last executing test programs: 6.619895061s ago: executing program 4 (id=2436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv4_delrule={0x2c, 0x21, 0x105, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_GENERIC_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x8}, @FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 6.605972793s ago: executing program 3 (id=2437): gettid() timer_create(0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$binfmt_elf64(r0, 0x0, 0x0) syz_emit_ethernet(0xd6, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @rr={0x7, 0x1b, 0x57, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @loopback, @private=0xa010102]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x2}]}]}}, "8815a23d1fa650dd"}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 6.569053314s ago: executing program 2 (id=2438): r0 = socket$inet6(0xa, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xd, &(0x7f00000004c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00'}, 0x6b) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000006c0)="e0b9547ed387dbb816d48283bb26", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="d8c96c4399417162092cdcd9caa99c48780c39b667935e61df95c21b724d74ede8341312819aa34f49d9aa244d7179a882b9ac43b0293469bb943a0904169c9e", 0x40) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r3, 0x40806685, &(0x7f0000000840)={0x1, 0x2, 0x1000, 0xbe, &(0x7f0000000700)="cbc76e6f750a770974389409317c80816351e13a292faa45a9c0b55447c494b29ee793bf70c0df3c496821c0252f86be9eb57027c3228ae63194b321c0129f823ba6a5f657c0862113487bef0d46dd2abbef44ea823ad978866e4b272a9e23cd64d8181a822217d1c14fc7adb767fcd8f3d66dc2fa20ee3f3a69fcc1d2a9103cf8fced929f7bea439db2df77a9c196a832e211aea11df9efd22a340fee8da21ea4e06117ada655076b1be528e21d2cc91874dba9d7525b4cb9b27482acb4", 0x49, 0x0, &(0x7f00000007c0)="0db6cf5022ff2013eb4cd097d30c30cafdc34d1ae50a727724daa8ac5643fa140699d8862892eaa15448666c5d1ae07bb8f15e94a7daf651db5d5e3fd3f1a45a2fedd73acec03ab2df"}) sendmsg$can_bcm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYRES64=r0], 0x48}}, 0x80) sendmsg$can_bcm(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$can_bcm(r3, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r4}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r3], 0x48}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x81&\xf5\t\x00\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xa9J3\x18\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V\x01\x00\x00\x00\x00\x00\x00\x00\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOe+\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\x99I\x9a9+r\x91\x06\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx', 0x3) fcntl$addseals(r5, 0x409, 0x47e8c3b29599b860) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$dir(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x2000, 0x0) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="58000000020605000000000000000000000000000c000300686173683a69700005000400010000000900020073797a3000000000050005000200000005000100060000001400078008"], 0x58}}, 0x0) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000480)={&(0x7f0000000240)={0x1d, r4}, 0x10, &(0x7f0000000400)={&(0x7f0000000540)={0x6, 0x4, 0xcb5, {r7, r8/1000+60000}, {0x0, 0xea60}, {0x4, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x0, 0x1}, 0x30, 0x1, 0x0, 0x0, "4c0ec10aec600c00d833c7f6afae319ded3b4309f050e73a01a7c087a81716f8edc3cccc698421140a11aa01cd07540faefb1046b5e6ef773dee25e5dd6f7c21"}}, 0x80}, 0x1, 0x0, 0x0, 0x40000}, 0x20008801) 6.531750048s ago: executing program 3 (id=2440): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 6.446914025s ago: executing program 0 (id=2441): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14bb42, 0x8c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040080) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0x2, 0x3}, 0x20) 6.445433806s ago: executing program 4 (id=2442): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x220202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000cc0)={0x0, [{0x2, 0x0, 0x76, 0x0}, {0x1, 0x8, 0x4, &(0x7f0000000140)="93"}, {0x0, 0x0, 0x7f, 0x0}, {0x1, 0x0, 0x7, 0x0}, {0x1, 0x0, 0xffff6f56, 0x0}, {0x3, 0x0, 0xffffc5bb, 0x0}, {0x0, 0x0, 0x105, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0x2ff, 0x0}, {0x1, 0x0, 0x4ed, 0x0}, {0x0, 0x0, 0x10, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0xff, 0x0}, {0x0, 0x0, 0xb, 0x0}, {0x0, 0x0, 0x0, 0x0}]}) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000001240)={0x80000000, &(0x7f0000001200), &(0x7f0000001340)=[{{0x80000000}}]}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001280)=ANY=[@ANYBLOB="14040000100001002cbd7000fedbdf25070000000200000008000000", @ANYRES32=r3, @ANYBLOB="02000b2d72000000c6ffc0d5b819a284772330b7fafa652b3ed3c3046e8a8975f6c982fe002d5cc24e81ade18723df45de86c22ebf6b78bc9543c77cb0efe48ed79038517da1dbac51b008f2a5b5ffd1f33a6511e23e0f749d46daf90544275ce36ea95d8430a77e5b35230370789a58b2522ee9f5de7607f3b8dbb7b41e2e"], 0x414}], 0x1}, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000011c0)='attr/sockcreate\x00') preadv(r4, &(0x7f0000000040)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000380)={r2, &(0x7f0000000200), &(0x7f0000000240)}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r4, &(0x7f0000002380)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xa9, 0x840, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000008c0)="4b000ffd096c1b77cd99b1458609c4b82100375ca9411e734cc8e9627df29e9b97a002d7f15ea9f42bd71401384ed6b5772b5c618c35c4aab72b1d515ceada9e64d7a35fd435e98f06243fcd53966c196ff3f47537912a1a5dec7e8e1fbf4543d1a6c80467d6ba3d241e3fd22efa09c638c98b4ce9fbe6d2053fcfa334eaee64efad2d349f048afb2635ae06c05697746fe073ed230c9c7c4643396305424c1c7eaa3ee09891995a607de26be9abcd2b65a4f9093da8a07eea61b1ff21ea3b323b191f95b997cfdface3dc21a664e38896f9f689bc06f4800d5c977102358770b0d8425f098be9383b5e487e7165e847191d5e95233e971edd", 0xf9}, {&(0x7f0000000680)="5f62f632763c84825847145170282f67ba6d5dadf0baf135d503e93a17ee5604080000005f0de32b0e53e4d26d04c825d923318fd574b1924b09ebb91d5be30b532a2fb95030c6be2a14ccfbce6eef05ea88d2413dc3fc0ae8a2e071f8764a4843611ae28b340100ddefa8ffed32420677397aa63e880adc56d03d8799429f33741886bd6c4065bba5005d74f67508dc3434165b51bf8f73bf1a7c158d8905e518e8", 0xa2}, {&(0x7f0000000c80)="0b0ec2a1e3fc84788972f461fec27348bd54a57f68a85a0200ad43c367bae5f7bd6c1e1d9017109e232e5bb561d280b32fa2b07a0cd31f1b8b9acdc89d4d5725350a9ec9303e53def89bcb6bb6ea83324927b43749f25be60c4f8707382b8e3062032c28dcccb784fdcfe6f2febd55e05bf1ccb63237c1d1bea4db828a5be79e518cf55a88e130609528b84359e76eee93584aad3f751172c449fb00"/165, 0xa5}, {&(0x7f0000002f80)="a66554178426362975b882a7d6b43fe537b6b0036a966a05363793ec2f6830cc5b81e514b9cbe4c27c3f3a581556b832100a4233e3e80fda14dd84611893300a863a8a6f6d8e0c7633e168ad7e25d4bd14ba6812101488e9444165b8100d576a996fec019ae11a03498329bcbacd0e8a206bd0de0c7e09f64a57d56974599f09aa148b4224dcffe1b5a1e55bbc1fdae8bf2f72437cf399c4cda11554b21158e3ddb00ddb71a1bd1daa50d631b027238397d692214223af1d685e7a3318da65c9233eba674ff72097411ef3ee19b892b1b36eeb925a6698f4d455b02163a3504ee6accffad7aaf9d19763d886272559ef0501594ea23d45a43e13bba05d7d332750ce5d9d3b37d234f46464fcc5f495e0fae02a24efd67db315c92f9483196bd38b38b3675bc0de5873f9d7b01ee5c564f5573b474e3c9f3b955929d9112007049e4245d68b93f365a90d35c837cc13999f2d6a23be87786e4234d74b1160669c7962b3b413201192565fb93252c153dd735e280e01d13dc34468f67684a4308c7dbe07687e0f56fa54f44b0141895ad75781ca026d813e8c17794b9d87d97136d29aced71b1f526dfab6301b78f1deab7949c97cce6616f4afd46a331e2fb54342dd1964c70a2717f4239c9e5157ac93c42d05f230da440a9227f0f82ee95cc79ca2d3da3f889b37f85f50d75711a910a57d213edb4b981cde33e01ec960885f31511ed7f8e01ddd36d76e1b1e40e81cd21ef9c34134400fdd94e34e5d77f4b7ca3612663e0f6b364be4a9dc775f3b12386ec04960524a9a5e6879e50db657c89a7dc7ec1f919ba8c77e926538599e7969868a5ef3e92817a3402c13de0efcb9fef445ee49f4b0ed26c5dbadff51459d5229661e4b7d2548c9ea4ce89b828daf5f5873e1d9e693ba037fc00ccc3dd74096c0f1ea508ee96ad7d85664947193e011e2f037917af7716d7f27cac25c9785f13baddfeba40997af5f6f4029cf5b781b654a635ee8696078d99025012cbad5af13bc26e2d100726fc98c11f8f16057a8506f29cf30bcf9ab7883ad1708d11bf70ee54fced84c69d90eb302e8aff586c0b25893e09868426cb4649145ede32035c47360fba7fe863cb00b86f583090c5b8d8549ba62cb822ed182fc07f029a826b5c86dccd603408bfc060c80c8ae21be086998f45923e1fe36eea10a66a55cc9f3cb6a296535dabc831fefe26b80ee47c723c596c51e1d7c073df20874eef79a291934c4c6a7c6b656595fc76b25d0d50590c1df29d59842a19a6acd60e783069aa0c21d792129132d59d12cd4417583dc967d7d44f392770da18e30a70a330e7b05aebf09e93aa545ca382a29f810e8a4efc0fffd3660f76892c2027daccfd743734c359bacaec86e4f15ca31b83894b67b3a3539cb5567bbcacd9a52c9b8d87252ddab0dbdd373f7150b87893fa4b6c5e6016f2146471f092a2cf4c75b6ed08a2f27f9f68d1817d7e782c0fa3026fd4e283b6b23bff2a9d84f5cdea217ce396080b623fe6d5da91fcab0e563b8c54af99007f6680efc9fdcd35d1d2ad8539ee04744e38c750114de55b80192c5d6aee8cbc34a47426bb22a9e3e2fcb87530c418a65fad7d5fbb15f569a69fc2cb92dad8f574330fdf2aa6033d1be037d5e3e964ff01329c43401bc86a72025288100ce86c053b922e9a7a692912bca4dabfc0e3a8966a65c96d3a420809c2d600928546a4ea26ff7100081f3ca8a70c64b3a4fc33b3e2546ff4a43502d448f2c0b274a244d32c955b02d897b1c53a2724ff886a1ccc91ea3a22dbd1f5f3f2e33db9ac9aae458a27e2a529ac2d8671f0e30df63a5d1a579b8f5a68f4a53fb4f3f76d41bee8e10635606f2a7fde9af7bd0df3ab9750b0c6c962fbc36e9474e3efac01ea98a4fe6e0f819d62dcde2b9b77fb0d430495ee042d1e70a52debb0d13b09906f77327dd4ccfe2b6796f9aa5e5b2fa9b2249c66b49cd7e1cbdb194c239d7e2e0928a45c8c55904cd345c5d8b92a5526ff51b5c2e477089eeb16cb3996c243c66a82f4349370ac26bef5d900ec582f274cc38b0258993de6cc79574fdacb895721fd4d04f84c4d89e109629f48a24fb3241882f154a35ae6659e0bb35af409c51cb11a26413be88a1e5ae1e8d2b1333a6c80c42c654f269dd875aa7f19517f62b8e031f11bdb11bafcf4b4f06496142579f7769ee41dd24701cd3ed016030f7d5cf24a4cfdcd9b05e38524cd1a81e16b948672329bd111f7442bdc81b68b36495b5f4aa44d7c2fdea8703849a17f7d3327086355ca3b36c10eb38556bf95b3575ba32b97f268af1f1347ed28368828124361f6c1e6b64e6ba9efc3094d50bb049c35db5ea2b3c76576b1a8f37da0711436048ae443523032497e542c04458f04cfffd11c53c431065c20e8add72c0c31caeec12d0bf391fa1c0a75e23d39c31da409083f768f545090b05c54084ffc5d7fd85cea725807638f4ab0026204452a8c198cc60133ce00e9a2b9ebeb30d7f33a1bb25cb2948bf44288cce43b6ac13012d8860fce83d9a0f6f1886723f41130466186ac56d5384bfd04fe87c67528996c1ee1ad8e551dda563e75d5dc8ac6a47990a62c915dc23f4ae6596dcfdb44661de969aec7f6d3fa8f05e106a8db7abeb3682bdc8e87aefbb09e642b2cef2919ddc55ded8dbce0606d3c4a0747a293a991b8cd832381c30813b887a22c2df569c12c430cf7471578eb787acab65b54569bece6921805af9ac41b268ce329a25bacdb02f8f3c4ef930f1799ff940f42c21955ddd5496234d62447d1c9d8e0cc7bb8fd5ca5e9fa2ef99105a4d44d6ce37532407fcccc4e71103baa0c7ff1767e05762424d9301294daa95523792cb73b348c41ec713d19c2b917a4dc50be3f0742762e5055cd6ebb3afa2b89a94c6a921e039ddaee98fc7a961a5e415322bd4b333d83768ee8945f29556f94372a16285cb1ff103640d93b837861f1d0d9e65fe35583b6f76889e7d09a2cdf3c2ef305a0f6d205deedee94ac602974fa58284e33aee55947a7a042abf0759ec8c1410493114454320b5003f23dac1c600a471ff09bdbf5bb40be87a69d388592241d9989f0435eeede193e6994b80a2145eca4afb5e691341e37e4580b0c54d7fc506cc9641020cd342a85fe56946e49854756ae6534edd03de881481e11701851f0f30fedbfcf335c3855c8d9541ef234f8718fbb0d9f127093a3e7c1d49d8a20729ab41a0118683b7044ee490d7137bebbbbfb245d5e30356e102eda0052a37cca70c221475b5c596f68c745701dc6e31f7846270bcd516ded5d0b4666b249a32f0acb1b8a7de8e6f007ee740561f64b7f30b4764ec5116a1eda1526225ddd01b1d999ff17d0798be47e3a5957011aa6e03318897ce1c452b78f9badf89098fe696894953581b01ceffc4fa0eefd654df9ea70b1f2f1e287192a5a20a381e8fad0fb99814208970902fdd28cf6a6457d7873a76359e226e5b203bd6f85bea30cb0ab5817e1b32fbbbd33a4e67f3771b7256a3a9ec20dae8a248af32a909bb5ec28f0f85722b81151f0f0a500a5c39c36476ac42c30bcb68a61a13141541ec54d895f0d7ca1afb728202e77f2f85170a3c2de378f1cfa0c2d1b0353f5d2fd0537017dc5510232a7a27a444476bbca2b84394639cf8ded35568868f9dcfa445b33c694aa8696d899afdf0d98a542e6a3c0212480ef3063ae0b8bcaa133978e9ebd76a3ccf652b0022b3cc7f1c9f2731c1c08f45fc84f7dade8471f6855e3005d75390e36a6646b8ac0dd5da9f9ef4bc35639ac96280bc47a547c0941af4516278b66469c7fc22932cbb2ac92cc12745bdf4ab4411d48396120f0e397ff6c22c54873296a897928d0158a5e63e6d48016cb4af44a3d71296acffe59241a8537f8b2cbc88b8ee2f4090e8e16b8af4700a60d0c199cc45cedf8dfe9a78ddd8637f7a9cfc16b078b1f9acfb8cb35f94b7564b1e23904e40dd5bdef1c78397457c05dd1108c3257bfda2e36b31969e8642c825c9dafe2fa4ee2708023c26255e6c41c2c873923e98eb1397dbc51324dfbec7943a5564fa815b9492d53c6cf6d42cd07165ae54e81f7989f2e406a13bea4df4d4a6971d81a4492e5703b6ba1f21ca5ffd68cdb15a713abd70d411e64d873b9f36ced7f354273c5c9782dd8a410ac28fee250f4b82095f4ab7a5c5a7d57114b6196cc2accdb44e39351a5d7c2c519ff861db8e4a368fdc1c5459f2b4cef0076d9b57b9ba2e76b3d8b87a515fc5c777d7e8023ef898fcf31365abc3e0a1307fa85f29d3c8a7e70d58b1228e83", 0xbe8}, {&(0x7f0000000740)="a405df87c6e89abd7ae7e6b8550f9923917c9d38e14a4e9ace3100b34d0056282b7ed43e9c6efe6245152417b33aa8f7231ef5c2928c6284654a2204c4c4f8ffdda3684a967d85159658c07e3a7c75d219403b0be9379f7b017bd850fd4c3a18d59f735980d1520b641a6fc2a58ba15bce382460c95db8299b404b8d0d5821a4604f59cfa04cd0d4496fc41b951e7f8ed2a6ac350002000000000000babffca7484a82e2b3bd3e55b4a6f0153a88f5", 0xaf}, {&(0x7f0000000380)="dfd1db04f5eef4b5714a69f5392e27d1b79a961a16fbdc4f01a9e38a1f95f939a209f049ad8d4f9447506fd73cec26b8246758f684013c99b717e119d15432e9d46da8a0c25e7e3771b0b146e56d2fcf8107332acc1c56948171260ed44c97919f70210c914c1098c9ac622d460000ae373480c9d8e590395ea4365569b8ea75ea1a9a181cfa88541804ec97980211c9b7eb2235d6f0b644fd31dda9bc2cc99434e0df4934d0", 0xa6}, {&(0x7f0000000800)="f76c72c4066a174e1300da0da7d191a618fc5793ff23c6328c6d61df0a2fb72441d4ded25cf7b5f31eb5d65e412665a6177f09ca3ac5cfd751577dec547711dc43b694a601fcb6575547ee6ec2a01c32b65d3429fbb9623a83d457d3ddea9eb90ab14b6b323a9358af0b55cff95844d5b47f6994a72f984e19e961cc00f6e364e141c8", 0x83}], 0x7}}], 0x1, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) 6.429298652s ago: executing program 1 (id=2443): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x20008050) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0xfffffffc, 0x4}) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0x83a5, 0x3, [0x0, 0x1, 0x6]}, 0xe) 6.408301342s ago: executing program 3 (id=2444): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/103, 0x67}, {&(0x7f0000000d00)=""/249, 0xf9}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f0000000300)=""/51, 0x33}, {&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000900)=""/101, 0x65}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f00000007c0)=""/8, 0x8}, {&(0x7f0000000980)=""/151, 0x97}], 0xc}, 0x22120) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 6.318175803s ago: executing program 4 (id=2445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x10, @bearer=@udp='udp:syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40015}, 0x4) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b00010067656e65766500001000028008000100012d2df5"], 0x40}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) 6.19835295s ago: executing program 3 (id=2446): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) inotify_add_watch(r0, 0x0, 0x1a4000120) 6.131286439s ago: executing program 3 (id=2447): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020400) fcntl$lock(r3, 0x7, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r4, 0xffffffffffffffff, 0x0) 6.126714979s ago: executing program 2 (id=2448): syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x40, 0x10, 0x7, "", [{{0x9, 0x4, 0x0, 0xa9, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xb, 0x24, 0x6, 0x0, 0x0, "0778896ed33f"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x401, 0xf, 0x3, 0xdd}, [@country_functional={0x10, 0x24, 0x7, 0x2e, 0x54, [0xbd3, 0x5, 0xf650, 0x400, 0x81]}, @obex={0x5, 0x24, 0x15, 0x3ff}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @country_functional={0x8, 0x24, 0x7, 0xf5, 0x0, [0xff]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x41, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x5, 0x53}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x80, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x80, 0x3, 0xf9, 0x10, 0x4}, 0xc, &(0x7f0000000480)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x6, 0x3}]}, 0x8, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x7e, &(0x7f0000000500)=@string={0x7e, 0x3, "a9b4d023dfb7706d2f0d7edb4516018b03846c90cb46d8642ad774f8bc5ba0b4031fd4d36c6f0408d015d98d1feb21e364deab9658e4dfb1ab98ae8b77f962f646031ccd3343ecfbc028d585c616da6ea33428c894516eb8e97f64f33571e8e5a8dd4b06b93dea22a82bfc72a1bf38ff8b521633451bf33a360b4e3c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}, {0xac, &(0x7f0000000b00)=@string={0xac, 0x3, "198bec498a7f9411ceb6d5cc2716b1eb6b3d682343ecb86ab317bb6e8550e21da9dcead3d082403511e0930f7b2b30de423549f8e5ad6443d7f6b44f50b9331b425fef0f8fa112b363b2d3b3be5d333cf06246dfa8fc2ead66fe465152f6ebfd98864f7058342a9f5ea52f1c8e37b72b3411c107c2da95b4eab817847f5c5892d31779e1ef341cc6c6c5477467a10794215225cd64b719cce754877752217fc81bb946641b8642616fd5"}}, {0x1d, &(0x7f0000000680)=@string={0x1d, 0x3, "6f1c837f56d0079ed0841b0d57a961a9a578afc7174a4c1f062c60"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x418}}]}) 5.374963811s ago: executing program 4 (id=2449): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)={0x104, 0x13, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xf4, 0xf2, 0x0, 0x1, [@nested={0xf0, 0x1c, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@loopback}, @nested={0xe0, 0x3d, 0x0, 0x1, [@typed={0x4, 0xe4}, @typed={0xd5, 0x43, 0x0, 0x0, @binary="491bb360d4dbfe785ec0ef03bf7cdc93493bf59ffb48a753b8ee6ce473943ae2a92724f0984c2f2c792de64f538ab8d37709b864ece6b564210ccbdc1e411c94054b79701bd2ac9b83493a7eb0c454ca007c848c456e6b1207100027be04f640a52d7348d2b53c628425fa7dfd308a0c5fd4d90f8a08ec84b3054002786a7b6b7cf301d6f876513cb0b7b653607ebfa89e52061ea2a87a3ae00ab07efbfe424b1d183a1d9ac596f597b3b99a3c75c3bfebb76814815a9215830074cea70a702f2c289de98208eb9644786b57078ebbf97f"}]}, @typed={0x4, 0x42}]}]}]}, 0x104}], 0x1, 0x0, 0x0, 