last executing test programs: 14.263976837s ago: executing program 3 (id=935): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x28, 0x44004}}], 0x2, 0x88) 14.012453804s ago: executing program 3 (id=937): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x401, 0x0) ioctl$SNDCTL_MIDI_PRETIME(r1, 0xc0046d00, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="ab6dd2d1f3ff1e7abe6a740e00793cf490ab2a27", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES8=r2], 0x38}}, 0x10) io_setup(0x8, &(0x7f0000004200)=0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/tcp\x00') r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}], 0x1c) syz_clone3(&(0x7f0000000240)={0x101500, &(0x7f0000000180), 0x0, 0x0, {0x30}, 0x0, 0x0, 0x0, 0x0}, 0x58) write(0xffffffffffffffff, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffe", 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000040000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000018c0000000c0a01030000000000000000070000080900020073797a31000000000900010073797a3000000000600003805c000080080003400000000250000b802c0001800a0001006c696d69740000001c0002800c00014000000000000000030c0002400000000000000010200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x110}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r7, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r7, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) io_submit(r3, 0x1, &(0x7f0000000080)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x2}]) wait4(0x0, 0x0, 0x40000000, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r8}, 0xc) 12.317457537s ago: executing program 2 (id=941): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2b}, 0x28) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket(0x22, 0x2, 0x4) bind$bt_hci(r4, &(0x7f0000001200)={0x1f, 0x3}, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000010000850000007d000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x47, [0x5, 0x5, 0xe, 0x6, 0x3, 0xd, 0x19, 0x6, 0x10, 0x5, 0xc, 0xd, 0xc, 0x4, 0x3, 0xd], 0x1, [0x9, 0x3, 0x101, 0x7, 0x688, 0x8001, 0x8, 0x5, 0x8, 0x401, 0xb, 0x3, 0x6c9a, 0x5, 0x6, 0xbd], [0xc, 0x9, 0x3, 0x0, 0x2488, 0x0, 0x614, 0x3, 0x3, 0x5, 0x0, 0x7, 0x5, 0x6, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000003600"], 0x1c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 9.317822049s ago: executing program 0 (id=946): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000040801e4b700000000000000000000000600024000000000050003002f000000"], 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = getpid() syz_clone3(&(0x7f00000003c0)={0x20000000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2], 0x1}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001000010000000000000000000a00"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) ioctl$TUNDETACHFILTER(r1, 0x8903, 0x1000000000000) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x3ff, 0x94000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000001140)=0x1) unshare(0x2a020400) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000010000000000000000000000711878000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200001}, 0x94) ioctl$SIOCGETNODEID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x4}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000001040)={0x1, &(0x7f0000001080)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) setsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000000), 0x2) 9.256326883s ago: executing program 3 (id=947): socket(0x10, 0x3, 0x0) add_key(&(0x7f0000000100)='blacklist\x00', 0x0, &(0x7f0000000040)="12e50dd06323f8bcbeb554348ff17a144841a3b7b2e73aa8b523dc8198797b110660010e36d73c8b4f4146fea6ba31fb4d6e5e806c778b0e71bdf008d78bf31a0e89f0ca21adce2d9ad0e2a80c769a1d3a05ad", 0x53, 0xffffffffffffffff) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)) r6 = eventfd2(0x0, 0x0) io_setup(0x81, &(0x7f0000000400)=0x0) io_submit(r7, 0x1, &(0x7f0000001600)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0xd5, r6, &(0x7f0000000040)="105d88874539ed6d", 0x8, 0x3, 0x0, 0x1, r6}]) io_submit(r7, 0x1, &(0x7f0000000440)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1fd, r6, 0x0, 0x0, 0x0, 0x0, 0x1, r6}]) 9.212227613s ago: executing program 2 (id=948): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) mmap(&(0x7f00004c4000/0x2000)=nil, 0x2000, 0x200000f, 0x10010, r0, 0xd2ea5000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8004, 0x0, r6}, 0x50) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000540)={@mcast2}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000296000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000580)="660fc683a1b50000ccc7442400081a29edc744240221000000c7442406000000000f011c24c4e16d60448af7dc54aa5d66baf80cb80cdcc48bef66bafc0cb0ebee0f50d5c4e3816c7026000f01c9b9a40200000f32c4e2a58c81a6000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r9) 6.439094446s ago: executing program 3 (id=949): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x49, &(0x7f0000000ec0)=0x8, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) socket$inet(0x2, 0x1, 0x100) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000000c0)=0x5, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000000c0), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000f1ffffffff020000000300000000000000000000000000000105000000200000000000000000000003000000000200000002000000000000000000"], 0x0, 0x5a}, 0x20) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040ed5000410"], 0x11) mount$binderfs(0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x400000000, 0x6, 0xfffffffffffffffb, 0x8001, 0x0, 0x1000001000, 0x47}, 0x0, &(0x7f0000000000)={0x3ff, 0x4, 0x100004, 0xb, 0x0, 0x10, 0x80000002}, 0x0, 0x0) 6.097884678s ago: executing program 1 (id=951): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$ax25(r0, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x49) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x80000006) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0) fanotify_init(0x4, 0x40001) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.095584322s ago: executing program 2 (id=952): syz_usb_connect(0x5, 0x2d, &(0x7f00000006c0)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000014a90c200090588"], 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x6000001}, 0x800) 5.840675108s ago: executing program 1 (id=953): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 5.660619417s ago: executing program 1 (id=954): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4a, 0x3, 0x1, 0x3, 0x7ff, 0x2, 0x3, 0x4, 0x33e, 0x38, 0xd6, 0x7097, 0x3fe, 0x20, 0x1, 0x7, 0x8, 0x7}, [{0x3, 0x2, 0x2, 0x400, 0xd, 0x80000001, 0x9, 0x7}]}, 0x58) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5.511181927s ago: executing program 1 (id=955): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x10, 0xaf, 0xd, "c9e9e6c6", "5a8d39f3"}}, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x7, 0x4, 0x5, 0x6}}}, 0x0) 5.363558398s ago: executing program 4 (id=956): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$video(0x0, 0x1d24, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x15) ioctl$UFFDIO_CONTINUE(r4, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0) r6 = syz_clone3(&(0x7f0000000580)={0x20000000, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000200), {0x1d}, &(0x7f0000000300)=""/158, 0x9e, &(0x7f00000003c0)=""/150, &(0x7f0000000480)=[r5, r5, r5, r5], 0x4}, 0x58) r7 = syz_open_procfs$pagemap(r6, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r7, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f00001cd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x9, &(0x7f00000021c0)=[{0x2000000000000009, 0xffffffff, 0x1}], 0x1, 0xc2ff, 0x0, 0x0, 0x1}) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r8, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0xa, 0x4, 0x1, 0x0, {0x0, 0x2710}, {0x1, 0xc, 0xd2, 0x6, 0x77, 0x6, "0080ca6f"}, 0xff, 0x2, {&(0x7f00000002c0)}, 0x6}) sendfile(r0, r0, 0x0, 0x40008) 5.064278997s ago: executing program 0 (id=957): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001840)={0xffffffffffffffc6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c56683149b750f0e3b5cb2e935ccfaf696b455e89444a4ef4650bff0dea64a4548b8e07356b14a79c393b1d71935120b68e488fa6db420e9b2c5a5c534ba203c3627e1a1df1d72806cbc0acf569c66a7d1e472f9361c19ceb5bf603fb1399a1d4890b660f2ae74b11e194993c9debccb530c5644bde30b633fb3d1cd05017c25e7ce3c4e175d08134ee02ccb2726e53c9"], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7030000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) syz_emit_ethernet(0x1f, 0x0, 0x0) 4.390854577s ago: executing program 2 (id=958): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2b}, 0x28) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket(0x22, 0x2, 0x4) bind$bt_hci(r4, &(0x7f0000001200)={0x1f, 0x3}, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000010000850000007d000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x47, [0x5, 0x5, 0xe, 0x6, 0x3, 0xd, 0x19, 0x6, 0x10, 0x5, 0xc, 0xd, 0xc, 0x4, 0x3, 0xd], 0x1, [0x9, 0x3, 0x101, 0x7, 0x688, 0x8001, 0x8, 0x5, 0x8, 0x401, 0xb, 0x3, 0x6c9a, 0x5, 0x6, 0xbd], [0xc, 0x9, 0x3, 0x0, 0x2488, 0x0, 0x614, 0x3, 0x3, 0x5, 0x0, 0x7, 0x5, 0x6, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000003600"], 0x1c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 3.986735129s ago: executing program 1 (id=959): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef911d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$unix(r2, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x28, 0x44004}}], 0x2, 0x88) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r3, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r3]) r4 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r5 = syz_usb_connect$rtl8150(0x421f0bcb223e92fb, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001080)=""/15, 0xc}, 0x2}], 0x1, 0x1, 0x0) setsockopt$inet_int(r6, 0x0, 0x17, &(0x7f0000000180)=0x6, 0x4) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@broadcast, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x5, 0x100, @void}}}}}}}, 0x0) syz_usb_control_io$rtl8150(r5, &(0x7f00000002c0)={0x14, &(0x7f00000001c0)={0x40, 0x7, 0x88, {0x88, 0xe, "e46e1d262f5324413d83111992beea2b5c14770a44805973cff3a70b06f480995387c4e866df4c4c7c0e064a933ff18c8a7deb8acfd93371fe0fb85ec21f49cee1612a26772f0f01114e10a13acc15f6656a2f047db7d359d2d9f1d88ddf22a95dfac9234d67aba8e639f3a871a24e8559940656902e3c48b142a73b0948ec5a86bdcc122fa7"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x4c08}}}, &(0x7f00000005c0)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="400c3e00000031c8db08eb7391db0bf55b8b556c665fc024bc548c3f1b5437ade15beb345b5a375161003aa965459d6380ad8e63098e75785f980d68a9e385fd72a76dba92a723ac00d8dccf05c4436ec6cbb8ec1ea5976f3ab132476312f1004ce00fc7aa5271d60e179b207cb99044e704d534a37ed4ce9fee388ebb8d5477bc8bfdda191c7c96432d92adf8c1598e6d11315c03bd5d894dbbd3beed07b8d073a0442483b834789cbd8aca931000506d944a9588696914200158d12cdbe02683aff88528c607d63feb749e620e3237174373974a672f04f7dd98573f9adf77db30cd972c229b8f10a4903b0d47198ce604833ffc"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000500)={0x0, 0x8, 0x1, 0x15}, &(0x7f0000000540)={0xc0, 0x5, 0x3, 'Ly\\'}, &(0x7f0000000640)=ANY=[@ANYBLOB="400506000000c908aa80070000000000000066465ccf74204e9a225864ef998264841a142e22a7ac3fb568eb005ad77ecc3f1417139ff8e2bd0b11f2c303e6509e00fc2ef772085c80a561e68983e52658b6b436b21ec00cfff23dd6973b5cecd6a4d7a64758b3f3caee4ae0a68d89c510504981bd9ba15b35a90c8aaf8814de89ce8837445b658bf9cf4d9fcd16b12b0a1495dae2ba0d0cbe3389899fc2b5ba460ef36860e14c8f9dc100d7224137baf8c053e42d007756fcbda936d0f92505f5c78a78e79d030ca555"]}) ioctl$HIDIOCSREPORT(r4, 0x81044804, &(0x7f0000000400)={0x1, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0xc2, 0x80000001, 0x35315258, 0x5, 0xff, 0x8, 0x0, 0x6, 0x0, 0x0, 0x2}}) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x2, 0x0, 0x8, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000000980)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 3.560052996s ago: executing program 3 (id=960): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f00004c4000/0x2000)=nil, 0x2000, 0x200000f, 0x10010, r0, 0xd2ea5000) r5 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r5, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1b, 0x0, 0x0, 0x8004, 0x0, r6}, 0x50) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000540)={@mcast2}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000296000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000580)="660fc683a1b50000ccc7442400081a29edc744240221000000c7442406000000000f011c24c4e16d60448af7dc54aa5d66baf80cb80cdcc48bef66bafc0cb0ebee0f50d5c4e3816c7026000f01c9b9a40200000f32c4e2a58c81a6000000", 0x5e}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r8) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') fchdir(r9) 3.354382999s ago: executing program 2 (id=961): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ed5696c5820fae0000000000000080beef91", 0x12) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00'], 0x28, 0x44004}}], 0x2, 0x88) 2.771226943s ago: executing program 0 (id=962): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "709c897c82b1095a67232d63"}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x6, 0x7, 0x1, 0x0, "d092"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x98}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0xc010) 2.416120186s ago: executing program 0 (id=963): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) bind$ax25(r0, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r1 = inotify_init() inotify_add_watch(r1, 0x0, 0x49) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$UHID_CREATE2(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x80000006) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x100, 0x0) fanotify_init(0x4, 0x40001) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.918796937s ago: executing program 3 (id=964): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000201c1b100c00000000000109022d00010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) pipe(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x5, 0x34, &(0x7f0000000e80)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb35010203010902220001080540040904ce0109000000000705f71fa5a8b8b8a409"], 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x2f38, 0xa) write(0xffffffffffffffff, &(0x7f0000000240)="94", 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) openat$cgroup_type(r4, &(0x7f0000000100), 0x2, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000c40), 0x12) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f00000003c0)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000180)='cgroup.procs\x00', 0x2, 0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000040), 0x0) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) write(r1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.854122462s ago: executing program 0 (id=965): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x8b, 0x4) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000002c0)) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000280)=0x8, 0x4) 1.712216035s ago: executing program 4 (id=966): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0xfffffffd, 0x0, &(0x7f00000011c0)) timer_delete(0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x8044}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "028200", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0xfffc, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) prctl$PR_SET_NAME(0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='fd/3\x00') r2 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$igmp(0x2, 0x3, 0x2) keyctl$read(0x2, 0x0, &(0x7f00000000c0)=""/4096, 0x1000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xc, 0x50, r3, 0x6e49b000) getsockopt$MRT(r4, 0x0, 0xd0, 0x0, &(0x7f0000000580)) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f00000000c0)={0x6, 'tunl0\x00', {0xc59}, 0xd}) ioctl$VT_RESIZE(r3, 0x5609, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000500)="08009d6888e1e9bf", 0x8}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008000000", @ANYRES32], 0x40}, 0x20000000) 1.369086522s ago: executing program 4 (id=967): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="24000000040801e4b700000000000000000000000600024000000000050003002f000000"], 0x24}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r2 = getpid() syz_clone3(&(0x7f00000003c0)={0x20000000, 0x0, 0x0, 0x0, {0x40}, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r2], 0x1}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001000010000000000000000000a00"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) ioctl$TUNDETACHFILTER(r1, 0x8903, 0x1000000000000) r3 = syz_open_dev$loop(&(0x7f00000000c0), 