last executing test programs: 51.202444238s ago: executing program 1 (id=815): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) socket(0x400000000010, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) connect$can_j1939(r5, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x2}, 0xfe}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001300050000000000feffffff07000000", @ANYRES32=r1, @ANYBLOB="003000000000000014001a80100004800c000880"], 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) 49.850009157s ago: executing program 1 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) socket(0x80000000000000a, 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002240), 0x20000) fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ppoll(0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000001c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 48.395227495s ago: executing program 1 (id=828): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket(0xa, 0x80805, 0x0) r0 = epoll_create1(0x80000) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0) 47.241428941s ago: executing program 1 (id=838): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002240), 0x20000) fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143042, 0xf2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ppoll(0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000001c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 46.063862687s ago: executing program 1 (id=848): socket$nl_generic(0x10, 0x3, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) socket$packet(0x11, 0x3, 0x300) socket(0x400000000010, 0x3, 0x0) geteuid() openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r4, @ANYBLOB='\a'], 0x0) 39.785747297s ago: executing program 1 (id=871): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000020000000b0000000c000580080001"], 0x20}, 0x1, 0x0, 0x0, 0x850}, 0x42084) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000940)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0xfffffffe, 0x2, 0x40, 0x7, 0xe9, 0xcc36}, [@TCA_NETEM_LATENCY64={0xc, 0xa, 0xff}]}}}]}, 0x58}}, 0x0) 12.410396s ago: executing program 2 (id=1013): rt_sigtimedwait(&(0x7f0000000e80)={[0x8]}, 0x0, &(0x7f0000000ec0), 0x8) clock_gettime(0x2, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0x11}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40, 0x840}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = getpid() sched_setscheduler(r4, 0x0, &(0x7f0000000100)=0x10000007) syz_pidfd_open(r4, 0x0) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usbip_server_init(0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x46ac01, 0x0) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) syz_open_dev$dri(0x0, 0x1ff, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071112400000000008510000002000000850000000e0000009500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) syz_emit_ethernet(0x66, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffff0180c200000d86dd6000000800303afffe80000000000000010000000000001fff02000000000000000000fe8000000040ab8f0c31f2b338d900000000000000000000aaff020000000000000000004000000000000000000000000000000000c2854676777df5df200d4bc31ce625abf392a9a2546722361165905ada1a7c34446c7f8dd15d18f3dd83793ea5"], 0x0) socket(0x5, 0x3, 0x1) 10.77692209s ago: executing program 0 (id=1019): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [0x0, 0x0, 0x0, 0xffffff00], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0x200000000000000}}}, 0xb8}}, 0x2c000030) sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x14, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x300, 0x0, 0x1000, 0x0, 0xa, 0x20, 0x0, 0x2b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0x6, 0x0, 0xffeffffffffffffe}, 0x200, 0x0, 0x0, 0x0, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x404c830}, 0x0) (fail_nth: 3) 10.175955001s ago: executing program 0 (id=1021): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc52b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x20, 0x18, 0x4a, "0da2308726fd6a318c40a4de07adc921a6165deae5c78929681c747af6bdc6c8b7f8e4e54134ca52f6f2aef69c3ed748a664a9e0f2d1b350a8fb6eec743e20f02803623ad5e07239619f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.881035174s ago: executing program 2 (id=1025): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) r1 = msgget$private(0x0, 0x401) msgsnd(r1, &(0x7f0000000240)={0x3, "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"}, 0xa09, 0x800) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003530000005303"]}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 'id0\x00'}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000140), 0x4) syz_usb_connect$midi(0x4, 0xc1, &(0x7f0000000c80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x1, 0x1, 0x3b, 0x10, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x81, 0x4}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x8, 0x40, 0xe, 0x6, 0x3, {0xb, 0x25, 0x1, 0x7, "2ad542c0c561f1"}}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0xb, 0x1, 0x1, {0x9, 0x25, 0x1, 0x5, "2e358334ae"}}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x7, 0x0, 0xf9, {0xe, 0x25, 0x1, 0xa, "8b623f67de7297dea634"}}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x7, 0x0, 0x5, {0xd, 0x25, 0x1, 0x9, "58b3c79912e1e21f09"}}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x9, 0x6, 0x7, {0x7, 0x25, 0x1, 0x3, "40de86"}}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x5, 0x8, 0xf9, {0x8, 0x25, 0x1, 0x4, "9c3cc0e4"}}}]}}}}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x300, 0x80, 0x8, 0x7f, 0xff, 0xf9}, 0xa5, &(0x7f0000000dc0)={0x5, 0xf, 0xa5, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x3f, 0x1, 0xfff, 0xf000, 0x3, [0xcf]}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0xf, 0xf780, 0x40}, @ssp_cap={0x24, 0x10, 0xa, 0x98, 0x6, 0x1ff, 0x0, 0xfffa, [0x3f00, 0xc000, 0xff0000, 0xf, 0xff0000, 0xffffd7]}, @generic={0x60, 0x10, 0x4, "21dfc75112d3e9cdfebd4bb123078e18d9a245548b39268246edfe775b354078dbccea59825fe662b1485e881d14f2e4149261bc3e8e9eb727567af8ac9325e9746aeefe0dbcdba3de7679c9420c6258062eebf34cadd756221eef79aa"}]}, 0x8, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x474}}, {0xff, &(0x7f0000000f40)=@string={0xff, 0x3, "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"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x809}}, {0xe8, &(0x7f00000010c0)=@string={0xe8, 0x3, "e0d39a4c5ae4741b70d06e8d39cb664f91ed45e160879d6d51dbed1c911b929ba3b32de1c43dd67638d67bee0a74afdf510c4b55a754d11cc9807bcbd2a28485fd2bad18e23be0c656435b6c3fe237655b91d38e36448abf0bb27e68130f1a61c932dd6f09051f45445db1aff96fc6c2468f25ac5e57e83621aba1086c8120bd58b75969d264535d83cc3fb3658e49d890df899d74cc4ea51e82066f0ebd32f5bffa2b01be3fc2dbcec5734edcdef4859736597bd1e464e23a15af10ac50737e4f44fce6bd3d004af5ac6d4f9700979b46de50deabe9075b48cc02bbb844090f3ab4574c0ded"}}, {0xf1, &(0x7f00000011c0)=@string={0xf1, 0x3, "f7d75835e4704c0b805f676fd1ae152db689966f7ba439951a8247d16d0913f5acc94fb05d7c05bc0eb748e381d74b744d03b295a85cf3454b0f4b7bea1a2832103b81953ca3499407702e8af2f0671a60f2a06560e0c42213366c6f0ad08a02868e41bb33c7228cc60696f4715d66f3919b158b11cbb175f7bbdd51de1bc9c07b96711b9cdfd4ba51bb3ee00432321d62586be95417d19a8dd32d76e7774468ca089d470184daafd92d46d4db2202657ccf4ec93e2439369c3b564643e31bd4c92c1e99449d835fc19200f5f98850352a199768e083eb77f9e421a63733c7802f1432039ce629701b889901f9ae7d"}}]}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0x40000, 0x4) setsockopt$MRT_DONE(r3, 0x0, 0xd0, 0x0, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000001c0)=[{0x23, '\x00', @st={0x4, [{0x3, @uvalue=0x483fd52c}, {0x2, @uvalue=0x4}, {0x0, @svalue=0x3}, {0x1, @uvalue=0x1000}]}, 0x40000}]}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) 9.32700411s ago: executing program 3 (id=1029): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000380)=0x8) 6.131598782s ago: executing program 0 (id=1033): syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x8c9}, 0x8) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="5f1e6c") pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r4, &(0x7f0000001680)={&(0x7f00000000c0)=@caif=@util={0x25, "5542e7e8d7bd6e7d13088552356326de"}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0xc00}], 0x1, &(0x7f0000001540)=[{0xd8, 0x109, 0x5, "15ab24c97144f00e8bd3328562331b074e4edda2a6d9723c7c4067b57dfeb8e05e30e4d020a96dd452fe255346b2f5cf5b986efe2bf9a0874b28e10d537abf6d13694697fa8079c36b30b5d348d73f4e0f78ee9e1cdf0ffd72a0822c01217def419dee73691d8038036b40e12732ef5cc3dfacc2a33c9ab3f8e7ab734e654b8e5565a7c4d48c6424df5371caf0ac421556838c60c1bc09212098d296c34571bf19d2bddbb7cf461563e3ccdf3a0ce0d8033eae398f0f89aea95d32a238c1e6fbb4487aaa4bd3"}, {0x50, 0x103, 0x80000000, "94d161b409d4ef78f17c6400769f38e332cde90f427c75dcb3c2cae4a1630759e7b94cb0de79fe0e09ab66cac5b503cbfc484bd540a514d768048a"}], 0x128}, 0x8000) 5.965343796s ago: executing program 3 (id=1034): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029"], 0x108}}], 0x1, 0xc040) 5.919299073s ago: executing program 2 (id=1035): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009000100737956490000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073797a3100000000140007800800124000000705080013400000000e0500050002000000050004000100000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014030000000007400000000508000640000000010900010073797a30000000000900020073797a3200000000050007"], 0x84}}, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x53, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r2, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd50200000009000100737956490000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="600000000206030000000000000000000700000705000100070000000900020073797a3100000000140007800800124000000705080013400000000e0500050002000000050004000100000012000300686173683a6e65742c706f7274"], 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004080) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5c000000060a0b0400000000000000000200000028000480240001800b000100657874686472000014030000000007400000000508000640000000010900010073797a30000000000900020073797a3200000000050007"], 0x84}}, 0x0) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x53}, 0x8) (async) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000001c0)=r2, 0x4) (async) 5.710260482s ago: executing program 3 (id=1037): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) (async) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7f, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) socket$inet(0x2, 0x80001, 0x84) (async) r3 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)="16", 0x1}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) (async) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xd, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000000000000000000000000008510000001000000950000000000000018010000202073250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='GPL\x00', 0x4, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0x9}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0xb}, 0x94) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x54, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}, {0xc, 0x90}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x95}, 0x0) 5.264836746s ago: executing program 2 (id=1039): socket(0x2, 0x3, 0xff) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x3, &(0x7f0000000180)=0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f0000000300)={0x4, {{0x2, 0x4e24, @broadcast}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000000)={0x6, {{0x2, 0x3, @multicast2}}, {{0x2, 0xfff6, @broadcast}}}, 0x108) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mount$afs(0x0, &(0x7f0000001a00)='.\x00', &(0x7f0000001a40), 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) setuid(0xee00) shmget$private(0x0, 0x4000, 0x800, &(0x7f0000007000/0x4000)=nil) 5.104842179s ago: executing program 3 (id=1040): r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "3ceded740f30b09217a0371ef3f9856d09ee1cdab26361bcd455b211d73c2b1cac23039e3565f21d68614f38ed4e3a9277f886fa719ced4c379075314283b649", 0x10}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000240)="4ce029d527453f8622efaa5aa62d94eddec01cee2693a572171ad1ccdfe7ec972c9f635768e2ed8abeea52bac2267ed31112d2305b557e5b3a847851699a0baab36faa5735bb7d", 0x47) 4.84634116s ago: executing program 3 (id=1042): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="022000000000000014000300626f6e6430000000000000000000000008000a00", @ANYRES8=r1], 0x3c}}, 0x0) r2 = socket$inet(0x2, 0x2, 0xf01) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0xfc30) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000004000000000000000000000000f083f6d3fdd7809efe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000700000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000440005002001000000000000000000000000000000000002320000000a000000fc010000000000000000000000000000000000000400"], 0xfc}}, 0x0) connect$inet(r4, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) r6 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, r7) quotactl_fd$Q_GETINFO(0xffffffffffffffff, 0xffffffff80000501, r7, &(0x7f0000000100)) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@empty, @in=@private=0xa010101, 0x4e24, 0xf31, 0x4e21, 0x0, 0x2, 0x20, 0xa0, 0x3b, 0x0, r7}, {0x6, 0xd5e, 0x5, 0x100000001, 0x6, 0x2cd, 0x0, 0x400}, {0x8, 0x8, 0x8}, 0xd, 0x6e6bb5, 0x0, 0x0, 0x1, 0x2}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4d4, 0xff}, 0x2, @in=@multicast1, 0x0, 0x1, 0x3, 0x4, 0x2, 0x8, 0x9}}, 0xe8) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000001214000425bd7000fbdbdf2508000100010000000800004f00040000000800030004000000080015000200"/56], 0x38}, 0x1, 0x0, 0x0, 0x4040011}, 0x20000841) 4.42023257s ago: executing program 0 (id=1045): r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0) r1 = msgget$private(0x0, 0x401) msgsnd(r1, &(0x7f0000000240)={0x3, "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"}, 0xa09, 0x800) syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0003530000005303"]}, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 'id0\x00'}) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000140), 0x4) syz_usb_connect$midi(0x4, 0xc1, &(0x7f0000000c80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x582, 0x0, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x1, 0x1, 0x3b, 0x10, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x6, 0x1, 0x3, 0x30, 0x2, [@ms_header={0x7, 0x24, 0x1, 0x1, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x8, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x3, 0x7}, @midi_in_jack={0x6, 0x24, 0x2, 0x1, 0x81, 0x4}, @ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0xc, 0x8, 0x40, 0xe, 0x6, 0x3, {0xb, 0x25, 0x1, 0x7, "2ad542c0c561f1"}}}, {{0x9, 0x5, 0xa, 0x1, 0x200, 0xb, 0x1, 0x1, {0x9, 0x25, 0x1, 0x5, "2e358334ae"}}}, {{0x9, 0x5, 0x7, 0x4, 0x8, 0x7, 0x0, 0xf9, {0xe, 0x25, 0x1, 0xa, "8b623f67de7297dea634"}}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x7, 0x0, 0x5, {0xd, 0x25, 0x1, 0x9, "58b3c79912e1e21f09"}}}, {{0x9, 0x5, 0x0, 0xc, 0x200, 0x9, 0x6, 0x7, {0x7, 0x25, 0x1, 0x3, "40de86"}}}, {{0x9, 0x5, 0xa, 0x8, 0x20, 0x5, 0x8, 0xf9, {0x8, 0x25, 0x1, 0x4, "9c3cc0e4"}}}]}}}}}]}}, &(0x7f00000012c0)={0xa, &(0x7f0000000d80)={0xa, 0x6, 0x300, 0x80, 0x8, 0x7f, 0xff, 0xf9}, 0xa5, &(0x7f0000000dc0)={0x5, 0xf, 0xa5, 0x4, [@ssp_cap={0x10, 0x10, 0xa, 0x3f, 0x1, 0xfff, 0xf000, 0x3, [0xcf]}, @ssp_cap={0xc, 0x10, 0xa, 0x3, 0x0, 0xf, 0xf780, 0x40}, @ssp_cap={0x24, 0x10, 0xa, 0x98, 0x6, 0x1ff, 0x0, 0xfffa, [0x3f00, 0xc000, 0xff0000, 0xf, 0xff0000, 0xffffd7]}, @generic={0x60, 0x10, 0x4, "21dfc75112d3e9cdfebd4bb123078e18d9a245548b39268246edfe775b354078dbccea59825fe662b1485e881d14f2e4149261bc3e8e9eb727567af8ac9325e9746aeefe0dbcdba3de7679c9420c6258062eebf34cadd756221eef79aa"}]}, 0x8, [{0x4, &(0x7f0000000e80)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000ec0)=@lang_id={0x4, 0x3, 0x404}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x474}}, {0xff, &(0x7f0000000f40)=@string={0xff, 0x3, "256019edb4b891970fb0362fd6a9da6655e4242da60c545bbd0efc2d5d0b817d0b87734c34dae4eceebfb0a971798d558b0b6827cf1ffe4023bc29ff30c5e0c682f780c3747087c47e993c1ce93af44ba857129de179f53efc52c2bc10dc11a7c364959142b537ac826fb7caba8aecfd5341a0684fc2d2518d6b800486b32968d92c1ea1dcc4f964884431e2221bc4c581f3f556f0a9a62e28d89e295c1a52544bc810cb8b4184f1075703ae71cc3eb3e80712eeaecc788cc9c33ad635f5eddc1a5d551b7afc6dc7cfb44cb1475bc801bccc22b54875e335bdfbf858eb33253e736ba86158550d38b0e959bd893b0c92a5927d154f4e2eca044038e75e"}}, {0x4, &(0x7f0000001040)=@lang_id={0x4, 0x3, 0x406}}, {0x4, &(0x7f0000001080)=@lang_id={0x4, 0x3, 0x809}}, {0xe8, &(0x7f00000010c0)=@string={0xe8, 0x3, "e0d39a4c5ae4741b70d06e8d39cb664f91ed45e160879d6d51dbed1c911b929ba3b32de1c43dd67638d67bee0a74afdf510c4b55a754d11cc9807bcbd2a28485fd2bad18e23be0c656435b6c3fe237655b91d38e36448abf0bb27e68130f1a61c932dd6f09051f45445db1aff96fc6c2468f25ac5e57e83621aba1086c8120bd58b75969d264535d83cc3fb3658e49d890df899d74cc4ea51e82066f0ebd32f5bffa2b01be3fc2dbcec5734edcdef4859736597bd1e464e23a15af10ac50737e4f44fce6bd3d004af5ac6d4f9700979b46de50deabe9075b48cc02bbb844090f3ab4574c0ded"}}, {0xf0, &(0x7f00000011c0)=@string={0xf0, 0x3, "f7d75835e4704c0b805f676fd1ae152db689966f7ba439951a8247d16d0913f5acc94fb05d7c05bc0eb748e381d74b744d03b295a85cf3454b0f4b7bea1a2832103b81953ca3499407702e8af2f0671a60f2a06560e0c42213366c6f0ad08a02868e41bb33c7228cc60696f4715d66f3919b158b11cbb175f7bbdd51de1bc9c07b96711b9cdfd4ba51bb3ee00432321d62586be95417d19a8dd32d76e7774468ca089d470184daafd92d46d4db2202657ccf4ec93e2439369c3b564643e31bd4c92c1e99449d835fc19200f5f98850352a199768e083eb77f9e421a63733c7802f1432039ce629701b889901f9ae"}}]}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000040)=0x40000, 0x4) setsockopt$MRT_DONE(r3, 0x0, 0xd0, 0x0, 0x0) r5 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x0) ioctl$FE_GET_PROPERTY(r5, 0x80106f53, &(0x7f0000000000)={0x2, &(0x7f00000001c0)=[{0x23, '\x00', @st={0x4, [{0x3, @uvalue=0x483fd52c}, {0x2, @uvalue=0x4}, {0x0, @svalue=0x3}, {0x1, @uvalue=0x1000}]}, 0x40000}]}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000100)={0x0, &(0x7f00000000c0)}) 