last executing test programs: 23.940340314s ago: executing program 2 (id=545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}, 0x1, 0x0, 0xffffffef}, 0x0) 23.786720922s ago: executing program 2 (id=547): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) 23.534676334s ago: executing program 2 (id=550): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d000000a1ffffff08000f0001000000", 0x24) 23.445411794s ago: executing program 2 (id=552): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1bf) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x0, &(0x7f00000000c0)={{r1, r2/1000+60000}, {0x0, 0x2710}}, &(0x7f0000000180)) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 23.311816453s ago: executing program 2 (id=553): r0 = fsopen(&(0x7f0000000040)='ntfs\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x2, &(0x7f00000000c0)='/dev/btrfs-control\x00', &(0x7f00000001c0)="e601f7bb57265a586ff6f41673b90910a41754d47a1cbe4765d40663fab5109a9dad2124ac550e1a1dc677abdcc0919a6003056891f0d67a4cedfbe5bad26266ed0e55077bf6c9842a4ba89459386979588f1da9545ba82ab991d4ffd4578890bc7079f637cc05552c2c0c5d6a8cf91f13072fd404050f8d80917709505c6f203b23a6a250393170a64d03a1af767ce7664ad3ecaa6380c9f43ad1c9ae4fcae175ccdfe2d150c46b5710b684d27be35929f50465d3537d64793a1ac441dbe13ce4d7b347aac631dcfc730809ece4d6472e93f232f8c52421fc5e80db3590e5610d19", 0xe2) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mount$bind(&(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', &(0x7f00000004c0), 0x201c10, 0x0) (async) write(r1, &(0x7f0000000000)='3', 0x4e) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000d0601010000000a0000000000000004050005004b092026"], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x0) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000020c0)='/proc/bus/input/devices\x00', 0x0, 0x0) poll(&(0x7f0000002140)=[{r2, 0x200}], 0x1, 0x0) (async) setns(0xc9, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x103000, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x50009405, &(0x7f0000000140)) (async, rerun: 32) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="340000001000010000000000fedbdf25070000001300000008000000", @ANYRES64=0x0, @ANYBLOB="14003a32c909a3ed9e59aa000000000000000001"], 0x34}], 0x1}, 0x0) (rerun: 32) 22.996710965s ago: executing program 2 (id=555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}, 0x1, 0x0, 0xfffffff0}, 0x0) 21.883822244s ago: executing program 1 (id=559): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) 21.663983586s ago: executing program 1 (id=561): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1bf) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0) preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) setitimer(0x0, &(0x7f00000000c0)={{r1, r2/1000+60000}, {0x0, 0x2710}}, &(0x7f0000000180)) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r3, &(0x7f0000000000)='3', 0x4e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 21.297078877s ago: executing program 1 (id=564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$SNDCTL_SYNTH_INFO(r4, 0xc08c5102, &(0x7f0000000280)={"94fb0f334ab3b984c9c2f6366b4076fdfd53456b866d38d1affd3baa3872", 0x401, 0x0, 0x1, 0x88d8, 0x8, 0x101, 0x7, 0x6, [0x4, 0x9, 0x2, 0x9, 0x4, 0x7, 0xd7de, 0x8, 0x7, 0x2086141a, 0x2, 0x2, 0x6, 0x800, 0x7, 0x81, 0x10000, 0x9, 0x3]}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000003bfba88e41817f8774b0e83a5233a36c218d67d4453c4fb754cf7bc1ee99a651f4b88aeb5d19b4e57025bd88d24838fc6245b4ec2f9ed603b493a2a8c728b5960c69fceb1a2293c3e06bd61a64bc3882c0c82a22770500518ef0c8474ccd0534319cf9718bd64f6df95bd18e48c5995f636cc0057817623aa78a41959d13846a20280539b1e05a9ba2f3fd290ffee87c9a25009e98e27a5e42bea31a96f12cbb76adb79a8b47daed7accfdedc1b5e9444af5718820c3f4b41c9403b2aab3d0be41df5dcb80", @ANYRES16=r2, @ANYBLOB="cf042bbd7000fedbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0c009900050000001c0000000a000600080211000001000005007400000000000600ed00fe050000"], 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r9 = syz_open_dev$swradio(&(0x7f0000000100), 0x1, 0x2) ioctl$VIDIOC_ENUM_FREQ_BANDS(r9, 0xc0405665, &(0x7f0000000080)={0x1, 0x4, 0xffff, 0xdff2f6991cc06f9f, 0x0, 0x64c, 0xa}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r10 = socket$netlink(0x10, 0x3, 0xc) r11 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080), 0x15b400, 0x0) ioctl$VHOST_VDPA_SET_STATUS(r11, 0x4001af72, &(0x7f00000000c0)=0x7) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000000010"], 0x128}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 21.127932263s ago: executing program 1 (id=566): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x2, &(0x7f0000000240)=0x1000, 0x4) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000540)) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="e000000010000996f60b317abc7b610ce9eb4f3c63f1746349793cbddedd5b18e28587cad225cf0707f45c8285eb525444ba5e565cf3e740d6b78089de494d44b29c0d4aea234a14282b99672197d057"], 0xe0}], 0x1}, 0x0) 20.985299127s ago: executing program 1 (id=567): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48}) r2 = syz_clone(0x8082200, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[]) r3 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9}, 0x2}], 0x1, 0x40, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e21, 0x590, @rand_addr, 0x10003}, 0x1c) close(r3) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1) ptrace(0x10, r2) r5 = socket(0x2, 0x80805, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000000c0)=0x2009, 0x4) sendmmsg$inet(r6, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) write(r7, 0x0, 0x0) sendmmsg$inet(r3, &(0x7f0000002700)=[{{&(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000740)=[{&(0x7f0000000700)}, {&(0x7f0000001580)="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", 0x1000}, {&(0x7f0000000540)="77ad4928cac1aac46790235b32990e4874db358b2493923e8e506a462c42e562d63682aa6f47b10fbd358dc3174ca4c5e6f6dfcbdfafd2a2bf6dca52c390afe2487b82fddb3580e4f4a1a6759f57462228a9945d9a77552835579eb6054952e2dd47774b42379afda228a246d00db189ad87d23374f8ab55014ddc96e54caf6caef1cc116e8e8677ec7c784c2a7bce3fd95a56dfeecf9a88e4a1145a7c593051773ad135c871621233bd5c418143f0dae8dcb0fe17e2ef08c15b5cf66f056b969ae59f16db4da46283dc047babebdca43efa2e5eef4176", 0xd7}, {&(0x7f0000000640)="20af34bf75f342c6ad6a842f9a6e3895e1c91fb2098137cde324e6379d6f85b30984e5ffd7782461b34e535e6f8312cbb239be290bad5a377989b36064e9879b3a31d348a44093ecf528ff461b14cc5a4e24fa613a9796de8a30a1e4ff8fdc649085ab3c5b70ed2afe049876259ded7cd553832477a46d882c7a1a6cfcf3e6527d822f5b6ac09d31f0b2691c88637cd12491d5d20f313ef7c88856f8cff0cd18ac3e8a14215be9b985aade8180745b45210d39e35c", 0xb5}, {&(0x7f0000000840)="3771bbcb294dcf4b5a3b484448cef5f32f05ecd1c890e0f72cdd90fc08a015b11c626695816449eb0a9293eb7d9b191c7ddfb3c11621c4ed9657461484d4abb73974446824a553f9cc15eb54b53599d4b3cc9461671b09132d252566adbce5144f50ee50451867b60e55fed9f0cbd8368a28397c4e7ddf909bb7d8b384de241561cb0f37ea98d27cc51a3cf1781d5439abff6d41a5adbf199374eb19e648a44146d52b4ba9fbadc49cf8e3d9090973cb13043b6f2b5bddc0b87d81d1c92548ad9265a8f1e10cfcef51b7b0f63bc53163840aadaf1c3ea4de9bd2bd1545fc5b17b3e71750d3bb35e668c0a2", 0xeb}, {&(0x7f0000000740)}, {&(0x7f0000000300)="74e1333023e0e6ec232320c14252e993a1feba2c7c84634d6ed7bd3525c268662cca9589169eeaca87a28ae05d3862b9011acc515b89850cdc25db6faec04eb58480eb43dec1e2e8c307f7e6855c0e2031c883fc6bbefc8baaf54143bdc1920e7e2383bfcc3f8b96a23ec333aa0d78160a324a771af3732188818dccfeb9b434f8b1330853adf675b8decca75af7e7240ecc28440725cc9776cb4bbd68893060e6f48b3fb0f81d90c673015edbdcbabb12797a09461e0c81110d549cccf31fccc6df5b1a80100bb69756cf75849b434313a960", 0xd3}, {&(0x7f0000000440)="ab0c87c80643d431a3fd108a40b4505def9b4565c0843e52dd23547d1a62eeee69df2659a7204abd6d1387c7da66562ad2d8a34f092ea93840e306fa30aab63a7e83362c751e586420b1be8100bd61746ef95d13d6f06863a8f9671c28d7f1255746575ea64edf41b7e6499d39e25eb84238b579e017586f7bf8b4ac8c1d31f6cce5a0991aa38672ca97e0b923927700368bc6a6deb94385b0daa87018bf0577ee6af4d4c277d20674d9767552e0fe23bd485d263209d1fc85004b8a0462044fd9688ecc8428d7dea5afa164479057d3c48dd187f4782b1b", 0xd8}, {&(0x7f0000000700)="6e19c8cb2431332e24fb2060dc9d4ebada83c615e1b0d0", 0x17}], 0x9, &(0x7f0000000940)=[@ip_retopts={{0x34, 0x0, 0x7, {[@generic={0x44, 0xc, "88c1d557dd0ec68f95ec"}, @timestamp_addr={0x44, 0x14, 0x6f, 0x1, 0x1, [{@loopback, 0xfff}, {@multicast2, 0x5e}]}, @noop]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x3c, 0x0, 0x7, {[@generic={0x83, 0x8, "657c3456dde1"}, @timestamp={0x44, 0x1c, 0xc, 0x0, 0x9, [0x0, 0x8, 0x1, 0x1ff, 0x7, 0x1]}, @ssrr={0x89, 0x7, 0x53, [@loopback]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @initdev={0xac, 0x1e, 0x2f, 0x0}, @private=0xa010101}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xb}}], 0xf8}}], 0x1, 0x0) r8 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r9, 0x0, 0x7fffffff}, 0xc) syz_open_procfs(0x0, &(0x7f0000000000)='task\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x40001, 0x110) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000000080)={0xfffc, 0xfffb, 0x1, 0x80, 0x63, 0x2, 0x333}, 0xc) ptrace$PTRACE_GETSIGMASK(0x420a, r2, 0x8, &(0x7f0000000040)) 20.408667511s ago: executing program 1 (id=568): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000000010104ffffff840000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) 7.554131357s ago: executing program 32 (id=555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000e80)=ANY=[@ANYBLOB="60000000020605000000001e00000000000000000900020073797a3200000000050004000000000005000100060000001400078008000640002000000800134000000000050005000a00000012000300686173683a6e6574"], 0x60}, 0x1, 0x0, 0xfffffff0}, 0x0) 7.539211847s ago: executing program 3 (id=579): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b0400000000000000000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000160500030000000000200001800700010063740000140002800800024000000003080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x24) 7.310429943s ago: executing program 3 (id=580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x46c}}, 0x0) 7.028052418s ago: executing program 3 (id=581): rt_sigqueueinfo(0x0, 