0x1}, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x1800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="8a450200000000002400128009000100626f6e6400000000140002800500010006000000080002"], 0x44}}, 0x40) 5.277192818s ago: executing program 0 (id=2450): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x80, 0x80, 0x3, [@const={0x10, 0x0, 0x0, 0xa, 0x1}, @func={0x3, 0x0, 0x0, 0xc, 0x3}, @typedef={0x3, 0x0, 0x0, 0x8, 0x3}, @union={0x7, 0x2, 0x0, 0x5, 0x0, 0xffff, [{0xe, 0x2, 0x2}, {0x6, 0x1, 0x10000}]}, @var={0x7, 0x0, 0x0, 0xe, 0x2, 0x1}, @enum={0x3, 0x1, 0x0, 0x6, 0x4, [{0x2, 0x10000}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x5, 0x3}]}]}, {0x0, [0x30]}}, &(0x7f0000000140)=""/191, 0x9b, 0xbf, 0x0, 0x3}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xc5001, 0x104) write$FUSE_WRITE(r1, 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000340)='./file0\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x16, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRES16], &(0x7f0000000100)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0xe, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) 5.153935587s ago: executing program 1 (id=2451): gettid() timer_create(0x2, 0x0, 0x0) r0 = dup(0xffffffffffffffff) write$binfmt_elf64(r0, 0x0, 0x0) syz_emit_ethernet(0xd6, &(0x7f00000001c0)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xc8, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x3, 0x2c, 0x0, {0x29, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @private, @local, {[@cipso={0x86, 0x2a, 0x0, [{0x6, 0xd, "5e000000ff000000f58700"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x12, "9606053d0006ff00800000b61af93a93"}]}, @rr={0x7, 0x1b, 0x57, [@private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @rand_addr=0x64010102, @loopback, @private=0xa010102]}, @cipso={0x86, 0x48, 0x0, [{0x0, 0x7, "4b6cefc500"}, {0x0, 0xc, "df61168c24ac88ad078c"}, {0x0, 0x12, "2189ea43e2149b8444a30300505c09a0"}, {0x7, 0x12, "ffd11634eea26b0faffa0dea2e903528"}, {0x0, 0x9, "02a20948fd7406"}, {0x0, 0x2}]}]}}, "8815a23d1fa650dd"}}}}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5.003778339s ago: executing program 0 (id=2452): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24000000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = userfaultfd(0x801) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r4, 0x0, 0x20040040) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000002b80)=""/4096, 0x1000}], 0x1, 0xaa, 0x2) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.9923191s ago: executing program 1 (id=2453): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4010) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000200)={0x68, @dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x3, 'none\x00', 0x20, 0x1, 0x66}, 0x2c) 4.232980724s ago: executing program 2 (id=2454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f00000000c0)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226}, 0x94) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1], 0x38}, 0x1, 0x0, 0x0, 0x14}, 0x0) 4.225058172s ago: executing program 4 (id=2455): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000640)={0x1, &(0x7f0000000040)=[{0x6, 0x40, 0x8f, 0x7ffcffff}]}) getegid() sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0300000000000000000007"], 0xe4}, 0x1, 0x0, 0x0, 0x10}, 0x4000) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, 0x0, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_RINGS_TX={0x8}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000008000100020000002400"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 4.146725494s ago: executing program 2 (id=2456): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20004888}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000680)=""/103, 0x67}, {&(0x7f0000000d00)=""/249, 0xf9}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f0000000800)=""/222, 0xde}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f0000000300)=""/51, 0x33}, {&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000900)=""/101, 0x65}, {&(0x7f00000001c0)=""/62, 0x3e}, {&(0x7f00000007c0)=""/8, 0x8}, {&(0x7f0000000980)=""/151, 0x97}], 0xc}, 0x22120) syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 4.102871729s ago: executing program 3 (id=2457): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r0 = getpid() r1 = syz_open_procfs(r0, &(0x7f0000000180)='coredump_filter\x00') setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0xfe, 0x4) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYBLOB="b70795"], 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x4cc6, 0x84803) 4.011251665s ago: executing program 1 (id=2458): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001400030540008000ffdbdb25021fe40a", @ANYRES32=r3, @ANYBLOB="080002007f0000"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20008840) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000180)={'lo\x00', {0x3c, 0x4e1e, @local}}) 3.899958031s ago: executing program 4 (id=2459): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000000)=0x3, 0x4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b"], 0x0) 3.89532777s ago: executing program 2 (id=2460): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000040)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfd', @ANYRESHEX]) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x1, 0x9, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0xc854) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) recvmmsg(r6, 0x0, 0x0, 0x2, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x14bb42, 0x8c) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24040080) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) r7 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x0, 0x800, 0x2, 0x3}, 0x20) 3.834992206s ago: executing program 1 (id=2461): clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) eventfd2(0x9, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) timer_delete(0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = fsopen(&(0x7f0000000080)='binder\x00', 0x0) prlimit64(0x0, 0x7, &(0x7f0000000040)={0x0, 0x100}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x2c, 0x0, 0x0) io_submit(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="030000000400000004000000"], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000010c0)) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r2) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x40000) clock_settime(0x0, &(0x7f0000009ac0)={r0, r1+10000000}) 3.529795178s ago: executing program 0 (id=2462): r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x6, @mcast1, 0x3, 0xffffffff}, 0x18, &(0x7f0000001880)=[{&(0x7f00000000c0)="f40009f9f32b2b25fe80000200000000140f000000ad787cf38e845a265143040d001d3ca7c3c6580e49f0f3f4bc31f67817936200"/64, 0x2a}], 0x33}, 0x20008060) 1.487161197s ago: executing program 0 (id=2463): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x15) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600030000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000100)="6507060082762422f9a30250a90def79e5ddb933b83b8f8f1a0daad170479a60f60eb8dc258ded60aee45b04a15db386", 0x30) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000e40)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}], 0x1, 0x1) recvmmsg(r2, &(0x7f0000000d00)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000180)=""/147, 0x93}, {&(0x7f0000000e80)=""/4096, 0x1000}, {&(0x7f0000000240)=""/166, 0xa6}, {&(0x7f0000000000)=""/32, 0x20}, {&(0x7f0000001e80)=""/4096, 0x1000}], 0x5}, 0x7}], 0x2, 0x20, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000e500000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 458.679388ms ago: executing program 0 (id=2464): syz_usb_connect$cdc_ecm(0x0, 0x7e, &(0x7f0000000a80)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x1, 0x1, 0x40, 0x10, 0x7, "", [{{0x9, 0x4, 0x0, 0xa9, 0x2, 0x2, 0x6, 0x0, 0x1, {{0xb, 0x24, 0x6, 0x0, 0x0, "0778896ed33f"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x401, 0xf, 0x3, 0xdd}, [@country_functional={0x10, 0x24, 0x7, 0x2e, 0x54, [0xbd3, 0x5, 0xf650, 0x400, 0x81]}, @obex={0x5, 0x24, 0x15, 0x3ff}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x6}, @country_functional={0x8, 0x24, 0x7, 0xf5, 0x0, [0xff]}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2, 0x41, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x20, 0x4, 0x5, 0x53}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x80, 0x8, 0x7}}}}}]}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x250, 0x80, 0x3, 0xf9, 0x10, 0x4}, 0xc, &(0x7f0000000480)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x7, 0x6, 0x3}]}, 0x8, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x80c}}, {0x7e, &(0x7f0000000500)=@string={0x7e, 0x3, "a9b4d023dfb7706d2f0d7edb4516018b03846c90cb46d8642ad774f8bc5ba0b4031fd4d36c6f0408d015d98d1feb21e364deab9658e4dfb1ab98ae8b77f962f646031ccd3343ecfbc028d585c616da6ea33428c894516eb8e97f64f33571e8e5a8dd4b06b93dea22a82bfc72a1bf38ff8b521633451bf33a360b4e3c"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x412}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c01}}, {0xac, &(0x7f0000000b00)=@string={0xac, 0x3, "198bec498a7f9411ceb6d5cc2716b1eb6b3d682343ecb86ab317bb6e8550e21da9dcead3d082403511e0930f7b2b30de423549f8e5ad6443d7f6b44f50b9331b425fef0f8fa112b363b2d3b3be5d333cf06246dfa8fc2ead66fe465152f6ebfd98864f7058342a9f5ea52f1c8e37b72b3411c107c2da95b4eab817847f5c5892d31779e1ef341cc6c6c5477467a10794215225cd64b719cce754877752217fc81bb946641b8642616fd5"}}, {0x1d, &(0x7f0000000680)=@string={0x1d, 0x3, "6f1c837f56d0079ed0841b0d57a961a9a578afc7174a4c1f062c60"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x418}}]}) 82.822232ms ago: executing program 2 (id=2465): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) (fail_nth: 4) 0s ago: executing program 1 (id=2466): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)={0x104, 0x13, 0x1, 0x70bd2d, 0x25dfdbfc, "", [@nested={0xf4, 0xf2, 0x0, 0x1, [@nested={0xf0, 0x1c, 0x0, 0x1, [@typed={0x8, 0x4b, 0x0, 0x0, @ipv4=@loopback}, @nested={0xe0, 0x3d, 0x0, 0x1, [@typed={0x4, 0xe4}, @typed={0xd5, 0x43, 0x0, 0x0, @binary="491bb360d4dbfe785ec0ef03bf7cdc93493bf59ffb48a753b8ee6ce473943ae2a92724f0984c2f2c792de64f538ab8d37709b864ece6b564210ccbdc1e411c94054b79701bd2ac9b83493a7eb0c454ca007c848c456e6b1207100027be04f640a52d7348d2b53c628425fa7dfd308a0c5fd4d90f8a08ec84b3054002786a7b6b7cf301d6f876513cb0b7b653607ebfa89e52061ea2a87a3ae00ab07efbfe424b1d183a1d9ac596f597b3b99a3c75c3bfebb76814815a9215830074cea70a702f2c289de98208eb9644786b57078ebbf97f"}]}, @typed={0x4, 0x42}]}]}]}, 0x104}], 0x1, 0x0, 0x0, 0x1}, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x1800) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40) kernel console output (not intermixed with test programs): g failed [ 337.814872][ T5854] hid-generic 0000:0004:280000.0013: probe with driver hid-generic failed with error -22 [ 337.825820][ T5903] usb 5-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.825854][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 337.825889][ T5903] usb 5-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 337.825911][ T5903] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.835846][ T5903] usb 5-1: config 0 descriptor?? [ 337.967693][T10975] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1813'. [ 337.988571][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1814'. [ 337.988588][T10976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1814'. [ 338.010846][T10975] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 338.069371][T10978] netlink: 'syz.2.1815': attribute type 25 has an invalid length. [ 338.250422][ T5903] hid (null): unknown global tag 0xd [ 338.263612][ T5854] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 338.268617][ T5903] nzxt-smart2 0003:1E71:2009.0014: unknown global tag 0xd [ 338.268639][ T5903] nzxt-smart2 0003:1E71:2009.0014: item 0 4 1 13 parsing failed [ 338.269436][ T5903] nzxt-smart2 0003:1E71:2009.0014: probe with driver nzxt-smart2 failed with error -22 [ 338.394607][T10991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1819'. [ 338.394622][T10991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1819'. [ 338.394638][T10991] netlink: 'syz.3.1819': attribute type 15 has an invalid length. [ 338.421700][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 338.426856][ T5854] usb 1-1: config 1 interface 0 altsetting 169 bulk endpoint 0x82 has invalid maxpacket 32 [ 338.426887][ T5854] usb 1-1: config 1 interface 0 altsetting 169 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 338.426913][ T5854] usb 1-1: config 1 interface 0 has no altsetting 0 [ 338.429504][ T5854] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 338.429530][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.429549][ T5854] usb 1-1: Product: В [ 338.429561][ T5854] usb 1-1: Manufacturer: 뒩⏐럟浰യᙅ謁萃遬䛋擘휪宼뒠ἃ폔潬ࠄᗐ跙隫뇟颫议亮͆촜䌳ﯬ⣀藕ᛆ滚㒣젨冔롮翩焵ً㶹⋪⮨狼뾡Ｘ劋㌖ᭅ㫳ଶ㱎 [ 338.429582][ T5854] usb 1-1: SerialNumber: ь [ 338.440422][T10975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 338.440601][T10975] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 338.851059][T10975] netlink: 'syz.0.1813': attribute type 2 has an invalid length. [ 338.863398][T10975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1813'. [ 338.863421][T10975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1813'. [ 338.925624][ T5854] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 338.940640][ T5854] usb 1-1: USB disconnect, device number 39 [ 339.368571][T11014] batadv_slave_1: entered promiscuous mode [ 339.376887][T11014] netlink: 'syz.3.1826': attribute type 27 has an invalid length. [ 339.484253][T11014] bond0: (slave bond_slave_0): Releasing backup interface [ 339.524040][T11014] bond_slave_0 (unregistering): left promiscuous mode [ 339.524069][T11014] bond_slave_0 (unregistering): left allmulticast mode [ 339.697536][T11013] batadv_slave_1: left promiscuous mode [ 339.776965][T11024] serio: Serial port ptm0 [ 339.940575][T11034] tipc: Started in network mode [ 339.940604][T11034] tipc: Node identity ac14142f, cluster identity 4711 [ 339.966539][T11034] tipc: New replicast peer: 0.0.0.0 [ 339.974398][T11034] tipc: Enabled bearer , priority 10 [ 339.975505][T11034] tipc: New replicast peer: 255.255.255.255 [ 340.111761][ T5854] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 340.241678][ T5854] usb 2-1: device descriptor read/64, error -71 [ 340.385710][ T31] usb 5-1: USB disconnect, device number 60 [ 340.482235][ T5854] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 340.611742][ T5854] usb 2-1: device descriptor read/64, error -71 [ 340.615302][T11047] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1840'. [ 340.654858][T11047] netlink: 'syz.2.1840': attribute type 2 has an invalid length. [ 340.655341][T11047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1840'. [ 340.655356][T11047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1840'. [ 340.722786][ T5854] usb usb2-port1: attempt power cycle [ 340.841736][ T5882] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 341.126361][ T31] tipc: Node number set to 2886997039 [ 341.146549][ T5882] usb 5-1: Using ep0 maxpacket: 16 [ 341.149077][ T5882] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.149101][ T5882] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.151314][ T5882] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.151341][ T5882] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.151360][ T5882] usb 5-1: Product: syz [ 341.151371][ T5882] usb 5-1: Manufacturer: syz [ 341.151378][ T5882] usb 5-1: SerialNumber: syz [ 341.191716][ T5854] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 341.220961][ T5854] usb 2-1: device descriptor read/8, error -71 [ 341.461883][ T5854] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 341.463355][ T5116] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 341.468239][T11048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 341.471110][T11048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.512377][ T5854] usb 2-1: device descriptor read/8, error -71 [ 341.555144][ T5882] usb 5-1: 0:2 : does not exist [ 341.555194][ T5882] usb 5-1: unit 9 not found! [ 341.559843][ T5882] usb 5-1: 4:0: cannot get min/max values for control 1 (id 4) [ 341.572940][ T5882] usb 5-1: 4:0: cannot get min/max values for control 2 (id 4) [ 341.582302][ T5882] usb 5-1: 4:0: cannot get min/max values for control 3 (id 4) [ 341.593329][ T5882] usb 5-1: 4:0: cannot get min/max values for control 4 (id 4) [ 341.618478][ T5882] usb 5-1: 4:0: cannot get min/max values for control 5 (id 4) [ 341.622088][ T5854] usb usb2-port1: unable to enumerate USB device [ 341.645805][ T5882] usb 5-1: 4:0: cannot get min/max values for control 6 (id 4) [ 341.787387][ T5882] usb 5-1: USB disconnect, device number 61 [ 341.827839][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.010856][T11072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.291709][ T49] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 343.294422][T11095] CIFS mount error: No usable UNC path provided in device string! [ 343.294422][T11095] [ 343.294443][T11095] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 343.453704][ T49] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 343.453732][ T49] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.453749][ T49] usb 2-1: Product: syz [ 343.453762][ T49] usb 2-1: Manufacturer: syz [ 343.453774][ T49] usb 2-1: SerialNumber: syz [ 343.463933][T11109] FAULT_INJECTION: forcing a failure. [ 343.463933][T11109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.463967][T11109] CPU: 0 UID: 0 PID: 11109 Comm: syz.4.1857 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 343.463992][T11109] Tainted: [L]=SOFTLOCKUP [ 343.463999][T11109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 343.464011][T11109] Call Trace: [ 343.464019][T11109] [ 343.464028][T11109] dump_stack_lvl+0xe8/0x150 [ 343.464059][T11109] should_fail_ex+0x46b/0x600 [ 343.464083][T11109] _copy_from_user+0x2d/0xb0 [ 343.464107][T11109] ___sys_sendmsg+0x1c6/0x360 [ 