last executing test programs: 4.77875534s ago: executing program 3 (id=437): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8183) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4.707701703s ago: executing program 3 (id=439): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet\x00', 0x1ff) 4.707459923s ago: executing program 1 (id=440): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x24}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, 0x0, 0x4004) 4.707293674s ago: executing program 3 (id=441): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x1440, 0x4) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000000)={0x9, 0x2a}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.640422517s ago: executing program 1 (id=442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000001c0)={0x18, 0x36, 0x200, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x100, 0x0, 0x0, @pid}]}, 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x4048045) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x80, 0x8000], 0x80a0000, 0x3c4210}) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x40000, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.638283637s ago: executing program 3 (id=443): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x40, 0x0) r0 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000140)={@desc={0x1, 0x1000000, @desc3}, 0x40, 0x0, '\x00', @b}) 4.619527887s ago: executing program 3 (id=444): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0x5002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x79, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0xeb, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x4, 0xc1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 4.579951069s ago: executing program 1 (id=445): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001000000") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) close(0x3) 4.57200925s ago: executing program 1 (id=446): keyctl$set_reqkey_keyring(0xe, 0x1) pipe(&(0x7f0000000040)) open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="201005080000f1"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.133646246s ago: executing program 2 (id=455): symlinkat(&(0x7f0000000180)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file7/file0\x00', 0x101000, 0x0) getdents64(r0, &(0x7f0000000240)=""/157, 0x9d) lseek(r0, 0xc6b95df, 0x4) 3.133148176s ago: executing program 2 (id=457): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001000000") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) close(0x3) 3.132861126s ago: executing program 2 (id=458): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000e0)='./sys/class/net/bridge0/bridge/max_age\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='600', 0x3) 3.092451748s ago: executing program 2 (id=459): socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 2.929272285s ago: executing program 3 (id=465): syz_usb_connect(0x0, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0xb0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) 2.059504085s ago: executing program 4 (id=475): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xf002, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x17, {[@global=@item_012={0x1, 0x1, 0x0, "01"}, @local=@item_012={0x1, 0x2, 0x2, "16"}, @local=@item_4={0x3, 0x2, 0x3, "523091c3"}, @local=@item_012={0x1, 0x2, 0x0, "04"}, @main=@item_4={0x3, 0x0, 0xb, "648bc08c"}, @local=@item_012={0x1, 0x2, 0x0, '^'}, @global=@item_012={0x1, 0x1, 0x2, "b8"}, @global=@item_012={0x1, 0x1, 0x8, "18"}, @local=@item_012={0x0, 0x2, 0x7}]}}, 0x0}, 0x0) 1.552756659s ago: executing program 4 (id=477): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x1440, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, &(0x7f0000000000)={0x9, 0x2a}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.552558439s ago: executing program 4 (id=478): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000380)={0x20, 0x1, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x82, 0x1, "9d"}, 0x0, 0x0, 0x0}) 1.552193368s ago: executing program 1 (id=479): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x24}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r1) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x402c041}, 0x4004) 1.495991651s ago: executing program 1 (id=480): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001000000") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/rfcomm0\x00', 0x802, 0x0) write(r1, &(0x7f0000000400)="abcd", 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x12, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) write(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)) r3 = socket$inet6(0xa, 0x3, 0xff) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000200)='\f', 0x1}], 0x1) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, 0x0, 0x0) 1.395064496s ago: executing program 2 (id=481): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001000000") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="abcd", 0x4) close(0x3) 1.362851928s ago: executing program 2 (id=482): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x80840, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d00000000000109022400010000000009040000010301020009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) close(0x4) 1.016082173s ago: executing program 4 (id=483): pipe(&(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) splice(r0, 0x0, r1, 0x0, 0x2, 0x0) 371.664103ms ago: executing program 0 (id=486): mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./sys_mount\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/block/loop0/queue/rotational\x00', 0x40402, 0x0) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/58, 0x3a}], 0x1) 335.658685ms ago: executing program 0 (id=487): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x8183) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 335.411055ms ago: executing program 0 (id=488): syz_pidfd_open(0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x0, 0x488, &(0x7f0000000080)={{0x6c, @loopback, 0x4e23, 0x2, 'nq\x00', 0x2a, 0x2, 0x76}, {@empty, 0x4e26, 0x4, 0x16, 0xffffffff, 0x4}}, 0x44) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 163.904313ms ago: executing program 4 (id=489): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x40440, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000080)=0x1440, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x4010aeaa, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 163.698833ms ago: executing program 4 (id=490): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x3, "", [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x4, 0x4, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xa7, 0xbc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 100.365726ms ago: executing program 0 (id=491): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x201, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x1, 0x0, @pic={0x3, 0x7, 0xe1, 0x81, 0x9, 0xf9, 0x40, 0x42, 0xfb, 0x8, 0xc, 0x0, 0xe9, 0x4, 0xf9, 0x38}}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f00000001c0)={0x18, 0x36, 0x200, 0x70bd2a, 0x25dfdbff, "", [@typed={0x8, 0x100, 0x0, 0x0, @pid}]}, 0x18}], 0x1, 0x0, 0x0, 0x10}, 0x4048045) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x80, 0x8000], 0x80a0000, 0x3c4210}) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x40000, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 63.619637ms ago: executing program 0 (id=492): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r0, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001000000") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000400)="abcd", 0x4) close(0x3) 0s ago: executing program 0 (id=493): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xb1, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000000000106b1d0101890f0000030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000b2406050001", @ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000380)={0x20, 0x1, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000008c0)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x82, 0x1, "9d"}, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): terface number: 41 but max is 0 [ 259.424781][ T320] usb 5-1: config 0 has no interface number 0 [ 259.431027][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.436731][ T39] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.441009][ T320] usb 5-1: config 0 interface 41 has no altsetting 0 [ 259.452087][ T39] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.458014][ T60] usb 2-1: Product: syz [ 259.471254][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 259.484307][ T60] usb 2-1: Manufacturer: syz [ 259.488974][ T60] usb 2-1: SerialNumber: syz [ 259.538412][ T60] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 259.556452][ T6] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 259.556492][ T39] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 259.565745][ T6] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 259.575486][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 259.582945][ T6] usb 4-1: Manufacturer: syz [ 259.591874][ T39] usb 3-1: SerialNumber: syz [ 259.599245][ T6] usb 4-1: config 0 descriptor?? [ 259.606453][ T306] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 259.616244][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.624342][ T306] usb 1-1: Product: syz [ 259.628681][ T306] usb 1-1: Manufacturer: syz [ 259.633418][ T306] usb 1-1: SerialNumber: syz [ 259.638995][ T306] usb 1-1: config 0 descriptor?? [ 259.648025][ T39] usb 3-1: 0:2 : does not exist [ 259.660174][ T320] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 259.669438][ T320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.677543][ T320] usb 5-1: Product: syz [ 259.681859][ T320] usb 5-1: Manufacturer: syz [ 259.686562][ T320] usb 5-1: SerialNumber: syz [ 259.687893][ T306] smsc75xx v1.0.0 [ 259.693483][ T320] usb 5-1: config 0 descriptor?? [ 259.766652][ T20] usb 2-1: USB disconnect, device number 2 [ 260.077718][ T6] appleir 0003:05AC:8243.0001: item fetching failed at offset 0/1 [ 260.085709][ T6] appleir 0003:05AC:8243.0001: parse failed [ 260.091784][ T6] appleir: probe of 0003:05AC:8243.0001 failed with error -22 [ 260.293839][ T290] usb 4-1: USB disconnect, device number 2 [ 260.346554][ T306] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 260.358046][ T306] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 260.586449][ T26] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 260.616605][ T320] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 260.626968][ T306] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 260.639669][ T306] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 260.649456][ T306] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 260.659057][ T306] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 260.667157][ T306] usb 1-1: USB disconnect, device number 2 [ 260.688646][ T39] usb 3-1: USB disconnect, device number 2 [ 260.809546][ T30] kauditd_printk_skb: 36 callbacks suppressed [ 260.809600][ T30] audit: type=1400 audit(1790103173.201:110): avc: denied { mount } for pid=352 comm="syz.3.14" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 260.838426][ T26] usb 2-1: Using ep0 maxpacket: 32 [ 260.844640][ T353] ======================================================= [ 260.844640][ T353] WARNING: The mand mount option has been deprecated and [ 260.844640][ T353] and is ignored by this kernel. Remove the mand [ 260.844640][ T353] option from the mount to silence this warning. [ 260.844640][ T353] ======================================================= [ 260.871721][ T30] audit: type=1400 audit(1790103173.231:111): avc: denied { mounton } for pid=354 comm="syz.2.15" path="/3/file0" dev="tmpfs" ino=34 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 260.904034][ T30] audit: type=1400 audit(1790103173.271:112): avc: denied { mount } for pid=352 comm="syz.3.14" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 260.926827][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 260.928274][ T30] audit: type=1400 audit(1790103173.291:113): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 260.976462][ T26] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.987560][ T26] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 261.000797][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 261.007455][ T26] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 261.015482][ T359] process 'syz.2.15' launched './file0' with NULL argv: empty string added [ 261.016732][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.034116][ T26] usb 2-1: config 0 descriptor?? [ 261.067105][ T30] audit: type=1400 audit(1790103173.461:114): avc: denied { read write } for pid=354 comm="syz.2.15" name="vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 261.090956][ T30] audit: type=1400 audit(1790103173.461:115): avc: denied { open } for pid=354 comm="syz.2.15" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 261.115065][ T30] audit: type=1400 audit(1790103173.461:116): avc: denied { ioctl } for pid=354 comm="syz.2.15" path="/dev/vhost-vsock" dev="devtmpfs" ino=264 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 261.150239][ T362] FAULT_INJECTION: forcing a failure. [ 261.150239][ T362] name failslab, interval 1, probability 0, space 0, times 0 [ 261.162941][ T362] CPU: 0 PID: 362 Comm: syz.0.17 Not tainted syzkaller #0 [ 261.170088][ T362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 261.180146][ T362] Call Trace: [ 261.183454][ T362] [ 261.186423][ T362] __dump_stack+0x21/0x30 [ 261.190766][ T362] dump_stack_lvl+0x110/0x170 [ 261.195444][ T362] ? show_regs_print_info+0x20/0x20 [ 261.200649][ T362] dump_stack+0x15/0x20 [ 261.204846][ T362] should_fail+0x3ab/0x500 [ 261.209374][ T362] __should_failslab+0xa4/0xe0 [ 261.214160][ T362] should_failslab+0x9/0x20 [ 261.218719][ T362] slab_pre_alloc_hook+0x39/0xd0 [ 261.223703][ T362] kmem_cache_alloc_trace+0x48/0x270 [ 261.226468][ T39] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 261.229012][ T362] ? allocate_cgrp_cset_links+0xdc/0x370 [ 261.242133][ T362] allocate_cgrp_cset_links+0xdc/0x370 [ 261.247608][ T362] find_css_set+0x93f/0x1560 [ 261.252231][ T362] ? cgroup_migrate_prepare_dst+0xa00/0xa00 [ 261.258162][ T362] ? __kasan_check_write+0x14/0x20 [ 261.263357][ T362] ? _raw_spin_lock_irq+0x95/0xf0 [ 261.268390][ T362] cgroup_migrate_prepare_dst+0xc4/0xa00 [ 261.274054][ T362] cgroup_attach_task+0x298/0x520 [ 261.279095][ T362] ? cgroup_migrate_execute+0xf80/0xf80 [ 261.284682][ T362] ? cgroup_attach_task+0x520/0x520 [ 261.289912][ T362] __cgroup1_procs_write+0x314/0x520 [ 261.295211][ T362] ? cgroup_pidlist_destroy_work_fn+0x220/0x220 [ 261.301466][ T362] ? __kasan_check_write+0x14/0x20 [ 261.306598][ T362] ? _copy_from_iter+0x4a4/0x10a0 [ 261.311636][ T362] cgroup1_procs_write+0x2a/0x40 [ 261.316609][ T362] ? cgroup_pidlist_stop+0x100/0x100 [ 261.321925][ T362] cgroup_file_write+0x294/0x560 [ 261.326885][ T362] ? cgroup_seqfile_stop+0xc0/0xc0 [ 261.332015][ T362] ? mutex_lock+0x9b/0x1c0 [ 261.336447][ T362] ? wait_for_completion_killable_timeout+0x10/0x10 [ 261.343312][ T362] ? __kasan_check_write+0x14/0x20 [ 261.348432][ T362] ? cgroup_seqfile_stop+0xc0/0xc0 [ 261.353549][ T362] kernfs_fop_write_iter+0x2bd/0x400 [ 261.358848][ T362] vfs_write+0x831/0xfd0 [ 261.363122][ T362] ? file_end_write+0x1b0/0x1b0 [ 261.367986][ T362] ? wait_for_completion_killable_timeout+0x10/0x10 [ 261.374606][ T362] ? __fget_files+0x2e1/0x340 [ 261.379310][ T362] ? __fdget_pos+0x2d2/0x380 [ 261.383910][ T362] ? ksys_write+0x70/0x260 [ 261.388332][ T362] ksys_write+0x14a/0x260 [ 261.392691][ T362] ? __ia32_sys_read+0x90/0x90 [ 261.397479][ T362] ? __kasan_check_write+0x14/0x20 [ 261.402592][ T362] ? switch_fpu_return+0x15d/0x2c0 [ 261.407708][ T362] __x64_sys_write+0x7b/0x90 [ 261.412303][ T362] x64_sys_call+0x8ef/0x9a0 [ 261.416818][ T362] do_syscall_64+0x4c/0xa0 [ 261.421255][ T362] ? clear_bhb_loop+0x50/0xa0 [ 261.426110][ T362] ? clear_bhb_loop+0x50/0xa0 [ 261.430839][ T362] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 261.436740][ T362] RIP: 0033:0x7f5e7791f159 [ 261.441158][ T362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 261.460776][ T362] RSP: 002b:00007f5e76378028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 261.469221][ T362] RAX: ffffffffffffffda RBX: 00007f5e77ba6fa0 RCX: 00007f5e7791f159 [ 261.476522][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 261.477294][ T362] RDX: 0000000000000015 RSI: 0000200000000640 RDI: 0000000000000004 [ 261.477311][ T362] RBP: 00007f5e779b606b R08: 0000000000000000 R09: 0000000000000000 [ 261.498430][ T362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.506444][ T362] R13: 00007f5e77ba7038 R14: 00007f5e77ba6fa0 R15: 00007fffc4e72a18 [ 261.514449][ T362] [ 261.519222][ T26] input: HID 0e8f:0012 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0E8F:0012.0002/input/input4 [ 261.533202][ T26] greenasia 0003:0E8F:0012.0002: input,hidraw0: USB HID v80.00 Joystick [HID 0e8f:0012] on usb-dummy_hcd.1-1/input0 [ 261.545874][ T26] greenasia 0003:0E8F:0012.0002: no output reports found [ 261.579186][ T30] audit: type=1400 audit(1790103173.971:117): avc: denied { create } for pid=364 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.605761][ T30] audit: type=1400 audit(1790103173.971:118): avc: denied { shutdown } for pid=364 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.626008][ T39] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 261.633450][ T30] audit: type=1400 audit(1790103173.971:119): avc: denied { read } for pid=364 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.649214][ T39] usb 4-1: config 0 has no interface number 0 [ 261.660862][ T39] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 261.671411][ T39] usb 4-1: config 0 interface 196 has no altsetting 0 [ 261.741024][ T26] usb 2-1: USB disconnect, device number 3 [ 261.751568][ T371] kvm: pic: single mode not supported [ 261.751873][ T371] kvm: pic: level sensitive irq not supported [ 261.757510][ T320] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 261.774456][ T320] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to power up PHY: -71 [ 261.778723][ T371] kvm: pic: level sensitive irq not supported [ 261.784371][ T320] CoreChips: probe of 5-1:0.41 failed with error -71 [ 261.785196][ T371] kvm: pic: single mode not supported [ 261.793237][ T320] usb 5-1: USB disconnect, device number 2 [ 261.797514][ T371] kvm: pic: level sensitive irq not supported [ 261.809082][ T371] kvm: pic: level sensitive irq not supported [ 261.815424][ T371] kvm: pic: single mode not supported [ 261.821687][ T371] kvm: pic: level sensitive irq not supported [ 261.829953][ T371] kvm: pic: single mode not supported [ 261.846515][ T39] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 261.861516][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.870224][ T39] usb 4-1: Product: syz [ 261.874654][ T39] usb 4-1: Manufacturer: syz [ 261.890902][ T39] usb 4-1: SerialNumber: syz [ 261.896803][ T39] usb 4-1: config 0 descriptor?? [ 261.916415][ T357] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 261.936011][ T376] loop4: detected capacity change from 0 to 2048 [ 261.956439][ T60] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 261.979130][ T376] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,max_dir_size_kb=0x0000000000000004,noquota,. Quota mode: none. [ 261.997990][ T376] EXT4-fs (loop4): shut down requested (1) [ 262.196396][ T348] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 262.206484][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 262.336422][ T60] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 262.346647][ T320] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 262.354271][ T60] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 262.376623][ T39] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: short packet: 0 bytes [ 262.385962][ T39] ipheth: probe of 4-1:0.196 failed with error -22 [ 262.436512][ T348] usb 3-1: Using ep0 maxpacket: 32 [ 262.526441][ T60] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 262.535720][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.544308][ T60] usb 1-1: Product: syz [ 262.548588][ T60] usb 1-1: Manufacturer: syz [ 262.553204][ T60] usb 1-1: SerialNumber: syz [ 262.582511][ T6] usb 4-1: USB disconnect, device number 3 [ 262.606390][ T320] usb 5-1: Using ep0 maxpacket: 8 [ 262.616837][ T348] usb 3-1: unable to get BOS descriptor or descriptor too short [ 262.696584][ T348] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 262.726465][ T320] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.736300][ T320] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.749368][ T320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 262.756119][ T320] usb 5-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 262.765227][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.773769][ T320] usb 5-1: config 0 descriptor?? [ 262.866454][ T348] usb 3-1: New USB device found, idVendor=2b73, idProduct=000a, bcdDevice= 0.40 [ 262.875604][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.884843][ T348] usb 3-1: Product: syz [ 262.886831][ T60] usb 1-1: 0:2 : does not exist [ 262.889495][ T348] usb 3-1: Manufacturer: syz [ 262.898635][ T348] usb 3-1: SerialNumber: syz [ 262.902048][ T60] usb 1-1: USB disconnect, device number 3 [ 263.107243][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 263.258181][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.265117][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.266835][ T348] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 263.272226][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.281824][ T348] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 263.287654][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.296857][ T348] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 263.302899][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.311692][ T348] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 263.318152][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.332800][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.339964][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.346889][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.353787][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.360710][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.367643][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 263.375255][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.383073][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.390093][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.397049][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.403959][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.406723][ T348] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 263.411935][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.424623][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.431703][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.438839][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.445721][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.452793][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.457852][ T348] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 263.460551][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.473583][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.479815][ T348] usb 3-1: USB disconnect, device number 3 [ 263.481051][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.493319][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.500624][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.508098][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.514976][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.521893][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.528793][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.535765][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.542689][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.549626][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.556599][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.563549][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.570494][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.578102][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.585007][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.592028][ T320] wacom 0003:056A:5002.0003: unknown main item tag 0x0 [ 263.600234][ T320] wacom 0003:056A:5002.0003: hidraw0: USB HID v0.05 Device [HID 056a:5002] on usb-dummy_hcd.4-1/input0 [ 263.611355][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 263.618430][ T320] usb 5-1: USB disconnect, device number 3 [ 263.636040][ T393] fido_id[393]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 263.656649][ T26] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 263.747204][ T337] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 263.766538][ T6] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 263.778676][ T6] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 263.791849][ T6] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 263.801343][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.814535][ T6] usb 4-1: config 0 descriptor?? [ 264.026432][ T26] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.036694][ T26] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.116453][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.116492][ T26] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 264.130065][ T337] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.140678][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 264.149225][ T337] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.155165][ T26] usb 1-1: SerialNumber: syz [ 264.168504][ T337] usb 2-1: New USB device found, idVendor=056a, idProduct=002a, bcdDevice= 0.00 [ 264.181253][ T337] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.190086][ T337] usb 2-1: config 0 descriptor?? [ 264.287302][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.294497][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.301795][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.310092][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.317282][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.324325][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.326440][ T306] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 264.332241][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.346056][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.358452][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.365622][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.374276][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.382356][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.389908][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.397074][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.412579][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.419925][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.428554][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.435708][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.443535][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.451278][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.458688][ T26] usb 1-1: 0:2 : does not exist [ 264.459095][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.471364][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.478786][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.482260][ T26] usb 1-1: USB disconnect, device number 4 [ 264.492024][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.506387][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.514657][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.523720][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.531048][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.538735][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.545723][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.561975][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.569322][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.576470][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.583584][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.598482][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.607473][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.614479][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.623985][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.631248][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.640510][ T6] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 264.649344][ T6] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 264.676430][ T6] lenovo 0003:17EF:6047.0004: Failed to switch F7/9/11 mode: -71 [ 264.684532][ T337] hid (null): report_id 3869346900 is invalid [ 264.695684][ T337] wacom 0003:056A:002A.0005: report_id 3869346900 is invalid [ 264.705953][ T337] wacom 0003:056A:002A.0005: item 0 4 1 8 parsing failed [ 264.706847][ T306] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.717037][ T337] wacom 0003:056A:002A.0005: parse failed [ 264.730747][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 264.746910][ T6] lenovo 0003:17EF:6047.0004: Failed to switch middle button: -71 [ 264.755147][ T337] wacom: probe of 0003:056A:002A.0005 failed with error -22 [ 264.766403][ T6] lenovo 0003:17EF:6047.0004: Fn-lock setting failed: -71 [ 264.796477][ T6] lenovo 0003:17EF:6047.0004: Sensitivity setting failed: -71 [ 264.809337][ T6] usb 4-1: USB disconnect, device number 4 [ 264.836534][ T468] fido_id[468]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 264.916466][ T306] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 264.925593][ T306] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.944613][ T306] usb 5-1: Product: syz [ 264.949017][ T306] usb 5-1: Manufacturer: syz [ 264.953643][ T306] usb 5-1: SerialNumber: syz [ 265.042296][ T390] loop1: detected capacity change from 0 to 32768 [ 265.097692][ T307] loop1: p1 p3 < p5 p6 > [ 265.103636][ T307] loop1: p5 size 65288 extends beyond EOD, truncated [ 265.110949][ T307] loop1: p6 start 4294446336 is beyond EOD, truncated [ 265.120174][ T390] loop1: p1 p3 < p5 p6 > [ 265.125607][ T390] loop1: p5 size 65288 extends beyond EOD, truncated [ 265.133167][ T390] loop1: p6 start 4294446336 is beyond EOD, truncated [ 265.140058][ T320] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 265.150733][ T39] usb 2-1: USB disconnect, device number 4 [ 265.326420][ T6] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 265.356463][ T337] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 265.466419][ T320] usb 3-1: not running at top speed; connect to a high speed hub [ 265.546570][ T320] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 265.557436][ T320] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 4 [ 265.596415][ T337] usb 4-1: Using ep0 maxpacket: 16 [ 265.696509][ T6] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 265.707527][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.718580][ T337] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 265.728891][ T320] usb 3-1: New USB device found, idVendor=2b73, idProduct=001b, bcdDevice= 0.40 [ 265.738023][ T6] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.747836][ T320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.755948][ T320] usb 3-1: Product: syz [ 265.760205][ T337] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 265.769129][ T6] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 