0x21, &(0x7f00000007c0)={0x0, 0xfffffffa}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000440)={'vcan0\x00', 0xcd}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) 6.758867256s ago: executing program 3 (id=582): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000007000f0001000000", 0x24) 6.575404521s ago: executing program 3 (id=583): r0 = fsopen(&(0x7f0000000400)='cgroup2\x00', 0x1) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000740)={r4, @in6={{0xa, 0x4e22, 0x85, @local, 0x40}}}, &(0x7f0000000040)=0x84) r5 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r5, &(0x7f00000001c0)={0x14, &(0x7f0000000040)={0x60, 0x11, 0x91, {0x91, 0xa, "78e04db4e9647d18891a7051e72996c4335282e7c1b2c5491181a18e9913d66b6dba0b99a1c55b5349c4c5c301b73831742de5b86c276cc74ac583c720e4e147c2021a0d953e74dec44f7f07519e92d04cdcda4e3609e2dc75b76b76b3faec85651635e8892e72e44127fbf2955c5a4c11d34e5be6081cde13c922c1e49d5514657ce484b7d24ccebdf8bafe1666eb"}}, &(0x7f0000000100)=ANY=[@ANYBLOB="0003b7000000b703677e0334eb1edac71a0adee81fd91770e977657cfc06ae1e2b819fe81c5f44f68321dbd5ee63127aae62f100e36d7f76b45626f92e4fe0ae04b2db79c2f89a1cd10ae18e8474d36e6a2db13888d2dd2bca2377139419cdc0c124e1f9ec54e4fc097b761fb681478e230807bf5e9676f97cd43db4fccbf23c2967dc6aed76b63fe75d5ad2d7f4845e0a3a28356f7d3c566ce2cb2b775ac9f90d28991e9a3881785e83349a7164903a041e2ccef5239aef120b78fd80"]}, &(0x7f00000003c0)={0x34, &(0x7f0000000200)={0x0, 0x16, 0x1c, "ec9939b56680c21a93fd1a2277a24dcf31f8628c56991d8154d292db"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000300)={0xc0, 0xa1, 0x4, 0x7}, &(0x7f0000000340)={0x40, 0xa0, 0x4, 0x3a00f3e5}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "53b232cdf22d004610f375336f64d4f3d4ba83388d176dcb3240425e8f62238f07876b037f9f21f5904b64f548865c"}}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) 4.901326498s ago: executing program 33 (id=568): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000000010104ffffff840000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) 4.859442996s ago: executing program 3 (id=586): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r1, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20b52c020000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETGAMMA(r2, 0xc02064a4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002740)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x21c8, 0xc, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2170, 0x3, 0x0, 0x1, [{0x1544, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x8000000000000001}, @NFTA_SET_ELEM_EXPRESSIONS={0x4c, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xe}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x12}, @NFTA_NAT_TYPE={0x8}]}}}]}, @NFTA_SET_ELEM_KEY={0x1a8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x50, 0x1, "5a1ed3822ebd80e0caacccba7cd14114d5291731f0e8a43999b0a8e72e5e2fab0fbd807a8e6f175bcd980502d1aa143f67c162546b743a654af6d183f9305dcdb0fd038a667cb744db852b70"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0xd3, 0x1, "9233c174ae733e35b506d280489d7e666d825ad95bcc2a3620dfa8eb0580bc80ba23ef1b7f89ec598b72f11a0334aee81dc4e7b6073973d0deda00866bec5ead7d520993dd22a7bd495ff772bbd5ef5b7c37211dd47caf6345a1a9786cecf8885df5029fb02399b61cdac42b8efb00e94fa5bec7b0c5d58b945fe2a17f93a19223edd1a26a786dcbe70e336407279d334a8eb266352ed70f7c512af612faf0faaa99821158d9c4ecfbcfda20b552bc955e7657e727ac437f34b7ee5c61085144bcad776444275c94075452e8228458"}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}, @NFTA_SET_ELEM_DATA={0x1334, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0x7e, 0x1, "d98f0f88cf1350185c2e0c0bf4fe350f4e60047204759b6e8fe7f7855de6d8920e22b7a0c7be16515c5370f48d22016a20b83a8b1b4466734f0f65c02bb0648129ee2125b974b9c953cee6189f9b397cc2ab8cd53c1c442e1f05e720d78039dd34e66b9351230e69b1b061c79885ca96b0f59788725b1c8dd647"}, @NFTA_DATA_VALUE={0xd8, 0x1, "362e0014776a3548c89bf6ba9bf8650c8d526c360cbe2e0248e2529f4572da5a800f96b2e144cb982077e6ca8399995b2be602c0a2d2bee7c59fa0e755d5db59bdbb2687fb4e9d944519d6757a0fa80a5348e4fb381217ec16dd85483c82d13497f18998983f50778ee57d8a7b69d4082b5f63a7a65b89e00fb783d3667e9cd7450b3a5961132e7b0239f0771522593540c9652158a5b71d8f519e132046c36cb9cd0e74979fa21e3ad794ee1d46c2787301586a4802bdfb700abb8762b33853e7bb76edec726f051420549b8ca25179ab8c5de9"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xad, 0x1, "0ffa72269c112dc1ec6f6624a7a30f79b94011f8d8c5306d3a850710c5ef5ecfd21a89dc8f9c150724dc014dcfe3563aef132afd3a1592bc4ee25a01c47a143722c60a8d9d63cb92551e952ab22bd8244577ee6be86eb5ceb7ba167c6b54819766cfc41178ccb8e63e64444b2c19220a99398d64d97756c92b7485ea4d5482be394654a52ad682a35146ae0a104b0086a9566f5286e6db62fe7f48f1acd10678a795cffd25ccf2db6b"}, @NFTA_DATA_VALUE={0xed, 0x1, "070497b8ded2a3d23bf8fe4bb15197bf684ac5beaf329e721fb27d286cb55effd5b7c5566a1c97d95df1c161825ef9ed996fc3411d2a09bb142dfd18df1dc69dcfceee947b9901efccaea8a84cb5ebb0f8dfd4a40ef337faa78528ab927810b7353732fcdd47544cb8dc31d6d973b708cfa46aa59321c6e65527af3ed16494d6776e6e54059e3a28ea434021306cd5ca7711704c08312080260e72f0c3b374dbdcd0a891a13e93fb5404b13b2201faf4d11b07ddc3a1166fc94521ef5f44064b3b325e34d19fcb39eff2fc9347940f6cc14f0c13e7e5e80e09ab6f401d0bc53a4d42d3dfb0d111d942"}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7}]}, {0xcc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0xc0, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xac, 0x1, "7cf3b73eda516eb0ee137ef7e9cc0e6432438768ed75c42c6bd3374ec23f37144ae4b49ac7db910119c50d06097c6de2d23c36612daf28d132be05f0dd8598ea64ae921d775ef46edd6dd2b5366f6f65b1ef14b20134670f63634d4bc6878c7f9f1525961d82f48f65ef88e5a70282cc3e97eb6b4fc403cb3aa44ea0dcee940ba35b47bb1e3fae24cf1eee70d663286ec7d6dabaf6eff8e35bf7226624e9df57b9438e54604b39df"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x694, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_EXPRESSIONS={0xe4, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x27}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}, {0x4c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xaf}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_PAYLOAD_CSUM_FLAGS={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xfe}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x8}]}}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0xb0, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @payload={{0xc}, @void}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, {0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}, {0x48, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x7, 0x1, 'HL\x00'}, @NFTA_TARGET_REV={0x8}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TARGET_NAME={0x9, 0x1, 'DSCP\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x81}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_DATA={0x3ec, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0x85, 0x1, "6d3dfd03b3e752686b89bb074228df4e66f6a88f39ed5c24051f3c27acd0edf80de4888a00c0418923e41a4d38c980b97632dea5723c5fd4d500d1a03f469ac96482bdb8ecf11e47a1b1d1e1f0973803110d958eafa5ea2081ce754e6859035c8ad418975fd310d4d3a00b65f7b513b680c56025628b1d3af1175db551dda418c1"}, @NFTA_DATA_VALUE={0x4f, 0x1, "a743f51c543ec43b3448cb497dcb84e216ceb549d0cfc13e39250f4c5eae248683eefec77ba70257c51dc98f9b73c29cf374ae5c3ae70a5fe85617e4be6453ba10effeea05e1933c22d756"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xbb, 0x1, "4c0e0c21dad9c3bbfcfb94f20b7d68570283b5f6a25c749a98909574f437a61f21a76dc53c8d8768191455b37abfe562489641ed7ea630ec559f3096115058001a93403d7b42df5c6d878561aa6bc3ad0b49cea828f50c80418abb69dbb15eeb80c0abd997a564523c33e7849d9d075e9e84492cb4ca7423fe0db824879f5615cf7d098bacfd2b7ea555eb91cd1633f7e495d84dd1d2437870dfe34dcd79dc800bc6f273847643ae1e6e0a10f274488eaeda1103e291fc"}, @NFTA_DATA_VALUE={0x8c, 0x1, "d3564ec8b850ce7c57b7d977527d26a6500be4eae8eaaa9873b17e794a538fc848ee015bfe222e5ead26ad36e203d54f554a1cbf36cd76d99f5de2477f2129b9780a529cfabb75c66aca9bc2c2539acb21b4a84e0c4ee82f5eed869692d3c4168deba65505379c480ac8fe56a0d3be53429d9dc7b1e05b216193a6a541c025a073cccaead396012f"}, @NFTA_DATA_VALUE={0xdc, 0x1, "f916cac78bdfbf067c9d5017df2d0ec6cbfc74d0456bc336c0c76f96be52237b52a1dfc36c800e7051c3b82733c88b9b4088fa28db7636e41c3d899d152f64056e383e1f1b76f5e094a9e6ef43dc5ba7c935e5d757aa4831229879163894c41da88801c2a7c9889177559b45f9f7ee3dcb4f2c9958db0d89358a667ffaca1958b0614df020de642b126b70cc6536b23a87858ea722c9a94c3d65a962b0687f2ce6ccea204544677719b93ba121e20e0c56a7b0a3d21d8af7ef88b16697f0d6908f77207a81409a6db9b608b7fa2bfe4ad6c083a9468bf55c"}]}, @NFTA_SET_ELEM_KEY={0xcc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xc7, 0x1, "f56f3dc972332b8df7d88fb5b07896312e62d9640b801d534e55b9f5ab4f0e8206dfb1cbe09bb0c51ad39881ab0dc968821399ece0e055600b14dbc200d24964ccd2c920b9d91c3c0a2f4fe8976f8948ffe413eed3acde4a2141471d3e16006d5c7071b72462c36d75f2b55ffa16be903f39aeb6335bd788435ccb61bd5135f893e3a179f15a17a5f957c3502ef95ae7ec42687561291cbaed822cdf73db69578a38dc24393d00ff897e08833ee050b763bf9de7efd81097ef72bb2244079db8868bb8"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xe3}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x5c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x45c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xffffffffffff0001}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPR={0x3c, 0x7, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x83}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x6b}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x3}]}}}, @NFTA_SET_ELEM_DATA={0x114, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xe5, 0x1, "44edb50dc820fbd59133006fc14076c79d14b9e30df1771f70d2d9b47e7c99be00dbcbce62eb79ed751030d4eac48f9726e1b698adf554fb225134b39cad3097d5f6e2aeccb86e2b6448195f36641840007f7e1ea14f426653ed4ca765a3d359ddd318e28730a97fcdee313d7bb3059f5da4b31fbcd39eb5d09308b8e578b10c83731d3cc8e932af71b36b77909663968612266c656a96854299153d4726f7b0bd748ddbe0c2dcfad8c49cc67c6f16dc668881e5aa17e6da55a548eb4a34e88fdbbdca16809b3d1ce089bf2ba17466485cc7aabc2f58526090ace91124a4691985"}, @NFTA_DATA_VALUE={0x27, 0x1, "796399b40bda968931b80344336b63761e92d7082060b055f5d5ddb33411ad2c19d802"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz0\x00'}, @NFTA_SET_ELEM_KEY_END={0xb0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x5b, 