343.464136][T11109] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.464164][T11109] ? kstrtouint+0x6e/0xe0 [ 343.464204][T11109] ? __fget_files+0x2a/0x420 [ 343.464224][T11109] ? __fget_files+0x3a6/0x420 [ 343.464254][T11109] __sys_sendmmsg+0x282/0x4e0 [ 343.464282][T11109] ? __pfx___sys_sendmmsg+0x10/0x10 [ 343.464315][T11109] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 343.464347][T11109] ? ksys_write+0x248/0x270 [ 343.464373][T11109] ? __pfx_ksys_write+0x10/0x10 [ 343.464402][T11109] __x64_sys_sendmmsg+0xa0/0xc0 [ 343.464428][T11109] do_syscall_64+0x14d/0xf80 [ 343.464450][T11109] ? trace_irq_disable+0x3b/0x150 [ 343.464477][T11109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.464496][T11109] ? clear_bhb_loop+0x40/0x90 [ 343.464518][T11109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.464536][T11109] RIP: 0033:0x7f4368cdc799 [ 343.464552][T11109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 343.464568][T11109] RSP: 002b:00007f4366f2e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 343.464587][T11109] RAX: ffffffffffffffda RBX: 00007f4368f55fa0 RCX: 00007f4368cdc799 [ 343.464601][T11109] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 343.464613][T11109] RBP: 00007f4366f2e090 R08: 0000000000000000 R09: 0000000000000000 [ 343.464625][T11109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.464636][T11109] R13: 00007f4368f56038 R14: 00007f4368f55fa0 R15: 00007ffcc06def28 [ 343.464665][T11109] [ 343.777359][ T49] usb 2-1: config 0 descriptor?? [ 343.794574][ T49] i2c-tiny-usb 2-1:0.0: version 6d.cc found at bus 002 address 065 [ 343.989795][ T49] (null): failure setting delay to 10us [ 343.989864][ T49] i2c-tiny-usb 2-1:0.0: probe with driver i2c-tiny-usb failed with error -5 [ 344.021816][ T5903] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 344.028666][ T49] usb 2-1: USB disconnect, device number 65 [ 344.182177][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 344.183677][ T5903] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.183696][ T5903] usb 1-1: config 0 interface 0 has no altsetting 0 [ 344.183715][ T5903] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 344.183727][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.187021][ T5903] usb 1-1: config 0 descriptor?? [ 344.592022][ T5903] hid (null): unknown global tag 0xd [ 344.594396][T11139] CIFS mount error: No usable UNC path provided in device string! [ 344.594396][T11139] [ 344.594415][T11139] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 344.597756][ T5903] nzxt-smart2 0003:1E71:2009.0015: unknown global tag 0xd [ 344.597778][ T5903] nzxt-smart2 0003:1E71:2009.0015: item 0 4 1 13 parsing failed [ 344.598611][ T5903] nzxt-smart2 0003:1E71:2009.0015: probe with driver nzxt-smart2 failed with error -22 [ 345.147082][T11167] FAULT_INJECTION: forcing a failure. [ 345.147082][T11167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.147117][T11167] CPU: 1 UID: 0 PID: 11167 Comm: syz.4.1877 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 345.147142][T11167] Tainted: [L]=SOFTLOCKUP [ 345.147149][T11167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 345.147161][T11167] Call Trace: [ 345.147168][T11167] [ 345.147176][T11167] dump_stack_lvl+0xe8/0x150 [ 345.147206][T11167] should_fail_ex+0x46b/0x600 [ 345.147232][T11167] _copy_to_iter+0x589/0x17d0 [ 345.147264][T11167] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 345.147285][T11167] ? __pfx__copy_to_iter+0x10/0x10 [ 345.147302][T11167] ? rt_spin_lock+0x1e0/0x400 [ 345.147323][T11167] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 345.147352][T11167] __skb_datagram_iter+0xf8/0x980 [ 345.147379][T11167] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 345.147413][T11167] skb_copy_datagram_iter+0xb5/0x270 [ 345.147442][T11167] netlink_recvmsg+0x2c3/0xa50 [ 345.147472][T11167] ? __pfx_netlink_recvmsg+0x10/0x10 [ 345.147502][T11167] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 345.147526][T11167] ? security_socket_recvmsg+0x7e/0x2c0 [ 345.147549][T11167] ? __pfx_netlink_recvmsg+0x10/0x10 [ 345.147571][T11167] sock_recvmsg+0x172/0x1b0 [ 345.147594][T11167] ____sys_recvmsg+0x1f2/0x4b0 [ 345.147626][T11167] ? __pfx_____sys_recvmsg+0x10/0x10 [ 345.147665][T11167] ? import_iovec+0x73/0xa0 [ 345.147691][T11167] ___sys_recvmsg+0x215/0x590 [ 345.147720][T11167] ? __pfx____sys_recvmsg+0x10/0x10 [ 345.147768][T11167] ? __fget_files+0x3a6/0x420 [ 345.147797][T11167] do_recvmmsg+0x33a/0x800 [ 345.147826][T11167] ? __pfx_do_recvmmsg+0x10/0x10 [ 345.147860][T11167] ? _copy_from_user+0x94/0xb0 [ 345.147903][T11167] __x64_sys_recvmmsg+0x1b7/0x250 [ 345.147932][T11167] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 345.147967][T11167] do_syscall_64+0x14d/0xf80 [ 345.147989][T11167] ? trace_irq_disable+0x3b/0x150 [ 345.148009][T11167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.148027][T11167] ? clear_bhb_loop+0x40/0x90 [ 345.148048][T11167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.148065][T11167] RIP: 0033:0x7f4368cdc799 [ 345.148083][T11167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.148099][T11167] RSP: 002b:00007f4366f2e028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 345.148124][T11167] RAX: ffffffffffffffda RBX: 00007f4368f55fa0 RCX: 00007f4368cdc799 [ 345.148136][T11167] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 345.148149][T11167] RBP: 00007f4366f2e090 R08: 0000200000003700 R09: 0000000000000000 [ 345.148161][T11167] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 345.148172][T11167] R13: 00007f4368f56038 R14: 00007f4368f55fa0 R15: 00007ffcc06def28 [ 345.148198][T11167] [ 345.540720][ T9946] tipc: Subscription rejected, illegal request [ 345.667893][T11180] CIFS mount error: No usable UNC path provided in device string! [ 345.667893][T11180] [ 345.667938][T11180] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 345.880146][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1882'. [ 345.918359][T11190] batadv_slave_1: entered promiscuous mode [ 345.923921][T11189] batadv_slave_1: left promiscuous mode [ 346.218541][T11204] CIFS mount error: No usable UNC path provided in device string! [ 346.218541][T11204] [ 346.218561][T11204] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 346.412473][ T5116] Bluetooth: hci0: unexpected event for opcode 0x1407 [ 346.509861][T11214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1897'. [ 346.685830][T11218] batadv_slave_1: entered promiscuous mode [ 346.686778][T11217] batadv_slave_1: left promiscuous mode [ 346.726813][ T5882] usb 1-1: USB disconnect, device number 40 [ 346.939897][T11227] CIFS mount error: No usable UNC path provided in device string! [ 346.939897][T11227] [ 346.939918][T11227] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 347.020490][T11232] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1905'. [ 347.367088][T11251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1915'. [ 347.620816][T11260] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1919'. [ 347.631659][ T5903] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 347.782843][ T5903] usb 4-1: Using ep0 maxpacket: 16 [ 347.784677][ T5903] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 347.784702][ T5903] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 347.788000][ T5903] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 347.788029][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.788044][ T5903] usb 4-1: Product: syz [ 347.788052][ T5903] usb 4-1: Manufacturer: syz [ 347.788059][ T5903] usb 4-1: SerialNumber: syz [ 348.071339][ T5116] Bluetooth: hci2: unexpected event for opcode 0x1407 [ 348.080385][T11253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.081112][T11253] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.225619][ T5903] usb 4-1: 0:2 : does not exist [ 348.225706][ T5903] usb 4-1: unit 9 not found! [ 348.249965][ T5903] usb 4-1: 4:0: cannot get min/max values for control 1 (id 4) [ 348.256561][ T5903] usb 4-1: 4:0: cannot get min/max values for control 2 (id 4) [ 348.286010][ T5903] usb 4-1: 4:0: cannot get min/max values for control 3 (id 4) [ 348.295320][ T5903] usb 4-1: 4:0: cannot get min/max values for control 4 (id 4) [ 348.299752][ T5903] usb 4-1: 4:0: cannot get min/max values for control 5 (id 4) [ 348.306296][ T5903] usb 4-1: 4:0: cannot get min/max values for control 6 (id 4) [ 348.435731][T11281] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1930'. [ 348.472743][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 348.503555][ T5903] usb 4-1: USB disconnect, device number 68 [ 348.565368][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.812162][ T36] kauditd_printk_skb: 13 callbacks suppressed [ 348.812179][ T36] audit: type=1326 audit(1772886255.035:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11297 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 348.812223][ T36] audit: type=1326 audit(1772886255.035:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11297 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 348.814410][ T36] audit: type=1326 audit(1772886255.035:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11297 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 348.814665][ T36] audit: type=1326 audit(1772886255.035:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11297 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 348.814944][ T36] audit: type=1326 audit(1772886255.035:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11297 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 348.819335][ T36] audit: type=1326 audit(1772886255.035:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11297 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 348.819628][ T36] audit: type=1326 audit(1772886255.035:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11297 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 348.819884][ T36] audit: type=1326 audit(1772886255.035:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11297 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 348.842171][ T36] audit: type=1326 audit(1772886255.055:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11297 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 348.844067][ T36] audit: type=1326 audit(1772886255.065:1412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11297 comm="syz.3.1936" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 348.976568][T11302] netlink: 'syz.3.1936': attribute type 2 has an invalid length. [ 349.041673][ T986] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 349.056442][T11301] openvswitch: netlink: Flow actions attr not present in new flow. [ 349.192014][ T986] usb 1-1: Using ep0 maxpacket: 32 [ 349.217552][ T986] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 349.217588][ T986] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.217604][ T986] usb 1-1: config 0 has no interface number 0 [ 349.217646][ T986] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 349.241800][ T5854] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 349.278466][ T986] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 349.278496][ T986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.278514][ T986] usb 1-1: Product: syz [ 349.278525][ T986] usb 1-1: Manufacturer: syz [ 349.278537][ T986] usb 1-1: SerialNumber: syz [ 349.326690][ T986] usb 1-1: config 0 descriptor?? [ 349.338093][ T986] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 349.338189][ T986] radio-si470x 1-1:0.35: probe with driver radio-si470x failed with error -5 [ 349.394839][ T5854] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.394878][ T5854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 349.394890][ T5854] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.394926][ T5854] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 349.394949][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.462380][ T5854] usb 5-1: config 0 descriptor?? [ 349.531496][ T986] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 349.692729][ T49] usb 5-1: USB disconnect, device number 62 [ 349.774606][ T986] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 349.803868][ T986] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 349.808624][ T986] usb 1-1: USB disconnect, device number 41 [ 349.809955][ T986] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 350.008164][T11317] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1943'. [ 351.262454][ T31] hid (null): unknown global tag 0xd [ 351.262470][ T31] hid (null): unknown global tag 0xc [ 351.270249][ T31] hid-generic 0000:0004:280000.0016: unknown main item tag 0x2 [ 351.270282][ T31] hid-generic 0000:0004:280000.0016: unknown main item tag 0x7 [ 351.270308][ T31] hid-generic 0000:0004:280000.0016: unknown global tag 0xd [ 351.270320][ T31] hid-generic 0000:0004:280000.0016: item 0 1 1 13 parsing failed [ 351.270976][ T31] hid-generic 0000:0004:280000.0016: probe with driver hid-generic failed with error -22 [ 351.391763][ T986] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 351.442725][T11340] netlink: 'syz.3.1953': attribute type 3 has an invalid length. [ 351.442750][T11340] netlink: 120 bytes leftover after parsing attributes in process `syz.3.1953'. [ 351.551763][ T986] usb 1-1: Using ep0 maxpacket: 16 [ 351.571453][ T986] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 351.571469][ T986] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 351.594915][ T986] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 351.594935][ T986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.594945][ T986] usb 1-1: Product: syz [ 351.594952][ T986] usb 1-1: Manufacturer: syz [ 351.594959][ T986] usb 1-1: SerialNumber: syz [ 351.644389][ T5882] kernel read not supported for file task/864/attr/current (pid: 5882 comm: kworker/0:6) [ 351.840263][T11353] overlayfs: missing 'lowerdir' [ 351.922147][T11328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.922883][T11328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.990935][T11357] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 351.990954][T11357] IPv6: NLM_F_CREATE should be set when creating new route [ 351.991902][ T5882] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 352.081142][ T986] usb 1-1: 0:2 : does not exist [ 352.081373][ T986] usb 1-1: unit 9 not found! [ 352.103481][ T986] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 352.107271][ T986] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 352.131514][ T986] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 352.136693][ T986] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 352.141653][ T5882] usb 4-1: Using ep0 maxpacket: 32 [ 352.146193][ T5882] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 352.146219][ T5882] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.146236][ T5882] usb 4-1: config 0 has no interface number 0 [ 352.146272][ T5882] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.148953][ T5882] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 352.148983][ T5882] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.149001][ T5882] usb 4-1: Product: syz [ 352.149014][ T5882] usb 4-1: Manufacturer: syz [ 352.149027][ T5882] usb 4-1: SerialNumber: syz [ 352.233493][ T986] usb 1-1: 4:0: cannot get min/max values for control 5 (id 4) [ 352.237624][ T986] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 352.296838][ T5882] usb 4-1: config 0 descriptor?? [ 352.326279][ T5882] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 352.326363][ T5882] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 352.387244][ T986] usb 1-1: USB disconnect, device number 42 [ 352.474567][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 352.501174][ T5882] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 352.773549][ T5882] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 352.778541][ T5882] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 352.781057][ T5854] hid (null): unknown global tag 0xd [ 352.781077][ T5854] hid (null): unknown global tag 0xc [ 352.795665][ T5882] usb 4-1: USB disconnect, device number 69 [ 352.796725][ T5882] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 352.804104][ T5854] hid-generic 0000:0004:280000.0017: unknown main item tag 0x2 [ 352.804139][ T5854] hid-generic 0000:0004:280000.0017: unknown main item tag 0x7 [ 352.804166][ T5854] hid-generic 0000:0004:280000.0017: unknown global tag 0xd [ 352.804179][ T5854] hid-generic 0000:0004:280000.0017: item 0 1 1 13 parsing failed [ 352.804806][ T5854] hid-generic 0000:0004:280000.0017: probe with driver hid-generic failed with error -22 [ 353.171806][T11388] overlayfs: missing 'lowerdir' [ 353.551681][ T5882] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 353.702705][ T5882] usb 5-1: device descriptor read/64, error -71 [ 353.894374][T11418] overlayfs: missing 'lowerdir' [ 353.933709][T11422] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1985'. [ 353.944851][ T5882] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 353.962658][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.983720][T11425] fuse: Unknown parameter '' [ 354.091676][ T5882] usb 5-1: device descriptor read/64, error -71 [ 354.122085][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 354.171831][ T5854] usb 1-1: new full-speed USB device number 43 using dummy_hcd [ 354.202409][ T5882] usb usb5-port1: attempt power cycle [ 354.211846][ T5903] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 354.323742][ T5854] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 354.323773][ T5854] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.327548][ T5854] usb 1-1: config 0 descriptor?? [ 354.360632][ T5854] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 354.371786][ T5903] usb 2-1: Using ep0 maxpacket: 32 [ 354.382498][ T5903] usb 2-1: config 0 has an invalid interface number: 35 but max is 0 [ 354.382523][ T5903] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.382541][ T5903] usb 2-1: config 0 has no interface number 0 [ 354.382615][ T5903] usb 