last executing test programs: 7.460887487s ago: executing program 1 (id=2706): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/unix\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r3}, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000280)={0x100, r4}, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000340)={0x100, r5}, 0x0) landlock_restrict_self(r2, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x800) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f", 0x70}, {&(0x7f0000000440)="d3370d4bf5328db259678875a2d50c3b36adcfd58684580d5095c7454f60c432944f43cb9051e9a9a8259d7e4dfec86f6e0116097221541af670a3d62bf0ed206c8b75ed1eeb0b5dad4cae312fb40d2755e2ecf92f5cdee5785e4ae7fc3264d70b2d1c7bef9044b6ed4dce53adbaeb7778fc95aee91141f2188a2502880e4c67be52dbf0ef3bba4f98a6fa1ed2f6ee2ebacfc49ef6414e8abbbe12713de9850d800f140c903c1f63eac4365a56147501d8e9d56f77263d43a3ac5defd91e7b865ff0cd46bf8dff9c5ed31a03682576836b1a6ae95c69039f7857830154be52eea8898bf8f04c3661a01dc61d", 0xec}], 0x2, 0x0, 0x0, 0x4000000}], 0x1, 0x40800) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r8, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) 7.416020744s ago: executing program 3 (id=2708): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0xffffffff, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x700, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000580)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 7.161572096s ago: executing program 3 (id=2710): syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x300) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x41, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007916ae20e20424140a8a0102030109022f00010000000009040000000266b900052406"], 0x0) 6.091151875s ago: executing program 0 (id=2718): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="10010000000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x7}}, './file0\x00'}) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x4, @mcast2, 0xfffffffe}, 0x1c) recvmmsg(r1, &(0x7f0000001940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000019c0)=""/17, 0x11}, 0x1000}], 0x1, 0x2b, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x8}, @local=@item_012={0x0, 0x2, 0x9}, @global=@item_4={0x3, 0x1, 0x0, "24258d5a"}]}}, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x2}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000020000000a3c000000120a01010000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000002"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000005400e501000000000000000007000000", @ANYRES32=r8, @ANYBLOB="20000100", @ANYRES64=r5, @ANYBLOB="0100"], 0x38}, 0x1, 0x0, 0x0, 0x200088d0}, 0x80) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="080031000d00000005002d0001000000"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x0) 5.858351265s ago: executing program 4 (id=2720): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xfc4, &(0x7f00000011c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa1688a830008100400081"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010829bd7000000000000b00000008000300", @ANYRES32=r2, @ANYBLOB="60005080110001004abee339084eeef16f162471f40000000800030002ac0f00050002"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 5.728059733s ago: executing program 1 (id=2721): syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x40600) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f0000000180)=[{0x1, 0xa5, 0x1000}], 0x1) semop(r0, &(0x7f0000000140)=[{0x1, 0xfff, 0x1800}], 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x598, &(0x7f0000000240)={0x0, 0x13c5, 0x3180, 0x8000, 0x1c7}, &(0x7f0000000180)=0x0, &(0x7f0000000580)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0xffffffffffffffff, 0x2) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4000, @fd=r6, 0x1, 0x0, 0x0, 0x16, 0x1}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) 5.68101837s ago: executing program 4 (id=2722): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000010c0)=@newlink={0x50, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x3000, r1, 0x0, 0x6200}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x3}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x21ef}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x100}, 0x40080c0) 5.660656897s ago: executing program 3 (id=2723): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f00000034c0)=@vmx={0x0, 0x0, 0x2080, {0xffffffff}, {"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000edff00"}}) 5.302825132s ago: executing program 3 (id=2724): r0 = socket(0x2b, 0x80801, 0x1) ppoll(&(0x7f0000000000)=[{r0, 0x4242}, {r0, 0x10040}], 0x2, 0x0, 0x0, 0x0) close(r0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000280), 0x2640, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r5, 0x80811501, 0x3) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f00000002c0)=0x3) r6 = dup3(r2, r1, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x141042) fcntl$addseals(r8, 0x409, 0x9) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x64, 0x0, &(0x7f0000000380)=[@dead_binder_done, @acquire_done, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000300)={@fda={0x66646185, 0x8, 0x2, 0x7}, @fd={0x66642a85, 0x0, r2}, @fd={0x66642a85, 0x0, r7}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x10000000000) poll(&(0x7f0000000240)=[{r2, 0x2188}], 0x1, 0x8001) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f00000049c0)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) shutdown(r0, 0x1) syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003cdc169104207082020490102030109021b000108033002090401060123e94f0909050502aa03080f08"], &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) 5.248998538s ago: executing program 4 (id=2725): r0 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r0, &(0x7f00000031c0)={&(0x7f00000006c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000b40)="b5640aae1e407af01eecff9e22e152a958b96c15ffd051d17c6c712f21a8abb26b561e7af56b164829c35642692c102092e1f43782559cb76acaa20f83d5e807ad43b3e153ccdf10b894d755e849d01e91b7b49af88a501bc937c19203d32e33610f090c9d9e0d5972ac64142f8f4b71f27cc89c43c9bec897b53fee3e5f94497031ff2e460d2c011dfd60030db5a289bde09ac884de124e62b5b6921c326a85bc8791473d2828d1e28b5f20e286b061c4dadef878b72e6095841189db4da6e671677ca72a3c1b69c2ec25d3ce", 0xcd}, {&(0x7f0000000e00)="5c6817db84aafc4ba93b3b7b773c1f7c014e2a2e2192542afa9748dcd0a777e403000000290d970e2f9a1d8f527923b0f362103e5bbeda2dca0d9d2b1e5238329691753f1860286f1aaa0786ba5cb644966e7b7566d2960bab4c5ba6da8e730af484c4850e243e0e95803437dfd6b95b5d3ffbb5d9fb8bc5b2358837f79985f063bfb4e982bdbd79b6aff84a010d1a97960158de81236aa66640e348b98794dd9ca277d910243cf4d9c6d38979d81faac0930900"/207, 0xcf}, {&(0x7f0000000280)="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", 0x147}, {&(0x7f0000000740)="4f0461e980a3df614c952ba937542c3956c268ef9da7fc364c6d5c543c3bd84159a349884fb4df8936363169ce8541c090bb5871df329e56747592fa4d29a09dcb4c416503ec1113680af76cba6417576ac2c0d3570f91a9c661f10e9bdab3c038f68844db4a19a8a613d78adb0405e27a1dea217288306169ac437c2401514510725ff144e75b83b8c67735520151c1018c3542bdfa2cae78aeb5d328f7d134706eb4d03bf4018be0f581f55e82cc1e851b8585d48a881144bfd5e96b52b62e62abe7ace71093fe8779d41feea0eb401dc005f2e3fe47320e7f945fb04e06c713f062ca47794f9c0b7fa88ccfacc4a51a4e816e0cb832c42d9f60561d5086ff512190d1129892fd541a0fbc9a41d70cd0d4501fed5545cd04b7800814bcbf492339bbfe784baba895beda447447a447e088a8d7cb795b3543a8cd8d8efb830dabc88b5b6466cd1d903833fca0e1049480810da129e746e2c9726a846ce85003a6bb9949e5dd140ab97a001c91323d5cb6648d4f61d40d4951ae36a1a404ba3452ae9a969c16a0918b4afe0b7b6afe4d59d8abfed8e7b38ce7c6c4daf306d0136c353c109f0a63c26df5f8866e763dc2fcd93b7c9b7143823cd8272533aa2eb47f873da2e1aeba66332990f5033c712108f71bc055f29317d8dd9b227b524d61381ed55fdb83ee0849699dae2e0bb675bf07392f4b0303f2498c892988420f1e144e73eb89146ccde129625478ae391d7ed1d6f5fc03c603c699250ff4801890eda63df41b0b9d619b2dad24798faf47863f79ee52ee40e8550c52c28a795377d934e9b3cb2f9f0ae973055288f5ebbb6a193e5cf89d3dfff60d4e545abda64b1c55d315931540117b96e72a5cea284c4a9d99d165d19e12176acd226a9ec38d6889c913b8c98b3a1666ec9b378655838df06b8318691cded6314ce3bcdd3d1ac172c3ecd2f82879771034f5f1ebb3d6ee5b10c77f269954680acc2495c5", 0x2be}], 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000002900000004"], 0x18}, 0x8080) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x2, @remote, 0x0, 0x100000}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000040)="53005915c2f5fd2bef3c2a03", 0xc}], 0x1, 0x0, 0x300, 0x900}, 0x0) 5.239345174s ago: executing program 2 (id=2726): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f00000190c0)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2a}}]}, &(0x7f0000000000)=0x10) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) r1 = syz_io_uring_setup(0xac9, &(0x7f00000002c0)={0x0, 0x3594, 0x10, 0x1003, 0x21e}, &(0x7f0000000240)=0x0, &(0x7f0000000340)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x3) syz_open_dev$tty1(0xc, 0x4, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r5, 0x0, 0x4048004) fgetxattr(0xffffffffffffffff, &(0x7f0000001080)=@random={'system.', ']\x00'}, &(0x7f0000001100)=""/149, 0x95) ioctl$KVM_SET_PIT(r5, 0x8048ae66, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x80000) open$dir(0x0, 0x2601, 0x0) ioprio_set$pid(0x1, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000380)={0x8a001, 0x0, 0x12}, 0x18) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xa1, &(0x7f00000000c0)=[{&(0x7f0000000100)="1400000016000b63d25a80648c2594f921240685", 0x14}], 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x140, 0xffffffff, 0xffffffff, 0x140, 0xffffffff, 0x3c8, 0xffffffff, 0xffffffff, 0x3c8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @rand_addr=' \x01\x00', [0x0, 0x0, 0xffffffff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@tos={{0x28}, {0x9, 0x2, 0x1}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @empty}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4f8) 5.099861436s ago: executing program 4 (id=2727): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x8, 0xfffffefc, 0x5}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88842, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a0000000400008004f0", @ANYRES16=r1], 0x1c}}, 0x804) 4.815811401s ago: executing program 4 (id=2728): socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0x2f00, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x2a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000004600)='map_files\x00') fchdir(r3) sendmmsg$unix(r2, &(0x7f0000002d80)=[{{0x0, 0x53fe0, 0x0}}, {{&(0x7f0000000080)=@abs={0x1, 0x30, 0x4e30}, 0x4, 0x0}}], 0x2, 0x40008004) mount$fuse(0x0, 0x0, &(0x7f0000000080), 0x800, &(0x7f0000006140)=ANY=[@ANYRES16=r2, @ANYBLOB="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", @ANYBLOB="2c726f6f746d6f64653d3030303030303030303034303030302c7573655b5f696439d6904c29380000000000000000", @ANYRES8=r3, @ANYRESDEC=0x0]) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r4, &(0x7f0000004100)={0x2020}, 0x2020) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f2526854a5a004cb08dad59319ee0f21d26b"], 0x40}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r7, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8801}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$vbi(&(0x7f00000000c0), 0x2, 0x2) 4.239904509s ago: executing program 1 (id=2729): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001040)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89a2, &(0x7f0000000040)={'bridge0\x00', @random="1c00"}) 4.220980921s ago: executing program 2 (id=2730): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwrite64(r1, &(0x7f0000002480)="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", 0x1000, 0xfffffffffffffffb) r2 = socket(0x28, 0x5, 0x0) r3 = syz_io_uring_setup(0x6197, &(0x7f0000000240)={0x0, 0xc0aa, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000002440)='statm\x00') unshare(0x24060400) r7 = socket(0xa, 0x3, 0x1) unshare(0x2c060000) unshare(0x22020600) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) setsockopt$MRT_TABLE(r7, 0x0, 0xcf, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f0000000400)={0x2020}, 0x2020) r10 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r11 = ioctl$LOOP_CTL_GET_FREE(r10, 0x4c82) ioctl$LOOP_CTL_REMOVE(r10, 0x4c81, r11) ioctl$LOOP_CTL_ADD(r6, 0x4c80, r11) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) 4.024903578s ago: executing program 1 (id=2731): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x300, 0xfffd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@tmpl={0x84, 0x5, [{{@in=@local, 0x0, 0x2b}, 0x0, @in=@broadcast}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local, 0x4000}]}]}, 0x13c}}, 0x4040000) 3.596351335s ago: executing program 1 (id=2732): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000100ac1414aa000000001000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000080"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@id={0x1e, 0x3, 0x2, {0x4e21, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0xfffffffe}, 0x10) syz_usb_connect$cdc_ncm(0x3, 0x74, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001020000102505a1a4400001020301090262000201a220fc0904000001020d00000b24060001717e414ba6a605240000000d2404000000ffff03004b060206241a0200100905810300028100080904010000020d00000904010102020d000009058202100002a20b09050302000206fe3e"], 0xfffffffffffffffc) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, 0x0, 0xc000041) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000e80)=@gcm_256={{0x303, 0x36}, "437e509e2d2800", "8b3de2aabceef2a0640000d5a66fd32f419e59f3000000000400", "7d939a3c"}, 0x38) write(0xffffffffffffffff, 0x0, 0x0) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) socket(0x10, 0x3, 0x0) 3.095373323s ago: executing program 4 (id=2733): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x0, 0xe, 0xc2, {0xc2, 0xe, "5ed379f4a39ea66d4b575a1f7635b935f2b02371f0e8bdc3f1170d8f4daf4b53edcd5d28723808825559edc2d945ed892463cb18a1a4d9ffb4b377ccbb5500a4c0990f2843330ef3898c49f8ae0232e42119d339a63531284cfee7fb6bc5cde8b477b24cac30cc29cff6d2482e56151b98d4d3d4bb3b737fb2b1232596ec9e7d56a54c51998eb4945fd1ab1db9c182474e47a5a2ecd399c5896fc3fe6b5ce15b3281459a5ed9498d9562dba31edcad335420a604a3f38cd6ebca90180ae14408"}}, &(0x7f0000000000)={0x0, 0x3, 0x23, @string={0x23, 0x3, "98833fca733cb4094f7f9fc8fccf2cacb2f3fea65356d4525e7b9a27f1b2fb4c4c"}}}, &(0x7f0000000680)={0x1c, &(0x7f00000001c0)={0x40, 0x17, 0x33, "525d1120b5cb09975941bb3d61a1a9398798ddc2a03e5abf4dcc63bd9cffd127958263da4d5dedc03c250ebfe565d8fab13f4d"}, &(0x7f0000000200)={0xa1, 0x1, 0x400, "015a09bbf2562bfcd6d4ccaaa91bf6b4a477c0df9b4713ccd57e0a1155344bfd8a3d472c46bfbf5aaf85cd950d693356333424ceade8c826a51948c5ae56c6a74e7bc4b920ff33aa008dc1cc394cb783166116c49feb5d732a7f7505bcc8fab05d099552deb6c76b022e075546e33d4b27e2494d292f329a02efee610d32841fdda3152d25a72933f8ca8f7fe3d7bf1d22f4298a1d5c88f4a50fcaac9f64bdc132385cdd6156e1104f0d173c31365673125beb7c3776ca4d022c8d2cee246ae61bbb8ab16e215692910cd3098253171037962a67e9058b6f71c7db6d9bfc6d155641d4a5fe238511769a3bd907df60a7c51dfe54158345616a625c879571ed8547aabb814dc25864e14ccc41b9bfdc88c55d05ee8dafa602cb26472ef8811cf419fd797a0a175e62f2ee8356f27da0bdc4e72dd404a492384e5324730258c18d76aa6ade049f98eb97960106899f6ed4369b2b0f0c0ecc90d273c6c94e8fa5a546efa7034dc44e298ccb234e05717b717d185e96f69f4fd69346611649cf6f8743d5e47b324b4806d3a924208a5a316b1a4968e215d91edb7fa5fb5ba8b3ce9266504b3fa5b6305cc8614a3e2c5216e1e6c924fb5ab7fb2d62e89ccbd190080190cc1d6dc486be6fefeeff26f277942de486176c0da0a29b2defe51c9618b6f3b35673d79a3e25327414bb684487c7fe2e602318adcb0f99eb1933be18d2529c5cce6c7df4dd80158e17144f853bc4435a9908361c74b40b5f2e9881e23948682dce2f8c6fbc94b655293868e4c38ab44e5bb9b7dbacc097ea8acb46f630d85f0a914aeb700476b9ced1b7fec15f4581ca9bb929c36a78939cd7e41e9c33f5702e3f571e66380aa2659f1d6fe544434a1d06cf424b609124a797dc7982506f06afc545a455b6faff5c61db6e807c25a3bb68a39264fa71ee1f1c6ed37651027fe7df0389e148831f69417134a76036e4f37c14eb2a03295adc3d660706260373ea7c1b03b12122fe5c6a3ee2ae0edc2fe4da19479df620c05fde500c59769672d1fab43d1336d49b66bc6fc9f35636d9e8dde090342332ca413ec15acc0248fa368b3d846e8edb5ea6025664f56f4564f8484aa4f4bf2a82411b430374f022dffee44b76587207451732371bd4fa497ffe58361891fa2c067d3097d46551d9e0f52200b7da60bd37322663d32557d89d7c08e65f6fb666e11b2a584d6faee58c2b851d06ec1cce5adf68199ede79bcbbcd342ee5cd0d3ad6c9adcd15f001395c479681da5aa9c383122bedcef6230d33eedd994949e8ef495280d5ddc7410a9b4d2546a831fde509852123f872e525381a13ef1097aed856922f0abfc44d057cd49a8062b0792cb526008c6c798298808c491212a200f8b644be8087b21e951f04c8564b92e6fcf46984fedb678ae2b1bc39dcc916321253406118187cc2e89c"}, &(0x7f0000000640)={0x21, 0x0, 0x2, 'Fd'}}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2.936606113s ago: executing program 0 (id=2734): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, 0x0) 2.936194306s ago: executing program 2 (id=2735): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)=ANY=[@ANYBLOB="2800000011143dcfffffffe600000000080001000000000008004b"], 0x28}, 0x1, 0x0, 0x13}, 0x0) 2.834466406s ago: executing program 2 (id=2736): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sndtimer(0xffffff9c, &(0x7f0000000000), 0x80601) ioctl$SNDRV_TIMER_IOCTL_TREAD64(r2, 0x400454a4, &(0x7f0000000280)) r3 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x6) unshare(0x26020480) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4}, 0x4) r5 = socket$can_bcm(0x1d, 0x2, 0x2) syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679d, 0x400, 0x2000006, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x2400c0c6, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1d, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x8, '\x00', r8, 0xffffffffffffffff, 0x1, 0x2, 0xfffffffe}, 0x50) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r10, 0xc0046686, &(0x7f0000000180)={0x2}) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 2.792902663s ago: executing program 0 (id=2737): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000100)=0xfffffffb, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x80fe}}, 0x1c) 2.524440692s ago: executing program 0 (id=2738): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000200000700000008000300", @ANYRES32=r2, @ANYBLOB="140004006e696376663000000000000000000000080005000a"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x2400c890) 2.361435719s ago: executing program 0 (id=2739): syz_emit_ethernet(0x52, &(0x7f00000006c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff88a830008100100086dd6008120000142b000003000000000000000008ffac1414bbfe8000000000000000000000000000aa3200"], 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000300)={0x0, 0x66c7, @value}) 2.149062413s ago: executing program 0 (id=2740): openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) (async) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x100000000, 0x8, 0x0, 0x3}, 0x0) fsopen(0x0, 0x0) (async) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r6) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r8) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r9 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r9, 0x0) (async) listen(r9, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r10, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r12, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x17}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x38, 0xfff, 0x0, 0x180, 0x4, 0xfff, 0xf1, 0x3, 0x7fffffffffffd, 0x5, 0x4005, 0x8, 0x0, 0x45, 0x200040001, 0xbdb], 0x40000, 0x1c4213}) 2.068257517s ago: executing program 3 (id=2741): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000000c0)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r3 = dup(r2) write$6lowpan_enable(r3, &(0x7f0000000000)='0', 0xfffffd2c) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) unshare(0x22020600) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff, 0x3f000000}, 0x0, 0x0) 832.969636ms ago: executing program 3 (id=2742): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = memfd_create(&(0x7f0000000240)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HO\xa9%\f\x1ae\xe0\x00\x00\xc0\x96{\t\x9b2\xb0\x00\x00\xfb\xff\xc6\xf8*_\xda\x9c\xf3\xa3\xf7\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\xe7\xca\xf8\x04J\xe7\x18\xe8\x91%||\xa0\x8ez\xadT\xc8\x00\x00\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\xefB\x1b\x05\x997\xf5>U]\fwT\x15\xa2[\xad\xd9| \xbf*\xea\xb7\xe0\xb9', 0x3) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r2, &(0x7f000001f280)=[{{&(0x7f0000019300)={0xa, 0x4e24, 0x3, @empty, 0x4}, 0x1c, 0x0}}, {{&(0x7f000001a400)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}, 0x81}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x4000000) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = syz_open_dev$vcsn(&(0x7f00000001c0), 0x5, 0x400) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000200)={0x8, 0x7, 0x5, 0x0, 0xe}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f00000007c0)=0x42000401, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) listen(r3, 0xb5d6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x3, &(0x7f0000000100)=[{0x5}, {0x45}, {0x6}]}) sendmsg$unix(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)='\x00', 0x1}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) ioctl$sock_proto_private(r4, 0x89eb, &(0x7f0000000340)="16ee6bd4ed4240885fbb46ce946d1740ab607e045a80765f") sendmmsg$unix(r5, &(0x7f0000005400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)='+', 0x1}], 0x1, &(0x7f0000000880)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}], 0x1, 0x11) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x8000, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000050a01020000000000000000010020000c00024000000800000000010900010073797a3100000000180004801400030076657468315f6d616376746170000000140000000000000000000000000000000000000a"], 0x6c}}, 0x0) 311.478095ms ago: executing program 1 (id=2743): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) io_setup(0x200, &(0x7f00000010c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000800)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0xfffe, r2, 0x0}]) write$UHID_INPUT(r1, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) 173.637575ms ago: executing program 2 (id=2744): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000180), 0x801, 0x0) r1 = syz_io_uring_setup(0x1644, &(0x7f0000000580)={0x0, 0x0, 0x10100, 0x0, 0x17b}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) write$khugepaged_scan(r0, &(0x7f0000000040), 0x8) io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=2745): socket$packet(0x11, 0x2, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000340)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2d53dd0688184eee, 0x6071, 0x0, 0xe6, {[@generic={0x8, 0xa, "e759200000000000"}]}}}}}}}, 0x0) kernel console output (not intermixed with test programs): [ 414.316037][ T5831] dvbdev: DVB: registering new adapter (Terratec H7) [ 414.325320][ T5899] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 414.335312][ T5831] usb 4-1: media controller created [ 414.356243][ T5831] usb read operation failed. (-71) [ 414.375041][ T5831] usb write operation failed. (-71) [ 414.398158][ T5831] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 414.478424][ T5831] usb 4-1: USB disconnect, device number 60 [ 414.486515][ T5899] usb 1-1: device descriptor read/64, error -71 [ 414.758345][ T5899] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 414.945562][ T5899] usb 1-1: device descriptor read/64, error -71 [ 415.066213][ T5899] usb usb1-port1: attempt power cycle [ 415.104961][T12593] 8021q: adding VLAN 0 to HW filter on device bond3 [ 415.202593][T12601] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 415.214042][T12601] team0: Port device batadv2 added [ 415.405400][ T5899] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 415.426612][ T5899] usb 1-1: device descriptor read/8, error -71 [ 415.675523][ T5899] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 415.706787][ T5899] usb 1-1: device descriptor read/8, error -71 [ 415.829564][ T5899] usb usb1-port1: unable to enumerate USB device [ 416.379920][T12626] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 416.525521][ T5913] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 416.553458][T12587] veth1_to_bond: left allmulticast mode [ 416.880889][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 416.980120][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 417.011495][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 417.045017][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 417.075331][ T5913] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 417.107888][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.250479][ T5913] usb 4-1: config 0 descriptor?? [ 417.471378][T12637] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2104'. [ 417.482966][T12637] netlink: Unknown conntrack attr (0) [ 417.514586][T12639] binder: BINDER_SET_CONTEXT_MGR already set [ 417.520797][T12639] binder: 12638:12639 ioctl 4018620d 200000000040 returned -16 [ 417.915030][ T5913] usbhid 4-1:0.0: can't add hid device: -71 [ 417.921267][ T5913] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 418.135094][ T5913] usb 4-1: USB disconnect, device number 61 [ 418.444155][T12660] tipc: Enabling of bearer rejected, failed to enable media [ 418.825689][ T5848] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 419.092719][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.110444][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.120481][ T5848] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 419.137232][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.162032][ T5848] usb 4-1: config 0 descriptor?? [ 419.467272][T12675] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2116'. [ 419.477266][T12675] netlink: ct family unspecified [ 419.577685][ T5848] sony 0003:054C:024B.001F: unknown main item tag 0x0 [ 419.585362][ T5913] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 419.585936][ T5848] sony 0003:054C:024B.001F: unknown main item tag 0x0 [ 419.600460][ T5848] sony 0003:054C:024B.001F: unexpected long global item [ 419.608270][ T5848] sony 0003:054C:024B.001F: parse failed [ 419.614031][ T5848] sony 0003:054C:024B.001F: probe with driver sony failed with error -22 [ 419.696006][ T5891] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 419.746977][ T5913] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 419.758069][ T5913] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 419.765365][ T9425] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 419.767478][ T5913] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.788666][ T5913] usb 3-1: config 0 descriptor?? [ 419.799202][T12669] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 419.799681][T12665] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2113'. [ 419.816048][T12665] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 419.835319][ T5899] usb 4-1: USB disconnect, device number 62 [ 419.845343][ T5891] usb 5-1: Using ep0 maxpacket: 8 [ 419.852759][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.868296][ T5891] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 419.878325][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.886392][ T5891] usb 5-1: Product: syz [ 419.890941][ T5891] usb 5-1: Manufacturer: syz [ 419.898700][ T5891] usb 5-1: SerialNumber: syz [ 419.905327][ T9425] usb 2-1: device descriptor read/64, error -71 [ 419.912442][ T5891] usb 5-1: config 0 descriptor?? [ 419.921094][ T5891] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 419.927329][ T5891] usb 5-1: selecting invalid altsetting 1 [ 420.155718][ T9425] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 420.275119][ T5913] elan 0003:04F3:0755.0020: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 420.295768][ T9425] usb 2-1: device descriptor read/64, error -71 [ 420.415715][ T9425] usb usb2-port1: attempt power cycle [ 420.755370][ T9425] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 420.787041][ T9425] usb 2-1: device descriptor read/8, error -71 [ 421.001026][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2120'. [ 421.021136][T12690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2120'. [ 421.021218][ T5078] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.030275][ T9425] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 421.047013][ T5078] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.056140][ T9425] usb 2-1: device descriptor read/8, error -71 [ 421.063401][ T5078] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.073386][ T5078] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 421.082527][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 421.094708][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 421.166663][ T9425] usb usb2-port1: unable to enumerate USB device [ 421.515415][ T5913] usb 3-1: reset full-speed USB device number 78 using dummy_hcd [ 421.615395][ T5837] Bluetooth: hci4: command 0x0406 tx timeout [ 421.645484][ T5848] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 421.775702][ T5848] usb 4-1: device descriptor read/64, error -71 [ 422.015550][ T5848] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 422.145669][ T5848] usb 4-1: device descriptor read/64, error -71 [ 422.265591][ T5848] usb usb4-port1: attempt power cycle [ 422.447989][T12706] fuse: Bad value for 'fd' [ 422.470538][ T5831] usb 5-1: USB disconnect, device number 64 [ 422.607287][ T5848] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 422.636032][ T5848] usb 4-1: device descriptor read/8, error -71 [ 422.875431][ T5848] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 422.896049][ T5848] usb 4-1: device descriptor read/8, error -71 [ 423.006404][ T5848] usb usb4-port1: unable to enumerate USB device [ 423.075783][ T5899] usb 3-1: USB disconnect, device number 78 [ 423.588766][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2131'. [ 423.660087][T12728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.683724][T12728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.945362][ T5899] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 424.464128][T12737] tipc: Enabling of bearer rejected, failed to enable media [ 424.485384][ T5831] usb 3-1: new full-speed USB device number 79 using dummy_hcd [ 424.661874][ T5831] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 424.682613][ T5831] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 424.718364][ T5831] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 424.748417][ T5831] usb 3-1: New USB device found, idVendor=056a, idProduct=0039, bcdDevice= 0.00 [ 424.770139][ T5831] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.802659][T12744] loop6: detected capacity change from 0 to 524288000 [ 424.843377][ T5831] usb 3-1: config 0 descriptor?? [ 424.854953][T12735] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 424.952215][T12748] netlink: 388 bytes leftover after parsing attributes in process `syz.3.2136'. [ 425.034123][T12744] bond4: option ad_user_port_key: invalid value (16739) [ 425.083825][T12744] bond4: option ad_user_port_key: allowed values 0 - 1023 [ 425.306583][T12744] bond4 (unregistering): Released all slaves [ 425.398935][T12760] syz.4.2140: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 425.432699][T12760] CPU: 0 UID: 0 PID: 12760 Comm: syz.4.2140 Tainted: G L syzkaller #0 PREEMPT(full) [ 425.432728][T12760] Tainted: [L]=SOFTLOCKUP [ 425.432735][T12760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 425.432747][T12760] Call Trace: [ 425.432755][T12760] [ 425.432763][T12760] dump_stack_lvl+0xe8/0x150 [ 425.432790][T12760] warn_alloc+0x249/0x340 [ 425.432804][T12760] ? stack_trace_save+0xa9/0x100 [ 425.432821][T12760] ? __pfx_warn_alloc+0x10/0x10 [ 425.432833][T12760] ? kasan_save_track+0x4f/0x80 [ 425.432843][T12760] ? kasan_save_track+0x3e/0x80 [ 425.432851][T12760] ? __kasan_kmalloc+0x93/0xb0 [ 425.432866][T12760] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 425.432883][T12760] ? xskq_create+0x56/0x170 [ 425.432902][T12760] ? xsk_setsockopt+0x54c/0x990 [ 425.432918][T12760] ? do_sock_setsockopt+0x17c/0x1b0 [ 425.432938][T12760] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 425.432952][T12760] ? do_syscall_64+0xe2/0xf80 [ 425.432967][T12760] __vmalloc_node_range_noprof+0x132/0x1730 [ 425.432992][T12760] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 425.433021][T12760] ? __kasan_kmalloc+0x93/0xb0 [ 425.433045][T12760] vmalloc_user_noprof+0xad/0xe0 [ 425.433062][T12760] ? xskq_create+0xbf/0x170 [ 425.433082][T12760] xskq_create+0xbf/0x170 [ 425.433099][T12760] xsk_init_queue+0xad/0x110 [ 425.433111][T12760] xsk_setsockopt+0x54c/0x990 [ 425.433123][T12760] ? __pfx_xsk_setsockopt+0x10/0x10 [ 425.433134][T12760] ? __pfx_aa_sk_perm+0x10/0x10 [ 425.433149][T12760] ? aa_sock_opt_perm+0xff/0x1a0 [ 425.433171][T12760] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 425.433188][T12760] ? __pfx_xsk_setsockopt+0x10/0x10 [ 425.433208][T12760] do_sock_setsockopt+0x17c/0x1b0 [ 425.433234][T12760] __x64_sys_setsockopt+0x13d/0x1b0 [ 425.433253][T12760] do_syscall_64+0xe2/0xf80 [ 425.433266][T12760] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.433275][T12760] ? trace_irq_disable+0x37/0x100 [ 425.433287][T12760] ? clear_bhb_loop+0x60/0xb0 [ 425.433300][T12760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.433317][T12760] RIP: 0033:0x7f1960b9acb9 [ 425.433334][T12760] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.433349][T12760] RSP: 002b:00007f1961990028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 425.433368][T12760] RAX: ffffffffffffffda RBX: 00007f1960e16090 RCX: 00007f1960b9acb9 [ 425.433380][T12760] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 425.433387][T12760] RBP: 00007f1960c08bf7 R08: 0000000000000004 R09: 0000000000000000 [ 425.433393][T12760] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.433399][T12760] R13: 00007f1960e16128 R14: 00007f1960e16090 R15: 00007f1960f3fa48 [ 425.433415][T12760] [ 425.433432][T12760] Mem-Info: [ 425.757541][T12760] active_anon:7730 inactive_anon:0 isolated_anon:0 [ 425.757541][T12760] active_file:23153 inactive_file:40391 isolated_file:0 [ 425.757541][T12760] unevictable:768 dirty:180 writeback:0 [ 425.757541][T12760] slab_reclaimable:11251 slab_unreclaimable:133561 [ 425.757541][T12760] mapped:34872 shmem:1357 pagetables:1448 [ 425.757541][T12760] sec_pagetables:0 bounce:0 [ 425.757541][T12760] kernel_misc_reclaimable:0 [ 425.757541][T12760] free:1258247 free_pcp:16796 free_cma:0 [ 425.809284][T12760] Node 0 active_anon:30920kB inactive_anon:0kB active_file:92612kB inactive_file:161360kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139488kB dirty:720kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13064kB