0x1, "22c122a821c5b59d253d99746417ca7f87015c82a0f9c9128b34973db46b484f8e3a268fce620559a7d43499c3aec1303400ecb6334720fb9e3f92e209aef743020a5bc7b422edc3609a056b17e84a8a5bc44c7dcd63f4"}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7d}, @NFTA_SET_ELEM_DATA={0x228, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd0, 0x1, "185aabf3b982c3ab29b3af09dd63943a3036add6dbfc5f54ff9f985aa51a931760ca093d172968eda17846ad72e68e9068b8245772ee0535237da337c3b886428a72c83758457a25b081ff89e37f0f8999ddf7e2a997806d8e56b6936f3aa70ed83b64eae11d7eb2f9b60ce67d0f3b022c836295f3d3a110cca3c709b030fcb446141ef125a07c4473362e9198c330ea9077c9e1f641b2569855af3bedc379dea4d9f2cfc2caf3196a072296fe1dac1868c9a8fd148fe42051402d39497a8a1538aad04867aa51b79794ab6e"}, @NFTA_DATA_VALUE={0xdf, 0x1, "26d442552b98c7a75ef820952898ade8464147d32fdad1d644b3fe691d1bf4a45d02f0721963054b71cd7e4a7d6758083dd7cbf6b1a26526fa350bf6c73c54993f560ba05c1950729ffa3dc5f270f8fa4c2d7118193fdebfca3acf0c63f0df0a863895698af9998b8a6b52db0013f084b665f2966869ced8887dcd4ce93e46cea5339acf640dfdb8a160393975e4664d110990d6b1586ff5b2db1914aaaa940d0eafc90286b0b49e6fa00a81f47892f69c40b9a3db00ba4d33afe30452fd11ec40a9a54612fe9c25e0f5d674f8c267347e9088457c9abc53ffc501"}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x401, 0x0, 0x0, {0x3}}, @NFT_MSG_NEWCHAIN={0x88, 0x3, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4391d863}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x70d01966}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x91}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14, 0x10}}, 0x228c}}, 0x8dcff3dc13e4a83d) 2.3924653s ago: executing program 0 (id=591): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a40)=@newsa={0x1a4, 0x10, 0x1, 0x70bc2c, 0x4000000, {{@in6=@dev={0xfe, 0x80, '\x00', 0x22}, @in=@dev={0xac, 0x14, 0x14, 0x43}, 0x0, 0x8, 0x3, 0x5, 0xa}, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, @in=@multicast2, {0xfffffffffffffffe, 0x4, 0x3, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x89}, {0x3, 0x400804, 0x9, 0x292}, {0x1cb00000}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x6c}, [@algo_crypt={0x68, 0x2, {{'cbc(twofish)\x00'}, 0x100, "72f01afe0a000000366a6a849a73904500240062227cd910ff80008000e8ffff"}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x60}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8215, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0xb, 0x20, 0x40, {0x8, 0xb, 0x0, 0x1, 0x1, 0x4, 0x20, 0x81}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0xb, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x5, 0x5, 0x9, {0x8, 0x25, 0x1, 0x80, 0x12, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x9, 0x3, 0x40, {0x8, 0x25, 0x1, 0x83, 0x6c, 0x4, 0x8a}}}}}}}}]}}, 0x0) 1.101734956s ago: executing program 0 (id=592): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a0101fffffffffffffff5050000000900010073797a30000000000900030073797a300000000058000000060a010400000000000000000500000008000b4000000000300004802c0001800b0001006e756d67656e00001c0002800800024000000004080001400000000908000340000000010900010073797a300000000038000000020a05000000000000000000170000060900010073797a30000000000c00044000000000000000020900010073797a310000000004030000050a0103000000000000000005000005ff000c00558e808ddc630a32d1921a3776bccf8cf8a0865ab17572f524aa9faa4ba6d28e7e776ee3d2e02e217ea2137405b3c930b9cfedbf0a1b33ee610bc0064819e5f7931a7cc79f0aa5f128dda77cce1bc95903e132e01ab53b0ae904fdc5edc93e7992f4956f3eee5ca4f26c9e2cc87cb2d9ec55962769ecad412791aff4644a0e4d157d59057e969dd0345a9893b5eab3978069310dfec47c59845ca2a318c70ff3b35dfe5f665c413978ff21f2231d5acc9b476ba7dd993dde3454f3c80bd2d8e4964b6d43f6706a9d8687dd4f76f4926f2ce5d9f5e1ad18cb645d39aa654a3aa5bbfe555f326740114f3b4cadff728565a2f73b90a4c14bd3dde3b1000900010073797a3100000000400008800c00014000000000000000080c00014000000000000000060c000140ffffffffffffffff0c00014000000000000000030c00014000000000000000030c000240000000000000000108000a40000000040900010073797a300000000008000a40000000011c0008800c00024000000000000000080c000240000000000000000408000b4000000003740004"], 0x46c}}, 0x0) 882.681788ms ago: executing program 0 (id=593): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d000000001f000008000f0001000000", 0x24) 355.809246ms ago: executing program 0 (id=594): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010900000000000000000a0000010900020073797a31000000000900010073797a31"], 0x40}}, 0x8000) recvmsg(r2, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x12040) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r5, 0xc008ae88, &(0x7f0000000100)={0x2, 0x0, [{0xc0010117, 0x0, 0x7}, {0x400000b1, 0x0, 0x3}]}) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) setresuid(0xee01, 0xee00, 0x0) setfsuid(0x0) ioctl$USBDEVFS_RESETEP(r6, 0x80045503, &(0x7f0000000000)={0x1, 0x1}) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) ioctl$MEDIA_REQUEST_IOC_REINIT(r7, 0x7c81, 0x0) 114.748746ms ago: executing program 0 (id=595): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000000010104000000000000000001000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) 0s ago: executing program 0 (id=596): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001040)={0x54, 0x2, 0x6, 0x3}, 0x54}, 0x1, 0x0, 0x0, 0x8005}, 0x10) bind$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "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"}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000633fa640402000558b4d000000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) kernel console output (not intermixed with test programs): ound, idVendor=056a, idProduct=0034, bcdDevice= 0.00 [ 103.029374][ T2246] usb 1-1: too many configurations: 98, using maximum allowed: 8 [ 103.030719][ T2246] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 103.030750][ T2246] usb 1-1: can't read configurations, error -61 [ 103.031006][ T2246] usb usb1-port1: unable to enumerate USB device [ 103.067555][ T5691] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 103.110672][ T6267] __nla_validate_parse: 4 callbacks suppressed [ 103.110685][ T6267] netlink: 228 bytes leftover after parsing attributes in process `syz.3.192'. [ 103.197507][ T5691] usb 3-1: device descriptor read/64, error -71 [ 103.308507][ T5691] usb usb3-port1: attempt power cycle [ 103.570024][ T6289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 103.649908][ T5691] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 103.669679][ T5691] usb 3-1: device descriptor read/8, error -71 [ 103.857038][ T25] gspca_ov534_9: reg_r err -32 [ 103.908490][ T5691] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 103.928184][ T5691] usb 3-1: device descriptor read/8, error -71 [ 103.997537][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 104.037894][ T5691] usb usb3-port1: unable to enumerate USB device [ 104.107686][ T25] gspca_ov534_9: Unknown sensor 0000 [ 104.107776][ T25] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 104.169756][ T10] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 104.170995][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.174604][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.174624][ T10] usb 4-1: Product: syz [ 104.174636][ T10] usb 4-1: Manufacturer: syz [ 104.174649][ T10] usb 4-1: SerialNumber: syz [ 104.222920][ T10] usb 4-1: config 0 descriptor?? [ 104.626072][ T25] usb 4-1: USB disconnect, device number 9 [ 104.713019][ T6333] netlink: 228 bytes leftover after parsing attributes in process `syz.0.201'. [ 104.803606][ T6337] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.203'. [ 105.076544][ T2246] usb 2-1: USB disconnect, device number 17 [ 105.129396][ T6342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.207'. [ 105.262834][ T6350] netlink: 52 bytes leftover after parsing attributes in process `syz.1.209'. [ 105.263289][ T6350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.209'. [ 105.263355][ T6350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.209'. [ 105.326681][ T6352] netlink: 228 bytes leftover after parsing attributes in process `syz.0.210'. [ 105.427857][ T5719] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 105.458477][ T6359] F2FS-fs: wrong format, e.g. : [ 105.473809][ T6361] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 105.473809][ T6361] program syz.1.213 not setting count and/or reply_len properly [ 105.525882][ T6361] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 105.525882][ T6361] program syz.1.213 not setting count and/or reply_len properly [ 105.526850][ T6361] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 105.526850][ T6361] program syz.1.213 not setting count and/or reply_len properly [ 105.562264][ T6361] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 105.562264][ T6361] program syz.1.213 not setting count and/or reply_len properly [ 105.563394][ T6361] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 105.563394][ T6361] program syz.1.213 not setting count and/or reply_len properly [ 105.564421][ T6361] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 105.564421][ T6361] program syz.1.213 not setting count and/or reply_len properly [ 105.565682][ T6361] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 105.565682][ T6361] program syz.1.213 not setting count and/or reply_len properly [ 105.566554][ T6361] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 105.566554][ T6361] program syz.1.213 not setting count and/or reply_len properly [ 105.579185][ T5719] usb 4-1: Using ep0 maxpacket: 8 [ 105.581736][ T5719] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 105.589176][ T6361] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 105.589176][ T6361] program syz.1.213 not setting count and/or reply_len properly [ 105.594348][ T5719] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 105.594382][ T5719] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 105.594417][ T5719] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.594442][ T5719] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.594465][ T5719] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.594488][ T5719] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.594512][ T5719] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 105.594536][ T5719] usb 4-1: config 168 interface 0 has no altsetting 0 [ 105.600113][ T6361] sg_write: data in/out 421312/136 bytes for SCSI command 0x0-- guessing data in; [ 105.600113][ T6361] program syz.1.213 not setting count and/or reply_len properly [ 105.602931][ T5719] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 105.602962][ T5719] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 105.602996][ T5719] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.603022][ T5719] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.603044][ T5719] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.603068][ T5719] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.603092][ T5719] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 105.603116][ T5719] usb 4-1: config 168 interface 0 has no altsetting 0 [ 105.608446][ T5719] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 105.608478][ T5719] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 105.608512][ T5719] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 105.608537][ T5719] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 105.608560][ T5719] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 105.608582][ T5719] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 105.608607][ T5719] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 105.608631][ T5719] usb 4-1: config 168 interface 0 has no altsetting 0 [ 105.630147][ T5719] usb 4-1: string descriptor 0 read error: -22 [ 105.630287][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.688908][ T5699] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 105.690939][ T5719] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 105.950211][ T5719] usb 4-1: USB disconnect, device number 10 [ 106.040910][ T6371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 106.197533][ T6379] netlink: 'syz.2.219': attribute type 7 has an invalid length. [ 106.407886][ T5719] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 106.547510][ T10] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 106.573588][ T5719] usb 4-1: Using ep0 maxpacket: 16 [ 106.574160][ T5719] usb 4-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a [ 106.575048][ T5719] usb 4-1: config 64 has an invalid interface number: 238 but max is 0 [ 106.575061][ T5719] usb 4-1: config 64 has an invalid descriptor of length 0, skipping remainder of the config [ 106.575071][ T5719] usb 4-1: config 64 has no interface number 0 [ 106.575085][ T5719] usb 4-1: config 64 interface 238 has no altsetting 0 [ 106.576894][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.576915][ T5719] usb 4-1: Product: syz [ 106.576929][ T5719] usb 4-1: Manufacturer: syz [ 106.576943][ T5719] usb 4-1: SerialNumber: syz [ 106.698984][ T10] usb 3-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 106.700186][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.700201][ T10] usb 3-1: config 0 has no interface number 0 [ 106.700222][ T10] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.700246][ T10] usb 3-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.700268][ T10] usb 3-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.700292][ T10] usb 3-1: config 0 interface 1 has no altsetting 0 [ 106.701320][ T10] usb 3-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 106.701341][ T10] usb 3-1: Manufacturer: syz [ 106.705544][ T10] usb 3-1: config 0 descriptor?? [ 106.847540][ T5699] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 106.893993][ T5719] uvcvideo 4-1:64.238: Found Unit with invalid ID 0 [ 106.894045][ T5719] uvcvideo 4-1:64.238: Found UVC 0.00 device syz (046d:087c) [ 106.894075][ T5719] uvcvideo 4-1:64.238: No valid video chain found. [ 106.919810][ T5719] usb 4-1: USB disconnect, device number 11 [ 106.998378][ T5699] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 106.999480][ T5699] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 106.999504][ T5699] usb 2-1: config 0 has no interface number 0 [ 106.999544][ T5699] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 106.999572][ T5699] usb 2-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 106.999598][ T5699] usb 2-1: config 0 interface 184 has no altsetting 0 [ 107.001475][ T5699] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.001498][ T5699] usb 2-1: Product: syz [ 107.001512][ T5699] usb 2-1: Manufacturer: syz [ 107.001526][ T5699] usb 2-1: SerialNumber: syz [ 107.004492][ T5699] usb 2-1: config 0 descriptor?? [ 107.005563][ T6383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.005686][ T6383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.087707][ T6395] jffs2: notice: (6395) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 107.091921][ T6395] jffs2: error: (6395) jffs2_do_read_inode: requested to read a nonexistent ino 0 [ 107.092672][ T6395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.096325][ T6395] jffs2: error: (6395) jffs2_do_read_inode: requested to read a nonexistent ino 0 [ 107.097020][ T6395] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.214899][ T6383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.215032][ T6383] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 107.229492][ T6400] FAULT_INJECTION: forcing a failure. [ 107.229492][ T6400] name failslab, interval 1, probability 0, space 0, times 0 [ 107.229543][ T6400] CPU: 1 UID: 0 PID: 6400 Comm: syz.0.227 Not tainted syzkaller #0 PREEMPT(full) [ 107.229565][ T6400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 107.229576][ T6400] Call Trace: [ 107.229583][ T6400] [ 107.229591][ T6400] dump_stack_lvl+0xe8/0x150 [ 107.229629][ T6400] should_fail_ex+0x3eb/0x540 [ 107.229659][ T6400] should_failslab+0xa8/0x100 [ 107.229682][ T6400] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 107.229713][ T6400] ? asymmetric_lookup_restriction+0xd9/0x4f0 [ 107.229742][ T6400] ? asymmetric_lookup_restriction+0xd9/0x4f0 [ 107.229776][ T6400] kstrndup+0x7e/0x160 [ 107.229807][ T6400] asymmetric_lookup_restriction+0xd9/0x4f0 [ 107.229839][ T6400] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 107.229872][ T6400] ? down_read+0x2b9/0x320 [ 107.229895][ T6400] ? __pfx_asymmetric_lookup_restriction+0x10/0x10 [ 107.229926][ T6400] keyring_restrict+0x1bb/0x540 [ 107.229951][ T6400] ? __might_fault+0xaf/0x130 [ 107.229975][ T6400] ? __pfx_keyring_restrict+0x10/0x10 [ 107.230000][ T6400] ? _copy_from_user+0x94/0xb0 [ 107.230025][ T6400] ? memdup_user+0x99/0xd0 [ 107.230055][ T6400] keyctl_restrict_keyring+0x155/0x220 [ 107.230086][ T6400] ? __pfx_keyctl_restrict_keyring+0x10/0x10 [ 107.230127][ T6400] __se_sys_keyctl+0x337/0xbc0 [ 107.230148][ T6400] ? __pfx___se_sys_keyctl+0x10/0x10 [ 107.230170][ T6400] ? __pfx_do_futex+0x10/0x10 [ 107.230199][ T6400] ? __se_sys_futex+0x3a8/0x450 [ 107.230227][ T6400] ? rcu_is_watching+0x16/0xb0 [ 107.230253][ T6400] ? __x64_sys_keyctl+0x20/0xc0 [ 107.230274][ T6400] do_syscall_64+0x166/0x520 [ 107.230292][ T6400] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.230311][ T6400] ? clear_bhb_loop+0x70/0xc0 [ 107.230335][ T6400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.230354][ T6400] RIP: 0033:0x7f31a479e159 [ 107.230371][ T6400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.230387][ T6400] RSP: 002b:00007f31a56a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 107.230407][ T6400] RAX: ffffffffffffffda RBX: 00007f31a4a25fa0 RCX: 00007f31a479e159 [ 107.230421][ T6400] RDX: 0000200000000200 RSI: 00000000007329d7 RDI: 000000000000001d [ 107.230433][ T6400] RBP: 00007f31a483506b R08: 0000000000000000 R09: 0000000000000000 [ 107.230446][ T6400] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 107.230458][ T6400] R13: 00007f31a4a26038 R14: 00007f31a4a25fa0 R15: 00007ffcfc97ab88 [ 107.230488][ T6400] [ 107.379790][ T10] input: syz Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0003/input/input9 [ 107.565038][ T10] input: syz Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:145F:0212.0003/input/input10 [ 107.575812][ T10] uclogic 0003:145F:0212.0003: input,hidraw0: USB HID v4.06 Keypad [syz] on usb-dummy_hcd.2-1/input1 [ 107.580482][ T10] usb 3-1: USB disconnect, device number 19 [ 107.656919][ T5699] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 107.656950][ T5699] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 107.891011][ T5699] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 107.891051][ T5699] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 107.891074][ T5699] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 107.891091][ T5699] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 107.891326][ T5699] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 107.956117][ T5699] usb 2-1: USB disconnect, device number 19 [ 108.003422][ T6414] fido_id[6414]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 108.097481][ T5691] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 108.165476][ T6418] __nla_validate_parse: 3 callbacks suppressed [ 108.165494][ T6418] netlink: 228 bytes leftover after parsing attributes in process `syz.2.231'. [ 108.257581][ T5691] usb 4-1: Using ep0 maxpacket: 32 [ 108.258278][ T5691] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 108.259952][ T5691] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 108.259986][ T5691] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 108.260021][ T5691] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 108.260055][ T5691] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 108.260079][ T5691] usb 4-1: config 0 interface 0 has no altsetting 0 [ 108.264357][ T5691] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 108.264381][ T5691] usb 4-1: Product: syz [ 108.264395][ T5691] usb 4-1: Manufacturer: syz [ 108.264408][ T5691] usb 4-1: SerialNumber: syz [ 108.273592][ T5691] usb 4-1: config 0 descriptor?? [ 108.346810][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 108.347883][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 108.353057][ T5691] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 