last executing test programs: 4m12.04314425s ago: executing program 2 (id=413): setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82d", 0x11) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x1) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x191, 0x1, 0x0, 0xdd9f83, 0x5, 0x2f, 0x2, 0x22, 0x8, 0x722, 0x6, 0x7, 0x7e, 0x27, 0x1c, {0x10000001, 0x6fd8e849}, 0x3, 0x9}}) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="ec000000ed0300012dbd7000fddbdf252ce04fe5f05cf1d066193b6535be5c471a40a8b89d4460a5f5cba94246c83e0934c559050c7307dfdd439b740e10f2b6412aaa523a906b9c48864a240fa021b3264b8350821c99018059bfc09ed742a97ce5d2f7dd6ac67235333def02c1c9f6916735807b57fb092d159f336cdd4e1c4b4554cc702a5b3067b65c1b121dbf8bd972fe3d0fa4cc6a9103ad8ae928ca96f7ffffff31f4f803e5b3450e300f9b03dbfcc56566e85f0e7fba7620cd7244396df07ee86d2ef055c9d5eaf3ad79863d952a58082e8b2dca566f7bc278d420d634c34a29b17c63556a00"], 0xec}, 0x1, 0x0, 0x0, 0x4810}, 0x44800) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1, 0x4}, 0xc) r4 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_clone(0x240800, &(0x7f00000002c0)="064527060051e9d3ff7d16fafb3e419c2b83685c0e129bc41a0f5e8aebc86b048bffe45ddc6089a34baea6dbd4aaf4acd107318e535fcc38a82255de49f7315c2b5c9165ab2cee740ee7aed336c4faacafb3e9c841e24136529a706002b7fccd6c9bc49eb4ad1deb0a5677b74ef0", 0x6e, &(0x7f0000000340), &(0x7f0000000440), &(0x7f0000000480)="814504988911a24fac0834b81116854d08e5b91284a9e7a6d4c132cc33f99d8f439bc1") setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000280)={0x4, "a5bc29"}, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001c00"], 0x14}}, 0x0) 4m9.349885179s ago: executing program 2 (id=418): pipe(0x0) ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x321, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x3000000}, 0x4000000) 4m9.178728018s ago: executing program 2 (id=419): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181003d000000000b0000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x40084) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x1bf6, 0x1800}, {0x3}], 0x2, 0x0) semop(0x0, &(0x7f0000001240)=[{0x0, 0xffff, 0x1000}], 0x1) pivot_root(&(0x7f0000000100)='./cgroup\x00', &(0x7f0000000140)='./cgroup\x00') semctl$GETNCNT(0x0, 0x2, 0xe, 0x0) r1 = semget$private(0x0, 0x4000, 0x0) semctl$GETALL(r1, 0x0, 0xd, 0x0) semctl$SEM_STAT_ANY(r1, 0x2, 0x14, &(0x7f00000001c0)=""/195) r2 = socket(0xa, 0x3, 0x87) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7a, r3}) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000000)={@local, 0x9, r3}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010128bd7033bae8801b7247cb00ebdbdf25100000003434df226992bf70117fff85414c843e236b0a10e03758808f90eca9658d300a48af27dfb5f5fb174394768bbf1d07773dc4cabb46c432f402c9017672109f9e02a6e6f95399ebf65f7ca9516b3b5122af9050e49ac786dfd8bb3ae9d0f493d2733482e2d0cc614e11effb759548b717528b1195e11fb62a4f5b4b38f2de77d3ba3d939ac073"], 0x14}, 0x1, 0x0, 0x0, 0x20004894}, 0x48000) 4m8.65824398s ago: executing program 2 (id=421): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) syz_usb_connect(0x0, 0x64, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a240108000b020102082407010500070e11240606060509000600040007000300390c2402050302060254df000a092402050001031f04092403", @ANYRES32], 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000140)='./file0/../file0\x00', 0x800, &(0x7f0000000180)={0x71, 0x70, 0x80000}, 0x20) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) openat$cgroup_subtree(r2, &(0x7f0000000100), 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f00000001c0)=0xc) mount$tmpfs(0x0, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f00000000c0), 0x8000, &(0x7f0000000240)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=r4]) mount$fuse(0x0, &(0x7f0000000100)='./file0/file0\x00', &(0x7f0000000280), 0x4211020, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB="2c726f6f7453303008303030303030303030fb17e930303030303430ee337187133030302c525ced", @ANYRESDEC=r4, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',blksize=0x0000000000000000,blksize=0x0000000000000200,blksize=0x0000000000001600,fsname=,smackfsroot=%,mask=MAY_APPEND,context=root,\x00']) r5 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) ioctl$KVM_TDX_INIT_VM(r2, 0xc008aeba, &(0x7f00000009c0)={0x1, 0x0, &(0x7f0000000840)={0x80000000, 0x200, [0x8001, 0x2, 0x1, 0x3, 0x5, 0x4], [0x0, 0x3, 0x800000000000, 0xb, 0x80, 0x4], [0x9dd5, 0x8, 0x7, 0x7, 0xf15, 0x3], '\x00', {0x3, 0x0, [{0xc, 0x0, 0x0, 0x3, 0x4, 0x1b224efe, 0xffffffff}, {0x80000019, 0x5, 0x0, 0x9, 0x1ccb, 0x4, 0x9}, {0x6, 0x3ff, 0x0, 0x5, 0x9, 0x0, 0x1}]}}}) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000300)={0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="20150d00d6ba00"/19], &(0x7f0000000180)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, &(0x7f00000001c0)={0x0, 0x22, 0x6, {[@local=@item_012={0x0, 0x2, 0xf}, @local=@item_4={0x3, 0x2, 0x1, "a8d9a95b"}]}}, 0x0}, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="20065f000000ddf60850a503bc04e84f6f0150420a61591a0d4b335b0b2ef7322efcc7b134c53f742a4f39aea268f6e867e5d2478c75037fd4317fb580ccfef0a8d8c874339f38af33eb6b558f23909418b95ffe48730162829c35815dc8dd681ce75ad337"], &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x2}, 0x0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r3], 0x0}) syz_usb_ep_write(r5, 0x76, 0xa4, &(0x7f0000000000)="692d0c6d07c81304bd4ef803cc4a8a4d17f0bd117149838628379c3b7250d66d4f969aa61bbd1b99b931982757fc8bc7b8eb98dbff8b3e3072f2f8a7571b150ef4f3452f60d72dd4c2bee244ab4e666da73fcc5cdff5899274bca359fd3b05b565248eb120d63b1b5d34eacc4cc8b8cbd3e2227f3f231f494661b370dc6a47bf436bd8b03f515887dfe5701420e94c7662a3b865035199a767197108ed94bec458104d51") syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000440)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r6, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r6, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd}) fcntl$lock(r6, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9}) close(0x3) 4m5.484350926s ago: executing program 2 (id=430): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfec0, @loopback}, 0x1c) 4m3.968666985s ago: executing program 2 (id=436): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r0 = socket$netlink(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c"], 0x28}], 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000640)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="769af336cd55d29b988c9bfab35d57a5401504000400040debac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4m3.38009246s ago: executing program 32 (id=436): creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c) link(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') (async) r0 = socket$netlink(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002a0003050002000000000000180000800c"], 0x28}], 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040000102030109026e0003017f0006080b0002012230230904000000010130000a2401100a00090000000904014cbcda4430000904010101010230000905010960"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000240)={0x44, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f00000009c0)={0x44, &(0x7f0000000640)={0x20, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r2, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="769af336cd55d29b988c9bfab35d57a5401504000400040debac"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x40, 0x3, "cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523679abf4579f9cd6564e64066681fb945bfe585ab6933a6f6514a0eebad4e3537"}, @NFTA_TARGET_NAME={0xa, 0x1, 'HMARK\x00'}, @NFTA_TARGET_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 7.752569904s ago: executing program 4 (id=1169): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120100009f187620ef170372362e010203010902240001000010000904bc00029e8833000905020200020200000905820220"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000029c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="200302"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000002640)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="0c10020be9ce73882623ebffffffffffff3fb1000000216b0c4c4afb43c38eae0cff85a36d17cd4359eab5ee2f81d7c7243a1bdd7db606bed967d6316d9c73a8e0d8318ef04bb51f063a3e9d29c60696f55c66fc6bc9a7438e77a93a57f0957c26f684287b9d7cfb"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000840)={0x40, 0xb, 0x2, "31fb"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000580)={0x0, 0x16, 0x2, "f610"}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000340)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000500)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000cc0)={0x18, 0x110, 0xfa00, {r2, 0x7fffffff, 0x12, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e20, @loopback}}}, 0x118) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x40, 0x17, 0x1, 't'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000004c0)={0x14, &(0x7f0000000240)={0x40, 0x23, 0x45, {0x45, 0xd, "071616d5056322c8c70140f32b2e6dad67a2af946529a3a13fefd1088169ea901478e45b484a77b564ba71e25a5694331196a953401cb7fdfc6933d21bf6afa26dad56"}}, &(0x7f00000003c0)={0x0, 0x3, 0xe9, @string={0xe9, 0x3, "edc30d9171edd9e98e56cb765f71301039dcdbbc03b05645d81a57a41f0a99d7dafbb40a373c45c4963f0bbd144f57f1b0edcee5b73688b28ea974e964575413f18a03c7d85490e6995b5d941e9c0a4c01352416d1be8d7bc143c264bf927b9610ce783d320cbc34ed9d72ea272a5327c5bcb0f28cf9c6a65f4152ec0ef4e2b9fa307721434e481f7017e3ea913800c80d8abf5931255e4ed11bba43f8e9461e946a580ac94400018056cf7f4e570c30546f19ef8f449471682da3e3fb05c9c6e85cce96aab1ec8948476d5e3159b46c5940567ef0e3277e4de64f974db5acfa8d464d90678a67"}}}, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x40, 0xa, 0x31, "17df70b6d06e6cd3d4ba3dbe8c526e9aa7016cbacd07a39db61eb99167da1fd1106779a670cf6d14bd7a53de6593964761"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000680)={0x20, 0x81, 0x2, "c64a"}, &(0x7f00000006c0)={0x20, 0x82, 0x3, "e1dc83"}, &(0x7f0000000700)={0x20, 0x83, 0x3, "635783"}, &(0x7f0000000740)={0x20, 0x84, 0x1, "12"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "668071"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) 3.838480936s ago: executing program 4 (id=1189): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000041000100fcff07fd040000000100000004004880140001801000108004000b8008000100ac1414bb080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 3.422005106s ago: executing program 1 (id=1191): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x4, 0x4}) ioctl$I2C_SLAVE(r1, 0x703, 0xc4) (async) ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f00000005c0)={0x0, 0x1, @raw_data=[0x5, 0x400006, 0x3015, 0xffffffff, 0x8, 0x3f, 0x7, 0xa, 0x7, 0x8, 0x4, 0x1, 0x80000001, 0x84, 0x1, 0xe9]}) 3.258007705s ago: executing program 4 (id=1192): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect(r0, &(0x7f0000000f40)=@l2tp6={0xa, 0x0, 0x10000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x4}, 0x80) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) ioctl$SG_SET_DEBUG(0xffffffffffffffff, 0x227e, &(0x7f0000000180)=0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x108101f) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="1800"/12], 0x78}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000000), 0x3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000129bd57be0b45dbdf250b00000004000b0004000a"], 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r5 = inotify_init1(0x800) ioctl$BTRFS_IOC_ADD_DEV(r5, 0x5000940a, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$kcm(r2, &(0x7f0000003200)={&(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x4e21, @broadcast}, 0x1, 0x3, 0x4, 0x4}}, 0x80, &(0x7f0000000680), 0x0, &(0x7f0000003240)=ANY=[@ANYBLOB="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"], 0x1c10}, 0x40020) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='wg0\x00', 0x4) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$SO_BINDTODEVICE_wg(r7, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) 3.071968586s ago: executing program 1 (id=1193): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r0, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) 2.975248299s ago: executing program 1 (id=1194): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/power/pm_test', 0x82, 0x10a) io_setup(0x4fe, &(0x7f0000000200)=0x0) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0xf, r0, &(0x7f0000000000)="46cac791", 0x4, 0x9, 0x4000000, 0x0, r0}]) 2.90292244s ago: executing program 4 (id=1195): readv(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/186, 0xba}], 0x1) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000000c0)={0xffff1000, 0xc00, 0x8}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000d0}, 0x8014) 2.760069476s ago: executing program 1 (id=1196): r0 = socket$kcm(0x2, 0x3, 0x106) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000380)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000080)="fbd2b9ed29d8974a6ce75f08916ac3b4da11bc1a", 0xffeb}], 0x1, 0x0, 0x0, 0xf5ff}, 0x0) 2.569789845s ago: executing program 1 (id=1198): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000480)={0x40, 0x1, 0x2, "8be7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000009ff000000a684000008000300", @ANYRES32=r5, @ANYBLOB="0c00238005"], 0x28}, 0x1, 0x0, 0x0, 0x24000080}, 0x40008c0) mkdirat(r1, &(0x7f00000000c0)='./bus\x00', 0xa4) mkdir(&(0x7f0000000040)='./bus\x00', 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@userxattr}]}) read$FUSE(r1, &(0x7f0000002780)={0x2020}, 0x5ecfb203) 2.072062707s ago: executing program 0 (id=1202): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) 1.828826403s ago: executing program 4 (id=1205): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e21, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x17}}, 0x1}}, 0x0, 0x0, 0x20, 0x0, "a72aa280b2bf65c867bb56d60d2496790b01a1253d395f1202cd1010a0fed7934e3e07a741ad98fc0f016d936c982478047f320d020ef1f60fd67b1270045da19137be4bc5272518db7a746636dc8114"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e24, 0x7, @loopback, 0x5}}, 0x0, 0x0, 0x22, 0x0, "ffa1f819be2d45e250fd26562ce09916a27aed631363a5432fb12e08113effb5bb89cfeafda5f79a8e28471efbdc66c9a6152cedb293e5cbbef69e0b815ed1c8e7fd762d9008b749b97592e880b340e1"}, 0xd8) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) syz_usb_connect(0x2, 0x3f6, &(0x7f0000000980)={{0x12, 0x1, 0x201, 0x95, 0x56, 0x6d, 0x10, 0x14c8, 0x3, 0x28b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3e4, 0x1, 0x5, 0x5, 0x10, 0xc, "", [{{0x9, 0x4, 0xf, 0x7, 0xe, 0x35, 0x48, 0x15, 0x1, [], [{{0x9, 0x5, 0xb, 0x10, 0x10, 0x48, 0x4}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x6, 0x5, 0x40}}, {{0x9, 0x5, 0xf, 0x1, 0x6f945d0fc1a68aec, 0x1, 0x8, 0xf8, [@generic={0xa5, 0x2, "3869090e9a06abc7d25b546375c5049c9bca0890af66612235e13eff1014ea950278e43eb75f5691a4e150914ee94bd530a6405c3ff8c5373c1cd2ece5d6d792b5793091468403905e51e8e86f721d13e9e46e13978124f2f74a1369b41e0ced9d1e9adc794c1998a5bb84859c5ae348ff28306660c432541085a61b8a6a03c29f2832e870a6f734171be7de0d1c438f56172f89e522f6cdc45315f3aef24b6da566fb"}]}}, {{0x9, 0x5, 0x6, 0x8, 0x20, 0x7, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xffff}, @generic={0x35, 0xa, "8c50bf9144ddf0b358368ca18f5158fe4284ae485f506b767d023d8d9373a068b9b947d10621304c550ee34a15b12b0cf29c2a"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x0, 0x7f, 0x4, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3}]}}, {{0x9, 0x5, 0x2, 0x10, 0x8, 0x9, 0x0, 0x5e, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xff, 0xd1f}]}}, {{0x9, 0x5, 0x2, 0x10, 0x200, 0x2, 0x5, 0x9, [@generic={0x45, 0xc, "c66b1d71cfb34d4e36b77b875deba4dc6d4c9b5c36a395b9e3f86931e016abbde235368c84f46ce62a66b266dc8e1312a820b7daf7bbe63cd343ce2797defeab8eedcf"}, @generic={0xb7, 0x2d, "1fec4e549f76afc29a79f9991019196794a075e2087a47e9b22feb685f1ded3dbc0fae8459c9ade94294380ef76ebed2b02230f1f29c94ad90ae5aabf325c9feec95d93f9bf4550948b13151a0539f782c59487e2691f6ff06db5129dd80748f79077fce53d329168c5318109ad2a750151389951bb0a6e31c0abe025eb479e07975cf029b33551809f4937e84eb2acc24db3ad399d7b9761cae98356fdea881670d77a123319457c66a0c45a1f7234d3ad217d778"}]}}, {{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x7, 0x5, 0x7, [@generic={0x34, 0x10, "15e1dad7d84ac2d9ca1343a9c784c3fe5aef9888d35cd766bd1466cc43288ba3ce700165adfd58da54088e43ee8bbc77e82d"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x8, 0x8, 0xbd, 0x1, [@generic={0x44, 0x9, "1d6eb6dd981a18b6f789054da9867587b29006d1f699a1b69c1fa0798f4d252a85052df516c0a149ee04b5c804ff48f96b5b4e047c18d9c30382a9573c67f3b92ed9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6f, 0x4}]}}, {{0x9, 0x5, 0x4, 0x0, 0x3ff, 0x3, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x7, 0xe}, @generic={0xc0, 0x22, "4c8c715dae2f6fb557c070a3bdb710ce36c6bb03327ce3216365178b583f8a0f2812644118f125c3e5cbeddd8f3a4091a3b712286bcb36525133c74d282108c9e7e1f91961543adc1a731e6c9db4d68440c8768062c48203335febe14f0483c4c4f7c5d741913dc273f3708ad6239b4c194c2fa1c9d5308cba0c4d37b4023fb97c84966aa52620534a291c9962fa3cc58f6eb790d6fef3caccd47441647333417dd6ceb8064216047077e112d60261512419446b5f18f9b09f2ec19e0f61"}]}}, {{0x9, 0x5, 0xf, 0x1, 0x400, 0x4, 0x6b, 0xa, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1}]}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x4, 0x1, 0xf}}, {{0x9, 0x5, 0x8, 0x0, 0x400, 0x4, 0x0, 0x3}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x0, 0x78, 0x2, [@generic={0x1c, 0x5, "8930f5599a3c92e991a28480630e94d824be13df4ef84b5be078"}]}}]}}]}}]}}, &(0x7f0000000f40)={0xa, &(0x7f0000000dc0)={0xa, 0x6, 0x201, 0x90, 0x9, 0x9e, 0x40, 0xb1}, 0x8, &(0x7f0000000e00)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0xcb, &(0x7f0000000e40)=@string={0xcb, 0x3, "bfd2a283a3d484d3ff8a96983cd5daee62cc0d95856411a692fe8eed9e6260d1b5cf1224903f84e109da9bccf6cc1920e7a860ddd69e3397493882a3f1ad2acee47f5c492e9d9939071ae1db2bbb40263aa568b21accdb76e917d16400eeb80167340e03e2db4e9f29e86e6295f913b71df220d16f36bef5aa5b318516c97222ebaac0057b0bd36d56c0f919d13b7f234c026f6bb2a5abec5cc316006a5d2d32f9eb3d3ea03dd0cb6d9390d839eba29fb5422ba968003977f0160bdaaddf1cd45f0a1615a25208caab"}}]}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000480)={'syztnl0\x00', r2, 0x7800, 0x8000, 0x1, 0xff, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x3, 0x0, 0x1, 0x4, 0x0, @loopback, @remote}}}}) r3 = openat$incfs(0xffffffffffffff9c, &(0x7f00000000c0)='.pending_reads\x00', 0x44102, 0x141) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0xd}}, './file0\x00'}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r4) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) connect(r5, &(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0x0, 0x2, 0x5, 0x6, "0fb3c97ce5f57198d1c07463d0d2e562426ab0b31c83aad92c1bb8227785aa08c3c9259a8a40969ce1b70034e37de91e5868b7590bdc7cc3d317d2b5bdfc12", 0xe}, 0x80) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r6, &(0x7f0000000040)=""/119, 0x77) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r4, 0x81, 0x1, &(0x7f0000000240)='\x00') ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x10, 0x0, {{0x5, 0x4, 0x0, 0x0, 0xfffffffffffffe06, 0x68, 0x0, 0x0, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @loopback}}}}) 1.775868747s ago: executing program 0 (id=1206): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x14) ioctl$KVM_SET_DEVICE_ATTR_vm(r0, 0x4018aee1, &(0x7f0000000040)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000000)={0x6, 0xe1}}) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async, rerun: 64) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) (async) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, &(0x7f00000000c0)=0xffffff7f) (async) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) ioctl$BLKPG(r3, 0x1269, &(0x7f0000000180)={0x1, 0x0, 0x98, &(0x7f00000000c0)={0x800, 0x4000000, 0xb}}) (async) syz_usb_connect(0x2, 0x3b, &(0x7f0000000e80)={{0x12, 0x1, 0x310, 0x8f, 0xae, 0x5b, 0x10, 0x421, 0x327, 0x8b96, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x7, 0x8a, 0x20, 0x0, "", [{{0x9, 0x4, 0x3e, 0x6, 0x0, 0x2, 0xfe, 0xee, 0x10, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0xfbff}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x8, 0x140, 0x81}}]}}]}}]}}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0}) 1.072076051s ago: executing program 0 (id=1207): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x20002, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)={0x301040, 0x184, 0x38}, &(0x7f00000001c0)='./file0\x00', 0x47, 0x0, 0x23456}) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000031c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x2000, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000003180)=@any_dev={0x1, 0x881, 0x0, 0x0, 0x1000, 0x9, 0x0, 0x0, 0x14}}}, 0x0) 993.766061ms ago: executing program 3 (id=1208): sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x90, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x601}, {0x6, 0x16, 0x8}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x5}, {0x6, 0x16, 0x261}, {0x5}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4080}, 0x20000804) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b00), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0xeaffffff, 0x20000000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008014}, 0x20000004) 993.520718ms ago: executing program 0 (id=1209): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x4c, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xb}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x56}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xffff2999}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) (async) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) (async) mlock(&(0x7f000012d000/0x2000)=nil, 0x2000) (async) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r4, &(0x7f0000000580)='1\x00', 0x2) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a0563000000000000010902"], 0x0) (async) write$sysctl(r4, &(0x7f00000000c0)='2\x00', 0x2) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xc, &(0x7f0000fee000)=0x3fa, 0x4) (async) bind$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0xce, 0x0}, 0x1}, 0x1c) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000000206010200000000000000000000000005000500050000000e0003006269746d61703a69700000000900020073797a30000000000500040001000000050001000700000053a4e978a98d7cbc8e5b2580c202d6e39c552f0fbf246a6a6dc7bfd072845d363f7920ee2e899f5b128a333bdc731721f1ce3f41317bdf197af25d5df6d9e1122390b30d02b6700c315ba956854a6fb6dfa4c87e317741503e9d5f35da8391c19162c0feeb273bd78c316f16e50712f30215e8a7ee93343981e14d6982f54fb23c8891ac78967d4f22c71b9bbaa6e14e3c5a6bd45aeeb608e1de9dfc8ee3c569"], 0x48}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) 857.330266ms ago: executing program 3 (id=1210): r0 = socket$kcm(0xa, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendmsg$sock(r0, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 570.921708ms ago: executing program 0 (id=1211): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$mtd(0x0, 0x896, 0x4000) ioctl$OTPERASE(r1, 0x400c4d19, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000140)=0x9) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000900)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf00d7815e381ad6e706033a0093b837dc6cc01e32efaec8c7a6ec08123d000200354001060400446b9bbc7a46e3988285dcdf12f21308f868fece01951fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_emit_vhci(&(0x7f00000009c0)=ANY=[@ANYBLOB="043e2010"], 0x9) add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r6 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r8, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0xb000, 0x4, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x8, 0x6, 0x40}, {0xffffffff, 0xe6e19000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff, 0x0, 0xf}, {0xe6ee2000, 0x3000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xeee96000, 0xa, 0x0, 0x1, 0xa6, 0x9, 0x0, 0xc, 0xfe, 0x4, 0x8}, {0x6000, 0xdddd0000, 0xe, 0xfc, 0x0, 0x4, 0x0, 0x4, 0x0, 0x3c}, {0x8000000, 0x0, 0xb, 0x78, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0x40000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x0, 0xfe, 0x0, 0x8}, {0x30000, 0x6000, 0x8, 0x0, 0x0, 0x5, 0x8, 0x40, 0xa2, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xeeef0000}, 0xddf8ffdb, 0x0, 0x54000, 0x80, 0xb, 0xf801, 0x0, [0x80000005, 0x0, 0x1]}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="78000000020e010100000000000000000100000905000400000000003c00078006000540000e000008001240000080002700150002000000080013400000000708000b400000000808000840000000e205000b00400000002000078008000a400c11000205001500030000000c00018008000140ac1414bb"], 0x78}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f0000000240)=0x100000001, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) syz_open_dev$evdev(&(0x7f00000000c0), 0x1, 0x42500) 570.717691ms ago: executing program 3 (id=1212): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xd6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000180)=0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a38000000030a03000000000000000000020000000900010073797a300000000009000300fff500006d0697540c0002400000000000000001"], 0x60}}, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000500)={'hsr0\x00', &(0x7f00000004c0)=@ethtool_sfeatures={0x3b, 0x2, [{0x200, 0x4a39b33c}, {0x2, 0xb}]}}) 281.355536ms ago: executing program 0 (id=1213): r0 = socket$kcm(0x10, 0x2, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000800)=ANY=[@ANYBLOB="1201100187010340b804020240000102030109021b000101fbb00c0904"], 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000300)=ANY=[@ANYRES8=0x0], 0x340a) write$tun(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x5d) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000100)={0x1, 'vlan0\x00', {}, 0x4719}) 239.951972ms ago: executing program 3 (id=1214): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(0x0, r0) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r1, 0x701, 0x70bd2d, 0x25dfdbff}, 0x14}}, 0x10044880) 160.782213ms ago: executing program 3 (id=1215): ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000280)={'syz_tun\x00', {0x2, 0x4e24, @local}}) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000500)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r2, 0x0, 0x90) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x2c, &(0x7f0000000100)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x800}]}, &(0x7f0000000200)=0x10) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x353, @time={0x95}}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000100000044000180060001000a00000008000500000000000c00070000000000000000000800090030000000090006"], 0x58}}, 0x0) 2.581159ms ago: executing program 3 (id=1216): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000100), 0x0, 0x605c0) ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000280)) ioctl$FE_SET_VOLTAGE(r0, 0x6f43, &(0x7f0000000000)=0x1) 2.369097ms ago: executing program 1 (id=1217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x1b, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 4 (id=1218): r0 = socket$kcm(0x10, 0x400000002, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_tables_names\x00') getsockopt$packet_buf(r1, 0x107, 0xd, &(0x7f00000001c0)=""/41, &(0x7f0000000200)=0x29) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000000)=[{&(0x7f0000004700)=""/4077, 0xfed}, {&(0x7f0000003540)=""/4065, 0xfe1}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000540)=""/115, 0x73}, {&(0x7f00000000c0)=""/163, 0xa3}, {&(0x7f00000002c0)=""/185, 0xb9}], 0x6}, 0x20) kernel console output (not intermixed with test programs): Mfr=1, Product=2, SerialNumber=3 [ 438.885303][ T5704] usb 2-1: Product: syz [ 438.885319][ T5704] usb 2-1: Manufacturer: syz [ 438.885336][ T5704] usb 2-1: SerialNumber: syz [ 439.319337][ T5704] option 2-1:127.202: GSM modem (1-port) converter detected [ 439.344849][ T5704] usb 2-1: USB disconnect, device number 124 [ 439.355719][ T5704] option 2-1:127.202: device disconnected [ 439.440240][ T5696] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 439.599438][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.599491][ T5696] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 439.599517][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.630316][ T5696] usb 1-1: config 0 descriptor?? [ 439.884688][ T5696] usbhid 1-1:0.0: can't add hid device: -71 [ 439.884820][ T5696] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 439.936989][ T5696] usb 1-1: USB disconnect, device number 107 [ 440.032870][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.032987][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.140610][ T9132] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 440.466550][ T5696] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 440.629786][ T5696] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.629842][ T5696] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 440.629868][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.667480][ T5696] usb 1-1: config 0 descriptor?? [ 440.716605][ T5746] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 440.836525][ T5704] usb 2-1: new high-speed USB device number 125 using dummy_hcd [ 440.881147][ T5746] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 440.881244][ T5746] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 440.881274][ T5746] usb 4-1: config 1 interface 0 has no altsetting 0 [ 440.915170][ T5746] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 440.915912][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.915943][ T5746] usb 4-1: Product: syz [ 440.915958][ T5746] usb 4-1: Manufacturer: syz [ 440.915975][ T5746] usb 4-1: SerialNumber: syz [ 440.988229][ T9138] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 440.988444][ T9138] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 440.995807][ T5704] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.995890][ T5704] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 440.995987][ T5704] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 440.996014][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.027900][ T5704] usb 2-1: config 0 descriptor?? [ 441.081691][ T5704] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 441.203109][ T9138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.205882][ T9138] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.272652][ T38] usb 2-1: USB disconnect, device number 125 [ 441.357829][ T5746] rtl8150 4-1:1.0: couldn't reset the device [ 441.358282][ T5746] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 441.405204][ T5746] usb 4-1: USB disconnect, device number 105 [ 441.498169][ T5696] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 441.519950][ T5696] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input104 [ 441.816561][ T38] usb 2-1: new high-speed USB device number 126 using dummy_hcd [ 441.906231][ T5696] usb 1-1: USB disconnect, device number 108 [ 441.906335][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 441.991319][ T38] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 441.991377][ T38] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.991424][ T38] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 441.991447][ T38] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.043934][ T38] usb 2-1: config 0 descriptor?? [ 442.063669][ T38] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 442.198199][ T5703] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 442.355380][ T5703] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 442.355442][ T5703] usb 4-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 442.381970][ T5703] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 442.382005][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.382035][ T5703] usb 4-1: Product: syz [ 442.382052][ T5703] usb 4-1: Manufacturer: syz [ 442.382069][ T5703] usb 4-1: SerialNumber: syz [ 442.453244][ T5704] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 442.680982][ T5696] usb 4-1: USB disconnect, device number 106 [ 443.706833][ T5704] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 443.776755][ T5704] ath9k_htc: Failed to initialize the device [ 443.828941][ T5696] usb 4-1: ath9k_htc: USB layer deinitialized [ 444.137110][ T5696] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 444.196673][ T5746] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 444.296729][ T5696] usb 4-1: Using ep0 maxpacket: 32 [ 444.302618][ T5696] usb 4-1: config index 0 descriptor too short (expected 69, got 27) [ 444.302696][ T5696] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 444.304548][ T5696] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=72.65 [ 444.304578][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 444.304599][ T5696] usb 4-1: Product: syz [ 444.304619][ T5696] usb 4-1: SerialNumber: syz [ 444.373738][ T5696] ldusb 4-1:1.0: Interrupt in endpoint not found [ 444.376749][ T38] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 444.392414][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.392452][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.392477][ T5746] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 444.392523][ T5746] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 444.392549][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.463669][ T5746] usb 5-1: config 0 descriptor?? [ 444.484337][ T5704] usb 2-1: USB disconnect, device number 126 [ 444.556507][ T38] usb 1-1: Using ep0 maxpacket: 16 [ 444.564604][ T38] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.564871][ T38] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.564898][ T38] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 444.564946][ T38] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 444.565198][ T38] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.682552][ T5703] usb 4-1: USB disconnect, device number 107 [ 444.697870][ T38] usb 1-1: config 0 descriptor?? [ 444.923868][ T5746] hid_parser_main: 49 callbacks suppressed [ 444.923889][ T5746] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 444.924104][ T5746] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 444.924125][ T5746] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 444.924145][ T5746] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 444.924164][ T5746] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 444.924193][ T5746] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 444.924405][ T5746] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 444.924426][ T5746] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 444.924446][ T5746] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 444.924466][ T5746] plantronics 0003:047F:FFFF.001F: unknown main item tag 0x0 [ 444.978463][ T5704] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 445.061412][ T5746] plantronics 0003:047F:FFFF.001F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 445.144407][ T38] hid-multitouch 0003:0457:07DA.0020: hidraw1: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 445.171364][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.171420][ T5704] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 445.171448][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.212283][ T5704] usb 2-1: config 0 descriptor?? [ 445.325573][ T38] usb 1-1: USB disconnect, device number 109 [ 445.437056][ T5704] usbhid 2-1:0.0: can't add hid device: -71 [ 445.437152][ T5704] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 445.463126][ T5704] usb 2-1: USB disconnect, device number 127 [ 445.936596][ T5704] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 446.089121][ T5704] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.089192][ T5704] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 446.089220][ T5704] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.129022][ T5704] usb 2-1: config 0 descriptor?? [ 446.196679][ T38] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 446.358544][ T38] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 446.358584][ T38] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 446.358614][ T38] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 446.358641][ T38] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 446.358711][ T38] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 446.358739][ T38] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.388905][ T38] usb 1-1: config 0 descriptor?? [ 446.453241][ T9202] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 446.947717][ T5704] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 446.972375][ T5704] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input105 [ 447.026551][ T38] plantronics 0003:047F:FFFF.0021: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 447.095084][ T5705] usb 5-1: USB disconnect, device number 57 [ 447.313964][ T9202] FAULT_INJECTION: forcing a failure. [ 447.313964][ T9202] name failslab, interval 1, probability 0, space 0, times 0 [ 447.313999][ T9202] CPU: 1 UID: 0 PID: 9202 Comm: syz.0.991 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.314025][ T9202] Tainted: [L]=SOFTLOCKUP [ 447.314032][ T9202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 447.314044][ T9202] Call Trace: [ 447.314057][ T9202] [ 447.314071][ T9202] dump_stack_lvl+0xe8/0x150 [ 447.314102][ T9202] should_fail_ex+0x467/0x600 [ 447.314140][ T9202] should_failslab+0xa8/0x100 [ 447.314160][ T9202] __kmalloc_cache_node_noprof+0xac/0x670 [ 447.314188][ T9202] ? kasan_save_track+0x4f/0x80 [ 447.314214][ T9202] ? __kasan_kmalloc+0x93/0xb0 [ 447.314240][ T9202] ? __get_vm_area_node+0x136/0x300 [ 447.314262][ T9202] ? __get_vm_area_node+0x136/0x300 [ 447.314286][ T9202] ? __vb2_perform_fileio+0x287/0x1660 [ 447.314308][ T9202] __get_vm_area_node+0x136/0x300 [ 447.314335][ T9202] __vmalloc_node_range_noprof+0x34e/0x1560 [ 447.314363][ T9202] ? vb2_vmalloc_alloc+0xef/0x360 [ 447.314416][ T9202] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.314444][ T9202] ? __kasan_kmalloc+0x93/0xb0 [ 447.314473][ T9202] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 447.314506][ T9202] vmalloc_user_noprof+0xad/0xe0 [ 447.314533][ T9202] ? vb2_vmalloc_alloc+0xef/0x360 [ 447.314565][ T9202] vb2_vmalloc_alloc+0xef/0x360 [ 447.314601][ T9202] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 447.314636][ T9202] __vb2_queue_alloc+0xa0b/0x1660 [ 447.314693][ T9202] vb2_core_reqbufs+0xc3f/0x1470 [ 447.314731][ T9202] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 447.314761][ T9202] ? arch_stack_walk+0xfb/0x150 [ 447.314789][ T9202] ? __vb2_init_fileio+0x1e2/0x1040 [ 447.314817][ T9202] ? __vb2_init_fileio+0x1e2/0x1040 [ 447.314852][ T9202] __vb2_init_fileio+0x310/0x1040 [ 447.314892][ T9202] __vb2_perform_fileio+0x287/0x1660 [ 447.314912][ T9202] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.314931][ T9202] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.314949][ T9202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.314968][ T9202] ? vb2_fop_read+0xfb/0x370 [ 447.314999][ T9202] vb2_fop_read+0x28b/0x370 [ 447.315034][ T9202] v4l2_read+0x19f/0x2c0 [ 447.315067][ T9202] vfs_readv+0x588/0x850 [ 447.315098][ T9202] ? __pfx_v4l2_read+0x10/0x10 [ 447.315141][ T9202] ? __pfx_vfs_readv+0x10/0x10 [ 447.315182][ T9202] ? __fget_files+0x2a/0x420 [ 447.315207][ T9202] ? __fget_files+0x3a8/0x420 [ 447.315226][ T9202] ? __fget_files+0x2a/0x420 [ 447.315254][ T9202] __se_sys_preadv2+0x17a/0x2a0 [ 447.315281][ T9202] ? __pfx___se_sys_preadv2+0x10/0x10 [ 447.315309][ T9202] ? __x64_sys_preadv2+0x20/0xc0 [ 447.315334][ T9202] do_syscall_64+0x17b/0x530 [ 447.315353][ T9202] ? irqentry_exit+0x10f/0x8f0 [ 447.315371][ T9202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.315390][ T9202] ? clear_bhb_loop+0x40/0x90 [ 447.315413][ T9202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.315432][ T9202] RIP: 0033:0x7f39951fde99 [ 447.315452][ T9202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.315470][ T9202] RSP: 002b:00007f3993456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 447.315492][ T9202] RAX: ffffffffffffffda RBX: 00007f3995485fa0 RCX: 00007f39951fde99 [ 447.315518][ T9202] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000006 [ 447.315530][ T9202] RBP: 00007f3993456090 R08: 0000000000000007 R09: 0000000000000000 [ 447.315542][ T9202] R10: 0000000000000054 R11: 0000000000000246 R12: 0000000000000001 [ 447.315572][ T9202] R13: 00007f3995486038 R14: 00007f3995485fa0 R15: 00007ffd33a83118 [ 447.315601][ T9202] [ 447.316526][ T5696] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 447.364856][ T9202] syz.0.991: vmalloc error: size 8347648, align 0x1000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset= [ 447.478856][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 447.478871][ T38] usb 2-1: USB disconnect, device number 2 [ 447.739878][ T5696] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.740082][ T5696] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.740218][ T5696] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 447.740300][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.803960][ T9202] / [ 447.851887][ T5696] usb 4-1: config 0 descriptor?? [ 447.887866][ T5696] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 447.889946][ T9202] ,mems_allowed=0-1 [ 447.892299][ T9202] CPU: 1 UID: 0 PID: 9202 Comm: syz.0.991 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 447.892333][ T9202] Tainted: [L]=SOFTLOCKUP [ 447.892341][ T9202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 447.892355][ T9202] Call Trace: [ 447.892364][ T9202] [ 447.892380][ T9202] dump_stack_lvl+0xe8/0x150 [ 447.892417][ T9202] warn_alloc+0x24c/0x270 [ 447.892458][ T9202] ? __pfx_warn_alloc+0x10/0x10 [ 447.892490][ T9202] ? kasan_save_track+0x4f/0x80 [ 447.892522][ T9202] ? __kasan_kmalloc+0x93/0xb0 [ 447.892566][ T9202] ? __get_vm_area_node+0x2af/0x300 [ 447.892609][ T9202] __vmalloc_node_range_noprof+0x376/0x1560 [ 447.892671][ T9202] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 447.892704][ T9202] ? __kasan_kmalloc+0x93/0xb0 [ 447.892739][ T9202] ? __kmalloc_cache_noprof+0x3cd/0x670 [ 447.892777][ T9202] vmalloc_user_noprof+0xad/0xe0 [ 447.892809][ T9202] ? vb2_vmalloc_alloc+0xef/0x360 [ 447.892851][ T9202] vb2_vmalloc_alloc+0xef/0x360 [ 447.892889][ T9202] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 447.892927][ T9202] __vb2_queue_alloc+0xa0b/0x1660 [ 447.892994][ T9202] vb2_core_reqbufs+0xc3f/0x1470 [ 447.893050][ T9202] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 447.893099][ T9202] ? arch_stack_walk+0xfb/0x150 [ 447.893135][ T9202] ? __vb2_init_fileio+0x1e2/0x1040 [ 447.893171][ T9202] ? __vb2_init_fileio+0x1e2/0x1040 [ 447.893213][ T9202] __vb2_init_fileio+0x310/0x1040 [ 447.893267][ T9202] __vb2_perform_fileio+0x287/0x1660 [ 447.893293][ T9202] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 447.893323][ T9202] ? lockdep_hardirqs_on+0x7a/0x110 [ 447.893346][ T9202] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 447.893370][ T9202] ? vb2_fop_read+0xfb/0x370 [ 447.893413][ T9202] vb2_fop_read+0x28b/0x370 [ 447.893454][ T9202] v4l2_read+0x19f/0x2c0 [ 447.893498][ T9202] vfs_readv+0x588/0x850 [ 447.893538][ T9202] ? __pfx_v4l2_read+0x10/0x10 [ 447.893576][ T9202] ? __pfx_vfs_readv+0x10/0x10 [ 447.893631][ T9202] ? __fget_files+0x2a/0x420 [ 447.893664][ T9202] ? __fget_files+0x3a8/0x420 [ 447.893686][ T9202] ? __fget_files+0x2a/0x420 [ 447.893718][ T9202] __se_sys_preadv2+0x17a/0x2a0 [ 447.893749][ T9202] ? __pfx___se_sys_preadv2+0x10/0x10 [ 447.893788][ T9202] ? __x64_sys_preadv2+0x20/0xc0 [ 447.893818][ T9202] do_syscall_64+0x17b/0x530 [ 447.893837][ T9202] ? irqentry_exit+0x10f/0x8f0 [ 447.893855][ T9202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.893874][ T9202] ? clear_bhb_loop+0x40/0x90 [ 447.893902][ T9202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.893921][ T9202] RIP: 0033:0x7f39951fde99 [ 447.893944][ T9202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 447.893961][ T9202] RSP: 002b:00007f3993456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 447.893985][ T9202] RAX: ffffffffffffffda RBX: 00007f3995485fa0 RCX: 00007f39951fde99 [ 447.894000][ T9202] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000006 [ 447.894012][ T9202] RBP: 00007f3993456090 R08: 0000000000000007 R09: 0000000000000000 [ 447.894028][ T9202] R10: 0000000000000054 R11: 0000000000000246 R12: 0000000000000001 [ 447.894039][ T9202] R13: 00007f3995486038 R14: 00007f3995485fa0 R15: 00007ffd33a83118 [ 447.894068][ T9202] [ 447.910510][ T9202] Mem-Info: [ 447.910562][ T9202] active_anon:23412 inactive_anon:0 isolated_anon:0 [ 447.910562][ T9202] active_file:0 inactive_file:56172 isolated_file:0 [ 447.910562][ T9202] unevictable:768 dirty:62 writeback:0 [ 447.910562][ T9202] slab_reclaimable:12032 slab_unreclaimable:97123 [ 447.910562][ T9202] mapped:25810 shmem:17755 pagetables:1546 [ 447.910562][ T9202] sec_pagetables:3 bounce:0 [ 447.910562][ T9202] kernel_misc_reclaimable:0 [ 447.910562][ T9202] free:1303802 free_pcp:1811 free_cma:0 [ 447.910749][ T9202] Node 0 active_anon:93648kB inactive_anon:0kB active_file:0kB inactive_file:224476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103240kB dirty:248kB writeback:0kB shmem:69484kB kernel_stack:14752kB pagetables:6032kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 447.910869][ T9202] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:64kB pagetables:152kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 447.911009][ T9202] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.911208][ T9202] lowmem_reserve[]: 0 2490 2490 2490 2490 [ 447.911318][ T9202] Node 0 DMA32 free:1276836kB boost:0kB min:3908kB low:6428kB high:8948kB reserved_highatomic:0KB free_highatomic:0KB active_anon:93648kB inactive_anon:0kB active_file:0kB inactive_file:224476kB unevictable:1536kB writepending:248kB zspages:0kB present:3129332kB managed:2550076kB mlocked:0kB bounce:0kB free_pcp:7244kB local_pcp:2816kB free_cma:0kB [ 447.911555][ T9202] lowmem_reserve[]: 0 0 0 0 0 [ 447.911647][ T9202] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:552kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.911830][ T9202] lowmem_reserve[]: 0 0 0 0 0 [ 447.911928][ T9202] Node 1 Normal free:3923012kB boost:0kB min:6372kB low:10480kB high:14588kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 447.917113][ T9202] lowmem_reserve[]: 0 0 0 0 0 [ 447.917278][ T9202] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 447.917666][ T9202] Node 0 DMA32: 623*4kB (UM) 45*8kB (UM) 246*16kB (UM) 259*32kB (UME) 68*64kB (UME) 36*128kB (UME) 16*256kB (UME) 7*512kB (ME) 4*1024kB (ME) 6*2048kB (UME) 300*4096kB (UM) = 1276900kB [ 447.918118][ T9202] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 447.918475][ T9202] Node 1 Normal: 3*4kB (UM) 7*8kB (UM) 8*16kB (UM) 6*32kB (UM) 7*64kB (UM) 8*128kB (UM) 1*256kB (M) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 956*4096kB (M) = 3923012kB [ 447.921835][ T9202] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.921889][ T9202] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 447.921984][ T9202] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 447.922036][ T9202] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 447.922100][ T9202] 73923 total pagecache pages [ 447.922154][ T9202] 0 pages in swap cache [ 447.922175][ T9202] Free swap = 124996kB [ 447.922198][ T9202] Total swap = 124996kB [ 447.922229][ T9202] 2097051 pages RAM [ 447.922251][ T9202] 0 pages HighMem/MovableOnly [ 447.922274][ T9202] 427780 pages reserved [ 447.922297][ T9202] 0 pages cma reserved [ 448.135480][ T5696] usb 4-1: USB disconnect, device number 108 [ 448.142848][ T5584] usb 1-1: USB disconnect, device number 110 [ 449.149869][ T5696] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 449.215137][ T9232] FAULT_INJECTION: forcing a failure. [ 449.215137][ T9232] name failslab, interval 1, probability 0, space 0, times 0 [ 449.215168][ T9232] CPU: 1 UID: 0 PID: 9232 Comm: syz.4.1001 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 449.215191][ T9232] Tainted: [L]=SOFTLOCKUP [ 449.215198][ T9232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 449.215208][ T9232] Call Trace: [ 449.215215][ T9232] [ 449.215222][ T9232] dump_stack_lvl+0xe8/0x150 [ 449.215272][ T9232] should_fail_ex+0x467/0x600 [ 449.215308][ T9232] should_failslab+0xa8/0x100 [ 449.215332][ T9232] __kmalloc_cache_noprof+0xa1/0x670 [ 449.215367][ T9232] ? vb2_vmalloc_alloc+0xb2/0x360 [ 449.215400][ T9232] ? vb2_vmalloc_alloc+0xb2/0x360 [ 449.215444][ T9232] ? __kmalloc_noprof+0x436/0x790 [ 449.215470][ T9232] vb2_vmalloc_alloc+0xb2/0x360 [ 449.215496][ T9232] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 449.215523][ T9232] __vb2_queue_alloc+0xa0b/0x1660 [ 449.215569][ T9232] vb2_core_reqbufs+0xc3f/0x1470 [ 449.215604][ T9232] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 449.215631][ T9232] ? arch_stack_walk+0xfb/0x150 [ 449.215657][ T9232] ? __vb2_init_fileio+0x1e2/0x1040 [ 449.215682][ T9232] ? __vb2_init_fileio+0x1e2/0x1040 [ 449.215713][ T9232] __vb2_init_fileio+0x310/0x1040 [ 449.215750][ T9232] __vb2_perform_fileio+0x287/0x1660 [ 449.215767][ T9232] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 449.215784][ T9232] ? lockdep_hardirqs_on+0x7a/0x110 [ 449.215800][ T9232] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 449.215816][ T9232] ? vb2_fop_read+0xfb/0x370 [ 449.215858][ T9232] vb2_fop_read+0x28b/0x370 [ 449.215901][ T9232] v4l2_read+0x19f/0x2c0 [ 449.215940][ T9232] vfs_readv+0x588/0x850 [ 449.215977][ T9232] ? __pfx_v4l2_read+0x10/0x10 [ 449.216005][ T9232] ? __pfx_vfs_readv+0x10/0x10 [ 449.216045][ T9232] ? __fget_files+0x2a/0x420 [ 449.216084][ T9232] ? __fget_files+0x3a8/0x420 [ 449.216107][ T9232] ? __fget_files+0x2a/0x420 [ 449.216141][ T9232] __se_sys_preadv2+0x17a/0x2a0 [ 449.216175][ T9232] ? __pfx___se_sys_preadv2+0x10/0x10 [ 449.216200][ T9232] ? __x64_sys_preadv2+0x20/0xc0 [ 449.216222][ T9232] do_syscall_64+0x17b/0x530 [ 449.216238][ T9232] ? irqentry_exit+0x10f/0x8f0 [ 449.216253][ T9232] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.216269][ T9232] ? clear_bhb_loop+0x40/0x90 [ 449.216289][ T9232] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.216305][ T9232] RIP: 0033:0x7f976ea1de99 [ 449.216319][ T9232] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.216334][ T9232] RSP: 002b:00007f976cc76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000147 [ 449.216351][ T9232] RAX: ffffffffffffffda RBX: 00007f976eca5fa0 RCX: 00007f976ea1de99 [ 449.216383][ T9232] RDX: 0000000000000001 RSI: 0000200000000580 RDI: 0000000000000003 [ 449.216397][ T9232] RBP: 00007f976cc76090 R08: 0000000000000007 R09: 0000000000000000 [ 449.216411][ T9232] R10: 0000000000000054 R11: 0000000000000246 R12: 0000000000000001 [ 449.216425][ T9232] R13: 00007f976eca6038 R14: 00007f976eca5fa0 R15: 00007ffe8fb19a58 [ 449.216459][ T9232] [ 449.465792][ T5696] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.465952][ T5696] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 449.466080][ T5696] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 449.466146][ T5696] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.583478][ T5696] usb 4-1: config 0 descriptor?? [ 449.605293][ T5696] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 450.016599][ T5705] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 450.170208][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 450.170266][ T5705] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 450.170294][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.220822][ T5705] usb 5-1: config 0 descriptor?? [ 450.442604][ T5705] usbhid 5-1:0.0: can't add hid device: -71 [ 450.442738][ T5705] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 450.463960][ T5705] usb 5-1: USB disconnect, device number 58 [ 450.726538][ T5696] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 450.815595][ T38] usb 4-1: USB disconnect, device number 109 [ 450.879618][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 450.883769][ T5696] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 450.883845][ T5696] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 450.883864][ T5696] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 450.883888][ T5696] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 450.883906][ T5696] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 450.883939][ T5696] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 450.883957][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.996564][ T5705] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 451.149735][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.149790][ T5705] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 451.149817][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.223965][ T5705] usb 5-1: config 0 descriptor?? [ 451.243722][ T5696] usb 1-1: GET_CAPABILITIES returned 0 [ 451.243772][ T5696] usbtmc 1-1:16.0: can't read capabilities [ 451.876870][ T5696] usb 1-1: USB disconnect, device number 111 [ 452.059468][ T5705] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 452.065280][ T5705] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input108 [ 452.186776][ T9] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 452.336661][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 452.355241][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 452.355338][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 452.355366][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 452.355413][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 452.355492][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.435851][ T9] usb 4-1: config 0 descriptor?? [ 452.451561][ T5696] usb 5-1: USB disconnect, device number 59 [ 452.451707][ C0] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 452.698442][ T9269] program syz.3.1012 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 452.930214][ T9278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.992527][ T9269] overlayfs: failed lookup in lower (newroot/254, name='bus', err=-40): overlapping layers [ 453.086011][ T9279] overlayfs: failed lookup in lower (newroot/254, name='bus', err=-40): overlapping layers [ 453.322362][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 453.322491][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 453.371296][ T9] usb 4-1: USB disconnect, device number 110 [ 453.486624][ T5696] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 453.641703][ T5696] usb 5-1: unable to get BOS descriptor or descriptor too short [ 453.643025][ T5696] usb 5-1: config 3 has an invalid interface number: 73 but max is 1 [ 453.643054][ T5696] usb 5-1: config 3 has no interface number 1 [ 453.643116][ T5696] usb 5-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 453.643147][ T5696] usb 5-1: config 3 interface 0 has no altsetting 0 [ 453.643167][ T5696] usb 