265.783189][ T320] usb 3-1: Manufacturer: syz [ 265.787870][ T320] usb 3-1: SerialNumber: syz [ 265.816852][ T30] kauditd_printk_skb: 53 callbacks suppressed [ 265.816868][ T30] audit: type=1400 audit(1790103178.211:173): avc: denied { remount } for pid=486 comm="syz.1.46" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 265.817416][ T487] option changes via remount are deprecated (pid=486 comm=syz.1.46) [ 265.882229][ T30] audit: type=1400 audit(1790103178.271:174): avc: denied { mount } for pid=491 comm="syz.1.48" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 265.904559][ T6] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 265.906144][ T30] audit: type=1400 audit(1790103178.271:175): avc: denied { append } for pid=491 comm="syz.1.48" name="cpu_dma_latency" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 265.914905][ T6] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 265.941360][ T30] audit: type=1400 audit(1790103178.271:176): avc: denied { open } for pid=491 comm="syz.1.48" path="/7/dev/cpu_dma_latency" dev="devtmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pmqos_device_t tclass=chr_file permissive=1 [ 265.957307][ T337] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.979041][ T6] usb 1-1: Manufacturer: syz [ 265.985505][ T337] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.993769][ T30] audit: type=1400 audit(1790103178.371:177): avc: denied { mount } for pid=493 comm="syz.1.49" name="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 265.993961][ T6] usb 1-1: config 0 descriptor?? [ 266.020851][ T337] usb 4-1: Product: syz [ 266.025053][ T337] usb 4-1: Manufacturer: syz [ 266.029744][ T337] usb 4-1: SerialNumber: syz [ 266.076531][ T306] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 266.083070][ T306] cdc_ncm 5-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 266.090845][ T306] cdc_ncm 5-1:1.0: setting rx_max = 2048 [ 266.130578][ T30] audit: type=1400 audit(1790103178.521:178): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 266.150435][ T320] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 266.163741][ T497] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=56 sclass=netlink_tcpdiag_socket pid=497 comm=syz.1.50 [ 266.176434][ T320] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 266.191563][ T30] audit: type=1400 audit(1790103178.581:179): avc: denied { read } for pid=498 comm="syz.1.51" name="ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.214981][ T30] audit: type=1400 audit(1790103178.581:180): avc: denied { open } for pid=498 comm="syz.1.51" path="/dev/ptp0" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.217000][ T320] snd-usb-audio: probe of 3-1:1.0 failed with error -71 [ 266.241481][ T30] audit: type=1400 audit(1790103178.581:181): avc: denied { ioctl } for pid=498 comm="syz.1.51" path="/dev/ptp0" dev="devtmpfs" ino=260 ioctlcmd=0x3d0c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 266.262443][ T320] usb 3-1: USB disconnect, device number 4 [ 266.286471][ T306] cdc_ncm 5-1:1.0: setting tx_max = 16384 [ 266.296777][ T30] audit: type=1400 audit(1790103178.671:182): avc: denied { unlink } for pid=500 comm="syz.1.52" name="#1" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 266.317706][ T306] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM, 42:42:42:42:42:42 [ 266.348093][ T306] usb 5-1: USB disconnect, device number 4 [ 266.354229][ T306] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM [ 266.356795][ T337] usb 4-1: 0:2 : does not exist [ 266.378943][ T337] usb 4-1: USB disconnect, device number 5 [ 266.517121][ T6] appleir 0003:05AC:8243.0006: unknown main item tag 0x0 [ 266.524638][ T6] appleir 0003:05AC:8243.0006: No inputs registered, leaving [ 266.533550][ T6] appleir 0003:05AC:8243.0006: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 266.596407][ T20] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 266.604914][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 266.976442][ T20] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.987468][ T20] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.001124][ T20] usb 2-1: config 0 interface 0 has no altsetting 0 [ 267.007817][ T20] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 267.016966][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.025965][ T20] usb 2-1: config 0 descriptor?? [ 267.096568][ T348] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 267.156378][ T26] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 267.377697][ T39] usb 1-1: USB disconnect, device number 5 [ 267.456517][ T348] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 267.467733][ T348] usb 4-1: config 0 interface 0 has no altsetting 0 [ 267.474383][ T348] usb 4-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 267.483610][ T348] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.492510][ T348] usb 4-1: config 0 descriptor?? [ 267.516520][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.576467][ T20] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf3 found [ 267.584439][ T20] hid-picolcd 0003:04D8:F002.0007: No report with id 0xf4 found [ 267.686575][ T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 267.695709][ T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.703770][ T26] usb 5-1: Product: syz [ 267.707992][ T26] usb 5-1: Manufacturer: syz [ 267.712610][ T26] usb 5-1: SerialNumber: syz [ 267.726425][ C0] usb 2-1: input irq status -75 received [ 267.757834][ T26] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 267.876382][ T20] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 267.913334][ T6] usb 2-1: USB disconnect, device number 5 [ 267.967790][ T348] sony 0003:054C:0002.0008: not enough values in HID_OUTPUT_REPORT 0 field 0 [ 267.977323][ T348] sony 0003:054C:0002.0008: hidraw0: USB HID v0.04 Joystick [HID 054c:0002] on usb-dummy_hcd.3-1/input0 [ 267.987822][ T337] usb 5-1: USB disconnect, device number 5 [ 267.989366][ T348] sony 0003:054C:0002.0008: failed to claim input [ 268.172743][ T6] usb 4-1: USB disconnect, device number 6 [ 268.196415][ T306] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 268.246427][ T20] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 268.254687][ T20] usb 3-1: config 0 has no interface number 0 [ 268.260889][ T20] usb 3-1: config 0 interface 41 has no altsetting 0 [ 268.426466][ T20] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 268.435621][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.443725][ T20] usb 3-1: Product: syz [ 268.447998][ T20] usb 3-1: Manufacturer: syz [ 268.452596][ T20] usb 3-1: SerialNumber: syz [ 268.458106][ T20] usb 3-1: config 0 descriptor?? [ 268.566468][ T306] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 268.577380][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.588495][ T306] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.598286][ T306] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 268.686439][ T348] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 268.694077][ T306] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 268.703243][ T306] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 268.715826][ T306] usb 1-1: Manufacturer: syz [ 268.722019][ T306] usb 1-1: config 0 descriptor?? [ 268.766384][ T6] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 268.936424][ T348] usb 2-1: Using ep0 maxpacket: 16 [ 269.006376][ T6] usb 5-1: Using ep0 maxpacket: 32 [ 269.056449][ T348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.066648][ T348] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 269.136553][ T6] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.146766][ T348] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 269.147745][ T6] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 269.156927][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 269.170399][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 269.178085][ T348] usb 2-1: SerialNumber: syz [ 269.185144][ T6] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 269.198186][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.207893][ T6] usb 5-1: config 0 descriptor?? [ 269.237081][ T348] usb 2-1: 0:2 : does not exist [ 269.266442][ T306] usbhid 1-1:0.0: can't add hid device: -71 [ 269.272473][ T306] usbhid: probe of 1-1:0.0 failed with error -71 [ 269.281852][ T306] usb 1-1: USB disconnect, device number 6 [ 269.356422][ T20] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 269.746416][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 269.752428][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 269.760341][ T6] usb 5-1: USB disconnect, device number 6 [ 269.846489][ T20] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 269.857207][ T20] CoreChips 3-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 269.867016][ T20] CoreChips: probe of 3-1:0.41 failed with error -71 [ 269.874649][ T20] usb 3-1: USB disconnect, device number 5 [ 269.886462][ T348] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 269.895903][ T348] usb 2-1: USB disconnect, device number 6 [ 269.976408][ T337] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 270.097239][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 270.226677][ T613] Zero length message leads to an empty skb [ 270.346416][ T337] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.516430][ T337] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 270.525573][ T337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.533618][ T337] usb 1-1: Product: syz [ 270.537901][ T337] usb 1-1: Manufacturer: syz [ 270.542494][ T337] usb 1-1: SerialNumber: syz [ 270.587772][ T337] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 270.626425][ T39] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 270.676346][ T348] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 270.806915][ T20] usb 1-1: USB disconnect, device number 7 [ 270.926420][ T348] usb 2-1: Using ep0 maxpacket: 16 [ 270.946370][ T337] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 270.986435][ T39] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 270.997452][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.008454][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.018238][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 271.046549][ T348] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 271.056734][ T348] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 271.106429][ T39] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 271.115539][ T39] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 271.123907][ T39] usb 3-1: Manufacturer: syz [ 271.130339][ T39] usb 3-1: config 0 descriptor?? [ 271.136469][ T348] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 271.145685][ T348] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 271.154111][ T348] usb 2-1: SerialNumber: syz [ 271.196401][ T337] usb 4-1: Using ep0 maxpacket: 32 [ 271.198355][ T348] usb 2-1: 0:2 : does not exist [ 271.322387][ T337] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.333389][ T337] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.346654][ T337] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.353291][ T337] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 271.362659][ T337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.374680][ T337] usb 4-1: config 0 descriptor?? [ 271.476377][ T306] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 271.666481][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 271.672489][ T39] usbhid: probe of 3-1:0.0 failed with error -71 [ 271.679763][ T39] usb 3-1: USB disconnect, device number 6 [ 271.716406][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 271.806572][ T348] usb 2-1: 5:0: cannot get min/max values for control 3 (id 5) [ 271.818260][ T348] usb 2-1: USB disconnect, device number 7 [ 271.846487][ T306] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.857573][ T306] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 271.870456][ T306] usb 5-1: config 0 interface 0 has no altsetting 0 [ 271.877150][ T306] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 271.886179][ T306] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.895214][ T306] usb 5-1: config 0 descriptor?? [ 271.926522][ T337] usbhid 4-1:0.0: can't add hid device: -71 [ 271.932636][ T337] usbhid: probe of 4-1:0.0 failed with error -71 [ 271.941961][ T337] usb 4-1: USB disconnect, device number 7 [ 271.956409][ T26] usb 1-1: Using ep0 maxpacket: 32 [ 272.026984][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 272.076683][ T26] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 272.084945][ T26] usb 1-1: config 0 has no interface number 0 [ 272.091359][ T26] usb 1-1: config 0 interface 184 has no altsetting 0 [ 272.256455][ T26] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 272.265669][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.273861][ T26] usb 1-1: Product: syz [ 272.278250][ T26] usb 1-1: Manufacturer: syz [ 272.282868][ T26] usb 1-1: SerialNumber: syz [ 272.288745][ T26] usb 1-1: config 0 descriptor?? [ 272.324026][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 272.324041][ T30] audit: type=1400 audit(1790103184.711:197): avc: denied { read } for pid=675 comm="syz.1.114" dev="nsfs" ino=4026532372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 272.352249][ T30] audit: type=1400 audit(1790103184.711:198): avc: denied { open } for pid=675 comm="syz.1.114" path="net:[4026532372]" dev="nsfs" ino=4026532372 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 272.358313][ T26] smsc75xx v1.0.0 [ 272.448547][ T306] usbhid 5-1:0.0: can't add hid device: -71 [ 272.454740][ T306] usbhid: probe of 5-1:0.0 failed with error -71 [ 272.462737][ T306] usb 5-1: USB disconnect, device number 7 [ 272.526406][ T39] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 272.656371][ T337] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 272.886645][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.946373][ T306] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 273.016558][ T26] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 273.028331][ T26] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 273.046448][ T337] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 273.056600][ T26] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 273.057818][ T337] usb 4-1: config 0 interface 0 has no altsetting 0 [ 273.069291][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 273.075312][ T337] usb 4-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 273.084585][ T26] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 273.102931][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.110703][ T337] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.111024][ T39] usb 3-1: Product: syz [ 273.123621][ T39] usb 3-1: Manufacturer: syz [ 273.128299][ T39] usb 3-1: SerialNumber: syz [ 273.133058][ T26] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 273.133610][ T337] usb 4-1: config 0 descriptor?? [ 273.150824][ T26] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 273.160414][ T26] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 273.169034][ T26] usb 1-1: USB disconnect, device number 8 [ 273.188341][ T39] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 273.196426][ T306] usb 2-1: Using ep0 maxpacket: 32 [ 273.316525][ T306] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.327770][ T306] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.341228][ T306] usb 2-1: config 0 interface 0 has no altsetting 0 [ 273.347883][ T306] usb 2-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 273.357039][ T306] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.365830][ T306] usb 2-1: config 0 descriptor?? [ 273.407015][ T26] usb 3-1: USB disconnect, device number 7 [ 273.546458][ T505] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 