108.356331][ T5691] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 108.590441][ T5719] usb 4-1: USB disconnect, device number 12 [ 108.590538][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 108.611353][ T6412] ldusb 4-1:0.0: Couldn't submit HID_REQ_SET_REPORT -19 [ 108.613768][ T5719] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 108.657083][ T6434] netlink: 4 bytes leftover after parsing attributes in process `syz.2.237'. [ 108.792665][ T6441] netlink: 228 bytes leftover after parsing attributes in process `syz.2.240'. [ 108.976890][ T6446] dummy0: entered allmulticast mode [ 108.987580][ T1218] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 108.988083][ T6444] dummy0: left allmulticast mode [ 109.013942][ T6450] mmap: syz.2.242 (6450) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 109.142867][ T1218] usb 1-1: unable to get BOS descriptor or descriptor too short [ 109.142917][ T1218] usb 1-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 109.143860][ T1218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.143942][ T1218] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 109.146013][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.146036][ T1218] usb 1-1: Product: syz [ 109.146049][ T1218] usb 1-1: Manufacturer: syz [ 109.146063][ T1218] usb 1-1: SerialNumber: syz [ 109.277251][ T5616] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 109.280615][ T6459] netlink: 'syz.1.244': attribute type 21 has an invalid length. [ 109.280633][ T6459] netlink: 128 bytes leftover after parsing attributes in process `syz.1.244'. [ 109.280747][ T6459] netlink: 'syz.1.244': attribute type 4 has an invalid length. [ 109.280760][ T6459] netlink: 'syz.1.244': attribute type 5 has an invalid length. [ 109.280771][ T6459] netlink: 3 bytes leftover after parsing attributes in process `syz.1.244'. [ 109.281221][ T6459] netlink: 'syz.1.244': attribute type 21 has an invalid length. [ 109.281237][ T6459] netlink: 128 bytes leftover after parsing attributes in process `syz.1.244'. [ 109.281275][ T6459] netlink: 'syz.1.244': attribute type 4 has an invalid length. [ 109.281287][ T6459] netlink: 'syz.1.244': attribute type 5 has an invalid length. [ 109.281298][ T6459] netlink: 3 bytes leftover after parsing attributes in process `syz.1.244'. [ 109.281546][ T6460] netlink: 11 bytes leftover after parsing attributes in process `syz.1.244'. [ 109.345488][ T6465] nfs: Unknown parameter 'prot' [ 109.440435][ T1218] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 109.460197][ T1218] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 109.464447][ T1218] usb 1-1: parse_audio_format_rates_v2v3(): unable to retrieve number of sample rates (clock 0) [ 109.579572][ T1218] usb 1-1: USB disconnect, device number 15 [ 109.680365][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.957317][ T6491] netlink: 'syz.2.258': attribute type 17 has an invalid length. [ 110.663406][ T4931] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 110.918873][ T5719] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 111.087482][ T5719] usb 3-1: Using ep0 maxpacket: 32 [ 111.089249][ T5719] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 111.090424][ T5719] usb 3-1: config 0 has an invalid descriptor of length 140, skipping remainder of the config [ 111.090449][ T5719] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 111.092375][ T5719] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 111.092398][ T5719] usb 3-1: Product: syz [ 111.092414][ T5719] usb 3-1: Manufacturer: syz [ 111.092429][ T5719] usb 3-1: SerialNumber: syz [ 111.097305][ T5719] usb 3-1: config 0 descriptor?? [ 111.355208][ T1218] usb 3-1: USB disconnect, device number 20 [ 111.781956][ T6518] IPv4: Oversized IP packet from 127.202.26.0 [ 112.019863][ T5719] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 112.173202][ T6533] FAULT_INJECTION: forcing a failure. [ 112.173202][ T6533] name failslab, interval 1, probability 0, space 0, times 0 [ 112.173233][ T6533] CPU: 1 UID: 0 PID: 6533 Comm: syz.0.272 Not tainted syzkaller #0 PREEMPT(full) [ 112.173256][ T6533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 112.173268][ T6533] Call Trace: [ 112.173276][ T6533] [ 112.173285][ T6533] dump_stack_lvl+0xe8/0x150 [ 112.173316][ T6533] should_fail_ex+0x3eb/0x540 [ 112.173349][ T6533] should_failslab+0xa8/0x100 [ 112.173370][ T6533] ? security_file_alloc+0x34/0x310 [ 112.173397][ T6533] kmem_cache_alloc_noprof+0x9c/0x600 [ 112.173423][ T6533] ? rcu_is_watching+0x16/0xb0 [ 112.173443][ T6533] ? security_file_alloc+0x34/0x310 [ 112.173477][ T6533] security_file_alloc+0x34/0x310 [ 112.173506][ T6533] init_file+0x90/0x2b0 [ 112.173528][ T6533] alloc_empty_file+0x74/0x1d0 [ 112.173549][ T6533] alloc_file_clone+0x52/0xe0 [ 112.173569][ T6533] create_pipe_files+0x39f/0x7a0 [ 112.173591][ T6533] __do_pipe_flags+0x46/0x1f0 [ 112.173608][ T6533] do_pipe2+0xaa/0x190 [ 112.173630][ T6533] ? __pfx_do_pipe2+0x10/0x10 [ 112.173653][ T6533] ? rcu_is_watching+0x16/0xb0 [ 112.173681][ T6533] __x64_sys_pipe2+0x5a/0x70 [ 112.173699][ T6533] do_syscall_64+0x166/0x520 [ 112.173716][ T6533] ? trace_irq_disable+0x3b/0x140 [ 112.173742][ T6533] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.173761][ T6533] ? clear_bhb_loop+0x70/0xc0 [ 112.173785][ T6533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.173805][ T6533] RIP: 0033:0x7f31a479e159 [ 112.173823][ T6533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.173839][ T6533] RSP: 002b:00007f31a56a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000125 [ 112.173863][ T6533] RAX: ffffffffffffffda RBX: 00007f31a4a25fa0 RCX: 00007f31a479e159 [ 112.173878][ T6533] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 112.173890][ T6533] RBP: 00007f31a483506b R08: 0000000000000000 R09: 0000000000000000 [ 112.173903][ T6533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.173915][ T6533] R13: 00007f31a4a26038 R14: 00007f31a4a25fa0 R15: 00007ffcfc97ab88 [ 112.173946][ T6533] [ 112.179484][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 112.187885][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.187930][ T5719] usb 2-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 112.192362][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.192383][ T5719] usb 2-1: Product: syz [ 112.192397][ T5719] usb 2-1: Manufacturer: syz [ 112.192410][ T5719] usb 2-1: SerialNumber: syz [ 112.423466][ T5719] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 112.748331][ T5719] usb 2-1: USB disconnect, device number 20 [ 112.828796][ T1218] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 112.977558][ T1218] usb 4-1: Using ep0 maxpacket: 32 [ 112.979133][ T1218] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 112.980340][ T1218] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 112.980363][ T1218] usb 4-1: config 0 has no interface number 0 [ 112.984987][ T1218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.985010][ T1218] usb 4-1: Product: syz [ 112.985024][ T1218] usb 4-1: Manufacturer: syz [ 112.985037][ T1218] usb 4-1: SerialNumber: syz [ 113.036570][ T1218] usb 4-1: config 0 descriptor?? [ 113.061292][ T1218] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 113.172463][ T6571] fuse: fd is not a fuse device [ 113.181947][ T6573] __nla_validate_parse: 7 callbacks suppressed [ 113.181965][ T6573] netlink: 4 bytes leftover after parsing attributes in process `syz.1.285'. [ 113.213422][ T6574] netlink: 'syz.2.283': attribute type 10 has an invalid length. [ 113.213445][ T6574] netlink: 55 bytes leftover after parsing attributes in process `syz.2.283'. [ 113.264706][ T1218] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 113.280525][ T1218] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 113.463321][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 14 [ 113.669838][ T6555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.671365][ T6555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.674556][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 113.674965][ T1218] usb 4-1: USB disconnect, device number 13 [ 113.715822][ T1218] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 113.732501][ T1218] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 113.733141][ T1218] quatech2 4-1:0.51: device disconnected [ 113.828605][ T6582] netlink: 228 bytes leftover after parsing attributes in process `syz.1.288'. [ 114.123044][ T6595] netlink: 4 bytes leftover after parsing attributes in process `syz.2.294'. [ 114.282024][ T6588] process 'syz.1.290' launched './file0' with NULL argv: empty string added [ 114.396040][ T6605] netlink: 228 bytes leftover after parsing attributes in process `syz.2.298'. [ 114.447066][ T6608] Process accounting resumed [ 114.567609][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.568041][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.677503][ T6617] ======================================================= [ 114.677503][ T6617] WARNING: The mand mount option has been deprecated and [ 114.677503][ T6617] and is ignored by this kernel. Remove the mand [ 114.677503][ T6617] option from the mount to silence this warning. [ 114.677503][ T6617] ======================================================= [ 114.678764][ T6617] overlay: ./file0 is not a directory [ 114.680153][ T6617] x_tables: duplicate underflow at hook 1 [ 115.044316][ T6629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.306'. [ 115.202515][ T6638] netlink: 228 bytes leftover after parsing attributes in process `syz.2.309'. [ 115.308813][ T4931] Bluetooth: hci1: unexpected cc 0x2005 length: 5 > 1 [ 115.308850][ T4931] Bluetooth: hci1: unexpected event for opcode 0x2005 [ 115.507879][ T5691] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 115.667600][ T5691] usb 2-1: Using ep0 maxpacket: 8 [ 115.669789][ T5691] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 115.672008][ T5691] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 115.672037][ T5691] usb 2-1: config 0 has no interface number 0 [ 115.674424][ T5691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.674445][ T5691] usb 2-1: Product: syz [ 115.674458][ T5691] usb 2-1: Manufacturer: syz [ 115.674471][ T5691] usb 2-1: SerialNumber: syz [ 115.681092][ T5691] usb 2-1: config 0 descriptor?? [ 115.757515][ T5719] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 115.852374][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.315'. [ 115.907818][ T5719] usb 4-1: Using ep0 maxpacket: 8 [ 115.908862][ T5719] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 115.912316][ T5719] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.912340][ T5719] usb 4-1: Product: syz [ 115.912355][ T5719] usb 4-1: Manufacturer: syz [ 115.912369][ T5719] usb 4-1: SerialNumber: syz [ 115.916007][ T5719] usb 4-1: config 0 descriptor?? [ 116.104747][ T6660] netlink: 228 bytes leftover after parsing attributes in process `syz.2.318'. [ 116.123164][ T5719] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 116.130881][ T6662] netlink: 84 bytes leftover after parsing attributes in process `syz.3.314'. [ 116.391550][ T5719] usb write operation failed. (-71) [ 116.402401][ T5719] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 116.403200][ T5719] dvbdev: DVB: registering new adapter (Terratec H7) [ 116.403243][ T5719] usb 4-1: media controller created [ 116.403663][ T5719] usb read operation failed. (-71) [ 116.404196][ T5719] usb write operation failed. (-71) [ 116.411109][ T5719] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 116.415516][ T5719] usb 4-1: USB disconnect, device number 14 [ 116.468451][ T987] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 116.617497][ T987] usb 3-1: Using ep0 maxpacket: 16 [ 116.618364][ T987] usb 3-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 116.619913][ T987] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 116.619941][ T987] usb 3-1: config 0 interface 0 has no altsetting 0 [ 116.623211][ T987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.623234][ T987] usb 3-1: Product: syz [ 116.623247][ T987] usb 3-1: Manufacturer: syz [ 116.623261][ T987] usb 3-1: SerialNumber: syz [ 116.630149][ T987] usb 3-1: config 0 descriptor?? [ 116.852088][ T987] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input11 [ 117.157822][ T987] rc_core: IR keymap rc-imon-pad not found [ 117.157840][ T987] Registered IR keymap rc-empty [ 117.157926][ T987] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 117.157942][ T987] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 117.262406][ T987] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 117.265650][ T987] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12 [ 117.292811][ T6699] syz.3.326 uses obsolete (PF_INET,SOCK_PACKET) [ 117.293517][ T987] imon 3-1:0.0: iMON device (15c2:0041, intf0) on usb<3:22> initialized [ 117.442510][ T6704] fuse: Bad value for 'user_id' [ 117.442530][ T6704] fuse: Bad value for 'user_id' [ 117.665226][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-75): ignored [ 117.699958][ T6716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 117.870403][ C1] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 117.872099][ T10] usb 3-1: USB disconnect, device number 22 [ 118.191387][ T5691] uvcvideo 2-1:0.31: Found UVC 0.04 device syz (046d:08c3) [ 118.191494][ T5691] uvcvideo 2-1:0.31: Entity type for entity Output 32774 was not initialized! [ 118.211977][ T5691] usb 2-1: USB disconnect, device number 21 [ 118.441268][ T6741] __nla_validate_parse: 3 callbacks suppressed [ 118.441288][ T6741] netlink: 228 bytes leftover after parsing attributes in process `syz.1.337'. [ 118.819557][ T6766] overlayfs: failed to resolve 'lower1': -2 [ 118.820461][ T6767] overlayfs: failed to resolve 'lower1': -2 [ 118.987729][ T10] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 119.160104][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 119.160611][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 119.160643][ T10] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 119.161768][ T10] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 119.161792][ T10] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 119.161856][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 119.161909][ T10] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 2565, setting to 64 [ 119.252623][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.252650][ T10] usb 3-1: Product: syz [ 119.252663][ T10] usb 3-1: Manufacturer: syz [ 119.252677][ T10] usb 3-1: SerialNumber: syz [ 119.692698][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.3.345'. [ 119.834369][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802b1fa000: rx timeout, send abort [ 119.965759][ T10] usb 3-1: USB disconnect, device number 23 [ 120.013403][ T6804] netlink: 228 bytes leftover after parsing attributes in process `syz.1.348'. [ 120.334926][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802b1fa000: abort rx timeout. Force session deactivation [ 120.742530][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.355'. [ 120.887012][ T6854] netlink: 228 bytes leftover after parsing attributes in process `syz.3.358'. [ 120.917968][ T987] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 121.068181][ T987] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 121.069210][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.073968][ T987] usb 2-1: config 0 descriptor?? [ 121.566990][ T987] ath6kl: Failed to read usb control message: -71 [ 121.567042][ T987] ath6kl: Unable to read the bmi data from the device: -71 [ 121.567057][ T987] ath6kl: Unable to recv target info: -71 [ 121.590351][ T987] ath6kl: Failed to init ath6kl core: -71 [ 121.591708][ T987] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 121.633254][ T987] usb 2-1: USB disconnect, device number 22 [ 121.707481][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 121.859124][ T10] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 0.01 [ 121.860162][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.860191][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 121.862170][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.862193][ T10] usb 4-1: Product: syz [ 121.862206][ T10] usb 4-1: Manufacturer: syz [ 121.862220][ T10] usb 4-1: SerialNumber: syz [ 121.899070][ T10] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 121.954891][ T10] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13 [ 121.955072][ T10] input input13: usb_submit_urb failed [ 121.977967][ T5719] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 121.981636][ T10] input: failed to attach handler kbd to device input13, error: -5 [ 121.984146][ T4967] input input13: usb_submit_urb failed [ 121.989713][ T10] scsi host1: usb-storage 4-1:1.0 [ 122.006569][ T4967] input input13: usb_submit_urb failed [ 122.110829][ T5719] usb 1-1: device descriptor read/64, error -71 [ 122.150509][ T1218] usb 4-1: USB disconnect, device number 15 [ 122.235983][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 122.347517][ T5719] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 122.478306][ T5719] usb 1-1: device descriptor read/64, error -71 [ 122.587948][ T5719] usb usb1-port1: attempt power cycle [ 122.669430][ T6923] netlink: 228 bytes leftover after parsing attributes in process `syz.1.370'. [ 122.727579][ T1218] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 122.858382][ T1218] usb 4-1: device descriptor read/64, error -71 [ 122.928522][ T5719] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 122.948943][ T5719] usb 1-1: device descriptor read/8, error -71 [ 123.097487][ T1218] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 123.197614][ T5719] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 123.218085][ T5719] usb 1-1: device descriptor read/8, error -71 [ 123.228279][ T1218] usb 4-1: device descriptor read/64, error -71 [ 123.327867][ T5719] usb usb1-port1: unable to enumerate USB device [ 123.339900][ T1218] usb usb4-port1: attempt power cycle [ 123.678161][ T1218] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 123.700334][ T1218] usb 4-1: device descriptor read/8, error -71 [ 123.937601][ T1218] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 123.968828][ T1218] usb 4-1: device descriptor read/8, error -71 [ 124.077901][ T1218] usb usb4-port1: unable to enumerate USB device [ 124.360380][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 124.659339][ T6983] netlink: 228 bytes leftover after parsing attributes in process `syz.1.381'. [ 124.962030][ T6995] netlink: 4 bytes leftover after parsing attributes in process `syz.2.387'. [ 124.965471][ T6996] netlink: 40 bytes leftover after parsing attributes in process `syz.1.386'. [ 124.965609][ T6997] netlink: 40 bytes leftover after parsing attributes in process `syz.1.386'. [ 125.088048][ T1218] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 125.115765][ T7006] netlink: 228 bytes leftover after parsing attributes in process `syz.2.391'. [ 125.205152][ T7011] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.205592][ T7011] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.228732][ T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 125.257599][ T1218] usb 1-1: Using ep0 maxpacket: 32 [ 125.259969][ T1218] usb 1-1: New USB device found, idVendor=046d, idProduct=08b0, bcdDevice=e5.27 [ 125.261739][ T1218] usb 1-1: config 0 has an invalid interface number: 4 but max is 0 [ 125.261761][ T1218] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.261778][ T1218] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 125.261796][ T1218] usb 1-1: config 0 has no interface number 1 [ 125.261839][ T1218] usb 1-1: config 0 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 125.264418][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.264439][ T1218] usb 1-1: Product: syz [ 125.264452][ T1218] usb 1-1: Manufacturer: syz [ 125.264465][ T1218] usb 1-1: SerialNumber: syz [ 125.271716][ T1218] usb 1-1: config 0 descriptor?? [ 125.281465][ T1218] pwc: Logitech QuickCam Pro 3000 USB webcam detected. [ 125.382205][ T7018] loop4: detected capacity change from 0 to 2640 [ 125.383242][ T7018] Buffer I/O error on dev loop4, logical block 0, async page read [ 125.383302][ T7018] Buffer I/O error on dev loop4, logical block 0, async page read [ 125.383328][ T7018] Buffer I/O error on dev loop4, logical block 0, async page read [ 125.383353][ T7018] Buffer I/O error on dev loop4, logical block 0, async page read [ 125.383378][ T7018] Buffer I/O error on dev loop4, logical block 0, async page read [ 125.383424][ T7018] Buffer I/O error on dev loop4, logical block 0, async page read [ 125.383462][ T7018] Buffer I/O error on dev loop4, logical block 0, async page read [ 125.383487][ T7018] Buffer I/O error on dev loop4, logical block 0, async page read [ 125.383499][ T7018] ldm_validate_partition_table(): Disk read failed. [ 125.383523][ T7018] Buffer I/O error on dev loop4, logical block 0, async page read [ 125.383549][ T7018] Buffer I/O error on dev loop4, logical block 0, async page read [ 125.383588][ T7018] Dev loop4: unable to read RDB block 0 [ 125.383757][ T7018] loop4: unable to read partition table [ 125.383931][ T7018] loop_reread_partitions: partition scan of loop4 (3Ÿ ¾‚³˜) failed (rc=-5) [ 125.399619][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 125.404580][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.404625][ T10] usb 4-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 125.413879][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.413902][ T10] usb 4-1: Product: syz [ 125.413916][ T10] usb 4-1: Manufacturer: syz [ 125.413929][ T10] usb 4-1: SerialNumber: syz [ 125.478289][ T2246] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 125.592322][ T6989] nbd0: detected capacity change from 0 to 127 [ 125.606023][ T4931] block nbd0: Receive control failed (result -104) [ 125.615040][ T1218] pwc: Failed to set LED on/off time (-71) [ 125.615433][ T1218] pwc: send_video_command error -71 [ 125.615445][ T1218] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 125.615552][ T1218] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 125.623302][ T2246] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 125.630149][ T2246] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 125.630197][ T2246] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.630215][ T2246] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 125.630256][ T2246] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.640206][ T1218] usb 1-1: USB disconnect, device number 20 [ 125.645112][ T2246] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 125.645136][ T2246] usb 2-1: Product: syz [ 125.645149][ T2246] usb 2-1: Manufacturer: syz [ 125.688764][ T2246] cdc_wdm 2-1:1.0: skipping garbage [ 125.688784][ T2246] cdc_wdm 2-1:1.0: skipping garbage [ 125.709110][ T2246] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 125.709146][ T2246] cdc_wdm 2-1:1.0: Unknown control protocol [ 125.875135][ T2246] usb 2-1: USB disconnect, device number 23 [ 125.956585][ T7034] netlink: 4 bytes leftover after parsing attributes in process `syz.2.399'. [ 126.193584][ T7040] netlink: 228 bytes leftover after parsing attributes in process `syz.0.402'. [ 126.287591][ T987] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 126.417500][ T987] usb 3-1: device descriptor read/64, error -71 [ 126.511420][ T7053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 126.621850][ T7059] netlink: 228 bytes leftover after parsing attributes in process `syz.1.411'. [ 126.657483][ T987] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 126.788317][ T987] usb 3-1: device descriptor read/64, error -71 [ 126.897889][ T987] usb usb3-port1: attempt power cycle [ 126.968454][ T5719] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 127.097566][ T2246] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 127.117503][ T5719] usb 2-1: Using ep0 maxpacket: 8 [ 127.118219][ T5719] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 127.119196][ T5719] usb 2-1: config index 0 descriptor too short (expected 30, got 18) [ 127.121097][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.121119][ T5719] usb 2-1: Product: syz [ 127.121140][ T5719] usb 2-1: Manufacturer: syz [ 127.121154][ T5719] usb 2-1: SerialNumber: syz [ 127.123427][ T5719] usb 2-1: config 0 descriptor?? [ 127.179651][ T5719] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 127.180410][ T5719] usb 2-1: setting power ON [ 127.180679][ T5719] dvb-usb: bulk message failed: -22 (2/0) [ 127.184591][ T5719] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 127.185202][ T5719] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 127.185252][ T5719] usb 2-1: media controller created [ 127.236824][ T5719] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 127.238454][ T987] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 127.247517][ T2246] usb 1-1: Using ep0 maxpacket: 8 [ 127.262254][ T987] usb 3-1: device descriptor read/8, error -71 [ 127.262692][ T2246] usb 1-1: unable to get BOS descriptor or descriptor too short [ 127.262719][ T2246] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b1, bcdDevice= 0.40 [ 127.266391][ T2246] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 127.266424][ T2246] usb 1-1: can't read configurations, error -71 [ 127.317112][ T5719] usb 2-1: selecting invalid altsetting 6 [ 127.317132][ T5719] usb 2-1: digital interface selection failed (-22) [ 127.317139][ T5719] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 127.326881][ T7063] dvb-usb: bulk message failed: -22 (3/0) [ 127.339082][ T5719] usb 2-1: setting power OFF [ 127.339156][ T5719] dvb-usb: bulk message failed: -22 (2/0) [ 127.339171][ T5719] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 127.339183][ T5719] (NULL device *): no alternate interface [ 127.402540][ T5719] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 127.406307][ T5719] usb 2-1: USB disconnect, device number 24 [ 127.517499][ T987] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 127.538084][ T987] usb 3-1: device descriptor read/8, error -71 [ 127.647720][ T987] usb usb3-port1: unable to enumerate USB device [ 127.916049][ T7075] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 128.035637][ T4931] Bluetooth: hci0: unexpected cc 0x206e length: 9 > 3 [ 128.035687][ T4931] Bluetooth: hci0: unexpected event for opcode 0x206e [ 128.146127][ T10] f81534a_ctrl 4-1:117.0: probe with driver f81534a_ctrl failed with error -71 [ 128.152891][ T10] usb 4-1: USB disconnect, device number 20 [ 128.577601][ T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 128.728596][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 128.729145][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b [ 128.729975][ T10] usb 4-1: config 3 has an invalid interface number: 45 but max is 0 [ 128.729990][ T10] usb 4-1: config 3 contains an unexpected descriptor of type 0x1, skipping [ 128.729999][ T10] usb 4-1: config 3 has no interface number 0 [ 128.730028][ T10] usb 4-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.730041][ T10] usb 4-1: config 3 interface 45 has no altsetting 0 [ 128.731579][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.731592][ T10] usb 4-1: Product: syz [ 128.731600][ T10] usb 4-1: Manufacturer: syz [ 128.731607][ T10] usb 4-1: SerialNumber: syz [ 128.890027][ T2039] block nbd0: Connection timed out, retrying (0/1 alive) [ 128.890281][ T2039] block nbd0: Connection timed out, retrying (0/1 alive) [ 128.890309][ T2039] block nbd0: Connection timed out, retrying (0/1 alive) [ 128.890330][ T2039] block nbd0: Connection timed out, retrying (0/1 alive) [ 128.890522][ T2039] block nbd0: Dead connection, failed to find a fallback [ 128.890562][ T2039] block nbd0: shutting down sockets [ 128.890629][ T2039] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.890694][ T2039] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.890713][ T2039] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.890729][ T2039] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.891496][ T2039] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 128.893696][ T2009] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.894450][ T2009] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.894568][ T2009] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.894670][ T2009] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.894782][ T2009] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 128.896562][ T5622] ldm_validate_partition_table(): Disk read failed. [ 128.998212][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 129.065593][ T5622] Dev nbd0: unable to read RDB block 0 [ 129.069655][ T5622] nbd0: unable to read partition table [ 129.105073][ T5622] ldm_validate_partition_table(): Disk read failed. [ 129.113548][ T5622] Dev nbd0: unable to read RDB block 0 [ 129.118460][ T5622] nbd0: unable to read partition table [ 129.180066][ T10] usb 4-1: USB disconnect, device number 21 [ 129.301457][ T1218] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 129.310179][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.454335][ T1218] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 129.456543][ T1218] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.456591][ T1218] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.461359][ T7112] __nla_validate_parse: 5 callbacks suppressed [ 129.461374][ T7112] netlink: 16 bytes leftover after parsing attributes in process `syz.2.434'. [ 129.510492][ T7113] netlink: 16 bytes leftover after parsing attributes in process `syz.2.434'. [ 129.528633][ T1218] as10x_usb: device has been detected [ 129.533020][ T1218] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 129.566154][ T1218] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 129.713350][ T1218] as10x_usb: error during firmware upload part1 [ 129.718286][ T1218] Registered device Abilis Systems DVB-Titan [ 129.739453][ T7128] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.748405][ T7128] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.931418][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.438'. [ 130.097295][ T7139] Set syz1 is full, maxelem 14 reached [ 130.203780][ T7146] netlink: 228 bytes leftover after parsing attributes in process `syz.2.441'. [ 130.234647][ T7148] netlink: 