pagetables:5652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 425.842775][T12760] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 425.879398][T12760] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 425.985424][T12760] lowmem_reserve[]: 0 2495 2497 2497 2497 [ 426.013177][T12760] Node 0 DMA32 free:1134720kB boost:0kB min:34232kB low:42788kB high:51344kB reserved_highatomic:0KB free_highatomic:0KB active_anon:31640kB inactive_anon:0kB active_file:92612kB inactive_file:161372kB unevictable:1536kB writepending:512kB zspages:0kB present:3129332kB managed:2555784kB mlocked:0kB bounce:0kB free_pcp:42916kB local_pcp:20344kB free_cma:0kB [ 426.132409][T12760] lowmem_reserve[]: 0 0 1 1 1 [ 426.179978][T12760] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 426.225414][T12760] lowmem_reserve[]: 0 0 0 0 0 [ 426.230309][T12760] Node 1 Normal free:3883568kB boost:0kB min:55652kB low:69564kB high:83476kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:22880kB local_pcp:9728kB free_cma:0kB [ 426.262794][ T5848] usb 1-1: new full-speed USB device number 78 using dummy_hcd [ 426.289794][T12760] lowmem_reserve[]: 0 0 0 0 0 [ 426.311056][T12760] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 426.407678][T12760] Node 0 DMA32: 3849*4kB (UME) 3512*8kB (UME) 2145*16kB (UME) 692*32kB (UME) 411*64kB (UME) 177*128kB (UME) 174*256kB (UM) 143*512kB (UM) 86*1024kB (UM) 18*2048kB (UME) 183*4096kB (UM) = 1141172kB [ 426.445116][T12760] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB [ 426.461649][ T5848] usb 1-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.495576][T12760] 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 426.501671][T12760] Node 1 Normal: 188*4kB (UE) 44*8kB (UME) 50*16kB (UME) 62*32kB (UME) 26*64kB (UME) 5*128kB (UM) 6*256kB (UME) 6*512kB (UME) 4*1024kB (UME) 1*2048kB (U) 944*4096kB (M) = 3883568kB [ 426.524237][ T5848] usb 1-1: config 0 interface 0 has no altsetting 0 [ 426.551520][T12760] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.561888][ T5848] usb 1-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 426.582251][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.603959][T12760] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 426.620700][ T5848] usb 1-1: config 0 descriptor?? [ 426.703058][T12760] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 426.715469][T12760] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 426.729433][T12760] 64668 total pagecache pages [ 426.738775][T12760] 0 pages in swap cache [ 426.743162][T12760] Free swap = 124996kB [ 426.751606][T12760] Total swap = 124996kB [ 426.756159][T12760] 2097051 pages RAM [ 426.760966][T12760] 0 pages HighMem/MovableOnly [ 426.769221][T12760] 426143 pages reserved [ 426.776948][T12760] 0 pages cma reserved [ 426.801754][T12772] fuse: Bad value for 'fd' [ 427.027031][T12775] tipc: Enabling of bearer rejected, failed to enable media [ 427.054481][ T5848] kye 0003:0458:5019.0021: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 427.096017][ T5848] kye 0003:0458:5019.0021: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.0-1/input0 [ 427.110715][ T5848] kye 0003:0458:5019.0021: tablet-enabling feature report not found [ 427.120175][ T5848] kye 0003:0458:5019.0021: tablet enabling failed [ 427.246457][ T5831] usbhid 3-1:0.0: can't add hid device: -71 [ 427.252480][ T5831] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 427.298887][ T5831] usb 3-1: USB disconnect, device number 79 [ 427.679860][T12792] netlink: 136 bytes leftover after parsing attributes in process `syz.3.2148'. [ 427.755383][ T5831] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 427.917287][ T5831] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.928351][ T5831] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 427.941880][ T5831] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.962188][ T5831] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.979660][ T5831] usb 3-1: Product: syz [ 427.988543][ T5831] usb 3-1: Manufacturer: syz [ 427.996709][ T5831] usb 3-1: SerialNumber: syz [ 428.025843][ T5831] cdc_mbim 3-1:1.0: skipping garbage [ 428.205526][T12801] syzkaller0: entered promiscuous mode [ 428.211191][T12801] syzkaller0: entered allmulticast mode [ 428.259320][T12783] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 428.492386][T12806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2152'. [ 428.984562][T12783] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 429.022814][ T5891] usb 1-1: USB disconnect, device number 78 [ 429.106884][ T5831] cdc_mbim 3-1:1.0: cdc-wdm0: USB WDM device [ 429.123166][ T5831] wwan wwan0: port wwan0mbim0 attached [ 429.285367][ T24] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 429.296275][ T5831] cdc_mbim 3-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 6e:1a:7e:3f:e6:31 [ 429.634128][ T24] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 429.657228][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 429.680016][ T24] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 429.701808][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.741158][ T24] usb 5-1: config 0 descriptor?? [ 429.895362][ T5831] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 430.125334][ T5831] usb 1-1: Using ep0 maxpacket: 16 [ 430.136279][ T5831] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.146726][ T5831] usb 1-1: config 0 has no interfaces? [ 430.181854][ T24] kye 0003:0458:5019.0022: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 430.206635][ T5831] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 430.216638][ T24] kye 0003:0458:5019.0022: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.4-1/input0 [ 430.235524][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 430.294472][ T24] kye 0003:0458:5019.0022: tablet-enabling feature report not found [ 430.302589][ T5831] usb 1-1: Product: syz [ 430.314985][ T5831] usb 1-1: SerialNumber: syz [ 430.325088][ T24] kye 0003:0458:5019.0022: tablet enabling failed [ 430.333600][ T5831] usb 1-1: config 0 descriptor?? [ 430.504969][T12839] loop8: detected capacity change from 0 to 7 [ 430.506021][T12839] Dev loop8: unable to read RDB block 7 [ 430.506058][T12839] loop8: unable to read partition table [ 430.506166][T12839] loop8: partition table beyond EOD, truncated [ 430.506177][T12839] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 430.977894][T12854] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2165'. [ 431.355400][ T5848] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 431.507612][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 431.519721][ T5848] usb 4-1: config 0 has no interfaces? [ 431.540060][ T5848] usb 4-1: New USB device found, idVendor=34ef, idProduct=202b, bcdDevice=36.09 [ 431.562394][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.583541][ T5848] usb 4-1: Product: syz [ 431.594274][ T5848] usb 4-1: Manufacturer: syz [ 431.605152][ T5848] usb 4-1: SerialNumber: syz [ 431.646771][ T5848] usb 4-1: config 0 descriptor?? [ 431.836421][ T5489] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 431.866407][T12873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.881334][ T5848] usb 4-1: USB disconnect, device number 67 [ 431.927888][T12873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.016686][ T5831] usb 5-1: USB disconnect, device number 65 [ 432.031518][T12873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.133896][T12873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.219186][T12873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 432.254156][T12873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 432.374875][ T5848] usb 1-1: USB disconnect, device number 79 [ 432.630630][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2175'. [ 432.749569][T12898] FAULT_INJECTION: forcing a failure. [ 432.749569][T12898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 432.777059][T12898] CPU: 1 UID: 0 PID: 12898 Comm: syz.0.2176 Tainted: G L syzkaller #0 PREEMPT(full) [ 432.777086][T12898] Tainted: [L]=SOFTLOCKUP [ 432.777092][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 432.777102][T12898] Call Trace: [ 432.777108][T12898] [ 432.777115][T12898] dump_stack_lvl+0xe8/0x150 [ 432.777141][T12898] should_fail_ex+0x412/0x560 [ 432.777166][T12898] _copy_from_user+0x2d/0xb0 [ 432.777188][T12898] ___sys_sendmsg+0x1c6/0x360 [ 432.777205][T12898] ? __lock_acquire+0x6b5/0x2cf0 [ 432.777225][T12898] ? __pfx____sys_sendmsg+0x10/0x10 [ 432.777267][T12898] ? __fget_files+0x2a/0x420 [ 432.777285][T12898] ? __fget_files+0x3a0/0x420 [ 432.777311][T12898] __x64_sys_sendmsg+0x1bd/0x2a0 [ 432.777330][T12898] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 432.777353][T12898] ? __pfx_ksys_write+0x10/0x10 [ 432.777378][T12898] do_syscall_64+0xe2/0xf80 [ 432.777396][T12898] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.777410][T12898] ? trace_irq_disable+0x37/0x100 [ 432.777428][T12898] ? clear_bhb_loop+0x60/0xb0 [ 432.777444][T12898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.777458][T12898] RIP: 0033:0x7f356e19acb9 [ 432.777471][T12898] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.777482][T12898] RSP: 002b:00007f356f05d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 432.777498][T12898] RAX: ffffffffffffffda RBX: 00007f356e415fa0 RCX: 00007f356e19acb9 [ 432.777510][T12898] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 432.777526][T12898] RBP: 00007f356f05d090 R08: 0000000000000000 R09: 0000000000000000 [ 432.777534][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.777542][T12898] R13: 00007f356e416038 R14: 00007f356e415fa0 R15: 00007f356e53fa48 [ 432.777562][T12898] [ 433.133688][T12909] syzkaller0: entered promiscuous mode [ 433.159706][T12909] syzkaller0: entered allmulticast mode [ 433.324389][T12921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2181'. [ 433.458964][T12926] binder: 12925:12926 ioctl c0306201 2000000001c0 returned -14 [ 433.995514][ T9425] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 434.186804][ T9425] usb 1-1: Using ep0 maxpacket: 8 [ 434.195582][ T9425] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 434.206848][ T9425] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 434.226651][ T9425] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 434.248066][ T9425] usb 1-1: string descriptor 0 read error: -71 [ 434.256234][ T9425] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.276797][ T9425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.310212][ T9425] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 434.349195][ T9425] usb 1-1: no configuration chosen from 1 choice [ 434.377127][ T9425] usb 1-1: USB disconnect, device number 80 [ 434.582926][T12962] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2197'. [ 434.592638][T12962] netlink: Unknown conntrack attr (0) [ 435.122330][ T5831] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 435.295612][ T9425] usb 2-1: new full-speed USB device number 90 using dummy_hcd [ 435.310156][ T5831] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 435.319507][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.328411][ T5831] usb 4-1: Product: syz [ 435.332645][ T5831] usb 4-1: Manufacturer: syz [ 435.339662][ T5831] usb 4-1: SerialNumber: syz [ 435.452512][ T9425] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 435.469481][ T9425] usb 2-1: config 0 interface 0 has no altsetting 0 [ 435.502168][ T9425] usb 2-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.00 [ 435.547162][ T9425] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.608125][ T9425] usb 2-1: config 0 descriptor?? [ 435.795476][ T5831] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 435.811356][ T5831] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 435.834013][T12985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.847801][ T5831] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 435.867497][T12986] netlink: 136 bytes leftover after parsing attributes in process `syz.4.2206'. [ 435.878297][T12985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.891387][ T5831] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 435.980429][ T5831] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 436.039957][ T5831] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 436.104327][ T5831] usb 4-1: USB disconnect, device number 68 [ 436.251732][ T9425] kye 0003:0458:5019.0023: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 436.271660][ T9425] kye 0003:0458:5019.0023: hidraw0: USB HID v0.00 Device [HID 0458:5019] on usb-dummy_hcd.1-1/input0 [ 436.287491][ T9425] kye 0003:0458:5019.0023: tablet-enabling feature report not found [ 436.297152][ T9425] kye 0003:0458:5019.0023: tablet enabling failed [ 436.467140][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2208'. [ 436.540772][T12994] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2208'. [ 436.725406][ T30] kauditd_printk_skb: 222 callbacks suppressed [ 436.725425][ T30] audit: type=1326 audit(1769300481.734:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12990 comm="syz.4.2208" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1960b9acb9 code=0x0 [ 436.985354][ T9] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 437.139051][ T9] usb 4-1: config 7 has an invalid interface number: 101 but max is 0 [ 437.159047][ T9] usb 4-1: config 7 has no interface number 0 [ 437.178067][ T9] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 437.188889][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.198128][ T9] usb 4-1: Product: syz [ 437.203377][ T9] usb 4-1: Manufacturer: syz [ 437.345356][ T9] usb 4-1: SerialNumber: syz [ 437.761044][ T9] as10x_usb: device has been detected [ 437.775063][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 437.916912][ T9] usb 4-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 438.114583][ T9] as10x_usb: error during firmware upload part1 [ 438.128448][ T9] Registered device Elgato EyeTV DTT Deluxe [ 438.132752][ T9] usb 4-1: USB disconnect, device number 69 [ 438.252506][ T5831] usb 2-1: USB disconnect, device number 90 [ 438.339844][ T9] Unregistered device Elgato EyeTV DTT Deluxe [ 438.340852][ T9] as10x_usb: device has been disconnected [ 438.911542][T13027] x_tables: duplicate underflow at hook 3 [ 439.172691][T13043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.185880][T13043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.578910][T13043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.599478][T13043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.695661][ T5848] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 439.804223][T13056] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2227'. [ 439.822343][T13056] tipc: Invalid UDP bearer configuration [ 439.822401][T13056] tipc: Enabling of bearer rejected, failed to enable media [ 439.927841][T13059] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.942687][T13059] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.039358][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.046053][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.872371][T13090] netlink: 'syz.3.2238': attribute type 10 has an invalid length. [ 441.454956][T13102] FAULT_INJECTION: forcing a failure. [ 441.454956][T13102] name failslab, interval 1, probability 0, space 0, times 0 [ 441.518758][T13102] CPU: 1 UID: 0 PID: 13102 Comm: syz.1.2243 Tainted: G L syzkaller #0 PREEMPT(full) [ 441.518781][T13102] Tainted: [L]=SOFTLOCKUP [ 441.518785][T13102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 441.518790][T13102] Call Trace: [ 441.518795][T13102] [ 441.518800][T13102] dump_stack_lvl+0xe8/0x150 [ 441.518819][T13102] should_fail_ex+0x412/0x560 [ 441.518842][T13102] should_failslab+0xa8/0x100 [ 441.518856][T13102] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 441.518871][T13102] ? __alloc_skb+0x193/0x390 [ 441.518884][T13102] ? __alloc_skb+0x1d7/0x390 [ 441.518896][T13102] ? __local_bh_enable_ip+0xd0/0x130 [ 441.518907][T13102] ? __alloc_skb+0x193/0x390 [ 441.518920][T13102] __alloc_skb+0x1d7/0x390 [ 441.518936][T13102] netlink_sendmsg+0x5d4/0xb40 [ 441.518951][T13102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.518963][T13102] ? aa_file_perm+0x12d/0x1630 [ 441.518976][T13102] ? aa_sock_msg_perm+0xf1/0x1b0 [ 441.518990][T13102] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 441.518999][T13102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 441.519009][T13102] __sock_sendmsg+0x21c/0x270 [ 441.519023][T13102] ____sys_sendmsg+0x4d7/0x810 [ 441.519032][T13102] ? __might_fault+0xaf/0x130 [ 441.519049][T13102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 441.519062][T13102] ? import_iovec+0x73/0xa0 [ 441.519074][T13102] ___sys_sendmsg+0x2a5/0x360 [ 441.519083][T13102] ? __lock_acquire+0x6b5/0x2cf0 [ 441.519097][T13102] ? __pfx____sys_sendmsg+0x10/0x10 [ 441.519122][T13102] ? __fget_files+0x2a/0x420 [ 441.519134][T13102] ? __fget_files+0x3a0/0x420 [ 441.519150][T13102] __x64_sys_sendmsg+0x1bd/0x2a0 [ 441.519160][T13102] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 441.519174][T13102] ? __pfx_ksys_write+0x10/0x10 [ 441.519188][T13102] do_syscall_64+0xe2/0xf80 [ 441.519203][T13102] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.519212][T13102] ? trace_irq_disable+0x37/0x100 [ 441.519224][T13102] ? clear_bhb_loop+0x60/0xb0 [ 441.519235][T13102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.519245][T13102] RIP: 0033:0x7f30f8f9acb9 [ 