2-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 354.386172][ T5903] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 354.386209][ T5903] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.386227][ T5903] usb 2-1: Product: syz [ 354.386241][ T5903] usb 2-1: Manufacturer: syz [ 354.386287][ T5903] usb 2-1: SerialNumber: syz [ 354.396332][ T5903] usb 2-1: config 0 descriptor?? [ 354.432744][ T5903] radio-si470x 2-1:0.35: could not find interrupt in endpoint [ 354.432835][ T5903] radio-si470x 2-1:0.35: probe with driver radio-si470x failed with error -5 [ 354.541930][ T5882] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 354.572331][ T5882] usb 5-1: device descriptor read/8, error -71 [ 354.705066][ T5903] radio-raremono 2-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 355.516937][ T5903] radio-raremono 2-1:0.35: raremono_cmd_main failed (-71) [ 355.524587][ T5882] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 355.563957][ T5882] usb 5-1: device descriptor read/8, error -71 [ 355.608396][ T5903] radio-raremono 2-1:0.35: V4L2 device registered as radio48 [ 355.614205][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.616161][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.684218][ T5882] usb usb5-port1: unable to enumerate USB device [ 355.690168][ T5903] usb 2-1: USB disconnect, device number 66 [ 355.691036][ T5903] radio-raremono 2-1:0.35: Thanko's Raremono disconnected [ 355.742847][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 355.872183][T11437] netlink: 33024 bytes leftover after parsing attributes in process `syz.0.1984'. [ 355.877007][T11437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.877535][T11437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.896233][ T5854] gp8psk: usb in 138 operation failed. [ 355.896364][ T5854] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 355.896410][ T5854] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 355.942885][ T5854] usb 1-1: USB disconnect, device number 43 [ 355.948344][T11448] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.118272][T11453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.119326][T11453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.120144][T11453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.121003][T11453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.121480][T11453] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 356.173277][T11456] netdevsim netdevsim0 netdevsim0: refused to change device tx_queue_len [ 357.751664][ T986] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 357.901766][ T986] usb 4-1: device descriptor read/64, error -71 [ 358.151790][ T986] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 358.291715][ T986] usb 4-1: device descriptor read/64, error -71 [ 358.321839][ T31] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 358.414510][ T986] usb usb4-port1: attempt power cycle [ 358.481770][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 358.484124][ T31] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.484154][ T31] usb 1-1: config 0 interface 0 has no altsetting 0 [ 358.484187][ T31] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 358.484209][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.537762][ T31] usb 1-1: config 0 descriptor?? [ 359.399190][ C1] net_ratelimit: 12 callbacks suppressed [ 359.399221][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.400995][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.471658][ T986] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 359.497358][ T859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 359.508219][ T986] usb 4-1: device descriptor read/8, error -71 [ 359.634436][ T31] hid (null): unknown global tag 0xd [ 359.654688][ T31] nzxt-smart2 0003:1E71:2009.0018: unknown global tag 0xd [ 359.654723][ T31] nzxt-smart2 0003:1E71:2009.0018: item 0 4 1 13 parsing failed [ 359.656244][ T31] nzxt-smart2 0003:1E71:2009.0018: probe with driver nzxt-smart2 failed with error -22 [ 359.743710][ T986] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 359.762505][ T986] usb 4-1: device descriptor read/8, error -71 [ 359.799485][T11531] netlink: 'syz.2.2025': attribute type 25 has an invalid length. [ 359.873184][ T986] usb usb4-port1: unable to enumerate USB device [ 359.934564][ T31] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 359.957300][ T31] hid-generic 0000:0000:0000.0019: hidraw0: HID v0.00 Device [syz1] on syz0 [ 360.451988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.452301][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.522095][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.557184][T11549] netlink: 'syz.1.2029': attribute type 27 has an invalid length. [ 360.602029][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 360.677251][T11543] fido_id[11543]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 360.747925][T11547] batadv_slave_1: entered promiscuous mode [ 360.749203][T11544] batadv_slave_1: left promiscuous mode [ 360.779337][T11554] batadv_slave_1: entered promiscuous mode [ 360.786083][T11554] netlink: 'syz.3.2031': attribute type 27 has an invalid length. [ 360.787079][T11553] batadv_slave_1: left promiscuous mode [ 360.871991][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.857468][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.859372][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 361.947492][ T5786] usb 1-1: USB disconnect, device number 44 [ 362.050971][T11563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2034'. [ 362.260302][ T986] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 362.290255][ T986] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 362.378059][T11579] fido_id[11579]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 362.831659][ T986] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 362.954862][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2049'. [ 362.981614][ T986] usb 1-1: Using ep0 maxpacket: 16 [ 363.675494][ T986] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 363.675521][ T986] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.703805][ T986] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.703835][ T986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.703855][ T986] usb 1-1: Product: syz [ 363.703868][ T986] usb 1-1: Manufacturer: syz [ 363.703880][ T986] usb 1-1: SerialNumber: syz [ 364.028887][T11593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.030470][T11593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.088150][T11619] FAULT_INJECTION: forcing a failure. [ 364.088150][T11619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.088188][T11619] CPU: 0 UID: 0 PID: 11619 Comm: syz.1.2055 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 364.088214][T11619] Tainted: [L]=SOFTLOCKUP [ 364.088221][T11619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 364.088233][T11619] Call Trace: [ 364.088242][T11619] [ 364.088251][T11619] dump_stack_lvl+0xe8/0x150 [ 364.088284][T11619] should_fail_ex+0x46b/0x600 [ 364.088309][T11619] _copy_from_user+0x2d/0xb0 [ 364.088333][T11619] do_tcp_getsockopt+0x22e/0x2950 [ 364.088352][T11619] ? kernel_text_address+0xa5/0xe0 [ 364.088379][T11619] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 364.088397][T11619] ? sock_recv_errqueue+0x550/0x590 [ 364.088421][T11619] ? __lock_acquire+0x6b5/0x2cf0 [ 364.088457][T11619] ? kstrtoull+0x12f/0x1d0 [ 364.088478][T11619] ? kstrtouint+0x6e/0xe0 [ 364.088501][T11619] ? get_pid_task+0x20/0x1f0 [ 364.088524][T11619] ? __lock_acquire+0x6b5/0x2cf0 [ 364.088579][T11619] tcp_getsockopt+0x83/0x130 [ 364.088597][T11619] ? sock_recv_errqueue+0x550/0x590 [ 364.088617][T11619] ? sock_recv_errqueue+0x550/0x590 [ 364.088636][T11619] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 364.088658][T11619] do_sock_getsockopt+0x2d3/0x3f0 [ 364.088684][T11619] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 364.088710][T11619] ? ksys_write+0x202/0x270 [ 364.088740][T11619] __x64_sys_getsockopt+0x1aa/0x250 [ 364.088772][T11619] do_syscall_64+0x14d/0xf80 [ 364.088796][T11619] ? trace_irq_disable+0x3b/0x150 [ 364.088816][T11619] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.088834][T11619] ? clear_bhb_loop+0x40/0x90 [ 364.088856][T11619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.088874][T11619] RIP: 0033:0x7f37a4cfc799 [ 364.088892][T11619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.088908][T11619] RSP: 002b:00007f37a2f4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 364.088928][T11619] RAX: ffffffffffffffda RBX: 00007f37a4f75fa0 RCX: 00007f37a4cfc799 [ 364.088942][T11619] RDX: 000000000000000a RSI: 0000000000000006 RDI: 0000000000000003 [ 364.088953][T11619] RBP: 00007f37a2f4e090 R08: 0000200000000040 R09: 0000000000000000 [ 364.088965][T11619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.088976][T11619] R13: 00007f37a4f76038 R14: 00007f37a4f75fa0 R15: 00007ffe0bd77ef8 [ 364.089006][T11619] [ 364.405046][ T986] usb 1-1: 0:2 : does not exist [ 364.405130][ T986] usb 1-1: unit 9 not found! [ 364.425033][ T986] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 364.444990][ T986] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 364.449823][ T986] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 364.472579][ T986] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 364.477146][ T986] usb 1-1: 4:0: cannot get min/max values for control 5 (id 4) [ 364.498088][ T986] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 364.560158][ T986] usb 1-1: USB disconnect, device number 45 [ 364.654612][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2061'. [ 364.686370][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 365.573735][ C1] net_ratelimit: 8 callbacks suppressed [ 365.573771][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.575002][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.578095][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 365.853220][ T5854] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 365.879058][ T5786] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 365.921049][ T5854] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 365.921877][T11657] batadv_slave_1: entered promiscuous mode [ 365.926518][T11657] netlink: 'syz.3.2067': attribute type 27 has an invalid length. [ 365.944205][T11656] batadv_slave_1: left promiscuous mode [ 366.028824][ T5786] usb 5-1: Using ep0 maxpacket: 16 [ 366.029115][T11660] fido_id[11660]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 366.032810][ T5786] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 366.032833][ T5786] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 366.034705][ T5786] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 366.034730][ T5786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 366.034748][ T5786] usb 5-1: SerialNumber: syz [ 366.070610][ T5786] usb 5-1: 0:2 : does not exist [ 366.164589][T11663] overlayfs: missing 'lowerdir' [ 366.377813][ T5786] usb 5-1: USB disconnect, device number 67 [ 366.603260][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.604335][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.651755][ T5854] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 366.667727][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.767527][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.396348][ T5903] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.451674][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 367.459782][ T5854] usb 2-1: config 0 has no interfaces? [ 367.459819][ T5854] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 367.459842][ T5854] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.474054][ T5854] usb 2-1: config 0 descriptor?? [ 367.635555][T11688] loop6: detected capacity change from 0 to 7 [ 367.642178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.642590][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.693574][ T986] usb 2-1: USB disconnect, device number 67 [ 367.723478][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.778576][T10493] Dev loop6: unable to read RDB block 7 [ 367.778635][T10493] loop6: unable to read partition table [ 367.778871][T10493] loop6: partition table beyond EOD, truncated [ 367.793302][T11688] Dev loop6: unable to read RDB block 7 [ 367.793349][T11688] loop6: unable to read partition table [ 367.793567][T11688] loop6: partition table beyond EOD, truncated [ 367.793602][T11688] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 367.872343][ T5166] Dev loop6: unable to read RDB block 7 [ 367.872390][ T5166] loop6: unable to read partition table [ 367.872598][ T5166] loop6: partition table beyond EOD, truncated [ 367.953326][ T5786] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 367.974663][ T5786] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 368.269605][T11704] fido_id[11704]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 368.688882][T11726] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2089'. [ 368.803366][T11730] FAULT_INJECTION: forcing a failure. [ 368.803366][T11730] name failslab, interval 1, probability 0, space 0, times 0 [ 368.803417][T11730] CPU: 0 UID: 0 PID: 11730 Comm: syz.0.2090 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 368.803444][T11730] Tainted: [L]=SOFTLOCKUP [ 368.803451][T11730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 368.803466][T11730] Call Trace: [ 368.803477][T11730] [ 368.803486][T11730] dump_stack_lvl+0xe8/0x150 [ 368.803517][T11730] should_fail_ex+0x46b/0x600 [ 368.803550][T11730] should_failslab+0xa8/0x100 [ 368.803571][T11730] __kmalloc_noprof+0xdf/0x7b0 [ 368.803596][T11730] ? tomoyo_encode+0x28b/0x550 [ 368.803620][T11730] tomoyo_encode+0x28b/0x550 [ 368.803645][T11730] tomoyo_realpath_from_path+0x58d/0x5d0 [ 368.803674][T11730] ? tomoyo_path_number_perm+0x219/0x630 [ 368.803699][T11730] tomoyo_path_number_perm+0x246/0x630 [ 368.803728][T11730] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 368.803755][T11730] ? __lock_acquire+0x6b5/0x2cf0 [ 368.803808][T11730] ? __fget_files+0x2a/0x420 [ 368.803833][T11730] ? __fget_files+0x2a/0x420 [ 368.803853][T11730] ? __fget_files+0x3a6/0x420 [ 368.803872][T11730] ? __fget_files+0x2a/0x420 [ 368.803897][T11730] security_file_ioctl+0xc3/0x2a0 [ 368.803924][T11730] __se_sys_ioctl+0x47/0x170 [ 368.803952][T11730] do_syscall_64+0x14d/0xf80 [ 368.803975][T11730] ? trace_irq_disable+0x3b/0x150 [ 368.803994][T11730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.804014][T11730] ? clear_bhb_loop+0x40/0x90 [ 368.804036][T11730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.804054][T11730] RIP: 0033:0x7f96c8ecc799 [ 368.804070][T11730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.804086][T11730] RSP: 002b:00007f96c711e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.804107][T11730] RAX: ffffffffffffffda RBX: 00007f96c9145fa0 RCX: 00007f96c8ecc799 [ 368.804121][T11730] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000004 [ 368.804133][T11730] RBP: 00007f96c711e090 R08: 0000000000000000 R09: 0000000000000000 [ 368.804145][T11730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.804157][T11730] R13: 00007f96c9146038 R14: 00007f96c9145fa0 R15: 00007ffe489d8fd8 [ 368.804188][T11730] [ 368.804297][T11730] ERROR: Out of memory at tomoyo_realpath_from_path. [ 368.804775][T11730] loop6: detected capacity change from 0 to 7 [ 368.811060][T10493] Dev loop6: unable to read RDB block 7 [ 368.811105][T10493] loop6: unable to read partition table [ 368.811343][T10493] loop6: partition table beyond EOD, truncated [ 368.842747][T11730] Dev loop6: unable to read RDB block 7 [ 368.842790][T11730] loop6: unable to read partition table [ 368.842980][T11730] loop6: partition table beyond EOD, truncated [ 368.842995][T11730] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 368.871672][ T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 368.877226][ T5166] Dev loop6: unable to read RDB block 7 [ 368.877269][ T5166] loop6: unable to read partition table [ 368.877485][ T5166] loop6: partition table beyond EOD, truncated [ 369.041652][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 369.043548][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 369.043571][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 369.044723][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 369.044749][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 369.044768][ T9] usb 2-1: SerialNumber: syz [ 369.052356][ T986] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 369.197846][ T9] usb 2-1: 0:2 : does not exist [ 369.211640][ T986] usb 4-1: Using ep0 maxpacket: 16 [ 369.213871][ T986] usb 4-1: config 1 interface 0 altsetting 169 bulk endpoint 0x82 has invalid maxpacket 32 [ 369.213899][ T986] usb 4-1: config 1 interface 0 altsetting 169 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 369.213924][ T986] usb 4-1: config 1 interface 0 has no altsetting 0 [ 369.216466][ T986] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 369.216491][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.216508][ T986] usb 4-1: Product: В [ 369.216521][ T986] usb 4-1: Manufacturer: 뒩⏐럟浰യᙅ謁萃遬䛋擘휪宼뒠ἃ폔潬ࠄᗐ跙隫뇟颫议亮͆촜䌳ﯬ⣀藕ᛆ滚㒣젨冔롮翩焵ً㶹⋪⮨狼뾡Ｘ劋㌖ᭅ㫳ଶ㱎 [ 369.216544][ T986] usb 4-1: SerialNumber: ь [ 369.292322][T11726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 369.292506][T11726] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 369.400553][ T9] usb 2-1: USB disconnect, device number 68 [ 369.521253][ T5786] hid-generic 0000:0000:0000.001D: unknown main item tag 0x0 [ 369.532872][T10517] udevd[10517]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.539199][ T5786] hid-generic 0000:0000:0000.001D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 369.673858][T11738] fido_id[11738]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 369.703690][ T986] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 369.765271][ T986] usb 4-1: USB disconnect, device number 74 [ 370.107882][T11742] syz.0.2094 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 