1.801249379s ago: executing program 4 (id=1057): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) close(0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000040)='memory.max\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) socket(0x80000000000000a, 0x800, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000002240), 0x20000) fsopen(&(0x7f0000001300)='jffs2\x00', 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ppoll(0x0, 0x0, &(0x7f0000000140)={0x77359400}, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000001c0)=[r4], &(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000140), 0x0, 0x1}) 1.413060213s ago: executing program 0 (id=1058): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f00000000c0)={0x3, 0x5}) 1.289259709s ago: executing program 4 (id=1059): socket(0x21, 0x80005, 0x0) r0 = semget$private(0x0, 0x1, 0x201) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f0000000040)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @call={0x85, 0x0, 0x0, 0x6e}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x16, &(0x7f0000000100)=""/127, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) clock_getres(0xfffffffffffffffb, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271f, &(0x7f0000032580)=""/102396, &(0x7f0000000000)=0x18ffc) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x7000000}}, 0x18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1.210541008s ago: executing program 3 (id=1060): syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_connect(0x1, 0x3d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0x8c9}, 0x8) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$PIO_UNISCRNMAP(r0, 0x4b6a, &(0x7f0000000000)="5f1e6c") pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r4, &(0x7f0000001680)={&(0x7f00000000c0)=@caif=@util={0x25, "5542e7e8d7bd6e7d13088552356326de"}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000500)="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", 0xc00}], 0x1, &(0x7f0000001540)=[{0xd8, 0x109, 0x5, "15ab24c97144f00e8bd3328562331b074e4edda2a6d9723c7c4067b57dfeb8e05e30e4d020a96dd452fe255346b2f5cf5b986efe2bf9a0874b28e10d537abf6d13694697fa8079c36b30b5d348d73f4e0f78ee9e1cdf0ffd72a0822c01217def419dee73691d8038036b40e12732ef5cc3dfacc2a33c9ab3f8e7ab734e654b8e5565a7c4d48c6424df5371caf0ac421556838c60c1bc09212098d296c34571bf19d2bddbb7cf461563e3ccdf3a0ce0d8033eae398f0f89aea95d32a238c1e6fbb4487aaa4bd3"}, {0x50, 0x103, 0x80000000, "94d161b409d4ef78f17c6400769f38e332cde90f427c75dcb3c2cae4a1630759e7b94cb0de79fe0e09ab66cac5b503cbfc484bd540a514d768048a"}], 0x128}, 0x8000) 1.08692028s ago: executing program 4 (id=1061): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) gettid() r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) ioctl$PTP_SYS_OFFSET(r3, 0x43403d05, 0x0) 974.935473ms ago: executing program 0 (id=1062): ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x8}}, './file0\x00'}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000002d00)=@bloom_filter={0x1e, 0x1ff, 0x3a, 0x8, 0x608c0, 0x1, 0x2005, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x4, 0x6}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0x4, 0x4, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x16, 0x11, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ffffc, 0x0, 0x0, 0x0, 0x20}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@map_fd={0x18, 0xa, 0x1, 0x0, r2}], {{0x5, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x88}}}, &(0x7f0000000140)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b80)={0x0, 0xffffffff}, 0xc) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000bc0), 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') read$FUSE(r5, &(0x7f0000000c80)={0x2020}, 0x2020) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r6}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2f, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000c00)={0x3, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000cc0)={0x6, 0x1, &(0x7f0000000940)=@raw=[@call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000980)='GPL\x00', 0x2, 0x7d, &(0x7f00000009c0)=""/125, 0x41100, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0xd, 0x4, 0x81}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[r0, r1, 0x1, r2, r3, r4, r5, r6, r7], &(0x7f0000000c80), 0x10, 0x8}, 0x94) syz_usb_connect(0x3, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230848390102030109025200010000000009044000000e0100000a2406", @ANYRESOCT=0x0], 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r8, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r8, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0xf3, [0x100000001, 0x8, 0x6, 0x4, 0x2, 0x7], 0xa, &(0x7f00000001c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000280)=""/243}, &(0x7f0000000400)=0x78) r10 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x60, 0x800) setsockopt$nfc_llcp_NFC_LLCP_RW(r10, 0x118, 0x0, &(0x7f0000000140)=0x6, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000780)={{0x1, 0x1, 0x18, r8, {0x8}}, './file0\x00'}) setsockopt$EBT_SO_SET_COUNTERS(r11, 0x0, 0x81, &(0x7f0000000880)={'broute\x00', 0x0, 0x0, 0x0, [0xba, 0x4, 0x9, 0x101, 0x4, 0x7fffffff], 0x4, &(0x7f00000007c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x0, [{}, {}, {}, {}]}, 0xb8) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r13 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001517ee40f00a057a00f6000203010902120001000000000904000000ff"], 0x0) syz_usb_control_io$lan78xx(r13, 0x0, &(0x7f00000002c0)={0x34, &(0x7f0000000100)={0x20, 0x16, 0x12, "5c60f69610b49547e054714461917772b3f8"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r13, &(0x7f00000004c0)={0x14, &(0x7f0000000440)={0x0, 0x23, 0x10, {0x10, 0x30, "7543ad1677db62019e26f400bcd9"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}}, &(0x7f0000000700)={0x44, &(0x7f0000000500)={0x40, 0x0, 0x2, "1029"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000005c0)={0x20, 0x81, 0x1, "13"}, &(0x7f0000000600)={0x20, 0x82, 0x1, "04"}, &(0x7f0000000640)={0x20, 0x83, 0x1, "ae"}, &(0x7f0000000680)={0x20, 0x84, 0x3, "33a550"}, &(0x7f00000006c0)={0x20, 0x85, 0x3, "6f8e9e"}}) 908.80378ms ago: executing program 2 (id=1063): r0 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000440)={0x0, "3ceded740f30b09217a0371ef3f9856d09ee1cdab26361bcd455b211d73c2b1cac23039e3565f21d68614f38ed4e3a9277f886fa719ced4c379075314283b649", 0x10}, 0x48, 0xfffffffffffffffb) keyctl$update(0x2, r0, &(0x7f0000000240)="4ce029d527453f8622efaa5aa62d94eddec01cee2693a572171ad1ccdfe7ec972c9f635768e2ed8abeea52bac2267ed31112d2305b557e5b3a847851699a0baab36faa5735bb7dca39", 0x49) 774.517076ms ago: executing program 4 (id=1064): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@deltaction={0x128, 0x31, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2302}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x429}}]}, @TCA_ACT_TAB={0x60, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0x10, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xe}}]}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x4}]}, 0x128}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) write(r0, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) (fail_nth: 3) 520.727382ms ago: executing program 2 (id=1065): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000080e372208c106801b284010203110902240001000010000904020002f8fd00000905060200020d0006"], 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x15e, 0x0) syz_usb_disconnect(0xffffffffffffffff) 198.374371ms ago: executing program 4 (id=1066): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, 0x0, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) listen(r1, 0x0) r2 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r2, &(0x7f0000000080)={&(0x7f0000000100)=@name, 0x10, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c) accept4$nfc_llcp(r1, 0x0, 0x0, 0x0) sendmsg$tipc(r2, &(0x7f0000000640)={&(0x7f0000000380), 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) readv(r0, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc0145b0e, &(0x7f0000000000)) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000380)={r4, &(0x7f0000000080)='\x00', 0x111000, &(0x7f00000002c0)={@_ha_fsid={[0x37400, 0x3]}, {0x1000, 0x1, 0x5, 0xffffffff}}, 0x22, &(0x7f0000000300)={@_ha_fsid}, &(0x7f0000000340)=0x6}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000), 0x4) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x1e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x17d4}}, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xe0e}, {0xa, 0x4e1e, 0xf3, @remote, 0x80000000}, 0xffffffffffffffff, 0x9}}, 0x48) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x4e23, 0x6, @loopback, 0x3}, 0x1c) 0s ago: executing program 4 (id=1067): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], 0x0, 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280), &(0x7f0000000380)=0x8) kernel console output (not intermixed with test programs): 52] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 299.907979][ T7952] Call Trace: [ 299.907994][ T7952] [ 299.908010][ T7952] dump_stack_lvl+0xe8/0x150 [ 299.908080][ T7952] should_fail_ex+0x46b/0x600 [ 299.908150][ T7952] _copy_from_iter+0x1d3/0x1670 [ 299.908229][ T7952] ? trace_kmem_cache_alloc+0x29/0xe0 [ 299.908281][ T7952] ? __alloc_skb+0x27d/0x7d0 [ 299.908304][ T7952] ? __pfx__copy_from_iter+0x10/0x10 [ 299.908334][ T7952] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 299.908364][ T7952] ? __alloc_skb+0x27d/0x7d0 [ 299.908393][ T7952] ? netlink_sendmsg+0x650/0xb40 [ 299.908416][ T7952] ? skb_put+0x11b/0x210 [ 299.908443][ T7952] netlink_sendmsg+0x6c0/0xb40 [ 299.908476][ T7952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.908507][ T7952] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.908547][ T7952] ____sys_sendmsg+0x94c/0x9c0 [ 299.908582][ T7952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.908619][ T7952] ? import_iovec+0x73/0xa0 [ 299.908644][ T7952] ___sys_sendmsg+0x2a5/0x360 [ 299.908670][ T7952] ? __lock_acquire+0x6b5/0x2cf0 [ 299.908698][ T7952] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.908732][ T7952] ? kstrtouint+0x6e/0xe0 [ 299.908787][ T7952] ? __fget_files+0x2a/0x420 [ 299.908811][ T7952] ? __fget_files+0x3a6/0x420 [ 299.908847][ T7952] __sys_sendmmsg+0x282/0x4e0 [ 299.908880][ T7952] ? __pfx___sys_sendmmsg+0x10/0x10 [ 299.908918][ T7952] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 299.908959][ T7952] ? ksys_write+0x248/0x270 [ 299.908993][ T7952] ? __pfx_ksys_write+0x10/0x10 [ 299.909030][ T7952] __x64_sys_sendmmsg+0xa0/0xc0 [ 299.909058][ T7952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.909081][ T7952] do_syscall_64+0x15f/0xf80 [ 299.909111][ T7952] ? trace_irq_disable+0x3b/0x140 [ 299.909145][ T7952] ? clear_bhb_loop+0x40/0x90 [ 299.909172][ T7952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.909194][ T7952] RIP: 0033:0x7f580453c819 [ 299.909214][ T7952] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.909234][ T7952] RSP: 002b:00007f580278e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 299.909264][ T7952] RAX: ffffffffffffffda RBX: 00007f58047b5fa0 RCX: 00007f580453c819 [ 299.909281][ T7952] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 299.909295][ T7952] RBP: 00007f580278e090 R08: 0000000000000000 R09: 0000000000000000 [ 299.909309][ T7952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.909321][ T7952] R13: 00007f58047b6038 R14: 00007f58047b5fa0 R15: 00007ffd3eb03288 [ 299.909363][ T7952] [ 299.922164][ T9] etas_es58x 2-1:0.2: Disconnecting syz syz [ 301.440047][ T37] audit: type=1326 audit(1776424742.192:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7959 comm="syz.3.592" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f580453c819 code=0x0 [ 301.712059][ T6037] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 301.787396][ T7971] netlink: 56 bytes leftover after parsing attributes in process `syz.4.595'. [ 301.787550][ T7971] netlink: 16 bytes leftover after parsing attributes in process `syz.4.595'. [ 301.842740][ T6037] usb 3-1: device descriptor read/64, error -71 [ 301.866972][ T7971] program syz.4.595 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.946458][ T6418] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 302.092835][ T6037] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 302.167482][ T6418] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.167511][ T6418] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.173842][ T6418] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.173873][ T6418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.173894][ T6418] usb 1-1: Product: syz [ 302.173909][ T6418] usb 1-1: Manufacturer: syz [ 302.173924][ T6418] usb 1-1: SerialNumber: syz [ 302.250764][ T6418] usb 1-1: 0:2 : does not exist [ 302.302806][ T6037] usb 3-1: device descriptor read/64, error -71 [ 302.423629][ T6037] usb usb3-port1: attempt power cycle [ 302.788590][ T7983] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 302.788659][ T7983] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 302.809155][ T7983] vhci_hcd vhci_hcd.0: Device attached [ 303.573002][ T9] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 303.811129][ T7984] vhci_hcd: connection closed [ 303.885051][ T7986] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 303.885455][ T1381] vhci_hcd vhci_hcd.3: stop threads [ 303.885487][ T1381] vhci_hcd vhci_hcd.3: release socket [ 303.885837][ T1381] vhci_hcd vhci_hcd.3: disconnect device [ 304.346987][ T6418] usb 1-1: USB disconnect, device number 25 [ 304.692747][ T6037] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 304.773214][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 304.848634][ T6037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.848672][ T6037] usb 5-1: New USB device found, idVendor=0b05, idProduct=1afe, bcdDevice= 0.00 [ 304.848689][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.942815][ T6037] usb 5-1: config 0 descriptor?? [ 305.032712][ T5930] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 305.200540][ T5930] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 305.200572][ T5930] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.200593][ T5930] usb 3-1: config 0 has no interface number 0 [ 305.259379][ T5930] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 305.259413][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.259435][ T5930] usb 3-1: Product: syz [ 305.259451][ T5930] usb 3-1: Manufacturer: syz [ 305.259465][ T5930] usb 3-1: SerialNumber: syz [ 305.301240][ T8006] netlink: 'syz.0.602': attribute type 5 has an invalid length. [ 305.367610][ T8006] ip6erspan0: entered promiscuous mode [ 305.372852][ T6013] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 305.448082][ T6037] hid (null): unknown global tag 0xe [ 305.448111][ T6037] hid (null): invalid report_count 29795 [ 305.448123][ T6037] hid (null): unknown global tag 0xe [ 305.454496][ T5930] usb 3-1: config 0 descriptor?? [ 305.457992][ T6037] hid (null): usage index exceeded [ 305.525775][ T6013] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 305.525806][ T6013] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 305.525826][ T6013] usb 4-1: config 0 has no interface number 0 [ 305.532120][ T6013] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 305.532151][ T6013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.532172][ T6013] usb 4-1: Product: syz [ 305.532186][ T6013] usb 4-1: Manufacturer: syz [ 305.532202][ T6013] usb 4-1: SerialNumber: syz [ 305.600634][ T5930] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 305.642829][ T6013] usb 4-1: config 0 descriptor?? [ 305.643777][ T6037] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0 [ 305.643813][ T6037] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0 [ 305.643850][ T6037] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0 [ 305.643878][ T6037] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0 [ 305.643905][ T6037] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0 [ 305.643932][ T6037] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0 [ 305.643961][ T6037] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0 [ 305.643989][ T6037] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0 [ 305.644016][ T6037] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0 [ 305.644042][ T6037] hid-generic 0003:0B05:1AFE.0007: unknown main item tag 0x0 [ 305.651105][ T6013] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 305.672445][ T6037] hid-generic 0003:0B05:1AFE.0007: unknown global tag 0xe [ 305.672511][ T6037] hid-generic 0003:0B05:1AFE.0007: item 0 1 1 14 parsing failed [ 305.795681][ T6037] hid-generic 0003:0B05:1AFE.0007: probe with driver hid-generic failed with error -22 [ 305.947224][ T8000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.947844][ T8000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.951530][ T6037] usb 5-1: USB disconnect, device number 13 [ 306.105974][ T6418] IPVS: starting estimator thread 0... [ 306.193073][ T8018] IPVS: using max 9 ests per chain, 21600 per kthread [ 306.215785][ T8008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.231666][ T8008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.320913][ T5930] usb 3-1: USB disconnect, device number 18 [ 306.680324][ T8023] tipc: New replicast peer: 255.255.255.255 [ 306.681686][ T8023] tipc: Enabled bearer , priority 10 [ 306.682531][ T8023] netlink: 12 bytes leftover after parsing attributes in process `syz.0.604'. [ 306.682547][ T8023] tipc: Disabling bearer [ 306.792095][ T8027] overlay: Bad value for 'nfs_export' [ 307.022097][ T37] audit: type=1326 audit(1776424747.772:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8032 comm="syz.1.607" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff2f1cfc819 code=0x0 [ 307.044361][ T5930] usb 4-1: USB disconnect, device number 12 [ 307.562753][ T6037] usb 5-1: new low-speed USB device number 14 using dummy_hcd [ 307.732808][ T6037] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 307.732838][ T6037] usb 5-1: config 0 has no interface number 0 [ 307.732884][ T6037] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 