0x3ff, 0x94000) ioctl$BLKROSET(r3, 0x125d, &(0x7f0000001140)=0x1) unshare(0x2a020400) r4 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x0) ioctl$SIOCGETNODEID(r4, 0x89e1, &(0x7f0000000080)={0x4}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000140)=""/4078, 0xfee}], 0x1, 0xf2, 0x207fff) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, 0x0, 0x0) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000001040)={0x1, &(0x7f0000001080)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) statfs(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)) setsockopt$bt_BT_RCVMTU(r6, 0x112, 0xd, &(0x7f0000000000), 0x2) 1.012654437s ago: executing program 4 (id=968): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) (fail_nth: 1) 818.76299ms ago: executing program 1 (id=969): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, &(0x7f0000000000)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, 0x0, &(0x7f00000008c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x8, 0x0, 0x7, 0x4, 0x5, 0x6}}}, 0x0) 624.395065ms ago: executing program 4 (id=970): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) unshare(0x2c020400) recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000200)=""/239, 0xef}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000000180)=""/39, 0x27}, {&(0x7f0000000500)=""/97, 0x61}, {&(0x7f0000000580)=""/140, 0x8c}, {&(0x7f0000000840)=""/66, 0x42}, {&(0x7f0000000700)=""/132, 0x84}, {&(0x7f0000000640)=""/14, 0xe}, {&(0x7f00000009c0)=""/201, 0xc9}], 0xb, &(0x7f00000008c0)=""/224, 0xe0}, 0x2000) 530.36007ms ago: executing program 4 (id=971): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@typedef={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2b}, 0x28) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket(0x22, 0x2, 0x4) bind$bt_hci(r4, &(0x7f0000001200)={0x1f, 0x3}, 0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={r0}, 0x4) ioctl$TUNGETVNETLE(0xffffffffffffffff, 0x800454dd, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x6, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000100000000000000010000850000007d000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x47, [0x5, 0x5, 0xe, 0x6, 0x3, 0xd, 0x19, 0x6, 0x10, 0x5, 0xc, 0xd, 0xc, 0x4, 0x3, 0xd], 0x1, [0x9, 0x3, 0x101, 0x7, 0x688, 0x8001, 0x8, 0x5, 0x8, 0x401, 0xb, 0x3, 0x6c9a, 0x5, 0x6, 0xbd], [0xc, 0x9, 0x3, 0x0, 0x2488, 0x0, 0x614, 0x3, 0x3, 0x5, 0x0, 0x7, 0x5, 0x6, 0x6, 0x6]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000003600"], 0x1c}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 506.594054ms ago: executing program 0 (id=972): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001840)={0xffffffffffffffc6, &(0x7f00000000c0)=ANY=[@ANYBLOB="1c56683149b750f0e3b5cb2e935ccfaf696b455e89444a4ef4650bff0dea64a4548b8e07356b14a79c393b1d71935120b68e488fa6db420e9b2c5a5c534ba203c3627e1a1df1d72806cbc0acf569c66a7d1e472f9361c19ceb5bf603fb1399a1d4890b660f2ae74b11e194993c9debccb530c5644bde30b633fb3d1cd05017c25e7ce3c4e175d08134ee02ccb2726e53c9"], 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000080000000850000002b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7030000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cd21d3084d94d35486dd", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = getpid() kcmp$KCMP_EPOLL_TFD(r2, r2, 0x7, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) syz_emit_ethernet(0x1f, 0x0, 0x0) 0s ago: executing program 2 (id=973): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 242.850970][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 243.100186][ T7393] FAULT_INJECTION: forcing a failure. [ 243.100186][ T7393] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.100245][ T7393] CPU: 1 UID: 0 PID: 7393 Comm: syz.2.420 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 243.100269][ T7393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 243.100292][ T7393] Call Trace: [ 243.100301][ T7393] [ 243.100310][ T7393] dump_stack_lvl+0xe8/0x150 [ 243.100342][ T7393] should_fail_ex+0x46b/0x600 [ 243.100370][ T7393] _copy_from_user+0x2d/0xb0 [ 243.100406][ T7393] ___sys_sendmsg+0x1c6/0x360 [ 243.100426][ T7393] ? __lock_acquire+0x6b5/0x2cf0 [ 243.100457][ T7393] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.100481][ T7393] ? __schedule+0x1491/0x4f50 [ 243.100533][ T7393] ? __fget_files+0x2a/0x420 [ 243.100552][ T7393] ? __fget_files+0x3a6/0x420 [ 243.100583][ T7393] __x64_sys_sendmsg+0x1c3/0x2a0 [ 243.100602][ T7393] ? irqentry_exit+0x59c/0x620 [ 243.100629][ T7393] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 243.100672][ T7393] do_syscall_64+0xe2/0xf80 [ 243.100696][ T7393] ? rcu_is_watching+0x15/0xb0 [ 243.100714][ T7393] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.100735][ T7393] ? clear_bhb_loop+0x60/0xb0 [ 243.100758][ T7393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.100777][ T7393] RIP: 0033:0x7f261ca1acb9 [ 243.100797][ T7393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.100811][ T7393] RSP: 002b:00007f261ac34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 243.100831][ T7393] RAX: ffffffffffffffda RBX: 00007f261cc96180 RCX: 00007f261ca1acb9 [ 243.100846][ T7393] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 243.100859][ T7393] RBP: 00007f261ac34090 R08: 0000000000000000 R09: 0000000000000000 [ 243.100872][ T7393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.100884][ T7393] R13: 00007f261cc96218 R14: 00007f261cc96180 R15: 00007ffe758fc6a8 [ 243.100916][ T7393] [ 243.460956][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 243.542817][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 243.542853][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 243.546129][ T10] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 243.546159][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.546179][ T10] usb 4-1: Product: syz [ 243.546201][ T10] usb 4-1: Manufacturer: syz [ 243.546215][ T10] usb 4-1: SerialNumber: syz [ 243.742871][ T10] usb 4-1: config 0 descriptor?? [ 243.766743][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10 [ 243.955514][ T10] usb 4-1: USB disconnect, device number 15 [ 243.990920][ T1822] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 244.088747][ T5812] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 244.140904][ T1822] usb 2-1: Using ep0 maxpacket: 32 [ 244.145736][ T1822] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.145812][ T1822] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.145839][ T1822] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.145865][ T1822] usb 2-1: config 0 interface 0 has no altsetting 0 [ 244.145897][ T1822] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 244.145922][ T1822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.235964][ T1822] usb 2-1: config 0 descriptor?? [ 244.290954][ T5863] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 244.420963][ T5863] usb 1-1: device descriptor read/64, error -71 [ 244.653853][ T7398] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.654409][ T7398] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.675016][ T5863] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 244.797956][ T7413] pim6reg: entered allmulticast mode [ 244.800939][ T5863] usb 1-1: device descriptor read/64, error -71 [ 244.824896][ T1822] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 244.824939][ T1822] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 244.824969][ T1822] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 244.824996][ T1822] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 244.825025][ T1822] corsair-cpro 0003:1B1C:0C10.000C: unknown main item tag 0x0 [ 244.883952][ T1822] corsair-cpro 0003:1B1C:0C10.000C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 244.911334][ T7413] pim6reg: left allmulticast mode [ 244.920722][ T5863] usb usb1-port1: attempt power cycle [ 244.962362][ T1822] corsair-cpro 0003:1B1C:0C10.000C: probe with driver corsair-cpro failed with error -38 [ 245.221792][ T7423] 9p: Bad value for 'rfdno' [ 245.301102][ T5863] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 245.325953][ T5863] usb 1-1: device descriptor read/8, error -71 [ 245.570900][ T5863] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 245.591701][ T5863] usb 1-1: device descriptor read/8, error -71 [ 245.602806][ T7426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.603263][ T7426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.442341][ T5863] usb usb1-port1: unable to enumerate USB device [ 248.444580][ T7444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.437'. [ 248.444652][ T7444] netlink: 20 bytes leftover after parsing attributes in process `syz.0.437'. [ 249.070755][ T5988] usb 3-1: USB disconnect, device number 13 [ 249.345142][ T5812] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 249.530998][ T37] audit: type=1326 audit(1769333784.149:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7451 comm="syz.0.442" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8262facb9 code=0x0 [ 250.411007][ T1822] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 251.661163][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 251.684944][ T1822] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 251.684977][ T1822] usb 3-1: config 0 has no interface number 0 [ 251.685026][ T1822] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 251.749465][ T1822] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 251.749498][ T1822] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 251.749520][ T1822] usb 3-1: Product: syz [ 251.749534][ T1822] usb 3-1: Manufacturer: syz [ 251.749548][ T1822] usb 3-1: SerialNumber: syz [ 251.822702][ T10] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 251.822722][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.836303][ T10] usb 4-1: config 0 descriptor?? [ 251.871732][ T10] cp210x 4-1:0.0: cp210x converter detected [ 251.887310][ T1822] usb 3-1: config 0 descriptor?? [ 251.936705][ T1822] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 251.939175][ T1822] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 251.939222][ T1822] keyspan 3-1:0.107: unsupported endpoint type 0 [ 251.977010][ T1822] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 252.010625][ T1822] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 252.101944][ T1822] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 252.225213][ T1822] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 252.230456][ T7472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.248057][ T7472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.311294][ T10] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 252.313485][ T1822] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 252.356847][ T1822] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 252.378658][ T1822] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 252.432186][ T1822] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 252.537789][ T1822] usb 3-1: USB disconnect, device number 14 [ 252.577715][ T1822] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 252.615030][ T1822] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 252.649929][ T1822] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 252.720917][ T1822] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 252.725470][ T1822] keyspan 3-1:0.107: device disconnected [ 252.863908][ T10] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 252.863937][ T10] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 252.878250][ T10] usb 4-1: cp210x converter now attached to ttyUSB0 [ 252.907186][ T10] usb 4-1: USB disconnect, device number 16 [ 252.950762][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 252.954115][ T10] cp210x 4-1:0.0: device disconnected [ 253.148891][ T7478] FAULT_INJECTION: forcing a failure. [ 253.148891][ T7478] name failslab, interval 1, probability 0, space 0, times 0 [ 253.148919][ T7478] CPU: 0 UID: 0 PID: 7478 Comm: syz.2.448 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 253.148933][ T7478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 253.148940][ T7478] Call Trace: [ 253.148945][ T7478] [ 253.148950][ T7478] dump_stack_lvl+0xe8/0x150 [ 253.148969][ T7478] should_fail_ex+0x46b/0x600 [ 253.148986][ T7478] should_failslab+0xa8/0x100 [ 253.148999][ T7478] __kmalloc_noprof+0xdf/0x7c0 [ 253.149014][ T7478] ? rcu_is_watching+0x15/0xb0 [ 253.149025][ T7478] ? snd_interval_refine+0x602/0xa50 [ 253.149039][ T7478] ? snd_pcm_hw_refine+0x9b1/0x1710 [ 253.149054][ T7478] snd_pcm_hw_refine+0x9b1/0x1710 [ 253.149074][ T7478] ? __pfx_snd_pcm_hw_refine+0x10/0x10 [ 253.149104][ T7478] ? __asan_memset+0x22/0x50 [ 253.149117][ T7478] ? snd_pcm_oss_change_params_locked+0x6e5/0x3e00 [ 253.149133][ T7478] ? snd_pcm_oss_change_params_locked+0x744/0x3e00 [ 253.149150][ T7478] snd_pcm_oss_change_params_locked+0x851/0x3e00 [ 253.149178][ T7478] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 253.149200][ T7478] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 253.149215][ T7478] ? lockdep_hardirqs_on+0x7a/0x110 [ 253.149229][ T7478] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 253.149243][ T7478] ? mutex_lock_interruptible_nested+0x152/0x1d0 [ 253.149255][ T7478] ? snd_pcm_oss_make_ready+0xc0/0x360 [ 253.149272][ T7478] snd_pcm_oss_make_ready+0x11b/0x360 [ 253.149289][ T7478] snd_pcm_oss_set_trigger+0x95/0x730 [ 253.149308][ T7478] snd_pcm_oss_poll+0x854/0x9a0 [ 253.149320][ T7478] ? reacquire_held_locks+0x104/0x190 [ 253.149337][ T7478] ? rt_spin_lock+0x1e0/0x400 [ 253.149352][ T7478] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 253.149364][ T7478] ? rt_spin_unlock+0x14f/0x200 [ 253.149379][ T7478] ? __pfx_snd_pcm_oss_poll+0x10/0x10 [ 253.149393][ T7478] ep_insert+0x11e7/0x1820 [ 253.149413][ T7478] ? __pfx_ep_insert+0x10/0x10 [ 253.149428][ T7478] ? __pfx_ep_ptable_queue_proc+0x10/0x10 [ 253.149442][ T7478] ? lockdep_hardirqs_on+0x7a/0x110 [ 253.149455][ T7478] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 253.149470][ T7478] ? mutex_lock_nested+0x152/0x1d0 [ 253.149480][ T7478] ? do_epoll_ctl+0x3d2/0xe90 [ 253.149493][ T7478] do_epoll_ctl+0x7fd/0xe90 [ 253.149509][ T7478] __x64_sys_epoll_ctl+0x165/0x1b0 [ 253.149523][ T7478] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 253.149541][ T7478] do_syscall_64+0xe2/0xf80 [ 253.149555][ T7478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.149566][ T7478] ? trace_irq_disable+0x37/0x100 [ 253.149578][ T7478] ? clear_bhb_loop+0x60/0xb0 [ 253.149591][ T7478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.149601][ T7478] RIP: 0033:0x7f261ca1acb9 [ 253.149612][ T7478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.149622][ T7478] RSP: 002b:00007f261ac76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 253.149634][ T7478] RAX: ffffffffffffffda RBX: 00007f261cc95fa0 RCX: 00007f261ca1acb9 [ 253.149643][ T7478] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000004 [ 253.149649][ T7478] RBP: 00007f261ac76090 R08: 0000000000000000 R09: 0000000000000000 [ 253.149656][ T7478] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 253.149663][ T7478] R13: 00007f261cc96038 R14: 00007f261cc95fa0 R15: 00007ffe758fc6a8 [ 253.149680][ T7478] [ 253.844862][ T7490] openvswitch: netlink: Key type 300 is out of range max 32 [ 255.729774][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.729845][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.130878][ T5988] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 257.290939][ T5988] usb 3-1: Using ep0 maxpacket: 16 [ 257.292978][ T5988] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 197, changing to 11 [ 257.293012][ T5988] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 257.293026][ T5988] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 72 [ 257.295687][ T5988] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 257.295716][ T5988] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.295738][ T5988] usb 3-1: Product: syz [ 257.295754][ T5988] usb 3-1: Manufacturer: syz [ 257.295769][ T5988] usb 3-1: SerialNumber: syz [ 257.583842][ T5988] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 257.583897][ T5988] cdc_ncm 3-1:1.0: bind() failure [ 257.607826][ T5988] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 257.607856][ T5988] cdc_ncm 3-1:1.1: bind() failure [ 257.660976][ T5988] usb 3-1: USB disconnect, device number 15 [ 258.626817][ T7519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 258.627109][ T7519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.825675][ T5988] usb 2-1: USB disconnect, device number 14 [ 260.884384][ T5988] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 261.357377][ T5988] usb 4-1: config 0 has an invalid interface number: 107 but max is 0 [ 261.357397][ T5988] usb 4-1: config 0 has no interface number 0 [ 261.357425][ T5988] usb 4-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 261.414460][ T5988] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 261.414481][ T5988] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 261.414493][ T5988] usb 4-1: Product: syz [ 261.414501][ T5988] usb 4-1: Manufacturer: syz [ 261.414509][ T5988] usb 4-1: SerialNumber: syz [ 261.483133][ T5988] usb 4-1: config 0 descriptor?? [ 261.681710][ T5988] keyspan 4-1:0.107: Keyspan 4 port adapter converter detected [ 261.681941][ T5988] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 81 [ 261.681997][ T5988] keyspan 4-1:0.107: unsupported endpoint type 0 [ 261.701729][ T5988] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 1 [ 261.704670][ T5988] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 261.707232][ T5988] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 2 [ 261.765751][ T5988] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 261.784812][ T5988] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 4 [ 261.799877][ T5988] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 261.811221][ T5988] keyspan 4-1:0.107: found no endpoint descriptor for endpoint 6 [ 261.812968][ T5988] usb 4-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 262.114888][ T7529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.115354][ T7529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 263.620689][ T1822] usb 4-1: USB disconnect, device number 17 [ 263.697583][ T1822] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 263.756355][ T1822] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 263.842914][ T1822] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 263.848788][ T1822] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 263.849783][ T1822] keyspan 4-1:0.107: device disconnected [ 264.630974][ T7548] uprobe: syz.4.470:7548 failed to unregister, leaking uprobe [ 264.654290][ T7548] uprobe: syz.4.470:7548 failed to unregister, leaking uprobe [ 265.141454][ T7570] ip6_tunnel: non-ECT from fe80:0000:0000:00ed:ffff:ffff:ffff:ffaa with DS=0x2d [ 269.281023][ T10] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 270.491084][ T10] usb 4-1: device descriptor read/64, error -71 [ 270.583939][ T7618] uprobe: syz.0.494:7618 failed to unregister, leaking uprobe [ 270.800978][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 272.131107][ T10] usb 4-1: device descriptor read/64, error -71 [ 272.257545][ T10] usb usb4-port1: attempt power cycle [ 272.695289][ T7644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 272.695384][ T7644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.503'. [ 273.363113][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 273.414227][ T10] usb 4-1: device descriptor read/8, error -71 [ 273.590970][ T809] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 273.761564][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 273.763671][ T809] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 273.763725][ T809] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 273.763754][ T809] usb 5-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 273.763780][ T809] usb 5-1: config 0 interface 0 has no altsetting 0 [ 273.763812][ T809] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 273.763835][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.773056][ T809] usb 5-1: config 0 descriptor?? [ 274.227678][ T7642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 274.232383][ T7642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 274.525222][ T809] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 274.525265][ T809] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 274.525292][ T809] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 274.525319][ T809] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 274.525346][ T809] corsair-cpro 0003:1B1C:0C10.000D: unknown main item tag 0x0 [ 274.551956][ T809] corsair-cpro 0003:1B1C:0C10.000D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.4-1/input0 [ 274.615630][ T809] corsair-cpro 0003:1B1C:0C10.000D: probe with driver corsair-cpro failed with error -38 [ 274.713339][ T37] audit: type=1326 audit(1769333809.319:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7663 comm="syz.2.497" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f261ca1acb9 code=0x0 [ 274.806525][ T5863] usb 5-1: USB disconnect, device number 11 [ 274.849043][ T7665] fido_id[7665]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 275.950903][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 276.170855][ T10] usb 5-1: config 0 has an invalid interface number: 107 but max is 0 [ 276.170884][ T10] usb 5-1: config 0 has no interface number 0 [ 276.171183][ T10] usb 5-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 276.418630][ T10] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 276.418662][ T10] usb 5-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 276.418684][ T10] usb 5-1: Product: syz [ 276.418699][ T10] usb 5-1: Manufacturer: syz [ 276.418714][ T10] usb 5-1: SerialNumber: syz [ 276.470408][ T10] usb 5-1: config 0 descriptor?? [ 276.513041][ T10] keyspan 5-1:0.107: Keyspan 4 port adapter converter detected [ 276.513248][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 81 [ 276.513288][ T10] keyspan 5-1:0.107: unsupported endpoint type 0 [ 276.514433][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 1 [ 276.521402][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 276.523895][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 2 [ 276.611244][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 276.620661][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 4 [ 276.651750][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 276.656235][ T10] keyspan 5-1:0.107: found no endpoint descriptor for endpoint 6 [ 276.687618][ T10] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 276.842507][ T7682] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.843009][ T7682] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.771233][ T1822] usb 5-1: USB disconnect, device number 12 [ 277.777497][ T1822] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 277.790160][ T1822] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 277.813210][ T1822] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 277.857989][ T1822] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 277.858532][ T1822] keyspan 5-1:0.107: device disconnected [ 278.550973][ T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 278.700979][ T10] usb 3-1: device descriptor read/64, error -71 [ 278.960940][ T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 280.160937][ T10] usb 3-1: device descriptor read/64, error -71 [ 280.280928][ T10] usb usb3-port1: attempt power cycle [ 280.591136][ T809] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 280.680951][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 280.706489][ T10] usb 3-1: device descriptor read/8, error -71 [ 280.761196][ T809] usb 2-1: Using ep0 maxpacket: 32 [ 280.766531][ T809] usb 2-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 280.766563][ T809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.766584][ T809] usb 2-1: Product: syz [ 280.766599][ T809] usb 2-1: Manufacturer: syz [ 280.766614][ T809] usb 2-1: SerialNumber: syz [ 280.832283][ T5988] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 280.950946][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 280.972495][ T10] usb 3-1: device descriptor read/8, error -71 [ 281.027722][ T809] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 281.038682][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 281.041007][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 281.041038][ T5988] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 281.045687][ T5988] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 281.045704][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.045716][ T5988] usb 1-1: Product: syz [ 281.045724][ T5988] usb 1-1: Manufacturer: syz [ 281.045732][ T5988] usb 1-1: SerialNumber: syz [ 281.083784][ T10] usb usb3-port1: unable to enumerate USB device [ 281.164682][ T5988] usb 1-1: config 0 descriptor?? [ 281.176513][ T809] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 281.224954][ T5988] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input11 [ 281.226951][ T809] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 281.631145][ T5988] usb 1-1: USB disconnect, device number 13 [ 281.673361][ T7723] trusted_key: syz.1.523 sent an empty control message without MSG_MORE. [ 281.800703][ T7729] Option ' ÜÛPu©ª¡´ià ' to dns_resolver key: bad/missing value [ 283.008028][ T7733] uprobe: syz.2.528:7733 failed to unregister, leaking uprobe [ 283.290927][ T5988] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 283.356447][ T56] usb 2-1: USB disconnect, device number 15 [ 283.370188][ T56] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 283.404971][ T56] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 283.405841][ T56] visor 2-1:1.0: device disconnected [ 283.440911][ T5988] usb 1-1: Using ep0 maxpacket: 16 [ 283.442501][ T5988] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.442516][ T5988] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 283.446292][ T5988] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 283.446309][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.446320][ T5988] usb 1-1: Product: syz [ 283.446328][ T5988] usb 1-1: Manufacturer: syz [ 283.446336][ T5988] usb 1-1: SerialNumber: syz [ 283.461609][ T5988] usb 1-1: config 0 descriptor?? [ 283.682636][ T7741] process 'syz.0.530' launched '/dev/fd/4' with NULL argv: empty string added [ 283.701439][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.705767][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.741053][ T5988] usb 1-1: USB disconnect, device number 14 [ 284.180996][ T56] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 284.331017][ T5988] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 284.341571][ T56] usb 4-1: Using ep0 maxpacket: 32 [ 284.346899][ T56] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.346953][ T56] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.346983][ T56] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 284.347058][ T56] usb 4-1: config 0 interface 0 has no altsetting 0 [ 284.347090][ T56] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 284.347114][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.574351][ T56] usb 4-1: config 0 descriptor?? [ 284.705745][ T5988] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 284.705763][ T5988] usb 3-1: config 0 has no interface number 0 [ 284.705794][ T5988] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 284.705808][ T5988] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.705830][ T5988] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 284.705877][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.709473][ T5988] usb 3-1: config 0 descriptor?? [ 286.532458][ T31] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 286.532710][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 286.664552][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.672747][ T31] usb 2-1: device descriptor read/64, error -32 [ 286.691095][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.895741][ T5988] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.000E/input/input12 [ 286.952404][ T31] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 287.081498][ T31] usb 2-1: device descriptor read/64, error -71 [ 287.214576][ T31] usb usb2-port1: attempt power cycle [ 287.242244][ T56] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 287.242271][ T56] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 287.242288][ T56] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 287.242304][ T56] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 287.242321][ T56] corsair-cpro 0003:1B1C:0C10.000F: unknown main item tag 0x0 [ 287.281544][ T56] corsair-cpro 0003:1B1C:0C10.000F: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 287.422784][ T56] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -38 [ 287.488485][ T56] usb 4-1: USB disconnect, device number 22 [ 287.561141][ T31] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 287.583871][ T31] usb 2-1: device descriptor read/8, error -71 [ 287.658925][ T7771] fido_id[7771]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 287.755304][ T5988] holtek_kbd 0003:04D9:A055.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 287.784165][ T5988] usb 3-1: USB disconnect, device number 20 [ 287.844789][ T31] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 287.972247][ T7776] fido_id[7776]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 288.021606][ T31] usb 2-1: device descriptor read/8, error -71 [ 288.131284][ T31] usb usb2-port1: unable to enumerate USB device [ 292.950909][ T5988] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 293.133141][ T5988] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.133168][ T5988] usb 3-1: config 0 has no interface number 0 [ 293.133294][ T5988] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 293.133315][ T5988] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 293.133342][ T5988] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 293.133355][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.140915][ T5988] usb 3-1: config 0 descriptor?? [ 293.747689][ T5988] input: HID 04d9:a055 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:04D9:A055.0010/input/input13 [ 294.140991][ T5988] holtek_kbd 0003:04D9:A055.0010: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.2-1/input1 [ 294.184073][ T5988] usb 3-1: USB disconnect, device number 21 [ 294.227286][ T5812] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 294.305137][ T7822] fido_id[7822]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 294.402644][ T7823] pim6reg: entered allmulticast mode [ 294.427710][ T7823] pim6reg: left allmulticast mode [ 295.951013][ T5988] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 296.671405][ T5988] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 296.671456][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.671483][ T5988] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.671506][ T5988] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 296.673019][ T5988] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 296.673048][ T5988] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 296.673069][ T5988] usb 3-1: Manufacturer: syz [ 296.782811][ T5988] usb 3-1: config 0 descriptor?? [ 297.238699][ T5988] appleir 0003:05AC:8243.0011: unknown main item tag 0x0 [ 297.299590][ T5988] appleir 0003:05AC:8243.0011: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 297.487680][ T7829] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 297.488185][ T7829] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 297.608878][ T7865] pim6reg: entered allmulticast mode [ 297.617210][ T7865] pim6reg: left allmulticast mode [ 298.982335][ T5812] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 301.607135][ T5988] usb 3-1: reset high-speed USB device number 22 using dummy_hcd [ 301.630923][ T5988] usb 3-1: device reset changed ep0 maxpacket size! [ 301.679906][ T9] usb 3-1: USB disconnect, device number 22 [ 301.741007][ T5987] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 301.870977][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 301.923743][ T5987] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 301.923773][ T5987] usb 1-1: config 0 has no interface number 0 [ 301.923820][ T5987] usb 1-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 301.928514][ T5987] usb 1-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 301.928544][ T5987] usb 1-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 301.928565][ T5987] usb 1-1: Product: syz [ 301.928579][ T5987] usb 1-1: Manufacturer: syz [ 301.928594][ T5987] usb 1-1: SerialNumber: syz [ 301.947963][ T5987] usb 1-1: config 0 descriptor?? [ 301.964998][ T5987] keyspan 1-1:0.107: Keyspan 4 port adapter converter detected [ 301.981172][ T5987] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 81 [ 301.981255][ T5987] keyspan 1-1:0.107: unsupported endpoint type 0 [ 301.983353][ T5987] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 1 [ 301.999686][ T5987] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 302.015662][ T5987] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 2 [ 302.043876][ T5987] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 302.045355][ T5987] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 4 [ 302.051420][ T5987] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 302.053793][ T5987] keyspan 1-1:0.107: found no endpoint