5-1: config 3 interface 73 has no altsetting 0 [ 453.708390][ T5696] usb 5-1: string descriptor 0 read error: -22 [ 453.708542][ T5696] usb 5-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 453.708562][ T5696] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.752601][ T5696] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 453.752680][ T5696] dvb_usb_af9035 5-1:3.0: probe with driver dvb_usb_af9035 failed with error -22 [ 454.092060][ T5696] hid_parser_main: 7 callbacks suppressed [ 454.092084][ T5696] hid-generic 0000:0000:0000.0022: unknown main item tag 0x0 [ 454.129427][ T9298] FAULT_INJECTION: forcing a failure. [ 454.129427][ T9298] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.129468][ T9298] CPU: 0 UID: 0 PID: 9298 Comm: syz.0.1021 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 454.129500][ T9298] Tainted: [L]=SOFTLOCKUP [ 454.129508][ T9298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 454.129523][ T9298] Call Trace: [ 454.129532][ T9298] [ 454.129543][ T9298] dump_stack_lvl+0xe8/0x150 [ 454.129578][ T9298] should_fail_ex+0x467/0x600 [ 454.129614][ T9298] _copy_from_user+0x2d/0xb0 [ 454.129636][ T9298] sctp_setsockopt+0x1c4/0x12c0 [ 454.129670][ T9298] ? sock_common_setsockopt+0x36/0xc0 [ 454.129698][ T9298] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 454.129729][ T9298] do_sock_setsockopt+0x17c/0x1b0 [ 454.129765][ T9298] __x64_sys_setsockopt+0x143/0x1b0 [ 454.129802][ T9298] do_syscall_64+0x17b/0x530 [ 454.129824][ T9298] ? irqentry_exit+0x10f/0x8f0 [ 454.129845][ T9298] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.129868][ T9298] ? clear_bhb_loop+0x40/0x90 [ 454.129896][ T9298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.129921][ T9298] RIP: 0033:0x7f39951fde99 [ 454.129942][ T9298] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 454.129962][ T9298] RSP: 002b:00007f3993435028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 454.129986][ T9298] RAX: ffffffffffffffda RBX: 00007f3995486090 RCX: 00007f39951fde99 [ 454.130004][ T9298] RDX: 0000000000000009 RSI: 0000000000000084 RDI: 0000000000000003 [ 454.130017][ T9298] RBP: 00007f3993435090 R08: 000000000000009c R09: 0000000000000000 [ 454.130032][ T9298] R10: 0000200000000a00 R11: 0000000000000246 R12: 0000000000000001 [ 454.130046][ T9298] R13: 00007f3995486128 R14: 00007f3995486090 R15: 00007ffd33a83118 [ 454.130080][ T9298] [ 454.473075][ T5696] hid-generic 0000:0000:0000.0022: hidraw0: HID v0.00 Device [syz1] on syz0 [ 454.663421][ T9] usb 4-1: new full-speed USB device number 111 using dummy_hcd [ 454.710001][ T9309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1024'. [ 454.710029][ T9309] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1024'. [ 454.710075][ T9309] netlink: 'syz.1.1024': attribute type 5 has an invalid length. [ 454.710090][ T9309] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1024'. [ 454.819191][ T9] usb 4-1: device descriptor read/64, error -71 [ 455.056628][ T9] usb 4-1: new full-speed USB device number 112 using dummy_hcd [ 455.186608][ T9] usb 4-1: device descriptor read/64, error -71 [ 455.297045][ T9] usb usb4-port1: attempt power cycle [ 455.336623][ T5696] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 455.490573][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.490731][ T5696] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 455.490759][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.515943][ T5696] usb 2-1: config 0 descriptor?? [ 455.636551][ T9] usb 4-1: new full-speed USB device number 113 using dummy_hcd [ 455.658548][ T9] usb 4-1: device descriptor read/8, error -71 [ 455.753877][ T5696] usbhid 2-1:0.0: can't add hid device: -71 [ 455.753969][ T5696] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 455.776656][ T5696] usb 2-1: USB disconnect, device number 3 [ 455.905189][ T9] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 455.933026][ T9] usb 4-1: device descriptor read/8, error -71 [ 456.037711][ T9] usb usb4-port1: unable to enumerate USB device [ 456.039010][ T5704] usb 5-1: USB disconnect, device number 60 [ 456.156253][ T9324] FAULT_INJECTION: forcing a failure. [ 456.156253][ T9324] name failslab, interval 1, probability 0, space 0, times 0 [ 456.156284][ T9324] CPU: 0 UID: 0 PID: 9324 Comm: syz.4.1028 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 456.156307][ T9324] Tainted: [L]=SOFTLOCKUP [ 456.156313][ T9324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 456.156324][ T9324] Call Trace: [ 456.156330][ T9324] [ 456.156337][ T9324] dump_stack_lvl+0xe8/0x150 [ 456.156392][ T9324] should_fail_ex+0x467/0x600 [ 456.156427][ T9324] should_failslab+0xa8/0x100 [ 456.156450][ T9324] __kmalloc_noprof+0xfb/0x790 [ 456.156483][ T9324] ? tomoyo_encode+0x2ad/0x570 [ 456.156515][ T9324] ? tomoyo_encode+0x2ad/0x570 [ 456.156558][ T9324] tomoyo_encode+0x2ad/0x570 [ 456.156587][ T9324] tomoyo_realpath_from_path+0x5fa/0x640 [ 456.156619][ T9324] ? tomoyo_path_number_perm+0x219/0x5f0 [ 456.156643][ T9324] tomoyo_path_number_perm+0x246/0x5f0 [ 456.156666][ T9324] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 456.156689][ T9324] ? do_raw_spin_lock+0x12b/0x2f0 [ 456.156721][ T9324] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 456.156738][ T9324] ? lockdep_hardirqs_on+0x7a/0x110 [ 456.156765][ T9324] ? __fget_files+0x2a/0x420 [ 456.156784][ T9324] ? __fget_files+0x3a8/0x420 [ 456.156799][ T9324] ? __fget_files+0x2a/0x420 [ 456.156818][ T9324] security_file_ioctl+0xb9/0x260 [ 456.156838][ T9324] __se_sys_ioctl+0x47/0x170 [ 456.156867][ T9324] do_syscall_64+0x17b/0x530 [ 456.156884][ T9324] ? irqentry_exit+0x10f/0x8f0 [ 456.156899][ T9324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.156916][ T9324] ? clear_bhb_loop+0x40/0x90 [ 456.156936][ T9324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.156953][ T9324] RIP: 0033:0x7f976ea1de99 [ 456.156968][ T9324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.156983][ T9324] RSP: 002b:00007f976cc76028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.157001][ T9324] RAX: ffffffffffffffda RBX: 00007f976eca5fa0 RCX: 00007f976ea1de99 [ 456.157013][ T9324] RDX: 0000200000000100 RSI: 000000008008563f RDI: 0000000000000003 [ 456.157024][ T9324] RBP: 00007f976cc76090 R08: 0000000000000000 R09: 0000000000000000 [ 456.157035][ T9324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.157045][ T9324] R13: 00007f976eca6038 R14: 00007f976eca5fa0 R15: 00007ffe8fb19a58 [ 456.157074][ T9324] [ 456.159401][ T9324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 456.326514][ T5696] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 456.534394][ T5696] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 456.534453][ T5696] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 456.534480][ T5696] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.587380][ T5696] usb 2-1: config 0 descriptor?? [ 457.089144][ T9343] syzkaller1: entered promiscuous mode [ 457.089166][ T9343] syzkaller1: entered allmulticast mode [ 457.408812][ T5696] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 457.415192][ T5696] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input110 [ 457.763113][ T38] usb 5-1: new full-speed USB device number 61 using dummy_hcd [ 457.795814][ T5584] usb 2-1: USB disconnect, device number 4 [ 457.795896][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 457.947814][ T38] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 457.947851][ T38] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.947875][ T38] usb 5-1: Product: syz [ 457.947892][ T38] usb 5-1: Manufacturer: syz [ 457.947908][ T38] usb 5-1: SerialNumber: syz [ 458.019399][ T38] usb 5-1: config 0 descriptor?? [ 458.153943][ T9351] syzkaller1: entered promiscuous mode [ 458.154130][ T9351] syzkaller1: entered allmulticast mode [ 458.263706][ T38] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 458.552322][ T9355] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1039'. [ 458.706651][ T5704] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 458.869018][ T5704] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 458.869052][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.869073][ T5704] usb 2-1: Product: syz [ 458.869087][ T5704] usb 2-1: Manufacturer: syz [ 458.869103][ T5704] usb 2-1: SerialNumber: syz [ 458.916194][ T5704] usb 2-1: config 0 descriptor?? [ 459.537875][ T5704] usb 2-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 459.537908][ T5704] usb 2-1: Firmware version (0.0) predates our first public release. [ 459.537929][ T5704] usb 2-1: Please update to version 0.2 or newer [ 459.740091][ T5704] usb 2-1: Firmware: build ”ru [ 459.948002][ T9345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.950016][ T9345] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.959826][ T38] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 460.008990][ T38] usb 5-1: USB disconnect, device number 61 [ 460.173336][ T9373] fuse: Unknown parameter 'Ÿº¦PBÂ9œ¸?³j+K>ò°&ùõ' [ 460.321621][ T5704] usb 2-1: USB disconnect, device number 5 [ 460.398277][ T5584] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 460.507316][ T38] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 460.590114][ T5584] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 460.590141][ T5584] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 460.590158][ T5584] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 460.590179][ T5584] usb 4-1: config 1 has no interface number 1 [ 460.590218][ T5584] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 460.590253][ T5584] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 460.592811][ T5584] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 460.592843][ T5584] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.592882][ T5584] usb 4-1: Product: syz [ 460.592896][ T5584] usb 4-1: Manufacturer: syz [ 460.592912][ T5584] usb 4-1: SerialNumber: syz [ 460.734562][ T38] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 460.734620][ T38] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 460.734638][ T38] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.769497][ T38] usb 1-1: config 0 descriptor?? [ 460.983588][ T38] usbhid 1-1:0.0: can't add hid device: -71 [ 460.983840][ T38] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 461.025971][ T5584] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 461.026015][ T5584] usb 4-1: MIDIStreaming interface descriptor not found [ 461.042151][ T38] usb 1-1: USB disconnect, device number 112 [ 461.168410][ T5696] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 461.289978][ T5584] usb 4-1: USB disconnect, device number 115 [ 461.299664][ T5696] usb 5-1: device descriptor read/64, error -71 [ 461.372394][ T7634] udevd[7634]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 461.386781][ T5704] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 461.536714][ T5696] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 461.538399][ T38] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 461.570444][ T5704] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 461.570481][ T5704] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 461.573612][ T5704] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 461.573646][ T5704] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.573668][ T5704] usb 2-1: Product: syz [ 461.573684][ T5704] usb 2-1: Manufacturer: Є [ 461.573701][ T5704] usb 2-1: SerialNumber: syz [ 461.666631][ T5696] usb 5-1: device descriptor read/64, error -71 [ 461.734755][ T38] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 461.734810][ T38] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 461.734837][ T38] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.773540][ T38] usb 1-1: config 0 descriptor?? [ 461.777225][ T5696] usb usb5-port1: attempt power cycle [ 461.849304][ T9381] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 461.849940][ T9381] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 462.013658][ T5704] cdc_ncm 2-1:1.0: bind() failure [ 462.034164][ T5704] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 462.035153][ T5704] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 462.053533][ T5704] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 462.072925][ T5704] usb 2-1: USB disconnect, device number 6 [ 462.154051][ T5696] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 462.154195][ T5584] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 462.228698][ T5696] usb 5-1: device descriptor read/8, error -71 [ 462.339721][ T5584] usb 4-1: Using ep0 maxpacket: 8 [ 462.342771][ T5584] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 462.342830][ T5584] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 462.342849][ T5584] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 462.342867][ T5584] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 462.342885][ T5584] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 462.342917][ T5584] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 462.342934][ T5584] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.516710][ T5696] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 462.537706][ T5696] usb 5-1: device descriptor read/8, error -71 [ 462.605288][ T9388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 462.606061][ T9388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 462.624791][ T38] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 462.639065][ T5584] usb 4-1: GET_CAPABILITIES returned 0 [ 462.639103][ T5584] usbtmc 4-1:16.0: can't read capabilities [ 462.669812][ T5696] usb usb5-port1: unable to enumerate USB device [ 462.690997][ T38] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input111 [ 462.941568][ T5584] usb 4-1: USB disconnect, device number 116 [ 463.080461][ T38] usb 1-1: USB disconnect, device number 113 [ 463.080547][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 463.817129][ T5704] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 463.967041][ T5704] usb 4-1: Using ep0 maxpacket: 16 [ 463.970664][ T5704] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 463.970723][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 463.970757][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 463.970782][ T5704] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 463.970809][ T5704] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.972196][ T5704] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 463.972229][ T5704] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 463.972253][ T5704] usb 4-1: Manufacturer: syz [ 464.081394][ T5704] usb 4-1: config 0 descriptor?? [ 464.256140][ T9418] netlink: 252 bytes leftover after parsing attributes in process `syz.4.1059'. [ 464.419408][ T5704] rc_core: IR keymap rc-hauppauge not found [ 464.419432][ T5704] Registered IR keymap rc-empty [ 464.419602][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.445603][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.458557][ T5704] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 464.466321][ T5704] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input112 [ 464.508196][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.528315][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.552762][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.566836][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.729385][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.747703][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.766636][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.786741][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.806654][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.826683][ T5704] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 464.862811][ T5704] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 464.862841][ T5704] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 464.889962][ T5704] usb 4-1: USB disconnect, device number 117 [ 464.954638][ T9431] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1062'. [ 464.954668][ T9431] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1062'. [ 465.216619][ T5584] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 465.336652][ T5703] usb 1-1: new full-speed USB device number 114 using dummy_hcd [ 465.368017][ T5584] usb 2-1: Using ep0 maxpacket: 8 [ 465.372364][ T5584] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 465.372405][ T5584] usb 2-1: config 179 has no interface number 0 [ 465.372455][ T5584] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 465.372486][ T5584] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 465.372517][ T5584] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 465.372547][ T5584] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 465.372571][ T5584] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 465.372603][ T5584] usb 2-1: config 179 interface 65 has no altsetting 0 [ 465.372639][ T5584] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 465.372666][ T5584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.545607][ T5703] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 465.545639][ T5703] usb 1-1: config 0 has no interface number 0 [ 465.569719][ T5703] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 465.569756][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.569779][ T5703] usb 1-1: Product: syz [ 465.569796][ T5703] usb 1-1: Manufacturer: syz [ 465.569813][ T5703] usb 1-1: SerialNumber: syz [ 465.650185][ T5703] usb 1-1: config 0 descriptor?? [ 465.668204][ T5703] usb 1-1: selecting invalid altsetting 1 [ 465.693695][ T5703] dvb_ttusb_budget: ttusb_init_controller: error [ 465.693717][ T5703] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 465.816208][ T5703] DVB: Unable to find symbol stv0299_attach() [ 465.998478][ T5703] DVB: Unable to find symbol tda8083_attach() [ 465.998495][ T5703] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 466.026054][ T9433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.037524][ T9433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.255144][ T5584] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input113 [ 466.319403][ T5584] usb 2-1: USB disconnect, device number 7 [ 466.336107][ T9438] qnx6: unable to read the first superblock [ 466.412984][ T5703] usb 1-1: USB disconnect, device number 