last executing test programs: 2m6.58081936s ago: executing program 0 (id=1915): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 2m6.128031127s ago: executing program 0 (id=1919): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socket(0x2, 0x80805, 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000003c0)=ANY=[], 0x0) 2m2.903452403s ago: executing program 0 (id=1942): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x80f6ff, 0x0) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{&(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000240)="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", 0x136}], 0x1}}], 0x1, 0x2004485c) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xb, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, &(0x7f0000000100)) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c) connect$inet6(r6, &(0x7f0000000340)={0x2, 0x1, 0x0, @empty}, 0x1c) r7 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRES8=r2], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m2.747680028s ago: executing program 0 (id=1944): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mount$9p_unix(&(0x7f00000000c0)='./file0/file0/..\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x12d7498, 0x0) umount2(&(0x7f0000000040)='./file0\x00', 0x1) mount$afs(&(0x7f0000000380)=ANY=[@ANYBLOB="0073797a313a73797a3000eacab8163928c2010000006aaa2b117e4f7d2e64d475bfa9621be9c11871f07e23d6e28c2cfb983f200e437477df953723a62202fc4eeebe174f48d73882d79c8730650174ed6a09674403717038554c7f6564a85fb4ba54cdaa4179a531a065a6871198c92583507186f9877dc6a273d0b57f4c04606c308374209822c584db8f05139ded3db37f07aae9933e1666562c257a7d662132317fcf8539788d"], &(0x7f00000001c0)='./file0/file0/../file0\x00', &(0x7f0000000280), 0x2000, &(0x7f00000002c0)={[{@flock_openafs}, {@dyn}], [{@smackfsdef={'smackfsdef', 0x3d, '-\xea'}}, {@smackfstransmute={'smackfstransmute', 0x3d, ':\xab'}}]}) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) syz_usb_control_io$uac2(r0, &(0x7f0000000480)={0x14, &(0x7f0000000300)={0x0, 0xe, 0x36, {0x36, 0x23, "5ab37b879624865374859a0861b2ea9b820544ac4d1b2c11d854f799d6c7d4eb93e05e9bdaa3e8254d55bfe4fc4b05fa360990b0"}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf4ff}}}, &(0x7f00000007c0)={0x44, &(0x7f00000004c0)={0x40, 0xe, 0x1f, "a183f61a421bdf05b46068b40cfc0246300dad627dbf422be09b446cc85cdf"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0xfb}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x47}, &(0x7f0000000680)={0x20, 0x81, 0x1, '\f'}, &(0x7f00000006c0)={0x20, 0x82, 0x2, '\'='}, &(0x7f0000000700)={0x20, 0x83, 0x1, "87"}, &(0x7f0000000740)={0x20, 0x84, 0x2, "df53"}, &(0x7f0000000780)={0x20, 0x85, 0x3, "0f9333"}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000000)=""/121, 0x90, 0x7fffffffffffffff) ioctl$SIOCPNADDRESOURCE(r1, 0x89e0, &(0x7f0000000140)=0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ae8000000000a0101000000000000000005"], 0x238}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000000)=ANY=[]) r4 = socket(0x1000000000000010, 0x80802, 0x0) sendmsg(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)="5500000018007fd500fe01b2a4a280930a46000000a843089100fe801100080008000c00085540002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x20000004) 1m58.930609424s ago: executing program 0 (id=1966): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) open(&(0x7f00000000c0)='./cgroup\x00', 0x701000, 0x4) (async) r1 = syz_open_dev$ndb(&(0x7f0000000140), 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r1, 0xab09, 0xffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) syz_usb_connect(0x3, 0x46, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e95b1710720500cbc9bb000203010902340001fb0000000904ca010338e880060905012a0000060206090500000002f803070905061000041c0d090705c1", @ANYBLOB="b238"], 0x0) (async) syz_usb_connect$uac1(0x5, 0xcc, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x7, 0x40, 0x6, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0x2e}, [@mixer_unit={0xa, 0x24, 0x4, 0x4, 0x7, "9db0f503ef"}, @mixer_unit={0x9, 0x24, 0x4, 0x1, 0x9, "ec07c30e"}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x9, 0x4, 'D'}, @feature_unit={0x9, 0x24, 0x6, 0x3, 0x6, 0x1, [0x8], 0x9}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x10, 0x2, 0xa, {0x7, 0x25, 0x1, 0x8, 0x25, 0x29}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x3, 0x2, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x5, 0x3, 0x1, "e3e83b990d23"}, @format_type_i_continuous={0xd, 0x24, 0x2, 0x1, 0x8e, 0x4, 0x9, 0xc, '\x00[', '4l\v'}, @format_type_ii_discrete={0xa, 0x24, 0x2, 0x2, 0x401, 0x7, 0x4, "c4"}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x1, 0x3, 0xb, 0x56, "", "b4"}]}, {{0x9, 0x5, 0x82, 0x9, 0x1ff, 0x80, 0x5, 0x3, {0x7, 0x25, 0x1, 0x0, 0x1, 0x1d0}}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x4, 0x75, 0xfd, 0x10, 0x8}, 0x5, &(0x7f00000002c0)={0x5, 0xf, 0x5}, 0x7, [{0x28, &(0x7f0000000300)=@string={0x28, 0x3, "1706b8085ca5c46670074318ce75b29c71b3c424611fe12d2a9ef38e439d757e204f839152be"}}, {0x26, &(0x7f0000000340)=@string={0x26, 0x3, "db2a6226cd6ec02a73c9503b18663a13b3073e9ee07939038bda6453d41ec9093af7c3a1"}}, {0x6, &(0x7f0000000380)=@string={0x6, 0x3, "25d01d3d"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0xf4ff}}, {0x22, &(0x7f0000000400)=@string={0x22, 0x3, "0e275059fd5c23544bc35817a05783de7ad978ec6cd444a5b1db08d8a7b0d628"}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x812}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x415}}]}) (async) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='nilfs2\x00', 0x3000000, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f00000005c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x68}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x8001}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8, 0x6}}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 1m58.143066054s ago: executing program 0 (id=1968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x800) 1m57.860083466s ago: executing program 32 (id=1968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, 0x0, 0x800) 8.648607191s ago: executing program 3 (id=2372): socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3}}]}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 7.070847565s ago: executing program 3 (id=2378): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) read(r2, &(0x7f0000001400)=""/4076, 0xfffffeea) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f0000000000)={0x1c, &(0x7f00000001c0)=ANY=[@ANYRES8=r0, @ANYBLOB="2349e8161fe28a99689a3bc5cd6cab143f7b6ace3011ff5495873f23e4d75f5b03a2bd47a3759de53aa57385f8f258ec1054608766b59d9681536b155fc6fc75f71f0ef8ebb0959a4819b870aaba775788427d1f0c030010bba8bd3b436dfaa075b58e095275c1d0d966b389227890af965bd31e05a72b931411e7bc72c92b2b452a01fe3690f8d36ce51e967e1ae20831d706a5098815e107513d4702eae184f719", @ANYRESOCT=r0, @ANYRES8=r1, @ANYRES8=r0, @ANYRES16=0x0, @ANYRESOCT=r0, @ANYRESDEC=r2], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x20, 0xd}, 0x0, 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000080)={0x1d, r3}, 0x10) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$lan78xx(r4, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/comedi5\x00', 0x101440, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/meminfo\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0xfffffffffffffffa, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r5], 0x3c}}, 0x10) 4.083071112s ago: executing program 1 (id=2390): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0) (async) r1 = socket$kcm(0x10, 0x2, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000240)={0x1100, 0x0, 0x4, 0x7fffffffffffffff}) (async, rerun: 64) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x1500, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080010000000e8fe55a1180015000600142603600e120500210000000401a8001600a400014020000300feffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async, rerun: 64) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x3) (async, rerun: 64) ioctl$TCSETSF2(r0, 0x89f2, &(0x7f0000000000)={0x9, 0x4, 0x8, 0x0, 0xc, "a533b6aaf9f659ff35036bf79d8b4c2a246305", 0xe7, 0x8}) (rerun: 64) syz_usb_connect(0x2, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0xa3, 0xf7, 0x9d, 0x10, 0xaf7, 0x101, 0x38fd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0x0, 0x50, 0x1, "", [{{0x9, 0x4, 0x16, 0x4, 0x0, 0xfa, 0x85, 0xbb, 0x8}}]}}]}}, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0}) 4.000835857s ago: executing program 3 (id=2391): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, &(0x7f0000000580)=ANY=[], 0x8) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f00000001c0), 0xe) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, r1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$packet(r2, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) (fail_nth: 8) 3.807033102s ago: executing program 1 (id=2393): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x80f6ff, 0x0) sendmmsg$inet(r4, &(0x7f0000000b00), 0x0, 0x2004485c) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xb, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, &(0x7f0000000100)) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c) connect$inet6(r6, &(0x7f0000000340)={0x2, 0x1, 0x0, @empty}, 0x1c) r7 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRES8=r2], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 3.721845786s ago: executing program 1 (id=2394): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000010c0), 0x10) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80000) 3.65407347s ago: executing program 1 (id=2395): r0 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000100)=0x405, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f0000000040)={0x20, 0x22, 0x46, {0x46, 0x23, "720b2a5661bd002b8d528f6d9f4d2ada1ba852bdbe18ff14289c5c1743d91b2fd47eedfe5718da3d559bb2decec641d21efb899c0b9bd697483001102e73752fa7e678d5"}}, &(0x7f00000000c0)={0x0, 0x3, 0x85, @string={0x85, 0x3, "adf956236fe9493792687ea8e831e85072675351370e854377321f7651ae6793cbbbcfec5e21361d293054db035b46348bd85345cfcba6c43ae88cfbb4aa1dff75513f82c0f14e78cd9650eb6bb12e2f8d174cf55b358f08f2d56e59458cd8f1d061e2c3ce8bf6d046bf36e06782191821137c98acd1956e42cc8c1a6146c4562981dc"}}, &(0x7f0000000180)={0x0, 0xf, 0x4f, {0x5, 0xf, 0x4f, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "4bd33aa14a378b5c0289b4c72f18852c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x7, 0x4, 0x0, 0x50bd}, @generic={0x18, 0x10, 0x0, "424c22dc2a53fa707c4ec57233d325701f4c5c06c8"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "53b36094d46945fdd33f36d542f15211"}]}}, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfe, 0x18, 0x81, 0x81, "407798a7", "b24839d9"}}, &(0x7f0000000240)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0xf8, 0x4, 0x1, 0x3, 0x7fff}}}, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x20, 0xc, 0x58, "689a6837491571356718b18d3fe444003256e7a4ea12515370b22854de45821939f0cdc6bae82e6243d8dcdb62ca40e4b644cf450f4db48f8fd9c5ebe7edb7e7fe6571a73917f469a280830d2385fe61129d66576d9897ca"}, &(0x7f0000000340)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f00000003c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000440)={0x40, 0x7, 0x2, 0x7e}, &(0x7f0000000480)={0x40, 0x9, 0x1, 0x9}, &(0x7f00000004c0)={0x40, 0xb, 0x2, "6c17"}, &(0x7f0000000500)={0x40, 0xf, 0x2}, &(0x7f0000000540)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000580)={0x40, 0x17, 0x6, @broadcast}, &(0x7f00000005c0)={0x40, 0x19, 0x2, "4fdb"}, &(0x7f0000000600)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000000640)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000006c0)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000700)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$mouse(&(0x7f00000008c0), 0x80000001, 0x400000) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000900)=0x3) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x3, &(0x7f00000004c0)=0x79, 0x4) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.014312231s ago: executing program 3 (id=2397): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424", 0x73}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e8", 0x4b}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.741824287s ago: executing program 3 (id=2398): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) unshare(0x5000000) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000240)={0x14, &(0x7f0000000080)={0x0, 0x21, 0xe8, {0xe8, 0x22, "263c85a74e6b203b12478a7707f4540c5662ec30d358061adeff9e6bf42e01823121f109cd1f994aa1d5603fd5837bd5c6a59b98d5fc2978190097f138a7740f729b1880e156f53aee7d1bd6b92f6607936a43dbb80a046533e18d5bd361c82a12280b9d4b082260ee5e4f27190a7c34f077e323e57c3cdbc04291497d01ab182f4c4c130a7db3f36769d4a39d35f94404457bac06a8bc54e042529eb3303b086403723842235479d8d64089049e011ed9e69d6a646b5f2e71184b0877a6c9f728f945ab6e068f1d726a542dc919bfe98b6ef6d5e18f5a84d81b0d22818e6c65554c62a3f355"}}, &(0x7f0000000180)={0x0, 0x3, 0x96, @string={0x96, 0x3, "37fdc6cf25e35b723c9bedd0f48e5b6bbf6167b0ead6f0c986f55fdab25b7e5b300ceb34d1426077e70d31d775777d2565371c905c8326d355161ae2a3f3cc4a173dd121b0e883bbcb71def06d2b9ed481f9d2c77334546587740a4179b82eb1ec2ce13d46abb57f1aaf2cf8116883a130bb6007eacef0cd979baefe09f7226317b2fb9a8b802791c97146832966301428c8604c"}}}, &(0x7f0000000480)={0x34, &(0x7f00000002c0)={0x40, 0x11, 0xf, "d068d89f99fd77cf12d3451f178c7e"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x99}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x78}, &(0x7f00000003c0)={0xc0, 0xa1, 0x4, 0x2}, &(0x7f0000000400)={0x40, 0xa0, 0x4, 0x4aa}, &(0x7f0000000440)={0xc0, 0xa2, 0x2f, "ace3d9aeaf0c1d6c8f3d669a9ab2cce05f9d8e7c0ead169a6deed81df09abc7d31b0084e88a6595110fa1dfa6e5b60"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000580)={0x0, 0xe, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.522872023s ago: executing program 4 (id=2399): socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(0xffffffffffffffff, 0x3b8d, &(0x7f0000000200)={0x20, 0x0, &(0x7f00000001c0)=[{0x0, 0x2}, {0x1, 0x1}, {0x1, 0x3}], 0xdeadbeef, 0x8, 0x3}) 2.399475518s ago: executing program 4 (id=2400): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x20010000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast2, 0x6f}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x3, r1, 0x0, &(0x7f000000d000/0x1000)=nil, 0x1000, 0x662c}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f00000000c0)="fbc7", 0x2, 0x100000001}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x103000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403, 0xe7}}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x0, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0xc815) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) shutdown(r7, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000340)={{0xfffffffa, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, &(0x7f0000000480)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x3, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0xfffffffffffffffe, 0x40, 0x20000000000, 0x4, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x4, 0x1, 0x49, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x7ff, 0x80, 0x0, 0x3, 0x7, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x45, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0xb5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) r10 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x4, 0x5}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, 0x0) recvmmsg(r7, 0x0, 0x0, 0x40000142, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r1, 0x0, &(0x7f0000000400)="a5", 0x1, 0x6}) 2.33151479s ago: executing program 4 (id=2401): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x1000000000, 0x0, 0x200000000000043, 0x2000004, 0x0, 0x20000000002004cb, 0x0, 0xa7c, 0x4, 0x7, 0x8000000009, 0x803, 0x4, 0x9, 0x6], 0xeeee8000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.066551955s ago: executing program 2 (id=2402): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x80f6ff, 0x0) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="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", 0x136}], 0x1}}], 0x1, 0x2004485c) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xb, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, &(0x7f0000000100)) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c) connect$inet6(r6, &(0x7f0000000340)={0x2, 0x1, 0x0, @empty}, 0x1c) r7 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRES8=r2], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.942082063s ago: executing program 2 (id=2403): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000010c0), 0x10) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) accept4$unix(r0, 0x0, 0x0, 0x80000) 1.876548907s ago: executing program 2 (id=2404): socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xec, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x3}}]}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40089}, 0x8004) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="414601", @ANYRES32=r1], 0x4) 1.750241579s ago: executing program 4 (id=2405): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010100, @in=@local, 0x0, 0x5, 0x4e21, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x7f, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r2 = syz_open_dev$video4linux(&(0x7f0000000100), 0x10000, 0x0) ioctl$VIDIOC_ENUMSTD(r2, 0xc040563e, &(0x7f00000001c0)={0x0, 0x0, "3127608efb75a7ab1e952445aead6949f0a87e73a02eec2f"}) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="ec0000002100010000000000fefffffffc010000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="02000000000000009c001100fe80000000000000000000000000001164010102000000000000000000000000fe800000000000000000000000000013fe8000000000000000000000000000bb3c00f3ffff"], 0xec}}, 0x40000) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in6={0xa, 0x4e23, 0x2, @remote, 0x5}], 0x1c) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000000)={0xce76, {{0xa, 0x4e22, 0x7, @mcast2, 0x4}}}, 0x88) 1.607542874s ago: executing program 4 (id=2406): r0 = socket(0x400000000010, 0x3, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424", 0x73}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e8", 0x4b}, {0x0}, {0x0}, {&(0x7f00000000c0)}], 0x5}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x2, 0x20000044) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.558459243s ago: executing program 4 (id=2407): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000f2303920422c021240850102030109022400010000100009040c0202c17f0c00090502020002020000090582020002"], 