370.519927][T11755] bond2 (unregistering): Released all slaves [ 370.608580][T11762] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2103'. [ 370.682063][ T31] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 370.769075][ C1] net_ratelimit: 10 callbacks suppressed [ 370.769095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.769414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.842933][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 370.862600][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 370.862640][ T31] usb 4-1: can't read configurations, error -61 [ 370.958971][T11777] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2110'. [ 370.991655][ T31] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 371.121974][ T9] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 371.144717][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 371.144752][ T31] usb 4-1: can't read configurations, error -61 [ 371.145072][ T31] usb usb4-port1: attempt power cycle [ 371.189352][T11787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2115'. [ 371.251800][ T5786] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 371.283058][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 371.285827][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 371.285851][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 371.317110][ T9] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 371.317138][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 371.317156][ T9] usb 1-1: SerialNumber: syz [ 371.342545][ T9] usb 1-1: 0:2 : does not exist [ 371.401672][ T5786] usb 2-1: Using ep0 maxpacket: 16 [ 371.405247][ T5786] usb 2-1: config 1 interface 0 altsetting 169 bulk endpoint 0x82 has invalid maxpacket 32 [ 371.405277][ T5786] usb 2-1: config 1 interface 0 altsetting 169 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 371.405356][ T5786] usb 2-1: config 1 interface 0 has no altsetting 0 [ 371.411504][ T5786] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 371.413180][ T5786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.413203][ T5786] usb 2-1: Product: В [ 371.413216][ T5786] usb 2-1: Manufacturer: 뒩⏐럟浰യᙅ謁萃遬䛋擘휪宼뒠ἃ폔潬ࠄᗐ跙隫뇟颫议亮͆촜䌳ﯬ⣀藕ᛆ滚㒣젨冔롮翩焵ً㶹⋪⮨狼뾡Ｘ劋㌖ᭅ㫳ଶ㱎 [ 371.413284][ T5786] usb 2-1: SerialNumber: ь [ 371.436671][T11777] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 371.436892][T11777] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 371.521662][ T31] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 371.545936][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 371.545974][ T31] usb 4-1: can't read configurations, error -61 [ 371.671698][ T31] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 371.702234][ T31] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 371.702271][ T31] usb 4-1: can't read configurations, error -61 [ 371.702896][ T31] usb usb4-port1: unable to enumerate USB device [ 371.730523][ T9] usb 1-1: USB disconnect, device number 46 [ 371.802110][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.802487][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.868666][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 371.881982][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 371.916980][ T5786] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 372.001949][ T5786] usb 2-1: USB disconnect, device number 69 [ 372.265003][T11813] netlink: 'syz.2.2126': attribute type 25 has an invalid length. [ 372.389893][ T5786] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 372.404729][ T5786] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 372.527916][T11821] fido_id[11821]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 372.951760][ T5786] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 372.958075][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.959400][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.984449][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.788520][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 373.851687][ T5786] usb 1-1: Using ep0 maxpacket: 16 [ 373.904404][ T5786] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 373.904421][ T5786] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 373.931157][ T5786] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 373.931193][ T5786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 373.931218][ T5786] usb 1-1: SerialNumber: syz [ 373.979537][T11839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.999663][ T5786] usb 1-1: 0:2 : does not exist [ 374.277713][T11857] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2144'. [ 374.336060][ T5786] usb 1-1: USB disconnect, device number 47 [ 374.355978][T11858] bond2 (unregistering): Released all slaves [ 374.426817][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 374.651667][ T986] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 374.781199][T11873] batadv_slave_1: entered promiscuous mode [ 374.790103][T11873] netlink: 'syz.3.2150': attribute type 27 has an invalid length. [ 374.793316][T11870] batadv_slave_1: left promiscuous mode [ 374.815910][ T986] usb 5-1: Using ep0 maxpacket: 16 [ 374.821300][ T986] usb 5-1: config 1 interface 0 altsetting 169 bulk endpoint 0x82 has invalid maxpacket 32 [ 374.821331][ T986] usb 5-1: config 1 interface 0 altsetting 169 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 374.821355][ T986] usb 5-1: config 1 interface 0 has no altsetting 0 [ 374.828715][ T986] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 374.828745][ T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.828762][ T986] usb 5-1: Product: В [ 374.828776][ T986] usb 5-1: Manufacturer: 뒩⏐럟浰യᙅ謁萃遬䛋擘휪宼뒠ἃ폔潬ࠄᗐ跙隫뇟颫议亮͆촜䌳ﯬ⣀藕ᛆ滚㒣젨冔롮翩焵ً㶹⋪⮨狼뾡Ｘ劋㌖ᭅ㫳ଶ㱎 [ 374.828796][ T986] usb 5-1: SerialNumber: ь [ 374.835811][T11861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 374.835992][T11861] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 375.260911][ T986] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 375.278907][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2155'. [ 375.315582][ T986] usb 5-1: USB disconnect, device number 68 [ 375.588561][T11900] netlink: 'syz.3.2158': attribute type 1 has an invalid length. [ 376.364156][ C1] net_ratelimit: 6 callbacks suppressed [ 376.364178][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.365859][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.491186][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 376.585213][T11894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.844798][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.041713][ T5854] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 377.222329][T11936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.241692][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 377.251050][ T5854] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.251076][ T5854] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 377.252855][ T5854] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 377.252881][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 377.252899][ T5854] usb 4-1: SerialNumber: syz [ 377.270307][ T5854] usb 4-1: 0:2 : does not exist [ 377.391756][ T31] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 377.402063][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.402383][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.520317][ T5854] usb 4-1: USB disconnect, device number 79 [ 377.543224][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 377.555843][ T31] usb 5-1: config 226 has an invalid interface number: 167 but max is 1 [ 377.555871][ T31] usb 5-1: config 226 has an invalid interface number: 244 but max is 1 [ 377.555890][ T31] usb 5-1: config 226 has no interface number 0 [ 377.555912][ T31] usb 5-1: config 226 has no interface number 1 [ 377.555967][ T31] usb 5-1: config 226 interface 167 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 377.556000][ T31] usb 5-1: config 226 interface 244 altsetting 254 has a duplicate endpoint with address 0xF, skipping [ 377.556022][ T31] usb 5-1: config 226 interface 244 altsetting 254 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 377.556047][ T31] usb 5-1: config 226 interface 244 altsetting 254 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 377.556072][ T31] usb 5-1: config 226 interface 244 altsetting 254 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 377.556096][ T31] usb 5-1: config 226 interface 167 has no altsetting 0 [ 377.556113][ T31] usb 5-1: config 226 interface 244 has no altsetting 0 [ 377.559295][ T31] usb 5-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=a9.3b [ 377.559321][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.559339][ T31] usb 5-1: Product: syz [ 377.559352][ T31] usb 5-1: Manufacturer: syz [ 377.559366][ T31] usb 5-1: SerialNumber: syz [ 377.573949][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.649645][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 377.824249][ T31] usb 5-1: bad CDC descriptors [ 377.825623][ T31] usb 5-1: unsupported MDLM descriptors [ 377.835085][ T31] cdc_acm 5-1:226.244: Zero length descriptor references [ 377.835128][ T31] cdc_acm 5-1:226.244: probe with driver cdc_acm failed with error -22 [ 377.861941][ T31] usb 5-1: USB disconnect, device number 69 [ 378.076929][T11960] FAULT_INJECTION: forcing a failure. [ 378.076929][T11960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 378.076951][T11960] CPU: 0 UID: 0 PID: 11960 Comm: syz.3.2180 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 378.076966][T11960] Tainted: [L]=SOFTLOCKUP [ 378.076970][T11960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 378.076976][T11960] Call Trace: [ 378.076980][T11960] [ 378.076985][T11960] dump_stack_lvl+0xe8/0x150 [ 378.077005][T11960] should_fail_ex+0x46b/0x600 [ 378.077020][T11960] _copy_from_user+0x2d/0xb0 [ 378.077033][T11960] ___sys_sendmsg+0x1c6/0x360 [ 378.077051][T11960] ? __pfx____sys_sendmsg+0x10/0x10 [ 378.077067][T11960] ? kstrtouint+0x6e/0xe0 [ 378.077089][T11960] ? __fget_files+0x2a/0x420 [ 378.077101][T11960] ? __fget_files+0x3a6/0x420 [ 378.077118][T11960] __sys_sendmmsg+0x282/0x4e0 [ 378.077134][T11960] ? __pfx___sys_sendmmsg+0x10/0x10 [ 378.077152][T11960] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 378.077171][T11960] ? ksys_write+0x248/0x270 [ 378.077185][T11960] ? __pfx_ksys_write+0x10/0x10 [ 378.077202][T11960] __x64_sys_sendmmsg+0xa0/0xc0 [ 378.077217][T11960] do_syscall_64+0x14d/0xf80 [ 378.077230][T11960] ? trace_irq_disable+0x3b/0x150 [ 378.077243][T11960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.077253][T11960] ? clear_bhb_loop+0x40/0x90 [ 378.077265][T11960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.077275][T11960] RIP: 0033:0x7fba1a5ac799 [ 378.077286][T11960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.077296][T11960] RSP: 002b:00007fba18806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 378.077308][T11960] RAX: ffffffffffffffda RBX: 00007fba1a825fa0 RCX: 00007fba1a5ac799 [ 378.077316][T11960] RDX: 0000000000000001 RSI: 00002000000020c0 RDI: 0000000000000004 [ 378.077322][T11960] RBP: 00007fba18806090 R08: 0000000000000000 R09: 0000000000000000 [ 378.077329][T11960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 378.077335][T11960] R13: 00007fba1a826038 R14: 00007fba1a825fa0 R15: 00007fff189bd1e8 [ 378.077350][T11960] [ 378.442226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.442851][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 378.670586][ T5854] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 378.715006][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.715076][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.655366][ T5854] usb 4-1: no configurations [ 379.655386][ T5854] usb 4-1: can't read configurations, error -22 [ 379.737964][T11968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.775000][T11977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.782773][T11977] bond0: (slave rose0): Enslaving as an active interface with an up link [ 379.806723][ T5882] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 379.830391][ T5854] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 379.981674][ T5882] usb 2-1: Using ep0 maxpacket: 16 [ 379.984709][ T5882] usb 2-1: unable to get BOS descriptor or descriptor too short [ 379.985859][ T5882] usb 2-1: config 5 has an invalid interface number: 147 but max is 0 [ 379.985883][ T5882] usb 2-1: config 5 has no interface number 0 [ 379.985926][ T5882] usb 2-1: config 5 interface 147 has no altsetting 0 [ 379.988396][ T5882] usb 2-1: New USB device found, idVendor=0b63, idProduct=6530, bcdDevice=f4.12 [ 379.988421][ T5882] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.988439][ T5882] usb 2-1: Product: syz [ 379.988452][ T5882] usb 2-1: Manufacturer: syz [ 379.988464][ T5882] usb 2-1: SerialNumber: syz [ 380.021665][ T986] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 380.077650][ T5854] usb 4-1: no configurations [ 380.077670][ T5854] usb 4-1: can't read configurations, error -22 [ 380.078187][ T5854] usb usb4-port1: attempt power cycle [ 380.178344][ T986] usb 5-1: Using ep0 maxpacket: 16 [ 380.180693][ T986] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.180716][ T986] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 380.192254][ T986] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 380.192281][ T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 380.192301][ T986] usb 5-1: SerialNumber: syz [ 380.226148][ T986] usb 5-1: 0:2 : does not exist [ 380.351054][ T5882] pl2303 2-1:5.147: required endpoints missing [ 380.385002][ T5882] usb 2-1: USB disconnect, device number 70 [ 380.421685][ T5854] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 380.449990][ T5854] usb 4-1: no configurations [ 380.450008][ T5854] usb 4-1: can't read configurations, error -22 [ 380.507489][T12006] FAULT_INJECTION: forcing a failure. [ 380.507489][T12006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.507522][T12006] CPU: 0 UID: 0 PID: 12006 Comm: syz.0.2195 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 380.507545][T12006] Tainted: [L]=SOFTLOCKUP [ 380.507552][T12006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 380.507562][T12006] Call Trace: [ 380.507570][T12006] [ 380.507579][T12006] dump_stack_lvl+0xe8/0x150 [ 380.507607][T12006] should_fail_ex+0x46b/0x600 [ 380.507631][T12006] _copy_from_user+0x2d/0xb0 [ 380.507653][T12006] __sys_bpf+0x229/0x950 [ 380.507677][T12006] ? __pfx___sys_bpf+0x10/0x10 [ 380.507696][T12006] ? kmem_cache_free+0x185/0x6b0 [ 380.507744][T12006] ? ksys_write+0x202/0x270 [ 380.507771][T12006] ? __pfx_ksys_write+0x10/0x10 [ 380.507802][T12006] __x64_sys_bpf+0x7c/0x90 [ 380.507822][T12006] do_syscall_64+0x14d/0xf80 [ 380.507844][T12006] ? trace_irq_disable+0x3b/0x150 [ 380.507864][T12006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.507882][T12006] ? clear_bhb_loop+0x40/0x90 [ 380.507904][T12006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.507922][T12006] RIP: 0033:0x7f96c8ecc799 [ 380.507940][T12006] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 380.507956][T12006] RSP: 002b:00007f96c711e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 380.507976][T12006] RAX: ffffffffffffffda RBX: 00007f96c9145fa0 RCX: 00007f96c8ecc799 [ 380.507990][T12006] RDX: 0000000000000020 RSI: 0000200000000340 RDI: 0000000000000008 [ 380.508001][T12006] RBP: 00007f96c711e090 R08: 0000000000000000 R09: 0000000000000000 [ 380.508014][T12006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.508025][T12006] R13: 00007f96c9146038 R14: 00007f96c9145fa0 R15: 00007ffe489d8fd8 [ 380.508055][T12006] [ 380.561003][ T986] usb 5-1: USB disconnect, device number 70 [ 380.614554][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 380.732742][ T5854] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 380.759158][ T5854] usb 4-1: no configurations [ 380.759176][ T5854] usb 4-1: can't read configurations, error -22 [ 380.759483][ T5854] usb usb4-port1: unable to enumerate USB device [ 381.006377][T12019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2200'. [ 381.172776][T12029] netlink: 'syz.1.2205': attribute type 27 has an invalid length. [ 381.642005][ C1] net_ratelimit: 9 callbacks suppressed [ 381.642035][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.642449][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.837368][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.012095][T12030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.334505][T12035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.422869][ T986] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 382.607596][ T986] usb 4-1: Using ep0 maxpacket: 16 [ 382.609618][ T986] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 382.609643][ T986] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 382.611771][ T986] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 382.611798][ T986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 382.611818][ T986] usb 4-1: SerialNumber: syz [ 382.656375][ T986] usb 4-1: 0:2 : does not exist [ 382.681987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.682239][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.842062][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.974425][ T5854] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.000131][ T986] usb 4-1: USB disconnect, device number 84 [ 383.056165][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 383.304815][T12095] netlink: 'syz.4.2219': attribute type 27 has an invalid length. [ 383.613123][T12095] bond0: (slave bond_slave_0): Releasing backup interface [ 383.615029][T12102] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2221'. [ 383.721973][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.722318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.778722][T12105] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2222'. [ 383.791678][ T986] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 383.883655][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.934353][T12113] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2226'. [ 