114 [ 466.916614][ T5704] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 467.070737][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.070792][ T5704] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 467.070818][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.108850][ T5704] usb 4-1: config 0 descriptor?? [ 467.279469][ T39] kauditd_printk_skb: 6030 callbacks suppressed [ 467.279489][ T39] audit: type=1326 audit(1784296265.323:7): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9462 comm="syz.1.1071" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30ce0de99 code=0x7ffc0000 [ 467.280342][ T39] audit: type=1326 audit(1784296265.323:8): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9462 comm="syz.1.1071" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30ce0de99 code=0x7ffc0000 [ 467.290665][ T39] audit: type=1326 audit(1784296265.333:9): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9462 comm="syz.1.1071" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30ce0de99 code=0x7ffc0000 [ 467.295117][ T39] audit: type=1326 audit(1784296265.333:10): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9462 comm="syz.1.1071" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30ce0de99 code=0x7ffc0000 [ 467.295254][ T39] audit: type=1326 audit(1784296265.333:11): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9462 comm="syz.1.1071" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb30ce0de99 code=0x7ffc0000 [ 467.299728][ T39] audit: type=1326 audit(1784296265.343:12): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9462 comm="syz.1.1071" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30ce0de99 code=0x7ffc0000 [ 467.317971][ T39] audit: type=1326 audit(1784296265.343:13): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9462 comm="syz.1.1071" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30ce0de99 code=0x7ffc0000 [ 467.318102][ T39] audit: type=1326 audit(1784296265.343:14): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9462 comm="syz.1.1071" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30ce0de99 code=0x7ffc0000 [ 467.318158][ T39] audit: type=1326 audit(1784296265.363:15): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9462 comm="syz.1.1071" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fb30ce0de99 code=0x7ffc0000 [ 467.318269][ T39] audit: type=1326 audit(1784296265.363:16): auid=4294967295 uid=0 gid=0 ses=4294967295 pid=9462 comm="" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb30ce0de99 code=0x7ffc0000 [ 467.526595][ T5704] usbhid 4-1:0.0: can't add hid device: -71 [ 467.526750][ T5704] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 467.572317][ T5704] usb 4-1: USB disconnect, device number 118 [ 467.928592][ T5704] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 468.088800][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 468.088857][ T5704] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 468.088885][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 468.134252][ T5704] usb 4-1: config 0 descriptor?? [ 468.402202][ T9485] FAULT_INJECTION: forcing a failure. [ 468.402202][ T9485] name failslab, interval 1, probability 0, space 0, times 0 [ 468.402239][ T9485] CPU: 1 UID: 0 PID: 9485 Comm: syz.0.1079 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 468.402291][ T9485] Tainted: [L]=SOFTLOCKUP [ 468.402300][ T9485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 468.402315][ T9485] Call Trace: [ 468.402324][ T9485] [ 468.402334][ T9485] dump_stack_lvl+0xe8/0x150 [ 468.402368][ T9485] should_fail_ex+0x467/0x600 [ 468.402405][ T9485] should_failslab+0xa8/0x100 [ 468.402423][ T9485] __kmalloc_noprof+0xfb/0x790 [ 468.402475][ T9485] ? tomoyo_encode+0x2ad/0x570 [ 468.402510][ T9485] ? tomoyo_encode+0x2ad/0x570 [ 468.402548][ T9485] tomoyo_encode+0x2ad/0x570 [ 468.402589][ T9485] tomoyo_realpath_from_path+0x5fa/0x640 [ 468.402647][ T9485] ? tomoyo_path_number_perm+0x219/0x5f0 [ 468.402679][ T9485] tomoyo_path_number_perm+0x246/0x5f0 [ 468.402719][ T9485] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 468.402747][ T9485] ? do_raw_spin_lock+0x12b/0x2f0 [ 468.402788][ T9485] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 468.402829][ T9485] ? lockdep_hardirqs_on+0x7a/0x110 [ 468.402870][ T9485] ? __fget_files+0x2a/0x420 [ 468.402899][ T9485] ? __fget_files+0x3a8/0x420 [ 468.402922][ T9485] ? __fget_files+0x2a/0x420 [ 468.402948][ T9485] security_file_ioctl+0xb9/0x260 [ 468.402980][ T9485] __se_sys_ioctl+0x47/0x170 [ 468.403015][ T9485] do_syscall_64+0x17b/0x530 [ 468.403039][ T9485] ? irqentry_exit+0x10f/0x8f0 [ 468.403061][ T9485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.403084][ T9485] ? clear_bhb_loop+0x40/0x90 [ 468.403111][ T9485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.403136][ T9485] RIP: 0033:0x7f39951fde99 [ 468.403154][ T9485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 468.403194][ T9485] RSP: 002b:00007f3993456028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 468.403219][ T9485] RAX: ffffffffffffffda RBX: 00007f3995485fa0 RCX: 00007f39951fde99 [ 468.403238][ T9485] RDX: 0000200000000040 RSI: 0000000000008b19 RDI: 0000000000000003 [ 468.403253][ T9485] RBP: 00007f3993456090 R08: 0000000000000000 R09: 0000000000000000 [ 468.403267][ T9485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.403280][ T9485] R13: 00007f3995486038 R14: 00007f3995485fa0 R15: 00007ffd33a83118 [ 468.403317][ T9485] [ 468.403417][ T9485] ERROR: Out of memory at tomoyo_realpath_from_path. [ 468.517386][ T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 468.755602][ T9] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 468.755634][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 468.755657][ T9] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 468.755681][ T9] usb 2-1: config 1 has no interface number 1 [ 468.755838][ T9] usb 2-1: config 1 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 468.755868][ T9] usb 2-1: config 1 interface 2 has no altsetting 1 [ 468.814442][ T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 468.814476][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.814500][ T9] usb 2-1: Product: syz [ 468.814517][ T9] usb 2-1: Manufacturer: syz [ 468.814533][ T9] usb 2-1: SerialNumber: syz [ 468.952803][ T5704] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 468.998821][ T5704] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input114 [ 469.133501][ T9] usb 2-1: 2:2 : no or invalid class specific endpoint descriptor [ 469.407534][ T38] usb 4-1: USB disconnect, device number 119 [ 469.407588][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 469.739508][ T9] usb 2-1: USB disconnect, device number 8 [ 469.930332][ T7634] udevd[7634]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 470.279792][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 470.283801][ T9516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.387051][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 470.536931][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 470.538821][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.538888][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 470.538922][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 470.538938][ T9] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 470.538956][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.541315][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 470.541345][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 470.541367][ T9] usb 4-1: Manufacturer: syz [ 470.571945][ T9] usb 4-1: config 0 descriptor?? [ 471.016570][ T9] rc_core: IR keymap rc-hauppauge not found [ 471.016592][ T9] Registered IR keymap rc-empty [ 471.016955][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.049362][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.069724][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 471.075398][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input115 [ 471.110821][ T5703] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 471.150459][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.167050][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.188617][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.206619][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.226800][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.246615][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.266242][ T5703] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 471.266275][ T5703] usb 5-1: config 0 has no interface number 0 [ 471.266895][ T5703] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.269702][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.305343][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.305644][ T5703] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 471.305673][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.305696][ T5703] usb 5-1: Product: syz [ 471.305713][ T5703] usb 5-1: Manufacturer: syz [ 471.305791][ T5703] usb 5-1: SerialNumber: syz [ 471.316949][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.341212][ T9] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 471.387499][ T9] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 471.387683][ T9] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 471.415350][ T5703] usb 5-1: config 0 descriptor?? [ 471.482993][ T9] usb 4-1: USB disconnect, device number 120 [ 471.561789][ T5703] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 471.628263][ T38] usb 5-1: USB disconnect, device number 66 [ 471.732961][ T38] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 472.112401][ T4910] Bluetooth: hci2: unexpected event for opcode 0x2010 [ 472.146579][ T5703] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 472.301050][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 472.301110][ T5703] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 472.301137][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.319086][ T5703] usb 2-1: config 0 descriptor?? [ 472.552946][ T5703] usbhid 2-1:0.0: can't add hid device: -71 [ 472.553083][ T5703] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 472.580772][ T5703] usb 2-1: USB disconnect, device number 9 [ 472.627132][ T9] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 472.766630][ T5705] usb 1-1: new full-speed USB device number 115 using dummy_hcd [ 472.781990][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 472.782043][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 472.782074][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 472.782120][ T9] usb 5-1: New USB device found, idVendor=1b96, idProduct=000f, bcdDevice= 0.00 [ 472.782145][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.802704][ T9] usb 5-1: config 0 descriptor?? [ 472.930434][ T5705] usb 1-1: not running at top speed; connect to a high speed hub [ 472.931720][ T5705] usb 1-1: config 5 has an invalid interface number: 15 but max is 0 [ 472.931746][ T5705] usb 1-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 472.931769][ T5705] usb 1-1: config 5 has no interface number 0 [ 472.931852][ T5705] usb 1-1: config 5 interface 15 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 472.931875][ T5705] usb 1-1: config 5 interface 15 altsetting 7 endpoint 0xF has invalid maxpacket 35564, setting to 1023 [ 472.931895][ T5705] usb 1-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 472.931913][ T5705] usb 1-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 472.931929][ T5705] usb 1-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 472.931986][ T5705] usb 1-1: config 5 interface 15 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 472.932006][ T5705] usb 1-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 472.932022][ T5705] usb 1-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 472.932039][ T5705] usb 1-1: config 5 interface 15 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 472.932059][ T5705] usb 1-1: config 5 interface 15 altsetting 7 endpoint 0x89 has invalid maxpacket 23029, setting to 64 [ 472.932078][ T5705] usb 1-1: config 5 interface 15 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 472.932134][ T5705] usb 1-1: config 5 interface 15 has no altsetting 0 [ 472.934660][ T5705] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=28.b5 [ 472.934687][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.934749][ T5705] usb 1-1: Product: syz [ 472.934762][ T5705] usb 1-1: Manufacturer: syz [ 472.934773][ T5705] usb 1-1: SerialNumber: syz [ 473.131137][ T5703] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 473.300037][ T5703] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.300297][ T5703] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 473.300316][ T5703] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.347897][ T5703] usb 2-1: config 0 descriptor?? [ 473.392446][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.396162][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.453909][ T9] ntrig 0003:1B96:000F.0023: hidraw0: USB HID v0.00 Device [HID 1b96:000f] on usb-dummy_hcd.4-1/input0 [ 473.606182][ T9] usb 5-1: USB disconnect, device number 67 [ 473.630065][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.649678][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.749740][ T9563] fido_id[9563]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 473.824374][ T5705] usb 1-1: USB disconnect, device number 115 [ 474.157837][ T5703] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 474.163888][ T5703] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input116 [ 474.496712][ T38] usb 2-1: USB disconnect, device number 10 [ 474.496751][ C0] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 474.532072][ T9567] genirq: Flags mismatch irq 4. 00202000 (aio_iiro_16) vs. 00202080 (ttyS0) [ 474.786584][ T5703] usb 1-1: new full-speed USB device number 116 using dummy_hcd [ 474.941902][ T5703] usb 1-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 474.941972][ T5703] usb 1-1: config 0 interface 0 altsetting 251 has 2 endpoint descriptors, different from the interface descriptor's value: 223 [ 474.942006][ T5703] usb 1-1: config 0 interface 0 has no altsetting 0 [ 474.942043][ T5703] usb 1-1: New USB device found, idVendor=045e, idProduct=00e3, bcdDevice= 0.00 [ 474.942069][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.995721][ T5703] usb 1-1: config 0 descriptor?? [ 475.501773][ T5703] microsoft 0003:045E:00E3.0024: unknown main item tag 0x0 [ 475.501816][ T5703] microsoft 0003:045E:00E3.0024: unknown main item tag 0x1 [ 475.501846][ T5703] microsoft 0003:045E:00E3.0024: unknown main item tag 0x7 [ 475.501875][ T5703] microsoft 0003:045E:00E3.0024: unknown main item tag 0x0 [ 475.501903][ T5703] microsoft 0003:045E:00E3.0024: unknown main item tag 0x0 [ 475.501931][ T5703] microsoft 0003:045E:00E3.0024: unknown main item tag 0x0 [ 475.501958][ T5703] microsoft 0003:045E:00E3.0024: unknown main item tag 0x0 [ 475.505438][ T5703] microsoft 0003:045E:00E3.0024: ignoring exceeding usage max [ 475.518248][ T5703] microsoft 0003:045E:00E3.0024: item fetching failed at offset 38/40 [ 475.523753][ T5703] microsoft 0003:045E:00E3.0024: parse failed [ 475.524029][ T5703] microsoft 0003:045E:00E3.0024: probe with driver microsoft failed with error -22 [ 475.751918][ T5703] usb 1-1: USB disconnect, device number 116 [ 476.150186][ T9590] tipc: Started in network mode [ 476.150228][ T9590] tipc: Node identity d6e64c40c667, cluster identity 4711 [ 476.150688][ T9590] tipc: Enabled bearer , priority 0 [ 476.416057][ T9594] tipc: Disabling bearer [ 476.438565][ T9600] netlink: 'syz.0.1111': attribute type 1 has an invalid length. [ 476.469268][ T5584] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 476.526551][ T38] usb 5-1: new full-speed USB device number 68 using dummy_hcd [ 476.616872][ T5584] usb 2-1: Using ep0 maxpacket: 8 [ 476.621506][ T5584] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 476.621572][ T5584] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 476.621598][ T5584] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 476.621627][ T5584] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 476.621655][ T5584] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 476.621702][ T5584] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 476.621729][ T5584] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 476.730523][ T9604] FAULT_INJECTION: forcing a failure. [ 476.730523][ T9604] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 476.730583][ T9604] CPU: 0 UID: 0 PID: 9604 Comm: syz.0.1112 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 476.730622][ T9604] Tainted: [L]=SOFTLOCKUP [ 476.730631][ T9604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 476.730646][ T9604] Call Trace: [ 476.730688][ T9604] [ 476.730750][ T9604] dump_stack_lvl+0xe8/0x150 [ 476.730839][ T9604] should_fail_ex+0x467/0x600 [ 476.730875][ T9604] prepare_alloc_pages+0x223/0x650 [ 476.730917][ T9604] __alloc_frozen_pages_noprof+0x193/0x5b0 [ 476.730958][ T9604] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 476.731067][ T9604] ? __pfx_policy_nodemask+0x10/0x10 [ 476.731089][ T9604] ? __alloc_frozen_pages_noprof+0x2a9/0x5b0 [ 476.731132][ T9604] ? lock_acquire+0x115/0x350 [ 476.731172][ T9604] alloc_pages_mpol+0xd4/0x280 [ 476.731200][ T9604] ___kmalloc_large_node+0x4f/0x120 [ 476.731232][ T9604] ? vhost_dev_set_owner+0x232/0xb00 [ 476.731266][ T9604] __kmalloc_large_node_noprof+0x18/0x90 [ 476.731299][ T9604] ? vhost_dev_set_owner+0x232/0xb00 [ 476.731334][ T9604] __kmalloc_noprof+0x4bc/0x790 [ 476.731366][ T9604] ? trace_kmalloc+0x2a/0xf0 [ 476.731396][ T9604] ? vhost_dev_set_owner+0x232/0xb00 [ 476.731436][ T9604] vhost_dev_set_owner+0x232/0xb00 [ 476.731487][ T9604] vhost_dev_ioctl+0xdb/0x1170 [ 476.731534][ T9604] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 476.731568][ T9604] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 476.731597][ T9604] ? lockdep_hardirqs_on+0x7a/0x110 [ 476.731620][ T9604] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 476.731643][ T9604] ? mutex_lock_nested+0x152/0x1d0 [ 476.731687][ T9604] ? vhost_vsock_dev_ioctl+0x223/0xed0 [ 476.731715][ T9604] vhost_vsock_dev_ioctl+0x231/0xed0 [ 476.731746][ T9604] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 