441.519255][T13102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 441.519264][T13102] RSP: 002b:00007f30f9d8a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 441.519275][T13102] RAX: ffffffffffffffda RBX: 00007f30f9215fa0 RCX: 00007f30f8f9acb9 [ 441.519282][T13102] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 441.519288][T13102] RBP: 00007f30f9d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 441.519294][T13102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 441.519300][T13102] R13: 00007f30f9216038 R14: 00007f30f9215fa0 R15: 00007f30f933fa48 [ 441.519314][T13102] [ 442.306077][T13112] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2245'. [ 442.485345][ T9] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 442.541667][T13116] input: syz0 as /devices/virtual/input/input25 [ 442.648491][ T9] usb 4-1: too many configurations: 164, using maximum allowed: 8 [ 442.666958][ T9] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db [ 442.679581][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.690418][ T9] usb 4-1: config 0 descriptor?? [ 442.701699][ T9] usb 4-1: bad CDC descriptors [ 442.903792][ T5848] usb 4-1: USB disconnect, device number 70 [ 443.581837][T13144] bridge0: port 1(veth0_to_bridge) entered blocking state [ 443.602592][T13144] bridge0: port 1(veth0_to_bridge) entered disabled state [ 443.610438][T13144] veth0_to_bridge: entered allmulticast mode [ 443.619740][T13144] veth0_to_bridge: entered promiscuous mode [ 443.725705][T13148] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 445.832964][T13192] program syz.0.2262 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 446.205399][ T9] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 446.495837][ T9] usb 1-1: device descriptor read/64, error -71 [ 446.735423][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 446.875488][ T9] usb 1-1: device descriptor read/64, error -71 [ 446.991440][ T9] usb usb1-port1: attempt power cycle [ 447.171448][T13236] fuse: Bad value for 'fd' [ 447.306635][T13243] FAULT_INJECTION: forcing a failure. [ 447.306635][T13243] name failslab, interval 1, probability 0, space 0, times 0 [ 447.325823][T13243] CPU: 1 UID: 0 PID: 13243 Comm: syz.4.2268 Tainted: G L syzkaller #0 PREEMPT(full) [ 447.325849][T13243] Tainted: [L]=SOFTLOCKUP [ 447.325855][T13243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 447.325865][T13243] Call Trace: [ 447.325872][T13243] [ 447.325879][T13243] dump_stack_lvl+0xe8/0x150 [ 447.325904][T13243] should_fail_ex+0x412/0x560 [ 447.325930][T13243] should_failslab+0xa8/0x100 [ 447.325950][T13243] __kmalloc_noprof+0xde/0x7e0 [ 447.325965][T13243] ? sk_prot_alloc+0xe7/0x210 [ 447.325984][T13243] sk_prot_alloc+0xe7/0x210 [ 447.325997][T13243] ? sk_alloc+0x27/0x390 [ 447.326013][T13243] sk_alloc+0x3a/0x390 [ 447.326032][T13243] bpf_prog_test_run_skb+0x3f3/0x1d50 [ 447.326053][T13243] ? __fget_files+0x2a/0x420 [ 447.326075][T13243] ? __fget_files+0x2a/0x420 [ 447.326090][T13243] ? __fget_files+0x3a0/0x420 [ 447.326106][T13243] ? __fget_files+0x2a/0x420 [ 447.326127][T13243] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 447.326142][T13243] bpf_prog_test_run+0x2c7/0x340 [ 447.326166][T13243] __sys_bpf+0x5cb/0x920 [ 447.326187][T13243] ? __pfx___sys_bpf+0x10/0x10 [ 447.326218][T13243] ? ksys_write+0x242/0x270 [ 447.326236][T13243] ? __pfx_ksys_write+0x10/0x10 [ 447.326258][T13243] __x64_sys_bpf+0x7c/0x90 [ 447.326277][T13243] do_syscall_64+0xe2/0xf80 [ 447.326297][T13243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.326311][T13243] ? trace_irq_disable+0x37/0x100 [ 447.326329][T13243] ? clear_bhb_loop+0x60/0xb0 [ 447.326348][T13243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.326364][T13243] RIP: 0033:0x7f1960b9acb9 [ 447.326379][T13243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.326402][T13243] RSP: 002b:00007f19619b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 447.326420][T13243] RAX: ffffffffffffffda RBX: 00007f1960e15fa0 RCX: 00007f1960b9acb9 [ 447.326432][T13243] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 447.326443][T13243] RBP: 00007f19619b1090 R08: 0000000000000000 R09: 0000000000000000 [ 447.326453][T13243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 447.326462][T13243] R13: 00007f1960e16038 R14: 00007f1960e15fa0 R15: 00007f1960f3fa48 [ 447.326490][T13243] [ 447.345328][ T9] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 447.808162][ T9] usb 1-1: device descriptor read/8, error -71 [ 448.215432][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 448.246066][ T9] usb 1-1: device descriptor read/8, error -71 [ 448.355648][ T9] usb usb1-port1: unable to enumerate USB device [ 448.500719][T13265] loop8: detected capacity change from 0 to 7 [ 448.518304][ T5843] Dev loop8: unable to read RDB block 7 [ 448.523899][ T5843] loop8: unable to read partition table [ 448.530724][ T5843] loop8: partition table beyond EOD, truncated [ 448.547358][T13265] Dev loop8: unable to read RDB block 7 [ 448.564789][T13265] loop8: unable to read partition table [ 448.602178][T13265] loop8: partition table beyond EOD, truncated [ 448.625616][T13265] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 448.765552][T13270] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2277'. [ 448.842972][T13272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.890120][T13274] netlink: 'syz.4.2279': attribute type 8 has an invalid length. [ 448.898625][T13272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 448.935031][T13274] netlink: 'syz.4.2279': attribute type 9 has an invalid length. [ 448.954432][T13274] netlink: 'syz.4.2279': attribute type 10 has an invalid length. [ 449.003741][T13277] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2280'. [ 449.055454][ T5831] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 449.097514][T13274] netlink: 'syz.4.2279': attribute type 11 has an invalid length. [ 449.172769][T13274] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2279'. [ 449.226358][ T5831] usb 2-1: Using ep0 maxpacket: 16 [ 449.241064][ T5831] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 449.265866][ T5831] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 449.405407][ T5913] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 449.576930][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 449.584665][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 449.597577][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 449.643740][ T5913] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 449.654874][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 449.663693][ T5913] usb 1-1: Product: syz [ 449.725539][ T5913] usb 1-1: Manufacturer: syz [ 449.731566][ T5913] usb 1-1: SerialNumber: syz [ 449.738183][T13288] debugfs: 'netdev:nicvf0' already exists in 'phy10' [ 449.754340][ T5913] usb 1-1: config 0 descriptor?? [ 449.774695][ T5913] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 449.785170][ T5913] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 450.293969][T13294] fuse: Bad value for 'fd' [ 450.345365][ T5899] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 450.379873][ T5913] em28xx 1-1:0.0: chip ID is em2874 [ 450.506859][ T5899] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 450.515297][ T5899] usb 5-1: config 0 has no interface number 0 [ 450.521462][ T5899] usb 5-1: config 0 interface 11 altsetting 253 has an endpoint descriptor with address 0x13, changing to 0x3 [ 450.540955][ T5899] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x3 has invalid wMaxPacketSize 0 [ 450.561411][ T5899] usb 5-1: config 0 interface 11 altsetting 253 bulk endpoint 0x3 has invalid maxpacket 0 [ 450.586890][ T24] usb 1-1: USB disconnect, device number 85 [ 450.592872][ T5899] usb 5-1: config 0 interface 11 has no altsetting 0 [ 450.600808][ T24] em28xx 1-1:0.0: Disconnecting em28xx [ 450.608877][ T5899] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 450.618856][ T24] em28xx 1-1:0.0: Freeing device [ 450.623924][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 450.634083][ T5899] usb 5-1: SerialNumber: syz [ 450.644020][ T5899] usb 5-1: config 0 descriptor?? [ 450.658307][ T5899] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 450.666802][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 87 [ 450.674719][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 7 [ 450.685053][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 450.693152][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 450.701343][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 450.709142][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 450.717453][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 450.725354][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 450.734595][ T5899] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 450.744520][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 450.752580][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 450.762691][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 450.770630][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 450.778557][ T5899] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 450.788417][ T5899] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 450.914144][ T5848] usb 5-1: USB disconnect, device number 67 [ 450.936344][ T5848] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 450.960015][ T5848] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 450.980859][ T5848] keyspan 5-1:0.11: device disconnected [ 451.275531][ T5848] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 451.375471][ T9] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 451.428418][ T5848] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 451.436977][ T5848] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 451.448277][ T5848] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 451.457597][ T5848] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 451.466258][ T5848] usb 5-1: Manufacturer: syz [ 451.473845][ T5848] usb 5-1: config 0 descriptor?? [ 451.525371][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 451.532206][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 451.543160][ T5848] rc_core: IR keymap rc-hauppauge not found [ 451.551505][ T9] usb 1-1: config 0 has no interface number 0 [ 451.557735][ T5848] Registered IR keymap rc-empty [ 451.567571][ T5848] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 451.585434][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 451.601337][ T5848] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input26 [ 451.615334][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.627316][ T9] usb 1-1: Product: syz [ 451.647265][ T9] usb 1-1: Manufacturer: syz [ 451.652629][ T9] usb 1-1: SerialNumber: syz [ 451.685531][ T9] usb 1-1: config 0 descriptor?? [ 451.710936][ T9] smsc95xx v2.0.0 [ 451.767141][ T5831] usb 2-1: string descriptor 0 read error: -71 [ 451.816025][ T5831] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.825116][ T5831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.880865][ T5831] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 451.891409][ T5831] usb 2-1: no configuration chosen from 1 choice [ 451.899881][ T5831] usb 2-1: USB disconnect, device number 91 [ 451.916310][T13309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.930195][T13309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.940591][T13309] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.950494][T13309] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.968684][ T30] audit: type=1800 audit(1769300496.994:754): pid=13309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2291" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 452.202925][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 452.208802][ T5899] usb 5-1: USB disconnect, device number 68 [ 452.266644][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 453.119298][T13327] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2296'. [ 453.161162][T13325] syzkaller0: entered promiscuous mode [ 453.175148][T13325] syzkaller0: entered allmulticast mode [ 453.183380][T13327] netlink: Unknown conntrack attr (0) [ 453.229567][T13325] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2295'. [ 453.448567][T13331] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2297'. [ 453.564162][T13338] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2298'. [ 453.937960][T13347] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'. [ 454.428167][T13299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.438147][T13299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.526314][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 454.541413][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 454.803532][ T9] usb 1-1: USB disconnect, device number 86 [ 455.160698][T13351] use of bytesused == 0 is deprecated and will be removed in the future, [ 455.170106][T13351] use the actual size instead. [ 455.215620][T13353] input: syz0 as /devices/virtual/input/input27 [ 455.225177][T13353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2303'. [ 455.444745][T13364] fuse: Bad value for 'fd' [ 455.463201][T13364] ipip0: entered promiscuous mode [ 455.468938][T13364] ipip0: entered allmulticast mode [ 455.653025][T13371] binder: BINDER_SET_CONTEXT_MGR already set [ 455.678013][T13371] binder: 13360:13371 ioctl 4018620d 200000000040 returned -16 [ 456.964370][T13394] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 456.985615][ T9] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 457.079593][T13395] bond4: option arp_all_targets: invalid value (18446744073290121217) [ 457.096629][T13395] bond4 (unregistering): Released all slaves [ 457.156242][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 457.182430][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 457.210148][ T9] usb 2-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 457.217458][T13398] bridge0: port 1(veth0_to_bridge) entered blocking state [ 457.227268][T13398] bridge0: port 1(veth0_to_bridge) entered disabled state [ 457.230839][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.234608][T13398] veth0_to_bridge: entered allmulticast mode [ 457.272040][T13398] veth0_to_bridge: entered promiscuous mode [ 457.276620][ T9] usb 2-1: config 0 descriptor?? [ 457.281202][T13398] bridge0: port 1(veth0_to_bridge) entered blocking state [ 457.290550][T13398] bridge0: port 1(veth0_to_bridge) entered forwarding state [ 457.320340][T13400] FAULT_INJECTION: forcing a failure. [ 457.320340][T13400] name failslab, interval 1, probability 0, space 0, times 0 [ 457.324323][ T9] uvcvideo 2-1:0.0: probe with driver uvcvideo failed with error -22 [ 457.334254][T13400] CPU: 1 UID: 0 PID: 13400 Comm: syz.2.2317 Tainted: G L syzkaller #0 PREEMPT(full) [ 457.334281][T13400] Tainted: [L]=SOFTLOCKUP [ 457.334288][T13400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 457.334298][T13400] Call Trace: [ 457.334305][T13400] [ 457.334312][T13400] dump_stack_lvl+0xe8/0x150 [ 457.334338][T13400] should_fail_ex+0x412/0x560 [ 457.334363][T13400] should_failslab+0xa8/0x100 [ 457.334383][T13400] __kmalloc_noprof+0xde/0x7e0 [ 457.334398][T13400] ? rcu_is_watching+0x15/0xb0 [ 457.334416][T13400] ? security_sk_alloc+0x52/0x360 [ 457.334435][T13400] security_sk_alloc+0x52/0x360 [ 457.334452][T13400] sk_prot_alloc+0x101/0x210 [ 457.334466][T13400] ? sk_alloc+0x27/0x390 [ 457.334482][T13400] sk_alloc+0x3a/0x390 [ 457.334499][T13400] bpf_prog_test_run_skb+0x3f3/0x1d50 [ 457.334522][T13400] ? __fget_files+0x2a/0x420 [ 457.334543][T13400] ? __fget_files+0x2a/0x420 [ 457.334558][T13400] ? __fget_files+0x3a0/0x420 [ 457.334574][T13400] ? __fget_files+0x2a/0x420 [ 457.334596][T13400] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 457.334612][T13400] bpf_prog_test_run+0x2c7/0x340 [ 457.334637][T13400] __sys_bpf+0x5cb/0x920 [ 457.334657][T13400] ? __pfx___sys_bpf+0x10/0x10 [ 457.334701][T13400] ? rcu_is_watching+0x15/0xb0 [ 457.334725][T13400] __x64_sys_bpf+0x7c/0x90 [ 457.334743][T13400] do_syscall_64+0xe2/0xf80 [ 457.334764][T13400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.334778][T13400] ? trace_irq_disable+0x37/0x100 [ 457.334796][T13400] ? clear_bhb_loop+0x60/0xb0 [ 457.334814][T13400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.334829][T13400] RIP: 0033:0x7f9b6cf9acb9 [ 457.334845][T13400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.334858][T13400] RSP: 002b:00007f9b6de3d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 457.334875][T13400] RAX: ffffffffffffffda RBX: 00007f9b6d215fa0 RCX: 00007f9b6cf9acb9 [ 457.334886][T13400] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 457.334896][T13400] RBP: 00007f9b6de3d090 R08: 0000000000000000 R09: 0000000000000000 [ 457.334906][T13400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.334915][T13400] R13: 00007f9b6d216038 R14: 00007f9b6d215fa0 R15: 00007f9b6d33fa48 [ 457.334942][T13400] [ 457.596701][ T9] usb 2-1: USB disconnect, device number 92 [ 457.637753][ T30] audit: type=1326 audit(1769300502.664:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f356e19acb9 code=0x0 [ 457.740620][ T30] audit: type=1326 audit(1769300502.714:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13404 comm="syz.0.2320" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f356e19acb9 code=0x0 [ 458.055619][ T9] usb 5-1: new full-speed USB device number 69 using dummy_hcd [ 458.307277][ T9] usb 