273.686417][ T337] usbhid 4-1:0.0: can't add hid device: -71 [ 273.692429][ T337] usbhid: probe of 4-1:0.0 failed with error -71 [ 273.705587][ T337] usb 4-1: USB disconnect, device number 8 [ 273.896540][ T306] usbhid 2-1:0.0: can't add hid device: -71 [ 273.902756][ T306] usbhid: probe of 2-1:0.0 failed with error -71 [ 273.906673][ T505] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.912789][ T306] usb 2-1: USB disconnect, device number 8 [ 273.938193][ T505] usb 5-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.951205][ T505] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.957892][ T505] usb 5-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 273.967404][ T505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.976161][ T505] usb 5-1: config 0 descriptor?? [ 274.060404][ T26] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 274.316435][ T26] usb 1-1: Using ep0 maxpacket: 8 [ 274.386406][ T337] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 274.436430][ T26] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.446547][ T26] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.459427][ T306] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 274.466963][ T26] usb 1-1: config 0 interface 0 has no altsetting 0 [ 274.473612][ T26] usb 1-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 274.482741][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.491682][ T26] usb 1-1: config 0 descriptor?? [ 274.516412][ T505] usbhid 5-1:0.0: can't add hid device: -71 [ 274.522465][ T505] usbhid: probe of 5-1:0.0 failed with error -71 [ 274.529915][ T505] usb 5-1: USB disconnect, device number 8 [ 274.606384][ T6] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 274.626432][ T337] usb 3-1: Using ep0 maxpacket: 32 [ 274.746463][ T337] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 274.754694][ T337] usb 3-1: config 0 has no interface number 0 [ 274.760854][ T337] usb 3-1: config 0 interface 184 has no altsetting 0 [ 274.836440][ T306] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 274.844634][ T306] usb 4-1: config 0 has no interface number 0 [ 274.850928][ T306] usb 4-1: config 0 interface 41 has no altsetting 0 [ 274.926490][ T337] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 274.935666][ T337] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.948009][ T337] usb 3-1: Product: syz [ 274.952209][ T337] usb 3-1: Manufacturer: syz [ 274.957046][ T337] usb 3-1: SerialNumber: syz [ 274.964821][ T337] usb 3-1: config 0 descriptor?? [ 274.970065][ T6] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.016850][ T337] smsc75xx v1.0.0 [ 275.036428][ T26] usbhid 1-1:0.0: can't add hid device: -71 [ 275.042463][ T306] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 275.051643][ T26] usbhid: probe of 1-1:0.0 failed with error -71 [ 275.058281][ T306] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.067542][ T26] usb 1-1: USB disconnect, device number 9 [ 275.076821][ T306] usb 4-1: Product: syz [ 275.081062][ T306] usb 4-1: Manufacturer: syz [ 275.091525][ T306] usb 4-1: SerialNumber: syz [ 275.100409][ T306] usb 4-1: config 0 descriptor?? [ 275.136448][ T6] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 275.145661][ T6] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.154763][ T6] usb 2-1: Product: syz [ 275.159214][ T6] usb 2-1: Manufacturer: syz [ 275.163851][ T6] usb 2-1: SerialNumber: syz [ 275.208377][ T6] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 275.409474][ T26] usb 2-1: USB disconnect, device number 9 [ 275.506382][ T6] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 275.676469][ T337] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 275.691965][ T337] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 275.716476][ T337] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 275.727781][ T337] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 275.737541][ T337] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 275.747947][ T337] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 275.757447][ T337] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 275.771416][ T337] usb 3-1: USB disconnect, device number 8 [ 275.866434][ T6] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 275.877766][ T6] usb 5-1: config 0 interface 0 has no altsetting 0 [ 275.884374][ T6] usb 5-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 275.893513][ T6] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.902406][ T6] usb 5-1: config 0 descriptor?? [ 276.016457][ T306] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 276.056432][ T505] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 276.151875][ T837] FAULT_INJECTION: forcing a failure. [ 276.151875][ T837] name failslab, interval 1, probability 0, space 0, times 0 [ 276.164665][ T837] CPU: 0 PID: 837 Comm: syz.1.186 Not tainted syzkaller #0 [ 276.171897][ T837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 276.181987][ T837] Call Trace: [ 276.185295][ T837] [ 276.188249][ T837] __dump_stack+0x21/0x30 [ 276.192622][ T837] dump_stack_lvl+0x110/0x170 [ 276.197333][ T837] ? show_regs_print_info+0x20/0x20 [ 276.202569][ T837] ? file_end_write+0x1b0/0x1b0 [ 276.207567][ T837] dump_stack+0x15/0x20 [ 276.211755][ T837] should_fail+0x3ab/0x500 [ 276.216216][ T837] __should_failslab+0xa4/0xe0 [ 276.221061][ T837] should_failslab+0x9/0x20 [ 276.225581][ T837] slab_pre_alloc_hook+0x39/0xd0 [ 276.230554][ T837] ? prepare_creds+0x2f/0x610 [ 276.235296][ T837] kmem_cache_alloc+0x44/0x260 [ 276.240101][ T837] ? __put_user_ns+0x60/0x60 [ 276.244724][ T837] prepare_creds+0x2f/0x610 [ 276.249376][ T837] __sys_setuid+0x97/0x560 [ 276.253912][ T837] __x64_sys_setuid+0x37/0x40 [ 276.258612][ T837] x64_sys_call+0x602/0x9a0 [ 276.263144][ T837] do_syscall_64+0x4c/0xa0 [ 276.267605][ T837] ? clear_bhb_loop+0x50/0xa0 [ 276.272303][ T837] ? clear_bhb_loop+0x50/0xa0 [ 276.276993][ T837] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 276.282905][ T837] RIP: 0033:0x7fd460afe159 [ 276.287339][ T837] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 276.306970][ T837] RSP: 002b:00007fd45f557028 EFLAGS: 00000246 ORIG_RAX: 0000000000000069 [ 276.315409][ T837] RAX: ffffffffffffffda RBX: 00007fd460d85fa0 RCX: 00007fd460afe159 [ 276.323433][ T837] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000ee01 [ 276.331436][ T837] RBP: 00007fd460b9506b R08: 0000000000000000 R09: 0000000000000000 [ 276.339435][ T837] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 276.347426][ T837] R13: 00007fd460d86038 R14: 00007fd460d85fa0 R15: 00007ffe09a324c8 [ 276.355425][ T837] [ 276.476385][ T505] usb 1-1: Using ep0 maxpacket: 8 [ 276.576418][ T306] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 276.587239][ T306] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 276.596720][ T505] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.597126][ T306] CoreChips: probe of 4-1:0.41 failed with error -71 [ 276.607314][ T505] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 276.625775][ T306] usb 4-1: USB disconnect, device number 9 [ 276.626815][ T505] usb 1-1: config 0 interface 0 has no altsetting 0 [ 276.638645][ T505] usb 1-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 276.647820][ T6] usbhid 5-1:0.0: can't add hid device: -71 [ 276.653877][ T6] usbhid: probe of 5-1:0.0 failed with error -71 [ 276.660308][ T505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.672641][ T6] usb 5-1: USB disconnect, device number 9 [ 276.679280][ T505] usb 1-1: config 0 descriptor?? [ 276.696446][ T26] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 277.056448][ T26] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.216403][ T505] usbhid 1-1:0.0: can't add hid device: -71 [ 277.222556][ T505] usbhid: probe of 1-1:0.0 failed with error -71 [ 277.230315][ T505] usb 1-1: USB disconnect, device number 10 [ 277.236495][ T26] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 277.250866][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.259439][ T26] usb 2-1: Product: syz [ 277.264598][ T26] usb 2-1: Manufacturer: syz [ 277.269623][ T26] usb 2-1: SerialNumber: syz [ 277.337174][ T26] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 277.539106][ T26] usb 2-1: USB disconnect, device number 10 [ 277.586367][ T39] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 277.596828][ T320] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 277.946455][ T39] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.956669][ T505] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 277.957670][ T39] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 277.978226][ T39] usb 3-1: config 0 interface 0 has no altsetting 0 [ 277.986539][ T320] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 277.990640][ T39] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 278.006992][ T320] usb 5-1: config 0 interface 0 has no altsetting 0 [ 278.011038][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.014113][ T320] usb 5-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 278.031362][ T320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.043277][ T320] usb 5-1: config 0 descriptor?? [ 278.048962][ T39] usb 3-1: config 0 descriptor?? [ 278.207091][ T901] FAULT_INJECTION: forcing a failure. [ 278.207091][ T901] name fail_futex, interval 1, probability 0, space 0, times 1 [ 278.220199][ T901] CPU: 0 PID: 901 Comm: syz.3.214 Not tainted syzkaller #0 [ 278.227425][ T901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 278.237584][ T901] Call Trace: [ 278.240866][ T901] [ 278.243808][ T901] __dump_stack+0x21/0x30 [ 278.248140][ T901] dump_stack_lvl+0x110/0x170 [ 278.252838][ T901] ? show_regs_print_info+0x20/0x20 [ 278.258034][ T901] dump_stack+0x15/0x20 [ 278.262196][ T901] should_fail+0x3ab/0x500 [ 278.266668][ T901] get_futex_key+0x6ee/0xb60 [ 278.271276][ T901] ? futex_wait_restart+0x250/0x250 [ 278.276481][ T901] ? dequeue_task_fair+0x75f/0x1e40 [ 278.281701][ T901] futex_wake+0x133/0x8f0 [ 278.286033][ T901] ? __kasan_check_write+0x14/0x20 [ 278.291150][ T901] ? futex_wait+0x8f0/0x8f0 [ 278.295656][ T901] do_futex+0xd8d/0x2800 [ 278.299901][ T901] ? __schedule+0xbd7/0x14a0 [ 278.304501][ T901] ? release_firmware_map_entry+0x190/0x190 [ 278.310417][ T901] ? futex_exit_release+0x1e0/0x1e0 [ 278.315661][ T901] ? plist_add+0x3e6/0x470 [ 278.320108][ T901] ? __kasan_check_read+0x11/0x20 [ 278.325140][ T901] ? plist_check_list+0x255/0x270 [ 278.330187][ T901] ? __kasan_check_write+0x14/0x20 [ 278.335306][ T901] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 278.340794][ T901] ? _raw_spin_lock+0xf0/0xf0 [ 278.345503][ T901] ? perf_lock_task_context+0x3fd/0x4c0 [ 278.351052][ T901] ? __kasan_check_read+0x11/0x20 [ 278.356081][ T901] ? perf_event_exit_event+0x530/0x530 [ 278.361607][ T901] ? mutex_unlock+0x8f/0x230 [ 278.366472][ T901] ? __kasan_check_write+0x14/0x20 [ 278.371608][ T901] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 278.377153][ T901] ? _raw_spin_lock+0xf0/0xf0 [ 278.381897][ T901] ? __kasan_check_read+0x11/0x20 [ 278.387019][ T901] ? perf_event_exit_task+0x86a/0x880 [ 278.392401][ T901] ? uprobe_free_utask+0x83/0x160 [ 278.397434][ T901] mm_release+0x203/0x360 [ 278.401773][ T901] ? exit_mm_release+0x30/0x30 [ 278.406557][ T901] ? futex_exit_release+0x119/0x1e0 [ 278.411794][ T901] exit_mm_release+0x25/0x30 [ 278.416484][ T901] do_exit+0x644/0x29a0 [ 278.420647][ T901] ? put_task_struct+0x90/0x90 [ 278.425408][ T901] ? kstrtouint_from_user+0x1c4/0x220 [ 278.430788][ T901] ? kstrtol_from_user+0x2a0/0x2a0 [ 278.435897][ T901] ? __kasan_check_write+0x14/0x20 [ 278.441013][ T901] ? _raw_spin_lock_irq+0x95/0xf0 [ 278.446040][ T901] do_group_exit+0x149/0x310 [ 278.450685][ T901] ? __kasan_check_write+0x14/0x20 [ 278.455813][ T901] ? recalc_sigpending+0x1ac/0x230 [ 278.460926][ T901] get_signal+0x64f/0x1430 [ 278.465373][ T901] arch_do_signal_or_restart+0xe2/0x1100 [ 278.471038][ T901] ? file_end_write+0x1b0/0x1b0 [ 278.475898][ T901] ? __fget_files+0x2e1/0x340 [ 278.480584][ T901] ? get_sigframe_size+0x10/0x10 [ 278.485545][ T901] ? __se_sys_futex+0x135/0x330 [ 278.490399][ T901] ? __ia32_sys_read+0x90/0x90 [ 278.495169][ T901] exit_to_user_mode_loop+0xa7/0xe0 [ 278.500380][ T901] exit_to_user_mode_prepare+0x87/0xd0 [ 278.505853][ T901] syscall_exit_to_user_mode+0x1a/0x30 [ 278.511312][ T901] do_syscall_64+0x58/0xa0 [ 278.515730][ T901] ? clear_bhb_loop+0x50/0xa0 [ 278.520407][ T901] ? clear_bhb_loop+0x50/0xa0 [ 278.525116][ T901] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 278.531027][ T901] RIP: 0033:0x7f2df8dca159 [ 278.535461][ T901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.555149][ T901] RSP: 002b:00007f2df78230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 278.563599][ T901] RAX: fffffffffffffe00 RBX: 00007f2df9051fa8 RCX: 00007f2df8dca159 [ 278.571716][ T901] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2df9051fa8 [ 278.579728][ T901] RBP: 00007f2df9051fa0 R08: 0000000000000000 R09: 0000000000000000 [ 278.587722][ T901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.595708][ T901] R13: 00007f2df9052038 R14: 00007ffe1a918590 R15: 00007ffe1a918678 [ 278.603809][ T901] [ 278.656431][ T39] usbhid 3-1:0.0: can't add hid device: -71 [ 278.664687][ T39] usbhid: probe of 3-1:0.0 failed with error -71 [ 278.674017][ T39] usb 3-1: USB disconnect, device number 9 [ 278.726459][ T505] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 278.734694][ T505] usb 1-1: config 0 has no interface number 0 [ 278.740850][ T505] usb 1-1: config 0 interface 41 has no altsetting 0 [ 278.896387][ T6] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 278.906434][ T320] usbhid 5-1:0.0: can't add hid device: -71 [ 278.912399][ T320] usbhid: probe of 5-1:0.0 failed with error -71 [ 278.918891][ T505] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 278.929202][ T320] usb 5-1: USB disconnect, device number 10 [ 278.935999][ T505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.944729][ T505] usb 1-1: Product: syz [ 278.948963][ T505] usb 1-1: Manufacturer: syz [ 278.953576][ T505] usb 1-1: SerialNumber: syz [ 278.959087][ T505] usb 1-1: config 0 descriptor?? [ 279.136460][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 279.256462][ T6] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.266350][ T6] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 279.279203][ T6] usb 4-1: config 0 interface 0 has no altsetting 0 [ 279.285823][ T6] usb 4-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 279.294931][ T6] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.303761][ T6] usb 4-1: config 0 descriptor?? [ 279.326403][ T39] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 279.686417][ T39] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.846535][ T6] usbhid 4-1:0.0: can't add hid device: -71 [ 279.852540][ T6] usbhid: probe of 4-1:0.0 failed with error -71 [ 279.861862][ T6] usb 4-1: USB disconnect, device number 10 [ 279.876429][ T505] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 279.876427][ T39] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 279.897688][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.905691][ T39] usb 3-1: Product: syz [ 279.909914][ T39] usb 3-1: Manufacturer: syz [ 279.914527][ T39] usb 3-1: SerialNumber: syz [ 279.957678][ T39] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 280.086377][ T337] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 280.159098][ T39] usb 3-1: USB disconnect, device number 10 [ 280.336417][ T337] usb 2-1: Using ep0 maxpacket: 16 [ 280.346567][ T505] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 280.357566][ T505] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 280.367215][ T505] CoreChips: probe of 1-1:0.41 failed with error -71 [ 280.374775][ T505] usb 1-1: USB disconnect, device number 11 [ 280.456413][ T337] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.466600][ T337] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 280.576392][ T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 280.626441][ T337] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.635598][ T337] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.643771][ T337] usb 2-1: Product: syz [ 280.648025][ T337] usb 2-1: Manufacturer: syz [ 280.652636][ T337] usb 2-1: SerialNumber: syz [ 280.826377][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 280.946467][ T20] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 280.947507][ T26] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.965251][ T26] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.978267][ T26] usb 4-1: config 0 interface 0 has no altsetting 0 [ 280.984897][ T26] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 280.994235][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.003507][ T26] usb 4-1: config 0 descriptor?? [ 281.006701][ T337] usb 2-1: 0:2 : does not exist [ 281.050538][ T337] usb 2-1: USB disconnect, device number 11 [ 281.256759][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 281.326424][ T20] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 167, changing to 11 [ 281.337660][ T20] usb 3-1: config 0 interface 0 has no altsetting 0 [ 281.344305][ T20] usb 3-1: New USB device found, idVendor=054c, idProduct=0002, bcdDevice= 0.00 [ 281.353410][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.362029][ T20] usb 3-1: config 0 descriptor?? [ 281.536417][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 281.542472][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 281.549838][ T26] usb 4-1: USB disconnect, device number 11 [ 281.706393][ T39] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 281.906422][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 281.912472][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 281.924821][ T20] usb 3-1: USB disconnect, device number 11 [ 281.946348][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 282.066447][ T39] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.078826][ T39] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 282.091831][ T39] usb 2-1: config 0 interface 0 has no altsetting 0 [ 282.098525][ T39] usb 2-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 282.107951][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.116753][ T39] usb 2-1: config 0 descriptor?? [ 282.266403][ T306] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 282.345117][ T969] FAULT_INJECTION: forcing a failure. [ 282.345117][ T969] name fail_futex, interval 1, probability 0, space 0, times 0 [ 282.358139][ T337] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 282.358982][ T969] CPU: 1 PID: 969 Comm: syz.2.246 Not tainted syzkaller #0 [ 282.372919][ T969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.382996][ T969] Call Trace: [ 282.386273][ T969] [ 282.389232][ T969] __dump_stack+0x21/0x30 [ 282.393574][ T969] dump_stack_lvl+0x110/0x170 [ 282.398245][ T969] ? show_regs_print_info+0x20/0x20 [ 282.403447][ T969] dump_stack+0x15/0x20 [ 282.407620][ T969] should_fail+0x3ab/0x500 [ 282.412036][ T969] get_futex_key+0x6ee/0xb60 [ 282.416625][ T969] ? futex_wait_restart+0x250/0x250 [ 282.421838][ T969] ? dequeue_task_fair+0x75f/0x1e40 [ 282.427101][ T969] futex_wake+0x133/0x8f0 [ 282.431429][ T969] ? __kasan_check_write+0x14/0x20 [ 282.436544][ T969] ? futex_wait+0x8f0/0x8f0 [ 282.441048][ T969] do_futex+0xd8d/0x2800 [ 282.445333][ T969] ? __schedule+0xbd7/0x14a0 [ 282.449926][ T969] ? release_firmware_map_entry+0x190/0x190 [ 282.455839][ T969] ? futex_exit_release+0x1e0/0x1e0 [ 282.461041][ T969] ? plist_add+0x3e6/0x470 [ 282.465462][ T969] ? __kasan_check_read+0x11/0x20 [ 282.470484][ T969] ? plist_check_list+0x255/0x270 [ 282.475512][ T969] ? __kasan_check_write+0x14/0x20 [ 282.480621][ T969] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 282.486081][ T969] ? _raw_spin_lock+0xf0/0xf0 [ 282.490757][ T969] ? perf_lock_task_context+0x3fd/0x4c0 [ 282.496320][ T969] ? __kasan_check_read+0x11/0x20 [ 282.501368][ T969] ? perf_event_exit_event+0x530/0x530 [ 282.506825][ T969] ? mutex_unlock+0x8f/0x230 [ 282.511415][ T969] ? __kasan_check_write+0x14/0x20 [ 282.516527][ T969] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 282.521981][ T969] ? _raw_spin_lock+0xf0/0xf0 [ 282.526655][ T969] ? __kasan_check_read+0x11/0x20 [ 282.531681][ T969] ? perf_event_exit_task+0x86a/0x880 [ 282.537053][ T969] ? uprobe_free_utask+0x83/0x160 [ 282.542077][ T969] mm_release+0x203/0x360 [ 282.546415][ T969] ? exit_mm_release+0x30/0x30 [ 282.551192][ T969] ? futex_exit_release+0x119/0x1e0 [ 282.556412][ T969] exit_mm_release+0x25/0x30 [ 282.561019][ T969] do_exit+0x644/0x29a0 [ 282.565264][ T969] ? put_task_struct+0x90/0x90 [ 282.570024][ T969] ? kstrtouint_from_user+0x1c4/0x220 [ 282.575397][ T969] ? kstrtol_from_user+0x2a0/0x2a0 [ 282.580532][ T969] ? __kasan_check_write+0x14/0x20 [ 282.585662][ T969] ? _raw_spin_lock_irq+0x95/0xf0 [ 282.590684][ T969] do_group_exit+0x149/0x310 [ 282.595275][ T969] ? __kasan_check_write+0x14/0x20 [ 282.600383][ T969] ? recalc_sigpending+0x1ac/0x230 [ 282.605492][ T969] get_signal+0x64f/0x1430 [ 282.609911][ T969] arch_do_signal_or_restart+0xe2/0x1100 [ 282.615544][ T969] ? file_end_write+0x1b0/0x1b0 [ 282.620410][ T969] ? __fget_files+0x2e1/0x340 [ 282.625086][ T969] ? get_sigframe_size+0x10/0x10 [ 282.630019][ T969] ? __se_sys_futex+0x135/0x330 [ 282.634868][ T969] ? __ia32_sys_read+0x90/0x90 [ 282.639633][ T969] exit_to_user_mode_loop+0xa7/0xe0 [ 282.644827][ T969] exit_to_user_mode_prepare+0x87/0xd0 [ 282.650301][ T969] syscall_exit_to_user_mode+0x1a/0x30 [ 282.655763][ T969] do_syscall_64+0x58/0xa0 [ 282.660179][ T969] ? clear_bhb_loop+0x50/0xa0 [ 282.664856][ T969] ? clear_bhb_loop+0x50/0xa0 [ 282.669535][ T969] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 282.675429][ T969] RIP: 0033:0x7fc107b05159 [ 282.679919][ T969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.699530][ T969] RSP: 002b:00007fc10655e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 282.707947][ T969] RAX: fffffffffffffe00 RBX: 00007fc107d8cfa8 RCX: 00007fc107b05159 [ 282.715938][ T969] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc107d8cfa8 [ 282.723925][ T969] RBP: 00007fc107d8cfa0 R08: 0000000000000000 R09: 0000000000000000 [ 282.731895][ T969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 282.739864][ T969] R13: 00007fc107d8d038 R14: 00007ffead373d70 R15: 00007ffead373e58 [ 282.747860][ T969] [ 282.916438][ T337] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 282.927331][ T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.938273][ T337] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.948041][ T337] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 282.986537][ T306] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 282.994734][ T306] usb 1-1: config 0 has no interface number 0 [ 283.000884][ T306] usb 1-1: config 0 interface 41 has no altsetting 0 [ 283.026464][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 283.032472][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 283.038879][ T348] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 283.046575][ T337] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 283.049721][ T39] usb 2-1: USB disconnect, device number 12 [ 283.065134][ T337] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 283.073364][ T337] usb 4-1: Manufacturer: syz [ 283.078659][ T337] usb 4-1: config 0 descriptor?? [ 283.156425][ T351] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 283.166428][ T306] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 283.175660][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.183792][ T306] usb 1-1: Product: syz [ 283.188021][ T306] usb 1-1: Manufacturer: syz [ 283.192621][ T306] usb 1-1: SerialNumber: syz [ 283.198143][ T306] usb 1-1: config 0 descriptor?? [ 283.286378][ T348] usb 3-1: Using ep0 maxpacket: 16 [ 283.396391][ T351] usb 5-1: Using ep0 maxpacket: 32 [ 283.406453][ T348] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 283.416798][ T348] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 283.516517][ T351] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 283.525008][ T351] usb 5-1: config 0 has no interface number 0 [ 283.531701][ T351] usb 5-1: config 0 interface 184 has no altsetting 0 [ 283.576658][ T348] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 283.585931][ T348] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.594027][ T348] usb 3-1: Product: syz [ 283.598300][ T348] usb 3-1: Manufacturer: syz [ 283.602931][ T348] usb 3-1: SerialNumber: syz [ 283.616601][ T337] usbhid 4-1:0.0: can't add hid device: -71 [ 283.622584][ T337] usbhid: probe of 4-1:0.0 failed with error -71 [ 283.630086][ T337] usb 4-1: USB disconnect, device number 12 [ 283.696462][ T351] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 283.705697][ T351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.713760][ T351] usb 5-1: Product: syz [ 283.718140][ T351] usb 5-1: Manufacturer: syz [ 283.722762][ T351] usb 5-1: SerialNumber: syz [ 283.728170][ T351] usb 5-1: config 0 descriptor?? [ 283.756396][ T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 283.766926][ T351] smsc75xx v1.0.0 [ 283.926479][ T348] usb 3-1: 0:2 : does not exist [ 283.933241][ T348] usb 3-1: USB disconnect, device number 12 [ 284.052359][ T992] FAULT_INJECTION: forcing a failure. [ 284.052359][ T992] name fail_futex, interval 1, probability 0, space 0, times 0 [ 284.065397][ T992] CPU: 1 PID: 992 Comm: syz.3.257 Not tainted syzkaller #0 [ 284.072641][ T992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 284.082703][ T992] Call Trace: [ 284.085988][ T992] [ 284.088917][ T992] __dump_stack+0x21/0x30 [ 284.093251][ T992] dump_stack_lvl+0x110/0x170 [ 284.097952][ T992] ? show_regs_print_info+0x20/0x20 [ 284.103160][ T992] dump_stack+0x15/0x20 [ 284.107322][ T992] should_fail+0x3ab/0x500 [ 284.111742][ T992] get_futex_key+0x6ee/0xb60 [ 284.116354][ T992] ? futex_wait_restart+0x250/0x250 [ 284.121563][ T992] ? dequeue_task_fair+0x75f/0x1e40 [ 284.126770][ T992] futex_wake+0x133/0x8f0 [ 284.131102][ T992] ? __kasan_check_write+0x14/0x20 [ 284.136215][ T992] ? futex_wait+0x8f0/0x8f0 [ 284.140738][ T992] do_futex+0xd8d/0x2800 [ 284.144980][ T992] ? __schedule+0xbd7/0x14a0 [ 284.149570][ T992] ? release_firmware_map_entry+0x190/0x190 [ 284.155465][ T992] ? futex_exit_release+0x1e0/0x1e0 [ 284.160672][ T992] ? plist_add+0x3e6/0x470 [ 284.165105][ T992] ? __kasan_check_read+0x11/0x20 [ 284.170129][ T992] ? plist_check_list+0x255/0x270 [ 284.175154][ T992] ? __kasan_check_write+0x14/0x20 [ 284.180262][ T992] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 284.185715][ T992] ? _raw_spin_lock+0xf0/0xf0 [ 284.190387][ T992] ? perf_lock_task_context+0x3fd/0x4c0 [ 284.195934][ T992] ? __kasan_check_read+0x11/0x20 [ 284.200959][ T992] ? perf_event_exit_event+0x530/0x530 [ 284.206419][ T992] ? mutex_unlock+0x8f/0x230 [ 284.211038][ T992] ? __kasan_check_write+0x14/0x20 [ 284.216161][ T992] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 284.221614][ T992] ? _raw_spin_lock+0xf0/0xf0 [ 284.226292][ T992] ? __kasan_check_read+0x11/0x20 [ 284.231388][ T992] ? perf_event_exit_task+0x86a/0x880 [ 284.236771][ T992] ? uprobe_free_utask+0x83/0x160 [ 284.241809][ T992] mm_release+0x203/0x360 [ 284.246151][ T992] ? exit_mm_release+0x30/0x30 [ 284.250961][ T992] ? futex_exit_release+0x119/0x1e0 [ 284.256202][ T992] exit_mm_release+0x25/0x30 [ 284.260815][ T992] do_exit+0x644/0x29a0 [ 284.264983][ T992] ? put_task_struct+0x90/0x90 [ 284.269762][ T992] ? kstrtouint_from_user+0x1c4/0x220 [ 284.275170][ T992] ? _raw_spin_lock_irq+0xe5/0xf0 [ 284.280207][ T992] do_group_exit+0x149/0x310 [ 284.284808][ T992] ? __kasan_check_write+0x14/0x20 [ 284.290255][ T992] ? recalc_sigpending+0x1ac/0x230 [ 284.295375][ T992] get_signal+0x64f/0x1430 [ 284.299984][ T992] arch_do_signal_or_restart+0xe2/0x1100 [ 284.305630][ T992] ? file_end_write+0x1b0/0x1b0 [ 284.310502][ T992] ? __fget_files+0x2e1/0x340 [ 284.315204][ T992] ? get_sigframe_size+0x10/0x10 [ 284.320154][ T992] ? __se_sys_futex+0x135/0x330 [ 284.325010][ T992] ? __ia32_sys_read+0x90/0x90 [ 284.329774][ T992] exit_to_user_mode_loop+0xa7/0xe0 [ 284.334984][ T992] exit_to_user_mode_prepare+0x87/0xd0 [ 284.340465][ T992] syscall_exit_to_user_mode+0x1a/0x30 [ 284.346015][ T992] do_syscall_64+0x58/0xa0 [ 284.350451][ T992] ? clear_bhb_loop+0x50/0xa0 [ 284.355152][ T992] ? clear_bhb_loop+0x50/0xa0 [ 284.359869][ T992] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 284.365950][ T992] RIP: 0033:0x7f2df8dca159 [ 284.370376][ T992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.389994][ T992] RSP: 002b:00007f2df78230e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 284.398423][ T992] RAX: fffffffffffffe00 RBX: 00007f2df9051fa8 RCX: 00007f2df8dca159 [ 284.406404][ T992] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f2df9051fa8 [ 284.414387][ T992] RBP: 00007f2df9051fa0 R08: 0000000000000000 R09: 0000000000000000 [ 284.422374][ T992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.430354][ T992] R13: 00007f2df9052038 R14: 00007ffe1a918590 R15: 00007ffe1a918678 [ 284.438373][ T992] [ 284.442978][ T306] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 284.486429][ T26] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.498740][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 284.523984][ T26] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.537888][ T26] usb 2-1: config 0 interface 0 has no altsetting 0 [ 284.546371][ T26] usb 2-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 284.566145][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.577479][ T26] usb 2-1: config 0 descriptor?? [ 284.756447][ T306] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 284.767431][ T306] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 284.776913][ T351] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000040: -71 [ 284.787997][ T306] CoreChips: probe of 1-1:0.41 failed with error -71 [ 284.795683][ T351] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 284.805036][ T306] usb 1-1: USB disconnect, device number 12 [ 284.826436][ T351] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 284.837608][ T351] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 284.847736][ T351] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 284.859156][ T351] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 284.868668][ T351] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 284.876376][ T351] usb 5-1: USB disconnect, device number 11 [ 285.296461][ T20] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 285.316376][ T26] usbhid 2-1:0.0: can't add hid device: -71 [ 285.322458][ T26] usbhid: probe of 2-1:0.0 failed with error -71 [ 285.352928][ T26] usb 2-1: USB disconnect, device number 13 [ 285.546383][ T20] usb 3-1: Using ep0 maxpacket: 16 [ 285.666451][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.676816][ T20] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 285.696404][ T337] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 285.836437][ T20] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.850439][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.858868][ T505] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 285.879057][ T20] usb 3-1: Product: syz [ 285.883300][ T20] usb 3-1: Manufacturer: syz [ 285.894362][ T20] usb 3-1: SerialNumber: syz [ 286.056463][ T337] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 286.065214][ T337] usb 1-1: config 0 has no interface number 0 [ 286.071886][ T337] usb 1-1: config 0 interface 41 has no altsetting 0 [ 286.106409][ T505] usb 4-1: Using ep0 maxpacket: 32 [ 286.226561][ T20] usb 3-1: 0:2 : does not