383.948678][ T986] usb 4-1: no configurations [ 383.948699][ T986] usb 4-1: can't read configurations, error -22 [ 384.081667][ T986] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 384.111668][ T5854] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 384.221737][ T5903] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 384.223935][T12126] FAULT_INJECTION: forcing a failure. [ 384.223935][T12126] name failslab, interval 1, probability 0, space 0, times 0 [ 384.223965][T12126] CPU: 0 UID: 0 PID: 12126 Comm: syz.1.2231 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 384.223980][T12126] Tainted: [L]=SOFTLOCKUP [ 384.223984][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 384.223991][T12126] Call Trace: [ 384.223995][T12126] [ 384.224001][T12126] dump_stack_lvl+0xe8/0x150 [ 384.224021][T12126] should_fail_ex+0x46b/0x600 [ 384.224036][T12126] should_failslab+0xa8/0x100 [ 384.224047][T12126] __kmalloc_noprof+0xdf/0x7b0 [ 384.224063][T12126] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 384.224082][T12126] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 384.224101][T12126] genl_family_rcv_msg_doit+0xd9/0x330 [ 384.224115][T12126] ? __asan_memcpy+0x40/0x70 [ 384.224130][T12126] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 384.224145][T12126] ? rcu_is_watching+0x15/0xb0 [ 384.224158][T12126] ? cap_capable+0x123/0x490 [ 384.224172][T12126] ? safesetid_security_capable+0xa9/0x1a0 [ 384.224187][T12126] ? bpf_lsm_capable+0x9/0x20 [ 384.224198][T12126] ? security_capable+0x7e/0x2c0 [ 384.224211][T12126] genl_rcv_msg+0x61c/0x7a0 [ 384.224228][T12126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.224241][T12126] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 384.224253][T12126] ? __pfx_nl802154_del_llsec_key+0x10/0x10 [ 384.224266][T12126] ? __pfx_nl802154_post_doit+0x10/0x10 [ 384.224280][T12126] ? __lock_acquire+0x6b5/0x2cf0 [ 384.224293][T12126] netlink_rcv_skb+0x232/0x4b0 [ 384.224306][T12126] ? __pfx_genl_rcv_msg+0x10/0x10 [ 384.224320][T12126] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 384.224339][T12126] ? netlink_deliver_tap+0x2e/0x1b0 [ 384.224350][T12126] ? netlink_deliver_tap+0x2e/0x1b0 [ 384.224363][T12126] genl_rcv+0x28/0x40 [ 384.224376][T12126] netlink_unicast+0x831/0x9f0 [ 384.224391][T12126] ? __pfx_netlink_unicast+0x10/0x10 [ 384.224402][T12126] ? netlink_sendmsg+0x650/0xb40 [ 384.224413][T12126] ? skb_put+0x11b/0x210 [ 384.224428][T12126] netlink_sendmsg+0x813/0xb40 [ 384.224447][T12126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 384.224460][T12126] ? unwind_get_return_address+0x4d/0x90 [ 384.224473][T12126] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 384.224490][T12126] ____sys_sendmsg+0x94c/0x9c0 [ 384.224508][T12126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 384.224526][T12126] ? import_iovec+0x73/0xa0 [ 384.224541][T12126] ___sys_sendmsg+0x2a5/0x360 [ 384.224558][T12126] ? __pfx____sys_sendmsg+0x10/0x10 [ 384.224590][T12126] ? __fget_files+0x2a/0x420 [ 384.224602][T12126] ? __fget_files+0x3a6/0x420 [ 384.224619][T12126] __x64_sys_sendmsg+0x1c3/0x2a0 [ 384.224634][T12126] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 384.224653][T12126] ? __pfx_ksys_write+0x10/0x10 [ 384.224674][T12126] do_syscall_64+0x14d/0xf80 [ 384.224687][T12126] ? trace_irq_disable+0x3b/0x150 [ 384.224698][T12126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.224709][T12126] ? clear_bhb_loop+0x40/0x90 [ 384.224721][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.224732][T12126] RIP: 0033:0x7f37a4cfc799 [ 384.224742][T12126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 384.224752][T12126] RSP: 002b:00007f37a2f4e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 384.224763][T12126] RAX: ffffffffffffffda RBX: 00007f37a4f75fa0 RCX: 00007f37a4cfc799 [ 384.224770][T12126] RDX: 0000000000000000 RSI: 0000200000000980 RDI: 0000000000000004 [ 384.224777][T12126] RBP: 00007f37a2f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 384.224784][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 384.224790][T12126] R13: 00007f37a4f76038 R14: 00007f37a4f75fa0 R15: 00007ffe0bd77ef8 [ 384.224806][T12126] [ 384.235265][ T986] usb 4-1: no configurations [ 384.235285][ T986] usb 4-1: can't read configurations, error -22 [ 384.236111][ T986] usb usb4-port1: attempt power cycle [ 384.331588][ T5854] usb 1-1: Using ep0 maxpacket: 16 [ 384.337140][ T5854] usb 1-1: config 1 interface 0 altsetting 169 bulk endpoint 0x82 has invalid maxpacket 32 [ 384.337160][ T5854] usb 1-1: config 1 interface 0 altsetting 169 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 384.337174][ T5854] usb 1-1: config 1 interface 0 has no altsetting 0 [ 384.392415][ T5854] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.392446][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.392457][ T5854] usb 1-1: Product: В [ 384.392465][ T5854] usb 1-1: Manufacturer: 뒩⏐럟浰യᙅ謁萃遬䛋擘휪宼뒠ἃ폔潬ࠄᗐ跙隫뇟颫议亮͆촜䌳ﯬ⣀藕ᛆ滚㒣젨冔롮翩焵ً㶹⋪⮨狼뾡Ｘ劋㌖ᭅ㫳ଶ㱎 [ 384.392476][ T5854] usb 1-1: SerialNumber: ь [ 384.431654][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 384.433409][ T5903] usb 5-1: config 1 interface 0 altsetting 169 bulk endpoint 0x82 has invalid maxpacket 32 [ 384.433437][ T5903] usb 5-1: config 1 interface 0 altsetting 169 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 384.433461][ T5903] usb 5-1: config 1 interface 0 has no altsetting 0 [ 384.441660][ T5903] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 384.441687][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.441706][ T5903] usb 5-1: Product: В [ 384.441719][ T5903] usb 5-1: Manufacturer: 뒩⏐럟浰യᙅ謁萃遬䛋擘휪宼뒠ἃ폔潬ࠄᗐ跙隫뇟颫议亮͆촜䌳ﯬ⣀藕ᛆ滚㒣젨冔롮翩焵ً㶹⋪⮨狼뾡Ｘ劋㌖ᭅ㫳ଶ㱎 [ 384.441735][ T5903] usb 5-1: SerialNumber: ь [ 384.571726][ T986] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 384.614195][ T986] usb 4-1: no configurations [ 384.614214][ T986] usb 4-1: can't read configurations, error -22 [ 384.617603][T12105] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 384.617721][T12105] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 384.629108][T12113] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 384.629222][T12113] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 384.709459][T12128] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2232'. [ 384.791667][ T986] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 384.825107][ T986] usb 4-1: no configurations [ 384.825126][ T986] usb 4-1: can't read configurations, error -22 [ 384.896394][ T986] usb usb4-port1: unable to enumerate USB device [ 385.051347][ T5854] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 385.063892][ T5903] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 385.107369][ T5854] usb 1-1: USB disconnect, device number 48 [ 385.110539][ T5903] usb 5-1: USB disconnect, device number 71 [ 385.191724][ T9] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 385.345966][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 385.347861][ T9] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.347891][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 385.347921][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 385.347944][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.353926][ T9] usb 2-1: config 0 descriptor?? [ 385.712085][T12152] FAULT_INJECTION: forcing a failure. [ 385.712085][T12152] name failslab, interval 1, probability 0, space 0, times 0 [ 385.712122][T12152] CPU: 1 UID: 0 PID: 12152 Comm: syz.0.2242 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 385.712147][T12152] Tainted: [L]=SOFTLOCKUP [ 385.712154][T12152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 385.712165][T12152] Call Trace: [ 385.712173][T12152] [ 385.712214][T12152] dump_stack_lvl+0xe8/0x150 [ 385.712245][T12152] should_fail_ex+0x46b/0x600 [ 385.712270][T12152] should_failslab+0xa8/0x100 [ 385.712291][T12152] __kmalloc_noprof+0xdf/0x7b0 [ 385.712315][T12152] ? kfree+0x4d/0x6c0 [ 385.712336][T12152] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 385.712361][T12152] tomoyo_realpath_from_path+0xe3/0x5d0 [ 385.712390][T12152] ? tomoyo_path_number_perm+0x219/0x630 [ 385.712414][T12152] tomoyo_path_number_perm+0x246/0x630 [ 385.712441][T12152] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 385.712466][T12152] ? __lock_acquire+0x6b5/0x2cf0 [ 385.712522][T12152] ? __fget_files+0x2a/0x420 [ 385.712547][T12152] ? __fget_files+0x2a/0x420 [ 385.712567][T12152] ? __fget_files+0x3a6/0x420 [ 385.712586][T12152] ? __fget_files+0x2a/0x420 [ 385.712611][T12152] security_file_ioctl+0xc3/0x2a0 [ 385.712638][T12152] __se_sys_ioctl+0x47/0x170 [ 385.712665][T12152] do_syscall_64+0x14d/0xf80 [ 385.712686][T12152] ? trace_irq_disable+0x3b/0x150 [ 385.712707][T12152] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.712726][T12152] ? clear_bhb_loop+0x40/0x90 [ 385.712748][T12152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.712766][T12152] RIP: 0033:0x7f96c8ecc799 [ 385.712784][T12152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.712799][T12152] RSP: 002b:00007f96c711e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 385.712819][T12152] RAX: ffffffffffffffda RBX: 00007f96c9145fa0 RCX: 00007f96c8ecc799 [ 385.712831][T12152] RDX: 0000200000000000 RSI: 0000000000008b18 RDI: 0000000000000003 [ 385.712842][T12152] RBP: 00007f96c711e090 R08: 0000000000000000 R09: 0000000000000000 [ 385.712853][T12152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.712865][T12152] R13: 00007f96c9146038 R14: 00007f96c9145fa0 R15: 00007ffe489d8fd8 [ 385.712895][T12152] [ 385.712903][T12152] ERROR: Out of memory at tomoyo_realpath_from_path. [ 385.735282][T12154] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2243'. [ 385.817013][ T9] hid (null): unknown global tag 0xd [ 385.837510][ T9] nzxt-smart2 0003:1E71:2009.001F: unknown global tag 0xd [ 385.837532][ T9] nzxt-smart2 0003:1E71:2009.001F: item 0 4 1 13 parsing failed [ 385.841480][ T9] nzxt-smart2 0003:1E71:2009.001F: probe with driver nzxt-smart2 failed with error -22 [ 386.219608][T12172] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2252'. [ 386.362204][ T31] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 386.491675][ T986] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 386.511631][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 386.513485][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.513509][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 386.517133][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 386.517150][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.517160][ T31] usb 1-1: Product: syz [ 386.517168][ T31] usb 1-1: Manufacturer: syz [ 386.517176][ T31] usb 1-1: SerialNumber: syz [ 386.671661][ T986] usb 5-1: Using ep0 maxpacket: 16 [ 386.675026][ T986] usb 5-1: config 1 interface 0 altsetting 169 bulk endpoint 0x82 has invalid maxpacket 32 [ 386.675055][ T986] usb 5-1: config 1 interface 0 altsetting 169 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 386.675130][ T986] usb 5-1: config 1 interface 0 has no altsetting 0 [ 386.677983][ T986] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 386.678058][ T986] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.678078][ T986] usb 5-1: Product: В [ 386.678090][ T986] usb 5-1: Manufacturer: 뒩⏐럟浰യᙅ謁萃遬䛋擘휪宼뒠ἃ폔潬ࠄᗐ跙隫뇟颫议亮͆촜䌳ﯬ⣀藕ᛆ滚㒣젨冔롮翩焵ً㶹⋪⮨狼뾡Ｘ劋㌖ᭅ㫳ଶ㱎 [ 386.678113][ T986] usb 5-1: SerialNumber: ь [ 386.783993][T12172] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 386.784081][T12172] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 386.851906][ C1] net_ratelimit: 7 callbacks suppressed [ 386.851920][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.852128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 386.888565][T12166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.889678][T12166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.971765][ T9] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 386.992946][ T31] usb 1-1: 0:2 : does not exist [ 386.993022][ T31] usb 1-1: unit 9 not found! [ 386.999899][ T31] usb 1-1: 4:0: cannot get min/max values for control 1 (id 4) [ 387.018944][ T5873] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.040912][ T31] usb 1-1: 4:0: cannot get min/max values for control 2 (id 4) [ 387.053410][ T31] usb 1-1: 4:0: cannot get min/max values for control 3 (id 4) [ 387.057241][ T31] usb 1-1: 4:0: cannot get min/max values for control 4 (id 4) [ 387.061123][ T31] usb 1-1: 4:0: cannot get min/max values for control 5 (id 4) [ 387.090072][ T31] usb 1-1: 4:0: cannot get min/max values for control 6 (id 4) [ 387.123551][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 387.134587][ T9] usb 4-1: config 0 has an invalid interface number: 35 but max is 0 [ 387.134613][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.134630][ T9] usb 4-1: config 0 has no interface number 0 [ 387.134673][ T9] usb 4-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 387.180550][ T9] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.ad [ 387.180650][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.180670][ T9] usb 4-1: Product: syz [ 387.180684][ T9] usb 4-1: Manufacturer: syz [ 387.180697][ T9] usb 4-1: SerialNumber: syz [ 387.206644][ T9] usb 4-1: config 0 descriptor?? [ 387.233359][ T986] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 387.252825][ T986] usb 5-1: USB disconnect, device number 72 [ 387.279945][ T31] usb 1-1: USB disconnect, device number 49 [ 387.293503][ T9] radio-si470x 4-1:0.35: could not find interrupt in endpoint [ 387.293587][ T9] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -5 [ 387.440663][ T9] radio-raremono 4-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 387.595764][T12184] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2257'. [ 387.659560][ T9] radio-raremono 4-1:0.35: raremono_cmd_main failed (-71) [ 387.663580][ T9] radio-raremono 4-1:0.35: V4L2 device registered as radio48 [ 387.684335][ T9] usb 4-1: USB disconnect, device number 89 [ 387.685184][ T9] radio-raremono 4-1:0.35: Thanko's Raremono disconnected [ 387.881981][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.882317][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 387.959751][ T9] usb 2-1: USB disconnect, device number 71 [ 388.170073][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.337921][T12208] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2268'. [ 388.381687][ T9] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 388.420497][T12212] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2270'. [ 388.471648][ T5903] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 388.541636][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 388.543537][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 388.543560][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 388.544687][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00 [ 388.544712][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 388.544730][ T9] usb 2-1: SerialNumber: syz [ 388.561315][ T9] usb 2-1: 0:2 : does not exist [ 388.621717][ T5903] usb 1-1: Using ep0 maxpacket: 16 [ 388.625807][ T5903] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.625839][ T5903] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 388.625943][ T5903] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 388.625965][ T5903] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.645238][ T5903] usb 1-1: config 0 descriptor?? [ 388.701710][ T5854] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 388.782738][T12194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 388.828269][ T9] usb 2-1: USB disconnect, device number 72 [ 388.851705][ T5854] usb 4-1: Using ep0 maxpacket: 16 [ 388.855329][ T5854] usb 4-1: config 1 interface 0 altsetting 169 bulk endpoint 0x82 has invalid maxpacket 32 [ 388.855360][ T5854] usb 4-1: config 1 interface 0 altsetting 169 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 388.855800][ T5854] usb 4-1: config 1 interface 0 has no altsetting 0 [ 388.860070][ T5854] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 388.860087][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.860098][ T5854] usb 4-1: Product: В [ 388.860105][ T5854] usb 4-1: Manufacturer: 뒩⏐럟浰യᙅ謁萃遬䛋擘휪宼뒠ἃ폔潬ࠄᗐ跙隫뇟颫议亮͆촜䌳ﯬ⣀藕ᛆ滚㒣젨冔롮翩焵ً㶹⋪⮨狼뾡Ｘ劋㌖ᭅ㫳ଶ㱎 [ 388.860117][ T5854] usb 4-1: SerialNumber: ь [ 388.923358][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.923724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.970111][T12212] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 388.970224][T12212] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 389.073546][T12218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2273'. [ 389.116267][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.143450][ T5903] razer 0003:1532:010D.0020: unknown main item tag 0x0 [ 389.143497][ T5903] razer 0003:1532:010D.0020: unknown main item tag 0x0 [ 389.143855][ T5903] razer 0003:1532:010D.0020: unknown main item tag 0x0 [ 389.143873][ T5903] razer 0003:1532:010D.0020: unknown main item tag 0x0 [ 389.143888][ T5903] razer 0003:1532:010D.0020: unknown main item tag 0x0 [ 389.143902][ T5903] razer 0003:1532:010D.0020: unknown main item tag 0x0 [ 389.143917][ T5903] razer 0003:1532:010D.0020: unknown main item tag 0x0 [ 389.143932][ T5903] razer 0003:1532:010D.0020: unknown main item tag 0x0 [ 389.143946][ T5903] razer 0003:1532:010D.0020: unknown main item tag 0x0 [ 389.143960][ T5903] razer 0003:1532:010D.0020: unknown main item tag 0x0 [ 389.195539][ T5903] razer 0003:1532:010D.0020: hidraw0: USB HID v0.08 Device [HID 1532:010d] on usb-dummy_hcd.0-1/input0 [ 389.242209][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.335972][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2265'. [ 389.420025][ T5854] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 389.456953][ T5854] usb 4-1: USB disconnect, device number 90 [ 389.601741][ T31] usb 1-1: USB disconnect, device number 50 [ 389.628691][T12219] fido_id[12219]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:1532:010D.0020/report_descriptor': No such device [ 