descriptor for endpoint 6 [ 302.067212][ T5987] usb 1-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 302.091938][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 302.094001][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 302.094025][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 302.094060][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 302.094091][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.099620][ T9] usb 3-1: config 0 descriptor?? [ 302.288501][ T7890] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 302.288990][ T7890] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.451584][ T31] usb 3-1: USB disconnect, device number 23 [ 303.586840][ T5987] usb 1-1: USB disconnect, device number 15 [ 303.634815][ T5987] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 303.673265][ T7911] syz.4.583 (7911) used greatest stack depth: 16936 bytes left [ 303.701356][ T5987] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 303.731999][ T5987] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 303.751636][ T5987] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 303.752645][ T5987] keyspan 1-1:0.107: device disconnected [ 303.837702][ T7916] pim6reg: entered allmulticast mode [ 303.851603][ T7916] pim6reg: left allmulticast mode [ 305.111017][ T5987] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 305.264794][ T5987] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 305.264827][ T5987] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.292767][ T5987] usb 1-1: config 0 descriptor?? [ 305.296803][ T5987] cp210x 1-1:0.0: cp210x converter detected [ 305.481009][ T5988] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 305.513602][ T5987] usb 1-1: cp210x converter now attached to ttyUSB0 [ 305.620956][ T1822] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 305.660931][ T5988] usb 3-1: Using ep0 maxpacket: 32 [ 305.663002][ T5988] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.663061][ T5988] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.663089][ T5988] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 305.663109][ T5988] usb 3-1: config 0 interface 0 has no altsetting 0 [ 305.663129][ T5988] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 305.663142][ T5988] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.671736][ T5988] usb 3-1: config 0 descriptor?? [ 305.741067][ T7925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.741546][ T7925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.751313][ T9] usb 1-1: USB disconnect, device number 16 [ 305.786630][ T1822] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 305.786658][ T1822] usb 2-1: config 0 has no interface number 0 [ 305.786706][ T1822] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.786733][ T1822] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.786781][ T1822] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 305.786805][ T1822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.793910][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 305.794632][ T9] cp210x 1-1:0.0: device disconnected [ 305.838274][ T1822] usb 2-1: config 0 descriptor?? [ 306.107611][ T7938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.109620][ T7938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.256740][ T5988] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 306.256781][ T5988] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 306.256809][ T5988] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 306.256837][ T5988] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 306.256865][ T5988] corsair-cpro 0003:1B1C:0C10.0012: unknown main item tag 0x0 [ 306.304255][ T5988] corsair-cpro 0003:1B1C:0C10.0012: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.2-1/input0 [ 306.385654][ T5988] corsair-cpro 0003:1B1C:0C10.0012: probe with driver corsair-cpro failed with error -38 [ 306.436918][ T1822] input: HID 04d9:a055 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04D9:A055.0013/input/input14 [ 307.121232][ T1822] holtek_kbd 0003:04D9:A055.0013: input,hidraw0: USB HID v0.00 Keyboard [HID 04d9:a055] on usb-dummy_hcd.1-1/input1 [ 307.158264][ T1822] usb 2-1: USB disconnect, device number 20 [ 307.862849][ T7950] fido_id[7950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 308.040956][ T31] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 308.216130][ T31] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 308.216164][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.363146][ T31] usb 1-1: config 0 descriptor?? [ 308.755416][ T31] cp210x 1-1:0.0: cp210x converter detected [ 308.971647][ T31] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 308.971676][ T31] cp210x 1-1:0.0: querying part number failed [ 309.961326][ T31] usb 1-1: cp210x converter now attached to ttyUSB0 [ 311.207680][ T7958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.224496][ T1822] usb 1-1: USB disconnect, device number 17 [ 311.235918][ T1822] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 311.236665][ T1822] cp210x 1-1:0.0: device disconnected [ 311.866890][ T7958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.095292][ T5988] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 312.155434][ T7958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.242834][ T5988] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.242875][ T5988] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.247393][ T5988] usb 4-1: config 0 descriptor?? [ 312.266185][ T5988] cp210x 4-1:0.0: cp210x converter detected [ 312.539193][ T5988] usb 4-1: cp210x converter now attached to ttyUSB0 [ 312.584112][ T7991] capability: warning: `syz.0.607' uses deprecated v2 capabilities in a way that may be insecure [ 312.636918][ T7958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.731780][ T7995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 312.732253][ T7995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 312.744959][ T5988] usb 4-1: USB disconnect, device number 23 [ 312.759482][ T5988] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 312.761700][ T5988] cp210x 4-1:0.0: device disconnected [ 312.991011][ T31] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 313.074801][ T68] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.096680][ T68] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.119287][ T68] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.140318][ T68] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.142658][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 313.152191][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.152245][ T31] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.152274][ T31] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 313.152300][ T31] usb 2-1: config 0 interface 0 has no altsetting 0 [ 313.152333][ T31] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 313.152356][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.157385][ T31] usb 2-1: config 0 descriptor?? [ 313.273177][ T5988] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 313.289238][ T5863] usb 3-1: USB disconnect, device number 24 [ 313.420896][ T5988] usb 1-1: Using ep0 maxpacket: 8 [ 313.424325][ T5988] usb 1-1: config 0 has an invalid interface number: 239 but max is 0 [ 313.424352][ T5988] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 313.424372][ T5988] usb 1-1: config 0 has no interface number 0 [ 313.424465][ T5988] usb 1-1: config 0 interface 239 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 313.424492][ T5988] usb 1-1: config 0 interface 239 altsetting 0 endpoint 0x4 has invalid maxpacket 65535, setting to 64 [ 313.424518][ T5988] usb 1-1: config 0 interface 239 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 313.429424][ T5988] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 313.429454][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.429845][ T5988] usb 1-1: Product: syz [ 313.429861][ T5988] usb 1-1: Manufacturer: syz [ 313.429876][ T5988] usb 1-1: SerialNumber: syz [ 313.475914][ T5988] usb 1-1: config 0 descriptor?? [ 313.590215][ T7993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 313.596239][ T7993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 313.740611][ T31] corsair-cpro 0003:1B1C:0C10.0014: unknown main item tag 0x0 [ 313.740652][ T31] corsair-cpro 0003:1B1C:0C10.0014: unknown main item tag 0x0 [ 313.740681][ T31] corsair-cpro 0003:1B1C:0C10.0014: unknown main item tag 0x0 [ 313.741077][ T31] corsair-cpro 0003:1B1C:0C10.0014: unknown main item tag 0x0 [ 313.741105][ T31] corsair-cpro 0003:1B1C:0C10.0014: unknown main item tag 0x0 [ 313.755683][ T31] corsair-cpro 0003:1B1C:0C10.0014: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 313.839125][ T31] corsair-cpro 0003:1B1C:0C10.0014: probe with driver corsair-cpro failed with error -38 [ 313.950966][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 313.976834][ T5988] ath6kl: Failed to submit usb control message: -71 [ 313.976886][ T5988] ath6kl: unable to send the bmi data to the device: -71 [ 313.976902][ T5988] ath6kl: Unable to send get target info: -71 [ 313.983902][ T5988] ath6kl: Failed to init ath6kl core: -71 [ 313.985263][ T5988] ath6kl_usb 1-1:0.239: probe with driver ath6kl_usb failed with error -71 [ 314.033921][ T5988] usb 1-1: USB disconnect, device number 18 [ 314.107863][ T9] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 314.107895][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.141450][ T9] usb 4-1: config 0 descriptor?? [ 314.184166][ T9] cp210x 4-1:0.0: cp210x converter detected [ 314.377590][ T9] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 314.377620][ T9] cp210x 4-1:0.0: querying part number failed [ 314.405184][ T9] usb 4-1: cp210x converter now attached to ttyUSB0 [ 316.487700][ T8036] pim6reg: entered allmulticast mode [ 316.511458][ T8036] pim6reg: left allmulticast mode [ 316.637498][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.638089][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.660647][ T8041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.670352][ T8041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.733871][ T5988] usb 4-1: USB disconnect, device number 24 [ 316.757961][ T5988] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 316.758688][ T5988] cp210x 4-1:0.0: device disconnected [ 317.168330][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.168411][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.190919][ T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 318.540965][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 318.543625][ T31] usb 3-1: config 0 descriptor has 1 excess byte, ignoring [ 318.543650][ T31] usb 3-1: config 0 has no interfaces? [ 318.543680][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 318.543703][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.589888][ T31] usb 3-1: config 0 descriptor?? [ 320.243294][ T5863] usb 3-1: USB disconnect, device number 25 [ 320.245253][ T8066] FAULT_INJECTION: forcing a failure. [ 320.245253][ T8066] name failslab, interval 1, probability 0, space 0, times 0 [ 320.245277][ T8066] CPU: 1 UID: 60928 PID: 8066 Comm: syz.4.623 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 320.245294][ T8066] Tainted: [L]=SOFTLOCKUP [ 320.245298][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 320.245305][ T8066] Call Trace: [ 320.245310][ T8066] [ 320.245315][ T8066] dump_stack_lvl+0xe8/0x150 [ 320.245334][ T8066] should_fail_ex+0x46b/0x600 [ 320.245350][ T8066] ? getname_flags+0xb7/0x540 [ 320.245361][ T8066] should_failslab+0xa8/0x100 [ 320.245372][ T8066] ? getname_flags+0xb7/0x540 [ 320.245382][ T8066] kmem_cache_alloc_noprof+0x83/0x6a0 [ 320.245395][ T8066] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 320.245411][ T8066] ? lockdep_hardirqs_on+0x7a/0x110 [ 320.245430][ T8066] getname_flags+0xb7/0x540 [ 320.245443][ T8066] do_sys_openat2+0xca/0x220 [ 320.245456][ T8066] ? __pfx_do_sys_openat2+0x10/0x10 [ 320.245469][ T8066] ? ksys_write+0x248/0x270 [ 320.245483][ T8066] ? __pfx_ksys_write+0x10/0x10 [ 320.245499][ T8066] __x64_sys_openat+0x138/0x170 [ 320.245514][ T8066] do_syscall_64+0xe2/0xf80 [ 320.245528][ T8066] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.245540][ T8066] ? trace_irq_disable+0x37/0x100 [ 320.245552][ T8066] ? clear_bhb_loop+0x60/0xb0 [ 320.245564][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.245575][ T8066] RIP: 0033:0x7f0d6768acb9 [ 320.245586][ T8066] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.245595][ T8066] RSP: 002b:00007f0d658e6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.245608][ T8066] RAX: ffffffffffffffda RBX: 00007f0d67905fa0 RCX: 00007f0d6768acb9 [ 320.245616][ T8066] RDX: 0000000000000002 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 320.245624][ T8066] RBP: 00007f0d658e6090 R08: 0000000000000000 R09: 0000000000000000 [ 320.245631][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.245638][ T8066] R13: 00007f0d67906038 R14: 00007f0d67905fa0 R15: 00007ffcb4dc22a8 [ 320.245661][ T8066] [ 320.768294][ T8074] pim6reg: entered allmulticast mode [ 320.778450][ T8074] pim6reg: left allmulticast mode [ 322.601119][ T5863] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 322.634774][ T8091] erofs (device nbd0): cannot find valid erofs superblock [ 322.761048][ T5863] usb 3-1: Using ep0 maxpacket: 32 [ 322.762742][ T5863] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.762776][ T5863] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 322.762800][ T5863] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 322.762813][ T5863] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.775810][ T5863] usb 3-1: config 0 descriptor?? [ 322.842360][ T5863] hub 3-1:0.0: bad descriptor, ignoring hub [ 322.842401][ T5863] hub 3-1:0.0: probe with driver hub failed with error -5 [ 322.866882][ T5863] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 323.301011][ T5863] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 323.486953][ T5863] usb 1-1: Using ep0 maxpacket: 32 [ 323.489920][ T5863] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.489976][ T5863] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 323.490006][ T5863] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.490033][ T5863] usb 1-1: config 0 interface 0 has no altsetting 0 [ 323.490065][ T5863] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 323.490088][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.564569][ T5863] usb 1-1: config 0 descriptor?? [ 324.425946][ T8094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.426544][ T8094] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.563995][ T5807] usb 2-1: USB disconnect, device number 21 [ 324.582155][ T56] usb 3-1: USB disconnect, device number 26 [ 324.895392][ T5863] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 324.895418][ T5863] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 324.895436][ T5863] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 324.895452][ T5863] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 324.895469][ T5863] corsair-cpro 0003:1B1C:0C10.0015: unknown main item tag 0x0 [ 324.935671][ T5863] corsair-cpro 0003:1B1C:0C10.0015: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 325.018248][ T5863] corsair-cpro 0003:1B1C:0C10.0015: probe with driver corsair-cpro failed with error -38 [ 325.171009][ T56] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 325.361303][ T56] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 325.361333][ T56] usb 3-1: config 0 has no interface number 0 [ 325.361432][ T56] usb 3-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 325.364282][ T56] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 325.364301][ T56] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 325.364312][ T56] usb 3-1: Product: syz [ 325.364320][ T56] usb 3-1: Manufacturer: syz [ 325.364328][ T56] usb 3-1: SerialNumber: syz [ 325.367636][ T56] usb 3-1: config 0 descriptor?? [ 325.370225][ T56] keyspan 3-1:0.107: Keyspan 4 port adapter converter detected [ 325.370438][ T56] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 81 [ 325.370499][ T56] keyspan 3-1:0.107: unsupported endpoint type 0 [ 325.374016][ T56] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 1 [ 325.430505][ T56] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 325.441478][ T56] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 2 [ 325.444575][ T56] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 325.446879][ T56] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 4 [ 325.514292][ T56] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 325.516289][ T56] keyspan 3-1:0.107: found no endpoint descriptor for endpoint 6 [ 325.526590][ T56] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 