5-1: config 0 has too many interfaces: 215, using maximum allowed: 32 [ 458.331697][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 215 [ 458.368421][ T9] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 458.378796][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.388720][ T9] usb 5-1: Product: syz [ 458.392967][ T9] usb 5-1: Manufacturer: syz [ 458.408308][ T9] usb 5-1: SerialNumber: syz [ 458.463445][ T9] usb 5-1: config 0 descriptor?? [ 459.085349][T13449] syz.0.2328 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 459.100397][T13449] random: crng reseeded on system resumption [ 459.375345][ T5848] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 459.505528][ T5899] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 459.545328][ T5848] usb 1-1: Using ep0 maxpacket: 8 [ 459.560533][ T5848] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 459.569441][ T5848] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 459.581377][ T5848] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 459.601984][ T5848] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 459.619581][ T5848] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 459.645318][ T24] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 459.654860][ T5848] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 459.674114][ T5848] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.692929][ T5899] usb 4-1: unable to get BOS descriptor or descriptor too short [ 459.703381][ T5899] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 459.711633][ T5899] usb 4-1: can't read configurations, error -71 [ 459.799387][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.816918][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.836749][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 459.850446][ T24] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 459.880684][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.906415][ T24] usb 2-1: config 0 descriptor?? [ 459.938952][ T5848] usb 1-1: GET_CAPABILITIES returned 0 [ 459.944495][ T5848] usbtmc 1-1:16.0: can't read capabilities [ 460.386757][T13470] syzkaller0: entered promiscuous mode [ 460.394753][ T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 460.394836][T13470] syzkaller0: entered allmulticast mode [ 460.402427][ T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 460.402461][ T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 460.402488][ T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 460.402514][ T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 460.402540][ T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 460.402566][ T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 460.402591][ T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 460.402612][ T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 460.402647][ T24] plantronics 0003:047F:FFFF.0024: unknown main item tag 0x0 [ 460.447723][T13449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.488370][T13449] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.540896][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 460.547892][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 460.554571][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 460.561301][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 460.568028][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 460.574731][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 460.581312][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 460.588016][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 460.594412][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 460.601092][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 460.607494][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 460.614186][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 460.620566][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 460.627275][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 460.633766][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 460.640472][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 460.647554][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 460.654240][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 460.661176][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 460.667940][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 460.709755][ T24] plantronics 0003:047F:FFFF.0024: hiddev2,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 460.741321][ T5913] usb 5-1: USB disconnect, device number 69 [ 460.917749][T13477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 460.952168][T13477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.235381][ T5913] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 461.365518][ T5913] usb 5-1: device descriptor read/64, error -71 [ 461.625310][ T5913] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 461.760305][ T5913] usb 5-1: device descriptor read/64, error -71 [ 461.875721][ T5913] usb usb5-port1: attempt power cycle [ 461.972997][ T5848] usb 1-1: USB disconnect, device number 87 [ 462.383489][ T5848] usb 2-1: USB disconnect, device number 93 [ 462.385411][ T5913] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 462.426048][ T5913] usb 5-1: device descriptor read/8, error -71 [ 462.695375][ T5913] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 462.716318][ T5913] usb 5-1: device descriptor read/8, error -71 [ 462.825626][ T5913] usb usb5-port1: unable to enumerate USB device [ 463.086876][T13511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.103385][T13511] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.045431][ T5913] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 464.865425][ T5831] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 465.074169][ T5831] usb 4-1: Using ep0 maxpacket: 8 [ 465.118831][ T5831] usb 4-1: unable to get BOS descriptor or descriptor too short [ 465.133320][ T5831] usb 4-1: config 9 has an invalid interface number: 5 but max is 0 [ 465.160078][ T5831] usb 4-1: config 9 has no interface number 0 [ 465.175439][ T5831] usb 4-1: config 9 interface 5 altsetting 9 endpoint 0x9 has an invalid bInterval 181, changing to 7 [ 465.187862][ T5831] usb 4-1: config 9 interface 5 has no altsetting 0 [ 465.215776][ T5831] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 465.233699][ T5831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.259900][ T5831] usb 4-1: Product: syz [ 465.269730][ T5831] usb 4-1: Manufacturer: syz [ 465.280524][ T5831] usb 4-1: SerialNumber: syz [ 465.550561][ T5831] usb 4-1: USB disconnect, device number 73 [ 466.248961][T13572] delete_channel: no stack [ 466.614753][T13589] veth0_to_team: entered promiscuous mode [ 466.907796][T13596] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.973474][T13596] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.010969][T13600] FAULT_INJECTION: forcing a failure. [ 467.010969][T13600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.056732][T13600] CPU: 0 UID: 0 PID: 13600 Comm: syz.1.2380 Tainted: G L syzkaller #0 PREEMPT(full) [ 467.056761][T13600] Tainted: [L]=SOFTLOCKUP [ 467.056768][T13600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 467.056778][T13600] Call Trace: [ 467.056785][T13600] [ 467.056793][T13600] dump_stack_lvl+0xe8/0x150 [ 467.056818][T13600] should_fail_ex+0x412/0x560 [ 467.056845][T13600] _copy_to_user+0x31/0xb0 [ 467.056865][T13600] simple_read_from_buffer+0xe1/0x170 [ 467.056888][T13600] proc_fail_nth_read+0x1bb/0x230 [ 467.056908][T13600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.056927][T13600] ? rw_verify_area+0x2a6/0x4d0 [ 467.056946][T13600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 467.056961][T13600] vfs_read+0x20c/0xa70 [ 467.056972][T13600] ? fdget_pos+0x246/0x320 [ 467.056989][T13600] ? __pfx___mutex_lock+0x10/0x10 [ 467.057009][T13600] ? __pfx_vfs_read+0x10/0x10 [ 467.057025][T13600] ? __fget_files+0x2a/0x420 [ 467.057046][T13600] ? __fget_files+0x3a0/0x420 [ 467.057062][T13600] ? __fget_files+0x2a/0x420 [ 467.057088][T13600] ksys_read+0x150/0x270 [ 467.057106][T13600] ? __pfx_ksys_read+0x10/0x10 [ 467.057131][T13600] do_syscall_64+0xe2/0xf80 [ 467.057151][T13600] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.057166][T13600] ? trace_irq_disable+0x37/0x100 [ 467.057192][T13600] ? clear_bhb_loop+0x60/0xb0 [ 467.057209][T13600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.057224][T13600] RIP: 0033:0x7f30f8f5b58e [ 467.057239][T13600] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 467.057250][T13600] RSP: 002b:00007f30f9d89fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 467.057266][T13600] RAX: ffffffffffffffda RBX: 00007f30f9d8a6c0 RCX: 00007f30f8f5b58e [ 467.057276][T13600] RDX: 000000000000000f RSI: 00007f30f9d8a0a0 RDI: 0000000000000004 [ 467.057286][T13600] RBP: 00007f30f9d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 467.057295][T13600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.057302][T13600] R13: 00007f30f9216038 R14: 00007f30f9215fa0 R15: 00007f30f933fa48 [ 467.057326][T13600] [ 468.034580][T13625] bond1: option mode: unable to set because the bond device has slaves [ 468.398641][T13632] SET target dimension over the limit! [ 468.417143][T13632] netdevsim netdevsim3: Direct firmware load for / [ 468.417143][T13632] failed with error -2 [ 468.437684][T13632] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 468.437684][T13632] [ 468.676189][T13624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2384'. [ 469.786956][ T30] audit: type=1326 audit(1769300514.804:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.4.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b9acb9 code=0x7ffc0000 [ 469.835660][ T30] audit: type=1326 audit(1769300514.814:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.4.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b9acb9 code=0x7ffc0000 [ 469.864092][ T30] audit: type=1326 audit(1769300514.814:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.4.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f1960b9acb9 code=0x7ffc0000 [ 469.940063][T13659] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.957208][T13660] netlink: 'syz.4.2393': attribute type 1 has an invalid length. [ 469.975552][T13659] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.035113][T13660] bond4: entered promiscuous mode [ 470.074235][T13660] 8021q: adding VLAN 0 to HW filter on device bond4 [ 470.098581][ T30] audit: type=1326 audit(1769300514.814:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.4.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b9acb9 code=0x7ffc0000 [ 470.128296][ T30] audit: type=1326 audit(1769300514.814:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.4.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b9acb9 code=0x7ffc0000 [ 470.150838][ T30] audit: type=1326 audit(1769300514.844:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.4.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1960b9acb9 code=0x7ffc0000 [ 470.151400][ T5913] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 470.220330][T13662] bond4: (slave bridge2): making interface the new active one [ 470.227997][ T24] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 470.236822][T13662] bridge2: entered promiscuous mode [ 470.236933][T13660] ptrace attach of "./syz-executor exec"[5844] was attempted by "./syz-executor exec"[13660] [ 470.243190][T13662] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 470.277038][ T30] audit: type=1326 audit(1769300514.844:763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.4.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b9acb9 code=0x7ffc0000 [ 470.334930][ T30] audit: type=1326 audit(1769300514.854:764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.4.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1960b9acb9 code=0x7ffc0000 [ 470.358868][ T30] audit: type=1326 audit(1769300514.854:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13650 comm="syz.4.2393" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1960b9acb9 code=0x7ffc0000 [ 470.435421][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 470.442203][ T5913] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 470.484756][ T5913] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 470.499199][ T5913] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 470.509421][ T24] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 470.517822][ T24] usb 1-1: config 0 has no interface number 0 [ 470.527774][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.538232][ T24] usb 1-1: config 0 interface 184 has no altsetting 0 [ 470.554576][ T5913] usb 4-1: config 0 descriptor?? [ 470.562308][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 470.572659][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.592329][ T24] usb 1-1: Product: syz [ 470.615108][ T24] usb 1-1: Manufacturer: syz [ 470.620267][ T24] usb 1-1: SerialNumber: syz [ 470.627600][ T24] usb 1-1: config 0 descriptor?? [ 470.640175][ T24] smsc75xx v1.0.0 [ 471.001623][ T5913] waterforce 0003:1044:7A4D.0025: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 471.046149][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 471.076812][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 471.088960][ T5913] waterforce 0003:1044:7A4D.0025: fw version request failed with -38 [ 471.118002][ T24] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 471.143399][ T24] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 471.880081][T13689] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2404'. [ 471.923593][T13692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.932735][T13692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.942538][ C0] wdm_int_callback: 6748 callbacks suppressed [ 471.942562][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 471.955308][ C0] wdm_int_callback: 6748 callbacks suppressed [ 471.955322][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 471.968111][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 471.974809][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 471.981000][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 471.989960][ T5848] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 471.990766][T13692] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2406'. [ 472.011423][T13692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2406'. [ 472.021938][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2406'. [ 472.135514][ T5913] usb 2-1: new full-speed USB device number 95 using dummy_hcd [ 472.147167][ T5848] usb 5-1: unable to get BOS descriptor or descriptor too short [ 472.155588][ T5848] usb 5-1: not running at top speed; connect to a high speed hub [ 472.164415][ T5848] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.174868][ T5848] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 472.187306][ T5848] usb 5-1: string descriptor 0 read error: -22 [ 472.193646][ T5848] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 472.202895][ T5848] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.218791][ T5848] usb 5-1: 0:2 : does not exist [ 472.275368][ T24] usb 4-1: reset high-speed USB device number 74 using dummy_hcd [ 472.297185][ T5913] usb 2-1: config 0 has too many interfaces: 215, using maximum allowed: 32 [ 472.306237][ T5913] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 215 [ 472.317998][ T5913] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 472.327167][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.335207][ T5913] usb 2-1: Product: syz [ 472.339776][ T5913] usb 2-1: Manufacturer: syz [ 472.344390][ T5913] usb 2-1: SerialNumber: syz [ 472.355451][ T5913] usb 2-1: config 0 descriptor?? [ 472.640903][ T5848] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 472.677242][ T5848] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 472.699110][ T5848] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 472.706763][T13701] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.716836][T13701] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 472.774299][ T5848] usb 5-1: 5:0: cannot get min/max values for control 3 (id 5) [ 472.858813][ T5848] usb 5-1: USB disconnect, device number 74 [ 472.978390][T13706] mmap: syz.2.2409 (13706): VmData 37445632 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 473.102482][ T5913] usb 1-1: USB disconnect, device number 88 [ 473.523413][T13714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.534769][T13714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 474.287011][T13721] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2414'. [ 474.818515][ T5913] usb 2-1: USB disconnect, device number 95 [ 474.879974][T13729] FAULT_INJECTION: forcing a failure. [ 474.879974][T13729] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.915716][T13729] CPU: 1 UID: 0 PID: 13729 Comm: syz.1.2416 Tainted: G L syzkaller #0 PREEMPT(full) [ 474.915743][T13729] Tainted: [L]=SOFTLOCKUP [ 474.915749][T13729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 474.915760][T13729] Call Trace: [ 474.915767][T13729] [ 474.915776][T13729] dump_stack_lvl+0xe8/0x150 [ 474.915804][T13729] should_fail_ex+0x412/0x560 [ 474.915832][T13729] _copy_to_user+0x31/0xb0 [ 474.915851][T13729] bpf_test_finish+0x191/0x6b0 [ 474.915875][T13729] ? __pfx_bpf_test_finish+0x10/0x10 [ 474.915891][T13729] ? eth_type_trans+0x43b/0x6d0 [ 474.915917][T13729] bpf_prog_test_run_skb+0x114f/0x1d50 [ 474.915944][T13729] ? __fget_files+0x2a/0x420 [ 474.915963][T13729] ? __fget_files+0x3a0/0x420 [ 474.915980][T13729] ? __fget_files+0x2a/0x420 [ 474.916002][T13729] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 474.916020][T13729] bpf_prog_test_run+0x2c7/0x340 [ 474.916050][T13729] __sys_bpf+0x5cb/0x920 [ 474.916072][T13729] ? __pfx___sys_bpf+0x10/0x10 [ 474.916107][T13729] ? ksys_write+0x242/0x270 [ 474.916126][T13729] ? __pfx_ksys_write+0x10/0x10 [ 474.916149][T13729] __x64_sys_bpf+0x7c/0x90 [ 474.916169][T13729] do_syscall_64+0xe2/0xf80 [ 474.916190][T13729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.916204][T13729] ? trace_irq_disable+0x37/0x100 [ 474.916222][T13729] ? clear_bhb_loop+0x60/0xb0 [ 474.916240][T13729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.916256][T13729] RIP: 0033:0x7f30f8f9acb9 [ 474.916273][T13729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.916296][T13729] RSP: 002b:00007f30f9d8a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 474.916315][T13729] RAX: ffffffffffffffda RBX: 00007f30f9215fa0 RCX: 00007f30f8f9acb9 [ 474.916328][T13729] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 474.916339][T13729] RBP: 00007f30f9d8a090 R08: 0000000000000000 R09: 0000000000000000 [ 474.916349][T13729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.916359][T13729] R13: 00007f30f9216038 R14: 00007f30f9215fa0 R15: 00007f30f933fa48 [ 474.916388][T13729] [ 475.435320][ T5913] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 475.623617][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.640980][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.754430][ T5913] usb 2-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 475.774736][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.793617][ T5913] usb 2-1: config 0 descriptor?? [ 475.938758][T13748] veth0_to_team: entered promiscuous mode [ 476.004717][ T5913] usbhid 2-1:0.0: can't add hid device: -71 [ 476.014924][ T5913] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 476.055193][ T5913] usb 2-1: USB disconnect, device number 96 [ 476.257439][T13756] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 476.275633][ T5831] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 476.401762][T13759] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2426'. [ 476.430318][ T5831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.442104][ T5831] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 476.459307][ T5831] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 476.473563][ T5831] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.506938][ T5831] usb 5-1: config 0 descriptor?? [ 476.679870][ T5913] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 476.738364][T13765] syzkaller0: entered promiscuous mode [ 476.754331][T13765] syzkaller0: entered allmulticast mode [ 476.846827][ T5913] usb 1-1: config 0 has too many interfaces: 215, using maximum allowed: 32 [ 476.858505][ T5913] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 215 [ 476.900629][ T5913] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 476.911755][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.933998][ T5913] usb 1-1: Product: syz [ 476.945323][ T5913] usb 1-1: Manufacturer: syz [ 476.973307][ T5913] usb 1-1: SerialNumber: syz [ 477.008440][ T5913] usb 1-1: config 0 descriptor?? [ 477.565448][ T24] usb 4-1: device descriptor read/64, error -110 [ 477.825591][ T24] usb 4-1: reset high-speed USB device number 74 using dummy_hcd [ 477.995332][ T24] usb 4-1: device descriptor read/64, error -32 [ 478.285369][ T24] usb 4-1: reset high-speed USB device number 74 using dummy_hcd [ 478.338691][ T24] usb 4-1: device descriptor read/8, error -32 [ 478.625413][ T24] usb 4-1: reset high-speed USB device number 74 using dummy_hcd [ 478.645610][ T24] usb 4-1: device descriptor read/8, error -32 [ 478.775415][ T24] raw-gadget.0 gadget.3: failed to queue suspend event [ 478.787609][ T5899] usb 4-1: USB disconnect, device number 74 [ 478.885352][ T5913] usb 2-1: new low-speed USB device number 97 using dummy_hcd [ 478.904531][ T5899] raw-gadget.0 gadget.3: failed to queue reset event [ 478.985480][ T5899] raw-gadget.0 gadget.3: failed to queue resume event [ 479.038294][ T5913] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 479.046786][ T5913] usb 2-1: config 179 has no interface number 0 [ 479.056845][ T5913] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 479.069015][ T5899] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 479.094359][ T5913] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 479.094406][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 479.135411][ T5899] raw-gadget.0 gadget.3: failed to queue reset event [ 479.153394][ T5913] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 479.183058][ T5913] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 479.213044][ T5913] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 479.234038][ T5899] raw-gadget.0 gadget.3: failed to queue resume event [ 479.257684][ T5913] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 479.281700][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.305462][ T5899] usb 4-1: device descriptor read/64, error -32 [ 479.315042][T13817] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 479.334507][ T24] usb 5-1: USB disconnect, device number 75 [ 479.369077][ T5831] usb 1-1: USB disconnect, device number 89 [ 479.415634][ T5899] raw-gadget.0 gadget.3: failed to queue suspend event [ 479.432216][ T5913] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 479.461908][ T5899] raw-gadget.0 gadget.3: failed to queue reset event [ 479.479230][T13832] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2450'. [ 479.497633][ T5913] xpad 2-1:179.65: probe with driver xpad failed with error -90 [ 479.503649][T13830] netlink: 84 bytes leftover after parsing attributes in process `syz.4.2449'. [ 479.549970][T13832] netlink: Unknown conntrack attr (0) [ 479.565887][ T5899] raw-gadget.0 gadget.3: failed to queue resume event [ 479.589444][ T9] usb 2-1: USB disconnect, device number 97 [ 479.652828][ T5899] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 479.702553][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 479.712052][ T5899] raw-gadget.0 gadget.3: failed to queue reset event [ 479.795546][ T5899] raw-gadget.0 gadget.3: failed to queue resume event [ 480.015597][ T5899] usb 4-1: device descriptor read/64, error -32 [ 480.080378][T13853] fuse: Bad value for 'fd' [ 480.125464][ T5899] raw-gadget.0 gadget.3: failed to queue suspend event [ 480.147516][ T5899] usb usb4-port1: attempt power cycle [ 480.156753][T13855] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2458'. [ 480.168373][ T5899] raw-gadget.0 gadget.3: failed to queue disconnect event [ 480.177401][ T5913] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 480.199243][ T5899] raw-gadget.0 gadget.3: failed to queue reset event [ 480.284767][ T5899] raw-gadget.0 gadget.3: failed to queue resume event [ 480.298303][ T5899] raw-gadget.0 gadget.3: failed to queue reset event [ 480.385324][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 480.395012][ T5913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 480.418625][ T5913] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 480.435335][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.435776][ T9] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 480.453020][T13861] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2460'. [ 480.466201][ T5913] usb 5-1: Product: syz [ 480.470408][ T5913] usb 5-1: Manufacturer: syz [ 480.475029][ T5913] usb 5-1: SerialNumber: syz [ 480.496586][ T5913] usb 5-1: config 0 descriptor?? [ 480.507999][ T5913] gs_usb 5-1:0.0: Required endpoints not found [ 480.565423][ T5899] raw-gadget.0 gadget.3: failed to queue resume event [ 480.615497][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 480.622388][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.625385][ T5899] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 480.633462][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 480.663024][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 480.691512][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 480.703643][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 480.706024][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 480.725666][ T9425] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 480.727588][ T5899] usb 4-1: device descriptor read/8, error -32 [ 480.761275][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 480.770915][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 480.779376][ T9] usb 2-1: Manufacturer: syz [ 480.823157][ T9] usb 2-1: config 0 descriptor?? [ 480.845617][ T5899] raw-gadget.0 gadget.3: failed to queue suspend event [ 480.857108][ T5899] raw-gadget.0 gadget.3: failed to queue reset event [ 480.907643][ T9425] usb 1-1: config 0 has too many interfaces: 215, using maximum allowed: 32 [ 480.916397][ T9425] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 215 [ 480.935381][ T5899] raw-gadget.0 gadget.3: failed to queue resume event [ 480.943779][ T9425] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 480.953770][ T9425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.963404][ T9425] usb 1-1: Product: syz [ 480.969815][ T9425] usb 1-1: Manufacturer: syz [ 480.978311][ T9425] usb 1-1: SerialNumber: syz [ 480.996222][ T9425] usb 1-1: config 0 descriptor?? [ 481.015634][ T5899] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 481.045556][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 481.052707][ T5899] usb 4-1: device descriptor read/8, error -32 [ 481.125342][ T9] rc_core: IR keymap rc-hauppauge not found [ 481.136272][ T9] Registered IR keymap rc-empty [ 481.146283][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.165370][ T5899] raw-gadget.0 gadget.3: failed to queue suspend event [ 481.195670][ T5899] usb usb4-port1: unable to enumerate USB device [ 481.196738][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.276411][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 481.293298][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input28 [ 481.312789][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.377117][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.429727][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.459522][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.485576][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.515513][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.545412][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.625899][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.661445][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.685404][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 481.700705][T13876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 481.712268][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 481.722685][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 481.734077][T13876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 481.760676][ T9] usb 2-1: USB disconnect, device number 98 [ 481.993541][T13876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.005058][T13876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.025113][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 482.031836][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 482.038243][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 482.044933][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 482.051375][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 482.058077][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 482.064569][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 482.071259][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 482.077649][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 482.084336][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 482.090714][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 482.097401][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 482.103773][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 482.110456][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 482.117170][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 482.123886][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 482.130625][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 482.137319][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 482.143724][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 482.150395][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 482.959509][ T5935] usb 5-1: USB disconnect, device number 76 [ 483.412897][ T9] usb 1-1: USB disconnect, device number 90 [ 483.755427][ T5899] usb 5-1: new low-speed USB device number 77 using dummy_hcd [ 483.935417][ T5899] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 483.944096][ T5899] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 484.150843][ T5899] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 484.693600][ T5899] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 484.785548][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 484.838528][ T5899] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 484.996568][ T5899] usb 5-1: string descriptor 0 read error: -22 [ 485.002896][ T5899] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 485.014663][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.054368][ T5899] usb 5-1: config 0 descriptor?? [ 485.072602][T13893] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 485.139795][ T5899] hub 5-1:0.0: bad descriptor, ignoring hub [ 485.160627][ T5899] hub 5-1:0.0: probe with driver hub failed with error -5 [ 485.196268][ T5899] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29 [ 485.344116][T13895] dlm: Unknown command passed to DLM device : 3 [ 485.344116][T13895] [ 485.409525][ T9] usb 5-1: USB disconnect, device number 77 [ 485.488682][T13913] fuse: Bad value for 'fd' [ 486.065888][ T9] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 486.152594][T13937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2481'. [ 486.167439][T13937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.176916][T13935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.188010][T13935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.198297][T13937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.225973][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 486.232610][ T9] usb 2-1: config 0 has an invalid interface number: 46 but max is 0 [ 486.241215][ T9] usb 2-1: config 0 has no interface number 0 [ 486.249649][ T9] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=cd.0f [ 486.259093][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.270278][ T9] usb 2-1: Product: syz [ 486.274448][ T9] usb 2-1: Manufacturer: syz [ 486.279126][ T9] usb 2-1: SerialNumber: syz [ 486.286707][ T9] usb 2-1: config 0 descriptor?? [ 486.293853][ T9] usb 2-1: active config #0 != 1 ?? [ 486.513183][T13921] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'. [ 486.533037][T13921] macsec2: entered promiscuous mode [ 486.539039][T13921] team0: entered promiscuous mode [ 486.544183][T13921] geneve0: entered promiscuous mode [ 486.550258][T13921] batadv2: entered promiscuous mode [ 486.556574][T13921] macsec2: entered allmulticast mode [ 486.562209][T13921] team0: entered allmulticast mode [ 486.567750][T13921] geneve0: entered allmulticast mode [ 486.573409][T13921] batadv2: entered allmulticast mode [ 486.582073][T13921] team0: left allmulticast mode [ 486.587549][T13921] geneve0: left allmulticast mode [ 486.592723][T13921] batadv2: left allmulticast mode [ 486.605458][T13921] team0: left promiscuous mode [ 486.615649][T13921] geneve0: left promiscuous mode [ 486.625802][T13921] batadv2: left promiscuous mode [ 486.695668][T13942] binder: 13941:13942 ioctl c0306201 2000000003c0 returned -14 [ 486.900034][ T5899] usb 2-1: USB disconnect, device number 99 [ 487.060702][T13951] openvswitch: netlink: Actions may not be safe on all matching packets [ 489.117791][T13988] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2498'. [ 490.034168][T14020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 490.565059][T14032] fuse: Unknown parameter '00000000000000000004' [ 490.696478][T14032] ipip0: entered promiscuous mode [ 490.701558][T14032] ipip0: entered allmulticast mode [ 490.740810][T14033] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2510'. [ 491.275357][ T9] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 491.617365][ T9] usb 1-1: config 0 has too many interfaces: 215, using maximum allowed: 32 [ 491.626209][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 215 [ 491.639325][ T9] usb 1-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 491.648729][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.697361][ T9] usb 1-1: Product: syz [ 491.701565][ T9] usb 1-1: Manufacturer: syz [ 491.710293][ T9] usb 1-1: SerialNumber: syz [ 491.729735][ T9] usb 1-1: config 0 descriptor?? [ 492.174137][T14064] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.193486][T14064] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.367722][T14072] netlink: 211792 bytes leftover after parsing attributes in process `syz.3.2521'. [ 492.954799][T14084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.966256][T14085] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2528'. [ 492.978950][T14084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.992550][T14085] vlan2: entered allmulticast mode [ 493.340598][ T5899] usb 1-1: USB disconnect, device number 91 [ 493.425345][T14093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.434747][T14093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.660037][T14099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2534'. [ 493.705625][T14099] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2534'. [ 494.235451][T14115] FAULT_INJECTION: forcing a failure. [ 494.235451][T14115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 494.255674][T14115] CPU: 0 UID: 0 PID: 14115 Comm: syz.4.2539 Tainted: G L syzkaller #0 PREEMPT(full) [ 494.255703][T14115] Tainted: [L]=SOFTLOCKUP [ 494.255709][T14115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 494.255719][T14115] Call Trace: [ 494.255727][T14115] [ 494.255735][T14115] dump_stack_lvl+0xe8/0x150 [ 494.255758][T14115] should_fail_ex+0x412/0x560 [ 494.255775][T14115] _copy_to_user+0x31/0xb0 [ 494.255787][T14115] bpf_test_finish+0x53c/0x6b0 [ 494.255803][T14115] ? __pfx_bpf_test_finish+0x10/0x10 [ 494.255812][T14115] ? eth_type_trans+0x43b/0x6d0 [ 494.255828][T14115] bpf_prog_test_run_skb+0x114f/0x1d50 [ 494.255845][T14115] ? __fget_files+0x2a/0x420 [ 494.255858][T14115] ? __fget_files+0x3a0/0x420 [ 494.255869][T14115] ? __fget_files+0x2a/0x420 [ 494.255883][T14115] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 494.255892][T14115] bpf_prog_test_run+0x2c7/0x340 [ 494.255909][T14115] __sys_bpf+0x5cb/0x920 [ 494.255923][T14115] ? __pfx___sys_bpf+0x10/0x10 [ 494.255942][T14115] ? ksys_write+0x242/0x270 [ 494.255953][T14115] ? __pfx_ksys_write+0x10/0x10 [ 494.255965][T14115] __x64_sys_bpf+0x7c/0x90 [ 494.255977][T14115] do_syscall_64+0xe2/0xf80 [ 494.255992][T14115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.256000][T14115] ? trace_irq_disable+0x37/0x100 [ 494.256013][T14115] ? clear_bhb_loop+0x60/0xb0 [ 494.256025][T14115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.256034][T14115] RIP: 0033:0x7f1960b9acb9 [ 494.256043][T14115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.256052][T14115] RSP: 002b:00007f19619b1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 494.256063][T14115] RAX: ffffffffffffffda RBX: 00007f1960e15fa0 RCX: 00007f1960b9acb9 [ 494.256070][T14115] RDX: 000000000000004c RSI: 0000200000000240 RDI: 000000000000000a [ 494.256076][T14115] RBP: 00007f19619b1090 R08: 0000000000000000 R09: 0000000000000000 [ 494.256082][T14115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 494.256088][T14115] R13: 00007f1960e16038 R14: 00007f1960e15fa0 R15: 00007f1960f3fa48 [ 494.256108][T14115] [ 494.505750][T14117] usb usb8: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 494.904826][T14125] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2543'. [ 494.975418][ T5913] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 495.135383][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 495.142509][ T5913] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 495.152486][ T5913] usb 1-1: config 0 has no interface number 0 [ 495.166520][ T9] usb 5-1: new full-speed USB device number 78 using dummy_hcd [ 495.175607][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 495.316840][ T9] usb 5-1: config 0 has too many interfaces: 215, using maximum allowed: 32 [ 495.329091][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 215 [ 495.348759][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 495.362390][ T9] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 495.371688][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.401852][ T9] usb 5-1: Product: syz [ 495.411958][ T9] usb 5-1: Manufacturer: syz [ 495.426005][ T5913] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 495.426282][ T9] usb 5-1: SerialNumber: syz [ 495.539301][ T5913] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 495.553197][ T5913] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 495.566239][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.567187][ T9] usb 5-1: config 0 descriptor?? [ 495.656807][ T5913] usb 1-1: config 0 descriptor?? [ 495.740246][ T5913] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 495.952209][ C1] wdm_int_callback: 14372 callbacks suppressed [ 495.952225][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 495.965045][ C1] wdm_int_callback: 14372 callbacks suppressed [ 495.965124][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 495.977876][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 495.984552][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 495.990872][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 495.997584][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 496.003953][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 496.010650][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 496.017194][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 496.023903][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 496.030251][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 496.036934][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 496.043355][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 496.050062][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 496.056994][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 496.063705][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 496.070567][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 496.077267][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 496.083614][ C1] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 496.090289][ C1] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 496.462200][T14147] binder: 14146:14147 ioctl c0306201 2000000001c0 returned -14 [ 496.775410][ T5913] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 496.927702][ T5913] usb 2-1: config 0 has no interfaces? [ 496.933680][ T5913] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 496.945180][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 496.961071][ T5913] usb 2-1: config 0 descriptor?? [ 497.180096][ T9] usb 2-1: USB disconnect, device number 100 [ 497.762250][ T5913] usb 1-1: USB disconnect, device number 92 [ 497.789086][ T5913] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 497.871382][ T9] usb 5-1: USB disconnect, device number 78 [ 498.067413][T14182] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2564'. [ 498.297173][ T5913] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 498.498966][ C0] hrtimer: interrupt took 18136 ns [ 498.588378][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 90, changing to 10 [ 498.599750][ T5913] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 498.614680][ T5913] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 498.632078][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.706756][ T5913] usb 2-1: config 0 descriptor?? [ 498.735600][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 498.948071][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.960329][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 498.969546][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 498.979683][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.999560][ T9] usb 5-1: config 0 descriptor?? [ 499.107339][T14204] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2571'. [ 499.123040][T14204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.133989][ T5913] hid_parser_main: 5 callbacks suppressed [ 499.134002][ T5913] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 499.135782][T14204] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.145171][ T5913] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 499.333409][ T5913] cp2112 0003:10C4:EA90.0026: error requesting version [ 499.342167][ T5913] cp2112 0003:10C4:EA90.0026: probe with driver cp2112 failed with error -5 [ 499.521800][T14213] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2574'. [ 499.547762][T14178] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2562'. [ 499.677964][T14218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.687826][T14218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.901798][T14218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.910526][T14218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.975377][ T5913] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 500.146937][ T5913] usb 1-1: Using ep0 maxpacket: 8 [ 500.156028][ T5913] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 500.165274][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.173280][ T5913] usb 1-1: Product: syz [ 500.178040][ T5913] usb 1-1: Manufacturer: syz [ 500.182639][ T5913] usb 1-1: SerialNumber: syz [ 500.394944][ T5913] usblp 1-1:1.0: usblp1: USB Unidirectional printer dev 93 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 500.511805][T14232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2581'. [ 500.955529][ C0] wdm_int_callback: 10781 callbacks suppressed [ 500.955555][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 500.968614][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 500.975282][ C0] wdm_int_callback: 10782 callbacks suppressed [ 500.975302][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 500.987913][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 500.994600][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 501.000938][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 501.007605][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 501.013937][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 501.020608][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 501.026930][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 501.033597][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 501.039959][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 501.046628][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 501.052964][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 501.059632][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 501.065950][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 501.072609][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 501.078919][ C0] cdc_mbim 3-1:1.0: nonzero urb status received: -71 [ 501.085584][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 501.092188][ C0] cdc_mbim 3-1:1.0: wdm_int_callback - 0 bytes [ 501.166133][T14242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.175947][T14242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.468238][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.474550][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.718900][ T5913] usb 5-1: USB disconnect, device number 79 [ 502.159305][ T9] usb 2-1: USB disconnect, device number 101 [ 502.349063][T14263] program syz.4.2586 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 502.790119][ T9] usb 1-1: USB disconnect, device number 93 [ 502.803159][ T9] usblp1: removed [ 502.864203][T14271] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2591'. [ 502.935567][T14271] netlink: Unknown conntrack attr (0) [ 503.322382][T14280] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2594'. [ 503.332933][T14280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 503.341846][T14280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 503.366590][T14273] loop8: detected capacity change from 0 to 8 [ 503.406643][ T5843] Dev loop8: unable to read RDB block 8 [ 503.412245][ T5843] loop8: unable to read partition table [ 503.472497][T14276] macvtap0: left allmulticast mode [ 503.478352][T14276] xt_connbytes: Forcing CT accounting to be enabled [ 503.544741][ T5843] loop8: partition table beyond EOD, truncated [ 503.571741][T14273] Dev loop8: unable to read RDB block 8 [ 503.577719][T14273] loop8: unable to read partition table [ 503.614743][T14273] loop8: partition table beyond EOD, truncated [ 503.643843][T14273] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 503.973622][T14292] bond3: option mode: unable to set because the bond device is up [ 504.205468][ T5899] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 504.452061][T14315] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2604'. [ 504.488758][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 504.554544][ T5899] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 504.584821][ T5899] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 504.609522][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.631834][ T5899] usb 1-1: config 0 descriptor?? [ 504.733634][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2609'. [ 504.780241][T14323] 8021q: adding VLAN 0 to HW filter on device bond4 [ 506.359148][T14351] netlink: set zone limit has 4 unknown bytes [ 506.369034][T14359] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2618'. [ 506.426938][T14363] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 506.544461][T14365] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2615'. [ 506.610002][T14354] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.2617'. [ 506.640757][T14368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 506.671534][T14368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 507.545310][ T5899] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 507.673781][ T9425] usb 1-1: USB disconnect, device number 94 [ 507.705359][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 507.713594][ T5899] usb 5-1: unable to get BOS descriptor or descriptor too short [ 507.736529][ T5899] usb 5-1: config 1 has an invalid interface number: 65 but max is 0 [ 507.764880][ T5899] usb 5-1: config 1 has no interface number 0 [ 507.785926][ T5899] usb 5-1: config 1 interface 65 has no altsetting 0 [ 507.824155][ T5899] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=2b.cd [ 507.859187][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.883481][ T5899] usb 5-1: Product: syz [ 507.905871][ T5899] usb 5-1: Manufacturer: syz [ 507.913987][ T5899] usb 5-1: SerialNumber: syz [ 507.937842][T14386] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2626'. [ 508.203528][ T5899] kalmia 5-1:1.65 (unnamed net_device) (uninitialized): Error sending init packet. Status -22 [ 508.255717][ T5899] kalmia 5-1:1.65: probe with driver kalmia failed with error -22 [ 508.325810][ T5899] usb 5-1: USB disconnect, device number 80 [ 508.508059][T14397] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2629'. [ 508.757767][ T9] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 508.928927][ T9] usb 2-1: config 0 has too many interfaces: 215, using maximum allowed: 32 [ 508.937884][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 215 [ 508.954287][ T9] usb 2-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 508.973375][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.995117][ T9] usb 2-1: Product: syz [ 509.004993][ T9] usb 2-1: Manufacturer: syz [ 509.024467][ T9] usb 2-1: SerialNumber: syz [ 509.042203][ T9] usb 2-1: config 0 descriptor?? [ 509.761703][T14412] veth0_to_team: entered promiscuous mode [ 509.771278][T14412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 509.780731][ T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 509.793991][T14412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 509.936163][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 509.942841][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.956166][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 509.967176][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 509.980861][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 509.990049][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.005354][ T9] usb 1-1: config 0 descriptor?? [ 510.161768][T14418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2635'. [ 510.238949][T14418] bond3: (slave bridge0): Releasing backup interface [ 510.246537][T14418] bridge0 (unregistering): left promiscuous mode [ 510.436093][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 510.443152][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 510.462164][ T9] usb 1-1: USB disconnect, device number 95 [ 510.880005][T14426] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2638'. [ 510.903953][T14426] netlink: Unknown conntrack attr (0) [ 511.359818][T14441] netlink: 196 bytes leftover after parsing attributes in process `syz.0.2643'. [ 511.454935][ T5913] usb 2-1: USB disconnect, device number 102 [ 511.497962][T14440] vlan0: entered allmulticast mode [ 511.519891][T14444] bond1: option mode: unable to set because the bond device has slaves [ 511.528668][T14440] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2644'. [ 511.765563][ T30] audit: type=1326 audit(1769300556.754:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356e19acb9 code=0x7ffc0000 [ 511.789425][T14442] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2637'. [ 511.938385][ T30] audit: type=1326 audit(1769300556.754:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356e19acb9 code=0x7ffc0000 [ 512.135506][ T30] audit: type=1326 audit(1769300556.754:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f356e19acb9 code=0x7ffc0000 [ 512.162114][ T30] audit: type=1326 audit(1769300556.754:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356e19acb9 code=0x7ffc0000 [ 512.560072][T14440] bond0 (unregistering): left promiscuous mode [ 512.571372][T14440] bond0 (unregistering): Released all slaves [ 512.728543][ T30] audit: type=1326 