476.731773][ T9604] ? __fget_files+0x3a8/0x420 [ 476.731803][ T9604] ? __fget_files+0x2a/0x420 [ 476.731839][ T9604] ? bpf_lsm_file_ioctl+0x9/0x20 [ 476.731873][ T9604] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 476.731897][ T9604] __se_sys_ioctl+0xff/0x170 [ 476.731929][ T9604] do_syscall_64+0x17b/0x530 [ 476.731952][ T9604] ? irqentry_exit+0x10f/0x8f0 [ 476.731973][ T9604] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.731997][ T9604] ? clear_bhb_loop+0x40/0x90 [ 476.732024][ T9604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.732048][ T9604] RIP: 0033:0x7f39951fde99 [ 476.732111][ T9604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.732162][ T9604] RSP: 002b:00007f3993414028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 476.732216][ T9604] RAX: ffffffffffffffda RBX: 00007f3995486180 RCX: 00007f39951fde99 [ 476.732233][ T9604] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000003 [ 476.732248][ T9604] RBP: 00007f3993414090 R08: 0000000000000000 R09: 0000000000000000 [ 476.732263][ T9604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.732278][ T9604] R13: 00007f3995486218 R14: 00007f3995486180 R15: 00007ffd33a83118 [ 476.732313][ T9604] [ 476.733500][ T38] usb 5-1: not running at top speed; connect to a high speed hub [ 476.737323][ T38] usb 5-1: config 5 has an invalid interface number: 15 but max is 0 [ 476.737353][ T38] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 476.737377][ T38] usb 5-1: config 5 has no interface number 0 [ 476.737428][ T38] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 476.737460][ T38] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0xF has invalid maxpacket 35564, setting to 1023 [ 476.737493][ T38] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 476.737520][ T38] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 476.737546][ T38] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 476.737573][ T38] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 476.737602][ T38] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 476.737627][ T38] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 476.737653][ T38] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 476.737684][ T38] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0x89 has invalid maxpacket 23029, setting to 64 [ 476.737712][ T38] usb 5-1: config 5 interface 15 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 476.737743][ T38] usb 5-1: config 5 interface 15 has no altsetting 0 [ 476.786665][ T38] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=28.b5 [ 476.786699][ T38] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.786723][ T38] usb 5-1: Product: syz [ 476.786739][ T38] usb 5-1: Manufacturer: syz [ 476.786756][ T38] usb 5-1: SerialNumber: syz [ 477.269078][ T9605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.301737][ T9605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.356005][ T5584] usb 2-1: GET_CAPABILITIES returned 0 [ 477.356125][ T5584] usbtmc 2-1:16.0: can't read capabilities [ 477.545795][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.551359][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.767797][ T9597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.768409][ T9597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.816751][ T9597] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 477.888146][ T5703] usb 2-1: USB disconnect, device number 11 [ 478.082580][ T38] usb 5-1: USB disconnect, device number 68 [ 478.116603][ T5705] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 478.120554][ T5689] udevd[5689]: setting mode of /dev/bus/usb/005/068 to 020664 failed: No such file or directory [ 478.120703][ T5689] udevd[5689]: setting owner of /dev/bus/usb/005/068 to uid=0, gid=0 failed: No such file or directory [ 478.278671][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.278741][ T5705] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 478.278769][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.321171][ T5705] usb 1-1: config 0 descriptor?? [ 478.541739][ T5705] usbhid 1-1:0.0: can't add hid device: -71 [ 478.541872][ T5705] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 478.566079][ T5705] usb 1-1: USB disconnect, device number 117 [ 478.626557][ T38] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 478.786643][ T38] usb 4-1: Using ep0 maxpacket: 32 [ 478.789205][ T38] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.793184][ T38] usb 4-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 478.793218][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.793242][ T38] usb 4-1: Product: syz [ 478.793259][ T38] usb 4-1: Manufacturer: syz [ 478.793275][ T38] usb 4-1: SerialNumber: syz [ 478.851130][ T38] usb 4-1: config 0 descriptor?? [ 478.864364][ T38] cdc_ether 4-1:0.0: missing cdc header descriptor [ 478.877753][ T38] usb 4-1: unsupported MDLM descriptors [ 478.981985][ T5746] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 479.056532][ T5705] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 479.059140][ T38] usb 4-1: USB disconnect, device number 121 [ 479.138518][ T9617] Flush: task=syz.1.1116[9617] dev=loop8 state=2 [ 479.152977][ T5746] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 479.153021][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.153041][ T5746] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.153058][ T5746] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 479.153090][ T5746] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 479.153108][ T5746] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.173970][ T5746] usb 5-1: config 0 descriptor?? [ 479.249205][ T9617] Teardown: task=syz.1.1116[9617] dev=loop8 state=2 [ 479.258207][ T5705] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.258264][ T5705] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 479.258291][ T5705] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.298672][ T5705] usb 1-1: config 0 descriptor?? [ 479.674593][ T9620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 479.690944][ T9620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 479.776904][ T5746] holtek_kbd 0003:04D9:A055.0025: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.4-1/input0 [ 479.980460][ T5746] usb 5-1: USB disconnect, device number 69 [ 480.120431][ T5705] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 480.138789][ T5705] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input117 [ 480.186663][ T9629] netlink: 'syz.1.1120': attribute type 12 has an invalid length. [ 480.215418][ T9625] netlink: 'syz.1.1120': attribute type 4 has an invalid length. [ 480.485391][ T5705] usb 1-1: USB disconnect, device number 118 [ 480.485480][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 480.496673][ T5746] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 480.676604][ T5746] usb 4-1: Using ep0 maxpacket: 32 [ 480.678984][ T5746] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.679015][ T5746] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 480.685296][ T5746] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 480.685330][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.685353][ T5746] usb 4-1: Product: syz [ 480.685370][ T5746] usb 4-1: Manufacturer: syz [ 480.685386][ T5746] usb 4-1: SerialNumber: syz [ 480.701156][ T5746] usb 4-1: config 0 descriptor?? [ 482.016511][ T5696] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 482.056531][ T5746] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 482.166497][ T5696] usb 1-1: Using ep0 maxpacket: 8 [ 482.175914][ T5696] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 482.175976][ T5696] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 482.176002][ T5696] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 482.176029][ T5696] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 482.176057][ T5696] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 482.176103][ T5696] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 482.176121][ T5696] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.279415][ T5746] usb 2-1: not running at top speed; connect to a high speed hub [ 482.285901][ T5746] usb 2-1: config 5 has an invalid interface number: 15 but max is 0 [ 482.285933][ T5746] usb 2-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 482.285956][ T5746] usb 2-1: config 5 has no interface number 0 [ 482.286064][ T5746] usb 2-1: config 5 interface 15 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 482.286095][ T5746] usb 2-1: config 5 interface 15 altsetting 7 endpoint 0xF has invalid maxpacket 35564, setting to 1023 [ 482.286126][ T5746] usb 2-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 482.286218][ T5746] usb 2-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 482.286245][ T5746] usb 2-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 482.286272][ T5746] usb 2-1: config 5 interface 15 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 482.286302][ T5746] usb 2-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 482.301123][ T5746] usb 2-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 482.301158][ T5746] usb 2-1: config 5 interface 15 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 482.301197][ T5746] usb 2-1: config 5 interface 15 altsetting 7 endpoint 0x89 has invalid maxpacket 23029, setting to 64 [ 482.323757][ T5746] usb 2-1: config 5 interface 15 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 482.323785][ T5746] usb 2-1: config 5 interface 15 has no altsetting 0 [ 482.452808][ T5746] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=28.b5 [ 482.452840][ T5746] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.452921][ T5746] usb 2-1: Product: syz [ 482.452940][ T5746] usb 2-1: Manufacturer: syz [ 482.452956][ T5746] usb 2-1: SerialNumber: syz [ 482.524237][ T9644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.536792][ T9644] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.545913][ T5696] usb 1-1: GET_CAPABILITIES returned 0 [ 482.545947][ T5696] usbtmc 1-1:16.0: can't read capabilities [ 482.709020][ T9646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.709854][ T9646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.802926][ T5696] usb 1-1: USB disconnect, device number 119 [ 482.817979][ T5705] usb 5-1: new full-speed USB device number 70 using dummy_hcd [ 482.916337][ T9646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 482.920548][ T9646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 482.998410][ T5746] usb 2-1: USB disconnect, device number 12 [ 483.000238][ T5705] usb 5-1: config 150 has an invalid interface number: 204 but max is 2 [ 483.000270][ T5705] usb 5-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 483.000294][ T5705] usb 5-1: config 150 has no interface number 0 [ 483.000342][ T5705] usb 5-1: config 150 interface 204 has no altsetting 0 [ 483.003528][ T5705] usb 5-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 483.003560][ T5705] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.003584][ T5705] usb 5-1: Product: syz [ 483.003600][ T5705] usb 5-1: Manufacturer: syz [ 483.003616][ T5705] usb 5-1: SerialNumber: syz [ 483.193990][ T9] usb 4-1: USB disconnect, device number 122 [ 483.700524][ T9662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1132'. [ 483.754400][ T4910] Bluetooth: hci2: unexpected event for opcode 0x203c [ 483.996554][ T5696] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 484.173596][ T5696] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 484.173631][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.173655][ T5696] usb 4-1: Product: syz [ 484.173672][ T5696] usb 4-1: Manufacturer: syz [ 484.173688][ T5696] usb 4-1: SerialNumber: syz [ 484.217694][ T9] usb 1-1: new high-speed USB device number 120 using dummy_hcd [ 484.288983][ T5746] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 484.375190][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 484.375311][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 484.375340][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 484.406524][ T9] usb 1-1: config 0 descriptor?? [ 484.504303][ T5703] usb 4-1: USB disconnect, device number 123 [ 484.621133][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 484.621511][ T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 484.645209][ T9] usb 1-1: USB disconnect, device number 120 [ 485.065360][ T9676] netlink: 'syz.1.1135': attribute type 1 has an invalid length. [ 485.065394][ T9676] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1135'. [ 485.065413][ T9676] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1135'. [ 485.066159][ T9676] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1135'. [ 485.128018][ T9] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 485.154324][ T9676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1135'. [ 485.267167][ T9675] Flush: task=syz.1.1135[9675] dev=loop8 state=2 [ 485.320516][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.320748][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 485.320767][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.361938][ T9675] Teardown: task=syz.1.1135[9675] dev=loop8 state=2 [ 485.391517][ T9] usb 1-1: config 0 descriptor?? [ 485.396593][ T5746] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 485.467310][ T5746] ath9k_htc: Failed to initialize the device [ 485.468638][ T5703] usb 4-1: ath9k_htc: USB layer deinitialized [ 485.593528][ T5705] xr_serial 5-1:150.204: skipping garbage [ 485.593718][ T5705] xr_serial 5-1:150.204: xr_serial converter detected [ 485.613887][ T5705] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 485.614189][ T5705] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 485.644932][ T5705] usb 5-1: USB disconnect, device number 70 [ 485.669357][ T5705] xr_serial 5-1:150.204: device disconnected [ 485.838221][ T5703] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 486.009750][ T5703] usb 4-1: not running at top speed; connect to a high speed hub [ 486.011003][ T5703] usb 4-1: config 5 has an invalid interface number: 15 but max is 0 [ 486.011036][ T5703] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 486.011057][ T5703] usb 4-1: config 5 has no interface number 0 [ 486.011108][ T5703] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 486.011138][ T5703] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0xF has invalid maxpacket 35564, setting to 1023 [ 486.011169][ T5703] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 486.011195][ T5703] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 486.011220][ T5703] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 486.011248][ T5703] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 486.011277][ T5703] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 486.011301][ T5703] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 486.011337][ T5703] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 486.011367][ T5703] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0x89 has invalid maxpacket 23029, setting to 64 [ 486.011393][ T5703] usb 4-1: config 5 interface 15 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 486.011420][ T5703] usb 4-1: config 5 interface 15 has no altsetting 0 [ 486.014299][ T5703] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=28.b5 [ 486.014345][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.014364][ T5703] usb 4-1: Product: syz [ 486.014379][ T5703] usb 4-1: Manufacturer: syz [ 486.014394][ T5703] usb 4-1: SerialNumber: syz [ 486.223932][ T9683] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 486.261904][ T9] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 486.285881][ T9] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input118 [ 486.471822][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.494834][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.644426][ T9] usb 1-1: USB disconnect, device number 121 [ 486.644525][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 486.712412][ T9683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.717121][ T9683] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.897339][ T5703] usb 4-1: USB disconnect, device number 124 [ 487.296540][ T5705] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 487.448424][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 487.448457][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 4 [ 487.448475][ T5705] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 13368, setting to 1023 [ 487.448504][ T5705] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 487.448520][ T5705] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.458954][ T5705] usb 5-1: config 0 descriptor?? [ 487.486590][ T5746] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 487.696846][ T5746] usb 2-1: Using ep0 maxpacket: 32 [ 487.699591][ T5746] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 487.699628][ T5746] usb 2-1: can't read configurations, error -22 [ 487.739678][ T9696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 487.740479][ T9696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 487.746003][ T5705] ath6kl: Failed to submit usb control message: -71 [ 487.746034][ T5705] ath6kl: unable to send the bmi data to the device: -71 [ 487.746045][ T5705] ath6kl: Unable to send get target info: -71 [ 487.841084][ T5705] ath6kl: Failed to init ath6kl core: -71 [ 487.842097][ T5705] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 487.853798][ T5705] usb 5-1: USB disconnect, device number 71 [ 487.867168][ T5746] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 488.017304][ T5746] usb 2-1: Using ep0 maxpacket: 32 [ 488.025199][ T5746] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 488.025228][ T5746] usb 2-1: can't read configurations, error -22 [ 488.025665][ T5746] usb usb2-port1: attempt power cycle [ 488.076546][ T5703] usb 4-1: new full-speed USB device number 125 using dummy_hcd [ 488.229594][ T5703] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 488.229644][ T5703] usb 4-1: config 0 interface 0 has no altsetting 0 [ 488.232027][ T5703] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 488.232056][ T5703] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.232078][ T5703] usb 4-1: Product: syz [ 488.232094][ T5703] usb 4-1: Manufacturer: syz [ 