exist [ 286.232439][ T505] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 286.240768][ T337] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 286.250122][ T505] usb 4-1: config 0 has no interface number 0 [ 286.257388][ T20] usb 3-1: USB disconnect, device number 13 [ 286.263602][ T337] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.272753][ T505] usb 4-1: config 0 interface 184 has no altsetting 0 [ 286.280175][ T337] usb 1-1: Product: syz [ 286.284498][ T337] usb 1-1: Manufacturer: syz [ 286.289174][ T337] usb 1-1: SerialNumber: syz [ 286.294487][ T337] usb 1-1: config 0 descriptor?? [ 286.436409][ T505] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 286.445562][ T505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.453597][ T505] usb 4-1: Product: syz [ 286.457951][ T505] usb 4-1: Manufacturer: syz [ 286.462584][ T505] usb 4-1: SerialNumber: syz [ 286.467900][ T505] usb 4-1: config 0 descriptor?? [ 286.476759][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 286.506839][ T505] smsc75xx v1.0.0 [ 286.662676][ T30] audit: type=1400 audit(1790103199.051:199): avc: denied { execute } for pid=1152 comm="syz.2.293" name="file0" dev="tmpfs" ino=269 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 286.926415][ T505] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 286.937361][ T505] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 286.947075][ T505] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 286.958227][ T505] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 287.196468][ T337] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 287.606377][ T505] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 287.676438][ T337] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 287.687300][ T337] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 287.696821][ T337] CoreChips: probe of 1-1:0.41 failed with error -71 [ 287.706824][ T337] usb 1-1: USB disconnect, device number 13 [ 287.846392][ T505] usb 5-1: Using ep0 maxpacket: 16 [ 287.966483][ T505] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 287.976748][ T505] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 288.136413][ T505] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 288.145800][ T505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.153856][ T505] usb 5-1: Product: syz [ 288.158107][ T505] usb 5-1: Manufacturer: syz [ 288.162744][ T505] usb 5-1: SerialNumber: syz [ 288.476430][ T505] usb 5-1: 0:2 : does not exist [ 288.483386][ T505] usb 5-1: USB disconnect, device number 12 [ 288.600293][ T337] usb 4-1: USB disconnect, device number 13 [ 288.687046][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 288.920363][ T1309] incfs: Backing dir is not set, filesystem can't be mounted. [ 288.927913][ T1309] incfs: mount failed -2 [ 288.960334][ T1314] fuse: Bad value for 'fd' [ 289.076477][ T306] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 289.316386][ T306] usb 1-1: Using ep0 maxpacket: 32 [ 289.436437][ T306] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 289.445860][ T306] usb 1-1: config 0 has no interface number 0 [ 289.452080][ T306] usb 1-1: config 0 interface 184 has no altsetting 0 [ 289.597411][ T1391] incfs: Backing dir is not set, filesystem can't be mounted. [ 289.604967][ T1391] incfs: mount failed -2 [ 289.616414][ T306] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 289.635418][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.644240][ T306] usb 1-1: Product: syz [ 289.647075][ T1393] fuse: Bad value for 'fd' [ 289.649327][ T306] usb 1-1: Manufacturer: syz [ 289.657858][ T306] usb 1-1: SerialNumber: syz [ 289.668662][ T306] usb 1-1: config 0 descriptor?? [ 289.711525][ T306] smsc75xx v1.0.0 [ 289.856378][ T320] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 289.966403][ T26] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 290.106400][ T320] usb 5-1: Using ep0 maxpacket: 16 [ 290.136397][ T306] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 290.147278][ T306] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 290.157110][ T306] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 290.167624][ T306] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 290.236369][ T26] usb 4-1: device descriptor read/64, error -71 [ 290.246425][ T320] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 290.256743][ T320] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 290.331606][ T1419] incfs: Backing dir is not set, filesystem can't be mounted. [ 290.339436][ T1419] incfs: mount failed -2 [ 290.426451][ T320] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 290.435641][ T320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.453555][ T320] usb 5-1: Product: syz [ 290.459264][ T320] usb 5-1: Manufacturer: syz [ 290.464711][ T320] usb 5-1: SerialNumber: syz [ 290.626434][ T26] usb 4-1: device descriptor read/64, error -71 [ 290.826423][ T320] usb 5-1: 0:2 : does not exist [ 290.833459][ T320] usb 5-1: USB disconnect, device number 13 [ 290.896429][ T26] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 291.046834][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 291.136345][ T290] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 291.166478][ T26] usb 4-1: device descriptor read/64, error -71 [ 291.376359][ T290] usb 3-1: Using ep0 maxpacket: 32 [ 291.416392][ T320] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 291.496417][ T290] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.507387][ T290] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 291.520265][ T290] usb 3-1: config 0 interface 0 has no altsetting 0 [ 291.526908][ T290] usb 3-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 291.535992][ T290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.544654][ T290] usb 3-1: config 0 descriptor?? [ 291.556364][ T26] usb 4-1: device descriptor read/64, error -71 [ 291.676558][ T26] usb usb4-port1: attempt power cycle [ 291.686469][ T320] usb 2-1: device descriptor read/64, error -71 [ 291.821707][ T505] usb 1-1: USB disconnect, device number 14 [ 292.086372][ T320] usb 2-1: device descriptor read/64, error -71 [ 292.086403][ T290] usbhid 3-1:0.0: can't add hid device: -71 [ 292.098667][ T26] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 292.106360][ T290] usbhid: probe of 3-1:0.0 failed with error -71 [ 292.113937][ T290] usb 3-1: USB disconnect, device number 14 [ 292.226369][ T337] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 292.266417][ T26] usb 4-1: device descriptor read/8, error -71 [ 292.326371][ T505] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 292.356360][ T320] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 292.466407][ T337] usb 5-1: Using ep0 maxpacket: 16 [ 292.546650][ T26] usb 4-1: device descriptor read/8, error -71 [ 292.566426][ T505] usb 1-1: Using ep0 maxpacket: 8 [ 292.586466][ T337] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.596736][ T337] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 292.626393][ T320] usb 2-1: device descriptor read/64, error -71 [ 292.686412][ T505] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.696244][ T505] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.709565][ T505] usb 1-1: config 0 interface 0 has no altsetting 0 [ 292.716251][ T505] usb 1-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 292.725865][ T505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.734983][ T505] usb 1-1: config 0 descriptor?? [ 292.766495][ T337] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.775679][ T337] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.784737][ T337] usb 5-1: Product: syz [ 292.789058][ T337] usb 5-1: Manufacturer: syz [ 292.793668][ T337] usb 5-1: SerialNumber: syz [ 292.926387][ T290] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 293.016528][ T320] usb 2-1: device descriptor read/64, error -71 [ 293.116379][ T26] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 293.116477][ T337] usb 5-1: 0:2 : does not exist [ 293.135194][ T337] usb 5-1: USB disconnect, device number 14 [ 293.143197][ T320] usb usb2-port1: attempt power cycle [ 293.166406][ T290] usb 3-1: Using ep0 maxpacket: 32 [ 293.276406][ T505] usbhid 1-1:0.0: can't add hid device: -71 [ 293.282419][ T505] usbhid: probe of 1-1:0.0 failed with error -71 [ 293.290024][ T505] usb 1-1: USB disconnect, device number 15 [ 293.296612][ T290] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 293.307018][ T290] usb 3-1: config 0 has no interface number 0 [ 293.313227][ T290] usb 3-1: config 0 interface 184 has no altsetting 0 [ 293.336600][ T26] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 293.345145][ T26] usb 4-1: config 0 has no interface number 0 [ 293.351306][ T26] usb 4-1: config 0 interface 41 has no altsetting 0 [ 293.476488][ T290] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 293.485785][ T290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.493832][ T290] usb 3-1: Product: syz [ 293.498078][ T290] usb 3-1: Manufacturer: syz [ 293.502692][ T290] usb 3-1: SerialNumber: syz [ 293.507951][ T290] usb 3-1: config 0 descriptor?? [ 293.516463][ T26] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 293.525520][ T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.533650][ T26] usb 4-1: Product: syz [ 293.537883][ T26] usb 4-1: Manufacturer: syz [ 293.542507][ T26] usb 4-1: SerialNumber: syz [ 293.547623][ T290] smsc75xx v1.0.0 [ 293.551976][ T26] usb 4-1: config 0 descriptor?? [ 293.566366][ T320] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 293.776442][ T320] usb 2-1: device descriptor read/8, error -71 [ 293.966373][ T351] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 293.986426][ T290] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 293.997325][ T306] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 294.004963][ T290] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 294.014898][ T290] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 294.025342][ T290] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 294.056414][ T320] usb 2-1: device descriptor read/8, error -71 [ 294.206393][ T351] usb 5-1: Using ep0 maxpacket: 32 [ 294.266378][ T306] usb 1-1: device descriptor read/64, error -71 [ 294.326427][ T351] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.337454][ T351] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.350281][ T351] usb 5-1: config 0 interface 0 has no altsetting 0 [ 294.356965][ T351] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 294.365999][ T351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.374663][ T351] usb 5-1: config 0 descriptor?? [ 294.456423][ T26] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 294.566381][ T320] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 294.656391][ T306] usb 1-1: device descriptor read/64, error -71 [ 294.656865][ T320] usb 2-1: Using ep0 maxpacket: 16 [ 294.786431][ T320] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.796807][ T320] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 294.916409][ T351] usbhid 5-1:0.0: can't add hid device: -71 [ 294.922503][ T351] usbhid: probe of 5-1:0.0 failed with error -71 [ 294.929044][ T26] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 294.939803][ T306] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 294.948658][ T351] usb 5-1: USB disconnect, device number 15 [ 294.955571][ T26] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 294.965709][ T26] CoreChips: probe of 4-1:0.41 failed with error -71 [ 294.966829][ T320] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 294.975171][ T26] usb 4-1: USB disconnect, device number 17 [ 294.982029][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.995844][ T320] usb 2-1: Product: syz [ 295.001073][ T320] usb 2-1: Manufacturer: syz [ 295.005824][ T320] usb 2-1: SerialNumber: syz [ 295.246384][ T306] usb 1-1: device descriptor read/64, error -71 [ 295.326427][ T320] usb 2-1: 0:2 : does not exist [ 295.333526][ T320] usb 2-1: USB disconnect, device number 17 [ 295.356921][ T1578] FAULT_INJECTION: forcing a failure. [ 295.356921][ T1578] name fail_futex, interval 1, probability 0, space 0, times 0 [ 295.369900][ T1578] CPU: 1 PID: 1578 Comm: syz.4.398 Not tainted syzkaller #0 [ 295.377215][ T1578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 295.387355][ T1578] Call Trace: [ 295.390632][ T1578] [ 295.393558][ T1578] __dump_stack+0x21/0x30 [ 295.397891][ T1578] dump_stack_lvl+0x110/0x170 [ 295.402568][ T1578] ? show_regs_print_info+0x20/0x20 [ 295.407761][ T1578] ? is_bpf_text_address+0x177/0x190 [ 295.413043][ T1578] dump_stack+0x15/0x20 [ 295.417190][ T1578] should_fail+0x3ab/0x500 [ 295.421619][ T1578] get_futex_key+0x6ee/0xb60 [ 295.426207][ T1578] ? futex_wait_restart+0x250/0x250 [ 295.431397][ T1578] ? dequeue_task_fair+0x75f/0x1e40 [ 295.436592][ T1578] futex_wake+0x133/0x8f0 [ 295.440912][ T1578] ? __kasan_check_write+0x14/0x20 [ 295.446030][ T1578] ? futex_wait+0x8f0/0x8f0 [ 295.450549][ T1578] do_futex+0xd8d/0x2800 [ 295.454789][ T1578] ? __schedule+0xbd7/0x14a0 [ 295.459517][ T1578] ? release_firmware_map_entry+0x190/0x190 [ 295.465432][ T1578] ? futex_exit_release+0x1e0/0x1e0 [ 295.470629][ T1578] ? plist_add+0x3e6/0x470 [ 295.475063][ T1578] ? __kasan_check_read+0x11/0x20 [ 295.480083][ T1578] ? plist_check_list+0x255/0x270 [ 295.485109][ T1578] ? __kasan_check_write+0x14/0x20 [ 295.490214][ T1578] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 295.495683][ T1578] ? _raw_spin_lock+0xf0/0xf0 [ 295.500353][ T1578] ? perf_lock_task_context+0x3fd/0x4c0 [ 295.505892][ T1578] ? __kasan_check_read+0x11/0x20 [ 295.510907][ T1578] ? perf_event_exit_event+0x530/0x530 [ 295.516375][ T1578] ? mutex_unlock+0x8f/0x230 [ 295.520957][ T1578] ? __kasan_check_write+0x14/0x20 [ 295.526072][ T1578] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 295.531544][ T1578] ? _raw_spin_lock+0xf0/0xf0 [ 295.536213][ T1578] ? __kasan_check_read+0x11/0x20 [ 295.541229][ T1578] ? perf_event_exit_task+0x86a/0x880 [ 295.546626][ T1578] ? uprobe_free_utask+0x83/0x160 [ 295.548610][ T342] udevd[342]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 295.551667][ T1578] mm_release+0x203/0x360 [ 295.571622][ T1578] ? exit_mm_release+0x30/0x30 [ 295.576417][ T1578] ? futex_exit_release+0x119/0x1e0 [ 295.581651][ T1578] exit_mm_release+0x25/0x30 [ 295.586275][ T1578] do_exit+0x644/0x29a0 [ 295.590452][ T1578] ? put_task_struct+0x90/0x90 [ 295.595216][ T1578] ? kstrtouint_from_user+0x1c4/0x220 [ 295.600711][ T1578] ? kstrtol_from_user+0x2a0/0x2a0 [ 295.605817][ T1578] ? __kasan_check_write+0x14/0x20 [ 295.610921][ T1578] ? _raw_spin_lock_irq+0x95/0xf0 [ 295.615941][ T1578] do_group_exit+0x149/0x310 [ 295.620530][ T1578] ? __kasan_check_write+0x14/0x20 [ 295.625635][ T1578] ? recalc_sigpending+0x1ac/0x230 [ 295.630751][ T1578] get_signal+0x64f/0x1430 [ 295.635166][ T1578] arch_do_signal_or_restart+0xe2/0x1100 [ 295.640808][ T1578] ? file_end_write+0x1b0/0x1b0 [ 295.645656][ T1578] ? __fget_files+0x2e1/0x340 [ 295.650324][ T1578] ? get_sigframe_size+0x10/0x10 [ 295.655273][ T1578] ? __se_sys_futex+0x135/0x330 [ 295.660121][ T1578] ? __ia32_sys_read+0x90/0x90 [ 295.664882][ T1578] exit_to_user_mode_loop+0xa7/0xe0 [ 295.670076][ T1578] exit_to_user_mode_prepare+0x87/0xd0 [ 295.675529][ T1578] syscall_exit_to_user_mode+0x1a/0x30 [ 295.680985][ T1578] do_syscall_64+0x58/0xa0 [ 295.685394][ T1578] ? clear_bhb_loop+0x50/0xa0 [ 295.690078][ T1578] ? clear_bhb_loop+0x50/0xa0 [ 295.694751][ T1578] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.700637][ T1578] RIP: 0033:0x7ffb6702a159 [ 295.705094][ T1578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.724703][ T1578] RSP: 002b:00007ffb65a830e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 295.733112][ T1578] RAX: fffffffffffffe00 RBX: 00007ffb672b1fa8 RCX: 00007ffb6702a159 [ 295.741095][ T1578] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffb672b1fa8 [ 295.749191][ T1578] RBP: 00007ffb672b1fa0 R08: 0000000000000000 R09: 0000000000000000 [ 295.757185][ T1578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.765167][ T1578] R13: 00007ffb672b2038 R14: 00007ffcf28decc0 R15: 00007ffcf28deda8 [ 295.773152][ T1578] [ 295.799216][ T351] usb 3-1: USB disconnect, device number 15 [ 296.021913][ T1609] FAULT_INJECTION: forcing a failure. [ 296.021913][ T1609] name fail_futex, interval 1, probability 0, space 0, times 0 [ 296.034854][ T1609] CPU: 1 PID: 1609 Comm: syz.1.411 Not tainted syzkaller #0 [ 296.042165][ T1609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 296.052219][ T1609] Call Trace: [ 296.055855][ T1609] [ 296.058789][ T1609] __dump_stack+0x21/0x30 [ 296.063142][ T1609] dump_stack_lvl+0x110/0x170 [ 296.067826][ T1609] ? show_regs_print_info+0x20/0x20 [ 296.073030][ T1609] ? is_bpf_text_address+0x177/0x190 [ 296.078338][ T1609] dump_stack+0x15/0x20 [ 296.082511][ T1609] should_fail+0x3ab/0x500 [ 296.086964][ T1609] get_futex_key+0x6ee/0xb60 [ 296.091581][ T1609] ? futex_wait_restart+0x250/0x250 [ 296.096794][ T1609] ? dequeue_task_fair+0x75f/0x1e40 [ 296.101996][ T1609] futex_wake+0x133/0x8f0 [ 296.106339][ T1609] ? __kasan_check_write+0x14/0x20 [ 296.111470][ T1609] ? futex_wait+0x8f0/0x8f0 [ 296.115978][ T1609] do_futex+0xd8d/0x2800 [ 296.120217][ T1609] ? __schedule+0xbd7/0x14a0 [ 296.124807][ T1609] ? release_firmware_map_entry+0x190/0x190 [ 296.130698][ T1609] ? futex_exit_release+0x1e0/0x1e0 [ 296.135901][ T1609] ? plist_add+0x3e6/0x470 [ 296.140316][ T1609] ? __kasan_check_read+0x11/0x20 [ 296.145349][ T1609] ? plist_check_list+0x255/0x270 [ 296.150378][ T1609] ? __kasan_check_write+0x14/0x20 [ 296.155505][ T1609] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 296.160980][ T1609] ? _raw_spin_lock+0xf0/0xf0 [ 296.165670][ T1609] ? perf_lock_task_context+0x3fd/0x4c0 [ 296.171216][ T1609] ? __kasan_check_read+0x11/0x20 [ 296.176262][ T1609] ? perf_event_exit_event+0x530/0x530 [ 296.181737][ T1609] ? mutex_unlock+0x8f/0x230 [ 296.186610][ T1609] ? __kasan_check_write+0x14/0x20 [ 296.191718][ T1609] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 296.197171][ T1609] ? _raw_spin_lock+0xf0/0xf0 [ 296.201841][ T1609] ? __kasan_check_read+0x11/0x20 [ 296.206865][ T1609] ? perf_event_exit_task+0x86a/0x880 [ 296.212233][ T1609] ? uprobe_free_utask+0x83/0x160 [ 296.217296][ T1609] mm_release+0x203/0x360 [ 296.221741][ T1609] ? exit_mm_release+0x30/0x30 [ 296.226506][ T1609] ? futex_exit_release+0x119/0x1e0 [ 296.231700][ T1609] exit_mm_release+0x25/0x30 [ 296.236318][ T1609] do_exit+0x644/0x29a0 [ 296.240492][ T1609] ? put_task_struct+0x90/0x90 [ 296.245256][ T1609] ? kstrtouint_from_user+0x1c4/0x220 [ 296.250637][ T1609] ? _raw_spin_lock_irq+0xe5/0xf0 [ 296.255660][ T1609] do_group_exit+0x149/0x310 [ 296.260265][ T1609] ? __kasan_check_write+0x14/0x20 [ 296.265391][ T1609] ? recalc_sigpending+0x1ac/0x230 [ 296.270504][ T1609] get_signal+0x64f/0x1430 [ 296.274919][ T1609] arch_do_signal_or_restart+0xe2/0x1100 [ 296.280551][ T1609] ? file_end_write+0x1b0/0x1b0 [ 296.285469][ T1609] ? __fget_files+0x2e1/0x340 [ 296.290157][ T1609] ? get_sigframe_size+0x10/0x10 [ 296.295100][ T1609] ? __se_sys_futex+0x135/0x330 [ 296.299971][ T1609] ? __ia32_sys_read+0x90/0x90 [ 296.304739][ T1609] exit_to_user_mode_loop+0xa7/0xe0 [ 296.310078][ T1609] exit_to_user_mode_prepare+0x87/0xd0 [ 296.315543][ T1609] syscall_exit_to_user_mode+0x1a/0x30 [ 296.321006][ T1609] do_syscall_64+0x58/0xa0 [ 296.325419][ T1609] ? clear_bhb_loop+0x50/0xa0 [ 296.330096][ T1609] ? clear_bhb_loop+0x50/0xa0 [ 296.334776][ T1609] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 296.340684][ T1609] RIP: 0033:0x7fd460afe159 [ 296.345099][ T1609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 296.356482][ T505] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 296.364715][ T1609] RSP: 002b:00007fd45f5570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 296.364742][ T1609] RAX: fffffffffffffe00 RBX: 00007fd460d85fa8 RCX: 00007fd460afe159 [ 296.364758][ T1609] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd460d85fa8 [ 296.396630][ T1609] RBP: 00007fd460d85fa0 R08: 0000000000000000 R09: 0000000000000000 [ 296.404598][ T1609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 296.412564][ T1609] R13: 00007fd460d86038 R14: 00007ffe09a323e0 R15: 00007ffe09a324c8 [ 296.420539][ T1609] [ 296.424753][ T306] usb 1-1: device descriptor read/64, error -71 [ 296.546428][ T306] usb usb1-port1: attempt power cycle [ 296.626356][ T505] usb 5-1: Using ep0 maxpacket: 32 [ 296.676393][ T351] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 296.706375][ T348] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 296.746449][ T505] usb 5-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.762365][ T505] usb 5-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.775318][ T505] usb 5-1: config 0 interface 0 has no altsetting 0 [ 296.782696][ T505] usb 5-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 296.791870][ T505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.800617][ T505] usb 5-1: config 0 descriptor?? [ 296.926381][ T351] usb 3-1: Using ep0 maxpacket: 16 [ 296.946392][ T348] usb 2-1: Using ep0 maxpacket: 32 [ 297.046498][ T351] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.056976][ T351] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 297.066418][ T348] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 297.074640][ T348] usb 2-1: config 0 has no interface number 0 [ 297.080839][ T348] usb 2-1: config 0 interface 184 has no altsetting 0 [ 297.186383][ T306] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 297.216453][ T351] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 297.225521][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.233591][ T351] usb 3-1: Product: syz [ 297.237830][ T351] usb 3-1: Manufacturer: syz [ 297.242457][ T351] usb 3-1: SerialNumber: syz [ 297.247153][ T348] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 297.256817][ T348] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.265196][ T348] usb 2-1: Product: syz [ 297.269434][ T348] usb 2-1: Manufacturer: syz [ 297.274040][ T348] usb 2-1: SerialNumber: syz [ 297.279446][ T348] usb 2-1: config 0 descriptor?? [ 297.316888][ T348] smsc75xx v1.0.0 [ 297.326458][ T505] usbhid 5-1:0.0: can't add hid device: -71 [ 297.332480][ T505] usbhid: probe of 5-1:0.0 failed with error -71 [ 297.339916][ T505] usb 5-1: USB disconnect, device number 16 [ 297.396433][ T306] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 297.404855][ T306] usb 1-1: config 0 has no interface number 0 [ 297.410998][ T306] usb 1-1: config 0 interface 41 has no altsetting 0 [ 297.576478][ T351] usb 3-1: 0:2 : does not exist [ 297.582020][ T306] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 297.592191][ T351] usb 3-1: USB disconnect, device number 16 [ 297.598410][ T306] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.607787][ T306] usb 1-1: Product: syz [ 297.611987][ T306] usb 1-1: Manufacturer: syz [ 297.617173][ T306] usb 1-1: SerialNumber: syz [ 297.622544][ T306] usb 1-1: config 0 descriptor?? [ 297.636444][ T26] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 297.756477][ T348] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 297.767558][ T348] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 297.777281][ T348] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 297.788066][ T348] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 297.803114][ T1632] FAULT_INJECTION: forcing a failure. [ 297.803114][ T1632] name fail_futex, interval 1, probability 0, space 0, times 0 [ 297.816093][ T1632] CPU: 1 PID: 1632 Comm: syz.4.422 Not tainted syzkaller #0 [ 297.823420][ T1632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.833478][ T1632] Call Trace: [ 297.836800][ T1632] [ 297.839750][ T1632] __dump_stack+0x21/0x30 [ 297.844186][ T1632] dump_stack_lvl+0x110/0x170 [ 297.848858][ T1632] ? show_regs_print_info+0x20/0x20 [ 297.854122][ T1632] ? is_bpf_text_address+0x177/0x190 [ 297.859410][ T1632] dump_stack+0x15/0x20 [ 297.863563][ T1632] should_fail+0x3ab/0x500 [ 297.867978][ T1632] get_futex_key+0x6ee/0xb60 [ 297.872568][ T1632] ? futex_wait_restart+0x250/0x250 [ 297.877764][ T1632] ? dequeue_task_fair+0x75f/0x1e40 [ 297.882966][ T1632] futex_wake+0x133/0x8f0 [ 297.887296][ T1632] ? __kasan_check_write+0x14/0x20 [ 297.892431][ T1632] ? futex_wait+0x8f0/0x8f0 [ 297.896953][ T1632] do_futex+0xd8d/0x2800 [ 297.901217][ T1632] ? __schedule+0xbd7/0x14a0 [ 297.905809][ T1632] ? release_firmware_map_entry+0x190/0x190 [ 297.911723][ T1632] ? futex_exit_release+0x1e0/0x1e0 [ 297.916922][ T1632] ? plist_add+0x3e6/0x470 [ 297.921340][ T1632] ? __kasan_check_read+0x11/0x20 [ 297.926454][ T1632] ? plist_check_list+0x255/0x270 [ 297.931482][ T1632] ? __kasan_check_write+0x14/0x20 [ 297.936596][ T1632] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 297.942057][ T1632] ? _raw_spin_lock+0xf0/0xf0 [ 297.946732][ T1632] ? perf_lock_task_context+0x3fd/0x4c0 [ 297.952275][ T1632] ? __kasan_check_read+0x11/0x20 [ 297.957303][ T1632] ? perf_event_exit_event+0x530/0x530 [ 297.962772][ T1632] ? mutex_unlock+0x8f/0x230 [ 297.967367][ T1632] ? __kasan_check_write+0x14/0x20 [ 297.972479][ T1632] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 297.977956][ T1632] ? _raw_spin_lock+0xf0/0xf0 [ 297.982632][ T1632] ? __kasan_check_read+0x11/0x20 [ 297.987653][ T1632] ? perf_event_exit_task+0x86a/0x880 [ 297.993042][ T1632] ? uprobe_free_utask+0x83/0x160 [ 297.998198][ T1632] mm_release+0x203/0x360 [ 298.002540][ T1632] ? exit_mm_release+0x30/0x30 [ 298.007309][ T1632] ? futex_exit_release+0x119/0x1e0 [ 298.012512][ T1632] exit_mm_release+0x25/0x30 [ 298.017117][ T1632] do_exit+0x644/0x29a0 [ 298.021300][ T1632] ? put_task_struct+0x90/0x90 [ 298.026094][ T1632] ? kstrtouint_from_user+0x1c4/0x220 [ 298.031534][ T1632] ? _raw_spin_lock_irq+0xe5/0xf0 [ 298.036590][ T1632] do_group_exit+0x149/0x310 [ 298.041228][ T1632] ? __kasan_check_write+0x14/0x20 [ 298.046391][ T1632] ? recalc_sigpending+0x1ac/0x230 [ 298.051545][ T1632] get_signal+0x64f/0x1430 [ 298.056001][ T1632] arch_do_signal_or_restart+0xe2/0x1100 [ 298.061667][ T1632] ? file_end_write+0x1b0/0x1b0 [ 298.066565][ T1632] ? __fget_files+0x2e1/0x340 [ 298.071270][ T1632] ? get_sigframe_size+0x10/0x10 [ 298.076218][ T1632] ? __se_sys_futex+0x135/0x330 [ 298.081074][ T1632] ? __ia32_sys_read+0x90/0x90 [ 298.085984][ T1632] exit_to_user_mode_loop+0xa7/0xe0 [ 298.091191][ T1632] exit_to_user_mode_prepare+0x87/0xd0 [ 298.096669][ T1632] syscall_exit_to_user_mode+0x1a/0x30 [ 298.102131][ T1632] do_syscall_64+0x58/0xa0 [ 298.106544][ T1632] ? clear_bhb_loop+0x50/0xa0 [ 298.111223][ T1632] ? clear_bhb_loop+0x50/0xa0 [ 298.115900][ T1632] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 298.121882][ T1632] RIP: 0033:0x7ffb6702a159 [ 298.126316][ T1632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.145948][ T1632] RSP: 002b:00007ffb65a830e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 298.154362][ T1632] RAX: fffffffffffffe00 RBX: 00007ffb672b1fa8 RCX: 00007ffb6702a159 [ 298.162336][ T1632] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffb672b1fa8 [ 298.170335][ T1632] RBP: 00007ffb672b1fa0 R08: 0000000000000000 R09: 0000000000000000 [ 298.178301][ T1632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.186269][ T1632] R13: 00007ffb672b2038 R14: 00007ffcf28decc0 R15: 00007ffcf28deda8 [ 298.194263][ T1632] [ 298.246406][ T26] usb 4-1: Using ep0 maxpacket: 16 [ 298.366445][ T26] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.376847][ T26] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 298.456460][ T26] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 298.465617][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 298.473668][ T26] usb 4-1: SerialNumber: syz [ 298.517121][ T26] usb 4-1: 0:2 : does not exist [ 298.546371][ T351] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 298.816387][ T351] usb 3-1: device descriptor read/64, error -71 [ 298.876403][ T306] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 299.116441][ T26] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 299.138117][ T26] usb 4-1: USB disconnect, device number 18 [ 299.156255][ T1649] kvm: pic: single mode not supported [ 299.156628][ T1649] kvm: pic: level sensitive irq not supported [ 299.163678][ T1649] kvm: pic: level sensitive irq not supported [ 299.170174][ T1649] kvm: pic: single mode not supported [ 299.176244][ T1649] kvm: pic: level sensitive irq not supported [ 299.182010][ T1649] kvm: pic: level sensitive irq not supported [ 299.188534][ T1649] kvm: pic: single mode not supported [ 299.194656][ T1649] kvm: pic: level sensitive irq not supported [ 299.200399][ T1649] kvm: pic: single mode not supported [ 299.206470][ T351] usb 3-1: device descriptor read/64, error -71 [ 299.366391][ T306] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 299.377146][ T306] CoreChips 1-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 299.386654][ T306] CoreChips: probe of 1-1:0.41 failed with error -71 [ 299.394511][ T306] usb 1-1: USB disconnect, device number 18 [ 299.453140][ T320] usb 2-1: USB disconnect, device number 18 [ 299.476377][ T351] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 299.511329][ T30] audit: type=1400 audit(1790103211.901:200): avc: denied { mount } for pid=1667 comm="syz.3.439" name="/" dev="configfs" ino=13735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 299.534666][ T30] audit: type=1400 audit(1790103211.901:201): avc: denied { search } for pid=1667 comm="syz.3.439" name="/" dev="configfs" ino=13735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 299.557117][ T30] audit: type=1400 audit(1790103211.901:202): avc: denied { write } for pid=1667 comm="syz.3.439" name="/" dev="configfs" ino=13735 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 299.566613][ T39] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 299.580325][ T30] audit: type=1400 audit(1790103211.901:203): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 299.806423][ T351] usb 3-1: device descriptor read/64, error -71 [ 299.836371][ T39] usb 5-1: Using ep0 maxpacket: 16 [ 299.906362][ T505] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 299.946387][ T320] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 299.956400][ T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.966648][ T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.126466][ T337] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 300.127059][ T39] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.143180][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.146579][ T505] usb 4-1: Using ep0 maxpacket: 8 [ 300.151254][ T39] usb 5-1: Product: syz [ 300.160376][ T39] usb 5-1: Manufacturer: syz [ 300.164963][ T39] usb 5-1: SerialNumber: syz [ 300.196395][ T351] usb 3-1: device descriptor read/64, error -71 [ 300.206369][ T320] usb 2-1: Using ep0 maxpacket: 32 [ 300.276416][ T505] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.286451][ T505] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 300.299296][ T505] usb 4-1: config 0 interface 0 has no altsetting 0 [ 300.305929][ T505] usb 4-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 300.315535][ T505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.324241][ T505] usb 4-1: config 0 descriptor?? [ 300.326605][ T351] usb usb3-port1: attempt power cycle [ 300.329567][ T320] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 300.342926][ T320] usb 2-1: config 0 has no interface number 0 [ 300.349081][ T320] usb 2-1: config 0 interface 184 has no altsetting 0 [ 300.366410][ T337] usb 1-1: Using ep0 maxpacket: 16 [ 300.486447][ T337] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.496616][ T337] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.506429][ T39] usb 5-1: 0:2 : does not exist [ 300.506429][ T320] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 300.519363][ T39] usb 5-1: USB disconnect, device number 17 [ 300.527093][ T320] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.535124][ T320] usb 2-1: Product: syz [ 300.539456][ T320] usb 2-1: Manufacturer: syz [ 300.544069][ T320] usb 2-1: SerialNumber: syz [ 300.549349][ T320] usb 2-1: config 0 descriptor?? [ 300.576494][ T337] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 300.585636][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 300.594172][ T320] smsc75xx v1.0.0 [ 300.598011][ T337] usb 1-1: SerialNumber: syz [ 300.637106][ T337] usb 1-1: 0:2 : does not exist [ 300.756377][ T351] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 300.876427][ T505] usbhid 4-1:0.0: can't add hid device: -71 [ 300.882386][ T505] usbhid: probe of 4-1:0.0 failed with error -71 [ 300.889681][ T505] usb 4-1: USB disconnect, device number 19 [ 300.948149][ T351] usb 3-1: device descriptor read/8, error -71 [ 300.968902][ T1693] netlink: 36 bytes leftover after parsing attributes in process `syz.4.451'. [ 301.016472][ T320] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 301.027424][ T320] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 301.037148][ T320] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 301.048030][ T320] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 301.176419][ T351] usb 3-1: device descriptor read/8, error -71 [ 301.192194][ T30] audit: type=1400 audit(1790103213.581:204): avc: denied { read } for pid=1716 comm="syz.4.462" name="trigger" dev="tracefs" ino=2550 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 301.246397][ T337] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 301.257986][ T337] usb 1-1: USB disconnect, device number 19 [ 301.586382][ T320] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 301.676377][ T351] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 301.766393][ T351] usb 3-1: Using ep0 maxpacket: 16 [ 301.866360][ T320] usb 4-1: device descriptor read/64, error -71 [ 301.886410][ T351] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.896601][ T351] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.056429][ T351] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.065665][ T351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.074146][ T351] usb 3-1: Product: syz [ 302.078464][ T351] usb 3-1: Manufacturer: syz [ 302.083077][ T351] usb 3-1: SerialNumber: syz [ 302.101409][ T30] audit: type=1400 audit(1790103214.491:205): avc: denied { unmount } for pid=1735 comm="syz.4.470" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 302.266388][ T320] usb 4-1: device descriptor read/64, error -71 [ 302.406462][ T351] usb 3-1: 0:2 : does not exist [ 302.413235][ T351] usb 3-1: USB disconnect, device number 20 [ 302.456457][ T306] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 302.537274][ T320] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 302.690966][ T351] usb 2-1: USB disconnect, device number 19 [ 302.702230][ T306] usb 1-1: Using ep0 maxpacket: 8 [ 302.806372][ T320] usb 4-1: device descriptor read/64, error -71 [ 302.826423][ T306] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.840367][ T306] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.854011][ T306] usb 1-1: config 0 interface 0 has no altsetting 0 [ 302.860897][ T306] usb 1-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 302.870014][ T306] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.878932][ T306] usb 1-1: config 0 descriptor?? [ 303.156397][ T348] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 303.196374][ T320] usb 4-1: device descriptor read/64, error -71 [ 303.316436][ T320] usb usb4-port1: attempt power cycle [ 303.426414][ T306] usbhid 1-1:0.0: can't add hid device: -71 [ 303.432459][ T306] usbhid: probe of 1-1:0.0 failed with error -71 [ 303.439916][ T306] usb 1-1: USB disconnect, device number 20 [ 303.516414][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.527381][ T348] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.537150][ T348] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 303.546401][ T348] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.555065][ T348] usb 3-1: config 0 descriptor?? [ 303.736382][ T320] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 303.906529][ T320] usb 4-1: device descriptor read/8, error -71 [ 304.033052][ T348] savu 0003:1E7D:2D5A.0009: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 304.186447][ T320] usb 4-1: device descriptor read/8, error -71 [ 304.283014][ T348] usb 3-1: USB disconnect, device number 21 [ 304.297163][ T348] ================================================================== [ 304.305257][ T348] BUG: KASAN: use-after-free in roccat_disconnect+0x22d/0x240 [ 304.312819][ T348] Read of size 4 at addr ffff88811add4408 by task kworker/1:5/348 [ 304.320640][ T348] [ 304.323014][ T348] CPU: 1 PID: 348 Comm: kworker/1:5 Not tainted syzkaller #0 [ 304.330396][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.340488][ T348] Workqueue: usb_hub_wq hub_event [ 304.345551][ T348] Call Trace: [ 304.348856][ T348] [ 304.351821][ T348] __dump_stack+0x21/0x30 [ 304.356214][ T348] dump_stack_lvl+0x110/0x170 [ 304.360928][ T348] ? show_regs_print_info+0x20/0x20 [ 304.366161][ T348] ? load_image+0x3f0/0x3f0 [ 304.370692][ T348] ? waiting_for_supplier_show+0xa0/0xa0 [ 304.376365][ T348] print_address_description+0x7f/0x2c0 [ 304.381945][ T348] ? roccat_disconnect+0x22d/0x240 [ 304.387090][ T348] kasan_report+0x10f/0x150 [ 304.391626][ T348] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 304.397119][ T348] ? roccat_disconnect+0x22d/0x240 [ 304.402232][ T348] __asan_report_load4_noabort+0x14/0x20 [ 304.407891][ T348] roccat_disconnect+0x22d/0x240 [ 304.412836][ T348] savu_remove+0xec/0x170 [ 304.417172][ T348] ? savu_probe+0x360/0x360 [ 304.421686][ T348] hid_device_remove+0x272/0x3a0 [ 304.426647][ T348] ? hid_device_probe+0x390/0x390 [ 304.431677][ T348] device_release_driver_internal+0x4e8/0x7c0 [ 304.437747][ T348] device_release_driver+0x19/0x20 [ 304.442859][ T348] bus_remove_device+0x2df/0x340 [ 304.447821][ T348] device_del+0x62e/0xe20 [ 304.452153][ T348] ? kill_device+0xd0/0xd0 [ 304.456568][ T348] ? __kasan_check_write+0x14/0x20 [ 304.461678][ T348] ? _raw_spin_lock_irq+0x95/0xf0 [ 304.466722][ T348] ? _raw_spin_lock_irqsave+0x130/0x130 [ 304.472271][ T348] hid_destroy_device+0x6a/0x110 [ 304.476479][ T337] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 304.477209][ T348] usbhid_disconnect+0x9f/0xc0 [ 304.489530][ T348] usb_unbind_interface+0x212/0x8a0 [ 304.494789][ T348] ? kernfs_remove_by_name_ns+0x120/0x160 [ 304.500538][ T348] ? usb_driver_release_interface+0x1b0/0x1b0 [ 304.506620][ T348] device_release_driver_internal+0x536/0x7c0 [ 304.512747][ T348] device_release_driver+0x19/0x20 [ 304.517859][ T348] bus_remove_device+0x2df/0x340 [ 304.522795][ T348] device_del+0x62e/0xe20 [ 304.527146][ T348] ? kill_device+0xd0/0xd0 [ 304.531560][ T348] ? device_unregister+0x27/0x40 [ 304.536516][ T348] usb_disable_device+0x3a8/0x750 [ 304.541558][ T348] usb_disconnect+0x32d/0x870 [ 304.546239][ T348] hub_event+0x19b0/0x43f0 [ 304.550675][ T348] ? hub_post_resume+0x120/0x120 [ 304.555634][ T348] ? __schedule+0xbd7/0x14a0 [ 304.560226][ T348] process_one_work+0x6c8/0xbb0 [ 304.565080][ T348] worker_thread+0xaa0/0x1250 [ 304.569764][ T348] ? __kasan_check_read+0x11/0x20 [ 304.574824][ T348] kthread+0x3f5/0x4f0 [ 304.578916][ T348] ? worker_clr_flags+0x190/0x190 [ 304.583983][ T348] ? kthread_blkcg+0xd0/0xd0 [ 304.588610][ T348] ret_from_fork+0x1f/0x30 [ 304.593058][ T348] [ 304.596095][ T348] [ 304.598438][ T348] Allocated by task 348: [ 304.602818][ T348] __kasan_kmalloc+0xd4/0x100 [ 304.607575][ T348] kmem_cache_alloc_trace+0x119/0x270 [ 304.612979][ T348] roccat_connect+0x5c/0x4b0 [ 304.617596][ T348] savu_probe+0x1ba/0x360 [ 304.621961][ T348] hid_device_probe+0x28d/0x390 [ 304.626843][ T348] really_probe+0x27d/0x970 [ 304.631382][ T348] __driver_probe_device+0x193/0x270 [ 304.636693][ T348] driver_probe_device+0x54/0x3e0 [ 304.641755][ T348] __device_attach_driver+0x2a6/0x460 [ 304.647152][ T348] bus_for_each_drv+0x184/0x210 [ 304.652022][ T348] __device_attach+0x2b0/0x420 [ 304.656811][ T348] device_initial_probe+0x1a/0x20 [ 304.661864][ T348] bus_probe_device+0xc0/0x1e0 [ 304.666655][ T348] device_add+0xaef/0xe90 [ 304.668809][ T30] audit: type=1400 audit(1790103217.061:206): avc: denied { mount } for pid=1794 comm="syz.4.498" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 304.671016][ T348] hid_add_device+0x349/0x4b0 [ 304.671038][ T348] usbhid_probe+0xb93/0xf30 [ 304.702282][ T348] usb_probe_interface+0x60f/0xb20 [ 304.707432][ T348] really_probe+0x27d/0x970 [ 304.711960][ T348] __driver_probe_device+0x193/0x270 [ 304.717473][ T337] usb 1-1: Using ep0 maxpacket: 16 [ 304.717623][ T348] driver_probe_device+0x54/0x3e0 [ 304.727774][ T348] __device_attach_driver+0x2a6/0x460 [ 304.733182][ T348] bus_for_each_drv+0x184/0x210 [ 304.738156][ T348] __device_attach+0x2b0/0x420 [ 304.742950][ T348] device_initial_probe+0x1a/0x20 [ 304.748006][ T348] bus_probe_device+0xc0/0x1e0 [ 304.752853][ T348] device_add+0xaef/0xe90 [ 304.757216][ T348] usb_set_configuration+0x1a01/0x1f70 [ 304.762708][ T348] usb_generic_driver_probe+0x91/0x150 [ 304.768191][ T348] usb_probe_device+0x143/0x250 [ 304.773071][ T348] really_probe+0x27d/0x970 [ 304.777600][ T348] __driver_probe_device+0x193/0x270 [ 304.782915][ T348] driver_probe_device+0x54/0x3e0 [ 304.787961][ T348] __device_attach_driver+0x2a6/0x460 [ 304.793368][ T348] bus_for_each_drv+0x184/0x210 [ 304.798280][ T348] __device_attach+0x2b0/0x420 [ 304.803071][ T348] device_initial_probe+0x1a/0x20 [ 304.808124][ T348] bus_probe_device+0xc0/0x1e0 [ 304.812908][ T348] device_add+0xaef/0xe90 [ 304.817269][ T348] usb_new_device+0xa1f/0x1720 [ 304.822067][ T348] hub_event+0x291b/0x43f0 [ 304.826577][ T348] process_one_work+0x6c8/0xbb0 [ 304.831462][ T348] worker_thread+0xaa0/0x1250 [ 304.836172][ T348] kthread+0x3f5/0x4f0 [ 304.836560][ T337] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.840295][ T348] ret_from_fork+0x1f/0x30 [ 304.840320][ T348] [ 304.857209][ T348] Freed by task 1760: [ 304.860964][ T337] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.861273][ T348] kasan_set_track+0x4a/0x70 [ 304.874746][ T348] kasan_set_free_info+0x23/0x40 [ 304.879819][ T348] ____kasan_slab_free+0x125/0x160 [ 304.884966][ T348] __kasan_slab_free+0x11/0x20 [ 304.889767][ T348] slab_free_freelist_hook+0xc2/0x190 [ 304.895194][ T348] kfree+0xc4/0x270 [ 304.899038][ T348] roccat_release+0x2ae/0x370 [ 304.903769][ T348] __fput+0x22b/0x900 [ 304.907777][ T348] ____fput+0x15/0x20 [ 304.911787][ T348] task_work_run+0x127/0x190 [ 304.916407][ T348] exit_to_user_mode_loop+0xd0/0xe0 [ 304.921637][ T348] exit_to_user_mode_prepare+0x87/0xd0 [ 304.927132][ T348] syscall_exit_to_user_mode+0x1a/0x30 [ 304.932629][ T348] do_syscall_64+0x58/0xa0 [ 304.937070][ T348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 304.942965][ T348] [ 304.945282][ T348] The buggy address belongs to the object at ffff88811add4400 [ 304.945282][ T348] which belongs to the cache kmalloc-512 of size 512 [ 304.959329][ T348] The buggy address is located 8 bytes inside of [ 304.959329][ T348] 512-byte region [ffff88811add4400, ffff88811add4600) [ 304.966678][ T337] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 304.972491][ T348] The buggy address belongs to the page: [ 304.981802][ T337] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 304.987156][ T348] page:ffffea00046b7500 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11add4 [ 304.997772][ T337] usb 1-1: SerialNumber: syz [ 305.005470][ T348] head:ffffea00046b7500 order:2 compound_mapcount:0 compound_pincount:0 [ 305.018389][ T348] flags: 0x4000000000010200(slab|head|zone=1) [ 305.024476][ T348] raw: 4000000000010200 0000000000000000 0000000100000001 ffff888100042f00 [ 305.033083][ T348] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 305.041654][ T348] page dumped because: kasan: bad access detected [ 305.048072][ T348] page_owner tracks the page as allocated [ 305.049171][ T337] usb 1-1: 0:2 : does not exist [ 305.053880][ T348] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 169, ts 6899369233, free_ts 6717681925 [ 305.077575][ T348] post_alloc_hook+0x192/0x1b0 [ 305.082344][ T348] prep_new_page+0x1c/0x110 [ 305.086853][ T348] get_page_from_freelist+0x2c3a/0x2cd0 [ 305.092396][ T348] __alloc_pages+0x1a2/0x460 [ 305.097006][ T348] new_slab+0xa0/0x4d0 [ 305.101097][ T348] ___slab_alloc+0x3ac/0x840 [ 305.105727][ T348] __slab_alloc+0x49/0x90 [ 305.110071][ T348] kmem_cache_alloc_trace+0x146/0x270 [ 305.115446][ T348] alloc_bprm+0x59/0x740 [ 305.119686][ T348] do_execveat_common+0x1aa/0xab0 [ 305.124720][ T348] __x64_sys_execve+0x92/0xb0 [ 305.129400][ T348] x64_sys_call+0x919/0x9a0 [ 305.133932][ T348] do_syscall_64+0x4c/0xa0 [ 305.138369][ T348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.144265][ T348] page last free stack trace: [ 305.148929][ T348] __free_pages_ok+0xa13/0xae0 [ 305.153695][ T348] __free_pages+0xf6/0x100 [ 305.158112][ T348] free_nonslab_page+0x86/0xc0 [ 305.163373][ T348] kfree+0x19a/0x270 [ 305.167285][ T348] kvfree+0x35/0x40 [ 305.171087][ T348] proc_sys_call_handler+0x581/0x7c0 [ 305.176375][ T348] proc_sys_read+0x1f/0x30 [ 305.180800][ T348] vfs_read+0x6c0/0xc20 [ 305.184997][ T348] ksys_read+0x14a/0x260 [ 305.189244][ T348] __x64_sys_read+0x7b/0x90 [ 305.193749][ T348] x64_sys_call+0x96d/0x9a0 [ 305.198260][ T348] do_syscall_64+0x4c/0xa0 [ 305.202679][ T348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 305.208599][ T348] [ 305.210924][ T348] Memory state around the buggy address: [ 305.216576][ T348] ffff88811add4300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 305.224646][ T348] ffff88811add4380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 305.232713][ T348] >ffff88811add4400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 305.240766][ T348] ^ [ 305.245153][ T348] ffff88811add4480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 305.253340][ T348] ffff88811add4500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 305.261396][ T348] ================================================================== [ 305.269459][ T348] Disabling lock debugging due to kernel taint [ 305.636406][ T337] usb 1-1: 5:0: cannot get min/max values for control 2 (id 5) [ 305.645980][ T337] usb 1-1: USB disconnect, device number 21 [ 305.676390][ T320] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 305.916362][ T320] usb 4-1: Using ep0 maxpacket: 8 [ 306.036430][ T320] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.046190][ T320] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.059007][ T320] usb 4-1: config 0 interface 0 has no altsetting 0 [ 306.065628][ T320] usb 4-1: New USB device found, idVendor=056a, idProduct=5002, bcdDevice= 0.00 [ 306.074736][ T320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.086598][ T320] usb 4-1: config 0 descriptor?? [ 306.626412][ T320] usbhid 4-1:0.0: can't add hid device: -71 [ 306.632423][ T320] usbhid: probe of 4-1:0.0 failed with error -71 [ 306.639647][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 306.655674][ T320] usb 4-1: USB disconnect, device number 24 [ 306.665633][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 306.686557][ T340] udevd[340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 306.706437][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 306.729734][ T307] udevd[307]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 306.755340][ T1808] fido_id[1808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory