failure [ 222.791584][ T5720] usb 1-1: selecting invalid altsetting 0 [ 222.791630][ T5720] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -22 [ 222.792147][ T5720] usb 1-1: selecting invalid altsetting 0 [ 222.792183][ T5720] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -22 [ 222.823471][ T5720] usb 1-1: selecting invalid altsetting 0 [ 222.823508][ T5720] usbtest 1-1:1.1: probe with driver usbtest failed with error -22 [ 222.875318][ T5720] usb 1-1: USB disconnect, device number 39 [ 223.018158][ T7631] tmpfs: Bad value for 'mpol' [ 223.289101][ T5696] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 223.439955][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 223.452101][ T5696] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 223.452143][ T5696] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 223.452180][ T5696] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 223.452203][ T5696] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 223.452228][ T5696] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.515119][ T5696] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 223.515149][ T5696] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 223.515172][ T5696] usb 4-1: Product: syz [ 223.515184][ T5696] usb 4-1: Manufacturer: syz [ 223.515198][ T5696] usb 4-1: SerialNumber: syz [ 223.558060][ T5696] usb 4-1: config 0 descriptor?? [ 223.569168][ T5696] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 223.628746][ T5696] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 223.651027][ T5706] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 223.651056][ T5706] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 223.651320][ T5706] asix 2-1:0.188: probe with driver asix failed with error -71 [ 223.696500][ T5706] usb 2-1: USB disconnect, device number 39 [ 223.767971][ T5720] usb 4-1: USB disconnect, device number 43 [ 223.801683][ T5720] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 223.949203][ T5696] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 223.964698][ T7654] FAULT_INJECTION: forcing a failure. [ 223.964698][ T7654] name failslab, interval 1, probability 0, space 0, times 0 [ 223.964728][ T7654] CPU: 1 UID: 0 PID: 7654 Comm: syz.2.621 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 223.964745][ T7654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 223.964752][ T7654] Call Trace: [ 223.964759][ T7654] [ 223.964764][ T7654] dump_stack_lvl+0xe8/0x150 [ 223.964782][ T7654] should_fail_ex+0x46b/0x600 [ 223.964799][ T7654] should_failslab+0xa8/0x100 [ 223.964814][ T7654] __kmalloc_noprof+0xdf/0x7b0 [ 223.964826][ T7654] ? kfree+0x4d/0x6c0 [ 223.964836][ T7654] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 223.964853][ T7654] tomoyo_realpath_from_path+0xe3/0x5d0 [ 223.964868][ T7654] ? tomoyo_domain+0xd7/0x130 [ 223.964885][ T7654] tomoyo_path_perm+0x283/0x560 [ 223.964897][ T7654] ? tomoyo_path_perm+0x251/0x560 [ 223.964908][ T7654] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 223.964935][ T7654] ? hook_sb_umount+0x1e5/0x3b0 [ 223.964948][ T7654] ? __pfx_hook_sb_umount+0x10/0x10 [ 223.964961][ T7654] tomoyo_sb_umount+0xa4/0xf0 [ 223.964976][ T7654] ? __pfx_tomoyo_sb_umount+0x10/0x10 [ 223.964993][ T7654] ? bpf_lsm_capable+0x9/0x20 [ 223.965004][ T7654] ? security_capable+0x7e/0x2c0 [ 223.965019][ T7654] security_sb_umount+0xb3/0x260 [ 223.965035][ T7654] path_umount+0x36d/0xb40 [ 223.965051][ T7654] ? user_path_at+0xd4/0x160 [ 223.965067][ T7654] __x64_sys_umount+0x12a/0x170 [ 223.965082][ T7654] ? __pfx___x64_sys_umount+0x10/0x10 [ 223.965100][ T7654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.965111][ T7654] do_syscall_64+0x15f/0xf80 [ 223.965124][ T7654] ? trace_irq_disable+0x3b/0x140 [ 223.965137][ T7654] ? clear_bhb_loop+0x40/0x90 [ 223.965157][ T7654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.965168][ T7654] RIP: 0033:0x7fd478d4cdd9 [ 223.965178][ T7654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.965187][ T7654] RSP: 002b:00007fd476fa6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 223.965201][ T7654] RAX: ffffffffffffffda RBX: 00007fd478fc5fa0 RCX: 00007fd478d4cdd9 [ 223.965208][ T7654] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 223.965215][ T7654] RBP: 00007fd476fa6090 R08: 0000000000000000 R09: 0000000000000000 [ 223.965221][ T7654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.965231][ T7654] R13: 00007fd478fc6038 R14: 00007fd478fc5fa0 R15: 00007ffc2dad0338 [ 223.965250][ T7654] [ 223.965266][ T7654] ERROR: Out of memory at tomoyo_realpath_from_path. [ 224.129067][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 224.170654][ T5696] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 224.170681][ T5696] usb 1-1: config 179 has no interface number 0 [ 224.170734][ T5696] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 224.170759][ T5696] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 224.170783][ T5696] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 224.170805][ T5696] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 224.170830][ T5696] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 224.170870][ T5696] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 224.170895][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.334502][ T7650] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 224.593334][ T7666] FAULT_INJECTION: forcing a failure. [ 