488.232110][ T5703] usb 4-1: SerialNumber: syz [ 488.250081][ T5703] usb 4-1: config 0 descriptor?? [ 488.386905][ T5746] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 488.407361][ T5746] usb 2-1: Using ep0 maxpacket: 32 [ 488.415872][ T5746] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 488.415911][ T5746] usb 2-1: can't read configurations, error -22 [ 488.456521][ T38] usb 1-1: new full-speed USB device number 122 using dummy_hcd [ 488.498389][ T5703] asix 4-1:0.0: probe with driver asix failed with error -22 [ 488.548357][ T5703] usb 4-1: USB disconnect, device number 125 [ 488.556574][ T5746] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 488.587618][ T5746] usb 2-1: Using ep0 maxpacket: 32 [ 488.591259][ T5746] usb 2-1: config index 0 descriptor too short (expected 9, got 0) [ 488.591299][ T5746] usb 2-1: can't read configurations, error -22 [ 488.592111][ T5746] usb usb2-port1: unable to enumerate USB device [ 488.639286][ T38] usb 1-1: config index 0 descriptor too short (expected 28277, got 36) [ 488.639433][ T38] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 488.639458][ T38] usb 1-1: config 0 has no interfaces? [ 488.639491][ T38] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 488.639520][ T38] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.649870][ T38] usb 1-1: config 0 descriptor?? [ 489.585091][ T5746] kernel read not supported for file /dsp (pid: 5746 comm: kworker/1:5) [ 489.736511][ T38] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 489.888654][ T38] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.888694][ T38] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 489.888712][ T38] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.893908][ T38] usb 4-1: config 0 descriptor?? [ 489.966634][ T5703] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 490.107474][ T38] usbhid 4-1:0.0: can't add hid device: -71 [ 490.107574][ T38] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 490.128210][ T38] usb 4-1: USB disconnect, device number 126 [ 490.130899][ T5703] usb 5-1: not running at top speed; connect to a high speed hub [ 490.134650][ T5703] usb 5-1: config 5 has an invalid interface number: 15 but max is 0 [ 490.134678][ T5703] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 490.134702][ T5703] usb 5-1: config 5 has no interface number 0 [ 490.134752][ T5703] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 490.134783][ T5703] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0xF has invalid maxpacket 35564, setting to 1023 [ 490.134815][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 490.134841][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 490.134866][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 490.134892][ T5703] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 490.134922][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 490.134947][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 490.134972][ T5703] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 490.135003][ T5703] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0x89 has invalid maxpacket 23029, setting to 64 [ 490.135033][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 490.136501][ T5703] usb 5-1: config 5 interface 15 has no altsetting 0 [ 490.311466][ T5703] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=28.b5 [ 490.311498][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.311520][ T5703] usb 5-1: Product: syz [ 490.311537][ T5703] usb 5-1: Manufacturer: syz [ 490.311553][ T5703] usb 5-1: SerialNumber: syz [ 490.354280][ T9730] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 490.479275][ T9732] FAULT_INJECTION: forcing a failure. [ 490.479275][ T9732] name failslab, interval 1, probability 0, space 0, times 0 [ 490.479316][ T9732] CPU: 0 UID: 0 PID: 9732 Comm: syz.1.1158 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 490.479349][ T9732] Tainted: [L]=SOFTLOCKUP [ 490.479359][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 490.479369][ T9732] Call Trace: [ 490.479375][ T9732] [ 490.479382][ T9732] dump_stack_lvl+0xe8/0x150 [ 490.479407][ T9732] should_fail_ex+0x467/0x600 [ 490.479432][ T9732] should_failslab+0xa8/0x100 [ 490.479449][ T9732] __kmalloc_cache_noprof+0xa1/0x670 [ 490.479474][ T9732] ? sctp_association_new+0x89/0x25d0 [ 490.479499][ T9732] ? sctp_association_new+0x89/0x25d0 [ 490.479531][ T9732] sctp_association_new+0x89/0x25d0 [ 490.479564][ T9732] sctp_connect_new_asoc+0x2e4/0x6b0 [ 490.479592][ T9732] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 490.479620][ T9732] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 490.479638][ T9732] ? lockdep_hardirqs_on+0x7a/0x110 [ 490.479653][ T9732] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 490.479678][ T9732] ? security_sctp_bind_connect+0x74/0x280 [ 490.479699][ T9732] sctp_sendmsg+0x1506/0x2a50 [ 490.479731][ T9732] ? kstrtouint+0x6e/0xe0 [ 490.479752][ T9732] ? __pfx_sctp_sendmsg+0x10/0x10 [ 490.479792][ T9732] ? sock_rps_record_flow+0x19/0x350 [ 490.479816][ T9732] ? inet_sendmsg+0x298/0x320 [ 490.479838][ T9732] ? __pfx_inet_sendmsg+0x10/0x10 [ 490.479858][ T9732] sock_sendmsg_nosec+0x10e/0x180 [ 490.479879][ T9732] __sys_sendto+0x41e/0x5d0 [ 490.479905][ T9732] ? __pfx___sys_sendto+0x10/0x10 [ 490.479946][ T9732] ? __pfx_ksys_write+0x10/0x10 [ 490.479968][ T9732] __x64_sys_sendto+0xde/0x100 [ 490.479992][ T9732] do_syscall_64+0x17b/0x530 [ 490.480008][ T9732] ? irqentry_exit+0x10f/0x8f0 [ 490.480029][ T9732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.480045][ T9732] ? clear_bhb_loop+0x40/0x90 [ 490.480065][ T9732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.480081][ T9732] RIP: 0033:0x7fb30ce0de99 [ 490.480095][ T9732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 490.480109][ T9732] RSP: 002b:00007fb30b066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 490.480126][ T9732] RAX: ffffffffffffffda RBX: 00007fb30d095fa0 RCX: 00007fb30ce0de99 [ 490.480138][ T9732] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000003 [ 490.480148][ T9732] RBP: 00007fb30b066090 R08: 0000200000000140 R09: 000000000000001c [ 490.480159][ T9732] R10: 0000000004008481 R11: 0000000000000246 R12: 0000000000000001 [ 490.480169][ T9732] R13: 00007fb30d096038 R14: 00007fb30d095fa0 R15: 00007ffc52b2c858 [ 490.480193][ T9732] [ 490.777172][ T9730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 490.777880][ T9730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 490.788904][ T38] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 491.003319][ T38] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 491.003513][ T38] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 491.003542][ T38] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.044810][ T38] usb 4-1: config 0 descriptor?? [ 491.085493][ T9730] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.097552][ T9730] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.195785][ T5705] usb 1-1: USB disconnect, device number 122 [ 491.280950][ T5703] usb 5-1: USB disconnect, device number 72 [ 491.490149][ T9743] FAULT_INJECTION: forcing a failure. [ 491.490149][ T9743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 491.490187][ T9743] CPU: 1 UID: 0 PID: 9743 Comm: syz.1.1162 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 491.490217][ T9743] Tainted: [L]=SOFTLOCKUP [ 491.490225][ T9743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 491.490239][ T9743] Call Trace: [ 491.490248][ T9743] [ 491.490259][ T9743] dump_stack_lvl+0xe8/0x150 [ 491.490294][ T9743] should_fail_ex+0x467/0x600 [ 491.490346][ T9743] _copy_from_iter+0x4ff/0x1660 [ 491.490392][ T9743] ? __pfx__copy_from_iter+0x10/0x10 [ 491.490430][ T9743] ? __lock_acquire+0x6df/0x2e40 [ 491.490462][ T9743] ping_v4_sendmsg+0x289/0x1870 [ 491.490494][ T9743] ? do_raw_spin_lock+0x12b/0x2f0 [ 491.490535][ T9743] ? __pfx_ping_v4_sendmsg+0x10/0x10 [ 491.490573][ T9743] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 491.490622][ T9743] ? __local_bh_enable+0x1e1/0x2f0 [ 491.490653][ T9743] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 491.490678][ T9743] ? lockdep_hardirqs_on+0x7a/0x110 [ 491.490706][ T9743] ? inet_sendmsg+0x298/0x320 [ 491.490739][ T9743] ? __pfx_inet_sendmsg+0x10/0x10 [ 491.490768][ T9743] sock_sendmsg_nosec+0x10e/0x180 [ 491.490799][ T9743] ____sys_sendmsg+0x565/0x870 [ 491.490843][ T9743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 491.490887][ T9743] ? import_iovec+0x73/0xa0 [ 491.490925][ T9743] ___sys_sendmsg+0x2a5/0x360 [ 491.490965][ T9743] ? __lock_acquire+0x6df/0x2e40 [ 491.490991][ T9743] ? __pfx____sys_sendmsg+0x10/0x10 [ 491.491061][ T9743] ? __fget_files+0x2a/0x420 [ 491.491086][ T9743] ? __fget_files+0x3a8/0x420 [ 491.491121][ T9743] __x64_sys_sendmsg+0x1b7/0x290 [ 491.491158][ T9743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 491.491212][ T9743] do_syscall_64+0x17b/0x530 [ 491.491237][ T9743] ? irqentry_exit+0x10f/0x8f0 [ 491.491258][ T9743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.491282][ T9743] ? clear_bhb_loop+0x40/0x90 [ 491.491317][ T9743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.491344][ T9743] RIP: 0033:0x7fb30ce0de99 [ 491.491366][ T9743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.491387][ T9743] RSP: 002b:00007fb30b066028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 491.491411][ T9743] RAX: ffffffffffffffda RBX: 00007fb30d095fa0 RCX: 00007fb30ce0de99 [ 491.491428][ T9743] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 491.491443][ T9743] RBP: 00007fb30b066090 R08: 0000000000000000 R09: 0000000000000000 [ 491.491457][ T9743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 491.491471][ T9743] R13: 00007fb30d096038 R14: 00007fb30d095fa0 R15: 00007ffc52b2c858 [ 491.491506][ T9743] [ 491.877320][ T38] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 491.886563][ T5703] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 491.892107][ T38] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input119 [ 492.076589][ T5703] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 492.076619][ T5703] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 492.076661][ T5703] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 492.076680][ T5703] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.102801][ T5703] usb 1-1: config 0 descriptor?? [ 492.169171][ T9753] Invalid logical block size (8192) [ 492.227023][ T5703] usb 4-1: USB disconnect, device number 127 [ 492.227028][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 492.334768][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.337069][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.343872][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.355839][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.379786][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.380343][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.403753][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.404677][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.439015][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 492.439657][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 492.484132][ T38] usb 1-1: USB disconnect, device number 123 [ 492.575706][ T4910] Bluetooth: hci3: unexpected cc 0x042f length: 63 > 7 [ 492.585231][ T4910] Bluetooth: hci3: unexpected event for opcode 0x042f [ 492.876534][ T5703] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 493.026491][ T5703] usb 5-1: Using ep0 maxpacket: 32 [ 493.028525][ T5703] usb 5-1: config 0 has an invalid interface number: 188 but max is 0 [ 493.028552][ T5703] usb 5-1: config 0 has no interface number 0 [ 493.028597][ T5703] usb 5-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 493.031030][ T5703] usb 5-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 493.031064][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.031079][ T5703] usb 5-1: Product: syz [ 493.031091][ T5703] usb 5-1: Manufacturer: syz [ 493.031102][ T5703] usb 5-1: SerialNumber: syz [ 493.043060][ T5703] usb 5-1: config 0 descriptor?? [ 493.096644][ T38] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 493.114758][ T9760] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.156624][ T5696] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 493.296489][ T38] usb 2-1: Using ep0 maxpacket: 8 [ 493.334955][ T5696] usb 4-1: not running at top speed; connect to a high speed hub [ 493.341829][ T5696] usb 4-1: config 5 has an invalid interface number: 15 but max is 0 [ 493.341988][ T5696] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 493.342014][ T5696] usb 4-1: config 5 has no interface number 0 [ 493.342231][ T5696] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 493.342592][ T5696] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0xF has invalid maxpacket 35564, setting to 1023 [ 493.342647][ T5696] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 493.343152][ T5696] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 493.343196][ T5696] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 493.343865][ T5696] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 493.344171][ T5696] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 493.344244][ T5696] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 493.344924][ T5696] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 493.345131][ T5696] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0x89 has invalid maxpacket 23029, setting to 64 [ 493.345292][ T5696] usb 4-1: config 5 interface 15 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 493.345325][ T5696] usb 4-1: config 5 interface 15 has no altsetting 0 [ 493.408424][ T9760] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 493.446969][ T5696] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=28.b5 [ 493.447243][ T5696] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.447696][ T5696] usb 4-1: Product: syz [ 493.448342][ T5696] usb 4-1: Manufacturer: syz [ 493.448726][ T5696] usb 4-1: SerialNumber: syz [ 493.574734][ T9766] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 493.725015][ T4910] Bluetooth: hci1: Unknown advertising packet type: 0x18 [ 493.725041][ T4910] Bluetooth: hci1: Unknown advertising packet type: 0x1e [ 493.725061][ T4910] Bluetooth: hci1: Unknown advertising packet type: 0x30 [ 493.725077][ T4910] Bluetooth: hci1: Malformed LE Event: 0x0d [ 493.784416][ T38] usb 2-1: unable to get BOS descriptor or descriptor too short [ 493.866756][ T5703] asix 5-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 493.867029][ T5703] asix 5-1:0.188: probe with driver asix failed with error -61 [ 493.880907][ T38] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 493.881148][ T38] usb 2-1: can't read configurations, error -71 [ 493.963434][ T9766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.973815][ T9766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.195885][ T9766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.205598][ T9766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.288724][ T5696] usb 4-1: USB disconnect, device number 2 [ 494.376672][ T5746] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 494.526602][ T5746] usb 1-1: Using ep0 maxpacket: 32 [ 494.529747][ T5746] usb 1-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 494.529821][ T5746] usb 1-1: config 0 interface 0 altsetting 252 has 0 endpoint descriptors, different from the interface descriptor's value: 223 [ 494.529843][ T5746] usb 1-1: config 0 interface 0 has no altsetting 0 [ 494.529867][ T5746] usb 1-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 494.529885][ T5746] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.534552][ T5746] usb 1-1: config 0 descriptor?? [ 494.569703][ T5746] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 494.766564][ T38] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 494.852190][ T9780] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 494.852806][ T9780] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 494.916561][ T38] usb 2-1: Using ep0 maxpacket: 8 [ 494.919009][ T38] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 494.919045][ T38] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 494.919087][ T38] usb 2-1: New USB device found, idVendor=17ef, idProduct=60b5, bcdDevice= 0.00 [ 494.919110][ T38] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.923989][ T38] usb 2-1: config 0 descriptor?? [ 495.324891][ T5746] usb 1-1: USB disconnect, device number 124 [ 495.544823][ T9778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.556798][ T9778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.561473][ T38] usbhid 2-1:0.0: can't add hid device: -71 [ 495.561618][ T38] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 495.609520][ T38] usb 2-1: USB disconnect, device number 18 [ 495.704533][ T9795] vim2m vim2m.0: Fourcc format (0x56595559) invalid. [ 496.146566][ T38] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 496.197301][ T9804] netlink: 'syz.0.1187': attribute type 12 has an invalid length. [ 496.197320][ T9804] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1187'. [ 496.300230][ T38] usb 4-1: not running at top speed; connect to a high speed hub [ 496.303668][ T38] usb 4-1: config 5 has an invalid interface number: 15 but max is 0 [ 496.303701][ T38] usb 4-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 496.303725][ T38] usb 4-1: config 5 has no interface number 0 [ 496.303776][ T38] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 496.303807][ T38] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0xF has invalid maxpacket 35564, setting to 1023 [ 496.303838][ T38] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 496.303864][ T38] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 496.303890][ T38] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 496.303917][ T38] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 496.303962][ T38] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 496.303988][ T38] usb 4-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 496.304013][ T38] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 496.304044][ T38] usb 4-1: config 5 interface 15 altsetting 7 endpoint 0x89 has invalid maxpacket 23029, setting to 64 [ 496.304075][ T38] usb 4-1: config 5 interface 15 