307.732916][ T6037] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 307.732944][ T6037] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 307.732970][ T6037] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 307.732997][ T6037] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 307.733025][ T6037] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 307.733067][ T6037] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 307.733090][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.783096][ T9] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 308.900637][ T8055] netlink: 84 bytes leftover after parsing attributes in process `syz.0.610'. [ 308.900716][ T8055] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 309.362235][ T6037] usb 5-1: config 0 descriptor?? [ 309.368203][ T8040] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 309.368332][ T8040] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 309.399542][ T6037] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 309.711360][ T8062] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 309.711421][ T8062] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 309.711870][ T8062] vhci_hcd vhci_hcd.0: Device attached [ 310.430519][ T6013] usb 37-1: new low-speed USB device number 5 using vhci_hcd [ 310.716417][ T8064] vhci_hcd: connection reset by peer [ 310.717441][ T1393] vhci_hcd vhci_hcd.2: stop threads [ 310.717508][ T1393] vhci_hcd vhci_hcd.2: release socket [ 310.717720][ T1393] vhci_hcd vhci_hcd.2: disconnect device [ 311.329641][ T5887] usb 5-1: USB disconnect, device number 14 [ 311.389782][ T5887] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 312.606992][ T9] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 312.775902][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 312.775935][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 312.775962][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 312.776101][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 312.776130][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 312.846608][ T9] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 312.846648][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.846670][ T9] usb 1-1: Product: syz [ 312.846686][ T9] usb 1-1: Manufacturer: syz [ 312.846702][ T9] usb 1-1: SerialNumber: syz [ 312.954309][ T9] usb 1-1: config 0 descriptor?? [ 312.955401][ T8088] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 313.003216][ T8101] netlink: 12 bytes leftover after parsing attributes in process `syz.1.620'. [ 313.070877][ T9] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input18 [ 313.197248][ C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 313.540837][ T9] usb 1-1: USB disconnect, device number 26 [ 314.561030][ T8109] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 314.561061][ T8109] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 314.561334][ T8109] vhci_hcd vhci_hcd.0: Device attached [ 314.935258][ T8110] vhci_hcd: connection closed [ 314.942174][ T50] vhci_hcd vhci_hcd.3: stop threads [ 314.942201][ T50] vhci_hcd vhci_hcd.3: release socket [ 314.942262][ T50] vhci_hcd vhci_hcd.3: disconnect device [ 314.951835][ T5930] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 314.951921][ T5930] usb 39-1: enqueue for inactive port 0 [ 315.032857][ T5930] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 315.493225][ T8098] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 315.493378][ T8098] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 315.622808][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 315.622935][ T6013] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 315.715173][ T8098] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 315.715334][ T8098] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 315.831110][ T8098] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 315.831231][ T8098] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 315.924562][ T8098] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 315.924672][ T8098] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 315.988706][ T8098] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 316.228114][ T8122] netlink: 56 bytes leftover after parsing attributes in process `syz.2.627'. [ 316.303074][ T9] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 316.305116][ T5898] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 316.306088][ T8122] program syz.2.627 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 316.455609][ T9] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 316.455640][ T9] usb 1-1: config 0 has no interface number 0 [ 316.455685][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 316.455708][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 316.455736][ T9] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 316.455761][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 316.455787][ T9] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 316.455813][ T9] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 316.455856][ T9] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 316.455880][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.461048][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 316.461088][ T5898] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.461124][ T5898] usb 4-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 316.461148][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.626342][ T9] usb 1-1: config 0 descriptor?? [ 316.627344][ T8106] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 316.627473][ T8106] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 316.660443][ T5898] usb 4-1: config 0 descriptor?? [ 316.798764][ T9] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 316.974144][ T6418] usb 1-1: USB disconnect, device number 27 [ 316.996475][ T6418] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 317.390533][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.390608][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.987483][ T60] Bluetooth: hci3: command 0x0406 tx timeout [ 318.603223][ T60] Bluetooth: hci1: command 0x0406 tx timeout [ 318.604254][ T60] Bluetooth: hci3: unexpected event for opcode 0x0405 [ 318.662861][ T60] Bluetooth: hci2: command 0x0406 tx timeout [ 318.662910][ T60] Bluetooth: hci4: command 0x0405 tx timeout [ 318.790686][ T5898] hid_parser_main: 5 callbacks suppressed [ 318.790713][ T5898] razer 0003:1532:010E.0008: unknown main item tag 0x0 [ 318.790745][ T5898] razer 0003:1532:010E.0008: unknown main item tag 0x0 [ 318.790772][ T5898] razer 0003:1532:010E.0008: unknown main item tag 0x0 [ 318.799050][ T5898] razer 0003:1532:010E.0008: unknown main item tag 0x0 [ 318.799113][ T5898] razer 0003:1532:010E.0008: unknown main item tag 0x0 [ 319.205432][ T8151] fuse: Unknown parameter '0x0000000000000004' [ 319.490871][ T5898] razer 0003:1532:010E.0008: failed to enable macro keys: -71 [ 319.624162][ T5898] razer 0003:1532:010E.0008: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.3-1/input0 [ 319.663159][ T5898] usb 4-1: USB disconnect, device number 13 [ 320.072518][ T8162] fido_id[8162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 320.264581][ T5898] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 320.438615][ T5898] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 320.438647][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.438668][ T5898] usb 4-1: config 0 has no interface number 0 [ 320.442137][ T5898] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 320.442183][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.442203][ T5898] usb 4-1: Product: syz [ 320.442218][ T5898] usb 4-1: Manufacturer: syz [ 320.442234][ T5898] usb 4-1: SerialNumber: syz [ 320.520027][ T5898] usb 4-1: config 0 descriptor?? [ 320.552215][ T5898] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 320.752872][ T5122] Bluetooth: hci4: command 0x0405 tx timeout [ 320.752914][ T5122] Bluetooth: hci2: command 0x0406 tx timeout [ 320.824827][ T8158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.840067][ T8158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.867903][ T9] usb 4-1: USB disconnect, device number 14 [ 321.653997][ T8194] sctp: [Deprecated]: syz.4.645 (pid 8194) Use of int in max_burst socket option. [ 321.653997][ T8194] Use struct sctp_assoc_value instead [ 322.653581][ T31] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 322.779932][ T8199] fuse: Unknown parameter '0x0000000000000004' [ 322.820440][ T31] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 322.820472][ T31] usb 1-1: config 0 has no interface number 0 [ 322.820520][ T31] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 322.820545][ T31] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 322.820572][ T31] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 322.820598][ T31] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 322.820626][ T31] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 322.820654][ T31] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 322.820698][ T31] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 322.820722][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.822928][ T60] Bluetooth: hci4: command 0x0405 tx timeout [ 322.949931][ T31] usb 1-1: config 0 descriptor?? [ 322.951293][ T8185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 322.951508][ T8185] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 323.001630][ T31] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 323.302993][ T31] usb 1-1: USB disconnect, device number 28 [ 324.209277][ T31] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 326.307945][ T8235] netlink: 'syz.4.658': attribute type 12 has an invalid length. [ 326.347115][ T31] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 326.546423][ T31] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 326.546455][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.546474][ T31] usb 4-1: config 0 has no interface number 0 [ 326.565573][ T31] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 326.565606][ T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.565628][ T31] usb 4-1: Product: syz [ 326.565643][ T31] usb 4-1: Manufacturer: syz [ 326.565658][ T31] usb 4-1: SerialNumber: syz [ 326.645376][ T31] usb 4-1: config 0 descriptor?? [ 326.712463][ T31] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 326.973448][ T8240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.998609][ T8240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.016223][ T44] usb 4-1: USB disconnect, device number 15 [ 327.072758][ T31] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 327.225098][ T31] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.225127][ T31] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 327.229903][ T31] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 327.229934][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.229955][ T31] usb 5-1: Product: syz [ 327.229971][ T31] usb 5-1: Manufacturer: syz [ 327.229985][ T31] usb 5-1: SerialNumber: syz [ 327.337804][ T31] usb 5-1: 0:2 : does not exist [ 327.473258][ T6013] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 327.651129][ T6013] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.651189][ T6013] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.651219][ T6013] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.651261][ T6013] usb 2-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 327.651285][ T6013] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.655689][ T8245] delete_channel: no stack [ 327.776882][ T6013] usb 2-1: config 0 descriptor?? [ 327.828745][ T7431] usb 5-1: USB disconnect, device number 15 [ 328.151973][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.3.665'. [ 328.152047][ T8263] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 328.266480][ T6013] wacom 0003:056A:0010.0009: unknown main item tag 0x0 [ 328.266520][ T6013] wacom 0003:056A:0010.0009: unknown main item tag 0x0 [ 328.266547][ T6013] wacom 0003:056A:0010.0009: unknown main item tag 0x1 [ 328.266574][ T6013] wacom 0003:056A:0010.0009: unknown main item tag 0x0 [ 328.266601][ T6013] wacom 0003:056A:0010.0009: unknown main item tag 0x3 [ 328.535612][ T31] usb 2-1: USB disconnect, device number 24 [ 330.244066][ T8277] tipc: Started in network mode [ 330.244103][ T8277] tipc: Node identity ac14140f, cluster identity 4711 [ 330.244465][ T8277] tipc: New replicast peer: 255.255.255.255 [ 330.268867][ T8277] tipc: Enabled bearer , priority 10 [ 330.280638][ T8277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.669'. [ 330.280714][ T8277] tipc: Disabling bearer [ 330.680065][ T8287] tipc: Started in network mode [ 330.680100][ T8287] tipc: Node identity ac14140f, cluster identity 4711 [ 330.680471][ T8287] tipc: New replicast peer: 255.255.255.255 [ 330.686441][ T8288] FAULT_INJECTION: forcing a failure. [ 330.686441][ T8288] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.686478][ T8288] CPU: 0 UID: 0 PID: 8288 Comm: syz.3.674 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 330.686502][ T8288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 330.686531][ T8288] Call Trace: [ 330.686544][ T8288] [ 330.686585][ T8288] dump_stack_lvl+0xe8/0x150 [ 330.686767][ T8288] should_fail_ex+0x46b/0x600 [ 330.686869][ T8288] _copy_from_user+0x2d/0xb0 [ 330.686943][ T8288] bpf_test_init+0xd8/0x150 [ 330.687020][ T8288] bpf_prog_test_run_xdp+0x529/0x1160 [ 330.687131][ T8288] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 330.687219][ T8288] ? __fget_files+0x2a/0x420 [ 330.687299][ T8288] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 330.687375][ T8288] bpf_prog_test_run+0x2cd/0x340 [ 330.687443][ T8288] __sys_bpf+0x643/0x950 [ 330.687543][ T8288] ? __pfx___sys_bpf+0x10/0x10 [ 330.687622][ T8288] ? rt_mutex_slowunlock+0x1cb/0x300 [ 330.687743][ T8288] ? ksys_write+0x248/0x270 [ 330.687833][ T8288] ? __pfx_ksys_write+0x10/0x10 [ 330.687924][ T8288] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.688002][ T8288] __x64_sys_bpf+0x7c/0x90 [ 330.688063][ T8288] do_syscall_64+0x15f/0xf80 [ 330.688110][ T8288] ? trace_irq_disable+0x3b/0x140 [ 330.688229][ T8288] ? clear_bhb_loop+0x40/0x90 [ 330.688308][ T8288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.688372][ T8288] RIP: 0033:0x7f580453c819 [ 330.688429][ T8288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.688484][ T8288] RSP: 002b:00007f580278e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 330.688542][ T8288] RAX: ffffffffffffffda RBX: 00007f58047b5fa0 RCX: 00007f580453c819 [ 330.688586][ T8288] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 330.688628][ T8288] RBP: 00007f580278e090 R08: 0000000000000000 R09: 0000000000000000 [ 330.688664][ T8288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.688698][ T8288] R13: 00007f58047b6038 R14: 00007f58047b5fa0 R15: 00007ffd3eb03288 [ 330.688788][ T8288] [ 331.096073][ T8287] tipc: Enabled bearer , priority 10 [ 331.096211][ T8290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.673'. [ 331.096230][ T8290] tipc: Disabling bearer [ 331.262842][ T31] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 331.419426][ T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.419457][ T31] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.575323][ T8298] netlink: 8 bytes leftover after parsing attributes in process `syz.3.678'. [ 332.157976][ T31] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 332.158012][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.158035][ T31] usb 3-1: Product: syz [ 332.158050][ T31] usb 3-1: Manufacturer: syz [ 332.158067][ T31] usb 3-1: SerialNumber: syz [ 332.263533][ T31] usb 3-1: 0:2 : does not exist [ 332.997194][ T8305] netlink: 76 bytes leftover after parsing attributes in process `syz.0.679'. [ 332.997271][ T8305] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 334.158901][ T8308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.680'. [ 334.235965][ T31] usb 3-1: USB disconnect, device number 19 [ 334.533139][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.732891][ T8314] netlink: 68 bytes leftover after parsing attributes in process `syz.0.683'. [ 336.931796][ T8350] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 336.931827][ T8350] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 336.961254][ T8350] vhci_hcd vhci_hcd.0: Device attached [ 337.092435][ T8353] program syz.4.692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 337.232759][ T6418] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 337.372869][ T44] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 337.534382][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 337.538020][ T44] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 337.538050][ T44] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 337.538077][ T44] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.542081][ T44] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 337.542112][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.542134][ T44] usb 5-1: Product: syz [ 337.542149][ T44] usb 5-1: Manufacturer: syz [ 337.542165][ T44] usb 5-1: SerialNumber: syz [ 337.642681][ T44] usb 5-1: config 0 descriptor?? [ 337.774272][ T8351] vhci_hcd: connection reset by peer [ 337.830937][ T12] vhci_hcd vhci_hcd.0: stop threads [ 337.830971][ T12] vhci_hcd vhci_hcd.0: release socket [ 337.831338][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 338.103780][ T44] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 338.426092][ T8362] FAULT_INJECTION: forcing a failure. [ 338.426092][ T8362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.426122][ T8362] CPU: 1 UID: 0 PID: 8362 Comm: syz.3.697 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 338.426140][ T8362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 338.426151][ T8362] Call Trace: [ 338.426157][ T8362] [ 338.426164][ T8362] dump_stack_lvl+0xe8/0x150 [ 338.426194][ T8362] should_fail_ex+0x46b/0x600 [ 338.426222][ T8362] _copy_from_iter+0x1d3/0x1670 [ 338.426253][ T8362] ? trace_kmem_cache_alloc+0x29/0xe0 [ 338.426275][ T8362] ? __alloc_skb+0x27d/0x7d0 [ 338.426292][ T8362] ? __pfx__copy_from_iter+0x10/0x10 [ 338.426315][ T8362] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 338.426337][ T8362] ? __alloc_skb+0x27d/0x7d0 [ 338.426357][ T8362] ? netlink_sendmsg+0x650/0xb40 [ 338.426374][ T8362] ? skb_put+0x11b/0x210 [ 338.426402][ T8362] netlink_sendmsg+0x6c0/0xb40 [ 338.426426][ T8362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.426445][ T8362] ? unwind_get_return_address+0x4d/0x90 [ 338.426499][ T8362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 338.426532][ T8362] ____sys_sendmsg+0x94c/0x9c0 [ 338.426564][ T8362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.426600][ T8362] ? import_iovec+0x73/0xa0 [ 338.426630][ T8362] ___sys_sendmsg+0x2a5/0x360 [ 338.426649][ T8362] ? __lock_acquire+0x6b5/0x2cf0 [ 338.426669][ T8362] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.426713][ T8362] ? __fget_files+0x2a/0x420 [ 338.426730][ T8362] ? __fget_files+0x3a6/0x420 [ 338.426755][ T8362] __x64_sys_sendmsg+0x1c3/0x2a0 [ 338.426776][ T8362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 338.426802][ T8362] ? __pfx_ksys_write+0x10/0x10 [ 338.426830][ T8362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.426846][ T8362] do_syscall_64+0x15f/0xf80 [ 338.426868][ T8362] ? trace_irq_disable+0x3b/0x140 [ 338.426892][ T8362] ? clear_bhb_loop+0x40/0x90 [ 338.426911][ T8362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.426927][ T8362] RIP: 0033:0x7f580453c819 [ 338.426941][ T8362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.426955][ T8362] RSP: 002b:00007f580278e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.426971][ T8362] RAX: ffffffffffffffda RBX: 00007f58047b5fa0 RCX: 00007f580453c819 [ 338.426982][ T8362] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 338.426992][ T8362] RBP: 00007f580278e090 R08: 0000000000000000 R09: 0000000000000000 [ 338.427002][ T8362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.427011][ T8362] R13: 00007f58047b6038 R14: 00007f58047b5fa0 R15: 00007ffd3eb03288 [ 338.427035][ T8362] [ 339.215791][ T44] usb 5-1: USB disconnect, device number 16 [ 339.234509][ T7431] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 339.382765][ T7431] usb 3-1: Using ep0 maxpacket: 16 [ 339.387321][ T7431] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 339.387377][ T7431] usb 3-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 339.387419][ T7431] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.390476][ T8384] FAULT_INJECTION: forcing a failure. [ 339.390476][ T8384] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 339.390510][ T8384] CPU: 1 UID: 0 PID: 8384 Comm: syz.1.704 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 339.390535][ T8384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 339.390548][ T8384] Call Trace: [ 339.390564][ T8384] [ 339.390574][ T8384] dump_stack_lvl+0xe8/0x150 [ 339.390614][ T8384] should_fail_ex+0x46b/0x600 [ 339.390653][ T8384] _copy_to_user+0x31/0xb0 [ 339.390679][ T8384] simple_read_from_buffer+0xe1/0x170 [ 339.390710][ T8384] proc_fail_nth_read+0x1be/0x230 [ 339.390740][ T8384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.390771][ T8384] ? rw_verify_area+0x2ac/0x4e0 [ 339.390799][ T8384] ? __fget_files+0x2a/0x420 [ 339.390822][ T8384] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 339.390850][ T8384] vfs_read+0x212/0xa80 [ 339.390890][ T8384] ? __pfx_vfs_read+0x10/0x10 [ 339.390921][ T8384] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 339.390955][ T8384] ? lockdep_hardirqs_on+0x7a/0x110 [ 339.390986][ T8384] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 339.391019][ T8384] ? mutex_lock_nested+0x152/0x1d0 [ 339.391041][ T8384] ? fdget_pos+0x252/0x320 [ 339.391075][ T8384] ksys_read+0x156/0x270 [ 339.391140][ T8384] ? __pfx_ksys_read+0x10/0x10 [ 339.391179][ T8384] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.391203][ T8384] do_syscall_64+0x15f/0xf80 [ 339.391233][ T8384] ? trace_irq_disable+0x3b/0x140 [ 339.391266][ T8384] ? clear_bhb_loop+0x40/0x90 [ 339.391292][ T8384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.391313][ T8384] RIP: 0033:0x7ff2f1cbd04e [ 339.391332][ T8384] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 339.391350][ T8384] RSP: 002b:00007ff2eff4dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 339.391372][ T8384] RAX: ffffffffffffffda RBX: 00007ff2eff4e6c0 RCX: 00007ff2f1cbd04e [ 339.391387][ T8384] RDX: 000000000000000f RSI: 00007ff2eff4e0a0 RDI: 0000000000000005 [ 339.391399][ T8384] RBP: 00007ff2eff4e090 R08: 0000000000000000 R09: 0000000000000000 [ 339.391412][ T8384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.391425][ T8384] R13: 00007ff2f1f76038 R14: 00007ff2f1f75fa0 R15: 00007ffcf10ebe68 [ 339.391458][ T8384] [ 339.491492][ T7431] usb 3-1: config 0 descriptor?? [ 339.592003][ T8370] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 340.057993][ T7431] hid (null): unknown global tag 0xc [ 340.210618][ T8389] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 340.210649][ T8389] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 340.212115][ T8389] vhci_hcd vhci_hcd.0: Device attached [ 340.484838][ T31] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 340.813507][ T7431] logitech-djreceiver 0003:046D:C52B.000A: unknown main item tag 0x0 [ 340.813547][ T7431] logitech-djreceiver 0003:046D:C52B.000A: unknown main item tag 0x0 [ 340.813576][ T7431] logitech-djreceiver 0003:046D:C52B.000A: unknown main item tag 0x0 [ 340.813604][ T7431] logitech-djreceiver 0003:046D:C52B.000A: unknown main item tag 0x0 [ 340.813631][ T7431] logitech-djreceiver 0003:046D:C52B.000A: unknown main item tag 0x0 [ 340.813659][ T7431] logitech-djreceiver 0003:046D:C52B.000A: unknown main item tag 0x0 [ 340.813686][ T7431] logitech-djreceiver 0003:046D:C52B.000A: unknown main item tag 0x4 [ 340.813716][ T7431] logitech-djreceiver 0003:046D:C52B.000A: unknown global tag 0xc [ 340.813732][ T7431] logitech-djreceiver 0003:046D:C52B.000A: item 0 2 1 12 parsing failed [ 340.940276][ T8390] vhci_hcd: connection reset by peer [ 340.940902][ T68] vhci_hcd vhci_hcd.4: stop threads [ 340.940930][ T68] vhci_hcd vhci_hcd.4: release socket [ 340.969137][ T68] vhci_hcd vhci_hcd.4: disconnect device [ 341.010801][ T7431] logitech-djreceiver 0003:046D:C52B.000A: logi_dj_probe: parse failed [ 341.010905][ T7431] logitech-djreceiver 0003:046D:C52B.000A: probe with driver logitech-djreceiver failed with error -22 [ 341.289408][ T8401] overlayfs: overlapping lowerdir path [ 341.359030][ T8402] overlayfs: overlapping lowerdir path [ 341.516117][ T7431] usb 3-1: USB disconnect, device number 20 [ 342.069502][ T8419] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 342.228679][ T8415] tipc: New replicast peer: 255.255.255.255 [ 342.229384][ T8415] tipc: Enabled bearer , priority 10 [ 342.230199][ T8415] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 342.230220][ T8415] tipc: Disabling bearer [ 342.332973][ T6418] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 342.339212][ T8430] overlay: Bad value for 'nfs_export' [ 342.743179][ T7431] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 342.895605][ T7431] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.946991][ T7431] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 342.947023][ T7431] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.947045][ T7431] usb 5-1: Product: syz [ 342.947059][ T7431] usb 5-1: Manufacturer: syz [ 342.947073][ T7431] usb 5-1: SerialNumber: syz [ 344.853326][ T6037] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 344.920660][ T8456] FAULT_INJECTION: forcing a failure. [ 344.920660][ T8456] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.920698][ T8456] CPU: 1 UID: 0 PID: 8456 Comm: syz.0.719 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 344.920723][ T8456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 344.920737][ T8456] Call Trace: [ 344.920746][ T8456] [ 344.920755][ T8456] dump_stack_lvl+0xe8/0x150 [ 344.920797][ T8456] should_fail_ex+0x46b/0x600 [ 344.920835][ T8456] _copy_from_iter+0x1d3/0x1670 [ 344.920879][ T8456] ? trace_kmem_cache_alloc+0x29/0xe0 [ 344.920915][ T8456] ? __alloc_skb+0x27d/0x7d0 [ 344.920940][ T8456] ? __pfx__copy_from_iter+0x10/0x10 [ 344.920972][ T8456] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 344.921002][ T8456] ? __alloc_skb+0x27d/0x7d0 [ 344.921031][ T8456] ? netlink_sendmsg+0x650/0xb40 [ 344.921054][ T8456] ? skb_put+0x11b/0x210 [ 344.921082][ T8456] netlink_sendmsg+0x6c0/0xb40 [ 344.921116][ T8456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 344.921148][ T8456] ? unwind_get_return_address+0x4d/0x90 [ 344.921177][ T8456] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 344.921212][ T8456] ____sys_sendmsg+0x94c/0x9c0 [ 344.921246][ T8456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.921284][ T8456] ? import_iovec+0x73/0xa0 [ 344.921310][ T8456] ___sys_sendmsg+0x2a5/0x360 [ 344.921337][ T8456] ? __lock_acquire+0x6b5/0x2cf0 [ 344.921365][ T8456] ? __pfx____sys_sendmsg+0x10/0x10 [ 344.921431][ T8456] ? __fget_files+0x2a/0x420 [ 344.921454][ T8456] ? __fget_files+0x3a6/0x420 [ 344.921490][ T8456] __x64_sys_sendmsg+0x1c3/0x2a0 [ 344.921521][ T8456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 344.921560][ T8456] ? __pfx_ksys_write+0x10/0x10 [ 344.921599][ T8456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.921623][ T8456] do_syscall_64+0x15f/0xf80 [ 344.921654][ T8456] ? trace_irq_disable+0x3b/0x140 [ 344.921688][ T8456] ? clear_bhb_loop+0x40/0x90 [ 344.921716][ T8456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.921738][ T8456] RIP: 0033:0x7f1f41aec819 [ 344.921759][ T8456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.921777][ T8456] RSP: 002b:00007f1f3fd46028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.921801][ T8456] RAX: ffffffffffffffda RBX: 00007f1f41d65fa0 RCX: 00007f1f41aec819 [ 344.921817][ T8456] RDX: 0000000000008000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 344.921831][ T8456] RBP: 00007f1f3fd46090 R08: 0000000000000000 R09: 0000000000000000 [ 344.921845][ T8456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.921857][ T8456] R13: 00007f1f41d66038 R14: 00007f1f41d65fa0 R15: 00007ffe77c32f98 [ 344.921897][ T8456] [ 345.162720][ T6037] usb 4-1: Using ep0 maxpacket: 16 [ 345.210704][ T6037] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 345.210760][ T6037] usb 4-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 345.210785][ T6037] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.257055][ T6037] usb 4-1: config 0 descriptor?? [ 345.258411][ T8451] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 345.600444][ T7431] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 345.600691][ T7431] cdc_ncm 5-1:1.0: bind() failure [ 345.659830][ T7431] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 345.659890][ T7431] cdc_ncm 5-1:1.1: bind() failure [ 345.784069][ T7431] usb 5-1: USB disconnect, device number 17 [ 346.061113][ T31] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 346.116985][ T6037] hid (null): unknown global tag 0xc [ 346.204049][ T6037] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 346.212142][ T6037] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 346.212181][ T6037] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 346.212209][ T6037] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 346.212237][ T6037] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 346.212265][ T6037] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x0 [ 346.212292][ T6037] logitech-djreceiver 0003:046D:C52B.000B: unknown main item tag 0x4 [ 346.212323][ T6037] logitech-djreceiver 0003:046D:C52B.000B: unknown global tag 0xc [ 346.212341][ T6037] logitech-djreceiver 0003:046D:C52B.000B: item 0 2 1 12 parsing failed [ 346.214887][ T6037] logitech-djreceiver 0003:046D:C52B.000B: logi_dj_probe: parse failed [ 346.214973][ T6037] logitech-djreceiver 0003:046D:C52B.000B: probe with driver logitech-djreceiver failed with error -22 [ 346.424780][ T6037] usb 4-1: USB disconnect, device number 16 [ 346.775943][ T8473] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 346.775973][ T8473] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 346.780720][ T8473] vhci_hcd vhci_hcd.0: Device attached [ 346.895555][ T5806] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 347.033192][ T5930] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 347.063171][ T5806] usb 2-1: Using ep0 maxpacket: 16 [ 347.069439][ T5806] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 347.069490][ T5806] usb 2-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 347.069515][ T5806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.147117][ T5806] usb 2-1: config 0 descriptor?? [ 347.154353][ T8465] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 347.580921][ T8465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.598461][ T8465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.682169][ T8474] vhci_hcd: connection reset by peer [ 347.703564][ T1417] vhci_hcd vhci_hcd.0: stop threads [ 347.703597][ T1417] vhci_hcd vhci_hcd.0: release socket [ 347.703750][ T1417] vhci_hcd vhci_hcd.0: disconnect device [ 347.869097][ T5806] hid (null): unknown global tag 0xc [ 347.981382][ T5806] logitech-djreceiver 0003:046D:C52B.000C: unknown main item tag 0x0 [ 347.987866][ T5806] logitech-djreceiver 0003:046D:C52B.000C: unknown main item tag 0x0 [ 347.987904][ T5806] logitech-djreceiver 0003:046D:C52B.000C: unknown main item tag 0x0 [ 347.987989][ T5806] logitech-djreceiver 0003:046D:C52B.000C: unknown global tag 0xc [ 347.988008][ T5806] logitech-djreceiver 0003:046D:C52B.000C: item 0 2 1 12 parsing failed [ 347.988909][ T5806] logitech-djreceiver 0003:046D:C52B.000C: logi_dj_probe: parse failed [ 347.988998][ T5806] logitech-djreceiver 0003:046D:C52B.000C: probe with driver logitech-djreceiver failed with error -22 [ 348.132439][ T5806] usb 2-1: USB disconnect, device number 25 [ 348.254241][ T8481] IPVS: length: 4096 != 24 [ 348.415995][ T8490] FAULT_INJECTION: forcing a failure. [ 348.415995][ T8490] name failslab, interval 1, probability 0, space 0, times 0 [ 348.416032][ T8490] CPU: 0 UID: 0 PID: 8490 Comm: syz.4.726 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 348.416056][ T8490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 348.416070][ T8490] Call Trace: [ 348.416079][ T8490] [ 348.416088][ T8490] dump_stack_lvl+0xe8/0x150 [ 348.416130][ T8490] should_fail_ex+0x46b/0x600 [ 348.416167][ T8490] should_failslab+0xa8/0x100 [ 348.416202][ T8490] __kmalloc_noprof+0xdf/0x7b0 [ 348.416233][ T8490] ? sock_kmalloc+0xd6/0x160 [ 348.416268][ T8490] sock_kmalloc+0xd6/0x160 [ 348.416300][ T8490] ipv6_sock_ac_join+0x316/0x880 [ 348.416329][ T8490] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 348.416354][ T8490] ? _copy_from_user+0x94/0xb0 [ 348.416381][ T8490] do_ipv6_setsockopt+0x203a/0x3150 [ 348.416407][ T8490] ? get_pid_task+0x20/0x1f0 [ 348.416439][ T8490] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 348.416470][ T8490] ? get_pid_task+0x20/0x1f0 [ 348.416490][ T8490] ? get_pid_task+0x20/0x1f0 [ 348.416525][ T8490] ? __lock_acquire+0x6b5/0x2cf0 [ 348.416553][ T8490] ? do_raw_spin_lock+0x12b/0x2f0 [ 348.416600][ T8490] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 348.416645][ T8490] ? __fget_files+0x2a/0x420 [ 348.416680][ T8490] ? __fget_files+0x2a/0x420 [ 348.416709][ T8490] ipv6_setsockopt+0x59/0x170 [ 348.416736][ T8490] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 348.416774][ T8490] do_sock_setsockopt+0x17c/0x1b0 [ 348.416805][ T8490] __x64_sys_setsockopt+0x143/0x1b0 [ 348.416833][ T8490] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.416857][ T8490] do_syscall_64+0x15f/0xf80 [ 348.416888][ T8490] ? trace_irq_disable+0x3b/0x140 [ 348.416922][ T8490] ? clear_bhb_loop+0x40/0x90 [ 348.416949][ T8490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.416970][ T8490] RIP: 0033:0x7f512886c819 [ 348.416990][ T8490] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.417014][ T8490] RSP: 002b:00007f5126ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 348.417038][ T8490] RAX: ffffffffffffffda RBX: 00007f5128ae5fa0 RCX: 00007f512886c819 [ 348.417054][ T8490] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000003 [ 348.417067][ T8490] RBP: 00007f5126ac6090 R08: 0000000000000020 R09: 0000000000000000 [ 348.417080][ T8490] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.417093][ T8490] R13: 00007f5128ae6038 R14: 00007f5128ae5fa0 R15: 00007ffe5513c6d8 [ 348.417128][ T8490] [ 348.936859][ T8501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.729'. [ 349.185891][ T8501] netlink: 60 bytes leftover after parsing attributes in process `syz.4.729'. [ 351.222861][ T44] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 351.384267][ T44] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.384298][ T44] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.417547][ T44] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.417579][ T44] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.417600][ T44] usb 4-1: Product: syz [ 351.417616][ T44] usb 4-1: Manufacturer: syz [ 351.417632][ T44] usb 4-1: SerialNumber: syz [ 351.597281][ T8538] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 351.597310][ T8538] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 351.883899][ T8538] vhci_hcd vhci_hcd.0: Device attached [ 352.157472][ T5806] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 352.171556][ T44] usb 4-1: 0:2 : does not exist [ 352.182977][ T5930] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 352.997571][ T8542] vhci_hcd: connection reset by peer [ 353.001449][ T1393] vhci_hcd vhci_hcd.1: stop threads [ 353.001482][ T1393] vhci_hcd vhci_hcd.1: release socket [ 353.010493][ T1393] vhci_hcd vhci_hcd.1: disconnect device [ 353.214523][ T37] audit: type=1326 audit(1776424793.972:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8549 comm="syz.0.740" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1f41aec819 code=0x0 [ 353.371196][ T5930] usb 4-1: USB disconnect, device number 17 [ 353.823611][ T8566] netlink: 'syz.2.744': attribute type 3 has