389.972173][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 390.008360][T12235] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2279'. [ 390.031664][ T5903] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 390.131723][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 390.136119][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.136174][ T9] usb 2-1: New USB device found, idVendor=1038, idProduct=12c2, bcdDevice= 0.00 [ 390.136197][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.178218][ T9] usb 2-1: config 0 descriptor?? [ 390.187483][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 390.196840][ T5903] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 390.196867][ T5903] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.196885][ T5903] usb 5-1: config 0 has no interface number 0 [ 390.196929][ T5903] usb 5-1: config 0 interface 196 altsetting 1 endpoint 0x2 has invalid wMaxPacketSize 0 [ 390.196951][ T5903] usb 5-1: config 0 interface 196 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 390.196976][ T5903] usb 5-1: config 0 interface 196 has no altsetting 0 [ 390.268428][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 390.270777][ T5903] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 390.270803][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.270821][ T5903] usb 5-1: Product: syz [ 390.270834][ T5903] usb 5-1: Manufacturer: syz [ 390.270845][ T5903] usb 5-1: SerialNumber: syz [ 390.320522][ T5903] usb 5-1: config 0 descriptor?? [ 390.401678][ T5854] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 390.568414][ T5854] usb 4-1: no configurations [ 390.568434][ T5854] usb 4-1: can't read configurations, error -22 [ 390.632902][ T5903] ipheth 5-1:0.196: Unable to find endpoints [ 390.652072][ T986] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 390.652557][ T5903] usb 5-1: USB disconnect, device number 73 [ 390.691678][ T5854] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 390.811751][ T986] usb 1-1: Using ep0 maxpacket: 16 [ 390.817320][ T986] usb 1-1: config 226 has an invalid interface number: 167 but max is 1 [ 390.817348][ T986] usb 1-1: config 226 has an invalid interface number: 244 but max is 1 [ 390.817375][ T986] usb 1-1: config 226 has no interface number 0 [ 390.817390][ T986] usb 1-1: config 226 has no interface number 1 [ 390.817428][ T986] usb 1-1: config 226 interface 167 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 390.817447][ T986] usb 1-1: config 226 interface 244 altsetting 254 has a duplicate endpoint with address 0xF, skipping [ 390.817459][ T986] usb 1-1: config 226 interface 244 altsetting 254 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 390.817473][ T986] usb 1-1: config 226 interface 244 altsetting 254 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 390.817486][ T986] usb 1-1: config 226 interface 244 altsetting 254 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 390.817499][ T986] usb 1-1: config 226 interface 167 has no altsetting 0 [ 390.817509][ T986] usb 1-1: config 226 interface 244 has no altsetting 0 [ 390.819655][ T986] usb 1-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=a9.3b [ 390.819681][ T986] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.819698][ T986] usb 1-1: Product: syz [ 390.819706][ T986] usb 1-1: Manufacturer: syz [ 390.819713][ T986] usb 1-1: SerialNumber: syz [ 390.849148][ T5854] usb 4-1: no configurations [ 390.849167][ T5854] usb 4-1: can't read configurations, error -22 [ 390.869824][ T5854] usb usb4-port1: attempt power cycle [ 391.057994][ T986] usb 1-1: bad CDC descriptors [ 391.060395][ T986] usb 1-1: unsupported MDLM descriptors [ 391.081146][ T986] cdc_acm 1-1:226.244: Zero length descriptor references [ 391.081171][ T986] cdc_acm 1-1:226.244: probe with driver cdc_acm failed with error -22 [ 391.110988][ T986] usb 1-1: USB disconnect, device number 51 [ 391.206217][ T5786] usb 2-1: USB disconnect, device number 73 [ 391.281708][ T5854] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 391.304061][ T5854] usb 4-1: no configurations [ 391.304080][ T5854] usb 4-1: can't read configurations, error -22 [ 391.366093][T12262] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2291'. [ 391.399210][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2292'. [ 391.461660][ T5854] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 391.485599][ T5854] usb 4-1: no configurations [ 391.485617][ T5854] usb 4-1: can't read configurations, error -22 [ 391.485937][ T5854] usb usb4-port1: unable to enumerate USB device [ 391.615197][T12272] netlink: 'syz.0.2296': attribute type 27 has an invalid length. [ 391.636400][T12274] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2297'. [ 391.702307][T12272] bond0: (slave bond_slave_0): Releasing backup interface [ 392.041931][ C1] net_ratelimit: 8 callbacks suppressed [ 392.041952][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.042319][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.122080][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.171697][ T5854] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 392.224520][T12299] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2306'. [ 392.261847][ T986] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 392.333229][ T5854] usb 2-1: Using ep0 maxpacket: 32 [ 392.335126][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 392.335157][ T5854] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 392.335190][ T5854] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 392.338283][ T5854] usb 2-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 392.338309][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.338327][ T5854] usb 2-1: Product: syz [ 392.338339][ T5854] usb 2-1: Manufacturer: syz [ 392.338346][ T5854] usb 2-1: SerialNumber: syz [ 392.354712][ T5854] usb 2-1: config 0 descriptor?? [ 392.362421][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.369742][ T5854] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input12 [ 392.411673][ T986] usb 5-1: Using ep0 maxpacket: 32 [ 392.413775][ T986] usb 5-1: config 0 has no interfaces? [ 392.413808][ T986] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 392.413830][ T986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.727366][ T986] usb 5-1: config 0 descriptor?? [ 393.480828][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.482656][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.483901][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.497452][T12314] 9p: Bad value for 'wfdno' [ 393.537766][ T31] usb 5-1: USB disconnect, device number 74 [ 393.775010][ T986] usb 2-1: USB disconnect, device number 74 [ 393.778772][ C0] xpad 2-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 393.846228][T12316] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2311'. [ 394.078253][T12305] 9p: Bad value for 'rfdno' [ 394.887502][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.888789][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.890301][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 394.991692][ T5786] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 395.039885][T12322] FAULT_INJECTION: forcing a failure. [ 395.039885][T12322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.039920][T12322] CPU: 0 UID: 0 PID: 12322 Comm: syz.3.2313 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 395.039946][T12322] Tainted: [L]=SOFTLOCKUP [ 395.039953][T12322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 395.039965][T12322] Call Trace: [ 395.039973][T12322] [ 395.039981][T12322] dump_stack_lvl+0xe8/0x150 [ 395.040016][T12322] should_fail_ex+0x46b/0x600 [ 395.040041][T12322] _copy_from_user+0x2d/0xb0 [ 395.040065][T12322] __sys_bind+0x1cc/0x410 [ 395.040089][T12322] ? __pfx___sys_bind+0x10/0x10 [ 395.040121][T12322] ? __pfx_ksys_write+0x10/0x10 [ 395.040154][T12322] __x64_sys_bind+0x7a/0x90 [ 395.040174][T12322] do_syscall_64+0x14d/0xf80 [ 395.040196][T12322] ? trace_irq_disable+0x3b/0x150 [ 395.040216][T12322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.040235][T12322] ? clear_bhb_loop+0x40/0x90 [ 395.040257][T12322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.040274][T12322] RIP: 0033:0x7fba1a5ac799 [ 395.040292][T12322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.040308][T12322] RSP: 002b:00007fba18806028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 395.040328][T12322] RAX: ffffffffffffffda RBX: 00007fba1a825fa0 RCX: 00007fba1a5ac799 [ 395.040342][T12322] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 395.040354][T12322] RBP: 00007fba18806090 R08: 0000000000000000 R09: 0000000000000000 [ 395.040366][T12322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 395.040377][T12322] R13: 00007fba1a826038 R14: 00007fba1a825fa0 R15: 00007fff189bd1e8 [ 395.040406][T12322] [ 395.141638][ T5786] usb 1-1: Using ep0 maxpacket: 16 [ 395.181699][ T5786] usb 1-1: config 1 interface 0 altsetting 169 bulk endpoint 0x82 has invalid maxpacket 32 [ 395.181731][ T5786] usb 1-1: config 1 interface 0 altsetting 169 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 395.181756][ T5786] usb 1-1: config 1 interface 0 has no altsetting 0 [ 395.245370][ T5786] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 395.245398][ T5786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.245418][ T5786] usb 1-1: Product: В [ 395.245431][ T5786] usb 1-1: Manufacturer: 뒩⏐럟浰യᙅ謁萃遬䛋擘휪宼뒠ἃ폔潬ࠄᗐ跙隫뇟颫议亮͆촜䌳ﯬ⣀藕ᛆ滚㒣젨冔롮翩焵ً㶹⋪⮨狼뾡Ｘ劋㌖ᭅ㫳ଶ㱎 [ 395.245452][ T5786] usb 1-1: SerialNumber: ь [ 395.316810][T12316] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 395.317126][T12316] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 395.960682][ T5786] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 396.001738][ T5786] usb 1-1: USB disconnect, device number 52 [ 397.249506][ C1] net_ratelimit: 4 callbacks suppressed [ 397.249529][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.251012][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.306698][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.351735][T12338] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.845263][T12368] netlink: 'syz.2.2312': attribute type 27 has an invalid length. [ 398.081975][ T986] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 398.121951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.122395][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.193014][T12385] openvswitch: netlink: Unexpected mask (mask=208040, allowed=18048) [ 398.214002][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.238769][ T986] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 398.238805][ T986] usb 4-1: config 1 has no interface number 0 [ 398.238846][ T986] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 398.238870][ T986] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 398.238893][ T986] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 398.245675][ T986] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 398.245705][ T986] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.245724][ T986] usb 4-1: Product: syz [ 398.245737][ T986] usb 4-1: Manufacturer: syz [ 398.245751][ T986] usb 4-1: SerialNumber: syz [ 398.268876][T12370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 398.364064][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.488613][T12370] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 398.499841][ T986] usb 4-1: No status endpoint found [ 399.173375][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.187914][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.521647][ T49] usb 4-1: USB disconnect, device number 95 [ 399.573688][T12410] tipc: Enabling of bearer rejected, failed to enable media [ 399.695962][T12415] batadv_slave_1: entered promiscuous mode [ 399.696812][T12415] netlink: 'syz.4.2341': attribute type 27 has an invalid length. [ 399.697339][T12413] batadv_slave_1: left promiscuous mode [ 400.264954][T12436] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2352'. [ 400.271492][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 400.271625][ T36] audit: type=1326 audit(1772886306.485:1434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 400.317231][ T36] audit: type=1326 audit(1772886306.525:1435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 400.317281][ T36] audit: type=1326 audit(1772886306.535:1436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 400.317319][ T36] audit: type=1326 audit(1772886306.535:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 400.317356][ T36] audit: type=1326 audit(1772886306.535:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 400.317393][ T36] audit: type=1326 audit(1772886306.535:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 400.317429][ T36] audit: type=1326 audit(1772886306.535:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 400.317465][ T36] audit: type=1326 audit(1772886306.535:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 400.323950][ T36] audit: type=1326 audit(1772886306.545:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 400.323996][ T36] audit: type=1326 audit(1772886306.545:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12435 comm="syz.3.2351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fba1a5ac799 code=0x7ffc0000 [ 400.463569][T12444] FAULT_INJECTION: forcing a failure. [ 400.463569][T12444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 400.463604][T12444] CPU: 0 UID: 0 PID: 12444 Comm: syz.1.2355 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 400.463629][T12444] Tainted: [L]=SOFTLOCKUP [ 400.463636][T12444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 400.463647][T12444] Call Trace: [ 400.463655][T12444] [ 400.463664][T12444] dump_stack_lvl+0xe8/0x150 [ 400.463693][T12444] should_fail_ex+0x46b/0x600 [ 400.463718][T12444] _copy_to_user+0x31/0xb0 [ 400.463743][T12444] simple_read_from_buffer+0xe1/0x170 [ 400.463770][T12444] proc_fail_nth_read+0x1be/0x230 [ 400.463794][T12444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.463818][T12444] ? rw_verify_area+0x2ac/0x4e0 [ 400.463841][T12444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 400.463863][T12444] vfs_read+0x212/0xa80 [ 400.463894][T12444] ? __pfx_vfs_read+0x10/0x10 [ 400.463920][T12444] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 400.463944][T12444] ? lockdep_hardirqs_on+0x7a/0x110 [ 400.463965][T12444] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 400.463987][T12444] ? mutex_lock_nested+0x152/0x1d0 [ 400.464004][T12444] ? fdget_pos+0x252/0x320 [ 400.464034][T12444] ksys_read+0x156/0x270 [ 400.464059][T12444] ? __pfx_ksys_read+0x10/0x10 [ 400.464093][T12444] do_syscall_64+0x14d/0xf80 [ 400.464115][T12444] ? trace_irq_disable+0x3b/0x150 [ 400.464134][T12444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.464153][T12444] ? clear_bhb_loop+0x40/0x90 [ 400.464180][T12444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 400.464198][T12444] RIP: 0033:0x7f37a4cbcfce [ 400.464215][T12444] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.464231][T12444] RSP: 002b:00007f37a2f4dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 400.464250][T12444] RAX: ffffffffffffffda RBX: 00007f37a2f4e6c0 RCX: 00007f37a4cbcfce [ 400.464263][T12444] RDX: 000000000000000f RSI: 00007f37a2f4e0a0 RDI: 0000000000000004 [ 400.464275][T12444] RBP: 00007f37a2f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 400.464286][T12444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 400.464298][T12444] R13: 00007f37a4f76038 R14: 00007f37a4f75fa0 R15: 00007ffe0bd77ef8 [ 400.464328][T12444] [ 401.188001][T12471] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2366'. [ 401.192248][ T5786] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 401.356726][ T5786] usb 5-1: config 1 has an invalid interface number: 7 but max is 0 [ 401.356744][ T5786] usb 5-1: config 1 has no interface number 0 [ 401.356771][ T5786] usb 5-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 401.356785][ T5786] usb 5-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 401.356799][ T5786] usb 5-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 401.359110][ T5786] usb 5-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 401.359138][ T5786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.359156][ T5786] usb 5-1: Product: syz [ 401.359177][ T5786] usb 5-1: Manufacturer: syz [ 401.359191][ T5786] usb 5-1: SerialNumber: syz [ 401.402679][T12464] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 401.532453][T12479] 9pnet_fd: Insufficient options for proto=fd [ 401.772826][ T5786] usb 5-1: Error in usbnet_get_endpoints (-71) [ 401.795764][ T5786] usb 5-1: USB disconnect, device number 75 [ 402.597535][ C1] net_ratelimit: 39 callbacks suppressed [ 402.597559][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.599080][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.602177][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 402.754621][T12496] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2374'. [ 402.981842][ T5882] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 403.010631][T12505] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2378'. [ 403.142062][ T5882] usb 1-1: Using ep0 maxpacket: 32 [ 403.329681][ T5882] usb 1-1: config 0 has an invalid interface number: 242 but max is 0 [ 403.329708][ T5882] usb 1-1: config 0 has no interface number 0 [ 403.329917][ T5882] usb 1-1: config 0 interface 242 has no altsetting 0 [ 403.647933][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.662737][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.671379][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.931784][ T5882] usb 1-1: New USB device found, idVendor=9e28, idProduct=7e66, bcdDevice=5d.b2 [ 403.931816][ T5882] usb 1-1: New USB device strings: Mfr=55, Product=122, SerialNumber=3 [ 403.931843][ T5882] usb 1-1: Product: syz [ 403.931857][ T5882] usb 1-1: Manufacturer: syz [ 403.931870][ T5882] usb 1-1: SerialNumber: syz [ 403.946913][ T5882] usb 1-1: config 0 descriptor?? [ 