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 496.304104][ T38] usb 4-1: config 5 interface 15 has no altsetting 0 [ 496.415113][ T38] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=28.b5 [ 496.415146][ T38] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.415167][ T38] usb 4-1: Product: syz [ 496.415190][ T38] usb 4-1: Manufacturer: syz [ 496.415205][ T38] usb 4-1: SerialNumber: syz [ 496.454520][ T5703] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 496.515552][ T5705] usb 5-1: USB disconnect, device number 73 [ 496.530206][ T9802] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 496.530952][ T9808] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1188'. [ 496.598315][ T4910] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 496.605238][ T4910] Bluetooth: hci3: Injecting HCI hardware error event [ 496.632659][ T60] Bluetooth: hci3: hardware error 0x00 [ 496.636140][ T5703] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 496.636174][ T5703] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.636197][ T5703] usb 1-1: Product: syz [ 496.636215][ T5703] usb 1-1: Manufacturer: syz [ 496.636248][ T5703] usb 1-1: SerialNumber: syz [ 496.755708][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 496.774735][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 496.791098][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 496.876881][ T9812] openvswitch: netlink: IPv4 tunnel dst address is zero [ 497.006212][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.025568][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.143391][ T38] usb 4-1: USB disconnect, device number 3 [ 497.299222][ T9804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 497.300367][ T9804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 497.333512][ T5696] usb 1-1: USB disconnect, device number 125 [ 497.513980][ T9823] xfrm0 speed is unknown, defaulting to 1000 [ 497.514521][ T9823] xfrm0 speed is unknown, defaulting to 1000 [ 497.542487][ T9823] xfrm0 speed is unknown, defaulting to 1000 [ 497.601590][ T9823] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 497.601629][ T9823] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 497.601670][ T9823] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 497.694991][ T9823] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 497.734671][ T9823] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 498.006286][ T9823] xfrm0 speed is unknown, defaulting to 1000 [ 498.030394][ T9823] xfrm0 speed is unknown, defaulting to 1000 [ 498.044108][ T9823] xfrm0 speed is unknown, defaulting to 1000 [ 498.054612][ T9823] xfrm0 speed is unknown, defaulting to 1000 [ 498.117824][ T38] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 498.184890][ T9835] hpfs: hpfs_map_sector(): read error [ 498.192969][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 498.256683][ T9] ath9k_htc: Failed to initialize the device [ 498.258346][ T5696] usb 1-1: ath9k_htc: USB layer deinitialized [ 498.281886][ T38] usb 2-1: Using ep0 maxpacket: 32 [ 498.296274][ T38] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 498.296305][ T38] usb 2-1: config 0 has no interface number 0 [ 498.296496][ T38] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 498.349367][ T38] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 498.349402][ T38] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.349424][ T38] usb 2-1: Product: syz [ 498.349440][ T38] usb 2-1: Manufacturer: syz [ 498.349456][ T38] usb 2-1: SerialNumber: syz [ 498.361798][ T4910] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 498.397137][ T38] usb 2-1: config 0 descriptor?? [ 498.451633][ T38] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 498.451693][ T38] em28xx 2-1:0.132: Video interface 132 found: [ 498.749306][ T60] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 498.806486][ T5703] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 498.814795][ T38] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 498.959936][ T5703] usb 5-1: not running at top speed; connect to a high speed hub [ 498.961382][ T5703] usb 5-1: config 5 has an invalid interface number: 15 but max is 0 [ 498.961417][ T5703] usb 5-1: config 5 contains an unexpected descriptor of type 0x2, skipping [ 498.961442][ T5703] usb 5-1: config 5 has no interface number 0 [ 498.961492][ T5703] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 498.961535][ T5703] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0xF has invalid maxpacket 35564, setting to 1023 [ 498.961565][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x6, skipping [ 498.961592][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 498.961618][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 498.961645][ T5703] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 498.961672][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xF, skipping [ 498.961694][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has a duplicate endpoint with address 0xA, skipping [ 498.961721][ T5703] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 498.961777][ T5703] usb 5-1: config 5 interface 15 altsetting 7 endpoint 0x89 has invalid maxpacket 23029, setting to 64 [ 498.961805][ T5703] usb 5-1: config 5 interface 15 altsetting 7 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 498.961832][ T5703] usb 5-1: config 5 interface 15 has no altsetting 0 [ 498.964673][ T5703] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice=28.b5 [ 498.964702][ T5703] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.964723][ T5703] usb 5-1: Product: syz [ 498.964739][ T5703] usb 5-1: Manufacturer: syz [ 498.964755][ T5703] usb 5-1: SerialNumber: syz [ 499.171061][ T9847] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 499.435170][ T9847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.447450][ T9847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.602549][ T9829] overlayfs: failed to resolve './file1/file0': -2 [ 499.656628][ T9847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 499.659603][ T9847] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 499.714822][ T38] em28xx 2-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 499.714855][ T38] em28xx 2-1:0.132: failed to read eeprom (err=-5) [ 499.714897][ T38] em28xx 2-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 499.766612][ T38] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 499.766651][ T38] em28xx 2-1:0.132: analog set to bulk mode. [ 499.802633][ T5696] em28xx 2-1:0.132: Registering V4L2 extension [ 499.828701][ T5703] usb 5-1: USB disconnect, device number 74 [ 499.884965][ T38] usb 2-1: USB disconnect, device number 19 [ 499.950547][ T38] em28xx 2-1:0.132: Disconnecting em28xx [ 500.000195][ T5696] em28xx 2-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 500.090757][ T5696] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 500.090778][ T5696] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 500.090789][ T5696] em28xx 2-1:0.132: No AC97 audio processor [ 500.370223][ T5696] usb 2-1: Decoder not found [ 500.370247][ T5696] em28xx 2-1:0.132: failed to create media graph [ 500.370378][ T5696] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 500.451445][ T5746] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 500.488952][ T5696] INFO: trying to register non-static key. [ 500.489035][ T5696] The code is fine but needs lockdep annotation, or maybe [ 500.489044][ T5696] you didn't initialize this object before use? [ 500.489082][ T5696] turning off the locking correctness validator. [ 500.489125][ T5696] CPU: 1 UID: 0 PID: 5696 Comm: kworker/1:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 500.489153][ T5696] Tainted: [L]=SOFTLOCKUP [ 500.489160][ T5696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 500.489174][ T5696] Workqueue: events request_module_async [ 500.489199][ T5696] Call Trace: [ 500.489206][ T5696] [ 500.489214][ T5696] dump_stack_lvl+0xe8/0x150 [ 500.489241][ T5696] assign_lock_key+0x133/0x150 [ 500.489263][ T5696] register_lock_class+0xcc/0x2e0 [ 500.489308][ T5696] __lock_acquire+0xaf/0x2e40 [ 500.489328][ T5696] ? finish_task_switch+0x412/0xc60 [ 500.489356][ T5696] ? lockdep_hardirqs_on+0x7a/0x110 [ 500.489376][ T5696] ? rcu_is_watching+0x15/0xb0 [ 500.489398][ T5696] ? trace_sched_exit_tp+0x3a/0x130 [ 500.489425][ T5696] ? __schedule+0x171f/0x5530 [ 500.489456][ T5696] lock_acquire+0x115/0x350 [ 500.489486][ T5696] ? __wake_up_common_lock+0x2f/0x1f0 [ 500.489521][ T5696] rt_spin_lock+0x83/0x400 [ 500.489546][ T5696] ? __wake_up_common_lock+0x2f/0x1f0 [ 500.489574][ T5696] ? __pfx___schedule+0x10/0x10 [ 500.489602][ T5696] ? __pfx_rt_spin_lock+0x10/0x10 [ 500.489628][ T5696] ? lockdep_hardirqs_on+0x7a/0x110 [ 500.489650][ T5696] ? irqentry_exit+0x218/0x8f0 [ 500.489672][ T5696] __wake_up_common_lock+0x2f/0x1f0 [ 500.489701][ T5696] __vb2_queue_cancel+0x2de/0xdc0 [ 500.489732][ T5696] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 500.489764][ T5696] vb2_core_queue_release+0x2f/0x150 [ 500.489795][ T5696] vb2_video_unregister_device+0x15b/0x200 [ 500.489830][ T5696] em28xx_v4l2_init+0x1c60/0x3140 [ 500.489859][ T5696] em28xx_init_extension+0x120/0x1d0 [ 500.489891][ T5696] ? process_one_work+0x7fd/0x1480 [ 500.489912][ T5696] process_one_work+0xaaf/0x1480 [ 500.489941][ T5696] ? __pfx_process_one_work+0x10/0x10 [ 500.489961][ T5696] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.490008][ T5696] ? assign_work+0x3cf/0x5d0 [ 500.490032][ T5696] worker_thread+0xb05/0x10d0 [ 500.490060][ T5696] ? __kthread_parkme+0x71/0x1f0 [ 500.490089][ T5696] kthread+0x388/0x470 [ 500.490117][ T5696] ? __pfx_worker_thread+0x10/0x10 [ 500.490138][ T5696] ? __pfx_kthread+0x10/0x10 [ 500.490167][ T5696] ret_from_fork+0x514/0xb70 [ 500.490199][ T5696] ? __pfx_ret_from_fork+0x10/0x10 [ 500.490228][ T5696] ? __switch_to+0xc89/0x1420 [ 500.490253][ T5696] ? __pfx_kthread+0x10/0x10 [ 500.490292][ T5696] ret_from_fork_asm+0x1a/0x30 [ 500.490347][ T5696] [ 500.492171][ T9879] ------------[ cut here ]------------ [ 500.492182][ T9879] mas->ld_seq != lock_sequence(map) [ 500.492199][ T9879] WARNING: lib/maple_tree.c:1188 at mas_find+0xa02/0xca0, CPU#1: syz.3.1216/9879 [ 500.492235][ T9879] Modules linked in: [ 500.492259][ T9879] CPU: 1 UID: 0 PID: 9879 Comm: syz.3.1216 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 500.492304][ T9879] Tainted: [L]=SOFTLOCKUP [ 500.492312][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 500.492325][ T9879] RIP: 0010:mas_find+0xa02/0xca0 [ 500.492347][ T9879] Code: 74 08 4c 89 f7 e8 5e 39 e9 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 7b e1 7c f6 31 c0 e9 0a fd ff ff e8 6f e1 7c f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 61 e1 7c f6 31 c0 e9 f0 fc ff ff e8 55 [ 500.492366][ T9879] RSP: 0018:ffffc9000155f638 EFLAGS: 00010293 [ 500.492385][ T9879] RAX: ffffffff8b48c241 RBX: 1ffff920002abf29 RCX: ffff88802f898000 [ 500.492402][ T9879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.492415][ T9879] RBP: 000000000000002d R08: 0000000000000000 R09: 0000000000000000 [ 500.492428][ T9879] R10: dffffc0000000000 R11: ffffed100b84ce55 R12: 00000000ffffffff [ 500.492444][ T9879] R13: ffffc9000155f954 R14: ffffc9000155f900 R15: ffffc9000155f948 [ 500.492460][ T9879] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 500.492478][ T9879] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 500.492493][ T9879] CR2: 00007f976ead9fa4 CR3: 0000000032f48000 CR4: 00000000003526f0 [ 500.492511][ T9879] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 500.492542][ T9879] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 500.492558][ T9879] Call Trace: [ 500.492566][ T9879] [ 500.492578][ T9879] unmap_vmas+0x43e/0x550 [ 500.492607][ T9879] ? __pfx_unmap_vmas+0x10/0x10 [ 500.492640][ T9879] exit_mmap+0x293/0x9f0 [ 500.492670][ T9879] ? __pfx_exit_mmap+0x10/0x10 [ 500.492696][ T9879] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.492731][ T9879] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 500.492758][ T9879] ? __pfx_exit_aio+0x10/0x10 [ 500.492788][ T9879] ? uprobe_clear_state+0x2a7/0x3e0 [ 500.492820][ T9879] __mmput+0xcb/0x3e0 [ 500.492839][ T9879] exit_mm+0x186/0x240 [ 500.492868][ T9879] do_exit+0x6cd/0x2360 [ 500.492896][ T9879] ? lockdep_hardirqs_on+0x7a/0x110 [ 500.492916][ T9879] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 500.492940][ T9879] ? __pfx_do_exit+0x10/0x10 [ 500.492968][ T9879] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 500.493000][ T9879] ? rt_spin_unlock+0x157/0x200 [ 500.493040][ T9879] do_group_exit+0x22d/0x2f0 [ 500.493065][ T9879] ? rt_spin_unlock+0x163/0x200 [ 500.493091][ T9879] get_signal+0x121b/0x12c0 [ 500.493120][ T9879] arch_do_signal_or_restart+0xbb/0x860 [ 500.493146][ T9879] ? __pfx_dvb_usercopy+0x10/0x10 [ 500.493173][ T9879] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 500.493208][ T9879] exit_to_user_mode_loop+0x104/0x730 [ 500.493238][ T9879] ? rcu_is_watching+0x15/0xb0 [ 500.493261][ T9879] do_syscall_64+0x33d/0x530 [ 500.493290][ T9879] ? irqentry_exit+0x10f/0x8f0 [ 500.493308][ T9879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.493329][ T9879] ? clear_bhb_loop+0x40/0x90 [ 500.493351][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.493372][ T9879] RIP: 0033:0x7f08b6cbde99 [ 500.493389][ T9879] Code: Unable to access opcode bytes at 0x7f08b6cbde6f. [ 500.493462][ T9879] RSP: 002b:00007f08b4f160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 500.493484][ T9879] RAX: fffffffffffffe00 RBX: 00007f08b6f45fa8 RCX: 00007f08b6cbde99 [ 500.493500][ T9879] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f08b6f45fa8 [ 500.493514][ T9879] RBP: 00007f08b6f45fa0 R08: 0000000000000000 R09: 0000000000000000 [ 500.493528][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.493541][ T9879] R13: 00007f08b6f46038 R14: 00007ffebbe7a150 R15: 00007ffebbe7a238 [ 500.493565][ T9879] [ 500.493576][ T9879] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 500.493594][ T9879] CPU: 1 UID: 0 PID: 9879 Comm: syz.3.1216 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 500.493621][ T9879] Tainted: [L]=SOFTLOCKUP [ 500.493629][ T9879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 500.493642][ T9879] Call Trace: [ 500.493650][ T9879] [ 500.493659][ T9879] vpanic+0x56c/0xa60 [ 500.493679][ T9879] ? __pfx__printk+0x10/0x10 [ 500.493702][ T9879] ? __pfx_vpanic+0x10/0x10 [ 500.493720][ T9879] ? is_bpf_text_address+0x292/0x2b0 [ 500.493744][ T9879] ? is_bpf_text_address+0x26/0x2b0 [ 500.493772][ T9879] panic+0xc5/0xd0 [ 500.493791][ T9879] ? __pfx_panic+0x10/0x10 [ 500.493818][ T9879] __warn+0x315/0x4c0 [ 500.493836][ T9879] ? mas_find+0xa02/0xca0 [ 500.493855][ T9879] ? mas_find+0xa02/0xca0 [ 500.493873][ T9879] __report_bug+0x276/0x570 [ 500.493893][ T9879] ? mas_find+0xa02/0xca0 [ 500.493912][ T9879] ? __pfx___report_bug+0x10/0x10 [ 500.493937][ T9879] ? mas_find+0xa02/0xca0 [ 500.493954][ T9879] report_bug+0x16a/0x220 [ 500.493973][ T9879] ? mas_find+0xa02/0xca0 [ 500.493989][ T9879] ? mas_find+0xa04/0xca0 [ 500.494007][ T9879] handle_bug+0x9c/0x200 [ 500.494030][ T9879] exc_invalid_op+0x1a/0x50 [ 500.494053][ T9879] asm_exc_invalid_op+0x1a/0x20 [ 500.494073][ T9879] RIP: 0010:mas_find+0xa02/0xca0 [ 500.494093][ T9879] Code: 74 08 4c 89 f7 e8 5e 39 e9 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 7b e1 7c f6 31 c0 e9 0a fd ff ff e8 6f e1 7c f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 61 e1 7c f6 31 c0 e9 f0 fc ff ff e8 55 [ 500.494112][ T9879] RSP: 0018:ffffc9000155f638 EFLAGS: 00010293 [ 500.494129][ T9879] RAX: ffffffff8b48c241 RBX: 1ffff920002abf29 RCX: ffff88802f898000 [ 500.494144][ T9879] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 500.494157][ T9879] RBP: 000000000000002d R08: 0000000000000000 R09: 0000000000000000 [ 500.494169][ T9879] R10: dffffc0000000000 R11: ffffed100b84ce55 R12: 00000000ffffffff [ 500.494185][ T9879] R13: ffffc9000155f954 R14: ffffc9000155f900 R15: ffffc9000155f948 [ 500.494204][ T9879] ? mas_find+0xa01/0xca0 [ 500.494227][ T9879] ? mas_find+0xa01/0xca0 [ 500.494247][ T9879] unmap_vmas+0x43e/0x550 [ 500.494271][ T9879] ? __pfx_unmap_vmas+0x10/0x10 [ 500.494310][ T9879] exit_mmap+0x293/0x9f0 [ 500.494356][ T9879] ? __pfx_exit_mmap+0x10/0x10 [ 500.494385][ T9879] ? do_raw_spin_lock+0x12b/0x2f0 [ 500.494418][ T9879] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 500.494444][ T9879] ? __pfx_exit_aio+0x10/0x10 [ 500.494472][ T9879] ? uprobe_clear_state+0x2a7/0x3e0 [ 500.494506][ T9879] __mmput+0xcb/0x3e0 [ 500.494528][ T9879] exit_mm+0x186/0x240 [ 500.494557][ T9879] do_exit+0x6cd/0x2360 [ 500.494595][ T9879] ? lockdep_hardirqs_on+0x7a/0x110 [ 500.494614][ T9879] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 500.494636][ T9879] ? __pfx_do_exit+0x10/0x10 [ 500.494664][ T9879] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 500.494694][ T9879] ? rt_spin_unlock+0x157/0x200 [ 500.494739][ T9879] do_group_exit+0x22d/0x2f0 [ 500.494768][ T9879] ? rt_spin_unlock+0x163/0x200 [ 500.494798][ T9879] get_signal+0x121b/0x12c0 [ 500.494830][ T9879] arch_do_signal_or_restart+0xbb/0x860 [ 500.494856][ T9879] ? __pfx_dvb_usercopy+0x10/0x10 [ 500.494885][ T9879] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 500.494920][ T9879] exit_to_user_mode_loop+0x104/0x730 [ 500.494953][ T9879] ? rcu_is_watching+0x15/0xb0 [ 500.494978][ T9879] do_syscall_64+0x33d/0x530 [ 500.494998][ T9879] ? irqentry_exit+0x10f/0x8f0 [ 500.495016][ T9879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.495038][ T9879] ? clear_bhb_loop+0x40/0x90 [ 500.495062][ T9879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.495084][ T9879] RIP: 0033:0x7f08b6cbde99 [ 500.495101][ T9879] Code: Unable to access opcode bytes at 0x7f08b6cbde6f. [ 500.495113][ T9879] RSP: 002b:00007f08b4f160e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 500.495136][ T9879] RAX: fffffffffffffe00 RBX: 00007f08b6f45fa8 RCX: 00007f08b6cbde99 [ 500.495152][ T9879] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f08b6f45fa8 [ 500.495167][ T9879] RBP: 00007f08b6f45fa0 R08: 0000000000000000 R09: 0000000000000000 [ 500.495181][ T9879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.495194][ T9879] R13: 00007f08b6f46038 R14: 00007ffebbe7a150 R15: 00007ffebbe7a238 [ 500.495218][ T9879] [ 500.495896][ T9879] Kernel Offset: disabled