224.593334][ T7666] name failslab, interval 1, probability 0, space 0, times 0 [ 224.593368][ T7666] CPU: 1 UID: 0 PID: 7666 Comm: syz.3.626 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 224.593384][ T7666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 224.593391][ T7666] Call Trace: [ 224.593396][ T7666] [ 224.593401][ T7666] dump_stack_lvl+0xe8/0x150 [ 224.593427][ T7666] should_fail_ex+0x46b/0x600 [ 224.593456][ T7666] should_failslab+0xa8/0x100 [ 224.593480][ T7666] __kmalloc_cache_noprof+0x84/0x690 [ 224.593502][ T7666] ? resv_map_alloc+0x51/0x2e0 [ 224.593524][ T7666] ? rt_mutex_slowunlock+0x1cb/0x300 [ 224.593547][ T7666] resv_map_alloc+0x51/0x2e0 [ 224.593577][ T7666] hugetlbfs_get_inode+0x5d/0x650 [ 224.593603][ T7666] ? fput+0xa0/0xd0 [ 224.593616][ T7666] hugetlb_file_setup+0x21d/0x630 [ 224.593632][ T7666] ksys_mmap_pgoff+0x22e/0x720 [ 224.593651][ T7666] ? __x64_sys_mmap+0x7f/0x140 [ 224.593678][ T7666] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.593697][ T7666] do_syscall_64+0x15f/0xf80 [ 224.593719][ T7666] ? trace_irq_disable+0x3b/0x140 [ 224.593740][ T7666] ? clear_bhb_loop+0x40/0x90 [ 224.593762][ T7666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.593779][ T7666] RIP: 0033:0x7faf0f62cdd9 [ 224.593796][ T7666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.593815][ T7666] RSP: 002b:00007faf0d87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 224.593838][ T7666] RAX: ffffffffffffffda RBX: 00007faf0f8a5fa0 RCX: 00007faf0f62cdd9 [ 224.593847][ T7666] RDX: 0000000002000000 RSI: 0000000000003000 RDI: 0000200000f25000 [ 224.593854][ T7666] RBP: 00007faf0d87e090 R08: ffffffffffffffff R09: 0000000080000000 [ 224.593861][ T7666] R10: 000000000006e073 R11: 0000000000000246 R12: 0000000000000001 [ 224.593867][ T7666] R13: 00007faf0f8a6038 R14: 00007faf0f8a5fa0 R15: 00007ffceda874f8 [ 224.593889][ T7666] [ 224.739092][ T5706] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 224.757051][ T822] usb 1-1: USB disconnect, device number 40 [ 224.757177][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 224.757237][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 224.890038][ T5706] usb 2-1: Using ep0 maxpacket: 16 [ 224.893366][ T5706] usb 2-1: unable to get BOS descriptor or descriptor too short [ 224.894471][ T5706] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 224.894493][ T5706] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 224.897632][ T5706] usb 2-1: New USB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 224.897657][ T5706] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.897667][ T5706] usb 2-1: Product: syz [ 224.897674][ T5706] usb 2-1: Manufacturer: syz [ 224.897682][ T5706] usb 2-1: SerialNumber: syz [ 225.241725][ T5706] usb 2-1: 0:2 : does not exist [ 225.241803][ T5706] usb 2-1: unit 181 not found! [ 225.292200][ T5706] usb 2-1: USB disconnect, device number 40 [ 225.330577][ T823] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 225.340151][ T822] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 225.340796][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.435766][ T7675] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.436358][ T7675] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.482112][ T823] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11 [ 225.482133][ T823] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 225.482155][ T823] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 225.482166][ T823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.486271][ T823] usb 3-1: config 0 descriptor?? [ 225.500095][ T822] usb 4-1: Using ep0 maxpacket: 16 [ 225.502326][ T822] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 225.502350][ T822] usb 4-1: config 0 has no interface number 0 [ 225.502390][ T822] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 225.502411][ T822] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 225.502431][ T822] usb 4-1: config 0 interface 41 has no altsetting 0 [ 225.505345][ T822] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 225.505372][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.505390][ T822] usb 4-1: Product: syz [ 225.505403][ T822] usb 4-1: Manufacturer: syz [ 225.505416][ T822] usb 4-1: SerialNumber: syz [ 225.543781][ T822] usb 4-1: config 0 descriptor?? [ 225.564557][ T7668] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 225.564729][ T7668] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 225.766929][ T7668] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 225.767576][ T7668] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 225.769208][ T5696] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 225.919950][ T5696] usb 1-1: device descriptor read/64, error -71 [ 225.928135][ T823] hid_parser_main: 7 callbacks suppressed [ 225.928158][ T823] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 225.928188][ T823] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 225.928214][ T823] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 225.928240][ T823] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 225.928273][ T823] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 225.928294][ T823] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 225.928317][ T823] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 225.928342][ T823] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 225.928369][ T823] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 225.928398][ T823] kovaplus 0003:1E7D:2D50.0008: unknown main item tag 0x0 [ 225.933528][ T823] kovaplus 0003:1E7D:2D50.0008: item fetching failed at offset 167/235 [ 225.934320][ T823] kovaplus 0003:1E7D:2D50.0008: parse failed [ 225.934388][ T823] kovaplus 0003:1E7D:2D50.0008: probe with driver kovaplus failed with error -22 [ 226.159228][ T5696] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 226.304176][ T5696] usb 1-1: device descriptor read/64, error -71 [ 226.372717][ T7687] comedi comedi3: comedi_test: 10 microvolt, 2046 microsecond waveform attached [ 226.409663][ T5696] usb usb1-port1: attempt power cycle [ 226.448055][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.448575][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.656832][ T822] sr9700 4-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet, ae:07:9e:70:4c:78 [ 226.678261][ T822] usb 4-1: USB disconnect, device number 44 [ 226.688755][ T822] sr9700 4-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.3-1, CoreChip SR9700 USB Ethernet [ 226.771399][ T5696] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 226.792302][ T5696] usb 1-1: device descriptor read/8, error -71 [ 226.827509][ T7697] FAULT_INJECTION: forcing a failure. [ 226.827509][ T7697] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.827539][ T7697] CPU: 0 UID: 0 PID: 7697 Comm: syz.3.637 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 226.827556][ T7697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 226.827566][ T7697] Call Trace: [ 226.827571][ T7697] [ 226.827578][ T7697] dump_stack_lvl+0xe8/0x150 [ 226.827601][ T7697] should_fail_ex+0x46b/0x600 [ 226.827623][ T7697] _copy_from_user+0x2d/0xb0 [ 226.827643][ T7697] proc_ioctl_default+0x96/0x110 [ 226.827664][ T7697] ? __pfx_proc_ioctl_default+0x10/0x10 [ 226.827681][ T7697] ? lockdep_hardirqs_on+0x7a/0x110 [ 226.827700][ T7697] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 226.827719][ T7697] ? mutex_lock_nested+0x152/0x1d0 [ 226.827733][ T7697] ? usbdev_ioctl+0x14b/0x20c0 [ 226.827754][ T7697] usbdev_ioctl+0x1324/0x20c0 [ 226.827775][ T7697] ? __pfx_usbdev_ioctl+0x10/0x10 [ 226.827791][ T7697] ? __fget_files+0x2a/0x420 [ 226.827806][ T7697] ? __fget_files+0x3a6/0x420 [ 226.827819][ T7697] ? __fget_files+0x2a/0x420 [ 226.827835][ T7697] ? bpf_lsm_file_ioctl+0x9/0x20 [ 226.827858][ T7697] ? __pfx_usbdev_ioctl+0x10/0x10 [ 226.827875][ T7697] __se_sys_ioctl+0xff/0x170 [ 226.827907][ T7697] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.827925][ T7697] do_syscall_64+0x15f/0xf80 [ 226.827945][ T7697] ? trace_irq_disable+0x3b/0x140 [ 226.827964][ T7697] ? clear_bhb_loop+0x40/0x90 [ 226.827982][ T7697] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.828001][ T7697] RIP: 0033:0x7faf0f62cdd9 [ 226.828017][ T7697] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 226.828030][ T7697] RSP: 002b:00007faf0d87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 226.828050][ T7697] RAX: ffffffffffffffda RBX: 00007faf0f8a5fa0 RCX: 00007faf0f62cdd9 [ 226.828060][ T7697] RDX: 0000200000000240 RSI: 00000000c0105512 RDI: 0000000000000003 [ 226.828069][ T7697] RBP: 00007faf0d87e090 R08: 0000000000000000 R09: 0000000000000000 [ 226.828077][ T7697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.828085][ T7697] R13: 00007faf0f8a6038 R14: 00007faf0f8a5fa0 R15: 00007ffceda874f8 [ 226.828111][ T7697] [ 227.028992][ T5696] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 227.052434][ T5696] usb 1-1: device descriptor read/8, error -71 [ 227.161360][ T5696] usb usb1-port1: unable to enumerate USB device [ 227.760511][ T5696] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 227.922187][ T5696] usb 4-1: New USB device found, idVendor=0c45, idProduct=6280, bcdDevice=d5.fc [ 227.922217][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.971446][ T5696] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6280 [ 228.094710][ T822] usb 3-1: USB disconnect, device number 39 [ 228.470692][ T5696] gspca_sn9c20x: Write register 1001 failed -71 [ 228.470718][ T5696] gspca_sn9c20x: Device initialization failed [ 228.470798][ T5696] gspca_sn9c20x 4-1:252.0: probe with driver gspca_sn9c20x failed with error -71 [ 228.481792][ T5696] usb 4-1: USB disconnect, device number 45 [ 228.705842][ T7748] sg_write: data in/out 422876/114 bytes for SCSI command 0x0-- guessing data in; [ 228.705842][ T7748] program syz.0.652 not setting count and/or reply_len properly [ 228.959101][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 229.060538][ T823] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 229.110654][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 229.112469][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 229.112493][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 229.112513][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 229.112525][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.151480][ T9] usb 2-1: config 0 descriptor?? [ 229.186248][ T9] hub 2-1:0.0: USB hub found [ 229.211144][ T823] usb 1-1: config 0 has an invalid interface number: 48 but max is 0 [ 229.211172][ T823] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 229.211182][ T823] usb 1-1: config 0 has no interface number 0 [ 229.211199][ T823] usb 1-1: too many endpoints for config 0 interface 48 altsetting 49: 55, using maximum allowed: 30 [ 229.211260][ T823] usb 