403.981938][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.154425][T12516] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.158585][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.181738][ T5903] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 404.285367][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 404.347139][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 404.365235][ T5903] usb 5-1: config 1 interface 0 altsetting 169 bulk endpoint 0x82 has invalid maxpacket 32 [ 404.365265][ T5903] usb 5-1: config 1 interface 0 altsetting 169 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 404.365341][ T5903] usb 5-1: config 1 interface 0 has no altsetting 0 [ 404.377817][ T5903] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 404.378384][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.378407][ T5903] usb 5-1: Product: В [ 404.378420][ T5903] usb 5-1: Manufacturer: 뒩⏐럟浰യᙅ謁萃遬䛋擘휪宼뒠ἃ폔潬ࠄᗐ跙隫뇟颫议亮͆촜䌳ﯬ⣀藕ᛆ滚㒣젨冔롮翩焵ً㶹⋪⮨狼뾡Ｘ劋㌖ᭅ㫳ଶ㱎 [ 404.378441][ T5903] usb 5-1: SerialNumber: ь [ 404.463404][T12509] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 404.463586][T12509] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 404.472609][ T5882] usb 1-1: USB disconnect, device number 53 [ 404.695055][ T5903] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 404.731682][ T5903] usb 5-1: USB disconnect, device number 76 [ 405.064131][T12532] batadv_slave_1: entered promiscuous mode [ 405.065220][T12532] netlink: 'syz.0.2386': attribute type 27 has an invalid length. [ 405.065851][T12530] batadv_slave_1: left promiscuous mode [ 405.066065][T12533] 9pnet_fd: Insufficient options for proto=fd [ 406.146397][T12539] IPVS: set_ctl: invalid protocol: 104 172.20.20.65:20000 [ 407.592142][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 407.592161][ T36] audit: type=1326 audit(1772886313.815:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12560 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23363fc799 code=0x7ffc0000 [ 407.592213][ T36] audit: type=1326 audit(1772886313.815:1455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12560 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23363fc799 code=0x7ffc0000 [ 407.634333][T12545] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.673551][ T36] audit: type=1326 audit(1772886313.815:1456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12560 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f23363fc799 code=0x7ffc0000 [ 407.678314][ T36] audit: type=1326 audit(1772886313.895:1457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12560 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23363fc799 code=0x7ffc0000 [ 407.678374][ T36] audit: type=1326 audit(1772886313.895:1458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12560 comm="syz.2.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23363fc799 code=0x7ffc0000 [ 407.813203][T12573] 9pnet_fd: Insufficient options for proto=fd [ 407.961724][ T9] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 407.991754][ T5882] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 408.552089][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 409.325336][ C1] net_ratelimit: 12 callbacks suppressed [ 409.325359][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.327137][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.471826][ T5786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.471885][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.475187][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.475212][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 409.478917][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.478944][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.478963][ T9] usb 5-1: Product: syz [ 409.478976][ T9] usb 5-1: Manufacturer: syz [ 409.478989][ T9] usb 5-1: SerialNumber: syz [ 409.483523][ T5882] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 409.483548][ T5882] usb 1-1: config 1 has no interface number 0 [ 409.483588][ T5882] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 409.483613][ T5882] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 409.483636][ T5882] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 409.485794][ T5882] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 409.485819][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.485837][ T5882] usb 1-1: Product: syz [ 409.485850][ T5882] usb 1-1: Manufacturer: syz [ 409.485863][ T5882] usb 1-1: SerialNumber: syz [ 409.516833][T12567] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 409.564872][T12581] IPVS: set_ctl: invalid protocol: 104 172.20.20.65:20000 [ 409.728686][ T9] usb 5-1: 0:2 : does not exist [ 409.752813][ T5882] usb 1-1: Error in usbnet_get_endpoints (-71) [ 409.779449][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 409.818141][ T5882] usb 1-1: USB disconnect, device number 54 [ 410.018288][ T9] usb 5-1: USB disconnect, device number 77 [ 410.676051][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.678141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.679700][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.764386][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.849670][T10493] udevd[10493]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.971752][ T5116] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 411.427511][T12602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.507566][T12614] 9pnet_fd: Insufficient options for proto=fd [ 411.654712][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.660209][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.655615][T12619] IPVS: set_ctl: invalid protocol: 104 172.20.20.65:20000 [ 413.032402][T12633] batadv_slave_1: entered promiscuous mode [ 413.033455][T12633] netlink: 'syz.3.2422': attribute type 27 has an invalid length. [ 413.034159][T12632] batadv_slave_1: left promiscuous mode [ 414.162559][T12644] batadv_slave_1: entered promiscuous mode [ 414.163540][T12644] netlink: 'syz.0.2423': attribute type 27 has an invalid length. [ 414.164216][T12643] batadv_slave_1: left promiscuous mode [ 414.232220][T12639] erspan0: entered promiscuous mode [ 414.235169][T12639] erspan0: left promiscuous mode [ 414.300198][T12654] 9pnet_fd: Insufficient options for proto=fd [ 414.338699][T12657] netlink: 1012 bytes leftover after parsing attributes in process `syz.3.2429'. [ 414.441744][ T31] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 415.333310][ C1] net_ratelimit: 8 callbacks suppressed [ 415.333332][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.335411][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.340101][ T986] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 415.355334][ T31] usb 5-1: Using ep0 maxpacket: 16 [ 415.377954][ T31] usb 5-1: config 1 interface 0 altsetting 169 bulk endpoint 0x82 has invalid maxpacket 32 [ 415.377989][ T31] usb 5-1: config 1 interface 0 altsetting 169 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 415.378015][ T31] usb 5-1: config 1 interface 0 has no altsetting 0 [ 415.380513][ T31] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 415.380539][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.380557][ T31] usb 5-1: Product: В [ 415.380570][ T31] usb 5-1: Manufacturer: 뒩⏐럟浰യᙅ謁萃遬䛋擘휪宼뒠ἃ폔潬ࠄᗐ跙隫뇟颫议亮͆촜䌳ﯬ⣀藕ᛆ滚㒣젨冔롮翩焵ً㶹⋪⮨狼뾡Ｘ劋㌖ᭅ㫳ଶ㱎 [ 415.380592][ T31] usb 5-1: SerialNumber: ь [ 415.473574][T12647] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.473779][T12647] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.688022][ T31] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 415.711149][ T31] usb 5-1: USB disconnect, device number 78 [ 415.870254][T12671] bond2 (unregistering): Released all slaves [ 416.635934][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.637230][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.750353][ T31] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.984554][T12692] 9pnet_fd: Insufficient options for proto=fd [ 417.011132][T12695] netlink: 1012 bytes leftover after parsing attributes in process `syz.4.2442'. [ 417.215821][ T5882] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.258740][T12705] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2445'. [ 418.054553][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.056542][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.066313][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.123425][T12711] bond1 (unregistering): Released all slaves [ 419.307272][ T36] audit: type=1326 audit(1772886325.515:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12731 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4368cdc799 code=0x7ffc0000 [ 419.307323][ T36] audit: type=1326 audit(1772886325.525:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12731 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4368cdc799 code=0x7ffc0000 [ 419.366850][ T36] audit: type=1326 audit(1772886325.575:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12731 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=108 compat=0 ip=0x7f4368cdc799 code=0x7ffc0000 [ 419.366883][ T36] audit: type=1326 audit(1772886325.585:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12731 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4368cdc799 code=0x7ffc0000 [ 419.366906][ T36] audit: type=1326 audit(1772886325.585:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12731 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4368cdc799 code=0x7ffc0000 [ 419.367053][ T36] audit: type=1326 audit(1772886325.585:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12731 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f4368cdc799 code=0x7ffc0000 [ 419.367160][ T36] audit: type=1326 audit(1772886325.585:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12731 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4368cdc799 code=0x7ffc0000 [ 419.367315][ T36] audit: type=1326 audit(1772886325.585:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12731 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f4368cdc799 code=0x7ffc0000 [ 419.367464][ T36] audit: type=1326 audit(1772886325.585:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12731 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4368cdc799 code=0x7ffc0000 [ 419.367632][ T36] audit: type=1326 audit(1772886325.585:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12731 comm="syz.4.2455" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4368c9cfce code=0x7ffc0000 [ 419.401476][T12732] netlink: 'syz.4.2455': attribute type 2 has an invalid length. [ 419.541695][ T31] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 419.570618][T12741] 9pnet_fd: Insufficient options for proto=fd [ 419.936126][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 422.842242][T12751] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2463'. [ 423.241289][ C1] net_ratelimit: 8 callbacks suppressed [ 423.241310][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.247522][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.261391][ T49] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.288485][ T9] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 423.399515][T10493] ------------[ cut here ]------------ [ 423.399530][T10493] kcov->t != t [ 423.399541][T10493] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#1: udevd/10493 [ 423.399585][T10493] Modules linked in: [ 423.399606][T10493] CPU: 1 UID: 0 PID: 10493 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 423.399632][T10493] Tainted: [L]=SOFTLOCKUP [ 423.399639][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 423.399651][T10493] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 423.399674][T10493] Code: 10 00 00 48 8b bb 90 00 00 00 e8 06 58 54 00 48 89 df 5b 41 5e 41 5f e9 29 2f 5a 00 7c 1c 5b 41 5e 41 5f e9 cd b9 61 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 2b 53 60 09 48 89 df be 03 00 [ 423.399691][T10493] RSP: 0018:ffffc90004b87d20 EFLAGS: 00010202 [ 423.399707][T10493] RAX: dea02467efd3eb00 RBX: ffff888029311100 RCX: 0000000000000000 [ 423.399721][T10493] RDX: 00000000e8f3d702 RSI: ffffffff8ba64ce0 RDI: 00000000ffffffff [ 423.399734][T10493] RBP: ffffc90004b87e78 R08: ffffffff8b24a1d0 R09: ffffffff8ddcd780 [ 423.399748][T10493] R10: dffffc0000000000 R11: fffffbfff1ed49d7 R12: dffffc0000000000 [ 423.399762][T10493] R13: 0000000000000000 R14: ffff888029311108 R15: ffff888038309e80 [ 423.399776][T10493] FS: 00007ff8a8a8f880(0000) GS:ffff88812643d000(0000) knlGS:0000000000000000 [ 423.399792][T10493] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 423.399806][T10493] CR2: 0000559ab0a74b68 CR3: 000000003d506000 CR4: 00000000003526f0 [ 423.399823][T10493] Call Trace: [ 423.399831][T10493] [ 423.399842][T10493] do_exit+0x150/0x23c0 [ 423.399866][T10493] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 423.399894][T10493] ? reacquire_held_locks+0x104/0x190 [ 423.399926][T10493] ? rt_spin_lock+0x1e0/0x400 [ 423.399945][T10493] ? __pfx_do_exit+0x10/0x10 [ 423.399966][T10493] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 423.399996][T10493] ? rt_spin_unlock+0x160/0x200 [ 423.400019][T10493] do_group_exit+0x21b/0x2d0 [ 423.400045][T10493] __x64_sys_exit_group+0x3f/0x40 [ 423.400066][T10493] x64_sys_call+0x221a/0x2240 [ 423.400084][T10493] do_syscall_64+0x14d/0xf80 [ 423.400107][T10493] ? trace_irq_disable+0x3b/0x150 [ 423.400127][T10493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.400148][T10493] ? clear_bhb_loop+0x40/0x90 [ 423.400180][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.400199][T10493] RIP: 0033:0x7ff8a8bc76c5 [ 423.400216][T10493] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 423.400232][T10493] RSP: 002b:00007ffdab54d6c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 423.400250][T10493] RAX: ffffffffffffffda RBX: 0000559ab0a75a40 RCX: 00007ff8a8bc76c5 [ 423.400264][T10493] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 423.400276][T10493] RBP: 0000559ab0a4d910 R08: 0000000000000000 R09: 0000000000000000 [ 423.400289][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.400301][T10493] R13: 00007ffdab54d710 R14: 0000000000000000 R15: 0000000000000000 [ 423.400332][T10493] [ 423.400348][T10493] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 423.400364][T10493] CPU: 1 UID: 0 PID: 10493 Comm: udevd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 423.400390][T10493] Tainted: [L]=SOFTLOCKUP [ 423.400397][T10493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 423.400407][T10493] Call Trace: [ 423.400416][T10493] [ 423.400424][T10493] vpanic+0x56c/0xa60 [ 423.400451][T10493] ? __pfx__printk+0x10/0x10 [ 423.400471][T10493] ? __pfx_vpanic+0x10/0x10 [ 423.400495][T10493] ? is_bpf_text_address+0x292/0x2b0 [ 423.400520][T10493] ? is_bpf_text_address+0x26/0x2b0 [ 423.400553][T10493] panic+0xc5/0xd0 [ 423.400577][T10493] ? __pfx_panic+0x10/0x10 [ 423.400620][T10493] __warn+0x315/0x4f0 [ 423.400645][T10493] ? kcov_task_exit+0xf5/0x160 [ 423.400667][T10493] ? kcov_task_exit+0xf5/0x160 [ 423.400689][T10493] __report_bug+0x29a/0x540 [ 423.400719][T10493] ? kcov_task_exit+0xf5/0x160 [ 423.400741][T10493] ? __pfx___report_bug+0x10/0x10 [ 423.400768][T10493] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 423.400791][T10493] ? do_raw_spin_lock+0x12b/0x2f0 [ 423.400824][T10493] ? kcov_task_exit+0xf5/0x160 [ 423.400846][T10493] report_bug+0x16a/0x220 [ 423.400869][T10493] ? kcov_task_exit+0xf5/0x160 [ 423.400888][T10493] ? kcov_task_exit+0xf7/0x160 [ 423.400939][T10493] handle_bug+0x9c/0x200 [ 423.400967][T10493] exc_invalid_op+0x1a/0x50 [ 423.400997][T10493] asm_exc_invalid_op+0x1a/0x20 [ 423.401015][T10493] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 423.401035][T10493] Code: 10 00 00 48 8b bb 90 00 00 00 e8 06 58 54 00 48 89 df 5b 41 5e 41 5f e9 29 2f 5a 00 7c 1c 5b 41 5e 41 5f e9 cd b9 61 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 2b 53 60 09 48 89 df be 03 00 [ 423.401051][T10493] RSP: 0018:ffffc90004b87d20 EFLAGS: 00010202 [ 423.401068][T10493] RAX: dea02467efd3eb00 RBX: ffff888029311100 RCX: 0000000000000000 [ 423.401082][T10493] RDX: 00000000e8f3d702 RSI: ffffffff8ba64ce0 RDI: 00000000ffffffff [ 423.401097][T10493] RBP: ffffc90004b87e78 R08: ffffffff8b24a1d0 R09: ffffffff8ddcd780 [ 423.401112][T10493] R10: dffffc0000000000 R11: fffffbfff1ed49d7 R12: dffffc0000000000 [ 423.401127][T10493] R13: 0000000000000000 R14: ffff888029311108 R15: ffff888038309e80 [ 423.401152][T10493] ? rt_spin_lock+0x1e0/0x400 [ 423.401182][T10493] do_exit+0x150/0x23c0 [ 423.401208][T10493] ? _raw_spin_unlock_irqrestore+0x74/0x80 [ 423.401239][T10493] ? reacquire_held_locks+0x104/0x190 [ 423.401261][T10493] ? rt_spin_lock+0x1e0/0x400 [ 423.401280][T10493] ? __pfx_do_exit+0x10/0x10 [ 423.401301][T10493] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 423.401330][T10493] ? rt_spin_unlock+0x160/0x200 [ 423.401358][T10493] do_group_exit+0x21b/0x2d0 [ 423.401385][T10493] __x64_sys_exit_group+0x3f/0x40 [ 423.401405][T10493] x64_sys_call+0x221a/0x2240 [ 423.401423][T10493] do_syscall_64+0x14d/0xf80 [ 423.401446][T10493] ? trace_irq_disable+0x3b/0x150 [ 423.401467][T10493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.401488][T10493] ? clear_bhb_loop+0x40/0x90 [ 423.401512][T10493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.401530][T10493] RIP: 0033:0x7ff8a8bc76c5 [ 423.401547][T10493] Code: ff ff ff 64 89 02 eb d2 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 35 21 f7 0f 00 ba e7 00 00 00 eb 03 66 90 f4 89 d0 0f 05 <48> 3d 00 f0 ff ff 76 f3 f7 d8 64 89 06 eb ec 66 2e 0f 1f 84 00 00 [ 423.401564][T10493] RSP: 002b:00007ffdab54d6c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 423.401584][T10493] RAX: ffffffffffffffda RBX: 0000559ab0a75a40 RCX: 00007ff8a8bc76c5 [ 423.401599][T10493] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 423.401612][T10493] RBP: 0000559ab0a4d910 R08: 0000000000000000 R09: 0000000000000000 [ 423.401625][T10493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 423.401638][T10493] R13: 00007ffdab54d710 R14: 0000000000000000 R15: 0000000000000000 [ 423.401670][T10493] [ 423.401957][T10493] Kernel Offset: disabled