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) unshare(0x5000000) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000280)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="2013040000002c"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)={0x0, 0x30, 0x1, 'D'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 564.088209ms ago: executing program 1 (id=2408): openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f66, 0x1, 0x8, 0xd, 0x0, 0x412a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10002, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x4, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0xa, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x2, 0x2, 0x100, 0xd8ce, 0xf, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4850}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)={0xdb, 0x0, 0x3}) ioctl$OCFS2_IOC_REFLINK(0xffffffffffffffff, 0x40186f04, &(0x7f00000001c0)={0x0, 0x0, 0xb6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 415.405676ms ago: executing program 2 (id=2409): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x2}}, 0x2e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000007540)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a240000000e0a0108000000000000000000000002100003800c000080080003400000000614000000110001000024fdca351f000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x24000891}, 0x800) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x6, 0x2, 0x47, @mcast1, @loopback, 0x1, 0x8, 0x0, 0x66}}) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r3) socket$nl_generic(0x10, 0x3, 0x10) 293.922647ms ago: executing program 2 (id=2410): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000008c0)={0xc, 0x0, 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c}}, 0x20010000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000000c0)={@mcast2, 0x6f}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x3, r1, 0x0, &(0x7f000000d000/0x1000)=nil, 0x1000, 0x662c}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f00000000c0)="fbc7", 0x2, 0x100000001}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x4, r1, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x7}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) r6 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x103000) ioctl$VIDIOC_S_SELECTION(r6, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x1, {0x3, 0xffffffff, 0x403, 0xe7}}) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r5, 0x0, 0x70bd25, 0x25dfdbfc, {}, [""]}, 0x1c}}, 0xc815) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) connect$inet(r7, &(0x7f0000000040)={0x2, 0x4e04, @dev={0xac, 0x14, 0x14, 0x59}}, 0x10) shutdown(r7, 0x1) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4) r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r9 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r9, 0xc1105517, &(0x7f0000000340)={{0xfffffffa, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc1105518, &(0x7f0000000480)={{0x5, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x1, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x80000, 0xf, 0x80000000000000, 0x592a, 0x3, 0x0, 0xfffffffe, 0x4, 0x7, 0x0, 0x7, 0x7ff, 0xfffffffe, 0xfffffffffffffffe, 0x40, 0x20000000000, 0x4, 0x100000001, 0x8, 0x1f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x20000000, 0x0, 0x2, 0x0, 0x2, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x4, 0x1, 0x49, 0xfffffffffffffffa, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x7ff, 0x80, 0x0, 0x3, 0x7, 0x0, 0x0, 0x4000000000000000, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x45, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0xb5, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xde4, 0x7, 0x0, 0x100000000]}) r10 = socket$kcm(0x29, 0x2, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x4, 0x5}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r10, 0x89e2, 0x0) recvmmsg(r7, &(0x7f00000005c0), 0x0, 0x40000142, 0x0) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000480)={0x28, 0x6, r1, 0x0, &(0x7f0000000400)="a5", 0x1, 0x6}) 184.014683ms ago: executing program 2 (id=2411): r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0x840000000002, 0x3, 0xff) mount(0x0, &(0x7f0000000080)='.\x00', 0x0, 0x80f6ff, 0x0) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000240)="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", 0x136}], 0x1}}], 0x1, 0x2004485c) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r5, 0x0, 0xb, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r5, 0x8004510a, &(0x7f0000000100)) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x400}, 0x1c) connect$inet6(r6, &(0x7f0000000340)={0x2, 0x1, 0x0, @empty}, 0x1c) r7 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$cgroup_int(r7, &(0x7f0000000200)=0x1, 0x12) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=ANY=[@ANYRES8=r2], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) 143.853093ms ago: executing program 3 (id=2412): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000200)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r4, r3, r3], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) (fail_nth: 8) 0s ago: executing program 1 (id=2413): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x20048090) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r0) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000280)={0x14, r2, 0x50be6fea6f3bdfbb, 0x72bd26, 0x25dfcbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) kernel console output (not intermixed with test programs): dv: batadv0: Interface deactivated: batadv_slave_0 [ 587.454282][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.488556][ T1115] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.488576][ T1115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.537180][ T1115] veth1_macvtap: left promiscuous mode [ 587.537250][ T1115] veth0_macvtap: left promiscuous mode [ 587.537474][ T1115] veth1_vlan: left promiscuous mode [ 587.537598][ T1115] veth0_vlan: left promiscuous mode [ 587.635126][T11523] Bluetooth: hci0: command tx timeout [ 588.259527][ T38] audit: type=1804 audit(1777555231.210:13): pid=12026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2118" name="file1" dev="ramfs" ino=49134 res=1 errno=0 [ 588.289131][ T38] audit: type=1804 audit(1777555231.270:14): pid=12027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2118" name="file1" dev="ramfs" ino=49134 res=1 errno=0 [ 588.454450][ T1115] team0 (unregistering): Port device team_slave_1 removed [ 588.493730][ T1115] team0 (unregistering): Port device team_slave_0 removed [ 588.909264][T11925] hsr_slave_0: entered promiscuous mode [ 588.912201][T11925] hsr_slave_1: entered promiscuous mode [ 588.928698][T11925] debugfs: 'hsr0' already exists in 'hsr' [ 588.928716][T11925] Cannot create hsr debugfs directory [ 589.106826][ T5805] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 589.253507][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 589.255515][ T5805] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 589.255538][ T5805] usb 5-1: config 0 has no interface number 0 [ 589.255579][ T5805] usb 5-1: config 0 interface 12 has no altsetting 0 [ 589.259131][ T5805] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 589.259157][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.259177][ T5805] usb 5-1: Product: syz [ 589.259191][ T5805] usb 5-1: Manufacturer: syz [ 589.259205][ T5805] usb 5-1: SerialNumber: syz [ 589.324740][ T5805] usb 5-1: config 0 descriptor?? [ 589.505176][ T5700] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 589.734737][T11523] Bluetooth: hci0: command tx timeout [ 589.756762][ T5700] usb 2-1: Using ep0 maxpacket: 32 [ 589.762499][ T5700] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 589.762526][ T5700] usb 2-1: config 0 has no interface number 0 [ 589.762653][ T5700] usb 2-1: config 0 interface 12 has no altsetting 0 [ 589.784504][ T5700] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 589.784529][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.784549][ T5700] usb 2-1: Product: syz [ 589.784563][ T5700] usb 2-1: Manufacturer: syz [ 589.784576][ T5700] usb 2-1: SerialNumber: syz [ 589.858181][ T5700] usb 2-1: config 0 descriptor?? [ 590.186637][T12029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 590.188644][T12029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 590.310208][ T5270] 8021q: adding VLAN 0 to HW filter on device eth2 [ 590.505644][ T5700] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 28 failed: -71 [ 590.505720][ T5700] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 590.505733][ T5700] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 590.505792][ T5700] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 590.574716][ T5700] usb 2-1: USB disconnect, device number 49 [ 590.842286][T11925] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.230743][ T5805] f81534 5-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 591.230799][ T5805] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 591.230818][ T5805] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 591.230906][ T5805] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 591.303259][ T5805] usb 5-1: USB disconnect, device number 12 [ 591.674598][T11925] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.797093][T11523] Bluetooth: hci0: command tx timeout [ 592.129513][T11925] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.203023][ T5270] 8021q: adding VLAN 0 to HW filter on device eth3 [ 592.266345][ T32] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 592.309071][T11975] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.309441][T11975] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.309700][T11975] bridge_slave_0: entered allmulticast mode [ 592.342192][T11975] bridge_slave_0: entered promiscuous mode [ 592.363903][T12087] FAULT_INJECTION: forcing a failure. [ 592.363903][T12087] name failslab, interval 1, probability 0, space 0, times 0 [ 592.363939][T12087] CPU: 0 UID: 0 PID: 12087 Comm: syz.4.2129 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 592.363967][T12087] Tainted: [L]=SOFTLOCKUP [ 592.363975][T12087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 592.363989][T12087] Call Trace: [ 592.363997][T12087] [ 592.364006][T12087] dump_stack_lvl+0xe8/0x150 [ 592.364036][T12087] should_fail_ex+0x46b/0x600 [ 592.364068][T12087] should_failslab+0xa8/0x100 [ 592.364098][T12087] __kmalloc_noprof+0xdf/0x7b0 [ 592.364125][T12087] ? tomoyo_encode+0x28b/0x550 [ 592.364158][T12087] tomoyo_encode+0x28b/0x550 [ 592.364190][T12087] tomoyo_realpath_from_path+0x58d/0x5d0 [ 592.364228][T12087] ? tomoyo_path_number_perm+0x219/0x630 [ 592.364252][T12087] tomoyo_path_number_perm+0x246/0x630 [ 592.364286][T12087] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 592.364309][T12087] ? __lock_acquire+0x6b5/0x2d10 [ 592.364342][T12087] ? do_raw_spin_lock+0x12b/0x2f0 [ 592.364398][T12087] ? __fget_files+0x2a/0x420 [ 592.364423][T12087] ? __fget_files+0x2a/0x420 [ 592.364444][T12087] ? __fget_files+0x3a6/0x420 [ 592.364464][T12087] ? __fget_files+0x2a/0x420 [ 592.364489][T12087] security_file_ioctl+0xc3/0x2a0 [ 592.364513][T12087] __se_sys_ioctl+0x47/0x170 [ 592.364540][T12087] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.364563][T12087] do_syscall_64+0x15f/0xf80 [ 592.364588][T12087] ? trace_irq_disable+0x3b/0x140 [ 592.364615][T12087] ? clear_bhb_loop+0x40/0x90 [ 592.364640][T12087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.364661][T12087] RIP: 0033:0x7ff9459dcdd9 [ 592.364680][T12087] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.364702][T12087] RSP: 002b:00007ff943c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 592.364725][T12087] RAX: ffffffffffffffda RBX: 00007ff945c55fa0 RCX: 00007ff9459dcdd9 [ 592.364740][T12087] RDX: 00002000000002c0 RSI: 00000000c058560f RDI: 0000000000000003 [ 592.364754][T12087] RBP: 00007ff943c36090 R08: 0000000000000000 R09: 0000000000000000 [ 592.364766][T12087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.364778][T12087] R13: 00007ff945c56038 R14: 00007ff945c55fa0 R15: 00007fff4bcdbd88 [ 592.364807][T12087] [ 592.367653][T12087] ERROR: Out of memory at tomoyo_realpath_from_path. [ 592.367671][T12087] use of bytesused == 0 is deprecated and will be removed in the future, [ 592.367678][T12087] use the actual size instead. [ 592.617749][ T32] usb 2-1: config 8 has no interfaces? [ 592.674537][ T32] usb 2-1: string descriptor 0 read error: -22 [ 592.674695][ T32] usb 2-1: New USB device found, idVendor=4113, idProduct=0210, bcdDevice=8c.9d [ 592.674723][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.938112][T11925] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.985001][T11975] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.985235][T11975] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.985476][T11975] bridge_slave_1: entered allmulticast mode [ 592.988079][T11975] bridge_slave_1: entered promiscuous mode [ 593.096130][T11975] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.120427][T11975] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.143293][ T32] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 593.157558][ T5805] usb 2-1: USB disconnect, device number 50 [ 593.314245][ T32] usb 5-1: Using ep0 maxpacket: 32 [ 593.316374][T11975] team0: Port device team_slave_0 added [ 593.317116][ T32] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 593.317138][ T32] usb 5-1: config 0 has no interface number 0 [ 593.317180][ T32] usb 5-1: config 0 interface 12 has no altsetting 0 [ 593.321109][ T32] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 593.321141][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.321165][ T32] usb 5-1: Product: syz [ 593.321182][ T32] usb 5-1: Manufacturer: syz [ 593.321198][ T32] usb 5-1: SerialNumber: syz [ 593.434042][T11975] team0: Port device team_slave_1 added [ 593.457224][ T32] usb 5-1: config 0 descriptor?? [ 593.627710][T11975] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.627727][T11975] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.627755][T11975] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.679908][T11975] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.679924][T11975] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.679951][T11975] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.923879][ T32] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 593.923928][ T32] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 593.923944][ T32] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 593.924025][ T32] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 593.980956][ T32] usb 5-1: USB disconnect, device number 13 [ 594.330646][ T5270] 8021q: adding VLAN 0 to HW filter on device eth4 [ 594.398485][T11975] hsr_slave_0: entered promiscuous mode [ 594.400164][T11975] hsr_slave_1: entered promiscuous mode [ 594.401467][T11975] debugfs: 'hsr0' already exists in 'hsr' [ 594.401496][T11975] Cannot create hsr debugfs directory [ 594.755817][T11925] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 594.785505][ T32] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 594.848767][T11925] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 594.871039][T11925] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 594.904732][T11925] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 594.935033][T11925] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 594.955978][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 594.957863][ T32] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 594.957891][ T32] usb 2-1: config 0 has no interface number 0 [ 594.957935][ T32] usb 2-1: config 0 interface 12 has no altsetting 0 [ 594.960303][ T32] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 594.960332][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.960356][ T32] usb 2-1: Product: syz [ 594.960368][ T32] usb 2-1: Manufacturer: syz [ 594.960379][ T32] usb 2-1: SerialNumber: syz [ 595.043572][ T32] usb 2-1: config 0 descriptor?? [ 595.050566][T11925] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 595.120237][T11925] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 595.197305][T11925] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 595.297792][T12132] tipc: Can't bind to reserved service type 1 [ 595.867435][T12122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 595.868233][T12122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 595.961170][T11975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.180330][T11523] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 596.207052][T11523] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 596.577875][T11975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.765956][T11925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 596.854096][ T5769] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 596.919036][ T32] f81534 2-1:0.12: f81534_set_register: reg: 1003 data: 0 failed: -71 [ 596.919095][ T32] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 596.919112][ T32] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 596.919224][ T32] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 596.957555][ T32] usb 2-1: USB disconnect, device number 51 [ 597.003675][ T5769] usb 5-1: Using ep0 maxpacket: 32 [ 597.005497][ T5769] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 597.005521][ T5769] usb 5-1: config 0 has no interface number 0 [ 597.005565][ T5769] usb 5-1: config 0 interface 12 has no altsetting 0 [ 597.007972][ T5769] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 597.007998][ T5769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.008019][ T5769] usb 5-1: Product: syz [ 597.008034][ T5769] usb 5-1: Manufacturer: syz [ 597.008049][ T5769] usb 5-1: SerialNumber: syz [ 597.012865][ T5769] usb 5-1: config 0 descriptor?? [ 597.167446][T11975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.258718][T11925] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.294561][T10360] bridge0: port 1(bridge_slave_0) entered blocking state [ 597.297219][T10360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 597.334854][T10360] bridge0: port 2(bridge_slave_1) entered blocking state [ 597.335053][T10360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 597.505042][ T5769] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 597.505096][ T5769] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 597.505115][ T5769] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 597.505200][ T5769] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 597.573553][ T5769] usb 5-1: USB disconnect, device number 14 [ 597.661848][T11975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.797877][T12161] Bluetooth: MGMT ver 1.23 [ 598.056111][ T32] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 598.307224][ T32] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 598.307259][ T32] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 598.307283][ T32] usb 2-1: config 0 interface 0 has no altsetting 0 [ 598.329925][ T32] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 598.329956][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.329977][ T32] usb 2-1: Product: syz [ 598.329992][ T32] usb 2-1: Manufacturer: syz [ 598.330007][ T32] usb 2-1: SerialNumber: syz [ 598.345372][ T32] usb 2-1: config 0 descriptor?? [ 598.583443][ T32] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 598.583520][ T32] imon 2-1:0.0: unable to initialize intf0, err -90 [ 598.583546][ T32] imon:imon_probe: failed to initialize context! [ 598.583558][ T32] imon 2-1:0.0: unable to register, err -19 [ 598.639340][ T32] usb 2-1: USB disconnect, device number 52 [ 598.964187][T11975] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 599.031104][T11975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 599.047228][T11975] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 599.104011][T11975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 599.106561][T11975] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 599.219989][T11975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 599.239540][T11925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 599.242021][T11975] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 599.330194][T11975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 599.486504][ T5769] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 599.692586][ T5769] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 599.692622][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.692644][ T5769] usb 2-1: Product: syz [ 599.692660][ T5769] usb 2-1: Manufacturer: syz [ 599.692677][ T5769] usb 2-1: SerialNumber: syz [ 600.080703][T11925] veth0_vlan: entered promiscuous mode [ 600.152633][T11925] veth1_vlan: entered promiscuous mode [ 600.182824][ T5769] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 600.182888][ T5769] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 600.459081][T12193] FAULT_INJECTION: forcing a failure. [ 600.459081][T12193] name failslab, interval 1, probability 0, space 0, times 0 [ 600.459117][T12193] CPU: 1 UID: 0 PID: 12193 Comm: syz.4.2153 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 600.459145][T12193] Tainted: [L]=SOFTLOCKUP [ 600.459154][T12193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 600.459166][T12193] Call Trace: [ 600.459174][T12193] [ 600.459183][T12193] dump_stack_lvl+0xe8/0x150 [ 600.459212][T12193] should_fail_ex+0x46b/0x600 [ 600.459245][T12193] should_failslab+0xa8/0x100 [ 600.459275][T12193] kmem_cache_alloc_noprof+0x87/0x680 [ 600.459301][T12193] ? dst_alloc+0x105/0x170 [ 600.459332][T12193] dst_alloc+0x105/0x170 [ 600.459358][T12193] ? ip_check_mc_rcu+0x4d8/0x690 [ 600.459383][T12193] ip_route_output_key_hash_rcu+0x14d0/0x25e0 [ 600.459451][T12193] ? ip_route_output_key_hash+0xd8/0x2a0 [ 600.459484][T12193] ip_route_output_key_hash+0x18d/0x2a0 [ 600.459515][T12193] ? __lock_acquire+0x6b5/0x2d10 [ 600.459548][T12193] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 600.459596][T12193] ip_route_output_flow+0x2a/0x150 [ 600.459623][T12193] ? security_sk_classify_flow+0x6d/0x150 [ 600.459660][T12193] udp_sendmsg+0x141a/0x21a0 [ 600.459697][T12193] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 600.459727][T12193] ? count_memcg_event_mm+0x21/0x260 [ 600.459760][T12193] ? __pfx_udp_sendmsg+0x10/0x10 [ 600.459787][T12193] ? handle_mm_fault+0x13dd/0x14c0 [ 600.459850][T12193] ? __pfx_aa_sk_perm+0x10/0x10 [ 600.459874][T12193] ? sock_rps_record_flow+0x19/0x350 [ 600.459908][T12193] ? inet_sendmsg+0x29c/0x370 [ 600.459937][T12193] ? aa_sock_msg_perm+0x122/0x200 [ 600.459972][T12193] ? __pfx_inet_sendmsg+0x10/0x10 [ 600.460001][T12193] sock_sendmsg_nosec+0xf9/0x150 [ 600.460036][T12193] ____sys_sendmsg+0x55c/0x870 [ 600.460070][T12193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.460109][T12193] ? import_iovec+0x73/0xa0 [ 600.460143][T12193] ___sys_sendmsg+0x2a5/0x360 [ 600.460169][T12193] ? __lock_acquire+0x6b5/0x2d10 [ 600.460206][T12193] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.460240][T12193] ? kstrtouint+0x6e/0xe0 [ 600.460324][T12193] ? __fget_files+0x2a/0x420 [ 600.460366][T12193] ? __fget_files+0x3a6/0x420 [ 600.460402][T12193] __sys_sendmmsg+0x282/0x4e0 [ 600.460445][T12193] ? __pfx___sys_sendmmsg+0x10/0x10 [ 600.460485][T12193] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 600.460524][T12193] ? ksys_write+0x248/0x270 [ 600.460557][T12193] ? __pfx_ksys_write+0x10/0x10 [ 600.460594][T12193] __x64_sys_sendmmsg+0xa0/0xc0 [ 600.460623][T12193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.460646][T12193] do_syscall_64+0x15f/0xf80 [ 600.460674][T12193] ? trace_irq_disable+0x3b/0x140 [ 600.460703][T12193] ? clear_bhb_loop+0x40/0x90 [ 600.460732][T12193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.460756][T12193] RIP: 0033:0x7ff9459dcdd9 [ 600.460777][T12193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 600.460797][T12193] RSP: 002b:00007ff943c36028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 600.460821][T12193] RAX: ffffffffffffffda RBX: 00007ff945c55fa0 RCX: 00007ff9459dcdd9 [ 600.460838][T12193] RDX: 000000000800001d RSI: 0000200000007fc0 RDI: 0000000000000003 [ 600.460854][T12193] RBP: 00007ff943c36090 R08: 0000000000000000 R09: 0000000000000000 [ 600.460869][T12193] R10: 000000000000001c R11: 0000000000000246 R12: 0000000000000001 [ 600.460883][T12193] R13: 00007ff945c56038 R14: 00007ff945c55fa0 R15: 00007fff4bcdbd88 [ 600.460919][T12193] [ 600.808475][ T5769] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 600.808635][ T5769] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 600.867014][ T5769] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 600.951010][ T5769] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 600.978242][T11975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 601.078567][T11925] veth0_macvtap: entered promiscuous mode [ 601.133565][T11925] veth1_macvtap: entered promiscuous mode [ 601.156985][T11975] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.211113][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 601.211399][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 601.266053][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 601.266241][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.312367][T11925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 601.372219][T11925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 601.411607][T10360] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.458835][T10360] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.460292][T10360] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.461806][T10360] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 601.501098][T12203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 601.501753][T12203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 601.535866][ T5754] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 601.703809][ T5754] usb 5-1: Using ep0 maxpacket: 32 [ 601.720670][ T5754] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 601.720696][ T5754] usb 5-1: config 0 has no interface number 0 [ 601.720836][ T5754] usb 5-1: config 0 interface 12 has no altsetting 0 [ 601.765370][ T5754] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 601.765401][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 601.765422][ T5754] usb 5-1: Product: syz [ 601.765438][ T5754] usb 5-1: Manufacturer: syz [ 601.765452][ T5754] usb 5-1: SerialNumber: syz [ 601.770613][ T5754] usb 5-1: config 0 descriptor?? [ 602.115064][ T5754] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 3 failed: -71 [ 602.115126][ T5754] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 602.115145][ T5754] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 602.115220][ T5754] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 602.278420][ T5754] usb 5-1: USB disconnect, device number 15 [ 602.733413][ T32] usb 2-1: USB disconnect, device number 53 [ 602.976652][ T3360] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 602.976675][ T3360] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 603.117581][T12211] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 603.620054][ T1129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 603.620078][ T1129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.018028][T11975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 604.031571][T12225] FAULT_INJECTION: forcing a failure. [ 604.031571][T12225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 604.031614][T12225] CPU: 0 UID: 0 PID: 12225 Comm: syz.2.2092 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 604.031646][T12225] Tainted: [L]=SOFTLOCKUP [ 604.031672][T12225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 604.031687][T12225] Call Trace: [ 604.031695][T12225] [ 604.031709][T12225] dump_stack_lvl+0xe8/0x150 [ 604.031742][T12225] should_fail_ex+0x46b/0x600 [ 604.031780][T12225] strncpy_from_user+0x36/0x2b0 [ 604.031812][T12225] do_getname+0x77/0x250 [ 604.031849][T12225] do_sys_openat2+0xca/0x200 [ 604.031875][T12225] ? __pfx_do_sys_openat2+0x10/0x10 [ 604.031899][T12225] ? ksys_write+0x248/0x270 [ 604.031930][T12225] ? __pfx_ksys_write+0x10/0x10 [ 604.031962][T12225] __x64_sys_openat+0x138/0x170 [ 604.031988][T12225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.032013][T12225] do_syscall_64+0x15f/0xf80 [ 604.032041][T12225] ? trace_irq_disable+0x3b/0x140 [ 604.032072][T12225] ? clear_bhb_loop+0x40/0x90 [ 604.032101][T12225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.032123][T12225] RIP: 0033:0x7f711fc2cdd9 [ 604.032144][T12225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.032164][T12225] RSP: 002b:00007f711de65028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 604.032188][T12225] RAX: ffffffffffffffda RBX: 00007f711fea6090 RCX: 00007f711fc2cdd9 [ 604.032205][T12225] RDX: 0000000000103042 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 604.032221][T12225] RBP: 00007f711de65090 R08: 0000000000000000 R09: 0000000000000000 [ 604.032236][T12225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.032250][T12225] R13: 00007f711fea6128 R14: 00007f711fea6090 R15: 00007ffdeee475c8 [ 604.032282][T12225] [ 604.344980][T11975] veth0_vlan: entered promiscuous mode [ 604.400979][T11975] veth1_vlan: entered promiscuous mode [ 604.464328][T11975] veth0_macvtap: entered promiscuous mode [ 604.482689][T11975] veth1_macvtap: entered promiscuous mode [ 604.512266][T11975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.551926][T11975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.586458][ T3360] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.587243][ T3360] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.587284][ T3360] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.587320][ T3360] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 605.768028][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.768051][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.966717][ T3360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.966739][ T3360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 605.973142][ T32] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 606.163217][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 606.165458][ T32] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 606.165484][ T32] usb 3-1: config 0 has no interface number 0 [ 606.165528][ T32] usb 3-1: config 0 interface 12 has no altsetting 0 [ 606.202468][ T32] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 606.202503][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 606.202527][ T32] usb 3-1: Product: syz [ 606.202543][ T32] usb 3-1: Manufacturer: syz [ 606.202560][ T32] usb 3-1: SerialNumber: syz [ 606.261635][ T32] usb 3-1: config 0 descriptor?? [ 607.235998][T12238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.237026][T12238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 607.333218][ T5700] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 607.399201][ T5757] hid-generic 0005:0B57:0003.000B: item fetching failed at offset 0/1 [ 607.427343][ T5757] hid-generic 0005:0B57:0003.000B: probe with driver hid-generic failed with error -22 [ 607.464033][ T5700] usb 4-1: device descriptor read/64, error -71 [ 607.543436][ T5769] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 607.665440][ T32] f81534 3-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 607.665494][ T32] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 607.665512][ T32] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 607.665596][ T32] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 607.696773][ T5769] usb 2-1: Using ep0 maxpacket: 16 [ 607.703716][ T5700] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 607.718950][ T5769] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 607.719030][ T5769] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 607.719105][ T5769] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 607.719177][ T5769] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 607.719250][ T5769] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 607.719310][ T5769] usb 2-1: config 0 has no interface number 0 [ 607.719448][ T5769] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 607.719533][ T5769] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 607.719599][ T5769] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 607.719699][ T5769] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 607.719845][ T5769] usb 2-1: config 0 interface 125 has no altsetting 0 [ 607.719889][ T5769] usb 2-1: config 0 interface 125 has no altsetting 2 [ 607.844102][ T5769] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 607.844136][ T5769] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.844158][ T5769] usb 2-1: Product: syz [ 607.844173][ T5769] usb 2-1: Manufacturer: syz [ 607.844187][ T5769] usb 2-1: SerialNumber: syz [ 607.845498][ T32] usb 3-1: USB disconnect, device number 19 [ 607.908158][ T5700] usb 4-1: device descriptor read/64, error -71 [ 607.934723][ T5769] usb 2-1: config 0 descriptor?? [ 607.977721][ T5769] usb 2-1: selecting invalid altsetting 2 [ 608.013494][ T5700] usb usb4-port1: attempt power cycle [ 608.406659][ T5700] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 608.443993][ T5700] usb 4-1: device descriptor read/8, error -71 [ 608.503283][ T32] usb 5-1: new low-speed USB device number 16 using dummy_hcd [ 608.659640][ T32] usb 5-1: unable to get BOS descriptor or descriptor too short [ 608.661307][ T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.667569][ T32] usb 5-1: string descriptor 0 read error: -22 [ 608.667724][ T32] usb 5-1: New USB device found, idVendor=054c, idProduct=0095, bcdDevice=a5.6a [ 608.667740][ T32] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.683631][ T5700] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 608.715992][ T5700] usb 4-1: device descriptor read/8, error -71 [ 608.826048][ T5700] usb usb4-port1: unable to enumerate USB device [ 608.871369][ C0] usb 2-1: async_complete: urb error -71 [ 608.871471][ C0] usb 2-1: async_complete: urb error -71 [ 608.875572][ T5769] get_1284_register: usb error -71 [ 608.912771][ T5769] usb 2-1: USB disconnect, device number 54 [ 608.977695][ T32] usb 5-1: palm_os_4_probe - error -71 getting connection info [ 608.977777][ T32] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 609.004948][ T32] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 609.037182][ T32] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 609.067454][ T32] usb 5-1: USB disconnect, device number 16 [ 609.141825][ T32] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 609.172515][ T32] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 609.184394][ T32] visor 5-1:1.0: device disconnected [ 610.645831][ T5769] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 610.793207][ T5769] usb 4-1: Using ep0 maxpacket: 32 [ 610.795935][ T5769] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 610.795962][ T5769] usb 4-1: config 0 has no interface number 0 [ 610.796010][ T5769] usb 4-1: config 0 interface 12 has no altsetting 0 [ 610.799552][ T5769] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 610.799582][ T5769] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.799604][ T5769] usb 4-1: Product: syz [ 610.799621][ T5769] usb 4-1: Manufacturer: syz [ 610.799637][ T5769] usb 4-1: SerialNumber: syz [ 610.870111][ T5769] usb 4-1: config 0 descriptor?? [ 611.333521][ T5685] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 611.333724][ T5757] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 611.366064][ T4924] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 611.451518][ T4924] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 611.454488][ T4924] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 611.515613][ T4924] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 611.515740][ T5685] usb 2-1: Using ep0 maxpacket: 16 [ 611.525168][ T4924] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 611.538112][ T5757] usb 3-1: device descriptor read/64, error -71 [ 611.557239][ T5685] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 611.557328][ T5685] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 611.557368][ T5685] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 611.557388][ T5685] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 611.557407][ T5685] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 611.557455][ T5685] usb 2-1: config 0 has no interface number 0 [ 611.557548][ T5685] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 611.557577][ T5685] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 611.557598][ T5685] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 611.557672][ T5685] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.557713][ T5685] usb 2-1: config 0 interface 125 has no altsetting 0 [ 611.557732][ T5685] usb 2-1: config 0 interface 125 has no altsetting 2 [ 611.565488][ T5685] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 611.565528][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.565547][ T5685] usb 2-1: Product: syz [ 611.565560][ T5685] usb 2-1: Manufacturer: syz [ 611.565575][ T5685] usb 2-1: SerialNumber: syz [ 611.574107][ T5685] usb 2-1: config 0 descriptor?? [ 611.697765][ T5685] usb 2-1: selecting invalid altsetting 2 [ 611.771868][T12331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 611.772768][T12331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 611.913764][ T5757] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 