1-1: config 0 interface 48 altsetting 49 has 0 endpoint descriptors, different from the interface descriptor's value: 55 [ 229.211274][ T823] usb 1-1: config 0 interface 48 has no altsetting 0 [ 229.213641][ T823] usb 1-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 229.213659][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.213718][ T823] usb 1-1: Product: syz [ 229.213726][ T823] usb 1-1: Manufacturer: syz [ 229.213733][ T823] usb 1-1: SerialNumber: syz [ 229.228680][ T823] usb 1-1: config 0 descriptor?? [ 229.439101][ T822] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 229.492833][ T9] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 229.526991][ T823] cdc_subset 1-1:0.48: probe with driver cdc_subset failed with error -71 [ 229.546228][ T823] usb 1-1: USB disconnect, device number 45 [ 229.604487][ T822] usb 4-1: config 2 has an invalid interface number: 39 but max is 0 [ 229.604515][ T822] usb 4-1: config 2 has no interface number 0 [ 229.604572][ T822] usb 4-1: config 2 interface 39 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 64 [ 229.604595][ T822] usb 4-1: config 2 interface 39 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 229.604619][ T822] usb 4-1: config 2 interface 39 has no altsetting 0 [ 229.607439][ T822] usb 4-1: New USB device found, idVendor=fffd, idProduct=0100, bcdDevice=e4.9a [ 229.607468][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.607485][ T822] usb 4-1: Product: syz [ 229.607498][ T822] usb 4-1: Manufacturer: syz [ 229.607510][ T822] usb 4-1: SerialNumber: syz [ 229.698085][ T7754] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 229.738260][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 229.738372][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 229.761480][ T9] usb 2-1: USB disconnect, device number 41 [ 229.912388][ T7754] netlink: 'syz.3.655': attribute type 3 has an invalid length. [ 229.912461][ T7754] netlink: 3 bytes leftover after parsing attributes in process `syz.3.655'. [ 229.913876][ T7766] netlink: 'syz.3.655': attribute type 3 has an invalid length. [ 229.913889][ T7766] netlink: 3 bytes leftover after parsing attributes in process `syz.3.655'. [ 229.966015][ T822] usb 4-1: USB disconnect, device number 46 [ 230.136880][ T7772] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 230.139485][ T7772] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 230.552638][ T7785] FAULT_INJECTION: forcing a failure. [ 230.552638][ T7785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.554340][ T7785] CPU: 1 UID: 0 PID: 7785 Comm: syz.3.668 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 230.554379][ T7785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 230.554387][ T7785] Call Trace: [ 230.554393][ T7785] [ 230.554399][ T7785] dump_stack_lvl+0xe8/0x150 [ 230.554423][ T7785] should_fail_ex+0x46b/0x600 [ 230.554447][ T7785] _copy_from_iter+0x1d3/0x1670 [ 230.554474][ T7785] ? __pfx__copy_from_iter+0x10/0x10 [ 230.554490][ T7785] ? trace_kmalloc+0x2a/0xf0 [ 230.554511][ T7785] ? rcu_is_watching+0x15/0xb0 [ 230.554536][ T7785] file_tty_write+0x4c9/0xa10 [ 230.554564][ T7785] vfs_write+0x629/0xba0 [ 230.554589][ T7785] ? __pfx_vfs_write+0x10/0x10 [ 230.554615][ T7785] ? __fget_files+0x2a/0x420 [ 230.554638][ T7785] ksys_write+0x156/0x270 [ 230.554658][ T7785] ? __pfx_ksys_write+0x10/0x10 [ 230.554682][ T7785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.554696][ T7785] do_syscall_64+0x15f/0xf80 [ 230.554714][ T7785] ? trace_irq_disable+0x3b/0x140 [ 230.554733][ T7785] ? clear_bhb_loop+0x40/0x90 [ 230.554750][ T7785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.554764][ T7785] RIP: 0033:0x7faf0f62cdd9 [ 230.554779][ T7785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.554791][ T7785] RSP: 002b:00007faf0d87e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 230.554808][ T7785] RAX: ffffffffffffffda RBX: 00007faf0f8a5fa0 RCX: 00007faf0f62cdd9 [ 230.554829][ T7785] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000003 [ 230.554838][ T7785] RBP: 00007faf0d87e090 R08: 0000000000000000 R09: 0000000000000000 [ 230.554847][ T7785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.554854][ T7785] R13: 00007faf0f8a6038 R14: 00007faf0f8a5fa0 R15: 00007ffceda874f8 [ 230.554878][ T7785] [ 231.300653][ T822] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 231.361036][ T7798] can0: slcan on ptm0. [ 231.465531][ T822] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.465558][ T822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.465575][ T822] usb 2-1: config 0 has no interface number 0 [ 231.467626][ T822] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 231.467869][ T822] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 231.467891][ T822] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 231.467930][ T822] usb 2-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 231.467951][ T822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.555370][ T822] usb 2-1: config 0 descriptor?? [ 231.829030][ T5696] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 231.987225][ T5696] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 231.987253][ T5696] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.987271][ T5696] usb 3-1: Product: syz [ 231.987284][ T5696] usb 3-1: Manufacturer: syz [ 231.987297][ T5696] usb 3-1: SerialNumber: syz [ 232.271295][ T822] usbhid 2-1:0.1: can't