325.663445][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 325.696893][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.343114][ T8125] pim6reg: entered allmulticast mode [ 326.345766][ T8124] pim6reg: left allmulticast mode [ 329.131278][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.3.652'. [ 329.196776][ T37] audit: type=1326 audit(1769333863.819:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 329.197022][ T37] audit: type=1326 audit(1769333863.819:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=125 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 329.197912][ T37] audit: type=1326 audit(1769333863.819:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 329.198089][ T37] audit: type=1326 audit(1769333863.819:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 329.198367][ T37] audit: type=1326 audit(1769333863.819:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 329.198600][ T37] audit: type=1326 audit(1769333863.819:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8130 comm="syz.3.652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 329.374485][ T5807] usb 3-1: USB disconnect, device number 27 [ 329.436919][ T5807] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 329.463766][ T5807] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 329.469671][ T5807] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 329.499995][ T5807] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 329.500631][ T5807] keyspan 3-1:0.107: device disconnected [ 329.941895][ T5807] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 330.096940][ T5807] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 330.096961][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.099837][ T5807] usb 3-1: config 0 descriptor?? [ 330.148553][ T5807] cp210x 3-1:0.0: cp210x converter detected [ 330.353700][ T5807] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 330.353729][ T5807] cp210x 3-1:0.0: querying part number failed [ 330.383137][ T5807] usb 3-1: cp210x converter now attached to ttyUSB0 [ 330.460921][ T5863] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 330.620933][ T5863] usb 2-1: Using ep0 maxpacket: 32 [ 330.622865][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.622923][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 330.622964][ T5863] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 330.622977][ T5863] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.648790][ T5863] usb 2-1: config 0 descriptor?? [ 330.671263][ T56] usb 1-1: USB disconnect, device number 19 [ 330.689308][ T5863] hub 2-1:0.0: bad descriptor, ignoring hub [ 330.689355][ T5863] hub 2-1:0.0: probe with driver hub failed with error -5 [ 330.726614][ T8131] netem: change failed [ 330.746123][ T5863] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 332.767249][ T8151] FAULT_INJECTION: forcing a failure. [ 332.767249][ T8151] name failslab, interval 1, probability 0, space 0, times 0 [ 332.767319][ T8151] CPU: 1 UID: 0 PID: 8151 Comm: syz.3.659 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 332.767347][ T8151] Tainted: [L]=SOFTLOCKUP [ 332.767354][ T8151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 332.767367][ T8151] Call Trace: [ 332.767375][ T8151] [ 332.767384][ T8151] dump_stack_lvl+0xe8/0x150 [ 332.767416][ T8151] should_fail_ex+0x46b/0x600 [ 332.767446][ T8151] should_failslab+0xa8/0x100 [ 332.767467][ T8151] __kmalloc_noprof+0xdf/0x7c0 [ 332.767493][ T8151] ? rcu_is_watching+0x15/0xb0 [ 332.767512][ T8151] ? security_sk_alloc+0x52/0x360 [ 332.767537][ T8151] ? sk_prot_alloc+0x57/0x210 [ 332.767560][ T8151] security_sk_alloc+0x52/0x360 [ 332.767588][ T8151] sk_prot_alloc+0x101/0x210 [ 332.767611][ T8151] sk_alloc+0x3a/0x390 [ 332.767634][ T8151] inet_create+0x7a0/0x1010 [ 332.767656][ T8151] ? inet_create+0x9c/0x1010 [ 332.767681][ T8151] __sock_create+0x4b2/0x9d0 [ 332.767715][ T8151] mptcp_subflow_create_socket+0xfb/0x800 [ 332.767751][ T8151] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 332.767789][ T8151] __mptcp_nmpc_sk+0x14e/0x790 [ 332.767820][ T8151] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 332.767858][ T8151] mptcp_connect+0x71/0x830 [ 332.767886][ T8151] __inet_stream_connect+0x25a/0xdd0 [ 332.767905][ T8151] ? lockdep_hardirqs_on+0x7a/0x110 [ 332.767931][ T8151] ? irqentry_exit+0x59c/0x620 [ 332.767972][ T8151] ? __pfx___inet_stream_connect+0x10/0x10 [ 332.768002][ T8151] ? __local_bh_enable_ip+0x1c2/0x2b0 [ 332.768030][ T8151] inet_stream_connect+0x66/0xa0 [ 332.768059][ T8151] __sys_connect+0x315/0x450 [ 332.768089][ T8151] ? __pfx___sys_connect+0x10/0x10 [ 332.768113][ T8151] ? lockdep_hardirqs_on+0x7a/0x110 [ 332.768161][ T8151] __x64_sys_connect+0x7a/0x90 [ 332.768189][ T8151] do_syscall_64+0xe2/0xf80 [ 332.768213][ T8151] ? rcu_is_watching+0x15/0xb0 [ 332.768230][ T8151] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.768251][ T8151] ? clear_bhb_loop+0x60/0xb0 [ 332.768275][ T8151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.768295][ T8151] RIP: 0033:0x7f79f43bacb9 [ 332.768313][ T8151] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.768330][ T8151] RSP: 002b:00007f79f25d4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 332.768351][ T8151] RAX: ffffffffffffffda RBX: 00007f79f4636180 RCX: 00007f79f43bacb9 [ 332.768366][ T8151] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 0000000000000007 [ 332.768379][ T8151] RBP: 00007f79f25d4090 R08: 0000000000000000 R09: 0000000000000000 [ 332.768392][ T8151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.768405][ T8151] R13: 00007f79f4636218 R14: 00007f79f4636180 R15: 00007ffd8b7f1408 [ 332.768437][ T8151] [ 333.662124][ T5987] usb 2-1: USB disconnect, device number 22 [ 333.713952][ T5987] usb 3-1: USB disconnect, device number 28 [ 333.732835][ T31] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 333.753473][ T5987] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 333.754219][ T5987] cp210x 3-1:0.0: device disconnected [ 333.890953][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 333.894440][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 333.894497][ T31] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.894526][ T31] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 333.894554][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.894586][ T31] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 333.894610][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.009304][ T31] usb 1-1: config 0 descriptor?? [ 334.680675][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.770757][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 335.020675][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.664'. [ 335.020693][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.4.664'. [ 335.165735][ T31] corsair-cpro 0003:1B1C:0C10.0016: unknown main item tag 0x0 [ 335.165763][ T31] corsair-cpro 0003:1B1C:0C10.0016: unknown main item tag 0x0 [ 335.165780][ T31] corsair-cpro 0003:1B1C:0C10.0016: unknown main item tag 0x0 [ 335.165796][ T31] corsair-cpro 0003:1B1C:0C10.0016: unknown main item tag 0x0 [ 335.165813][ T31] corsair-cpro 0003:1B1C:0C10.0016: unknown main item tag 0x0 [ 335.234823][ T31] corsair-cpro 0003:1B1C:0C10.0016: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 335.293574][ T31] corsair-cpro 0003:1B1C:0C10.0016: probe with driver corsair-cpro failed with error -38 [ 336.617918][ T9] hid-generic 0000:0000:0000.0017: unknown main item tag 0x0 [ 336.677164][ T5812] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 336.714262][ T9] hid-generic 0000:0000:0000.0017: hidraw0: HID v0.00 Device [syz1] on syz0 [ 336.768169][ T8195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.672'. [ 336.953483][ T8197] fido_id[8197]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 337.511019][ T56] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 337.684820][ T56] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 337.684853][ T56] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.689839][ T56] usb 4-1: config 0 descriptor?? [ 337.694714][ T56] cp210x 4-1:0.0: cp210x converter detected [ 337.898539][ T56] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 337.898568][ T56] cp210x 4-1:0.0: querying part number failed [ 337.903142][ T56] usb 4-1: cp210x converter now attached to ttyUSB0 [ 341.671065][ T5812] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 341.671862][ T5812] Bluetooth: hci2: Injecting HCI hardware error event [ 341.675129][ T5812] Bluetooth: hci2: hardware error 0x00 [ 341.750905][ T809] usb 4-1: USB disconnect, device number 25 [ 341.764090][ T809] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 341.764776][ T809] cp210x 4-1:0.0: device disconnected [ 341.770951][ T56] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 341.994108][ T56] usb 3-1: Using ep0 maxpacket: 32 [ 342.093786][ T56] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.093843][ T56] usb 3-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.093860][ T56] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 342.093875][ T56] usb 3-1: config 0 interface 0 has no altsetting 0 [ 342.093894][ T56] usb 3-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 342.093907][ T56] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.118386][ T56] usb 3-1: config 0 descriptor?? [ 342.330946][ T809] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 342.354502][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.355480][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.359561][ T8229] FAULT_INJECTION: forcing a failure. [ 342.359561][ T8229] name failslab, interval 1, probability 0, space 0, times 0 [ 342.359594][ T8229] CPU: 0 UID: 0 PID: 8229 Comm: syz.1.684 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 342.359622][ T8229] Tainted: [L]=SOFTLOCKUP [ 342.359629][ T8229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 342.359641][ T8229] Call Trace: [ 342.359648][ T8229] [ 342.359656][ T8229] dump_stack_lvl+0xe8/0x150 [ 342.359686][ T8229] should_fail_ex+0x46b/0x600 [ 342.359714][ T8229] ? __alloc_skb+0x1d7/0x390 [ 342.359741][ T8229] should_failslab+0xa8/0x100 [ 342.359761][ T8229] ? __alloc_skb+0x1d7/0x390 [ 342.359786][ T8229] kmem_cache_alloc_node_noprof+0x8a/0x6d0 [ 342.359813][ T8229] ? lockdep_hardirqs_on+0x7a/0x110 [ 342.359841][ T8229] ? __alloc_skb+0x193/0x390 [ 342.359865][ T8229] __alloc_skb+0x1d7/0x390 [ 342.359893][ T8229] netlink_sendmsg+0x5d4/0xb40 [ 342.359923][ T8229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.359947][ T8229] ? is_bpf_text_address+0x292/0x2b0 [ 342.359973][ T8229] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 342.359995][ T8229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.360016][ T8229] __sock_sendmsg+0x21c/0x270 [ 342.360064][ T8229] ____sys_sendmsg+0x4e1/0x800 [ 342.360092][ T8229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.360121][ T8229] ? import_iovec+0x73/0xa0 [ 342.360149][ T8229] ___sys_sendmsg+0x2a5/0x360 [ 342.360167][ T8229] ? __lock_acquire+0x6b5/0x2cf0 [ 342.360194][ T8229] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.360263][ T8229] ? __fget_files+0x2a/0x420 [ 342.360283][ T8229] ? __fget_files+0x3a6/0x420 [ 342.360310][ T8229] __x64_sys_sendmsg+0x1c3/0x2a0 [ 342.360334][ T8229] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.360362][ T8229] ? __pfx_ksys_write+0x10/0x10 [ 342.360405][ T8229] do_syscall_64+0xe2/0xf80 [ 342.360431][ T8229] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.360450][ T8229] ? trace_irq_disable+0x37/0x100 [ 342.360470][ T8229] ? clear_bhb_loop+0x60/0xb0 [ 342.360494][ T8229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.360513][ T8229] RIP: 0033:0x7fed1d3eacb9 [ 342.360530][ T8229] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.360547][ T8229] RSP: 002b:00007fed1b646028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.360568][ T8229] RAX: ffffffffffffffda RBX: 00007fed1d665fa0 RCX: 00007fed1d3eacb9 [ 342.360583][ T8229] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 0000000000000004 [ 342.360596][ T8229] RBP: 00007fed1b646090 R08: 0000000000000000 R09: 0000000000000000 [ 342.360608][ T8229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.360620][ T8229] R13: 00007fed1d666038 R14: 00007fed1d665fa0 R15: 00007fff98092688 [ 342.360650][ T8229] [ 342.694524][ T809] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 342.694556][ T809] usb 4-1: config 0 has no interface number 0 [ 342.697787][ T809] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 342.698314][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.698330][ T809] usb 4-1: Product: syz [ 342.698339][ T809] usb 4-1: Manufacturer: syz [ 342.698347][ T809] usb 4-1: SerialNumber: syz [ 342.794347][ T809] usb 4-1: config 0 descriptor?? [ 343.057514][ T809] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 343.125568][ T8236] syz.1.687 uses obsolete (PF_INET,SOCK_PACKET) [ 343.370710][ T809] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 343.373940][ T809] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 343.374273][ T809] usb 4-1: media controller created [ 343.888032][ T809] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.031040][ T5812] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 344.055916][ T8248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.056398][ T8248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 345.851659][ T6004] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 345.852052][ C1] raw-gadget.3 gadget.1: ignoring, device is not running [ 345.981850][ T6004] usb 2-1: device descriptor read/64, error -32 [ 346.138988][ T809] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 346.221024][ T6004] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 346.254580][ T56] usbhid 3-1:0.0: can't add hid device: -71 [ 346.254662][ T56] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 346.316284][ T56] usb 3-1: USB disconnect, device number 29 [ 346.441019][ T6004] usb 2-1: Using ep0 maxpacket: 8 [ 346.443078][ T6004] usb 2-1: config 0 has an invalid interface number: 93 but max is 0 [ 346.443095][ T6004] usb 2-1: config 0 has no interface number 0 [ 346.443124][ T6004] usb 2-1: config 0 interface 93 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 346.443145][ T6004] usb 2-1: New USB device found, idVendor=2040, idProduct=4902, bcdDevice=17.d8 [ 346.443158][ T6004] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.502960][ T6004] usb 2-1: config 0 descriptor?? [ 346.566057][ T5812] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 346.686109][ T809] usb 4-1: USB disconnect, device number 26 [ 346.758786][ T6004] usb 2-1: string descriptor 0 read error: -71 [ 346.802304][ T6004] hdpvr 2-1:0.93: Could not find bulk-in endpoint [ 346.802396][ T6004] hdpvr 2-1:0.93: probe with driver hdpvr failed with error -12 [ 346.858792][ T6004] usb 2-1: USB disconnect, device number 24 [ 347.262077][ T6004] usb 1-1: USB disconnect, device number 20 [ 347.550966][ T5807] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 347.711966][ T5807] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 347.741516][ T5807] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 347.741549][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.741570][ T5807] usb 2-1: Product: syz [ 347.741585][ T5807] usb 2-1: Manufacturer: syz [ 347.741600][ T5807] usb 2-1: SerialNumber: syz [ 347.890472][ T5807] usb 2-1: config 0 descriptor?? [ 347.914661][ T5807] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 348.903396][ T8268] digitv: more than 2 i2c messages at a time is not handled yet. TODO. [ 348.922072][ T5807] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 348.940631][ T5807] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 348.940700][ T5807] usb 2-1: media controller created [ 348.956928][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 349.101181][ T5807] DVB: Unable to find symbol mt352_attach() [ 349.386789][ T5807] DVB: Unable to find symbol nxt6000_attach() [ 349.386800][ T5807] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 349.389739][ T5807] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input15 [ 349.396604][ T5807] dvb-usb: schedule remote query interval to 1000 msecs. [ 349.396628][ T5807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 349.396992][ T5807] dvb-usb: bulk message failed: -22 (7/0) [ 349.397010][ T5807] dvb-usb: bulk message failed: -22 (7/0) [ 349.405558][ T5807] usb 2-1: USB disconnect, device number 25 [ 351.533125][ T5807] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 352.021095][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 352.212627][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 352.214841][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.214877][ T9] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.214894][ T9] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 352.214908][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 352.214927][ T9] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 352.214940][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.217956][ T9] usb 1-1: config 0 descriptor?? [ 352.430683][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.433838][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.850992][ T5812] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 354.228306][ T8325] FAULT_INJECTION: forcing a failure. [ 354.228306][ T8325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.228344][ T8325] CPU: 1 UID: 0 PID: 8325 Comm: syz.2.708 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 354.228372][ T8325] Tainted: [L]=SOFTLOCKUP [ 354.228379][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 354.228391][ T8325] Call Trace: [ 354.228398][ T8325] [ 354.228407][ T8325] dump_stack_lvl+0xe8/0x150 [ 354.228440][ T8325] should_fail_ex+0x46b/0x600 [ 354.228469][ T8325] _copy_to_user+0x31/0xb0 [ 354.228497][ T8325] simple_read_from_buffer+0xe1/0x170 [ 354.228522][ T8325] proc_fail_nth_read+0x1be/0x230 [ 354.228552][ T8325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.228581][ T8325] ? rw_verify_area+0x2ac/0x4e0 [ 354.228605][ T8325] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.228633][ T8325] vfs_read+0x212/0xa70 [ 354.228663][ T8325] ? __pfx_vfs_read+0x10/0x10 [ 354.228684][ T8325] ? lockdep_hardirqs_on+0x7a/0x110 [ 354.228714][ T8325] ? tipc_setsockopt+0x187/0x990 [ 354.228735][ T8325] ? kmem_cache_free+0x18d/0x8c0 [ 354.228759][ T8325] ? do_sys_openat2+0x168/0x220 [ 354.228784][ T8325] ? __pfx_tipc_setsockopt+0x10/0x10 [ 354.228811][ T8325] ksys_read+0x156/0x270 [ 354.228838][ T8325] ? __pfx_ksys_read+0x10/0x10 [ 354.228872][ T8325] do_syscall_64+0xe2/0xf80 [ 354.228898][ T8325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.228917][ T8325] ? trace_irq_disable+0x37/0x100 [ 354.228938][ T8325] ? clear_bhb_loop+0x60/0xb0 [ 354.228960][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.228987][ T8325] RIP: 0033:0x7f261c9db58e [ 354.229005][ T8325] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 354.229021][ T8325] RSP: 002b:00007f261ac75fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.229043][ T8325] RAX: ffffffffffffffda RBX: 00007f261ac766c0 RCX: 00007f261c9db58e [ 354.229058][ T8325] RDX: 000000000000000f RSI: 00007f261ac760a0 RDI: 0000000000000004 [ 354.229071][ T8325] RBP: 00007f261ac76090 R08: 0000000000000000 R09: 0000000000000000 [ 354.229083][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.229095][ T8325] R13: 00007f261cc96038 R14: 00007f261cc95fa0 R15: 00007ffe758fc6a8 [ 354.229126][ T8325] [ 355.760955][ T6004] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 355.957162][ T6004] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 355.957194][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.957215][ T6004] usb 3-1: Product: syz [ 355.957230][ T6004] usb 3-1: Manufacturer: syz [ 355.957245][ T6004] usb 3-1: SerialNumber: syz [ 356.003661][ T6004] usb 3-1: config 0 descriptor?? [ 356.121700][ T5976] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 356.225321][ T5812] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 356.281442][ T5976] usb 2-1: Using ep0 maxpacket: 8 [ 356.302041][ T5976] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.302156][ T5976] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 356.302182][ T5976] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.336336][ T5976] usb 2-1: config 0 descriptor?? [ 356.398763][ T5976] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 356.531731][ T6004] usb-storage 3-1:0.0: USB Mass Storage device detected [ 356.661187][ T6004] usb 3-1: USB disconnect, device number 30 [ 356.802335][ T8353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.803298][ T8353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.805273][ T5976] gspca_vc032x: reg_w err -71 [ 356.805412][ T5976] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 356.823824][ T5976] usb 2-1: USB disconnect, device number 26 [ 356.865841][ T8353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.866738][ T8353] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.914062][ T5812] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 356.920478][ T5812] Bluetooth: hci4: Injecting HCI hardware error event [ 356.927010][ T5809] Bluetooth: hci4: hardware error 0x00 [ 357.110938][ T6004] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 357.279438][ T6004] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 357.279489][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.279516][ T6004] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.279538][ T6004] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 357.280965][ T6004] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 357.280994][ T6004] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 357.281014][ T6004] usb 3-1: Manufacturer: syz [ 357.352136][ T6004] usb 3-1: config 0 descriptor?? [ 357.516339][ T5812] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 357.715532][ T9] usbhid 1-1:0.0: can't add hid device: -32 [ 357.715665][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 357.797816][ T6004] appleir 0003:05AC:8243.0018: unknown main item tag 0x0 [ 357.827618][ T6004] appleir 0003:05AC:8243.0018: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 358.000342][ T8351] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 358.016802][ T8351] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.100532][ T5809] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 359.620899][ T9] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 359.771003][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 359.773226][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 359.773273][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 359.773297][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.780618][ T9] usb 4-1: config 0 descriptor?? [ 359.781021][ T5976] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 359.829288][ T9] hub 4-1:0.0: bad descriptor, ignoring hub [ 359.829328][ T9] hub 4-1:0.0: probe with driver hub failed with error -5 [ 359.834337][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 359.873601][ T5809] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 359.930910][ T5976] usb 2-1: Using ep0 maxpacket: 8 [ 359.933504][ T5976] usb 2-1: config 1 has an invalid descriptor of length 47, skipping remainder of the config [ 359.933560][ T5976] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12032, setting to 1024 [ 359.933589][ T5976] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 359.933612][ T5976] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 359.936549][ T5976] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 359.936578][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.936598][ T5976] usb 2-1: Product: syz [ 359.936612][ T5976] usb 2-1: Manufacturer: syz [ 359.936627][ T5976] usb 2-1: SerialNumber: syz [ 359.954694][ T8383] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 359.967594][ T5976] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 359.968994][ T5976] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 359.969074][ T5976] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 360.102521][ T6004] usb 3-1: USB disconnect, device number 31 [ 360.103422][ T8392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.732'. [ 361.554421][ T5809] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 361.614480][ T5809] Bluetooth: hci3: Injecting HCI hardware error event [ 361.634649][ T5812] Bluetooth: hci3: hardware error 0x00 [ 362.371698][ T8408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 362.372118][ T8408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 362.562915][ T1822] usb 4-1: USB disconnect, device number 27 [ 362.908678][ T809] usb 2-1: USB disconnect, device number 27 [ 363.068285][ T1822] usb 1-1: USB disconnect, device number 21 [ 363.406377][ T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 363.563742][ T31] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 363.563774][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.563788][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.563800][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 363.564708][ T31] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 363.564724][ T31] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 363.564735][ T31] usb 2-1: Manufacturer: syz [ 363.567688][ T31] usb 2-1: config 0 descriptor?? [ 364.615332][ T5812] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 364.922820][ T31] appleir 0003:05AC:8243.0019: unknown main item tag 0x0 [ 364.947165][ T31] appleir 0003:05AC:8243.0019: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 365.050964][ T8424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.051570][ T8424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.244208][ T8440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.748'. [ 367.013074][ T56] usb 2-1: USB disconnect, device number 28 [ 368.792290][ T5976] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 368.943083][ T5976] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 368.943104][ T5976] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 368.943115][ T5976] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 368.943126][ T5976] usb 2-1: config 220 has no interface number 2 [ 368.943167][ T5976] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 368.943182][ T5976] usb 2-1: config 220 interface 0 has no altsetting 0 [ 368.943192][ T5976] usb 2-1: config 220 interface 76 has no altsetting 0 [ 368.943201][ T5976] usb 2-1: config 220 interface 1 has no altsetting 0 [ 368.945206][ T5976] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 368.945224][ T5976] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.945236][ T5976] usb 2-1: Product: syz [ 368.945244][ T5976] usb 2-1: Manufacturer: syz [ 368.945252][ T5976] usb 2-1: SerialNumber: syz [ 369.171144][ T5976] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 369.171168][ T5976] uvcvideo 2-1:220.0: No valid video chain found. [ 369.171207][ T5976] usb 2-1: selecting invalid altsetting 0 [ 369.215842][ T5976] usb 2-1: selecting invalid altsetting 0 [ 369.215883][ T5976] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 369.241874][ T5976] usb 2-1: USB disconnect, device number 29 [ 370.052826][ T56] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 370.290924][ T56] usb 1-1: Using ep0 maxpacket: 32 [ 370.329902][ T8491] netlink: 'syz.1.763': attribute type 2 has an invalid length. [ 370.329923][ T8491] netlink: 'syz.1.763': attribute type 1 has an invalid length. [ 370.723795][ T37] audit: type=1326 audit(1769333905.259:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8474 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 370.723854][ T37] audit: type=1326 audit(1769333905.259:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8474 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 370.723889][ T37] audit: type=1326 audit(1769333905.259:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8474 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 370.723925][ T37] audit: type=1326 audit(1769333905.269:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8474 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 370.723964][ T37] audit: type=1326 audit(1769333905.269:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8474 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 370.724002][ T37] audit: type=1326 audit(1769333905.269:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8474 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 370.724038][ T37] audit: type=1326 audit(1769333905.269:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8474 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 370.724084][ T37] audit: type=1326 audit(1769333905.269:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8474 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 370.724123][ T37] audit: type=1326 audit(1769333905.279:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8474 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 370.724158][ T37] audit: type=1326 audit(1769333905.279:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8474 comm="syz.3.759" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f79f43bacb9 code=0x7ffc0000 [ 371.148976][ T56] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.149035][ T56] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.149066][ T56] usb 1-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 371.149094][ T56] usb 1-1: config 0 interface 0 has no altsetting 0 [ 371.149127][ T56] usb 1-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 371.149152][ T56] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.154297][ T56] usb 1-1: config 0 descriptor?? [ 371.712127][ T8485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.713394][ T8485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.870994][ T6004] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 372.022829][ T6004] usb 2-1: config 0 has an invalid interface number: 107 but max is 0 [ 372.022848][ T6004] usb 2-1: config 0 has no interface number 0 [ 372.022913][ T6004] usb 2-1: config 0 interface 107 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 372.025807][ T6004] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 372.025840][ T6004] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 372.025861][ T6004] usb 2-1: Product: syz [ 372.025876][ T6004] usb 2-1: Manufacturer: syz [ 372.025892][ T6004] usb 2-1: SerialNumber: syz [ 372.362902][ T6004] usb 2-1: config 0 descriptor?? [ 372.415368][ T6004] keyspan 2-1:0.107: Keyspan 4 port adapter converter detected [ 372.430592][ T6004] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 81 [ 372.432488][ T6004] keyspan 2-1:0.107: unsupported endpoint type 0 [ 372.487614][ T6004] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 1 [ 372.557094][ T6004] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 372.586920][ T6004] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 2 [ 372.609799][ T6004] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 372.636796][ T6004] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 4 [ 372.657769][ T6004] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 372.689667][ T6004] keyspan 2-1:0.107: found no endpoint descriptor for endpoint 6 [ 372.748020][ T6004] usb 2-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 372.797564][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.831613][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.100740][ T56] corsair-cpro 0003:1B1C:0C10.001A: unknown main item tag 0x0 [ 373.100780][ T56] corsair-cpro 0003:1B1C:0C10.001A: unknown main item tag 0x0 [ 373.109980][ T56] corsair-cpro 0003:1B1C:0C10.001A: unknown main item tag 0x0 [ 373.110016][ T56] corsair-cpro 0003:1B1C:0C10.001A: unknown main item tag 0x0 [ 373.110044][ T56] corsair-cpro 0003:1B1C:0C10.001A: unknown main item tag 0x0 [ 373.120227][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.765'. [ 373.211997][ T56] corsair-cpro 0003:1B1C:0C10.001A: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.0-1/input0 [ 373.449274][ T56] corsair-cpro 0003:1B1C:0C10.001A: probe with driver corsair-cpro failed with error -38 [ 373.586184][ T5976] usb 2-1: USB disconnect, device number 30 [ 373.621662][ T5976] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 373.624886][ T5976] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 373.673860][ T5976] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 373.684475][ T5976] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 373.685437][ T5976] keyspan 2-1:0.107: device disconnected [ 378.535199][ T56] usb 1-1: USB disconnect, device number 22 [ 378.610675][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.610745][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.033076][ T8545] FAULT_INJECTION: forcing a failure. [ 380.033076][ T8545] name failslab, interval 1, probability 0, space 0, times 0 [ 380.033137][ T8545] CPU: 0 UID: 0 PID: 8545 Comm: syz.1.778 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.033164][ T8545] Tainted: [L]=SOFTLOCKUP [ 380.033172][ T8545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 380.033187][ T8545] Call Trace: [ 380.033195][ T8545] [ 380.033207][ T8545] dump_stack_lvl+0xe8/0x150 [ 380.033237][ T8545] should_fail_ex+0x46b/0x600 [ 380.033265][ T8545] ? skb_clone+0x212/0x3a0 [ 380.033286][ T8545] should_failslab+0xa8/0x100 [ 380.033307][ T8545] ? skb_clone+0x212/0x3a0 [ 380.033325][ T8545] kmem_cache_alloc_noprof+0x83/0x6a0 [ 380.033350][ T8545] ? __netlink_lookup+0xc6/0x8b0 [ 380.033379][ T8545] skb_clone+0x212/0x3a0 [ 380.033403][ T8545] __netlink_deliver_tap+0x404/0x850 [ 380.033434][ T8545] ? netlink_deliver_tap+0x2e/0x1b0 [ 380.033454][ T8545] netlink_deliver_tap+0x19c/0x1b0 [ 380.033473][ T8545] netlink_unicast+0x805/0x9f0 [ 380.033497][ T8545] ? __pfx_netlink_unicast+0x10/0x10 [ 380.033513][ T8545] ? __alloc_skb+0x193/0x390 [ 380.033540][ T8545] ? netlink_sendmsg+0x650/0xb40 [ 380.033559][ T8545] ? skb_put+0x11b/0x210 [ 380.033581][ T8545] netlink_sendmsg+0x813/0xb40 [ 380.033611][ T8545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.033635][ T8545] ? is_bpf_text_address+0x292/0x2b0 [ 380.033662][ T8545] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 380.033686][ T8545] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.033729][ T8545] __sock_sendmsg+0x21c/0x270 [ 380.033757][ T8545] ____sys_sendmsg+0x4e1/0x800 [ 380.033787][ T8545] ? __pfx_____sys_sendmsg+0x10/0x10 [ 380.033818][ T8545] ? import_iovec+0x73/0xa0 [ 380.033847][ T8545] ___sys_sendmsg+0x2a5/0x360 [ 380.033866][ T8545] ? __lock_acquire+0x6b5/0x2cf0 [ 380.033896][ T8545] ? __pfx____sys_sendmsg+0x10/0x10 [ 380.033952][ T8545] ? __fget_files+0x2a/0x420 [ 380.033972][ T8545] ? __fget_files+0x3a6/0x420 [ 380.034002][ T8545] __x64_sys_sendmsg+0x1c3/0x2a0 [ 380.034025][ T8545] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 380.034055][ T8545] ? __pfx_ksys_write+0x10/0x10 [ 380.034091][ T8545] do_syscall_64+0xe2/0xf80 [ 380.034115][ T8545] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.034134][ T8545] ? trace_irq_disable+0x37/0x100 [ 380.034153][ T8545] ? clear_bhb_loop+0x60/0xb0 [ 380.034176][ T8545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.034195][ T8545] RIP: 0033:0x7fed1d3eacb9 [ 380.034218][ T8545] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.034237][ T8545] RSP: 002b:00007fed1b646028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 380.034257][ T8545] RAX: ffffffffffffffda RBX: 00007fed1d665fa0 RCX: 00007fed1d3eacb9 [ 380.034272][ T8545] RDX: 0000000000008840 RSI: 0000200000000080 RDI: 0000000000000003 [ 380.034285][ T8545] RBP: 00007fed1b646090 R08: 0000000000000000 R09: 0000000000000000 [ 380.034297][ T8545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.034308][ T8545] R13: 00007fed1d666038 R14: 00007fed1d665fa0 R15: 00007fff98092688 [ 380.034339][ T8545] [ 380.632216][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.779'. [ 382.161053][ T8555] netlink: 'syz.1.781': attribute type 46 has an invalid length. [ 387.830515][ T8606] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 387.830515][ T8606] The task syz.4.794 (8606) triggered the difference, watch for misbehavior. [ 387.855374][ T8606] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.794'. [ 388.734424][ T8619] FAULT_INJECTION: forcing a failure. [ 388.734424][ T8619] name failslab, interval 1, probability 0, space 0, times 0 [ 388.734462][ T8619] CPU: 1 UID: 0 PID: 8619 Comm: syz.3.800 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 388.734489][ T8619] Tainted: [L]=SOFTLOCKUP [ 388.734496][ T8619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 388.734508][ T8619] Call Trace: [ 388.734524][ T8619] [ 388.734533][ T8619] dump_stack_lvl+0xe8/0x150 [ 388.734563][ T8619] should_fail_ex+0x46b/0x600 [ 388.734591][ T8619] should_failslab+0xa8/0x100 [ 388.734613][ T8619] __kvmalloc_node_noprof+0x16f/0x8f0 [ 388.734641][ T8619] ? rhashtable_init_noprof+0x536/0xa80 [ 388.734666][ T8619] ? rhashtable_init_noprof+0x135/0xa80 [ 388.734700][ T8619] rhashtable_init_noprof+0x536/0xa80 [ 388.734731][ T8619] rhltable_init_noprof+0x1e/0x60 [ 388.734756][ T8619] nf_tables_newtable+0x68f/0x1910 [ 388.734802][ T8619] nfnetlink_rcv+0x1247/0x27b0 [ 388.734854][ T8619] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 388.734890][ T8619] ? ref_tracker_free+0x673/0x820 [ 388.734940][ T8619] ? __netlink_deliver_tap+0x807/0x850 [ 388.734960][ T8619] ? netlink_deliver_tap+0x2e/0x1b0 [ 388.734999][ T8619] netlink_unicast+0x831/0x9f0 [ 388.735027][ T8619] ? __pfx_netlink_unicast+0x10/0x10 [ 388.735045][ T8619] ? __alloc_skb+0x193/0x390 [ 388.735072][ T8619] ? netlink_sendmsg+0x650/0xb40 [ 388.735090][ T8619] ? skb_put+0x11b/0x210 [ 388.735111][ T8619] netlink_sendmsg+0x813/0xb40 [ 388.735142][ T8619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.735166][ T8619] ? is_bpf_text_address+0x292/0x2b0 [ 388.735193][ T8619] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 388.735217][ T8619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 388.735240][ T8619] __sock_sendmsg+0x21c/0x270 [ 388.735268][ T8619] ____sys_sendmsg+0x4e1/0x800 [ 388.735296][ T8619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 388.735326][ T8619] ? import_iovec+0x73/0xa0 [ 388.735355][ T8619] ___sys_sendmsg+0x2a5/0x360 [ 388.735374][ T8619] ? __lock_acquire+0x6b5/0x2cf0 [ 388.735403][ T8619] ? __pfx____sys_sendmsg+0x10/0x10 [ 388.735456][ T8619] ? __fget_files+0x2a/0x420 [ 388.735477][ T8619] ? __fget_files+0x3a6/0x420 [ 388.735507][ T8619] __x64_sys_sendmsg+0x1c3/0x2a0 [ 388.735530][ T8619] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 388.735561][ T8619] ? __pfx_ksys_write+0x10/0x10 [ 388.735598][ T8619] do_syscall_64+0xe2/0xf80 [ 388.735622][ T8619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.735641][ T8619] ? trace_irq_disable+0x37/0x100 [ 388.735661][ T8619] ? clear_bhb_loop+0x60/0xb0 [ 388.735690][ T8619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.735709][ T8619] RIP: 0033:0x7f79f43bacb9 [ 388.735727][ T8619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.735743][ T8619] RSP: 002b:00007f79f2616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 388.735765][ T8619] RAX: ffffffffffffffda RBX: 00007f79f4635fa0 RCX: 00007f79f43bacb9 [ 388.735780][ T8619] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000003 [ 388.735793][ T8619] RBP: 00007f79f2616090 R08: 0000000000000000 R09: 0000000000000000 [ 388.735806][ T8619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.735818][ T8619] R13: 00007f79f4636038 R14: 00007f79f4635fa0 R15: 00007ffd8b7f1408 [ 388.735851][ T8619] [ 388.754666][ T5807] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 389.133295][ T5807] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 389.133327][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.138344][ T5807] usb 1-1: config 0 descriptor?? [ 389.182890][ T5807] cp210x 1-1:0.0: cp210x converter detected [ 389.391793][ T5807] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 389.391823][ T5807] cp210x 1-1:0.0: querying part number failed [ 389.417346][ T5807] usb 1-1: cp210x converter now attached to ttyUSB0 [ 391.306527][ T8640] tap0: tun_chr_ioctl cmd 1074025677 [ 391.306747][ T8640] tap0: linktype set to 802 [ 391.560960][ T31] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 391.604523][ T31] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 391.856535][ T8646] fido_id[8646]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 392.353896][ T56] usb 1-1: USB disconnect, device number 23 [ 392.374112][ T56] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 392.374833][ T56] cp210x 1-1:0.0: device disconnected [ 392.740967][ T56] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 392.949038][ T5976] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 393.060903][ T56] usb 2-1: Using ep0 maxpacket: 32 [ 393.191002][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 393.191256][ T56] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.191309][ T56] usb 2-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 393.191337][ T56] usb 2-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 393.191363][ T56] usb 2-1: config 0 interface 0 has no altsetting 0 [ 393.191395][ T56] usb 2-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 393.191418][ T56] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.192809][ T5976] usb 3-1: config 8 has an invalid interface number: 206 but max is 0 [ 393.192832][ T5976] usb 3-1: config 8 has an invalid descriptor of length 184, skipping remainder of the config [ 393.192852][ T5976] usb 3-1: config 8 has no interface number 0 [ 393.192895][ T5976] usb 3-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 393.192921][ T5976] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has an invalid bInterval 184, changing to 11 [ 393.192948][ T5976] usb 3-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 41125, setting to 1024 [ 393.192974][ T5976] usb 3-1: config 8 interface 206 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 393.193001][ T5976] usb 3-1: config 8 interface 206 has no altsetting 0 [ 393.200712][ T56] usb 2-1: config 0 descriptor?? [ 393.214346][ T5976] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb [ 393.214376][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.214397][ T5976] usb 3-1: Product: syz [ 393.214411][ T5976] usb 3-1: Manufacturer: syz [ 393.214425][ T5976] usb 3-1: SerialNumber: syz [ 393.885564][ T8662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.886240][ T8662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.454222][ T56] corsair-cpro 0003:1B1C:0C10.001C: unknown main item tag 0x0 [ 394.454307][ T56] corsair-cpro 0003:1B1C:0C10.001C: unknown main item tag 0x0 [ 394.454333][ T56] corsair-cpro 0003:1B1C:0C10.001C: unknown main item tag 0x0 [ 394.454361][ T56] corsair-cpro 0003:1B1C:0C10.001C: unknown main item tag 0x0 [ 394.454398][ T56] corsair-cpro 0003:1B1C:0C10.001C: unknown main item tag 0x0 [ 394.509766][ T56] corsair-cpro 0003:1B1C:0C10.001C: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 394.565450][ T56] corsair-cpro 0003:1B1C:0C10.001C: probe with driver corsair-cpro failed with error -38 [ 394.627299][ T56] usb 2-1: USB disconnect, device number 31 [ 394.735279][ T8678] fido_id[8678]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 394.910186][ T8680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.817'. [ 398.824103][ T5976] garmin_gps 3-1:8.206: Garmin GPS usb/tty converter detected [ 398.839328][ T5976] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 398.839925][ T5976] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8 [ 414.529947][ T56] usb 3-1: USB disconnect, device number 32 [ 414.544060][ T56] garmin_gps 3-1:8.206: device disconnected [ 415.038881][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.866'. [ 418.511000][ T5988] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 418.700930][ T5988] usb 4-1: Using ep0 maxpacket: 32 [ 418.704273][ T5988] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 418.707356][ T5988] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 418.707386][ T5988] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.707406][ T5988] usb 4-1: Product: syz [ 418.707421][ T5988] usb 4-1: Manufacturer: syz [ 418.707436][ T5988] usb 4-1: SerialNumber: syz [ 418.763666][ T5988] usb 4-1: config 0 descriptor?? [ 418.980345][ T5988] usb 4-1: USB disconnect, device number 28 [ 420.120111][ T8871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.877'. [ 422.225337][ T8880] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 422.880977][ T1822] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 423.031018][ T1822] usb 4-1: Using ep0 maxpacket: 32 [ 423.033360][ T1822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 423.033393][ T1822] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 423.033409][ T1822] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 423.033424][ T1822] usb 4-1: config 0 interface 0 has no altsetting 0 [ 423.033442][ T1822] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 423.033455][ T1822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.050587][ T1822] usb 4-1: config 0 descriptor?? [ 423.664693][ T8888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.665077][ T8888] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.220951][ T5987] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 424.275320][ T1822] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0 [ 424.275347][ T1822] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0 [ 424.275364][ T1822] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0 [ 424.275381][ T1822] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0 [ 424.275397][ T1822] corsair-cpro 0003:1B1C:0C10.001D: unknown main item tag 0x0 [ 424.294177][ T1822] corsair-cpro 0003:1B1C:0C10.001D: hidraw0: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.3-1/input0 [ 424.358249][ T1822] corsair-cpro 0003:1B1C:0C10.001D: probe with driver corsair-cpro failed with error -38 [ 424.428630][ T5987] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 424.428662][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.431859][ T5987] usb 2-1: config 0 descriptor?? [ 424.458961][ T5987] cp210x 2-1:0.0: cp210x converter detected [ 424.910493][ T5987] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 425.354732][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.884'. [ 425.354758][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz.4.884'. [ 425.633456][ T5987] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 425.633478][ T5987] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 425.636043][ T5987] usb 2-1: cp210x converter now attached to ttyUSB0 [ 425.638113][ T5987] usb 2-1: USB disconnect, device number 32 [ 425.681537][ T5987] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 425.681948][ T5987] cp210x 2-1:0.0: device disconnected [ 426.198757][ T8914] netlink: 28 bytes leftover after parsing attributes in process `syz.2.888'. [ 427.780937][ T1822] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 427.973585][ T1822] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 427.973614][ T1822] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 427.973749][ T1822] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 427.973773][ T1822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.992578][ T1822] usb 1-1: config 0 descriptor?? [ 430.364157][ T5807] usb 1-1: USB disconnect, device number 24 [ 431.050932][ T5988] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 431.911975][ T5988] usb 1-1: Using ep0 maxpacket: 32 [ 431.914952][ T5988] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 431.917000][ T5988] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 431.917019][ T5988] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.917030][ T5988] usb 1-1: Product: syz [ 431.917038][ T5988] usb 1-1: Manufacturer: syz [ 431.917046][ T5988] usb 1-1: SerialNumber: syz [ 431.971495][ T5988] usb 1-1: config 0 descriptor?? [ 432.181259][ T5807] usb 1-1: USB disconnect, device number 25 [ 432.400977][ T5988] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 432.583260][ T5988] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 432.583292][ T5988] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.588414][ T5988] usb 2-1: config 0 descriptor?? [ 432.616048][ T5988] cp210x 2-1:0.0: cp210x converter detected [ 432.720909][ T5807] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 432.870939][ T5807] usb 3-1: Using ep0 maxpacket: 32 [ 432.873573][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.873605][ T5807] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.873646][ T5807] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 432.873670][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.010554][ T5988] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 433.022881][ T5807] usb 3-1: config 0 descriptor?? [ 434.070481][ T5807] hub 3-1:0.0: USB hub found [ 434.095994][ T5807] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 434.143948][ T5807] usbhid 3-1:0.0: can't add hid device: -71 [ 434.144087][ T5807] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 434.399329][ T5807] usb 3-1: USB disconnect, device number 33 [ 435.111763][ T5988] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 435.111792][ T5988] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 435.177594][ T5988] usb 2-1: cp210x converter now attached to ttyUSB0 [ 435.262774][ T5988] usb 2-1: USB disconnect, device number 33 [ 435.330379][ T5988] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 435.339305][ T5988] cp210x 2-1:0.0: device disconnected [ 436.882139][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.907'. [ 436.882217][ T8987] netlink: 20 bytes leftover after parsing attributes in process `syz.2.907'. [ 437.976094][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.908'. [ 437.976167][ T8993] netlink: 20 bytes leftover after parsing attributes in process `syz.1.908'. [ 438.665822][ T5871] usb 4-1: USB disconnect, device number 29 [ 440.222017][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.222087][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.550983][ T5988] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 