612.043265][ T5757] usb 3-1: device descriptor read/64, error -71 [ 612.153561][ T5757] usb usb3-port1: attempt power cycle [ 612.228326][ T5769] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: 40 failed: -71 [ 612.228382][ T5769] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 612.228400][ T5769] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 612.228485][ T5769] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 612.311052][ T5769] usb 4-1: USB disconnect, device number 30 [ 612.558254][ C1] usb 2-1: async_complete: urb error -71 [ 612.558347][ C1] usb 2-1: async_complete: urb error -71 [ 612.558782][ T5685] get_1284_register: usb error -71 [ 612.579690][ T5757] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 612.616089][ T5757] usb 3-1: device descriptor read/8, error -71 [ 612.616192][ T5685] usb 2-1: USB disconnect, device number 55 [ 612.853296][ T5757] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 612.873731][ T5757] usb 3-1: device descriptor read/8, error -71 [ 612.984616][ T5757] usb usb3-port1: unable to enumerate USB device [ 613.037980][T12347] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.038228][T12347] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.038400][T12347] bridge_slave_0: entered allmulticast mode [ 613.040775][T12347] bridge_slave_0: entered promiscuous mode [ 613.043229][ T9] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 613.048602][T12347] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.049229][T12347] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.050193][T12347] bridge_slave_1: entered allmulticast mode [ 613.057725][T12347] bridge_slave_1: entered promiscuous mode [ 613.189337][T12347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.204994][T12347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.243682][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 613.246791][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 613.260103][ T9] usb 4-1: config 14 has an invalid interface number: 2 but max is 0 [ 613.260122][ T9] usb 4-1: config 14 has no interface number 0 [ 613.260146][ T9] usb 4-1: config 14 interface 2 has no altsetting 0 [ 613.282362][ T9] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 613.282383][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 613.282399][ T9] usb 4-1: Product: syz [ 613.282410][ T9] usb 4-1: Manufacturer: syz [ 613.282421][ T9] usb 4-1: SerialNumber: syz [ 613.329202][T12367] FAULT_INJECTION: forcing a failure. [ 613.329202][T12367] name failslab, interval 1, probability 0, space 0, times 0 [ 613.329236][T12367] CPU: 1 UID: 0 PID: 12367 Comm: syz.1.2188 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 613.329262][T12367] Tainted: [L]=SOFTLOCKUP [ 613.329270][T12367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 613.329282][T12367] Call Trace: [ 613.329293][T12367] [ 613.329303][T12367] dump_stack_lvl+0xe8/0x150 [ 613.329331][T12367] should_fail_ex+0x46b/0x600 [ 613.329360][T12367] should_failslab+0xa8/0x100 [ 613.329386][T12367] __kmalloc_cache_noprof+0x84/0x690 [ 613.329410][T12367] ? fuse_direct_IO+0x2c7/0x1280 [ 613.329444][T12367] fuse_direct_IO+0x2c7/0x1280 [ 613.329471][T12367] ? filemap_check_errors+0xd2/0x120 [ 613.329503][T12367] ? __pfx_fuse_xattr_get+0x10/0x10 [ 613.329547][T12367] ? __pfx_fuse_direct_IO+0x10/0x10 [ 613.329577][T12367] ? cap_inode_need_killpriv+0x51/0x60 [ 613.329596][T12367] ? bpf_lsm_inode_need_killpriv+0x9/0x20 [ 613.329624][T12367] ? security_inode_need_killpriv+0x71/0x240 [ 613.329655][T12367] ? file_remove_privs_flags+0x4d4/0x640 [ 613.329691][T12367] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 613.329716][T12367] ? lockdep_hardirqs_on+0x7a/0x110 [ 613.329740][T12367] ? generic_write_checks_count+0x449/0x550 [ 613.329772][T12367] generic_file_direct_write+0x1dc/0x3e0 [ 613.329808][T12367] fuse_file_write_iter+0xc7d/0x1130 [ 613.329842][T12367] ? __pfx_fuse_file_write_iter+0x10/0x10 [ 613.329869][T12367] ? aa_file_perm+0x192/0x15f0 [ 613.329894][T12367] ? look_up_lock_class+0x57/0x110 [ 613.329919][T12367] ? register_lock_class+0x31/0x2e0 [ 613.329950][T12367] ? __lock_acquire+0x6b5/0x2d10 [ 613.329982][T12367] ? __pfx_aa_file_perm+0x10/0x10 [ 613.330008][T12367] ? kstrtoull+0x12f/0x1d0 [ 613.330038][T12367] do_iter_readv_writev+0x62b/0x8d0 [ 613.330065][T12367] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 613.330103][T12367] vfs_writev+0x345/0x9a0 [ 613.330139][T12367] ? __pfx_vfs_writev+0x10/0x10 [ 613.330182][T12367] ? __fget_files+0x2a/0x420 [ 613.330206][T12367] ? __fget_files+0x3a6/0x420 [ 613.330225][T12367] ? __fget_files+0x2a/0x420 [ 613.330252][T12367] do_writev+0x15a/0x2e0 [ 613.330283][T12367] ? __pfx_do_writev+0x10/0x10 [ 613.330319][T12367] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.330341][T12367] do_syscall_64+0x15f/0xf80 [ 613.330364][T12367] ? trace_irq_disable+0x3b/0x140 [ 613.330389][T12367] ? clear_bhb_loop+0x40/0x90 [ 613.330413][T12367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.330433][T12367] RIP: 0033:0x7fc2eacbcdd9 [ 613.330450][T12367] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.330467][T12367] RSP: 002b:00007fc2e8f0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 613.330487][T12367] RAX: ffffffffffffffda RBX: 00007fc2eaf35fa0 RCX: 00007fc2eacbcdd9 [ 613.330502][T12367] RDX: 0000000000000001 RSI: 0000200000000400 RDI: 0000000000000005 [ 613.330514][T12367] RBP: 00007fc2e8f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 613.330527][T12367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.330545][T12367] R13: 00007fc2eaf36038 R14: 00007fc2eaf35fa0 R15: 00007ffd23dcd398 [ 613.330574][T12367] [ 613.390053][T12347] team0: Port device team_slave_0 added [ 613.406322][T12347] team0: Port device team_slave_1 added [ 613.696763][ T9] radioshark2 4-1:14.2: Invalid radioSHARK2 device [ 613.696802][ T9] radioshark2 4-1:14.2: probe with driver radioshark2 failed with error -22 [ 613.697356][ T9] usbhid 4-1:14.2: couldn't find an input interrupt endpoint [ 613.726620][ T9] usb 4-1: USB disconnect, device number 31 [ 613.763569][T12347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.763585][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.763610][T12347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 613.794096][T12347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 613.794113][T12347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.794138][T12347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 613.883327][ T4924] Bluetooth: hci2: command tx timeout [ 614.056105][T12347] hsr_slave_0: entered promiscuous mode [ 614.057595][T12347] hsr_slave_1: entered promiscuous mode [ 614.058746][T12347] debugfs: 'hsr0' already exists in 'hsr' [ 614.058775][T12347] Cannot create hsr debugfs directory [ 614.501945][ T9] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 614.710521][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 614.710554][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 614.710577][ T9] usb 4-1: Product: syz [ 614.710608][ T9] usb 4-1: Manufacturer: syz [ 614.710625][ T9] usb 4-1: SerialNumber: syz [ 615.149963][T12347] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.183244][ T5700] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 615.200932][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 615.200986][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 615.334347][ T5700] usb 3-1: Using ep0 maxpacket: 8 [ 615.349914][ T5700] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 615.349938][ T5700] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 615.349956][ T5700] usb 3-1: config 0 has no interface number 0 [ 615.350072][ T5700] usb 3-1: config 0 interface 122 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 615.360340][ T5700] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 615.360382][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.360468][ T5700] usb 3-1: Product: syz [ 615.360483][ T5700] usb 3-1: Manufacturer: syz [ 615.360497][ T5700] usb 3-1: SerialNumber: syz [ 615.446427][ T5700] usb 3-1: config 0 descriptor?? [ 615.618241][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 615.618365][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 615.619853][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 615.637146][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 615.716930][T12347] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.953408][ T4924] Bluetooth: hci2: command tx timeout [ 616.038365][T12347] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.280195][ T4924] Bluetooth: hci1: command 0x0401 tx timeout [ 616.293342][T12370] Bluetooth: hci1: Opcode 0x0401 failed: -110 [ 616.312381][ T5700] usb 3-1: NFC: intf ffff888040654000 id ffffffff8eb99f80 [ 616.387947][T12393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 616.415125][T12393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 616.445178][ T5700] usb 3-1: USB disconnect, device number 24 [ 616.691201][T12347] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.343688][T12406] genirq: Flags mismatch irq 4. 00202000 (pcl812) vs. 00202080 (ttyS0) [ 617.538630][ T5700] usb 4-1: USB disconnect, device number 32 [ 617.660300][T12416] FAULT_INJECTION: forcing a failure. [ 617.660300][T12416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 617.660344][T12416] CPU: 0 UID: 0 PID: 12416 Comm: syz.1.2204 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 617.660375][T12416] Tainted: [L]=SOFTLOCKUP [ 617.660383][T12416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 617.660397][T12416] Call Trace: [ 617.660406][T12416] [ 617.660415][T12416] dump_stack_lvl+0xe8/0x150 [ 617.660457][T12416] should_fail_ex+0x46b/0x600 [ 617.660493][T12416] _copy_from_user+0x2d/0xb0 [ 617.660526][T12416] kstrtouint_from_user+0xd6/0x180 [ 617.660557][T12416] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 617.660602][T12416] proc_fail_nth_write+0x8e/0x210 [ 617.660627][T12416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 617.660658][T12416] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 617.660685][T12416] vfs_write+0x2a3/0xba0 [ 617.660723][T12416] ? __pfx_vfs_write+0x10/0x10 [ 617.660753][T12416] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 617.660783][T12416] ? lockdep_hardirqs_on+0x7a/0x110 [ 617.660812][T12416] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 617.660840][T12416] ? mutex_lock_nested+0x152/0x1d0 [ 617.660875][T12416] ? fdget_pos+0x252/0x320 [ 617.660908][T12416] ksys_write+0x156/0x270 [ 617.660939][T12416] ? __pfx_ksys_write+0x10/0x10 [ 617.660976][T12416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.661001][T12416] do_syscall_64+0x15f/0xf80 [ 617.661029][T12416] ? trace_irq_disable+0x3b/0x140 [ 617.661058][T12416] ? clear_bhb_loop+0x40/0x90 [ 617.661086][T12416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.661109][T12416] RIP: 0033:0x7fc2eac7d60e [ 617.661130][T12416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 617.661150][T12416] RSP: 002b:00007fc2e8eecfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 617.661173][T12416] RAX: ffffffffffffffda RBX: 00007fc2e8eed6c0 RCX: 00007fc2eac7d60e [ 617.661190][T12416] RDX: 0000000000000001 RSI: 00007fc2e8eed0a0 RDI: 0000000000000005 [ 617.661203][T12416] RBP: 00007fc2e8eed090 R08: 0000000000000000 R09: 0000000000000000 [ 617.661216][T12416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 617.661229][T12416] R13: 00007fc2eaf36128 R14: 00007fc2eaf36090 R15: 00007ffd23dcd398 [ 617.661263][T12416] [ 618.000776][T12347] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 618.041949][ T4924] Bluetooth: hci2: command tx timeout [ 618.062668][T12347] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 618.066997][T12347] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 618.179780][T12347] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 618.182559][T12347] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 618.193299][ T5754] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 618.239241][T12347] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 618.240787][T12347] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 618.288002][T12347] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 618.375717][ T5754] usb 4-1: Using ep0 maxpacket: 32 [ 618.375894][ T5757] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 618.393633][ T5754] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 618.393659][ T5754] usb 4-1: config 0 has no interface number 0 [ 618.393704][ T5754] usb 4-1: config 0 interface 12 has no altsetting 0 [ 618.399432][ T5754] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 618.399464][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.399488][ T5754] usb 4-1: Product: syz [ 618.399505][ T5754] usb 4-1: Manufacturer: syz [ 618.399521][ T5754] usb 4-1: SerialNumber: syz [ 618.470230][ T5754] usb 4-1: config 0 descriptor?? [ 618.560403][ T5757] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 618.560435][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.560514][ T5757] usb 2-1: Product: syz [ 618.560531][ T5757] usb 2-1: Manufacturer: syz [ 618.560547][ T5757] usb 2-1: SerialNumber: syz [ 618.601358][ T5757] usb 2-1: config 0 descriptor?? [ 618.852198][ T5757] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 618.886478][T12347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.949943][T12347] 8021q: adding VLAN 0 to HW filter on device team0 [ 618.980338][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 618.980669][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 619.152528][ T3415] bridge0: port 2(bridge_slave_1) entered blocking state [ 619.165522][ T3415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 619.325950][T12417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 619.326516][T12417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.113263][ T4924] Bluetooth: hci2: command tx timeout [ 620.156501][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 620.177091][ T5754] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 620.177142][ T5754] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 620.177160][ T5754] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 620.177297][ T5754] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 620.285855][ T5754] usb 4-1: USB disconnect, device number 33 [ 620.350223][T12419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 620.365373][T12419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 620.700508][ T5757] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 620.732219][ T5757] usb 2-1: USB disconnect, device number 56 [ 620.939737][T12347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 621.033331][ T5769] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 621.191432][ T5769] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 621.191464][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.191487][ T5769] usb 3-1: Product: syz [ 621.191503][ T5769] usb 3-1: Manufacturer: syz [ 621.191519][ T5769] usb 3-1: SerialNumber: syz [ 621.245629][ T5769] usb 3-1: config 0 descriptor?? [ 621.323200][ T5757] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 621.457349][ T5769] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 621.491136][ T5757] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 621.491165][ T5757] usb 4-1: config 0 has no interface number 0 [ 621.491249][ T5757] usb 4-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 621.491292][ T5757] usb 4-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 621.491322][ T5757] usb 4-1: config 0 interface 84 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 621.491347][ T5757] usb 4-1: config 0 interface 84 has no altsetting 0 [ 621.491381][ T5757] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 621.491410][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.593695][ T5757] usb 4-1: config 0 descriptor?? [ 621.594743][T12469] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 621.609307][T12347] veth0_vlan: entered promiscuous mode [ 621.630295][ T5757] option 4-1:0.84: GSM modem (1-port) converter detected [ 621.633357][ T5685] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 621.722615][T12347] veth1_vlan: entered promiscuous mode [ 621.795207][T12347] veth0_macvtap: entered promiscuous mode [ 621.803366][ T5685] usb 2-1: Using ep0 maxpacket: 32 [ 621.810695][ T5685] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 621.810720][ T5685] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 621.810741][ T5685] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 621.810787][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 621.810818][ T5685] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 621.810843][ T5685] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 621.810882][ T5685] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 621.810903][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.902578][ T5685] usb 2-1: config 0 descriptor?? [ 621.946375][T12347] veth1_macvtap: entered promiscuous mode [ 622.079419][T12347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.160282][ T5685] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 57 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 622.190764][ T5700] usb 4-1: USB disconnect, device number 34 [ 622.245577][ T5685] usb 2-1: USB disconnect, device number 57 [ 622.306672][ T5700] option 4-1:0.84: device disconnected [ 622.311499][ T5685] usblp0: removed [ 622.342783][T12347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.432507][ T152] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.447732][ T152] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.449994][ T152] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.450668][ T152] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.783169][ T5685] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 623.006010][ T5685] usb 2-1: Using ep0 maxpacket: 32 [ 623.008657][ T5685] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 623.008681][ T5685] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 623.008700][ T5685] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 623.008754][ T5685] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 623.008776][ T5685] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 623.008800][ T5685] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 623.008839][ T5685] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 623.008862][ T5685] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.106712][ T5685] usb 2-1: config 0 descriptor?? [ 623.497029][ T5685] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 58 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 623.557727][ T5769] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 623.715676][ T5685] usb 2-1: USB disconnect, device number 58 [ 623.721046][ T5685] usblp0: removed [ 623.738220][ T5769] usb 3-1: USB disconnect, device number 25 [ 623.934911][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 623.934927][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.316109][ T3415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 624.316132][ T3415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 624.403189][ T32] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 624.439906][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.439984][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.524136][T12487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2222'. [ 624.529586][T12485] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 624.587231][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 624.615109][ T32] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 624.615138][ T32] usb 4-1: config 0 has no interface number 0 [ 624.625073][ T32] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 624.625106][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 624.625129][ T32] usb 4-1: Product: syz [ 624.625145][ T32] usb 4-1: Manufacturer: syz [ 624.625161][ T32] usb 4-1: SerialNumber: syz [ 624.673461][ T32] usb 4-1: config 0 descriptor?? [ 624.687031][ T32] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 624.941192][ T32] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 625.042978][ T32] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 625.224478][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 625.298581][T12479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 625.300819][T12479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 625.309943][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 625.335595][ T10] usb 4-1: USB disconnect, device number 35 [ 625.355724][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 625.363762][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 625.381180][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 625.396920][ T9] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 625.396950][ T9] usb 3-1: config 0 has no interface number 0 [ 625.396997][ T9] usb 3-1: config 0 interface 12 has no altsetting 0 [ 625.399413][ T9] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 625.399448][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.399464][ T9] usb 3-1: Product: syz [ 625.399475][ T9] usb 3-1: Manufacturer: syz [ 625.399486][ T9] usb 3-1: SerialNumber: syz [ 625.456546][ T10] quatech2 4-1:0.51: device disconnected [ 625.474506][ T9] usb 3-1: config 0 descriptor?? [ 626.067953][T12515] FAULT_INJECTION: forcing a failure. [ 626.067953][T12515] name failslab, interval 1, probability 0, space 0, times 0 [ 626.068215][T12515] CPU: 0 UID: 0 PID: 12515 Comm: syz.3.2232 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 626.068247][T12515] Tainted: [L]=SOFTLOCKUP [ 626.068256][T12515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 626.068269][T12515] Call Trace: [ 626.068279][T12515] [ 626.068289][T12515] dump_stack_lvl+0xe8/0x150 [ 626.068325][T12515] should_fail_ex+0x46b/0x600 [ 626.068359][T12515] should_failslab+0xa8/0x100 [ 626.068391][T12515] __kmalloc_noprof+0xdf/0x7b0 [ 626.068420][T12515] ? tomoyo_encode+0x28b/0x550 [ 626.068466][T12515] tomoyo_encode+0x28b/0x550 [ 626.068508][T12515] tomoyo_realpath_from_path+0x58d/0x5d0 [ 626.068540][T12515] ? tomoyo_domain+0xd7/0x130 [ 626.068580][T12515] ? tomoyo_path_number_perm+0x219/0x630 [ 626.068604][T12515] tomoyo_path_number_perm+0x246/0x630 [ 626.068650][T12515] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 626.068674][T12515] ? __lock_acquire+0x6b5/0x2d10 [ 626.068723][T12515] ? do_raw_spin_lock+0x12b/0x2f0 [ 626.068779][T12515] ? __fget_files+0x2a/0x420 [ 626.068804][T12515] ? __fget_files+0x2a/0x420 [ 626.068824][T12515] ? __fget_files+0x3a6/0x420 [ 626.068845][T12515] ? __fget_files+0x2a/0x420 [ 626.068869][T12515] security_file_ioctl+0xc3/0x2a0 [ 626.068893][T12515] __se_sys_ioctl+0x47/0x170 [ 626.068921][T12515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.068945][T12515] do_syscall_64+0x15f/0xf80 [ 626.068970][T12515] ? trace_irq_disable+0x3b/0x140 [ 626.068997][T12515] ? clear_bhb_loop+0x40/0x90 [ 626.069022][T12515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 626.069044][T12515] RIP: 0033:0x7f5123b5cdd9 [ 626.069063][T12515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 626.069081][T12515] RSP: 002b:00007f5121d8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 626.069103][T12515] RAX: ffffffffffffffda RBX: 00007f5123dd6090 RCX: 00007f5123b5cdd9 [ 626.069119][T12515] RDX: 0000200000000100 RSI: 0000000000005412 RDI: 0000000000000004 [ 626.069132][T12515] RBP: 00007f5121d8d090 R08: 0000000000000000 R09: 0000000000000000 [ 626.069146][T12515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 626.069158][T12515] R13: 00007f5123dd6128 R14: 00007f5123dd6090 R15: 00007ffd825b59d8 [ 626.069189][T12515] [ 626.072842][T12515] ERROR: Out of memory at tomoyo_realpath_from_path. [ 626.338895][T12495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.339635][T12495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.528919][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2234'. [ 627.170263][ T9] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 627.170314][ T9] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 627.170330][ T9] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 627.170663][ T9] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 627.207714][ T9] usb 3-1: USB disconnect, device number 26 [ 627.446309][T12532] FAULT_INJECTION: forcing a failure. [ 627.446309][T12532] name failslab, interval 1, probability 0, space 0, times 0 [ 627.446336][T12532] CPU: 0 UID: 0 PID: 12532 Comm: syz.1.2238 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 627.446357][T12532] Tainted: [L]=SOFTLOCKUP [ 627.446362][T12532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 627.446372][T12532] Call Trace: [ 627.446377][T12532] [ 627.446383][T12532] dump_stack_lvl+0xe8/0x150 [ 627.446407][T12532] should_fail_ex+0x46b/0x600 [ 627.446430][T12532] should_failslab+0xa8/0x100 [ 627.446451][T12532] __kmalloc_noprof+0xdf/0x7b0 [ 627.446468][T12532] ? kfree+0x4d/0x6c0 [ 627.446485][T12532] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 627.446510][T12532] tomoyo_realpath_from_path+0xe3/0x5d0 [ 627.446531][T12532] ? tomoyo_domain+0xd7/0x130 [ 627.446554][T12532] ? tomoyo_path_number_perm+0x219/0x630 [ 627.446571][T12532] tomoyo_path_number_perm+0x246/0x630 [ 627.446612][T12532] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 627.446635][T12532] ? __lock_acquire+0x6b5/0x2d10 [ 627.446670][T12532] ? handle_mm_fault+0x13dd/0x14c0 [ 627.446723][T12532] ? __fget_files+0x2a/0x420 [ 627.446748][T12532] ? __fget_files+0x2a/0x420 [ 627.446762][T12532] ? __fget_files+0x3a6/0x420 [ 627.446776][T12532] ? __fget_files+0x2a/0x420 [ 627.446793][T12532] security_file_ioctl+0xc3/0x2a0 [ 627.446810][T12532] __se_sys_ioctl+0x47/0x170 [ 627.446830][T12532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.446847][T12532] do_syscall_64+0x15f/0xf80 [ 627.446866][T12532] ? trace_irq_disable+0x3b/0x140 [ 627.446885][T12532] ? clear_bhb_loop+0x40/0x90 [ 627.446914][T12532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.446928][T12532] RIP: 0033:0x7fc2eacbca6b [ 627.446940][T12532] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 627.446952][T12532] RSP: 002b:00007fc2e8f0c450 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 627.446968][T12532] RAX: ffffffffffffffda RBX: 0000200000fe5000 RCX: 00007fc2eacbca6b [ 627.446978][T12532] RDX: 00007fc2e8f0ca90 RSI: 000000008138ae83 RDI: 0000000000000005 [ 627.446987][T12532] RBP: ffffffffffffffff R08: 0000000000000001 R09: 0000000000000008 [ 627.446996][T12532] R10: ffffffffffffffff R11: 0000000000000246 R12: 00000000fec00000 [ 627.447006][T12532] R13: 00007fc2e8f0cbd0 R14: 0000200000ffd000 R15: 0000000000000018 [ 627.447026][T12532] [ 627.447032][T12532] ERROR: Out of memory at tomoyo_realpath_from_path. [ 628.739623][ T5754] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 628.911874][T12566] FAULT_INJECTION: forcing a failure. [ 628.911874][T12566] name failslab, interval 1, probability 0, space 0, times 0 [ 628.911907][T12566] CPU: 0 UID: 0 PID: 12566 Comm: syz.2.2250 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 628.911933][T12566] Tainted: [L]=SOFTLOCKUP [ 628.911941][T12566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 628.911951][T12566] Call Trace: [ 628.911958][T12566] [ 628.911966][T12566] dump_stack_lvl+0xe8/0x150 [ 628.911995][T12566] should_fail_ex+0x46b/0x600 [ 628.912030][T12566] should_failslab+0xa8/0x100 [ 628.912057][T12566] __kmalloc_noprof+0xdf/0x7b0 [ 628.912080][T12566] ? tomoyo_encode+0x28b/0x550 [ 628.912111][T12566] tomoyo_encode+0x28b/0x550 [ 628.912139][T12566] tomoyo_realpath_from_path+0x58d/0x5d0 [ 628.912166][T12566] ? tomoyo_domain+0xd7/0x130 [ 628.912194][T12566] ? tomoyo_path_number_perm+0x219/0x630 [ 628.912215][T12566] tomoyo_path_number_perm+0x246/0x630 [ 628.912237][T12566] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 628.912258][T12566] ? __lock_acquire+0x6b5/0x2d10 [ 628.912300][T12566] ? do_raw_spin_lock+0x12b/0x2f0 [ 628.912354][T12566] ? __fget_files+0x2a/0x420 [ 628.912380][T12566] ? __fget_files+0x2a/0x420 [ 628.912400][T12566] ? __fget_files+0x3a6/0x420 [ 628.912419][T12566] ? __fget_files+0x2a/0x420 [ 628.912441][T12566] security_file_ioctl+0xc3/0x2a0 [ 628.912461][T12566] __se_sys_ioctl+0x47/0x170 [ 628.912485][T12566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.912505][T12566] do_syscall_64+0x15f/0xf80 [ 628.912530][T12566] ? trace_irq_disable+0x3b/0x140 [ 628.912555][T12566] ? clear_bhb_loop+0x40/0x90 [ 628.912577][T12566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.912595][T12566] RIP: 0033:0x7f711fc2cdd9 [ 628.912612][T12566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.912628][T12566] RSP: 002b:00007f711de86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.912647][T12566] RAX: ffffffffffffffda RBX: 00007f711fea5fa0 RCX: 00007f711fc2cdd9 [ 628.912660][T12566] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 628.912671][T12566] RBP: 00007f711de86090 R08: 0000000000000000 R09: 0000000000000000 [ 628.912683][T12566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.912694][T12566] R13: 00007f711fea6038 R14: 00007f711fea5fa0 R15: 00007ffdeee475c8 [ 628.912726][T12566] [ 628.912831][T12566] ERROR: Out of memory at tomoyo_realpath_from_path. [ 628.953164][ T5754] usb 4-1: Using ep0 maxpacket: 32 [ 629.047923][ T5754] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 629.047951][ T5754] usb 4-1: config 0 has no interface number 0 [ 629.047995][ T5754] usb 4-1: config 0 interface 12 has no altsetting 0 [ 629.052109][ T5754] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 629.052139][ T5754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.052159][ T5754] usb 4-1: Product: syz [ 629.052180][ T5754] usb 4-1: Manufacturer: syz [ 629.052192][ T5754] usb 4-1: SerialNumber: syz [ 629.377521][ T5754] usb 4-1: config 0 descriptor?? [ 630.165358][ T821] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 630.209083][T12556] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 630.214987][T12556] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 630.320600][ T821] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 630.320628][ T821] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.320647][ T821] usb 2-1: Product: syz [ 630.320665][ T821] usb 2-1: Manufacturer: syz [ 630.320675][ T821] usb 2-1: SerialNumber: syz [ 630.633245][ T5757] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 630.790373][ T821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 630.790448][ T821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 630.819756][ T5757] usb 3-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 630.819807][ T5757] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 630.819894][ T5757] usb 3-1: config 0 interface 0 has no altsetting 0 [ 630.819919][ T5757] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 630.819935][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 630.903886][ T5757] usb 3-1: config 0 descriptor?? [ 630.905638][T12589] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 631.037343][ T5754] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 631.037756][ T5754] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 631.037775][ T5754] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 631.037846][ T5754] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 631.096110][ T5754] usb 4-1: USB disconnect, device number 36 [ 631.913499][ T5769] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 632.053186][ T5769] usb 4-1: device descriptor read/64, error -71 [ 632.293302][ T5769] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 632.424198][ T5769] usb 4-1: device descriptor read/64, error -71 [ 632.535640][ T5769] usb usb4-port1: attempt power cycle [ 632.601512][ T821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 632.602003][ T821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 632.602542][ T821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 632.602588][ T821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 632.671352][ T821] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 632.696772][ T821] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 632.716098][ T821] usb 2-1: USB disconnect, device number 59 [ 632.933173][ T5769] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 632.953999][ T5769] usb 4-1: device descriptor read/8, error -71 [ 633.193376][ T5769] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 633.216545][ T5769] usb 4-1: device descriptor read/8, error -71 [ 633.323547][ T5769] usb usb4-port1: unable to enumerate USB device [ 633.327841][ T5757] usbhid 3-1:0.0: can't add hid device: -71 [ 633.327958][ T5757] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 633.358433][ T5757] usb 3-1: USB disconnect, device number 27 [ 633.434732][ T5754] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 633.600109][ T5754] usb 5-1: Using ep0 maxpacket: 32 [ 633.602828][ T5754] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 633.602853][ T5754] usb 5-1: config 0 has no interface number 0 [ 633.602908][ T5754] usb 5-1: config 0 interface 12 has no altsetting 0 [ 633.636060][ T5754] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 633.636087][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.636107][ T5754] usb 5-1: Product: syz [ 633.636121][ T5754] usb 5-1: Manufacturer: syz [ 633.636136][ T5754] usb 5-1: SerialNumber: syz [ 633.687683][ T5754] usb 5-1: config 0 descriptor?? [ 634.144154][ T5769] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 634.303164][ T5769] usb 2-1: Using ep0 maxpacket: 32 [ 634.305362][ T5769] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 634.307504][ T5769] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 634.307532][ T5769] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 634.307553][ T5769] usb 2-1: Product: syz [ 634.307568][ T5769] usb 2-1: Manufacturer: syz [ 634.368353][ T5769] hub 2-1:4.0: bad descriptor, ignoring hub [ 634.368408][ T5769] hub 2-1:4.0: probe with driver hub failed with error -5 [ 634.381953][ T5769] usbhid 2-1:4.0: couldn't find an input interrupt endpoint [ 634.521876][T12618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 634.522545][T12618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 635.379041][ T5754] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 635.379076][ T5754] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 635.379088][ T5754] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 635.379146][ T5754] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 635.433436][ T821] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 635.435595][ T5754] usb 5-1: USB disconnect, device number 17 [ 635.509864][ T7562] usb 2-1: reset high-speed USB device number 60 using dummy_hcd [ 635.583212][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 635.585345][ T821] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 635.585364][ T821] usb 4-1: config 0 has no interface number 0 [ 635.585396][ T821] usb 4-1: config 0 interface 12 has no altsetting 0 [ 635.587930][ T821] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 635.587950][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.587964][ T821] usb 4-1: Product: syz [ 635.587975][ T821] usb 4-1: Manufacturer: syz [ 635.587986][ T821] usb 4-1: SerialNumber: syz [ 635.592385][ T821] usb 4-1: config 0 descriptor?? [ 635.963268][ T5754] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 636.118353][ T5754] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 636.118413][ T5754] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61 [ 636.118441][ T5754] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.144425][ T5769] usb 2-1: USB disconnect, device number 60 [ 636.169586][ T5754] usb 3-1: config 0 descriptor?? [ 636.197227][ T5754] ttusbir 3-1:0.0: probe with driver ttusbir failed with error -12 [ 636.450411][T12654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.450979][T12654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.682072][ T821] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 636.682130][ T821] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 636.682153][ T821] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 636.682224][ T821] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 636.720158][ T821] usb 4-1: USB disconnect, device number 41 [ 637.224263][ T5754] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 637.224836][ T5769] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 637.373151][ T5754] usb 2-1: Using ep0 maxpacket: 32 [ 637.377418][ T5754] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 637.377425][ T5769] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.377445][ T5754] usb 2-1: config 0 has no interface number 0 [ 637.377449][ T5769] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 637.377494][ T5754] usb 2-1: config 0 interface 12 has no altsetting 0 [ 637.379097][ T5769] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 637.379128][ T5769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 637.379151][ T5769] usb 5-1: SerialNumber: syz [ 637.381389][ T5754] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 637.381418][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.381440][ T5754] usb 2-1: Product: syz [ 637.381455][ T5754] usb 2-1: Manufacturer: syz [ 637.381471][ T5754] usb 2-1: SerialNumber: syz [ 637.465090][ T821] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 