add hid device: -71 [ 232.271419][ T822] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 232.306707][ T822] usb 2-1: USB disconnect, device number 42 [ 232.341992][ T7798] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 232.362218][ T7798] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 232.443053][ T5696] rtl8150 3-1:1.0: couldn't reset the device [ 232.443519][ T5696] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 232.474061][ T5696] usb 3-1: USB disconnect, device number 40 [ 232.867492][ T7797] can0 (unregistered): slcan off ptm0. [ 233.713394][ T5696] usb 3-1: new full-speed USB device number 41 using dummy_hcd [ 233.850920][ T5696] usb 3-1: device descriptor read/64, error -71 [ 234.089035][ T5696] usb 3-1: new full-speed USB device number 42 using dummy_hcd [ 234.219054][ T5696] usb 3-1: device descriptor read/64, error -71 [ 234.329801][ T5696] usb usb3-port1: attempt power cycle [ 234.414588][ T7874] nftables ruleset with unbound chain [ 234.420622][ T5720] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 234.571239][ T7882] blktrace: Concurrent blktraces are not allowed on nullb0 [ 234.597681][ T5720] usb 4-1: config 0 has an invalid interface number: 30 but max is 0 [ 234.597706][ T5720] usb 4-1: config 0 has no interface number 0 [ 234.597735][ T5720] usb 4-1: config 0 interface 30 has no altsetting 0 [ 234.627512][ T5720] usb 4-1: New USB device found, idVendor=06cd, idProduct=0109, bcdDevice=25.04 [ 234.627540][ T5720] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.627556][ T5720] usb 4-1: Product: syz [ 234.627567][ T5720] usb 4-1: Manufacturer: syz [ 234.627574][ T5720] usb 4-1: SerialNumber: syz [ 234.649012][ T823] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 234.669153][ T5696] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 234.670476][ T5720] usb 4-1: config 0 descriptor?? [ 234.693215][ T5696] usb 3-1: device descriptor read/8, error -71 [ 234.702587][ T5720] hub 4-1:0.30: bad descriptor, ignoring hub [ 234.702609][ T5720] hub 4-1:0.30: probe with driver hub failed with error -5 [ 234.703429][ T5720] keyspan 4-1:0.30: Keyspan - (without firmware) converter detected [ 234.821583][ T5714] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 234.851463][ T823] usb 1-1: unable to get BOS descriptor or descriptor too short [ 234.853457][ T823] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 234.853493][ T823] usb 1-1: can't read configurations, error -71 [ 234.939080][ T5696] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 234.961464][ T5696] usb 3-1: device descriptor read/8, error -71 [ 234.979028][ T5714] usb 2-1: Using ep0 maxpacket: 8 [ 234.983012][ T5714] usb 2-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 234.983039][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.983054][ T5714] usb 2-1: Product: syz [ 234.983061][ T5714] usb 2-1: Manufacturer: syz [ 234.983069][ T5714] usb 2-1: SerialNumber: syz [ 235.009483][ T5720] usb 4-1: USB disconnect, device number 47 [ 235.011433][ T5720] keyspan 4-1:0.30: device disconnected [ 235.071612][ T5696] usb usb3-port1: unable to enumerate USB device [ 235.199294][ T5714] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 235.199829][ T5714] usb 2-1: unit 3 not found! [ 235.199853][ T5714] usb 2-1: Focusrite Scarlett Gen 2 Mixer Driver enabled (pid=0x8204); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 235.199890][ T5714] usb 2-1: Error initialising Scarlett Gen 2 Mixer Driver: -22 [ 235.264052][ T5714] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 235.282444][ T5714] usb 2-1: USB disconnect, device number 43 [ 235.387978][ T5811] udevd[5811]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.685381][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.693'. [ 236.445415][ T7910] netlink: 'syz.1.702': attribute type 10 has an invalid length. [ 236.445552][ T7910] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 236.445564][ T7910] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 236.445830][ T7910] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 236.553480][ T7910] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 236.553502][ T7910] overlayfs: workdir and upperdir must be separate subtrees [ 237.119049][ T5706] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 237.155712][ T5714] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 237.284350][ T5706] usb 3-1: config 127 has an invalid interface number: 84 but max is 0 [ 237.284378][ T5706] usb 3-1: config 127 has no interface number 0 [ 237.307052][ T5706] usb 3-1: New USB device found, idVendor=040a, idProduct=0002, bcdDevice=9c.e5 [ 237.307185][ T5706] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.307205][ T5706] usb 3-1: Product: syz [ 237.307217][ T5706] usb 3-1: Manufacturer: syz [ 237.307230][ T5706] usb 3-1: SerialNumber: syz [ 237.324097][ T5714] usb 2-1: unable to get BOS descriptor or descriptor too short [ 237.326312][ T5714] usb 2-1: not running at top speed; connect to a high speed hub [ 237.361965][ T5714] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 175, changing to 4 [ 237.364238][ T5714] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice= 0.40 [ 237.364266][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.364282][ T5714] usb 2-1: Product: syz [ 237.364290][ T5714] usb 2-1: Manufacturer: syz [ 237.364296][ T5714] usb 2-1: SerialNumber: syz [ 237.664261][ T7924] kvm: user requested TSC rate below hardware speed [ 237.668090][ T5706] gspca_main: spca501-2.14.0 probing 040a:0002 [ 237.709012][ T5696] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 237.712903][ T5714] usb 2-1: selecting invalid altsetting 1 [ 237.735032][ T5714] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 237.750691][ T5714] usb 2-1: selecting invalid altsetting 1 [ 237.754916][ T5714] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 237.775716][ T5714] usb 2-1: selecting invalid altsetting 1 [ 237.864600][ T5696] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 237.864628][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.864645][ T5696] usb 4-1: Product: syz [ 237.864657][ T5696] usb 4-1: Manufacturer: syz [ 237.864668][ T5696] usb 4-1: SerialNumber: syz [ 237.902438][ T5696] usb 4-1: config 0 descriptor?? [ 237.952357][ T5714] snd-usb-audio 2-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 237.983453][ T5714] usb 2-1: USB disconnect, device number 44 [ 238.084041][ T7926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.084105][ T5767] udevd[5767]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 238.086022][ T7926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.131701][ T5706] gspca_spca501: reg write: error -71 [ 238.131720][ T5706] spca501 3-1:127.84: Reg write failed for 0x00,0x02,0x01 [ 238.131804][ T5706] spca501 3-1:127.84: probe with driver spca501 failed with error -22 [ 238.158246][ T5706] usb 3-1: USB disconnect, device number 45 [ 238.262781][ T5696] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 238.303309][ T5696] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 238.321598][ T5696] usb 4-1: USB disconnect, device number 48 [ 238.749082][ T823] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 238.749257][ T5714] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 238.779065][ T5696] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 238.899179][ T5714] usb 2-1: device descriptor read/64, error -71 [ 238.902119][ T823] usb 1-1: Using ep0 maxpacket: 8 [ 238.908230][ T823] usb 1-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 238.908260][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.908278][ T823] usb 1-1: Product: syz [ 238.908290][ T823] usb 1-1: Manufacturer: syz [ 238.908303][ T823] usb 1-1: SerialNumber: syz [ 238.923522][ T823] usb 1-1: config 0 descriptor?? [ 238.963523][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 238.963542][ T5696] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 238.966735][ T823] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 238.966833][ T823] pctv452e: pctv452e_power_ctrl: 1 [ 238.966833][ T823] [ 238.966876][ T823] usb 1-1: selecting invalid altsetting 3 [ 238.966889][ T823] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 238.966889][ T823] [ 238.966904][ T823] dvb-usb: bulk message failed: -22 (5/0) [ 238.972398][ T5696] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 238.972427][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.972444][ T5696] usb 4-1: Product: syz [ 238.972458][ T5696] usb 4-1: Manufacturer: syz [ 238.972471][ T5696] usb 4-1: SerialNumber: syz [ 238.990897][ T5696] usb 4-1: config 0 descriptor?? [ 239.065448][ T823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 239.068258][ T823] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 239.068312][ T823] usb 1-1: media controller created [ 239.068360][ T823] dvb-usb: bulk message failed: -22 (8/0) [ 239.068373][ T823] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 239.068423][ T823] dvb-usb: MAC address reading failed. [ 239.070268][ T5696] usb 4-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00 [ 239.108695][ T823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.163104][ T7960] FAULT_INJECTION: forcing a failure. [ 239.163104][ T7960] name failslab, interval 1, probability 0, space 0, times 0 [ 239.163139][ T7960] CPU: 1 UID: 0 PID: 7960 Comm: syz.0.716 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 239.163164][ T7960] Tainted: [L]=SOFTLOCKUP [ 239.163170][ T7960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 239.163188][ T7960] Call Trace: [ 239.163195][ T7960] [ 239.163203][ T7960] dump_stack_lvl+0xe8/0x150 [ 239.163232][ T7960] should_fail_ex+0x46b/0x600 [ 239.163261][ T7960] should_failslab+0xa8/0x100 [ 239.163283][ T7960] __kmalloc_cache_noprof+0x84/0x690 [ 239.163305][ T7960] ? pctv452e_i2c_msg+0xe0/0x5b0 [ 239.163329][ T7960] pctv452e_i2c_msg+0xe0/0x5b0 [ 239.163349][ T7960] ? lockdep_hardirqs_on+0x7a/0x110 [ 239.163371][ T7960] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 239.163395][ T7960] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 239.163419][ T7960] pctv452e_i2c_xfer+0x166/0x240 [ 239.163448][ T7960] __i2c_transfer+0x7a2/0x1f80 [ 239.163474][ T7960] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 239.163496][ T7960] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 239.163521][ T7960] ? i2c_transfer+0xc8/0x2d0 [ 239.163547][ T7960] i2c_transfer+0x1cc/0x2d0 [ 239.163574][ T7960] i2c_transfer_buffer_flags+0x10d/0x1a0 [ 239.163603][ T7960] ? __pfx_i2c_transfer_buffer_flags+0x10/0x10 [ 239.163633][ T7960] ? _copy_from_user+0x94/0xb0 [ 239.163661][ T7960] i2cdev_write+0x116/0x1e0 [ 239.163684][ T7960] ? __pfx_i2cdev_write+0x10/0x10 [ 239.163718][ T7960] vfs_write+0x2a3/0xba0 [ 239.163749][ T7960] ? __pfx_vfs_write+0x10/0x10 [ 239.163773][ T7960] ? __fget_files+0x2a/0x420 [ 239.163794][ T7960] ? __fget_files+0x2a/0x420 [ 239.163811][ T7960] ? __fget_files+0x3a6/0x420 [ 239.163828][ T7960] ? __fget_files+0x2a/0x420 [ 239.163853][ T7960] ksys_write+0x156/0x270 [ 239.163877][ T7960] ? __pfx_ksys_write+0x10/0x10 [ 239.163904][ T7960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.163924][ T7960] do_syscall_64+0x15f/0xf80 [ 239.163944][ T7960] ? trace_irq_disable+0x3b/0x140 [ 239.163967][ T7960] ? clear_bhb_loop+0x40/0x90 [ 239.163989][ T7960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.164006][ T7960] RIP: 0033:0x7f094676cdd9 [ 239.164024][ T7960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.164039][ T7960] RSP: 002b:00007f09449c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.164060][ T7960] RAX: ffffffffffffffda RBX: 00007f09469e5fa0 RCX: 00007f094676cdd9 [ 239.164073][ T7960] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 239.164083][ T7960] RBP: 00007f09449c6090 R08: 0000000000000000 R09: 0000000000000000 [ 239.164094][ T7960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.164105][ T7960] R13: 00007f09469e6038 R14: 00007f09469e5fa0 R15: 00007ffeef267988 [ 239.164135][ T7960] [ 239.179008][ T5714] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 239.328989][ T5714] usb 2-1: device descriptor read/64, error -71 [ 239.467224][ T5714] usb usb2-port1: attempt power cycle [ 239.496065][ T823] DVB: Unable to find symbol stb0899_attach() [ 239.496075][ T823] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 239.613739][ T5696] usb 4-1: USB disconnect, device number 49 [ 239.620391][ T823] rc_core: IR keymap rc-tt-1500 not found [ 239.620408][ T823] Registered IR keymap rc-empty [ 239.621934][ T823] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0 [ 239.625845][ T823] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.0/usb1/1-1/rc/rc0/input24 [ 239.671358][ T823] dvb-usb: schedule remote query interval to 100 msecs. [ 239.671379][ T823] pctv452e: pctv452e_power_ctrl: 0 [ 239.671379][ T823] [ 239.671390][ T823] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 239.677058][ T823] usb 1-1: USB disconnect, device number 48 [ 239.820353][ T5714] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 239.851497][ T5714] usb 2-1: device descriptor read/8, error -71 [ 240.018427][ T823] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 240.099060][ T5714] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 240.124624][ T5714] usb 2-1: device descriptor read/8, error -71 [ 240.232345][ T5714] usb usb2-port1: unable to enumerate USB device [ 240.264913][ T7981] netlink: 52 bytes leftover after parsing attributes in process `syz.3.722'. [ 240.389153][ T823] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 240.549002][ T822] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 240.567464][ T823] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.568011][ T823] usb 1-1: not running at top speed; connect to a high speed hub [ 240.579490][ T823] usb 1-1: config 127 has an invalid interface number: 243 but max is 0 [ 240.579516][ T823] usb 1-1: config 127 has no interface number 0 [ 240.579586][ T823] usb 1-1: config 127 interface 243 altsetting 217 endpoint 0xC has invalid wMaxPacketSize 0 [ 240.579607][ T823] usb 1-1: config 127 interface 243 has no altsetting 0 [ 240.583632][ T823] usb 1-1: New USB device found, idVendor=0e03, idProduct=c631, bcdDevice=b1.3c [ 240.583658][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.583676][ T823] usb 1-1: Product: syz [ 240.583688][ T823] usb 1-1: Manufacturer: syz [ 240.583701][ T823] usb 1-1: SerialNumber: syz [ 240.731784][ T822] usb 4-1: unable to get BOS descriptor or descriptor too short [ 240.733025][ T822] usb 4-1: config 0 has an invalid interface number: 86 but max is 0 [ 240.733048][ T822] usb 4-1: config 0 has no interface number 0 [ 240.733089][ T822] usb 4-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 240.733111][ T822] usb 4-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 240.733132][ T822] usb 4-1: config 0 interface 86 has no altsetting 0 [ 240.735823][ T822] usb 4-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 240.735849][ T822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.735867][ T822] usb 4-1: Product: syz [ 240.735879][ T822] usb 4-1: Manufacturer: syz [ 240.735892][ T822] usb 4-1: SerialNumber: syz [ 240.820141][ T822] usb 4-1: config 0 descriptor?? [ 240.823962][ T7984] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 240.824233][ T7984] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 240.858712][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.861072][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.870436][ T7975] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.872417][ T7975] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.893321][ T7987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.894247][ T7987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.071984][ T823] usb 1-1: USB disconnect, device number 49 [ 241.104489][ T822] omninet 4-1:0.86: ZyXEL - omni.net usb converter detected [ 241.201169][ T822] usb 4-1: ZyXEL - omni.net usb converter now attached to ttyUSB0 [ 241.204530][ T7992] netlink: 156 bytes leftover after parsing attributes in process `syz.0.725'. [ 241.210649][ T7992] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 241.210667][ T7992] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7992, name: syz.0.725 [ 241.210683][ T7992] preempt_count: 1, expected: 0 [ 241.210691][ T7992] RCU nest depth: 2, expected: 2 [ 241.210716][ T7992] 4 locks held by syz.0.725/7992: [ 241.210727][ T7992] #0: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: nf_hook+0xa1/0x3a0 [ 241.210785][ T7992] #1: ffffffff8e05f300 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 241.210832][ T7992] #2: ffffffff8e1c8180 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3c/0x420 [ 241.210878][ T7992] #3: ffff88803eedc8f0 (&cp->lock#2){+...