audit(1769300556.754:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356e19acb9 code=0x7ffc0000 [ 512.939125][ T30] audit: type=1326 audit(1769300556.754:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f356e19acb9 code=0x7ffc0000 [ 513.044328][ T30] audit: type=1326 audit(1769300556.754:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356e19acb9 code=0x7ffc0000 [ 513.105480][ T30] audit: type=1326 audit(1769300556.754:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356e19acb9 code=0x7ffc0000 [ 513.161391][ T30] audit: type=1326 audit(1769300556.754:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f356e19acb9 code=0x7ffc0000 [ 513.276196][T14471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.327983][T14471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.668160][T14479] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2655'. [ 513.687758][ T30] audit: type=1326 audit(1769300556.754:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14446 comm="syz.0.2646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f356e19acb9 code=0x7ffc0000 [ 513.691415][T14479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.767345][T14479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 514.033896][T14482] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 64993 [ 514.178024][T14488] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2657'. [ 514.445712][ T5831] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 514.595342][ T5831] usb 5-1: Using ep0 maxpacket: 16 [ 514.603643][ T5831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 514.615661][ T5831] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 514.715100][T14500] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2664'. [ 514.724604][T14500] tipc: Invalid UDP bearer configuration [ 514.724707][T14500] tipc: Enabling of bearer rejected, failed to enable media [ 514.765817][ T5899] usb 2-1: new full-speed USB device number 103 using dummy_hcd [ 514.927204][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.937727][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.960033][ T5899] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.970699][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.979604][ T5899] usb 2-1: Product: syz [ 514.983944][ T5899] usb 2-1: Manufacturer: syz [ 514.990580][ T5899] usb 2-1: SerialNumber: syz [ 515.081208][T14508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2668'. [ 515.095326][T14508] tipc: Invalid UDP bearer configuration [ 515.095386][T14508] tipc: Enabling of bearer rejected, failed to enable media [ 515.211384][ T5899] usb 2-1: cannot find UAC_HEADER [ 515.275000][ T5899] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 515.293481][ T5899] usb 2-1: USB disconnect, device number 103 [ 515.327034][ T5843] udevd[5843]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 516.105551][ T5899] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 516.235388][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 516.266047][ T5899] usb 2-1: Using ep0 maxpacket: 8 [ 516.273602][ T5899] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 516.292369][ T5899] usb 2-1: config 179 has no interface number 0 [ 516.305805][ T5899] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 516.317526][ T5899] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 516.330227][ T5899] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 516.341797][ T5899] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 516.365450][ T5899] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 516.381668][ T5899] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 516.393548][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.395384][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 516.416165][T14526] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22 [ 516.431246][ T9] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 516.448967][ T9] usb 1-1: config 0 has no interface number 0 [ 516.462270][ T9] usb 1-1: config 0 interface 196 has no altsetting 0 [ 516.477355][ T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 516.499867][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.546409][ T9] usb 1-1: Product: syz [ 516.553301][ T9] usb 1-1: Manufacturer: syz [ 516.564037][ T9] usb 1-1: SerialNumber: syz [ 516.585093][ T9] usb 1-1: config 0 descriptor?? [ 516.808506][ T9] ipheth 1-1:0.196: Unable to find endpoints [ 516.914279][T14550] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 516.940585][ T9] usb 1-1: USB disconnect, device number 96 [ 517.484887][ T5831] usb 5-1: string descriptor 0 read error: -71 [ 517.559791][ T5831] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.573310][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.751964][ T5831] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 517.765866][ T5831] usb 5-1: no configuration chosen from 1 choice [ 517.773999][ T5831] usb 5-1: USB disconnect, device number 81 [ 517.888292][ T9] usb 2-1: USB disconnect, device number 104 [ 517.888357][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 517.903193][ C1] dummy_hcd dummy_hcd.1: timer fired with no URBs pending? [ 518.608287][T14576] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2690'. [ 518.618721][T14576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.632046][T14576] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.265324][ T9425] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 519.415473][ T9425] usb 1-1: Using ep0 maxpacket: 8 [ 519.427736][ T9425] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 519.443240][ T9425] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.455304][ T9425] usb 1-1: Product: syz [ 519.462026][ T9425] usb 1-1: Manufacturer: syz [ 519.469620][ T9425] usb 1-1: SerialNumber: syz [ 519.493094][ T9425] usb 1-1: config 0 descriptor?? [ 519.504178][ T9425] gspca_main: sq930x-2.14.0 probing 2770:930c [ 520.409628][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021f75000: rx timeout, send abort [ 520.851871][ T9425] gspca_sq930x: reg_w 0105 0c00 failed -71 [ 520.917666][T14606] netlink: 'syz.2.2700': attribute type 49 has an invalid length. [ 520.925602][ C0] vcan0: j1939_tp_rxtimer: 0xffff888021f75000: abort rx timeout. Force session deactivation [ 521.165321][ T9425] gspca_sq930x: Sensor ov9630 not yet treated [ 521.171572][ T9425] sq930x 1-1:0.0: probe with driver sq930x failed with error -22 [ 521.209411][ T9425] usb 1-1: USB disconnect, device number 97 [ 522.094259][T14642] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2712'. [ 522.175012][T14645] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.215181][T14645] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.239315][T14642] netlink: ct family unspecified [ 523.012246][T14659] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2719'. [ 523.085334][T14659] tipc: Invalid UDP bearer configuration [ 523.085399][T14659] tipc: Enabling of bearer rejected, failed to enable media [ 523.216422][ T5831] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 523.372698][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 523.404890][ T5831] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 523.701457][ T5831] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 523.730066][ T5831] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 523.775176][ T5831] usb 1-1: config 0 descriptor?? [ 523.970851][T14677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.980898][T14677] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 524.049864][T14679] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2727'. [ 524.362343][ T5831] arvo 0003:1E7D:30D4.0027: report_id 0 is invalid [ 524.380014][ T5831] arvo 0003:1E7D:30D4.0027: item 0 0 1 8 parsing failed [ 524.404899][ T5831] arvo 0003:1E7D:30D4.0027: parse failed [ 524.425919][ T5831] arvo 0003:1E7D:30D4.0027: probe with driver arvo failed with error -22 [ 524.488365][T14680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2718'. [ 524.851373][T14688] bridge0: port 1(veth0_to_bridge) entered blocking state [ 524.867083][T14688] bridge0: port 1(veth0_to_bridge) entered disabled state [ 524.876509][T14688] veth0_to_bridge: entered allmulticast mode [ 524.884445][T14688] veth0_to_bridge: entered promiscuous mode [ 525.517825][T14699] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2732'. [ 525.805333][ T9425] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 525.955336][ T9425] usb 2-1: Using ep0 maxpacket: 16 [ 525.961919][ T5831] usb 1-1: USB disconnect, device number 98 [ 525.997111][ T9425] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 526.040623][ T9425] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 526.277208][ T24] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 526.458888][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 526.470738][ T24] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 526.479094][ T24] usb 5-1: config 0 has no interface number 0 [ 526.485672][ T24] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 526.520930][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 526.536506][ T24] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 526.558026][ T24] usb 5-1: Product: syz [ 526.573590][ T24] usb 5-1: SerialNumber: syz [ 526.591912][T14713] debugfs: 'netdev:nicvf0' already exists in '' [ 526.621804][ T24] usb 5-1: config 0 descriptor?? [ 526.648070][ T24] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 526.692550][ T24] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input30 [ 528.384562][ T30] kauditd_printk_skb: 17 callbacks suppressed [ 528.384581][ T30] audit: type=1326 audit(1769300573.404:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14725 comm="syz.3.2742" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9cc119acb9 code=0x0 [ 528.652669][ T9425] usb 2-1: string descriptor 0 read error: -71 [ 528.683771][ T9425] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.732826][ T9425] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.769938][ T9425] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 528.809737][ T9425] usb 2-1: no configuration chosen from 1 choice [ 528.822261][ T9425] usb 2-1: USB disconnect, device number 105 [ 528.996094][ C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 528.996161][ C1] ------------[ cut here ]------------ [ 528.996230][ C1] URB ffff888142ff8b00 submitted while active [ 528.996251][ C1] WARNING: drivers/usb/core/urb.c:380 at usb_submit_urb+0x7b/0x18b0, CPU#1: ksoftirqd/1/23 [ 528.996304][ C1] Modules linked in: [ 528.996373][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.996400][ C1] Tainted: [L]=SOFTLOCKUP [ 528.996409][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 528.996423][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 528.996454][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 57 02 17 fb 49 83 3e 00 74 40 e8 9c fb af fa 48 8d 3d 45 fc c8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 81 fb af fa eb 05 e8 7a fb [ 528.996474][ C1] RSP: 0018:ffffc900001d76a0 EFLAGS: 00010083 [ 528.996494][ C1] RAX: ffffffff87129dc4 RBX: ffff888142ff8b00 RCX: 0000000000040000 [ 528.996511][ C1] RDX: ffffc90002392000 RSI: ffff888142ff8b00 RDI: ffffffff8fdb9a10 [ 528.996536][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 528.996550][ C1] R10: dffffc0000000000 R11: fffff5200003aed4 R12: 0000000000000820 [ 528.996565][ C1] R13: ffff88802855e830 R14: ffff888142ff8b08 R15: dffffc0000000000 [ 528.996582][ C1] FS: 0000000000000000(0000) GS:ffff888125a28000(0000) knlGS:0000000000000000 [ 528.996600][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 528.996615][ C1] CR2: 00007f30f8fe8400 CR3: 0000000078900000 CR4: 00000000003526f0 [ 528.996634][ C1] Call Trace: [ 528.996642][ C1] [ 528.996655][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 528.996685][ C1] ? ___ratelimit+0x58c/0x8d0 [ 528.996720][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 528.996760][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 528.996795][ C1] dummy_timer+0xbbd/0x45d0 [ 528.996832][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 528.996882][ T5848] usb 5-1: USB disconnect, device number 82 [ 528.996897][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 528.996929][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 528.996956][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 528.996986][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 528.997016][ C1] __hrtimer_run_queues+0x527/0xc30 [ 528.997065][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 528.997093][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 528.997126][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 528.997158][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 528.997183][ C1] handle_softirqs+0x22a/0x7c0 [ 528.997208][ C1] ? run_ksoftirqd+0x36/0x60 [ 528.997241][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 528.997266][ C1] run_ksoftirqd+0x36/0x60 [ 528.997289][ C1] smpboot_thread_fn+0x541/0xa50 [ 528.997316][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 528.997351][ C1] kthread+0x726/0x8b0 [ 528.997383][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 528.997408][ C1] ? __pfx_kthread+0x10/0x10 [ 528.997440][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.997468][ C1] ? __pfx_kthread+0x10/0x10 [ 528.997494][ C1] ret_from_fork+0x51b/0xa40 [ 528.997527][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 528.997548][ C1] ? __switch_to+0xc82/0x1410 [ 528.997582][ C1] ? __pfx_kthread+0x10/0x10 [ 528.997612][ C1] ret_from_fork_asm+0x1a/0x30 [ 528.997658][ C1] [ 528.997678][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 528.997697][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G L syzkaller #0 PREEMPT(full) [ 528.997729][ C1] Tainted: [L]=SOFTLOCKUP [ 528.997738][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 528.997753][ C1] Call Trace: [ 528.997763][ C1] [ 528.997773][ C1] vpanic+0x1e0/0x670 [ 528.997805][ C1] panic+0xc5/0xd0 [ 528.997831][ C1] ? __pfx_panic+0x10/0x10 [ 528.997866][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 528.997901][ C1] __warn+0x315/0x4a0 [ 528.997926][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 528.997960][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 528.997993][ C1] __report_bug+0x29a/0x540 [ 528.998022][ C1] ? __pfx_dev_vprintk_emit+0x10/0x10 [ 528.998051][ C1] ? usb_submit_urb+0x7b/0x18b0 [ 528.998083][ C1] ? __pfx___report_bug+0x10/0x10 [ 528.998106][ C1] ? mark_lock+0x180/0x190 [ 528.998132][ C1] ? dev_printk_emit+0xee/0x140 [ 528.998158][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 528.998182][ C1] report_bug_entry+0x19a/0x290 [ 528.998210][ C1] ? usb_submit_urb+0x7e/0x18b0 [ 528.998235][ C1] ? usb_submit_urb+0x83/0x18b0 [ 528.998259][ C1] handle_bug+0xca/0x200 [ 528.998278][ C1] exc_invalid_op+0x1a/0x50 [ 528.998298][ C1] asm_exc_invalid_op+0x1a/0x20 [ 528.998320][ C1] RIP: 0010:usb_submit_urb+0x7e/0x18b0 [ 528.998350][ C1] Code: 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 57 02 17 fb 49 83 3e 00 74 40 e8 9c fb af fa 48 8d 3d 45 fc c8 08 48 89 de <67> 48 0f b9 3a b8 f0 ff ff ff eb 11 e8 81 fb af fa eb 05 e8 7a fb [ 528.998370][ C1] RSP: 0018:ffffc900001d76a0 EFLAGS: 00010083 [ 528.998391][ C1] RAX: ffffffff87129dc4 RBX: ffff888142ff8b00 RCX: 0000000000040000 [ 528.998409][ C1] RDX: ffffc90002392000 RSI: ffff888142ff8b00 RDI: ffffffff8fdb9a10 [ 528.998428][ C1] RBP: 000000000000000f R08: 0000000000000003 R09: 0000000000000004 [ 528.998442][ C1] R10: dffffc0000000000 R11: fffff5200003aed4 R12: 0000000000000820 [ 528.998459][ C1] R13: ffff88802855e830 R14: ffff888142ff8b08 R15: dffffc0000000000 [ 528.998483][ C1] ? usb_submit_urb+0x74/0x18b0 [ 528.998531][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 528.998561][ C1] ? ___ratelimit+0x58c/0x8d0 [ 528.998597][ C1] cm109_urb_irq_callback+0x6e2/0xcb0 [ 528.998638][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 528.998673][ C1] dummy_timer+0xbbd/0x45d0 [ 528.998710][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 528.998773][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 528.998807][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 528.998836][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 528.998860][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 528.998886][ C1] __hrtimer_run_queues+0x527/0xc30 [ 528.998924][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 528.998948][ C1] ? ktime_get_update_offsets_now+0x3b2/0x3d0 [ 528.998978][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 528.999010][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 528.999032][ C1] handle_softirqs+0x22a/0x7c0 [ 528.999059][ C1] ? run_ksoftirqd+0x36/0x60 [ 528.999092][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 528.999114][ C1] run_ksoftirqd+0x36/0x60 [ 528.999138][ C1] smpboot_thread_fn+0x541/0xa50 [ 528.999162][ C1] ? smpboot_thread_fn+0x4d/0xa50 [ 528.999190][ C1] kthread+0x726/0x8b0 [ 528.999221][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 528.999246][ C1] ? __pfx_kthread+0x10/0x10 [ 528.999275][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 528.999299][ C1] ? __pfx_kthread+0x10/0x10 [ 528.999322][ C1] ret_from_fork+0x51b/0xa40 [ 528.999346][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 528.999366][ C1] ? __switch_to+0xc82/0x1410 [ 528.999471][ C1] ? __pfx_kthread+0x10/0x10 [ 528.999539][ C1] ret_from_fork_asm+0x1a/0x30 [ 528.999629][ C1] [ 529.000018][ C1] Kernel Offset: disabled