637.502996][ T5754] usb 2-1: config 0 descriptor?? [ 637.634600][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 637.638013][ T821] usb 4-1: config 1 interface 0 has no altsetting 0 [ 637.642005][ T821] usb 4-1: New USB device found, idVendor=16c0, idProduct=75e1, bcdDevice= 0.40 [ 637.642034][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.642297][ T821] usb 4-1: Product: syz [ 637.642330][ T821] usb 4-1: Manufacturer: syz [ 637.642347][ T821] usb 4-1: SerialNumber: syz [ 637.759400][ T5769] usb 5-1: 0:2 : does not exist [ 637.857330][ T5769] usb 5-1: USB disconnect, device number 18 [ 637.987558][ T821] usbhid 4-1:1.0: can't add hid device: -71 [ 637.987719][ T821] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 638.026677][ T821] usb 4-1: USB disconnect, device number 42 [ 638.074214][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 638.366261][T12689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.367111][T12689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.655369][ T5769] usb 3-1: USB disconnect, device number 28 [ 639.256846][ T5754] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 639.256919][ T5754] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 639.256937][ T5754] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 639.257015][ T5754] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 639.278657][ T5754] usb 2-1: USB disconnect, device number 61 [ 639.396081][ T5685] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 639.548732][ T5685] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 639.548788][ T5685] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 639.548816][ T5685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 639.548844][ T5685] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 639.570831][ T5685] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 639.572466][ T5685] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 639.572526][ T5685] usb 4-1: Product: syz [ 639.572571][ T5685] usb 4-1: Manufacturer: syz [ 639.572629][ T5685] usb 4-1: SerialNumber: syz [ 639.586030][ T820] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 639.633798][ T5685] usb 4-1: config 0 descriptor?? [ 639.753186][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 639.755641][ T820] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 639.755669][ T820] usb 5-1: config 0 has no interface number 0 [ 639.755773][ T820] usb 5-1: config 0 interface 12 has no altsetting 0 [ 639.758254][ T820] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 639.758283][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.758355][ T820] usb 5-1: Product: syz [ 639.758367][ T820] usb 5-1: Manufacturer: syz [ 639.758378][ T820] usb 5-1: SerialNumber: syz [ 639.783208][ T5769] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 639.808693][ T820] usb 5-1: config 0 descriptor?? [ 639.898718][ T5685] radio-si470x 4-1:0.0: DeviceID=0x9351 ChipID=0xb4c7 [ 639.988878][ T5769] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 639.988911][ T5769] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.988933][ T5769] usb 3-1: Product: syz [ 639.988949][ T5769] usb 3-1: Manufacturer: syz [ 639.988965][ T5769] usb 3-1: SerialNumber: syz [ 640.091541][ T5685] radio-si470x 4-1:0.0: software version 147, hardware version 81 [ 640.373400][ T32] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 640.413827][ T5685] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 640.414150][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.414618][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.414842][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.415070][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.415299][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.415528][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.415752][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.416000][ C1] radio-si470x 4-1:0.0: non-zero urb status (-71) [ 640.416092][ T5685] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 640.417258][ T5685] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 640.510038][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 640.510091][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 640.554066][ T5685] usb 4-1: USB disconnect, device number 43 [ 640.646029][ T32] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 640.646057][ T32] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 640.659323][ T32] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 640.659412][ T32] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 640.659530][ T32] usb 2-1: SerialNumber: syz [ 640.756639][T12717] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 640.843766][T12717] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 640.949697][ T32] usb 2-1: 0:2 : does not exist [ 641.095143][ T820] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 641.095197][ T820] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 641.095216][ T820] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 641.095306][ T820] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 641.126644][ T32] usb 2-1: USB disconnect, device number 62 [ 641.142658][ T820] usb 5-1: USB disconnect, device number 19 [ 641.305536][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 641.719243][T12734] FAULT_INJECTION: forcing a failure. [ 641.719243][T12734] name failslab, interval 1, probability 0, space 0, times 0 [ 641.719285][T12734] CPU: 1 UID: 0 PID: 12734 Comm: syz.1.2309 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 641.719352][T12734] Tainted: [L]=SOFTLOCKUP [ 641.719361][T12734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 641.719373][T12734] Call Trace: [ 641.719382][T12734] [ 641.719392][T12734] dump_stack_lvl+0xe8/0x150 [ 641.719423][T12734] should_fail_ex+0x46b/0x600 [ 641.719458][T12734] should_failslab+0xa8/0x100 [ 641.719489][T12734] kmem_cache_alloc_noprof+0x87/0x680 [ 641.719516][T12734] ? skb_clone+0x212/0x3a0 [ 641.719548][T12734] skb_clone+0x212/0x3a0 [ 641.719571][T12734] ? __neigh_event_send+0xe2a/0x1520 [ 641.719597][T12734] __neigh_event_send+0xe37/0x1520 [ 641.719625][T12734] ? __neigh_event_send+0x38/0x1520 [ 641.719673][T12734] neigh_resolve_output+0x19f/0x780 [ 641.719700][T12734] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 641.719743][T12734] ? ip_finish_output2+0x3c2/0x10b0 [ 641.719773][T12734] ip_finish_output2+0xcec/0x10b0 [ 641.719806][T12734] ? ip_skb_dst_mtu+0x109/0xa50 [ 641.719839][T12734] ? ip_finish_output+0x40e/0x530 [ 641.719871][T12734] ip_output+0x29f/0x450 [ 641.719900][T12734] ? ip_output+0x5b/0x450 [ 641.719928][T12734] ? __ip_queue_xmit+0x5c/0x1bb0 [ 641.719957][T12734] __ip_queue_xmit+0x116a/0x1bb0 [ 641.719994][T12734] ? __ip_queue_xmit+0x5c/0x1bb0 [ 641.720026][T12734] ? __pfx_ip_queue_xmit+0x10/0x10 [ 641.720056][T12734] __tcp_transmit_skb+0x2d76/0x4790 [ 641.720121][T12734] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 641.720162][T12734] ? lockdep_hardirqs_on+0x7a/0x110 [ 641.720211][T12734] tcp_connect+0x227d/0x53a0 [ 641.720264][T12734] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 641.720295][T12734] ? __pfx_tcp_connect+0x10/0x10 [ 641.720347][T12734] ? __asan_memset+0x22/0x50 [ 641.720375][T12734] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 641.720396][T12734] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 641.720429][T12734] ? sk_setup_caps+0x9ef/0xc40 [ 641.720459][T12734] ? sk_setup_caps+0x29/0xc40 [ 641.720492][T12734] tcp_v4_connect+0x10f7/0x19b0 [ 641.720546][T12734] ? __pfx_tcp_v4_connect+0x10/0x10 [ 641.720590][T12734] __inet_stream_connect+0x25a/0xdd0 [ 641.720633][T12734] ? __pfx___inet_stream_connect+0x10/0x10 [ 641.720660][T12734] ? __local_bh_enable+0x1e1/0x2f0 [ 641.720701][T12734] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 641.720725][T12734] ? lockdep_hardirqs_on+0x7a/0x110 [ 641.720755][T12734] inet_stream_connect+0x66/0xa0 [ 641.720785][T12734] kernel_connect+0x141/0x1c0 [ 641.720816][T12734] ? __pfx_kernel_connect+0x10/0x10 [ 641.720857][T12734] ? __local_bh_enable_ip+0x1ae/0x2b0 [ 641.720882][T12734] ? lockdep_hardirqs_on+0x7a/0x110 [ 641.720910][T12734] smc_connect+0x7a5/0xd90 [ 641.720942][T12734] __sys_connect+0x315/0x450 [ 641.720968][T12734] ? __pfx___sys_connect+0x10/0x10 [ 641.721003][T12734] ? __pfx_ksys_write+0x10/0x10 [ 641.721032][T12734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.721054][T12734] __x64_sys_connect+0x7a/0x90 [ 641.721078][T12734] do_syscall_64+0x15f/0xf80 [ 641.721101][T12734] ? trace_irq_disable+0x3b/0x140 [ 641.721128][T12734] ? clear_bhb_loop+0x40/0x90 [ 641.721153][T12734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.721173][T12734] RIP: 0033:0x7fc2eacbcdd9 [ 641.721197][T12734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.721215][T12734] RSP: 002b:00007fc2e8f0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 641.721237][T12734] RAX: ffffffffffffffda RBX: 00007fc2eaf35fa0 RCX: 00007fc2eacbcdd9 [ 641.721251][T12734] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 641.721264][T12734] RBP: 00007fc2e8f0e090 R08: 0000000000000000 R09: 0000000000000000 [ 641.721276][T12734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.721288][T12734] R13: 00007fc2eaf36038 R14: 00007fc2eaf35fa0 R15: 00007ffd23dcd398 [ 641.721326][T12734] [ 642.236546][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 642.237057][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 642.237553][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 642.237603][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 642.241198][ T5769] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 642.302195][ T5769] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 642.331695][ T5769] usb 3-1: USB disconnect, device number 29 [ 642.799509][T12750] netlink: 'syz.1.2312': attribute type 11 has an invalid length. [ 643.413377][ T5685] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 643.484309][ T32] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 643.569103][ T820] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 643.583509][ T5685] usb 2-1: Using ep0 maxpacket: 32 [ 643.586156][ T5685] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 643.586187][ T5685] usb 2-1: config 0 has no interface number 0 [ 643.586242][ T5685] usb 2-1: config 0 interface 12 has no altsetting 0 [ 643.591780][ T5685] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 643.591865][ T5685] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.591929][ T5685] usb 2-1: Product: syz [ 643.591973][ T5685] usb 2-1: Manufacturer: syz [ 643.592024][ T5685] usb 2-1: SerialNumber: syz [ 643.654761][ T32] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 643.654786][ T32] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 643.680874][ T32] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 643.680904][ T32] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 643.680924][ T32] usb 5-1: SerialNumber: syz [ 643.690293][ T5685] usb 2-1: config 0 descriptor?? [ 643.734517][ T820] usb 4-1: Using ep0 maxpacket: 32 [ 643.747844][ T820] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 643.747873][ T820] usb 4-1: config 0 has no interface number 0 [ 643.747977][ T820] usb 4-1: config 0 interface 12 has no altsetting 0 [ 643.783387][ T820] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 643.783414][ T820] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 643.783979][ T820] usb 4-1: Product: syz [ 643.784029][ T820] usb 4-1: Manufacturer: syz [ 643.785109][ T820] usb 4-1: SerialNumber: syz [ 643.864479][ T820] usb 4-1: config 0 descriptor?? [ 643.940274][T12783] tmpfs: Unknown parameter 'Ìz ' [ 644.058969][ T32] usb 5-1: 0:2 : does not exist [ 644.225045][ T32] usb 5-1: USB disconnect, device number 20 [ 644.239509][T12789] tmpfs: Bad value for 'nr_inodes' [ 644.424322][ T5799] udevd[5799]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 644.480501][ T4924] block nbd1: Receive control failed (result -32) [ 644.538658][T12767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.539648][T12767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.701984][T12773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 644.702739][T12773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 644.761281][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2323'. [ 644.761310][T12793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2323'. [ 644.973214][ T5769] usb 5-1: new low-speed USB device number 21 using dummy_hcd [ 645.126196][ T5769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 645.126233][ T5769] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 645.126262][ T5769] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 645.126318][ T5769] usb 5-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 645.126343][ T5769] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.194530][ T5769] usb 5-1: config 0 descriptor?? [ 645.199954][T12795] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 645.283341][ T5757] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 645.344942][ T820] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 645.345720][ T820] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 645.345742][ T820] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 645.346565][ T820] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 645.402264][ T820] usb 4-1: USB disconnect, device number 44 [ 645.412487][ T5685] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 645.412558][ T5685] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 645.412579][ T5685] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 645.412663][ T5685] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 645.450068][ T5757] usb 3-1: Using ep0 maxpacket: 16 [ 645.453729][ T5757] usb 3-1: unable to get BOS descriptor or descriptor too short [ 645.477195][ T5757] usb 3-1: config 31 has an invalid interface number: 113 but max is 0 [ 645.477222][ T5757] usb 3-1: config 31 has no interface number 0 [ 645.477258][ T5757] usb 3-1: config 31 interface 113 has no altsetting 0 [ 645.510514][ T5757] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=9d.6f [ 645.510540][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.510560][ T5757] usb 3-1: Product: syz [ 645.510573][ T5757] usb 3-1: Manufacturer: syz [ 645.510587][ T5757] usb 3-1: SerialNumber: syz [ 645.570320][ T5685] usb 2-1: USB disconnect, device number 63 [ 645.644228][ T5769] acrux 0003:1A34:F705.000C: unknown main item tag 0x3 [ 645.644277][ T5769] acrux 0003:1A34:F705.000C: unknown main item tag 0x0 [ 645.644307][ T5769] acrux 0003:1A34:F705.000C: unknown main item tag 0x0 [ 645.644333][ T5769] acrux 0003:1A34:F705.000C: unknown main item tag 0x0 [ 645.644360][ T5769] acrux 0003:1A34:F705.000C: unknown main item tag 0x0 [ 645.644386][ T5769] acrux 0003:1A34:F705.000C: unknown main item tag 0x0 [ 645.644415][ T5769] acrux 0003:1A34:F705.000C: unknown main item tag 0x0 [ 645.644443][ T5769] acrux 0003:1A34:F705.000C: unknown main item tag 0x0 [ 645.740876][ T5769] acrux 0003:1A34:F705.000C: hidraw0: USB HID v0.04 Device [HID 1a34:f705] on usb-dummy_hcd.4-1/input0 [ 645.740909][ T5769] acrux 0003:1A34:F705.000C: no inputs found [ 645.740922][ T5769] acrux 0003:1A34:F705.000C: Failed to enable force feedback support, error: -19 [ 645.888350][ T5757] ims_pcu 3-1:31.113: Zero length descriptor [ 645.888408][ T5757] ims_pcu 3-1:31.113: probe with driver ims_pcu failed with error -22 [ 645.912853][ T5757] usb 3-1: USB disconnect, device number 30 [ 646.151001][ T821] usb 5-1: USB disconnect, device number 21 [ 646.773657][ T5685] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 646.893138][ T821] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 646.925128][ T5685] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 646.925236][ T5685] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 646.926433][ T5685] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 646.926459][ T5685] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 646.926481][ T5685] usb 4-1: SerialNumber: syz [ 646.993424][ T820] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 647.055500][ T821] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 647.055534][ T821] usb 3-1: config 1 has no interface number 0 [ 647.055581][ T821] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 647.055612][ T821] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 647.055641][ T821] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 647.058853][ T821] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 647.058892][ T821] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.058920][ T821] usb 3-1: Product: syz [ 647.058933][ T821] usb 3-1: Manufacturer: syz [ 647.058946][ T821] usb 3-1: SerialNumber: syz [ 647.154815][ T820] usb 5-1: Using ep0 maxpacket: 32 [ 647.160509][T12825] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 647.179354][ T820] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 647.179379][ T820] usb 5-1: config 0 has no interface number 0 [ 647.179425][ T820] usb 5-1: config 0 interface 12 has no altsetting 0 [ 647.185502][ T820] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 647.185533][ T820] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 647.185556][ T820] usb 5-1: Product: syz [ 647.185594][ T820] usb 5-1: Manufacturer: syz [ 647.185630][ T820] usb 5-1: SerialNumber: syz [ 647.245866][ T5685] usb 4-1: 0:2 : does not exist [ 647.267490][ T820] usb 5-1: config 0 descriptor?? [ 647.373960][T12825] netlink: 'syz.2.2335': attribute type 21 has an invalid length. [ 647.374133][T12825] netlink: 'syz.2.2335': attribute type 1 has an invalid length. [ 647.382492][T12825] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 647.410037][ T821] usb 3-1: No status endpoint found [ 647.610088][T12832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 647.610683][T12832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 647.619160][T12825] netlink: 'syz.2.2335': attribute type 21 has an invalid length. [ 647.625914][ T5685] usb 4-1: USB disconnect, device number 45 [ 647.628770][T12825] netlink: 'syz.2.2335': attribute type 1 has an invalid length. [ 647.741371][ T32] usb 3-1: USB disconnect, device number 31 [ 647.916163][ T5769] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 647.969536][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 648.075458][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 648.075488][ T5769] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 648.075526][ T5769] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 648.075548][ T5769] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.129102][T12827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 