445.641972][ T5871] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 445.703767][ T5988] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.703787][ T5988] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 445.703810][ T5988] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 445.703823][ T5988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.970914][ T5988] usb 1-1: config 0 descriptor?? [ 446.031923][ T5871] usb 4-1: Using ep0 maxpacket: 32 [ 446.921498][ T5807] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 446.925453][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.925487][ T5871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.925510][ T5871] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 446.925523][ T5871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.968071][ T5871] usb 4-1: config 0 descriptor?? [ 447.007956][ T5871] hub 4-1:0.0: USB hub found [ 447.093235][ T5807] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 447.093268][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.123839][ T5807] usb 2-1: config 0 descriptor?? [ 447.139151][ T5807] cp210x 2-1:0.0: cp210x converter detected [ 447.195656][ T5871] hub 4-1:0.0: 14 ports detected [ 447.196123][ T5871] hub 4-1:0.0: insufficient power available to use all downstream ports [ 447.395932][ T5871] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 447.400917][ T5871] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 447.427096][ T5871] usbhid 4-1:0.0: can't add hid device: -71 [ 447.427220][ T5871] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 447.466422][ T5871] usb 4-1: USB disconnect, device number 30 [ 447.575303][ T5807] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 448.160335][ T9049] netlink: 28 bytes leftover after parsing attributes in process `syz.3.923'. [ 450.010259][ T5988] usb 1-1: USB disconnect, device number 26 [ 450.077323][ T5807] cp210x 2-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 450.077353][ T5807] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 450.200926][ T5807] usb 2-1: cp210x converter now attached to ttyUSB0 [ 450.221453][ T5807] usb 2-1: USB disconnect, device number 34 [ 450.267020][ T5807] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 450.269954][ T5807] cp210x 2-1:0.0: device disconnected [ 450.546258][ T5988] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 450.593466][ T5988] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 450.850043][ T9063] fido_id[9063]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 453.774571][ T5812] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 454.240966][ T1822] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 454.390955][ T1822] usb 2-1: Using ep0 maxpacket: 32 [ 454.393348][ T1822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 454.393369][ T1822] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 454.393392][ T1822] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 454.393406][ T1822] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.397128][ T1822] usb 2-1: config 0 descriptor?? [ 454.472283][ T1822] hub 2-1:0.0: USB hub found [ 454.625662][ T1822] hub 2-1:0.0: 14 ports detected [ 454.626092][ T1822] hub 2-1:0.0: insufficient power available to use all downstream ports [ 454.827966][ T1822] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 454.827993][ T1822] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 454.920418][ T5976] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 454.925881][ T9095] loop2: detected capacity change from 0 to 7 [ 454.946338][ T1822] usbhid 2-1:0.0: can't add hid device: -71 [ 454.946460][ T1822] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 455.894818][ T1822] usb 2-1: USB disconnect, device number 35 [ 455.897630][ T9095] loop2: [ 455.897650][ T9095] loop2: partition table partially beyond EOD, truncated [ 455.938334][ T5976] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 457.508637][ T9112] fido_id[9112]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 458.922229][ T5812] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 458.922956][ T5812] Bluetooth: hci0: Injecting HCI hardware error event [ 458.925381][ T5812] Bluetooth: hci0: hardware error 0x00 [ 462.334887][ T5807] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 462.342198][ T5807] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz1] on syz0 [ 462.449068][ T9134] fido_id[9134]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 462.900928][ T1822] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 463.052839][ T1822] usb 3-1: Using ep0 maxpacket: 32 [ 463.055210][ T1822] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 463.057999][ T1822] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 463.058027][ T1822] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.058046][ T1822] usb 3-1: Product: syz [ 463.058061][ T1822] usb 3-1: Manufacturer: syz [ 463.058075][ T1822] usb 3-1: SerialNumber: syz [ 463.073376][ T1822] usb 3-1: config 0 descriptor?? [ 463.120914][ T5807] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 463.280958][ T5807] usb 2-1: Using ep0 maxpacket: 32 [ 463.282657][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 463.282686][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 463.282714][ T5807] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 463.282727][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.285745][ T5807] usb 2-1: config 0 descriptor?? [ 463.289112][ T5807] hub 2-1:0.0: USB hub found [ 463.371571][ T1822] usb 3-1: USB disconnect, device number 34 [ 463.489346][ T5807] hub 2-1:0.0: 14 ports detected [ 463.489681][ T5807] hub 2-1:0.0: insufficient power available to use all downstream ports [ 463.552301][ T5812] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 463.672365][ T5976] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 463.691332][ T5807] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 463.691352][ T5807] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 463.698804][ T5807] usbhid 2-1:0.0: can't add hid device: -71 [ 463.698891][ T5807] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 463.721872][ T5807] usb 2-1: USB disconnect, device number 36 [ 463.843742][ T5976] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 463.843763][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.846615][ T5976] usb 1-1: config 0 descriptor?? [ 463.882616][ T5976] cp210x 1-1:0.0: cp210x converter detected [ 464.377528][ T5976] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 464.671195][ T5987] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 464.927359][ T5976] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 464.927380][ T5976] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 464.931882][ T5976] usb 1-1: cp210x converter now attached to ttyUSB0 [ 464.935354][ T5976] usb 1-1: USB disconnect, device number 27 [ 464.943765][ T5976] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 464.944478][ T5976] cp210x 1-1:0.0: device disconnected [ 464.993526][ T5987] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 464.993580][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 464.993606][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 464.993628][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 464.996122][ T5987] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 464.996152][ T5987] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 464.996173][ T5987] usb 2-1: Manufacturer: syz [ 465.077832][ T5987] usb 2-1: config 0 descriptor?? [ 465.527374][ T5987] appleir 0003:05AC:8243.0021: unknown main item tag 0x0 [ 465.587871][ T5987] appleir 0003:05AC:8243.0021: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 465.753187][ T9161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 465.753901][ T9161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.069458][ T56] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 466.234966][ T56] hid-generic 0000:0000:0000.0022: hidraw1: HID v0.00 Device [syz1] on syz0 [ 466.668004][ T9176] fido_id[9176]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 467.260933][ T1822] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 467.338631][ T9188] FAULT_INJECTION: forcing a failure. [ 467.338631][ T9188] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.338668][ T9188] CPU: 1 UID: 0 PID: 9188 Comm: syz.4.968 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 467.338695][ T9188] Tainted: [L]=SOFTLOCKUP [ 467.338703][ T9188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 467.338714][ T9188] Call Trace: [ 467.338722][ T9188] [ 467.338730][ T9188] dump_stack_lvl+0xe8/0x150 [ 467.338763][ T9188] should_fail_ex+0x46b/0x600 [ 467.338791][ T9188] _copy_from_user+0x2d/0xb0 [ 467.338817][ T9188] __sys_sendto+0x297/0x560 [ 467.338849][ T9188] ? __pfx___sys_sendto+0x10/0x10 [ 467.338899][ T9188] ? ksys_write+0x248/0x270 [ 467.338927][ T9188] ? __pfx_ksys_write+0x10/0x10 [ 467.338957][ T9188] __x64_sys_sendto+0xde/0x100 [ 467.338988][ T9188] do_syscall_64+0xe2/0xf80 [ 467.339013][ T9188] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.339032][ T9188] ? trace_irq_disable+0x37/0x100 [ 467.339051][ T9188] ? clear_bhb_loop+0x60/0xb0 [ 467.339074][ T9188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.339093][ T9188] RIP: 0033:0x7f0d6768acb9 [ 467.339110][ T9188] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 467.339127][ T9188] RSP: 002b:00007f0d658e6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 467.339148][ T9188] RAX: ffffffffffffffda RBX: 00007f0d67905fa0 RCX: 00007f0d6768acb9 [ 467.339162][ T9188] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000003 [ 467.339175][ T9188] RBP: 00007f0d658e6090 R08: 00002000000000c0 R09: 0000000000000014 [ 467.339188][ T9188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 467.339201][ T9188] R13: 00007f0d67906038 R14: 00007f0d67905fa0 R15: 00007ffcb4dc22a8 [ 467.339239][ T9188] [ 467.413337][ T1822] usb 4-1: Using ep0 maxpacket: 32 [ 467.415679][ T1822] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 467.415704][ T1822] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 467.415738][ T1822] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 467.415761][ T1822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.429635][ T1822] usb 4-1: config 0 descriptor?? [ 467.996272][ T9197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.996815][ T9197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.061928][ T56] usb 2-1: reset high-speed USB device number 37 using dummy_hcd [ 468.070583][ T56] usb 2-1: device reset changed ep0 maxpacket size! [ 468.072626][ T5987] usb 2-1: USB disconnect, device number 37 [ 468.164564][ T1822] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 468.220999][ T5987] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 468.325334][ T1822] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 468.325366][ T1822] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.353819][ T1822] usb 1-1: config 0 descriptor?? [ 468.374806][ T5987] usb 2-1: Using ep0 maxpacket: 32 [ 468.379043][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.379076][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 468.379120][ T5987] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 468.379144][ T5987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.379352][ T1822] cp210x 1-1:0.0: cp210x converter detected [ 468.397506][ T5987] usb 2-1: config 0 descriptor?? [ 468.412249][ T5987] hub 2-1:0.0: USB hub found [ 468.609977][ T5987] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 468.632186][ T5987] usbhid 2-1:0.0: can't add hid device: -71 [ 468.632305][ T5987] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 468.661774][ T5987] ================================================================== [ 468.661791][ T5987] BUG: KASAN: vmalloc-out-of-bounds in __list_add_valid_or_report+0x4e/0x130 [ 468.661821][ T5987] Read of size 8 at addr ffffc9000d68b008 by task kworker/1:6/5987 [ 468.661837][ T5987] [ 468.661850][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 468.661878][ T5987] Tainted: [L]=SOFTLOCKUP [ 468.661885][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 468.661898][ T5987] Workqueue: usb_hub_wq hub_event [ 468.661923][ T5987] Call Trace: [ 468.661931][ T5987] [ 468.661940][ T5987] dump_stack_lvl+0xe8/0x150 [ 468.661974][ T5987] print_report+0xba/0x230 [ 468.661996][ T5987] ? __list_add_valid_or_report+0x4e/0x130 [ 468.662015][ T5987] kasan_report+0x117/0x150 [ 468.662042][ T5987] ? __list_add_valid_or_report+0x4e/0x130 [ 468.662065][ T5987] __list_add_valid_or_report+0x4e/0x130 [ 468.662102][ T5987] kcov_remote_stop+0x457/0x680 [ 468.662127][ T5987] hub_event+0x49d8/0x4f60 [ 468.662169][ T5987] ? __pfx_hub_event+0x10/0x10 [ 468.662192][ T5987] ? process_scheduled_works+0xa0f/0x17a0 [ 468.662216][ T5987] ? process_scheduled_works+0xa0f/0x17a0 [ 468.662237][ T5987] ? process_scheduled_works+0xa0f/0x17a0 [ 468.662259][ T5987] process_scheduled_works+0xaec/0x17a0 [ 468.662293][ T5987] ? __pfx_process_scheduled_works+0x10/0x10 [ 468.662313][ T5987] ? do_raw_spin_lock+0x12b/0x2f0 [ 468.662338][ T5987] ? assign_work+0x3d3/0x440 [ 468.662360][ T5987] worker_thread+0x89f/0xd90 [ 468.662394][ T5987] kthread+0x726/0x8b0 [ 468.662420][ T5987] ? __pfx_worker_thread+0x10/0x10 [ 468.662441][ T5987] ? __pfx_kthread+0x10/0x10 [ 468.662464][ T5987] ? rt_spin_unlock+0x14f/0x200 [ 468.662488][ T5987] ? rt_spin_unlock+0x160/0x200 [ 468.662506][ T5987] ? __pfx_kthread+0x10/0x10 [ 468.662531][ T5987] ret_from_fork+0x51b/0xa40 [ 468.662554][ T5987] ? __pfx_ret_from_fork+0x10/0x10 [ 468.662574][ T5987] ? __switch_to+0xc82/0x1410 [ 468.662594][ T5987] ? __pfx_kthread+0x10/0x10 [ 468.662619][ T5987] ret_from_fork_asm+0x1a/0x30 [ 468.662652][ T5987] [ 468.662659][ T5987] [ 468.662664][ T5987] The buggy address belongs to a vmalloc virtual mapping [ 468.662681][ T5987] Memory state around the buggy address: [ 468.662692][ T5987] ffffc9000d68af00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 468.662706][ T5987] ffffc9000d68af80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 468.662718][ T5987] >ffffc9000d68b000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 468.662728][ T5987] ^ [ 468.662738][ T5987] ffffc9000d68b080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 468.662750][ T5987] ffffc9000d68b100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 468.662760][ T5987] ================================================================== [ 468.662903][ T5987] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 468.662923][ T5987] CPU: 1 UID: 0 PID: 5987 Comm: kworker/1:6 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 468.662950][ T5987] Tainted: [L]=SOFTLOCKUP [ 468.662957][ T5987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 468.662970][ T5987] Workqueue: usb_hub_wq hub_event [ 468.662992][ T5987] Call Trace: [ 468.663000][ T5987] [ 468.663007][ T5987] vpanic+0x1e0/0x670 [ 468.663034][ T5987] panic+0xc5/0xd0 [ 468.663057][ T5987] ? __pfx_panic+0x10/0x10 [ 468.663089][ T5987] ? preempt_schedule_thunk+0x16/0x30 [ 468.663111][ T5987] ? __list_add_valid_or_report+0x4e/0x130 [ 468.663130][ T5987] ? preempt_schedule_thunk+0x16/0x30 [ 468.663151][ T5987] ? __list_add_valid_or_report+0x4e/0x130 [ 468.663171][ T5987] check_panic_on_warn+0x89/0xb0 [ 468.663199][ T5987] ? __list_add_valid_or_report+0x4e/0x130 [ 468.663218][ T5987] end_report+0x6f/0x140 [ 468.663244][ T5987] kasan_report+0x128/0x150 [ 468.663272][ T5987] ? __list_add_valid_or_report+0x4e/0x130 [ 468.663296][ T5987] __list_add_valid_or_report+0x4e/0x130 [ 468.663317][ T5987] kcov_remote_stop+0x457/0x680 [ 468.663341][ T5987] hub_event+0x49d8/0x4f60 [ 468.663384][ T5987] ? __pfx_hub_event+0x10/0x10 [ 468.663406][ T5987] ? process_scheduled_works+0xa0f/0x17a0 [ 468.663430][ T5987] ? process_scheduled_works+0xa0f/0x17a0 [ 468.663451][ T5987] ? process_scheduled_works+0xa0f/0x17a0 [ 468.663473][ T5987] process_scheduled_works+0xaec/0x17a0 [ 468.663507][ T5987] ? __pfx_process_scheduled_works+0x10/0x10 [ 468.663527][ T5987] ? do_raw_spin_lock+0x12b/0x2f0 [ 468.663552][ T5987] ? assign_work+0x3d3/0x440 [ 468.663574][ T5987] worker_thread+0x89f/0xd90 [ 468.663607][ T5987] kthread+0x726/0x8b0 [ 468.663633][ T5987] ? __pfx_worker_thread+0x10/0x10 [ 468.663655][ T5987] ? __pfx_kthread+0x10/0x10 [ 468.663677][ T5987] ? rt_spin_unlock+0x14f/0x200 [ 468.663700][ T5987] ? rt_spin_unlock+0x160/0x200 [ 468.663719][ T5987] ? __pfx_kthread+0x10/0x10 [ 468.663745][ T5987] ret_from_fork+0x51b/0xa40 [ 468.663766][ T5987] ? __pfx_ret_from_fork+0x10/0x10 [ 468.663786][ T5987] ? __switch_to+0xc82/0x1410 [ 468.663806][ T5987] ? __pfx_kthread+0x10/0x10 [ 468.663834][ T5987] ret_from_fork_asm+0x1a/0x30 [ 468.663866][ T5987] [ 468.664293][ T5987] Kernel Offset: disabled