an invalid length. [ 354.742830][ T7431] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 354.900309][ T7431] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 354.900340][ T7431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.900360][ T7431] usb 2-1: Product: syz [ 354.900375][ T7431] usb 2-1: Manufacturer: syz [ 354.900399][ T7431] usb 2-1: SerialNumber: syz [ 354.956038][ T7431] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 355.081713][ T6013] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 355.271729][ T8589] kAFS: No cell specified [ 355.701574][ T6418] usb 2-1: USB disconnect, device number 26 [ 355.894434][ T8594] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 355.894463][ T8594] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 355.894563][ T8594] vhci_hcd vhci_hcd.0: Device attached [ 355.967081][ T8598] vhci_hcd: connection closed [ 355.970222][ T1381] vhci_hcd vhci_hcd.0: stop threads [ 355.970256][ T1381] vhci_hcd vhci_hcd.0: release socket [ 355.970306][ T1381] vhci_hcd vhci_hcd.0: disconnect device [ 356.343181][ T6013] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 356.343383][ T6013] ath9k_htc: Failed to initialize the device [ 356.344272][ T6418] usb 2-1: ath9k_htc: USB layer deinitialized [ 356.769875][ T8616] hugetlbfs: syz.2.754 (8616): Using mlock ulimits for SHM_HUGETLB is obsolete [ 357.013088][ T6013] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 357.165778][ T6013] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.165815][ T6013] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.211140][ T6013] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.211175][ T6013] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.211198][ T6013] usb 1-1: Product: syz [ 357.211215][ T6013] usb 1-1: Manufacturer: syz [ 357.211230][ T6013] usb 1-1: SerialNumber: syz [ 357.308641][ T6013] usb 1-1: 0:2 : does not exist [ 357.312755][ T5806] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 357.512755][ T6418] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 357.675260][ T6418] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 357.675294][ T6418] usb 4-1: config 0 has no interface number 0 [ 357.675339][ T6418] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 357.675363][ T6418] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 357.675391][ T6418] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 357.675417][ T6418] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 357.675443][ T6418] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 357.675469][ T6418] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 357.675512][ T6418] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 357.675536][ T6418] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.786671][ T6418] usb 4-1: config 0 descriptor?? [ 357.789637][ T8626] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 357.790107][ T8626] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 357.824974][ T6418] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 357.936035][ T6013] usb 1-1: USB disconnect, device number 29 [ 358.079530][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.773'. [ 358.080841][ T6418] usb 4-1: USB disconnect, device number 18 [ 358.137912][ T6418] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 358.301829][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 358.637775][ T8642] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 358.637806][ T8642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 358.638528][ T8642] vhci_hcd vhci_hcd.0: Device attached [ 358.982933][ T6418] usb 35-1: new low-speed USB device number 4 using vhci_hcd [ 359.490812][ T8643] vhci_hcd: connection reset by peer [ 359.501207][ T1381] vhci_hcd vhci_hcd.1: stop threads [ 359.501235][ T1381] vhci_hcd vhci_hcd.1: release socket [ 359.501298][ T1381] vhci_hcd vhci_hcd.1: disconnect device [ 360.913806][ T6037] usb 2-1: new low-speed USB device number 27 using dummy_hcd [ 361.078367][ T6037] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 361.078398][ T6037] usb 2-1: config 0 has no interface number 0 [ 361.078444][ T6037] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 361.078469][ T6037] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 361.078497][ T6037] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 361.078523][ T6037] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 361.078549][ T6037] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 361.078576][ T6037] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 361.078635][ T6037] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 361.078659][ T6037] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.237368][ T6037] usb 2-1: config 0 descriptor?? [ 361.251790][ T8682] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 361.251935][ T8682] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 361.416995][ T8698] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 361.417017][ T8698] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 361.419862][ T8698] vhci_hcd vhci_hcd.0: Device attached [ 361.700870][ T6037] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 361.708022][ T6037] usb 2-1: USB disconnect, device number 27 [ 361.753460][ T6013] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 362.332092][ T6013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.332130][ T6013] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.332171][ T6013] usb 3-1: New USB device found, idVendor=1532, idProduct=010e, bcdDevice= 0.00 [ 362.332196][ T6013] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.389640][ T8699] vhci_hcd: connection closed [ 362.392786][ T1290] vhci_hcd vhci_hcd.0: stop threads [ 362.392816][ T1290] vhci_hcd vhci_hcd.0: release socket [ 362.392888][ T1290] vhci_hcd vhci_hcd.0: disconnect device [ 362.467317][ T6013] usb 3-1: config 0 descriptor?? [ 362.637026][ T6037] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 362.920586][ T8712] netlink: 'syz.1.802': attribute type 21 has an invalid length. [ 362.920610][ T8712] netlink: 128 bytes leftover after parsing attributes in process `syz.1.802'. [ 362.920696][ T8712] netlink: 'syz.1.802': attribute type 4 has an invalid length. [ 362.920711][ T8712] netlink: 'syz.1.802': attribute type 5 has an invalid length. [ 362.920725][ T8712] netlink: 3 bytes leftover after parsing attributes in process `syz.1.802'. [ 363.039960][ T6013] hid_parser_main: 4 callbacks suppressed [ 363.039979][ T6013] razer 0003:1532:010E.000D: unknown main item tag 0x0 [ 363.040001][ T6013] razer 0003:1532:010E.000D: unknown main item tag 0x0 [ 363.040020][ T6013] razer 0003:1532:010E.000D: unknown main item tag 0x0 [ 363.040038][ T6013] razer 0003:1532:010E.000D: unknown main item tag 0x0 [ 363.040058][ T6013] razer 0003:1532:010E.000D: unknown main item tag 0x0 [ 363.187849][ T60] Bluetooth: hci1: unexpected event for opcode 0x0405 [ 363.904776][ T6013] razer 0003:1532:010E.000D: failed to enable macro keys: -71 [ 363.935523][ T6013] razer 0003:1532:010E.000D: hidraw0: USB HID v0.00 Device [HID 1532:010e] on usb-dummy_hcd.2-1/input0 [ 363.997697][ T6013] usb 3-1: USB disconnect, device number 21 [ 364.035576][ T8729] FAULT_INJECTION: forcing a failure. [ 364.035576][ T8729] name failslab, interval 1, probability 0, space 0, times 0 [ 364.035603][ T8729] CPU: 0 UID: 0 PID: 8729 Comm: syz.2.808 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 364.035642][ T8729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 364.035661][ T8729] Call Trace: [ 364.035677][ T8729] [ 364.035688][ T8729] dump_stack_lvl+0xe8/0x150 [ 364.035731][ T8729] should_fail_ex+0x46b/0x600 [ 364.035775][ T8729] should_failslab+0xa8/0x100 [ 364.035813][ T8729] kmem_cache_alloc_noprof+0x87/0x680 [ 364.035836][ T8729] ? dst_alloc+0x105/0x170 [ 364.035857][ T8729] ? __pfx_ip6_dst_gc+0x10/0x10 [ 364.035883][ T8729] dst_alloc+0x105/0x170 [ 364.035908][ T8729] ip6_pol_route+0xafb/0x13d0 [ 364.035924][ T8729] ? ip6_pol_route+0x160/0x13d0 [ 364.035943][ T8729] ? __pfx_ip6_pol_route+0x10/0x10 [ 364.035959][ T8729] ? __lock_acquire+0x6b5/0x2cf0 [ 364.035988][ T8729] fib6_rule_lookup+0x222/0x730 [ 364.036015][ T8729] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 364.036033][ T8729] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 364.036060][ T8729] ? ip6_route_output_flags+0x2e/0x5d0 [ 364.036078][ T8729] ? ip6_route_output_flags+0x2e/0x5d0 [ 364.036107][ T8729] ip6_route_output_flags+0x364/0x5d0 [ 364.036124][ T8729] ? ip6_route_output_flags+0x2e/0x5d0 [ 364.036143][ T8729] ip6_dst_lookup_tail+0x1c3/0x15a0 [ 364.036174][ T8729] ? __pfx_ip6_dst_lookup_tail+0x10/0x10 [ 364.036193][ T8729] ? sk_dst_check+0x25/0x480 [ 364.036213][ T8729] ? sk_dst_check+0x25/0x480 [ 364.036231][ T8729] ? sk_dst_check+0x25/0x480 [ 364.036245][ T8729] ? sk_dst_check+0x30e/0x480 [ 364.036283][ T8729] ip6_sk_dst_lookup_flow+0x765/0xa20 [ 364.036311][ T8729] ? __lock_acquire+0x6b5/0x2cf0 [ 364.036333][ T8729] ? udpv6_sendmsg+0x1864/0x25c0 [ 364.036363][ T8729] udpv6_sendmsg+0x1a69/0x25c0 [ 364.036402][ T8729] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 364.036427][ T8729] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 364.036451][ T8729] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 364.036486][ T8729] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 364.036516][ T8729] ? inet_send_prepare+0x1b9/0x270 [ 364.036538][ T8729] ? inet6_sendmsg+0xe4/0x120 [ 364.036565][ T8729] ____sys_sendmsg+0x5aa/0x9c0 [ 364.036590][ T8729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.036618][ T8729] ? import_iovec+0x73/0xa0 [ 364.036637][ T8729] ___sys_sendmsg+0x2a5/0x360 [ 364.036657][ T8729] ? __lock_acquire+0x6b5/0x2cf0 [ 364.036683][ T8729] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.036712][ T8729] ? kstrtouint+0x6e/0xe0 [ 364.036786][ T8729] ? __fget_files+0x2a/0x420 [ 364.036811][ T8729] ? __fget_files+0x3a6/0x420 [ 364.036852][ T8729] __sys_sendmmsg+0x282/0x4e0 [ 364.036889][ T8729] ? __pfx___sys_sendmmsg+0x10/0x10 [ 364.036930][ T8729] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 364.036970][ T8729] ? ksys_write+0x248/0x270 [ 364.036994][ T8729] ? __pfx_ksys_write+0x10/0x10 [ 364.037022][ T8729] __x64_sys_sendmmsg+0xa0/0xc0 [ 364.037042][ T8729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.037059][ T8729] do_syscall_64+0x15f/0xf80 [ 364.037082][ T8729] ? trace_irq_disable+0x3b/0x140 [ 364.037107][ T8729] ? clear_bhb_loop+0x40/0x90 [ 364.037127][ T8729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.037144][ T8729] RIP: 0033:0x7f43fccec819 [ 364.037159][ T8729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.037173][ T8729] RSP: 002b:00007f43faf3e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 364.037190][ T8729] RAX: ffffffffffffffda RBX: 00007f43fcf65fa0 RCX: 00007f43fccec819 [ 364.037202][ T8729] RDX: 0000000000000002 RSI: 0000200000007240 RDI: 0000000000000003 [ 364.037213][ T8729] RBP: 00007f43faf3e090 R08: 0000000000000000 R09: 0000000000000000 [ 364.037222][ T8729] R10: 000000000001c000 R11: 0000000000000246 R12: 0000000000000001 [ 364.037232][ T8729] R13: 00007f43fcf66038 R14: 00007f43fcf65fa0 R15: 00007ffcfb435e38 [ 364.037258][ T8729] [ 364.107882][ T6418] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 364.849959][ T8733] fido_id[8733]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 365.800799][ T8731] hub 8-0:1.0: USB hub found [ 365.802446][ T8731] hub 8-0:1.0: 1 port detected [ 365.872828][ T5898] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 366.203930][ T5898] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 366.203958][ T5898] usb 4-1: config 0 has no interface number 0 [ 366.204098][ T5898] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 366.204122][ T5898] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 366.204149][ T5898] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 366.204173][ T5898] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 366.204198][ T5898] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 366.204225][ T5898] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 366.204270][ T5898] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 366.204294][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.329981][ T5898] usb 4-1: config 0 descriptor?? [ 366.331404][ T8741] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.331563][ T8741] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 366.384606][ T5898] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 366.676770][ T31] usb 4-1: USB disconnect, device number 19 [ 366.703856][ T31] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 367.055247][ T8765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.815'. [ 367.674644][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz.4.818'. [ 368.204196][ T8777] FAULT_INJECTION: forcing a failure. [ 368.204196][ T8777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.204231][ T8777] CPU: 1 UID: 0 PID: 8777 Comm: syz.3.822 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 368.204255][ T8777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 368.204269][ T8777] Call Trace: [ 368.204277][ T8777] [ 368.204287][ T8777] dump_stack_lvl+0xe8/0x150 [ 368.204327][ T8777] should_fail_ex+0x46b/0x600 [ 368.204375][ T8777] _copy_to_user+0x31/0xb0 [ 368.204401][ T8777] simple_read_from_buffer+0xe1/0x170 [ 368.204432][ T8777] proc_fail_nth_read+0x1be/0x230 [ 368.204462][ T8777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.204492][ T8777] ? rw_verify_area+0x2ac/0x4e0 [ 368.204519][ T8777] ? __fget_files+0x2a/0x420 [ 368.204543][ T8777] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 368.204571][ T8777] vfs_read+0x212/0xa80 [ 368.204609][ T8777] ? __pfx_vfs_read+0x10/0x10 [ 368.204642][ T8777] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 368.204674][ T8777] ? lockdep_hardirqs_on+0x7a/0x110 [ 368.204705][ T8777] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 368.204737][ T8777] ? mutex_lock_nested+0x152/0x1d0 [ 368.204759][ T8777] ? fdget_pos+0x252/0x320 [ 368.204796][ T8777] ksys_read+0x156/0x270 [ 368.204828][ T8777] ? __pfx_ksys_read+0x10/0x10 [ 368.204867][ T8777] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.204892][ T8777] do_syscall_64+0x15f/0xf80 [ 368.204922][ T8777] ? trace_irq_disable+0x3b/0x140 [ 368.204955][ T8777] ? clear_bhb_loop+0x40/0x90 [ 368.204983][ T8777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.205004][ T8777] RIP: 0033:0x7f58044fd04e [ 368.205024][ T8777] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 368.205042][ T8777] RSP: 002b:00007f580278dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 368.205066][ T8777] RAX: ffffffffffffffda RBX: 00007f580278e6c0 RCX: 00007f58044fd04e [ 368.205081][ T8777] RDX: 000000000000000f RSI: 00007f580278e0a0 RDI: 0000000000000006 [ 368.205095][ T8777] RBP: 00007f580278e090 R08: 0000000000000000 R09: 0000000000000000 [ 368.205108][ T8777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.205121][ T8777] R13: 00007f58047b6038 R14: 00007f58047b5fa0 R15: 00007ffd3eb03288 [ 368.205156][ T8777] [ 368.340106][ T8773] 9p: Bad value for 'rfdno' [ 368.898197][ T8790] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 368.901733][ T8790] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 368.901877][ T8790] vhci_hcd vhci_hcd.0: Device attached [ 369.192941][ T31] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 369.659835][ T8791] vhci_hcd: connection reset by peer [ 369.672166][ T123] vhci_hcd vhci_hcd.0: stop threads [ 369.672202][ T123] vhci_hcd vhci_hcd.0: release socket [ 369.672269][ T123] vhci_hcd vhci_hcd.0: disconnect device [ 370.110383][ T8811] FAULT_INJECTION: forcing a failure. [ 370.110383][ T8811] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.110420][ T8811] CPU: 0 UID: 0 PID: 8811 Comm: syz.4.834 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 370.110445][ T8811] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 370.110460][ T8811] Call Trace: [ 370.110468][ T8811] [ 370.110477][ T8811] dump_stack_lvl+0xe8/0x150 [ 370.110519][ T8811] should_fail_ex+0x46b/0x600 [ 370.110558][ T8811] _copy_from_user+0x2d/0xb0 [ 370.110582][ T8811] bpf_test_init+0xd8/0x150 [ 370.110609][ T8811] bpf_prog_test_run_xdp+0x529/0x1160 [ 370.110650][ T8811] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 370.110681][ T8811] ? __fget_files+0x2a/0x420 [ 370.110712][ T8811] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 370.110738][ T8811] bpf_prog_test_run+0x2cd/0x340 [ 370.110765][ T8811] __sys_bpf+0x643/0x950 [ 370.110801][ T8811] ? __pfx___sys_bpf+0x10/0x10 [ 370.110832][ T8811] ? rt_mutex_slowunlock+0x1cb/0x300 [ 370.110877][ T8811] ? ksys_write+0x248/0x270 [ 370.110909][ T8811] ? __pfx_ksys_write+0x10/0x10 [ 370.110949][ T8811] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.110974][ T8811] __x64_sys_bpf+0x7c/0x90 [ 370.111006][ T8811] do_syscall_64+0x15f/0xf80 [ 370.111035][ T8811] ? trace_irq_disable+0x3b/0x140 [ 370.111069][ T8811] ? clear_bhb_loop+0x40/0x90 [ 370.111096][ T8811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.111117][ T8811] RIP: 0033:0x7f512886c819 [ 370.111137][ T8811] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.111156][ T8811] RSP: 002b:00007f5126ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 370.111179][ T8811] RAX: ffffffffffffffda RBX: 00007f5128ae5fa0 RCX: 00007f512886c819 [ 370.111195][ T8811] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 370.111208][ T8811] RBP: 00007f5126ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 370.111221][ T8811] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.111234][ T8811] R13: 00007f5128ae6038 R14: 00007f5128ae5fa0 R15: 00007ffe5513c6d8 [ 370.111267][ T8811] [ 370.438582][ T8813] FAULT_INJECTION: forcing a failure. [ 370.438582][ T8813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.438619][ T8813] CPU: 0 UID: 0 PID: 8813 Comm: syz.3.835 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 370.438644][ T8813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 370.438658][ T8813] Call Trace: [ 370.438667][ T8813] [ 370.438676][ T8813] dump_stack_lvl+0xe8/0x150 [ 370.438717][ T8813] should_fail_ex+0x46b/0x600 [ 370.438754][ T8813] _copy_from_iter+0x1d3/0x1670 [ 370.438796][ T8813] ? trace_kmem_cache_alloc+0x29/0xe0 [ 370.438826][ T8813] ? __alloc_skb+0x27d/0x7d0 [ 370.438849][ T8813] ? __pfx__copy_from_iter+0x10/0x10 [ 370.438880][ T8813] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 370.438910][ T8813] ? __alloc_skb+0x27d/0x7d0 [ 370.438939][ T8813] ? netlink_sendmsg+0x650/0xb40 [ 370.438962][ T8813] ? skb_put+0x11b/0x210 [ 370.438998][ T8813] netlink_sendmsg+0x6c0/0xb40 [ 370.439033][ T8813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.439065][ T8813] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.439097][ T8813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.439119][ T8813] sock_write_iter+0x4a1/0x4f0 [ 370.439153][ T8813] ? __pfx_sock_write_iter+0x10/0x10 [ 370.439207][ T8813] vfs_write+0x629/0xba0 [ 370.439246][ T8813] ? __pfx_vfs_write+0x10/0x10 [ 370.439279][ T8813] ? do_sys_openat2+0x14c/0x200 [ 370.439300][ T8813] ? kmem_cache_free+0x187/0x6c0 [ 370.439349][ T8813] ksys_write+0x156/0x270 [ 370.439381][ T8813] ? __pfx_ksys_write+0x10/0x10 [ 370.439419][ T8813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.439442][ T8813] do_syscall_64+0x15f/0xf80 [ 370.439473][ T8813] ? trace_irq_disable+0x3b/0x140 [ 370.439506][ T8813] ? clear_bhb_loop+0x40/0x90 [ 370.439533][ T8813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.439554][ T8813] RIP: 0033:0x7f580453c819 [ 370.439575][ T8813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.439593][ T8813] RSP: 002b:00007f580278e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 370.439617][ T8813] RAX: ffffffffffffffda RBX: 00007f58047b5fa0 RCX: 00007f580453c819 [ 370.439632][ T8813] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000005 [ 370.439645][ T8813] RBP: 00007f580278e090 R08: 0000000000000000 R09: 0000000000000000 [ 370.439658][ T8813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.439670][ T8813] R13: 00007f58047b6038 R14: 00007f58047b5fa0 R15: 00007ffd3eb03288 [ 370.439705][ T8813] [ 370.881041][ T37] audit: type=1326 audit(1776424811.632:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8821 comm="syz.3.839" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f580453c819 code=0x0 [ 371.526721][ T8826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.839'. [ 371.673019][ T6418] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 371.827805][ T6418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.827840][ T6418] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 371.827879][ T6418] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 371.827903][ T6418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.888385][ T6418] usb 1-1: config 0 descriptor?? [ 371.904173][ T6013] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 372.086831][ T6013] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 372.086860][ T6013] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.086879][ T6013] usb 3-1: config 0 has no interface number 0 [ 372.124573][ T6013] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 372.124605][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.124627][ T6013] usb 3-1: Product: syz [ 372.124642][ T6013] usb 3-1: Manufacturer: syz [ 372.124657][ T6013] usb 3-1: SerialNumber: syz [ 372.174267][ T6013] usb 3-1: config 0 descriptor?? [ 372.206427][ T6013] uvcvideo 3-1:0.64: probe with driver uvcvideo failed with error -22 [ 372.262780][ T7431] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 372.344061][ T6418] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 372.344101][ T6418] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 372.344137][ T6418] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 372.344165][ T6418] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 372.344192][ T6418] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 372.344218][ T6418] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 372.344249][ T6418] pyra 0003:1E7D:2CF6.000E: unknown main item tag 0x0 [ 372.402019][ T6418] pyra 0003:1E7D:2CF6.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0 [ 372.412837][ T7431] usb 2-1: Using ep0 maxpacket: 16 [ 372.421601][ T7431] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 372.421629][ T7431] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 372.453594][ T7431] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 372.453632][ T7431] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.453648][ T7431] usb 2-1: Product: syz [ 372.453659][ T7431] usb 2-1: Manufacturer: syz [ 372.453669][ T7431] usb 2-1: SerialNumber: syz [ 372.548199][ T8842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.548859][ T8842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.596963][ T6013] usb 3-1: USB disconnect, device number 22 [ 372.610654][ T7431] usb 2-1: 0:2 : does not exist [ 372.921833][ T7431] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 373.283106][ T7431] usb 2-1: USB disconnect, device number 28 [ 373.713800][ T5963] udevd[5963]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.004274][ T8878] netlink: 16 bytes leftover after parsing attributes in process `syz.2.855'. [ 374.004389][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 374.004406][ T8878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.855'. [ 374.334436][ T31] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 374.856877][ T8885] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 374.859808][ T8885] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 374.860519][ T8885] vhci_hcd vhci_hcd.0: Device attached [ 375.495230][ T8887] vhci_hcd: connection closed [ 375.984667][ T759] vhci_hcd vhci_hcd.3: stop threads [ 375.984701][ T759] vhci_hcd vhci_hcd.3: release socket [ 375.988746][ T759] vhci_hcd vhci_hcd.3: disconnect device [ 377.480653][ T6418] pyra 0003:1E7D:2CF6.000E: couldn't init struct pyra_device [ 377.480711][ T6418] pyra 0003:1E7D:2CF6.000E: couldn't install mouse [ 377.501324][ T6418] pyra 0003:1E7D:2CF6.000E: probe with driver pyra failed with error -110 [ 377.514730][ T8907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.866'. [ 377.802701][ T5898] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 377.975810][ T5898] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 377.975842][ T5898] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.975862][ T5898] usb 4-1: config 0 has no interface number 0 [ 378.019644][ T5898] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 378.019678][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.019700][ T5898] usb 4-1: Product: syz [ 378.019716][ T5898] usb 4-1: Manufacturer: syz [ 378.019732][ T5898] usb 4-1: SerialNumber: syz [ 378.086232][ T5898] usb 4-1: config 0 descriptor?? [ 378.156076][ T5898] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 378.366106][ T8905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.370084][ T8905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.394164][ T6013] usb 4-1: USB disconnect, device number 20 [ 378.836835][ T1330] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.836938][ T1330] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.010883][ T8921] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.874'. [ 379.028328][ T8921] afs: Bad value for 'source' [ 380.052940][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 380.053172][ T1389] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.053565][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.734349][ T5122] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.777363][ T5122] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.820841][ T5122] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.834944][ T5122] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.836968][ T5122] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.338652][ T5122] Bluetooth: hci3: unexpected event for opcode 0x1004 [ 384.008279][ T5122] Bluetooth: hci0: command tx timeout [ 384.232011][ T1389] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.265864][ T8955] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'. [ 385.210944][ T8981] FAULT_INJECTION: forcing a failure. [ 385.210944][ T8981] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 385.210981][ T8981] CPU: 0 UID: 0 PID: 8981 Comm: syz.4.894 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 385.211005][ T8981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 385.211020][ T8981] Call Trace: [ 385.211029][ T8981] [ 385.211038][ T8981] dump_stack_lvl+0xe8/0x150 [ 385.211080][ T8981] should_fail_ex+0x46b/0x600 [ 385.211120][ T8981] prepare_alloc_pages+0x22a/0x6b0 [ 385.211166][ T8981] __alloc_frozen_pages_noprof+0x12f/0x380 [ 385.211206][ T8981] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 385.211249][ T8981] ? __pfx_policy_nodemask+0x10/0x10 [ 385.211293][ T8981] alloc_pages_mpol+0xd1/0x380 [ 385.211332][ T8981] folio_alloc_mpol_noprof+0x3b/0x1e0 [ 385.211369][ T8981] vma_alloc_folio_noprof+0xe1/0x1e0 [ 385.211407][ T8981] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 385.211460][ T8981] do_wp_page+0x1109/0x3d90 [ 385.211489][ T8981] ? rt_spin_lock+0x1e0/0x400 [ 385.211532][ T8981] ? preempt_count_add+0x91/0x190 [ 385.211563][ T8981] ? __pfx_do_wp_page+0x10/0x10 [ 385.211591][ T8981] ? rt_spin_lock+0x2ce/0x400 [ 385.211619][ T8981] ? __pfx_rt_spin_lock+0x10/0x10 [ 385.211650][ T8981] ? pte_offset_map_rw_nolock+0xea/0x160 [ 385.211682][ T8981] handle_mm_fault+0x9f5/0x13c0 [ 385.211721][ T8981] ? handle_mm_fault+0xe7/0x13c0 [ 385.211755][ T8981] ? __pfx_handle_mm_fault+0x10/0x10 [ 385.211795][ T8981] ? follow_page_pte+0xab3/0xe40 [ 385.211835][ T8981] ? __pfx_follow_page_pte+0x10/0x10 [ 385.211880][ T8981] __get_user_pages+0x168f/0x2570 [ 385.211944][ T8981] __gup_longterm_locked+0xdcf/0x1630 [ 385.211981][ T8981] ? lock_acquire+0x106/0x350 [ 385.212009][ T8981] ? sanity_check_pinned_pages+0x7a8/0x870 [ 385.212048][ T8981] gup_fast_fallback+0x1cf3/0x2040 [ 385.212111][ T8981] ? __pfx_gup_fast_fallback+0x10/0x10 [ 385.212151][ T8981] ? pin_user_pages_fast+0x4d/0xb0 [ 385.212183][ T8981] iov_iter_extract_pages+0x37b/0x5f0 [ 385.212217][ T8981] extract_iter_to_sg+0xe62/0x2520 [ 385.212268][ T8981] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 385.212321][ T8981] ? __asan_memset+0x22/0x50 [ 385.212350][ T8981] af_alg_get_rsgl+0x4b6/0x8e0 [ 385.212393][ T8981] skcipher_recvmsg+0x392/0x1140 [ 385.212422][ T8981] ? __lock_acquire+0x6b5/0x2cf0 [ 385.212460][ T8981] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 385.212484][ T8981] ? __lock_acquire+0x6b5/0x2cf0 [ 385.212509][ T8981] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 385.212543][ T8981] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 385.212571][ T8981] ? security_socket_recvmsg+0x7e/0x2c0 [ 385.212595][ T8981] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 385.212621][ T8981] sock_recvmsg+0x172/0x1b0 [ 385.212660][ T8981] ____sys_recvmsg+0x1f2/0x4b0 [ 385.212697][ T8981] ? __pfx_____sys_recvmsg+0x10/0x10 [ 385.212744][ T8981] ? import_iovec+0x73/0xa0 [ 385.212770][ T8981] ___sys_recvmsg+0x215/0x590 [ 385.212804][ T8981] ? get_pid_task+0x20/0x1f0 [ 385.212833][ T8981] ? __pfx____sys_recvmsg+0x10/0x10 [ 385.212867][ T8981] ? __fget_files+0x2a/0x420 [ 385.212912][ T8981] ? __fget_files+0x3a6/0x420 [ 385.212949][ T8981] __x64_sys_recvmsg+0x1c0/0x2a0 [ 385.212982][ T8981] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 385.213022][ T8981] ? __pfx_ksys_write+0x10/0x10 [ 385.213063][ T8981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.213087][ T8981] do_syscall_64+0x15f/0xf80 [ 385.213118][ T8981] ? trace_irq_disable+0x3b/0x140 [ 385.213151][ T8981] ? clear_bhb_loop+0x40/0x90 [ 385.213179][ T8981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.213202][ T8981] RIP: 0033:0x7f512886c819 [ 385.213223][ T8981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.213243][ T8981] RSP: 002b:00007f5126aa5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 385.213266][ T8981] RAX: ffffffffffffffda RBX: 00007f5128ae6090 RCX: 00007f512886c819 [ 385.213281][ T8981] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 385.213294][ T8981] RBP: 00007f5126aa5090 R08: 0000000000000000 R09: 0000000000000000 [ 385.213307][ T8981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.213319][ T8981] R13: 00007f5128ae6128 R14: 00007f5128ae6090 R15: 00007ffe5513c6d8 [ 385.213356][ T8981] [ 385.684751][ T1389] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.772151][ T8984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.896'. [ 385.796351][ T8984] Bluetooth: MGMT ver 1.23 [ 386.026373][ T60] Bluetooth: hci0: command tx timeout [ 386.345808][ T60] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 386.346005][ T60] Bluetooth: hci3: Injecting HCI hardware error event [ 386.348320][ T5122] Bluetooth: hci3: hardware error 0x00 [ 386.490200][ T8997] netlink: 12 bytes leftover after parsing attributes in process `syz.2.900'. [ 386.572301][ T1389] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.962599][ T6418] usb 1-1: USB disconnect, device number 30 [ 388.103132][ T60] Bluetooth: hci0: command tx timeout [ 388.358421][ T9035] netlink: 28 bytes leftover after parsing attributes in process `syz.2.912'. [ 388.423316][ T5122] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 388.469187][ T8924] chnl_net:caif_netlink_parms(): no params data found [ 389.002489][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.3.918'. [ 389.304380][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.304625][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.304897][ T8924] bridge_slave_0: entered allmulticast mode [ 389.307807][ T8924] bridge_slave_0: entered promiscuous mode [ 389.348495][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.348606][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.348805][ T8924] bridge_slave_1: entered allmulticast mode [ 389.375983][ T8924] bridge_slave_1: entered promiscuous mode [ 389.436733][ T9056] FAULT_INJECTION: forcing a failure. [ 389.436733][ T9056] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 389.436770][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.0.920 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 389.436795][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 389.436809][ T9056] Call Trace: [ 389.436818][ T9056] [ 389.436827][ T9056] dump_stack_lvl+0xe8/0x150 [ 389.436867][ T9056] should_fail_ex+0x46b/0x600 [ 389.436905][ T9056] prepare_alloc_pages+0x22a/0x6b0 [ 389.436948][ T9056] __alloc_frozen_pages_noprof+0x12f/0x380 [ 389.436988][ T9056] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 389.437029][ T9056] ? __pfx_policy_nodemask+0x10/0x10 [ 389.437065][ T9056] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 389.437097][ T9056] ? lockdep_hardirqs_on+0x7a/0x110 [ 389.437133][ T9056] alloc_pages_mpol+0xd1/0x380 [ 389.437170][ T9056] alloc_pages_noprof+0xd2/0x2f0 [ 389.437206][ T9056] get_free_pages_noprof+0xf/0x80 [ 389.437227][ T9056] __kasan_populate_vmalloc+0x38/0x1d0 [ 389.437255][ T9056] ? rt_spin_unlock+0x160/0x200 [ 389.437283][ T9056] alloc_vmap_area+0xd47/0x1480 [ 389.437326][ T9056] ? __pfx_alloc_vmap_area+0x10/0x10 [ 389.437358][ T9056] ? __kmalloc_cache_node_noprof+0x27d/0x6c0 [ 389.437390][ T9056] ? __get_vm_area_node+0x171/0x350 [ 389.437416][ T9056] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 389.437441][ T9056] __get_vm_area_node+0x226/0x350 [ 389.437485][ T9056] __vmalloc_node_range_noprof+0x36a/0x1750 [ 389.437515][ T9056] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 389.437556][ T9056] ? is_bpf_text_address+0x26/0x2b0 [ 389.437582][ T9056] ? kernel_text_address+0xa5/0xe0 [ 389.437614][ T9056] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 389.437651][ T9056] ? __lock_acquire+0x6b5/0x2cf0 [ 389.437682][ T9056] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 389.437702][ T9056] __vmalloc_noprof+0xd2/0x120 [ 389.437731][ T9056] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 389.437756][ T9056] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 389.437782][ T9056] bpf_prog_alloc+0x3c/0x1a0 [ 389.437806][ T9056] bpf_prog_load+0x7ba/0x1ae0 [ 389.437843][ T9056] ? __pfx_bpf_prog_load+0x10/0x10 [ 389.437863][ T9056] ? __might_fault+0xaf/0x130 [ 389.437915][ T9056] ? bpf_lsm_bpf+0x9/0x20 [ 389.437933][ T9056] ? security_bpf+0x7e/0x2d0 [ 389.437965][ T9056] __sys_bpf+0x618/0x950 [ 389.438002][ T9056] ? __pfx___sys_bpf+0x10/0x10 [ 389.438033][ T9056] ? rt_mutex_slowunlock+0x1cb/0x300 [ 389.438075][ T9056] ? ksys_write+0x248/0x270 [ 389.438107][ T9056] ? __pfx_ksys_write+0x10/0x10 [ 389.438141][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.438166][ T9056] __x64_sys_bpf+0x7c/0x90 [ 389.438198][ T9056] do_syscall_64+0x15f/0xf80 [ 389.438227][ T9056] ? trace_irq_disable+0x3b/0x140 [ 389.438260][ T9056] ? clear_bhb_loop+0x40/0x90 [ 389.438287][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.438309][ T9056] RIP: 0033:0x7f1f41aec819 [ 389.438330][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.438349][ T9056] RSP: 002b:00007f1f3fd46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.438373][ T9056] RAX: ffffffffffffffda RBX: 00007f1f41d65fa0 RCX: 00007f1f41aec819 [ 389.438388][ T9056] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 389.438402][ T9056] RBP: 00007f1f3fd46090 R08: 0000000000000000 R09: 0000000000000000 [ 389.438415][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.438427][ T9056] R13: 00007f1f41d66038 R14: 00007f1f41d65fa0 R15: 00007ffe77c32f98 [ 389.438461][ T9056] [ 389.438502][ T9056] syz.0.920: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 389.438571][ T9056] CPU: 1 UID: 0 PID: 9056 Comm: syz.0.920 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 389.438593][ T9056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 389.438606][ T9056] Call Trace: [ 389.438614][ T9056] [ 389.438623][ T9056] dump_stack_lvl+0xe8/0x150 [ 389.438659][ T9056] warn_alloc+0x263/0x3e0 [ 389.438695][ T9056] ? kasan_quarantine_put+0xbb/0x1f0 [ 389.438726][ T9056] ? __pfx_warn_alloc+0x10/0x10 [ 389.438761][ T9056] ? __get_vm_area_node+0x23f/0x350 [ 389.438788][ T9056] ? __get_vm_area_node+0x171/0x350 [ 389.438818][ T9056] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 389.438839][ T9056] ? __get_vm_area_node+0x23f/0x350 [ 389.438874][ T9056] __vmalloc_node_range_noprof+0x38f/0x1750 [ 389.438924][ T9056] ? is_bpf_text_address+0x26/0x2b0 [ 389.438950][ T9056] ? kernel_text_address+0xa5/0xe0 [ 389.438981][ T9056] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 389.439018][ T9056] ? __lock_acquire+0x6b5/0x2cf0 [ 389.439047][ T9056] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 389.439067][ T9056] __vmalloc_noprof+0xd2/0x120 [ 389.439096][ T9056] ? bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 389.439121][ T9056] bpf_prog_alloc_no_stats+0x4a/0x4f0 [ 389.439159][ T9056] bpf_prog_alloc+0x3c/0x1a0 [ 389.439183][ T9056] bpf_prog_load+0x7ba/0x1ae0 [ 389.439219][ T9056] ? __pfx_bpf_prog_load+0x10/0x10 [ 389.439239][ T9056] ? __might_fault+0xaf/0x130 [ 389.439290][ T9056] ? bpf_lsm_bpf+0x9/0x20 [ 389.439309][ T9056] ? security_bpf+0x7e/0x2d0 [ 389.439339][ T9056] __sys_bpf+0x618/0x950 [ 389.439374][ T9056] ? __pfx___sys_bpf+0x10/0x10 [ 389.439405][ T9056] ? rt_mutex_slowunlock+0x1cb/0x300 [ 389.439446][ T9056] ? ksys_write+0x248/0x270 [ 389.439485][ T9056] ? __pfx_ksys_write+0x10/0x10 [ 389.439519][ T9056] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.439544][ T9056] __x64_sys_bpf+0x7c/0x90 [ 389.439576][ T9056] do_syscall_64+0x15f/0xf80 [ 389.439605][ T9056] ? trace_irq_disable+0x3b/0x140 [ 389.439637][ T9056] ? clear_bhb_loop+0x40/0x90 [ 389.439664][ T9056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.439686][ T9056] RIP: 0033:0x7f1f41aec819 [ 389.439704][ T9056] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.439723][ T9056] RSP: 002b:00007f1f3fd46028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.439745][ T9056] RAX: ffffffffffffffda RBX: 00007f1f41d65fa0 RCX: 00007f1f41aec819 [ 389.439761][ T9056] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 389.439774][ T9056] RBP: 00007f1f3fd46090 R08: 0000000000000000 R09: 0000000000000000 [ 389.439788][ T9056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 389.439800][ T9056] R13: 00007f1f41d66038 R14: 00007f1f41d65fa0 R15: 00007ffe77c32f98 [ 389.439834][ T9056] [ 389.439843][ T9056] Mem-Info: [ 389.439852][ T9056] active_anon:256 inactive_anon:34126 isolated_anon:0 [ 389.439852][ T9056] active_file:15928 inactive_file:41380 isolated_file:0 [ 389.439852][ T9056] unevictable:768 dirty:135 writeback:0 [ 389.439852][ T9056] slab_reclaimable:11945 slab_unreclaimable:106899 [ 389.439852][ T9056] mapped:30811 shmem:29266 pagetables:1245 [ 389.439852][ T9056] sec_pagetables:0 bounce:0 [ 389.439852][ T9056] kernel_misc_reclaimable:0 [ 389.439852][ T9056] free:1275684 free_pcp:7166 free_cma:0 [ 389.439910][ T9056] Node 0 active_anon:1024kB inactive_anon:136504kB active_file:63280kB inactive_file:165520kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123068kB dirty:540kB writeback:0kB shmem:115528kB kernel_stack:13532kB pagetables:4800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 389.439964][ T9056] Node 1 active_anon:0kB inactive_anon:0kB active_file:432kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:176kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:180kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 389.440014][ T9056] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 389.440075][ T9056] lowmem_reserve[]: 0 2505 2505 2505 2505 [ 389.440115][ T9056] Node 0 DMA32 free:1160836kB boost:0kB min:3928kB low:6464kB high:9000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1024kB inactive_anon:136504kB active_file:63280kB inactive_file:165520kB unevictable:1536kB writepending:540kB zspages:0kB present:3129332kB managed:2565208kB mlocked:0kB bounce:0kB free_pcp:28416kB local_pcp:17828kB free_cma:0kB [ 389.440181][ T9056] lowmem_reserve[]: 0 0 0 0 0 [ 389.440217][ T9056] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:144kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 389.440275][ T9056] lowmem_reserve[]: 0 0 0 0 0 [ 389.440312][ T9056] Node 1 Normal free:3926540kB boost:0kB min:6368kB low:10476kB high:14584kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:432kB inactive_file:0kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 389.440374][ T9056] lowmem_reserve[]: 0 0 0 0 0 [ 389.440410][ T9056] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 389.440548][ T9056] Node 0 DMA32: 3181*4kB (UME) 1897*8kB (UME) 1018*16kB (UME) 105*32kB (UM) 81*64kB (UM) 13*128kB (UME) 16*256kB (UM) 23*512kB (UM) 15*1024kB (UM) 3*2048kB (U) 261*4096kB (M) = 1160828kB [ 389.440719][ T9056] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 389.440824][ T9056] Node 1 Normal: 2*4kB (M) 2*8kB (M) 2*16kB (UM) 5*32kB (UM) 10*64kB (UM) 7*128kB (UM) 5*256kB (UM) 3*512kB (M) 2*1024kB (M) 4*2048kB (UM) 955*4096kB (UM) = 3926488kB [ 389.440994][ T9056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.441012][ T9056] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 389.441030][ T9056] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 389.441047][ T9056] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 389.441064][ T9056] 86571 total pagecache pages [ 389.441073][ T9056] 0 pages in swap cache [ 389.441081][ T9056] Free swap = 124996kB [ 389.441089][ T9056] Total swap = 124996kB [ 389.441097][ T9056] 2097051 pages RAM [ 389.441104][ T9056] 0 pages HighMem/MovableOnly [ 389.441112][ T9056] 424098 pages reserved [ 389.441120][ T9056] 0 pages cma reserved [ 390.186958][ T5122] Bluetooth: hci0: command tx timeout [ 390.753875][ T9073] FAULT_INJECTION: forcing a failure. [ 390.753875][ T9073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 390.753911][ T9073] CPU: 1 UID: 0 PID: 9073 Comm: syz.4.925 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.753936][ T9073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 390.753950][ T9073] Call Trace: [ 390.753958][ T9073] [ 390.753967][ T9073] dump_stack_lvl+0xe8/0x150 [ 390.754007][ T9073] should_fail_ex+0x46b/0x600 [ 390.754046][ T9073] _copy_from_iter+0x1d3/0x1670 [ 390.754087][ T9073] ? trace_kmem_cache_alloc+0x29/0xe0 [ 390.754116][ T9073] ? __alloc_skb+0x27d/0x7d0 [ 390.754139][ T9073] ? __pfx__copy_from_iter+0x10/0x10 [ 390.754171][ T9073] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 390.754200][ T9073] ? __alloc_skb+0x27d/0x7d0 [ 390.754229][ T9073] ? netlink_sendmsg+0x650/0xb40 [ 390.754252][ T9073] ? skb_put+0x11b/0x210 [ 390.754280][ T9073] netlink_sendmsg+0x6c0/0xb40 [ 390.754319][ T9073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.754347][ T9073] ? unwind_get_return_address+0x4d/0x90 [ 390.754376][ T9073] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 390.754418][ T9073] ____sys_sendmsg+0x94c/0x9c0 [ 390.754451][ T9073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.754488][ T9073] ? import_iovec+0x73/0xa0 [ 390.754513][ T9073] ___sys_sendmsg+0x2a5/0x360 [ 390.754539][ T9073] ? __lock_acquire+0x6b5/0x2cf0 [ 390.754567][ T9073] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.754632][ T9073] ? __fget_files+0x2a/0x420 [ 390.754656][ T9073] ? __fget_files+0x3a6/0x420 [ 390.754691][ T9073] __x64_sys_sendmsg+0x1c3/0x2a0 [ 390.754723][ T9073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.754762][ T9073] ? __pfx_ksys_write+0x10/0x10 [ 390.754801][ T9073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.754826][ T9073] do_syscall_64+0x15f/0xf80 [ 390.754858][ T9073] ? trace_irq_disable+0x3b/0x140 [ 390.754891][ T9073] ? clear_bhb_loop+0x40/0x90 [ 390.754918][ T9073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.754941][ T9073] RIP: 0033:0x7f512886c819 [ 390.754961][ T9073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.754980][ T9073] RSP: 002b:00007f5126ac6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.755004][ T9073] RAX: ffffffffffffffda RBX: 00007f5128ae5fa0 RCX: 00007f512886c819 [ 390.755021][ T9073] RDX: 000000002000400c RSI: 00002000000000c0 RDI: 0000000000000003 [ 390.755035][ T9073] RBP: 00007f5126ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 390.755049][ T9073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.755062][ T9073] R13: 00007f5128ae6038 R14: 00007f5128ae5fa0 R15: 00007ffe5513c6d8 [ 390.755096][ T9073] [ 390.981205][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.924'. [ 391.448941][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.478304][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.426358][ T1389] bridge_slave_1: left allmulticast mode [ 392.426464][ T1389] bridge_slave_1: left promiscuous mode [ 392.429082][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.495409][ T1389] bridge_slave_0: left allmulticast mode [ 392.495442][ T1389] bridge_slave_0: left promiscuous mode [ 392.495698][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.310069][ T6418] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 393.496546][ T6418] usb 4-1: config 0 has an invalid interface number: 64 but max is 0 [ 393.496576][ T6418] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.496596][ T6418] usb 4-1: config 0 has no interface number 0 [ 393.531393][ T6418] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 393.531428][ T6418] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.531450][ T6418] usb 4-1: Product: syz [ 393.531467][ T6418] usb 4-1: Manufacturer: syz [ 393.531482][ T6418] usb 4-1: SerialNumber: syz [ 393.588360][ T6418] usb 4-1: config 0 descriptor?? [ 393.603561][ T6418] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22 [ 393.669066][ T1389] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 393.723667][ T1389] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 393.746785][ T1389] bond0 (unregistering): Released all slaves [ 393.884502][ T9120] netlink: 56 bytes leftover after parsing attributes in process `syz.0.946'. [ 393.910809][ T9106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.911482][ T9106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.943133][ T5930] usb 4-1: USB disconnect, device number 21 [ 393.945830][ T9121] program syz.0.946 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 394.256258][ T8924] team0: Port device team_slave_0 added [ 394.256959][ T1389] tipc: Left network mode [ 394.365679][ T8924] team0: Port device team_slave_1 added [ 395.513074][ T7431] usb 4-1: new low-speed USB device number 22 using dummy_hcd [ 395.724907][ T7431] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 395.724938][ T7431] usb 4-1: config 0 has no interface number 0 [ 395.724985][ T7431] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 395.725019][ T7431] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 395.725047][ T7431] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 395.725073][ T7431] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 395.725101][ T7431] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 395.725128][ T7431] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.725171][ T7431] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 395.725194][ T7431] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.734634][ T7431] usb 4-1: config 0 descriptor?? [ 395.736187][ T9140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 395.736381][ T9140] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 395.750871][ T7431] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 395.999110][ T7431] usb 4-1: USB disconnect, device number 22 [ 396.028223][ T7431] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 396.642783][ T5930] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 396.707886][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.707905][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.707943][ T8924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.769007][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.769025][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.769054][ T8924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.812151][ T5930] usb 1-1: device descriptor read/64, error -71 [ 397.052904][ T5930] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 397.184310][ T5930] usb 1-1: device descriptor read/64, error -71 [ 397.293202][ T5930] usb usb1-port1: attempt power cycle [ 397.699680][ T8924] hsr_slave_0: entered promiscuous mode [ 397.707764][ T8924] hsr_slave_1: entered promiscuous mode [ 397.722797][ T5930] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 397.728912][ T8924] debugfs: 'hsr0' already exists in 'hsr' [ 397.728941][ T8924] Cannot create hsr debugfs directory [ 397.743445][ T5930] usb 1-1: device descriptor read/8, error -71 [ 398.366090][ T5930] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 398.473531][ T5930] usb 1-1: device descriptor read/8, error -71 [ 398.768491][ T5930] usb usb1-port1: unable to enumerate USB device [ 400.252470][ T9210] netlink: 12 bytes leftover after parsing attributes in process `syz.3.973'. [ 400.323342][ T5467] 8021q: adding VLAN 0 to HW filter on device eth1 [ 400.626298][ T9244] 9pnet_virtio: no channels available for device ./file0/../file0 [ 400.887994][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.0.989'. [ 401.752950][ T1389] hsr_slave_0: left promiscuous mode [ 402.366659][ T1389] hsr_slave_1: left promiscuous mode [ 402.372456][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.401664][ T9255] delete_channel: no stack [ 402.419095][ T1389] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 402.419205][ T1389] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 402.780652][ T1389] veth1_macvtap: left promiscuous mode [ 402.780953][ T1389] veth0_macvtap: left promiscuous mode [ 402.781274][ T1389] veth1_vlan: left promiscuous mode [ 402.781643][ T1389] veth0_vlan: left promiscuous mode [ 403.433201][ T6013] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 403.568338][ T6013] usb 3-1: device descriptor read/64, error -71 [ 403.802715][ T6013] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 403.943129][ T6013] usb 3-1: device descriptor read/64, error -71 [ 404.057221][ T6013] usb usb3-port1: attempt power cycle [ 404.085950][ T9298] FAULT_INJECTION: forcing a failure. [ 404.085950][ T9298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.085985][ T9298] CPU: 1 UID: 0 PID: 9298 Comm: syz.4.1007 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 404.086009][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 404.086023][ T9298] Call Trace: [ 404.086031][ T9298] [ 404.086041][ T9298] dump_stack_lvl+0xe8/0x150 [ 404.086080][ T9298] should_fail_ex+0x46b/0x600 [ 404.086119][ T9298] _copy_from_user+0x2d/0xb0 [ 404.086141][ T9298] get_user_ifreq+0x6b/0x180 [ 404.086175][ T9298] inet_ioctl+0x3ec/0x560 [ 404.086202][ T9298] ? __pfx_inet_ioctl+0x10/0x10 [ 404.086248][ T9298] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 404.086288][ T9298] sock_do_ioctl+0x101/0x320 [ 404.086323][ T9298] ? __pfx_sock_do_ioctl+0x10/0x10 [ 404.086360][ T9298] ? __asan_memset+0x22/0x50 [ 404.086385][ T9298] ? smack_file_ioctl+0x263/0x360 [ 404.086416][ T9298] sock_ioctl+0x5c9/0x7f0 [ 404.086450][ T9298] ? __pfx_sock_ioctl+0x10/0x10 [ 404.086481][ T9298] ? __fget_files+0x2a/0x420 [ 404.086504][ T9298] ? __fget_files+0x3a6/0x420 [ 404.086528][ T9298] ? __fget_files+0x2a/0x420 [ 404.086555][ T9298] ? bpf_lsm_file_ioctl+0x9/0x20 [ 404.086594][ T9298] ? __pfx_sock_ioctl+0x10/0x10 [ 404.086632][ T9298] __se_sys_ioctl+0xff/0x170 [ 404.086664][ T9298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.086690][ T9298] do_syscall_64+0x15f/0xf80 [ 404.086720][ T9298] ? trace_irq_disable+0x3b/0x140 [ 404.086753][ T9298] ? clear_bhb_loop+0x40/0x90 [ 404.086781][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.086803][ T9298] RIP: 0033:0x7f512886c819 [ 404.086823][ T9298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 404.086842][ T9298] RSP: 002b:00007f5126ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 404.086865][ T9298] RAX: ffffffffffffffda RBX: 00007f5128ae5fa0 RCX: 00007f512886c819 [ 404.086881][ T9298] RDX: 0000200000000180 RSI: 0000000000008918 RDI: 0000000000000003 [ 404.086894][ T9298] RBP: 00007f5126ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 404.086907][ T9298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.086920][ T9298] R13: 00007f5128ae6038 R14: 00007f5128ae5fa0 R15: 00007ffe5513c6d8 [ 404.086952][ T9298] [ 404.431092][ T6013] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 404.443823][ T6013] usb 3-1: device descriptor read/8, error -71 [ 404.659835][ T5898] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 404.682741][ T6013] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 404.789620][ T6013] usb 3-1: device descriptor read/8, error -71 [ 404.808269][ T5898] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 404.808299][ T5898] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.808321][ T5898] usb 1-1: config 0 has no interface number 0 [ 404.811417][ T5898] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 404.811449][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.811472][ T5898] usb 1-1: Product: syz [ 404.811488][ T5898] usb 1-1: Manufacturer: syz [ 404.811504][ T5898] usb 1-1: SerialNumber: syz [ 404.893197][ T6013] usb usb3-port1: unable to enumerate USB device [ 404.897980][ T5898] usb 1-1: config 0 descriptor?? [ 404.932333][ T9306] trusted_key: syz.3.1010 sent an empty control message without MSG_MORE. [ 404.945720][ T5898] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22 [ 405.128343][ T9296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.128967][ T9296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.174052][ T6418] usb 1-1: USB disconnect, device number 35 [ 405.182516][ T9310] FAULT_INJECTION: forcing a failure. [ 405.182516][ T9310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.183062][ T9310] CPU: 0 UID: 0 PID: 9310 Comm: syz.4.1012 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 405.183087][ T9310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 405.183101][ T9310] Call Trace: [ 405.183110][ T9310] [ 405.183120][ T9310] dump_stack_lvl+0xe8/0x150 [ 405.183160][ T9310] should_fail_ex+0x46b/0x600 [ 405.183198][ T9310] _copy_from_user+0x2d/0xb0 [ 405.183221][ T9310] memdup_user+0x5e/0xd0 [ 405.183248][ T9310] strndup_user+0x68/0xd0 [ 405.183274][ T9310] __se_sys_mount+0x9d/0x420 [ 405.183315][ T9310] ? ksys_write+0x248/0x270 [ 405.183347][ T9310] ? __pfx___se_sys_mount+0x10/0x10 [ 405.183379][ T9310] ? __x64_sys_mount+0x20/0xc0 [ 405.183402][ T9310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.183426][ T9310] do_syscall_64+0x15f/0xf80 [ 405.183455][ T9310] ? trace_irq_disable+0x3b/0x140 [ 405.183488][ T9310] ? clear_bhb_loop+0x40/0x90 [ 405.183515][ T9310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.183538][ T9310] RIP: 0033:0x7f512886c819 [ 405.183558][ T9310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.183578][ T9310] RSP: 002b:00007f5126ac6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 405.183602][ T9310] RAX: ffffffffffffffda RBX: 00007f5128ae5fa0 RCX: 00007f512886c819 [ 405.183617][ T9310] RDX: 00002000000000c0 RSI: 0000200000000c40 RDI: 0000000000000000 [ 405.183631][ T9310] RBP: 00007f5126ac6090 R08: 0000200000000000 R09: 0000000000000000 [ 405.183645][ T9310] R10: 0000000000200000 R11: 0000000000000246 R12: 0000000000000001 [ 405.183658][ T9310] R13: 00007f5128ae6038 R14: 00007f5128ae5fa0 R15: 00007ffe5513c6d8 [ 405.183690][ T9310] [ 406.652609][ T9318] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 406.652638][ T9318] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 406.652739][ T9318] vhci_hcd vhci_hcd.0: Device attached [ 406.655906][ T9319] vhci_hcd: connection closed [ 406.657948][ T1290] vhci_hcd vhci_hcd.2: stop threads [ 406.657978][ T1290] vhci_hcd vhci_hcd.2: release socket [ 406.658248][ T1290] vhci_hcd vhci_hcd.2: disconnect device [ 406.964978][ T1389] team0 (unregistering): Port device team_slave_1 removed [ 407.059021][ T1389] team0 (unregistering): Port device team_slave_0 removed [ 407.108536][ T9332] FAULT_INJECTION: forcing a failure. [ 407.108536][ T9332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 407.108573][ T9332] CPU: 1 UID: 0 PID: 9332 Comm: syz.3.1018 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 407.108598][ T9332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 407.108616][ T9332] Call Trace: [ 407.108625][ T9332] [ 407.108634][ T9332] dump_stack_lvl+0xe8/0x150 [ 407.108676][ T9332] should_fail_ex+0x46b/0x600 [ 407.108714][ T9332] _copy_from_iter+0x1d3/0x1670 [ 407.108756][ T9332] ? trace_kmem_cache_alloc+0x29/0xe0 [ 407.108784][ T9332] ? __alloc_skb+0x27d/0x7d0 [ 407.108807][ T9332] ? __pfx__copy_from_iter+0x10/0x10 [ 407.108838][ T9332] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 407.108867][ T9332] ? __alloc_skb+0x27d/0x7d0 [ 407.108896][ T9332] ? netlink_sendmsg+0x650/0xb40 [ 407.108920][ T9332] ? skb_put+0x11b/0x210 [ 407.108948][ T9332] netlink_sendmsg+0x6c0/0xb40 [ 407.108982][ T9332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 407.109009][ T9332] ? unwind_get_return_address+0x4d/0x90 [ 407.109038][ T9332] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 407.109071][ T9332] ____sys_sendmsg+0x94c/0x9c0 [ 407.109104][ T9332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 407.109142][ T9332] ? import_iovec+0x73/0xa0 [ 407.109168][ T9332] ___sys_sendmsg+0x2a5/0x360 [ 407.109194][ T9332] ? __lock_acquire+0x6b5/0x2cf0 [ 407.109223][ T9332] ? __pfx____sys_sendmsg+0x10/0x10 [ 407.109287][ T9332] ? __fget_files+0x2a/0x420 [ 407.109310][ T9332] ? __fget_files+0x3a6/0x420 [ 407.109346][ T9332] __x64_sys_sendmsg+0x1c3/0x2a0 [ 407.109385][ T9332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 407.109422][ T9332] ? __pfx_ksys_write+0x10/0x10 [ 407.109461][ T9332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.109485][ T9332] do_syscall_64+0x15f/0xf80 [ 407.109515][ T9332] ? trace_irq_disable+0x3b/0x140 [ 407.109548][ T9332] ? clear_bhb_loop+0x40/0x90 [ 407.109574][ T9332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 407.109597][ T9332] RIP: 0033:0x7f580453c819 [ 407.109616][ T9332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 407.109635][ T9332] RSP: 002b:00007f580276d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.109658][ T9332] RAX: ffffffffffffffda RBX: 00007f58047b6090 RCX: 00007f580453c819 [ 407.109673][ T9332] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 407.109686][ T9332] RBP: 00007f580276d090 R08: 0000000000000000 R09: 0000000000000000 [ 407.109698][ T9332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 407.109710][ T9332] R13: 00007f58047b6128 R14: 00007f58047b6090 R15: 00007ffd3eb03288 [ 407.109743][ T9332] [ 408.109763][ T31] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 408.272819][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 408.278531][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 408.278584][ T31] usb 1-1: New USB device found, idVendor=046d, idProduct=c52b, bcdDevice= 0.00 [ 408.278608][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.332608][ T31] usb 1-1: config 0 descriptor?? [ 408.336498][ T9341] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 408.432826][ T6013] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 408.586339][ T6013] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.586368][ T6013] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 408.651558][ T6013] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 408.651593][ T6013] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.651608][ T6013] usb 3-1: Product: syz [ 408.651619][ T6013] usb 3-1: Manufacturer: syz [ 408.651647][ T6013] usb 3-1: SerialNumber: syz [ 408.809050][ T6013] usb 3-1: 0:2 : does not exist [ 408.858679][ T31] hid (null): unknown global tag 0xc [ 408.882686][ T31] logitech-djreceiver 0003:046D:C52B.000F: unknown main item tag 0x0 [ 408.882724][ T31] logitech-djreceiver 0003:046D:C52B.000F: unknown main item tag 0x0 [ 408.882753][ T31] logitech-djreceiver 0003:046D:C52B.000F: unknown main item tag 0x0 [ 408.882780][ T31] logitech-djreceiver 0003:046D:C52B.000F: unknown main item tag 0x0 [ 408.882807][ T31] logitech-djreceiver 0003:046D:C52B.000F: unknown main item tag 0x0 [ 408.882843][ T31] logitech-djreceiver 0003:046D:C52B.000F: unknown main item tag 0x0 [ 408.882871][ T31] logitech-djreceiver 0003:046D:C52B.000F: unknown main item tag 0x4 [ 408.882901][ T31] logitech-djreceiver 0003:046D:C52B.000F: unknown global tag 0xc [ 408.882917][ T31] logitech-djreceiver 0003:046D:C52B.000F: item 0 2 1 12 parsing failed [ 408.885286][ T31] logitech-djreceiver 0003:046D:C52B.000F: logi_dj_probe: parse failed [ 408.885374][ T31] logitech-djreceiver 0003:046D:C52B.000F: probe with driver logitech-djreceiver failed with error -22 [ 409.163175][ T5898] usb 1-1: USB disconnect, device number 36 [ 410.575664][ T6013] usb 3-1: USB disconnect, device number 27 [ 411.932734][ T6418] usb 1-1: new low-speed USB device number 37 using dummy_hcd [ 412.002216][ T9386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1035'. [ 412.108777][ T6418] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 412.108809][ T6418] usb 1-1: config 0 has no interface number 0 [ 412.108855][ T6418] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 412.108879][ T6418] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 412.108907][ T6418] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 412.108933][ T6418] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 412.108960][ T6418] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 412.108994][ T6418] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 412.109036][ T6418] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 412.109059][ T6418] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.221656][ T6418] usb 1-1: config 0 descriptor?? [ 412.223559][ T9377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 412.223795][ T9377] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 412.276600][ T6418] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 412.556648][ T6418] usb 1-1: USB disconnect, device number 37 [ 412.617797][ T6418] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 412.842496][ T9403] kAFS: No cell specified [ 412.999727][ T5467] 8021q: adding VLAN 0 to HW filter on device eth2 [ 413.742905][ T5898] usb 1-1: new full-speed USB device number 38 using dummy_hcd [ 413.896670][ T5898] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 413.896699][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 413.899300][ T5898] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 413.899323][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.899337][ T5898] usb 1-1: Product: syz [ 413.899348][ T5898] usb 1-1: Manufacturer: syz [ 413.899358][ T5898] usb 1-1: SerialNumber: syz [ 413.986187][ T5898] usb 1-1: 0:2 : does not exist [ 415.707997][ T5880] usb 1-1: USB disconnect, device number 38 [ 415.782363][ T1389] IPVS: stop unused estimator thread 0... [ 416.954944][ T5880] usb 4-1: new low-speed USB device number 23 using dummy_hcd [ 417.041986][ T9460] FAULT_INJECTION: forcing a failure. [ 417.041986][ T9460] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 417.042022][ T9460] CPU: 1 UID: 0 PID: 9460 Comm: syz.4.1064 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 417.042045][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.042058][ T9460] Call Trace: [ 417.042066][ T9460] [ 417.042074][ T9460] dump_stack_lvl+0xe8/0x150 [ 417.042120][ T9460] should_fail_ex+0x46b/0x600 [ 417.042158][ T9460] _copy_from_iter+0x1d3/0x1670 [ 417.042191][ T9460] ? rcu_is_watching+0x15/0xb0 [ 417.042218][ T9460] ? trace_kmem_cache_alloc+0x29/0xe0 [ 417.042250][ T9460] ? kmem_cache_alloc_noprof+0x388/0x680 [ 417.042280][ T9460] ? __pfx__copy_from_iter+0x10/0x10 [ 417.042316][ T9460] ? __build_skb+0x2a2/0x440 [ 417.042343][ T9460] ? netlink_sendmsg+0x650/0xb40 [ 417.042366][ T9460] ? skb_put+0x11b/0x210 [ 417.042393][ T9460] netlink_sendmsg+0x6c0/0xb40 [ 417.042427][ T9460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.042460][ T9460] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.042491][ T9460] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.042515][ T9460] sock_write_iter+0x4a1/0x4f0 [ 417.042548][ T9460] ? __pfx_sock_write_iter+0x10/0x10 [ 417.042599][ T9460] vfs_write+0x629/0xba0 [ 417.042639][ T9460] ? __pfx_vfs_write+0x10/0x10 [ 417.042674][ T9460] ? __fget_files+0x2a/0x420 [ 417.042701][ T9460] ksys_write+0x156/0x270 [ 417.042726][ T9460] ? __pfx_ksys_write+0x10/0x10 [ 417.042756][ T9460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.042775][ T9460] do_syscall_64+0x15f/0xf80 [ 417.042800][ T9460] ? trace_irq_disable+0x3b/0x140 [ 417.042827][ T9460] ? clear_bhb_loop+0x40/0x90 [ 417.042849][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.042866][ T9460] RIP: 0033:0x7f512886c819 [ 417.042884][ T9460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.042900][ T9460] RSP: 002b:00007f5126ac6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 417.042920][ T9460] RAX: ffffffffffffffda RBX: 00007f5128ae5fa0 RCX: 00007f512886c819 [ 417.042934][ T9460] RDX: 000000000000fcae RSI: 0000200000000240 RDI: 0000000000000003 [ 417.042945][ T9460] RBP: 00007f5126ac6090 R08: 0000000000000000 R09: 0000000000000000 [ 417.042957][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.042968][ T9460] R13: 00007f5128ae6038 R14: 00007f5128ae5fa0 R15: 00007ffe5513c6d8 [ 417.042996][ T9460] [ 417.312473][ T5880] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 417.312506][ T5880] usb 4-1: config 0 has no interface number 0 [ 417.327752][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 417.327783][ T5880] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 417.327811][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 417.327838][ T5880] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 417.327866][ T5880] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 417.327892][ T5880] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 417.327934][ T5880] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 417.327958][ T5880] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.428189][ T5880] usb 4-1: config 0 descriptor?? [ 417.430501][ T9450] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.430692][ T9450] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 417.484601][ T6418] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 417.518169][ T5880] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 417.652697][ T6418] usb 1-1: config 0 has an invalid interface number: 64 but max is 0 [ 417.652727][ T6418] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.652747][ T6418] usb 1-1: config 0 has no interface number 0 [ 417.667043][ T6418] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 417.667138][ T6418] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.667193][ T6418] usb 1-1: Product: syz [ 417.667236][ T6418] usb 1-1: Manufacturer: syz [ 417.667271][ T6418] usb 1-1: SerialNumber: syz [ 417.774806][ T5880] ================================================================== [ 417.774823][ T5880] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 417.774861][ T5880] Read of size 8 at addr ffffc9000f563008 by task kworker/0:4/5880 [ 417.774879][ T5880] [ 417.774890][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 417.774914][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.774929][ T5880] Workqueue: usb_hub_wq hub_event [ 417.774956][ T5880] Call Trace: [ 417.774965][ T5880] [ 417.774974][ T5880] dump_stack_lvl+0xe8/0x150 [ 417.775009][ T5880] print_address_description+0x55/0x1e0 [ 417.775044][ T5880] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 417.775073][ T5880] print_report+0x58/0x70 [ 417.775102][ T5880] kasan_report+0x117/0x150 [ 417.775136][ T5880] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 417.775171][ T5880] __list_del_entry_valid_or_report+0xb5/0x190 [ 417.775206][ T5880] kcov_remote_start+0x2af/0x710 [ 417.775239][ T5880] hub_event+0x150/0x4f60 [ 417.775267][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 417.775289][ T5880] ? look_up_lock_class+0x57/0x110 [ 417.775354][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 417.775379][ T5880] ? trace_hrtimer_start+0x82/0x200 [ 417.775415][ T5880] ? lock_acquire+0x106/0x350 [ 417.775438][ T5880] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 417.775473][ T5880] ? __pfx_hub_event+0x10/0x10 [ 417.775496][ T5880] ? process_scheduled_works+0xa70/0x1860 [ 417.775532][ T5880] ? process_scheduled_works+0xa70/0x1860 [ 417.775562][ T5880] ? process_scheduled_works+0xa70/0x1860 [ 417.775595][ T5880] process_scheduled_works+0xb5d/0x1860 [ 417.775643][ T5880] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.775678][ T5880] ? assign_work+0x3d5/0x5e0 [ 417.775709][ T5880] worker_thread+0xa53/0xfc0 [ 417.775754][ T5880] kthread+0x388/0x470 [ 417.775777][ T5880] ? __pfx_worker_thread+0x10/0x10 [ 417.775807][ T5880] ? __pfx_kthread+0x10/0x10 [ 417.775830][ T5880] ret_from_fork+0x514/0xb70 [ 417.775865][ T5880] ? __pfx_ret_from_fork+0x10/0x10 [ 417.775899][ T5880] ? __switch_to+0xc79/0x1410 [ 417.775929][ T5880] ? __pfx_kthread+0x10/0x10 [ 417.775952][ T5880] ret_from_fork_asm+0x1a/0x30 [ 417.775983][ T5880] [ 417.775992][ T5880] [ 417.775997][ T5880] The buggy address belongs to a vmalloc virtual mapping [ 417.776016][ T5880] Memory state around the buggy address: [ 417.776029][ T5880] ffffc9000f562f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 417.776044][ T5880] ffffc9000f562f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 417.776058][ T5880] >ffffc9000f563000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 417.776078][ T5880] ^ [ 417.776089][ T5880] ffffc9000f563080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 417.776104][ T5880] ffffc9000f563100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 417.776115][ T5880] ================================================================== [ 417.776137][ T5880] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 417.776153][ T5880] CPU: 0 UID: 0 PID: 5880 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 417.776181][ T5880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.776195][ T5880] Workqueue: usb_hub_wq hub_event [ 417.776218][ T5880] Call Trace: [ 417.776227][ T5880] [ 417.776234][ T5880] vpanic+0x56c/0xa60 [ 417.776257][ T5880] ? __pfx_vpanic+0x10/0x10 [ 417.776282][ T5880] panic+0xc5/0xd0 [ 417.776301][ T5880] ? __pfx_panic+0x10/0x10 [ 417.776336][ T5880] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 417.776366][ T5880] ? rcu_is_watching+0x15/0xb0 [ 417.776396][ T5880] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 417.776426][ T5880] check_panic_on_warn+0x89/0xb0 [ 417.776450][ T5880] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 417.776479][ T5880] end_report+0x73/0x170 [ 417.776508][ T5880] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 417.776536][ T5880] kasan_report+0x128/0x150 [ 417.776568][ T5880] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 417.776603][ T5880] __list_del_entry_valid_or_report+0xb5/0x190 [ 417.776634][ T5880] kcov_remote_start+0x2af/0x710 [ 417.776666][ T5880] hub_event+0x150/0x4f60 [ 417.776694][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 417.776716][ T5880] ? look_up_lock_class+0x57/0x110 [ 417.776748][ T5880] ? __lock_acquire+0x6b5/0x2cf0 [ 417.776774][ T5880] ? trace_hrtimer_start+0x82/0x200 [ 417.776807][ T5880] ? lock_acquire+0x106/0x350 [ 417.776829][ T5880] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 417.776862][ T5880] ? __pfx_hub_event+0x10/0x10 [ 417.776885][ T5880] ? process_scheduled_works+0xa70/0x1860 [ 417.776928][ T5880] ? process_scheduled_works+0xa70/0x1860 [ 417.776959][ T5880] ? process_scheduled_works+0xa70/0x1860 [ 417.776991][ T5880] process_scheduled_works+0xb5d/0x1860 [ 417.777038][ T5880] ? __pfx_process_scheduled_works+0x10/0x10 [ 417.777081][ T5880] ? assign_work+0x3d5/0x5e0 [ 417.777113][ T5880] worker_thread+0xa53/0xfc0 [ 417.777160][ T5880] kthread+0x388/0x470 [ 417.777182][ T5880] ? __pfx_worker_thread+0x10/0x10 [ 417.777212][ T5880] ? __pfx_kthread+0x10/0x10 [ 417.777233][ T5880] ret_from_fork+0x514/0xb70 [ 417.777268][ T5880] ? __pfx_ret_from_fork+0x10/0x10 [ 417.777299][ T5880] ? __switch_to+0xc79/0x1410 [ 417.777338][ T5880] ? __pfx_kthread+0x10/0x10 [ 417.777360][ T5880] ret_from_fork_asm+0x1a/0x30 [ 417.777390][ T5880] [ 417.777983][ T5880] Kernel Offset: disabled