648.129698][T12827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 648.130906][ T5769] usb 2-1: config 0 descriptor?? [ 648.333794][T12839] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2339'. [ 648.733172][ T5757] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 648.883103][ T5757] usb 3-1: Using ep0 maxpacket: 32 [ 648.885497][ T5757] usb 3-1: config 3 has an invalid interface number: 249 but max is 0 [ 648.885642][ T5757] usb 3-1: config 3 has no interface number 0 [ 648.885706][ T5757] usb 3-1: config 3 interface 249 has no altsetting 0 [ 648.888574][ T5757] usb 3-1: New USB device found, idVendor=0cf3, idProduct=b003, bcdDevice=bf.24 [ 648.888601][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.888622][ T5757] usb 3-1: Product: syz [ 648.888690][ T5757] usb 3-1: Manufacturer: syz [ 648.888706][ T5757] usb 3-1: SerialNumber: syz [ 649.018790][ T820] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 649.018856][ T820] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 649.019094][ T820] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 649.019177][ T820] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 649.083951][ T820] usb 5-1: USB disconnect, device number 22 [ 649.165015][ T5757] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 649.190506][ T5757] usb 3-1: USB disconnect, device number 32 [ 649.233528][ T5769] ath6kl: Failed to submit usb control message: -110 [ 649.233572][ T5769] ath6kl: unable to send the bmi data to the device: -110 [ 649.233587][ T5769] ath6kl: Unable to send get target info: -110 [ 649.234432][ T5769] ath6kl: Failed to init ath6kl core: -110 [ 649.266132][ T5769] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 649.815094][ T821] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 649.973204][ T821] usb 5-1: Using ep0 maxpacket: 32 [ 649.976240][ T821] usb 5-1: config 0 has an invalid interface number: 230 but max is 0 [ 649.976264][ T821] usb 5-1: config 0 has no interface number 0 [ 649.976295][ T821] usb 5-1: too many endpoints for config 0 interface 230 altsetting 80: 88, using maximum allowed: 30 [ 649.976320][ T821] usb 5-1: config 0 interface 230 altsetting 80 has 0 endpoint descriptors, different from the interface descriptor's value: 88 [ 649.976339][ T821] usb 5-1: config 0 interface 230 has no altsetting 0 [ 649.978896][ T821] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 649.978925][ T821] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 649.978939][ T821] usb 5-1: Product: syz [ 649.978948][ T821] usb 5-1: Manufacturer: syz [ 649.978958][ T821] usb 5-1: SerialNumber: syz [ 650.082036][ T821] usb 5-1: config 0 descriptor?? [ 650.175988][T12856] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 650.293370][ T821] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 650.593132][T11523] Bluetooth: hci2: command 0x0405 tx timeout [ 650.731468][T12866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 650.732166][T12866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 650.872325][T12279] usb 2-1: USB disconnect, device number 64 [ 650.937494][ T821] gspca_ov534_9: reg_w failed -71 [ 651.224234][ T821] gspca_ov534_9: Unknown sensor 0000 [ 651.224320][ T821] ov534_9 5-1:0.230: probe with driver ov534_9 failed with error -22 [ 651.225123][ T821] usbhid 5-1:0.230: couldn't find an input interrupt endpoint [ 651.236238][ T821] usb 5-1: USB disconnect, device number 23 [ 651.243871][ T32] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 651.343220][T12279] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 651.414732][ T32] usb 4-1: Using ep0 maxpacket: 32 [ 651.416847][ T32] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 651.416875][ T32] usb 4-1: config 0 has no interface number 0 [ 651.416925][ T32] usb 4-1: config 0 interface 12 has no altsetting 0 [ 651.420870][ T32] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 651.420897][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.420916][ T32] usb 4-1: Product: syz [ 651.420930][ T32] usb 4-1: Manufacturer: syz [ 651.420945][ T32] usb 4-1: SerialNumber: syz [ 651.493229][T12279] usb 2-1: Using ep0 maxpacket: 8 [ 651.496642][ T32] usb 4-1: config 0 descriptor?? [ 651.502847][T12279] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 651.502879][T12279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.502907][T12279] usb 2-1: Product: syz [ 651.502933][T12279] usb 2-1: Manufacturer: syz [ 651.502946][T12279] usb 2-1: SerialNumber: syz [ 651.558461][T12279] usb 2-1: config 0 descriptor?? [ 651.772966][T12279] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 651.848402][T12889] FAULT_INJECTION: forcing a failure. [ 651.848402][T12889] name failslab, interval 1, probability 0, space 0, times 0 [ 651.848439][T12889] CPU: 1 UID: 0 PID: 12889 Comm: syz.2.2358 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 651.848469][T12889] Tainted: [L]=SOFTLOCKUP [ 651.848478][T12889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 651.848494][T12889] Call Trace: [ 651.848502][T12889] [ 651.848511][T12889] dump_stack_lvl+0xe8/0x150 [ 651.848541][T12889] should_fail_ex+0x46b/0x600 [ 651.848572][T12889] should_failslab+0xa8/0x100 [ 651.848604][T12889] __kmalloc_cache_noprof+0x84/0x690 [ 651.848632][T12889] ? __rdma_create_id+0x65/0x7b0 [ 651.848659][T12889] ? __pfx_ucma_event_handler+0x10/0x10 [ 651.848687][T12889] ? __pfx_ucma_event_handler+0x10/0x10 [ 651.848712][T12889] __rdma_create_id+0x65/0x7b0 [ 651.848742][T12889] ? __pfx_ucma_event_handler+0x10/0x10 [ 651.848767][T12889] rdma_create_user_id+0x81/0xc0 [ 651.848797][T12889] ucma_create_id+0x22e/0x380 [ 651.848822][T12889] ? __pfx_ucma_create_id+0x10/0x10 [ 651.848867][T12889] ucma_write+0x257/0x2f0 [ 651.848892][T12889] ? __pfx_ucma_write+0x10/0x10 [ 651.848917][T12889] ? rw_verify_area+0x25b/0x4e0 [ 651.848949][T12889] vfs_writev+0x4c6/0x9a0 [ 651.848992][T12889] ? __pfx_ucma_write+0x10/0x10 [ 651.849018][T12889] ? __pfx_vfs_writev+0x10/0x10 [ 651.849059][T12889] ? __fget_files+0x2a/0x420 [ 651.849085][T12889] ? __fget_files+0x3a6/0x420 [ 651.849105][T12889] ? __fget_files+0x2a/0x420 [ 651.849133][T12889] do_writev+0x15a/0x2e0 [ 651.849164][T12889] ? __pfx_do_writev+0x10/0x10 [ 651.849202][T12889] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.849224][T12889] do_syscall_64+0x15f/0xf80 [ 651.849250][T12889] ? clear_bhb_loop+0x40/0x90 [ 651.849275][T12889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.849294][T12889] RIP: 0033:0x7f711fc2cdd9 [ 651.849312][T12889] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 651.849329][T12889] RSP: 002b:00007f711de86028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 651.849350][T12889] RAX: ffffffffffffffda RBX: 00007f711fea5fa0 RCX: 00007f711fc2cdd9 [ 651.849365][T12889] RDX: 0000000000000003 RSI: 0000200000000000 RDI: 0000000000000005 [ 651.849377][T12889] RBP: 00007f711de86090 R08: 0000000000000000 R09: 0000000000000000 [ 651.849390][T12889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.849402][T12889] R13: 00007f711fea6038 R14: 00007f711fea5fa0 R15: 00007ffdeee475c8 [ 651.849431][T12889] [ 652.384056][T12874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.388646][T12874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.391410][T12279] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 652.408300][T12872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 652.409312][T12872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 652.461102][T12279] usb 2-1: USB disconnect, device number 65 [ 652.635365][T12899] 9p: Bad value for 'wfdno' [ 652.706906][T12903] fuse: Unknown parameter 'Gvƒ@æQO ' [ 653.028586][ T32] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 653.028632][ T32] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 653.028647][ T32] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 653.028714][ T32] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 653.079522][ T32] usb 4-1: USB disconnect, device number 46 [ 653.263131][ T821] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 653.415011][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.415045][ T821] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.415089][ T821] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 653.415105][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.452256][ T821] usb 5-1: config 0 descriptor?? [ 653.593250][ T32] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 653.753200][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 653.755736][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.755765][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.755803][ T32] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 653.755836][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 653.761800][ T32] usb 3-1: config 0 descriptor?? [ 653.881882][ T821] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 653.882013][ T821] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 653.929355][ T821] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000D/input/input21 [ 653.943167][ T5757] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 654.091899][T12911] syz.4.2365 (12911): /proc/12909/oom_adj is deprecated, please use /proc/12909/oom_score_adj instead. [ 654.145851][ T5757] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.145982][ T5757] usb 4-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 654.146009][ T5757] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.199112][ T5757] usb 4-1: config 0 descriptor?? [ 654.209938][ T5757] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 654.238616][ T32] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 654.238675][ T32] ft260 0003:0403:6030.000E: unknown main item tag 0x0 [ 654.389736][ T32] ft260 0003:0403:6030.000E: chip code: 0000 0000 [ 654.496239][T12279] usb 4-1: USB disconnect, device number 47 [ 654.528159][T12932] dvmrp6: entered allmulticast mode [ 654.610489][ T32] ft260 0003:0403:6030.000E: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 654.642633][ T821] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 654.664751][ T821] usb 5-1: USB disconnect, device number 24 [ 654.694265][T12933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 654.958079][T12936] fido_id[12936]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 655.019643][ T32] ft260 0003:0403:6030.000E: failed to retrieve status: -71 [ 655.020215][ T32] ft260 0003:0403:6030.000E: failed to reset I2C controller: -71 [ 655.077597][ T32] usb 3-1: USB disconnect, device number 33 [ 655.322004][ T5754] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 655.499659][ T5754] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 655.499690][ T5754] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.499710][ T5754] usb 2-1: Product: syz [ 655.499725][ T5754] usb 2-1: Manufacturer: syz [ 655.499740][ T5754] usb 2-1: SerialNumber: syz [ 655.663186][ T821] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 655.817801][ T821] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 655.817891][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.817913][ T821] usb 4-1: Product: syz [ 655.817928][ T821] usb 4-1: Manufacturer: syz [ 655.817942][ T821] usb 4-1: SerialNumber: syz [ 655.824995][ T821] usb 4-1: config 0 descriptor?? [ 655.843338][ T5769] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 655.964957][ T5754] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 655.965017][ T5754] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 655.973237][ T5700] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 656.023200][ T5769] usb 5-1: Using ep0 maxpacket: 32 [ 656.028318][ T5769] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 656.028343][ T5769] usb 5-1: config 0 has no interface number 0 [ 656.028441][ T5769] usb 5-1: config 0 interface 12 has no altsetting 0 [ 656.059407][ T5769] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 656.059436][ T5769] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 656.059459][ T5769] usb 5-1: Product: syz [ 656.059543][ T5769] usb 5-1: Manufacturer: syz [ 656.059561][ T5769] usb 5-1: SerialNumber: syz [ 656.101639][ T5769] usb 5-1: config 0 descriptor?? [ 656.144329][ T821] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 656.162586][ T5700] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 656.162614][ T5700] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 656.166255][ T5700] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 656.166426][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 656.166465][ T5700] usb 3-1: SerialNumber: syz [ 656.414156][ T5754] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 656.414211][ T5754] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 656.437701][ T5754] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 656.457441][ T5700] usb 3-1: 0:2 : does not exist [ 656.470551][ T5754] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 656.534070][ T5700] usb 3-1: USB disconnect, device number 34 [ 656.591322][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 656.927718][T12952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 656.928619][T12952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.037220][T12957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2383'. [ 657.543623][ T5769] f81534 5-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 657.543676][ T5769] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 657.543694][ T5769] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 657.543835][ T5769] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 657.595195][ T5769] usb 5-1: USB disconnect, device number 25 [ 657.608870][T12946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.612393][T12946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.643201][ T10] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 657.676050][ T821] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 657.691760][ T821] usb 4-1: USB disconnect, device number 48 [ 657.796434][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.796492][ T10] usb 3-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 657.796583][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.801212][ T10] usb 3-1: config 0 descriptor?? [ 657.840909][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 657.999334][ T5754] usb 2-1: USB disconnect, device number 66 [ 658.023662][ T5757] usb 3-1: USB disconnect, device number 35 [ 658.333440][T12977] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2390'. [ 658.333463][T12977] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 658.713257][ T821] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 658.868147][ T821] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 658.868176][ T821] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 658.870264][ T821] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 658.870297][ T821] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 658.870384][ T821] usb 5-1: SerialNumber: syz [ 658.973290][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 658.983156][ T5757] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 659.135892][ T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 659.135927][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.135950][ T10] usb 2-1: Product: syz [ 659.135967][ T10] usb 2-1: Manufacturer: syz [ 659.135983][ T10] usb 2-1: SerialNumber: syz [ 659.138313][ T821] usb 5-1: 0:2 : does not exist [ 659.138367][ T821] usb 5-1: unit 5 not found! [ 659.152848][ T5757] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 659.152878][ T5757] usb 3-1: config 0 has an invalid descriptor of length 48, skipping remainder of the config [ 659.152901][ T5757] usb 3-1: config 0 has no interface number 0 [ 659.162778][ T5757] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 659.162810][ T5757] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.162832][ T5757] usb 3-1: Product: syz [ 659.162849][ T5757] usb 3-1: Manufacturer: syz [ 659.162865][ T5757] usb 3-1: SerialNumber: syz [ 659.252439][ T5757] usb 3-1: config 0 descriptor?? [ 659.322874][ T821] usb 5-1: USB disconnect, device number 26 [ 659.492044][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 659.662777][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 659.662855][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 659.690970][ T5757] uvcvideo 3-1:0.64: Found UVC 0.00 device syz (046d:0823) [ 659.691001][ T5757] uvcvideo 3-1:0.64: No valid video chain found. [ 659.720742][ T5757] usb 3-1: USB disconnect, device number 36 [ 659.863188][ T821] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 660.013229][ T821] usb 4-1: Using ep0 maxpacket: 32 [ 660.016867][ T821] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 660.016894][ T821] usb 4-1: config 0 has no interface number 0 [ 660.017018][ T821] usb 4-1: config 0 interface 12 has no altsetting 0 [ 660.021046][ T821] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 660.021073][ T821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.021094][ T821] usb 4-1: Product: syz [ 660.021177][ T821] usb 4-1: Manufacturer: syz [ 660.021194][ T821] usb 4-1: SerialNumber: syz [ 660.094308][ T821] usb 4-1: config 0 descriptor?? [ 660.129525][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 660.129580][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 660.157480][ T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 660.177613][ T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 660.733192][ T5757] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 660.886655][ T5757] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.886710][ T5757] usb 3-1: New USB device found, idVendor=056a, idProduct=00ec, bcdDevice= 0.00 [ 660.886734][ T5757] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.894048][ T5757] usb 3-1: config 0 descriptor?? [ 660.941016][T12995] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 660.954405][T12995] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 660.978484][ T5757] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 661.013194][ T5685] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 661.140730][ T5757] usb 3-1: USB disconnect, device number 37 [ 661.163618][ T5685] usb 5-1: Using ep0 maxpacket: 32 [ 661.173600][ T5685] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 661.173628][ T5685] usb 5-1: config 0 has no interface number 0 [ 661.173757][ T5685] usb 5-1: config 0 interface 12 has no altsetting 0 [ 661.213902][ T5685] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 661.213935][ T5685] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.213956][ T5685] usb 5-1: Product: syz [ 661.213971][ T5685] usb 5-1: Manufacturer: syz [ 661.213986][ T5685] usb 5-1: SerialNumber: syz [ 661.227084][ T5685] usb 5-1: config 0 descriptor?? [ 661.604651][ T821] f81534 4-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71 [ 661.604706][ T821] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 661.604724][ T821] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 661.605045][ T821] f81534 4-1:0.12: probe with driver f81534 failed with error -71 [ 661.647497][ T821] usb 4-1: USB disconnect, device number 49 [ 661.726555][ T5769] usb 2-1: USB disconnect, device number 67 [ 662.268869][T13034] FAULT_INJECTION: forcing a failure. [ 662.268869][T13034] name failslab, interval 1, probability 0, space 0, times 0 [ 662.269011][T13034] CPU: 1 UID: 0 PID: 13034 Comm: syz.3.2412 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 662.269044][T13034] Tainted: [L]=SOFTLOCKUP [ 662.269054][T13034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 662.269069][T13034] Call Trace: [ 662.269088][T13034] [ 662.269098][T13034] dump_stack_lvl+0xe8/0x150 [ 662.269132][T13034] should_fail_ex+0x46b/0x600 [ 662.269179][T13034] should_failslab+0xa8/0x100 [ 662.269210][T13034] __kmalloc_cache_noprof+0x84/0x690 [ 662.269240][T13034] ? vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 662.269272][T13034] vkms_atomic_crtc_duplicate_state+0x78/0x190 [ 662.269299][T13034] drm_atomic_get_crtc_state+0x1e5/0x680 [ 662.269337][T13034] ? drm_property_change_valid_get+0x243/0x700 [ 662.269374][T13034] drm_atomic_set_property+0x16b/0x3b60 [ 662.269403][T13034] ? rt_mutex_slowunlock+0x1cb/0x300 [ 662.269426][T13034] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 662.269453][T13034] ? __pfx_drm_atomic_set_property+0x10/0x10 [ 662.269482][T13034] ? __might_fault+0xaf/0x130 [ 662.269532][T13034] drm_mode_atomic_ioctl+0x7be/0xdd0 [ 662.269576][T13034] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 662.269622][T13034] ? rt_spin_unlock+0x14f/0x200 [ 662.269649][T13034] ? rt_spin_unlock+0x160/0x200 [ 662.269675][T13034] ? drm_is_current_master+0x1a2/0x210 [ 662.269706][T13034] drm_ioctl_kernel+0x2e2/0x3b0 [ 662.269732][T13034] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 662.269759][T13034] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 662.269791][T13034] drm_ioctl+0x6c0/0xb80 [ 662.269817][T13034] ? __pfx_drm_mode_atomic_ioctl+0x10/0x10 [ 662.269849][T13034] ? __pfx_drm_ioctl+0x10/0x10 [ 662.269884][T13034] ? __fget_files+0x2a/0x420 [ 662.269911][T13034] ? bpf_lsm_file_ioctl+0x9/0x20 [ 662.269945][T13034] ? __pfx_drm_ioctl+0x10/0x10 [ 662.269966][T13034] __se_sys_ioctl+0xff/0x170 [ 662.269996][T13034] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.270021][T13034] do_syscall_64+0x15f/0xf80 [ 662.270050][T13034] ? clear_bhb_loop+0x40/0x90 [ 662.270084][T13034] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.270107][T13034] RIP: 0033:0x7f5123b5cdd9 [ 662.270127][T13034] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 662.270146][T13034] RSP: 002b:00007f5121dae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 662.270170][T13034] RAX: ffffffffffffffda RBX: 00007f5123dd5fa0 RCX: 00007f5123b5cdd9 [ 662.270187][T13034] RDX: 0000200000000200 RSI: 00000000c03864bc RDI: 0000000000000003 [ 662.270201][T13034] RBP: 00007f5121dae090 R08: 0000000000000000 R09: 0000000000000000 [ 662.270215][T13034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 662.270229][T13034] R13: 00007f5123dd6038 R14: 00007f5123dd5fa0 R15: 00007ffd825b59d8 [ 662.270273][T13034] [ 662.580864][ T5685] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 662.580915][ T5685] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 662.580933][ T5685] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 662.581025][ T5685] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 662.639440][ T5685] usb 5-1: USB disconnect, device number 27 [ 662.650862][T11975] ================================================================== [ 662.650876][T11975] BUG: KASAN: slab-use-after-free in _raw_spin_lock_irqsave+0x40/0x60 [ 662.650909][T11975] Read of size 1 at addr ffff888033cc6b20 by task syz-executor/11975 [ 662.650927][T11975] [ 662.650941][T11975] CPU: 0 UID: 0 PID: 11975 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 662.650970][T11975] Tainted: [L]=SOFTLOCKUP [ 662.650978][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 662.650990][T11975] Call Trace: [ 662.650998][T11975] [ 662.651007][T11975] dump_stack_lvl+0xe8/0x150 [ 662.651033][T11975] print_address_description+0x55/0x1e0 [ 662.651061][T11975] ? _raw_spin_lock_irqsave+0x40/0x60 [ 662.651085][T11975] print_report+0x58/0x70 [ 662.651109][T11975] kasan_report+0x117/0x150 [ 662.651136][T11975] ? _raw_spin_lock_irqsave+0x40/0x60 [ 662.651164][T11975] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 662.651183][T11975] __kasan_check_byte+0x2a/0x40 [ 662.651207][T11975] lock_acquire+0x84/0x350 [ 662.651235][T11975] ? preempt_schedule_common+0x82/0xd0 [ 662.651260][T11975] ? preempt_schedule_thunk+0x16/0x30 [ 662.651280][T11975] ? rcu_is_watching+0x15/0xb0 [ 662.651301][T11975] _raw_spin_lock_irqsave+0x40/0x60 [ 662.651325][T11975] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 662.651346][T11975] rt_mutex_slowunlock+0xbf/0x8b0 [ 662.651369][T11975] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 662.651392][T11975] ? __rcu_read_unlock+0x83/0xe0 [ 662.651418][T11975] ? rt_spin_unlock+0x160/0x200 [ 662.651440][T11975] shrink_dentry_list+0x2e3/0x5e0 [ 662.651465][T11975] shrink_dcache_tree+0xe9/0x5d0 [ 662.651491][T11975] ? __pfx_select_collect+0x10/0x10 [ 662.651521][T11975] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 662.651545][T11975] ? reacquire_held_locks+0x104/0x190 [ 662.651566][T11975] ? rt_spin_lock+0x1e0/0x400 [ 662.651587][T11975] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 662.651608][T11975] ? rt_spin_unlock+0x14f/0x200 [ 662.651631][T11975] ? rt_spin_unlock+0x160/0x200 [ 662.651652][T11975] d_invalidate+0xde/0x210 [ 662.651675][T11975] ? __pfx_d_invalidate+0x10/0x10 [ 662.651716][T11975] ? rt_spin_unlock+0x160/0x200 [ 662.651741][T11975] proc_invalidate_siblings_dcache+0x3d3/0x6c0 [ 662.651769][T11975] ? proc_invalidate_siblings_dcache+0x2b/0x6c0 [ 662.651807][T11975] release_task+0x1207/0x16f0 [ 662.651846][T11975] ? wait_consider_task+0x1966/0x2e30 [ 662.651872][T11975] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 662.651895][T11975] ? __pfx_release_task+0x10/0x10 [ 662.651930][T11975] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 662.651958][T11975] ? rt_spin_unlock+0x160/0x200 [ 662.651982][T11975] wait_consider_task+0x1966/0x2e30 [ 662.652015][T11975] ? __do_wait+0x155/0x740 [ 662.652050][T11975] ? __pfx_wait_consider_task+0x10/0x10 [ 662.652078][T11975] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 662.652103][T11975] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 662.652129][T11975] __do_wait+0x155/0x740 [ 662.652163][T11975] ? rt_spin_unlock+0x160/0x200 [ 662.652186][T11975] do_wait+0x1e7/0x510 [ 662.652207][T11975] ? do_wait+0x17d/0x510 [ 662.652229][T11975] kernel_wait4+0x232/0x2b0 [ 662.652250][T11975] ? count_memcg_event_mm+0x21/0x260 [ 662.652276][T11975] ? __pfx_kernel_wait4+0x10/0x10 [ 662.652300][T11975] ? __pfx_child_wait_callback+0x10/0x10 [ 662.652324][T11975] ? handle_mm_fault+0xed/0x14c0 [ 662.652355][T11975] __x64_sys_wait4+0x166/0x240 [ 662.652379][T11975] ? __pfx___x64_sys_wait4+0x10/0x10 [ 662.652410][T11975] ? do_user_addr_fault+0xc6f/0x1340 [ 662.652443][T11975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.652467][T11975] do_syscall_64+0x15f/0xf80 [ 662.652495][T11975] ? trace_irq_disable+0x3b/0x140 [ 662.652524][T11975] ? clear_bhb_loop+0x40/0x90 [ 662.652550][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.652573][T11975] RIP: 0033:0x7f5123b1d60e [ 662.652593][T11975] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 662.652613][T11975] RSP: 002b:00007ffd825b5cd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 662.652637][T11975] RAX: ffffffffffffffda RBX: 0000555575502500 RCX: 00007f5123b1d60e [ 662.652655][T11975] RDX: 0000000040000001 RSI: 00007ffd825b5d7c RDI: ffffffffffffffff [ 662.652671][T11975] RBP: 00007ffd825b5d7c R08: 0000000000000000 R09: 0000000000000000 [ 662.652686][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 662.652700][T11975] R13: 00000000000927c0 R14: 00000000000a194d R15: 00007ffd825b5dd0 [ 662.652725][T11975] [ 662.652734][T11975] [ 662.652740][T11975] Allocated by task 13034: [ 662.652751][T11975] kasan_save_track+0x3e/0x80 [ 662.652774][T11975] __kasan_slab_alloc+0x6c/0x80 [ 662.652803][T11975] kmem_cache_alloc_lru_noprof+0x33c/0x680 [ 662.652850][T11975] __d_alloc+0x37/0x6f0 [ 662.652870][T11975] d_alloc_parallel+0xe6/0x1610 [ 662.652912][T11975] __lookup_slow+0x152/0x440 [ 662.652930][T11975] lookup_slow+0x53/0x70 [ 662.652947][T11975] link_path_walk+0x1273/0x18d0 [ 662.652965][T11975] path_openat+0x2d5/0x38a0 [ 662.652985][T11975] do_file_open+0x23e/0x4a0 [ 662.653006][T11975] do_sys_openat2+0x113/0x200 [ 662.653023][T11975] __x64_sys_openat+0x138/0x170 [ 662.653039][T11975] do_syscall_64+0x15f/0xf80 [ 662.653060][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.653078][T11975] [ 662.653083][T11975] Freed by task 21: [ 662.653091][T11975] kasan_save_track+0x3e/0x80 [ 662.653108][T11975] kasan_save_free_info+0x46/0x50 [ 662.653135][T11975] __kasan_slab_free+0x5c/0x80 [ 662.653154][T11975] kmem_cache_free+0x187/0x6c0 [ 662.653176][T11975] rcu_cpu_kthread+0x99e/0x1470 [ 662.653202][T11975] smpboot_thread_fn+0x541/0xa50 [ 662.653224][T11975] kthread+0x388/0x470 [ 662.653250][T11975] ret_from_fork+0x514/0xb70 [ 662.653271][T11975] ret_from_fork_asm+0x1a/0x30 [ 662.653295][T11975] [ 662.653301][T11975] Last potentially related work creation: [ 662.653307][T11975] kasan_save_stack+0x3e/0x60 [ 662.653326][T11975] kasan_record_aux_stack+0xbd/0xd0 [ 662.653351][T11975] call_rcu+0xee/0x890 [ 662.653368][T11975] __dentry_kill+0x4a9/0x690 [ 662.653392][T11975] finish_dput+0xc9/0x480 [ 662.653408][T11975] proc_invalidate_siblings_dcache+0x3db/0x6c0 [ 662.653430][T11975] release_task+0x1207/0x16f0 [ 662.653455][T11975] do_exit+0x1674/0x22c0 [ 662.653480][T11975] do_group_exit+0x21b/0x2d0 [ 662.653506][T11975] get_signal+0x1284/0x1330 [ 662.653526][T11975] arch_do_signal_or_restart+0xbc/0x830 [ 662.653545][T11975] exit_to_user_mode_loop+0x86/0x480 [ 662.653569][T11975] do_syscall_64+0x33e/0xf80 [ 662.653590][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.653608][T11975] [ 662.653613][T11975] The buggy address belongs to the object at ffff888033cc6a50 [ 662.653613][T11975] which belongs to the cache dentry of size 376 [ 662.653630][T11975] The buggy address is located 208 bytes inside of [ 662.653630][T11975] freed 376-byte region [ffff888033cc6a50, ffff888033cc6bc8) [ 662.653649][T11975] [ 662.653654][T11975] The buggy address belongs to the physical page: [ 662.653674][T11975] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x33cc6 [ 662.653692][T11975] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 662.653707][T11975] memcg:ffff888033cc7ef1 [ 662.653715][T11975] flags: 0x80000000000040(head|node=0|zone=1) [ 662.653736][T11975] page_type: f5(slab) [ 662.653753][T11975] raw: 0080000000000040 ffff88801bec63c0 dead000000000100 dead000000000122 [ 662.653770][T11975] raw: 0000000000000000 0000000800120012 00000000f5000000 ffff888033cc7ef1 [ 662.653787][T11975] head: 0080000000000040 ffff88801bec63c0 dead000000000100 dead000000000122 [ 662.653810][T11975] head: 0000000000000000 0000000800120012 00000000f5000000 ffff888033cc7ef1 [ 662.653828][T11975] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 662.653844][T11975] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002 [ 662.653855][T11975] page dumped because: kasan: bad access detected [ 662.653871][T11975] page_owner tracks the page as allocated [ 662.653879][T11975] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4975, tgid 4975 (udevd), ts 123225684804, free_ts 35307299104 [ 662.653912][T11975] post_alloc_hook+0x1f9/0x250 [ 662.653933][T11975] get_page_from_freelist+0x27d6/0x2850 [ 662.653957][T11975] __alloc_frozen_pages_noprof+0x18d/0x380 [ 662.653980][T11975] allocate_slab+0x74/0x5e0 [ 662.654005][T11975] refill_objects+0x33c/0x3d0 [ 662.654028][T11975] __pcs_replace_empty_main+0x373/0x720 [ 662.654044][T11975] kmem_cache_alloc_lru_noprof+0x433/0x680 [ 662.654064][T11975] __d_alloc+0x37/0x6f0 [ 662.654081][T11975] d_alloc_parallel+0xe6/0x1610 [ 662.654101][T11975] __lookup_slow+0x152/0x440 [ 662.654118][T11975] lookup_slow+0x53/0x70 [ 662.654135][T11975] path_lookupat+0x3f5/0x8c0 [ 662.654151][T11975] filename_lookup+0x256/0x5d0 [ 662.654166][T11975] do_readlinkat+0xe3/0x510 [ 662.654183][T11975] __x64_sys_readlink+0x7f/0x90 [ 662.654198][T11975] do_syscall_64+0x15f/0xf80 [ 662.654219][T11975] page last free pid 4989 tgid 4989 stack trace: [ 662.654230][T11975] __free_frozen_pages+0x1075/0x11b0 [ 662.654251][T11975] __slab_free+0x252/0x2a0 [ 662.654272][T11975] qlist_free_all+0x99/0x100 [ 662.654291][T11975] kasan_quarantine_reduce+0x148/0x160 [ 662.654310][T11975] __kasan_slab_alloc+0x22/0x80 [ 662.654329][T11975] kmem_cache_alloc_noprof+0x33b/0x680 [ 662.654349][T11975] do_getname+0x2e/0x250 [ 662.654373][T11975] vfs_fstatat+0x45/0x170 [ 662.654400][T11975] __x64_sys_newfstatat+0x151/0x200 [ 662.654416][T11975] do_syscall_64+0x15f/0xf80 [ 662.654438][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.654455][T11975] [ 662.654460][T11975] Memory state around the buggy address: [ 662.654470][T11975] ffff888033cc6a00: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb [ 662.654484][T11975] ffff888033cc6a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 662.654497][T11975] >ffff888033cc6b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 662.654507][T11975] ^ [ 662.654517][T11975] ffff888033cc6b80: fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc [ 662.654529][T11975] ffff888033cc6c00: fc fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 662.654543][T11975] ================================================================== [ 662.654561][T11975] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 662.654579][T11975] CPU: 0 UID: 0 PID: 11975 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 662.654604][T11975] Tainted: [L]=SOFTLOCKUP [ 662.654612][T11975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 662.654623][T11975] Call Trace: [ 662.654631][T11975] [ 662.654639][T11975] vpanic+0x56c/0xa60 [ 662.654668][T11975] ? __pfx_vpanic+0x10/0x10 [ 662.654699][T11975] panic+0xc5/0xd0 [ 662.654724][T11975] ? __pfx_panic+0x10/0x10 [ 662.654752][T11975] ? _raw_spin_lock_irqsave+0x40/0x60 [ 662.654775][T11975] ? rcu_is_watching+0x15/0xb0 [ 662.654794][T11975] ? _raw_spin_lock_irqsave+0x40/0x60 [ 662.654823][T11975] ? _raw_spin_lock_irqsave+0x40/0x60 [ 662.654847][T11975] check_panic_on_warn+0x89/0xb0 [ 662.654876][T11975] ? _raw_spin_lock_irqsave+0x40/0x60 [ 662.654898][T11975] end_report+0x73/0x170 [ 662.654921][T11975] ? _raw_spin_lock_irqsave+0x40/0x60 [ 662.654961][T11975] kasan_report+0x128/0x150 [ 662.654988][T11975] ? _raw_spin_lock_irqsave+0x40/0x60 [ 662.655016][T11975] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 662.655035][T11975] __kasan_check_byte+0x2a/0x40 [ 662.655059][T11975] lock_acquire+0x84/0x350 [ 662.655087][T11975] ? preempt_schedule_common+0x82/0xd0 [ 662.655112][T11975] ? preempt_schedule_thunk+0x16/0x30 [ 662.655151][T11975] ? rcu_is_watching+0x15/0xb0 [ 662.655173][T11975] _raw_spin_lock_irqsave+0x40/0x60 [ 662.655200][T11975] ? rt_mutex_slowunlock+0xbf/0x8b0 [ 662.655223][T11975] rt_mutex_slowunlock+0xbf/0x8b0 [ 662.655249][T11975] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 662.655273][T11975] ? __rcu_read_unlock+0x83/0xe0 [ 662.655301][T11975] ? rt_spin_unlock+0x160/0x200 [ 662.655323][T11975] shrink_dentry_list+0x2e3/0x5e0 [ 662.655351][T11975] shrink_dcache_tree+0xe9/0x5d0 [ 662.655378][T11975] ? __pfx_select_collect+0x10/0x10 [ 662.655407][T11975] ? __pfx_shrink_dcache_tree+0x10/0x10 [ 662.655433][T11975] ? reacquire_held_locks+0x104/0x190 [ 662.655455][T11975] ? rt_spin_lock+0x1e0/0x400 [ 662.655477][T11975] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 662.655500][T11975] ? rt_spin_unlock+0x14f/0x200 [ 662.655524][T11975] ? rt_spin_unlock+0x160/0x200 [ 662.655545][T11975] d_invalidate+0xde/0x210 [ 662.655570][T11975] ? __pfx_d_invalidate+0x10/0x10 [ 662.655596][T11975] ? rt_spin_unlock+0x160/0x200 [ 662.655639][T11975] proc_invalidate_siblings_dcache+0x3d3/0x6c0 [ 662.655666][T11975] ? proc_invalidate_siblings_dcache+0x2b/0x6c0 [ 662.655712][T11975] release_task+0x1207/0x16f0 [ 662.655747][T11975] ? wait_consider_task+0x1966/0x2e30 [ 662.655772][T11975] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 662.655794][T11975] ? __pfx_release_task+0x10/0x10 [ 662.655835][T11975] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 662.655863][T11975] ? rt_spin_unlock+0x160/0x200 [ 662.655886][T11975] wait_consider_task+0x1966/0x2e30 [ 662.655919][T11975] ? __do_wait+0x155/0x740 [ 662.655944][T11975] ? __pfx_wait_consider_task+0x10/0x10 [ 662.655959][T11975] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 662.655977][T11975] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 662.655995][T11975] __do_wait+0x155/0x740 [ 662.656019][T11975] ? rt_spin_unlock+0x160/0x200 [ 662.656035][T11975] do_wait+0x1e7/0x510 [ 662.656051][T11975] ? do_wait+0x17d/0x510 [ 662.656091][T11975] kernel_wait4+0x232/0x2b0 [ 662.656111][T11975] ? count_memcg_event_mm+0x21/0x260 [ 662.656138][T11975] ? __pfx_kernel_wait4+0x10/0x10 [ 662.656154][T11975] ? __pfx_child_wait_callback+0x10/0x10 [ 662.656172][T11975] ? handle_mm_fault+0xed/0x14c0 [ 662.656193][T11975] __x64_sys_wait4+0x166/0x240 [ 662.656210][T11975] ? __pfx___x64_sys_wait4+0x10/0x10 [ 662.656232][T11975] ? do_user_addr_fault+0xc6f/0x1340 [ 662.656254][T11975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.656271][T11975] do_syscall_64+0x15f/0xf80 [ 662.656291][T11975] ? trace_irq_disable+0x3b/0x140 [ 662.656312][T11975] ? clear_bhb_loop+0x40/0x90 [ 662.656330][T11975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 662.656346][T11975] RIP: 0033:0x7f5123b1d60e [ 662.656360][T11975] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 662.656374][T11975] RSP: 002b:00007ffd825b5cd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003d [ 662.656391][T11975] RAX: ffffffffffffffda RBX: 0000555575502500 RCX: 00007f5123b1d60e [ 662.656403][T11975] RDX: 0000000040000001 RSI: 00007ffd825b5d7c RDI: ffffffffffffffff [ 662.656415][T11975] RBP: 00007ffd825b5d7c R08: 0000000000000000 R09: 0000000000000000 [ 662.656426][T11975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000001388 [ 662.656436][T11975] R13: 00000000000927c0 R14: 00000000000a194d R15: 00007ffd825b5dd0 [ 662.656454][T11975] [ 662.657166][T11975] Kernel Offset: disabled