}-{3:3}, at: ip_vs_conn_new+0x14fe/0x25f0 [ 241.210934][ T7992] Preemption disabled at: [ 241.210938][ T7992] [] hlist_bl_lock+0x18/0x110 [ 241.210972][ T7992] CPU: 0 UID: 0 PID: 7992 Comm: syz.0.725 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 241.210996][ T7992] Tainted: [L]=SOFTLOCKUP [ 241.211003][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 241.211013][ T7992] Call Trace: [ 241.211021][ T7992] [ 241.211029][ T7992] dump_stack_lvl+0xe8/0x150 [ 241.211055][ T7992] __might_resched+0x329/0x480 [ 241.211079][ T7992] ? hlist_bl_lock+0x18/0x110 [ 241.211105][ T7992] rt_spin_lock+0xc2/0x400 [ 241.211128][ T7992] ? __pfx_rt_spin_lock+0x10/0x10 [ 241.211146][ T7992] ? rcu_is_watching+0x15/0xb0 [ 241.211162][ T7992] ? __local_bh_disable_ip+0x3c/0x420 [ 241.211190][ T7992] ip_vs_conn_new+0x14fe/0x25f0 [ 241.211214][ T7992] ? ip_vs_ct_in_get+0x321/0x1350 [ 241.211241][ T7992] ? ip_vs_conn_new+0x1491/0x25f0 [ 241.211281][ T7992] ? __pfx_ip_vs_conn_new+0x10/0x10 [ 241.211310][ T7992] ? ip_vs_ct_in_get+0xab/0x1350 [ 241.211342][ T7992] ? ip_vs_dh_schedule+0x220/0x3a0 [ 241.211364][ T7992] ip_vs_schedule+0x10fd/0x1d70 [ 241.211400][ T7992] ? __pfx_ip_vs_schedule+0x10/0x10 [ 241.211422][ T7992] ? seqcount_lockdep_reader_access+0xea/0x100 [ 241.211452][ T7992] ? __ip_vs_svc_fwm_find+0x624/0x6b0 [ 241.211479][ T7992] ? ip_vs_service_find+0xbc/0x3c0 [ 241.211504][ T7992] udp_conn_schedule+0x391/0x7a0 [ 241.211534][ T7992] ? __pfx_udp_conn_schedule+0x10/0x10 [ 241.211570][ T7992] ip_vs_in_hook+0xc50/0x1bf0 [ 241.211597][ T7992] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 241.211633][ T7992] ? nf_hook+0xa1/0x3a0 [ 241.211654][ T7992] ? nf_hook+0xa1/0x3a0 [ 241.211676][ T7992] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 241.211695][ T7992] nf_hook_slow+0xc5/0x220 [ 241.211726][ T7992] ? __pfx_dst_output+0x10/0x10 [ 241.211748][ T7992] nf_hook+0x22a/0x3a0 [ 241.211772][ T7992] ? nf_hook+0xa1/0x3a0 [ 241.211793][ T7992] ? __pfx_nf_hook+0x10/0x10 [ 241.211817][ T7992] ? __pfx_dst_output+0x10/0x10 [ 241.211846][ T7992] ? __ip_local_out+0x152/0x6a0 [ 241.211871][ T7992] __ip_local_out+0x558/0x6a0 [ 241.211892][ T7992] ? __pfx_dst_output+0x10/0x10 [ 241.211917][ T7992] ip_local_out+0x2a/0x190 [ 241.211942][ T7992] ip_send_skb+0x45/0xc0 [ 241.211967][ T7992] udp_send_skb+0x7e4/0xf70 [ 241.212003][ T7992] udp_sendmsg+0x1937/0x21a0 [ 241.212045][ T7992] ? __pfx_udp_sendmsg+0x10/0x10 [ 241.212108][ T7992] ? __lock_acquire+0x6b5/0x2d10 [ 241.212139][ T7992] udpv6_sendmsg+0x996/0x25c0 [ 241.212172][ T7992] ? __lock_acquire+0x6b5/0x2d10 [ 241.212198][ T7992] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 241.212229][ T7992] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 241.212252][ T7992] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 241.212288][ T7992] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 241.212316][ T7992] ? inet_send_prepare+0x1b9/0x270 [ 241.212341][ T7992] ? inet6_sendmsg+0xe4/0x120 [ 241.212362][ T7992] ? __pfx_inet6_sendmsg+0x10/0x10 [ 241.212380][ T7992] sock_sendmsg_nosec+0x90/0x150 [ 241.212407][ T7992] ____sys_sendmsg+0x55c/0x870 [ 241.212434][ T7992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 241.212468][ T7992] ? import_iovec+0x73/0xa0 [ 241.212498][ T7992] ___sys_sendmsg+0x2a5/0x360 [ 241.212521][ T7992] ? __lock_acquire+0x6b5/0x2d10 [ 241.212550][ T7992] ? __pfx____sys_sendmsg+0x10/0x10 [ 241.212578][ T7992] ? futex_wait+0x2a2/0x390 [ 241.212624][ T7992] ? __fget_files+0x2a/0x420 [ 241.212642][ T7992] ? __fget_files+0x3a6/0x420 [ 241.212669][ T7992] __x64_sys_sendmsg+0x1c3/0x2a0 [ 241.212694][ T7992] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 241.212734][ T7992] ? rcu_is_watching+0x15/0xb0 [ 241.212761][ T7992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.212781][ T7992] do_syscall_64+0x15f/0xf80 [ 241.212804][ T7992] ? trace_irq_disable+0x3b/0x140 [ 241.212826][ T7992] ? clear_bhb_loop+0x40/0x90 [ 241.212849][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.212867][ T7992] RIP: 0033:0x7f094676cdd9 [ 241.212884][ T7992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.212899][ T7992] RSP: 002b:00007f09449a5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 241.212918][ T7992] RAX: ffffffffffffffda RBX: 00007f09469e6090 RCX: 00007f094676cdd9 [ 241.212932][ T7992] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000005 [ 241.212944][ T7992] RBP: 00007f0946802d69 R08: 0000000000000000 R09: 0000000000000000 [ 241.212956][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.212967][ T7992] R13: 00007f09469e6128 R14: 00007f09469e6090 R15: 00007ffeef267988 [ 241.212997][ T7992] [ 241.274451][ T822] usb 4-1: USB disconnect, device number 50 [ 241.778153][ T822] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0 [ 241.788246][ T822] omninet 4-1:0.86: device disconnected