'syz.1.442': attribute type 1 has an invalid length. [ 130.234667][ T7148] netlink: 224 bytes leftover after parsing attributes in process `syz.1.442'. [ 130.467658][ T1218] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 130.597523][ T1218] usb 2-1: device descriptor read/64, error -71 [ 130.647521][ T25] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 130.817529][ T5760] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 130.817554][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 130.818240][ T25] usb 3-1: New USB device found, idVendor=413c, idProduct=8196, bcdDevice=71.fa [ 130.820913][ T25] usb 3-1: config 9 has an invalid interface number: 27 but max is 0 [ 130.820937][ T25] usb 3-1: config 9 has no interface number 0 [ 130.820965][ T25] usb 3-1: config 9 interface 27 has no altsetting 0 [ 130.822833][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.822855][ T25] usb 3-1: Product: syz [ 130.822868][ T25] usb 3-1: Manufacturer: syz [ 130.822881][ T25] usb 3-1: SerialNumber: syz [ 130.840497][ T1218] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 130.980043][ T5760] usb 4-1: unable to get BOS descriptor or descriptor too short [ 130.980093][ T5760] usb 4-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 130.981038][ T5760] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 130.981060][ T5760] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 130.981100][ T5760] usb 4-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 130.981135][ T5760] usb 4-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 130.981171][ T5760] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 130.981196][ T5760] usb 4-1: config 1 interface 1 has no altsetting 0 [ 130.983962][ T5760] usb 4-1: string descriptor 0 read error: -22 [ 130.984091][ T5760] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.072786][ T1218] usb 2-1: device descriptor read/64, error -71 [ 131.163114][ T25] qmi_wwan 3-1:9.27: bogus CDC Union: master=0, slave=1 [ 131.163339][ T25] qmi_wwan 3-1:9.27: probe with driver qmi_wwan failed with error -22 [ 131.166186][ T25] usb 3-1: USB disconnect, device number 28 [ 131.182911][ T1218] usb usb2-port1: attempt power cycle [ 131.419575][ T5760] usb 4-1: 2:0: cannot get min/max values for control 2 (id 2) [ 131.419604][ T5760] usb 4-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 131.419617][ T5760] usb 4-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 131.528098][ T1218] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 131.547949][ T1218] usb 2-1: device descriptor read/8, error -71 [ 131.752469][ T7159] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 131.752497][ T7159] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.755338][ T7159] vhci_hcd vhci_hcd.0: Device attached [ 131.783173][ T7159] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(9) [ 131.783189][ T7159] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 131.783212][ T7159] vhci_hcd vhci_hcd.0: Device attached [ 131.787679][ T1218] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 131.828102][ T1218] usb 2-1: device descriptor read/8, error -71 [ 131.867332][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.870106][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.938918][ T1218] usb usb2-port1: unable to enumerate USB device [ 131.997512][ T25] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 132.027502][ T2246] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 132.188792][ T2246] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 132.189361][ T2246] usb 3-1: config 0 has no interfaces? [ 132.189392][ T2246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.192896][ T2246] usb 3-1: config 0 descriptor?? [ 132.396003][ T7162] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 1 [ 132.399139][ T6062] vhci_hcd vhci_hcd.2: stop threads [ 132.399156][ T6062] vhci_hcd vhci_hcd.2: release socket [ 132.401294][ T6062] vhci_hcd vhci_hcd.2: disconnect device [ 132.401971][ T7159] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(12) [ 132.401992][ T7159] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 132.402898][ T7159] vhci_hcd vhci_hcd.0: Device attached [ 132.403777][ T7168] vhci_hcd: connection closed [ 132.404912][ T5691] usb 3-1: USB disconnect, device number 29 [ 132.406947][ T6062] vhci_hcd vhci_hcd.2: stop threads [ 132.407306][ T6062] vhci_hcd vhci_hcd.2: release socket [ 132.408358][ T6062] vhci_hcd vhci_hcd.2: disconnect device [ 132.422341][ T7160] vhci_hcd: connection reset by peer [ 132.431592][ T6062] vhci_hcd vhci_hcd.2: stop threads [ 132.431618][ T6062] vhci_hcd vhci_hcd.2: release socket [ 132.431669][ T6062] vhci_hcd vhci_hcd.2: disconnect device [ 132.809261][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.809340][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.270967][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 133.590706][ T7181] netlink: 228 bytes leftover after parsing attributes in process `syz.2.452'. [ 133.607674][ T5760] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 133.617238][ T5719] usb 4-1: USB disconnect, device number 22 [ 133.758705][ T5760] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 133.759716][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.759744][ T5760] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 133.759779][ T5760] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.763049][ T5760] usb 2-1: config 0 descriptor?? [ 134.176612][ T5760] hid_parser_main: 130 callbacks suppressed [ 134.176637][ T5760] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 134.176667][ T5760] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 134.176692][ T5760] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 134.176717][ T5760] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 134.176742][ T5760] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 134.176767][ T5760] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 134.176793][ T5760] pyra 0003:1E7D:2CF6.0004: unknown main item tag 0x0 [ 134.199674][ T5760] pyra 0003:1E7D:2CF6.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 134.375857][ T5760] pyra 0003:1E7D:2CF6.0004: couldn't init struct pyra_device [ 134.375889][ T5760] pyra 0003:1E7D:2CF6.0004: couldn't install mouse [ 134.393367][ T5760] pyra 0003:1E7D:2CF6.0004: probe with driver pyra failed with error -32 [ 135.178785][ T5691] usb 1-1: USB disconnect, device number 23 [ 135.203723][ T5691] Unregistered device Abilis Systems DVB-Titan [ 135.206961][ T5691] as10x_usb: device has been disconnected [ 136.384846][ T5760] usb 2-1: USB disconnect, device number 29 [ 136.523456][ T7202] batadv_slave_1: entered promiscuous mode [ 136.544771][ T7201] batadv_slave_1: left promiscuous mode [ 136.630319][ T7209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 136.739433][ T7214] netlink: 228 bytes leftover after parsing attributes in process `syz.3.462'. [ 136.834507][ T7220] Option 'dnserror' to dns_resolver key: bad/missing value [ 136.845085][ T7220] jffs2: notice: (7220) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 136.850840][ T7215] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 136.901644][ T7224] ubi0: attaching mtd0 [ 136.904206][ T7224] ubi0: scanning is finished [ 136.904275][ T7224] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 137.082076][ T7224] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 137.110480][ T7235] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 137.127319][ T25] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 137.258496][ T7245] netlink: 228 bytes leftover after parsing attributes in process `syz.2.475'. [ 137.479052][ T7255] evm: overlay not supported [ 137.505175][ T7255] Invalid argument reading file caps for ./file0 [ 137.528810][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.3.481'. [ 137.624837][ T7261] NILFS (nullb0): couldn't find nilfs on the device [ 137.634184][ T5719] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 137.779646][ T5719] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.779697][ T5719] usb 2-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice= 0.40 [ 137.780661][ T5719] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 137.780684][ T5719] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 137.780744][ T5719] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 137.783813][ T5719] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.783836][ T5719] usb 2-1: Product: syz [ 137.783850][ T5719] usb 2-1: Manufacturer: syz [ 137.783864][ T5719] usb 2-1: SerialNumber: syz [ 137.831067][ T7276] futex_wake_op: syz.3.488 tries to shift op by 144; fix this program [ 137.832972][ T7276] netlink: 'syz.3.488': attribute type 2 has an invalid length. [ 137.897107][ T7278] cifs: Unknown parameter 'ã÷ÃÓ­'Ä4,Zz-#FÇ<æõ]%gCžÊ [ 137.897107][ T7278] SÃȘØÈžZ§6ŸÂ' [ 137.986392][ T7280] netlink: 228 bytes leftover after parsing attributes in process `syz.2.489'. [ 138.018146][ T1218] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 138.118999][ T7251] can0: slcan on ttyprintk. [ 138.168902][ T1218] usb 1-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 138.174127][ T1218] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 138.174160][ T1218] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 138.179323][ T1218] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 138.179349][ T1218] usb 1-1: Product: syz [ 138.179363][ T1218] usb 1-1: Manufacturer: syz [ 138.221269][ T1218] mos7840 1-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 138.434526][ T1218] mos7840 ttyUSB0: probe with driver mos7840 failed with error -32 [ 138.626851][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.2.492'. [ 138.661486][ T5719] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 138.814023][ T5719] snd-usb-audio 2-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 138.830114][ T7250] can0 (unregistered): slcan off ttyprintk. [ 138.832514][ T5719] usb 2-1: USB disconnect, device number 30 [ 138.865933][ T7301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 138.866494][ T7301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.917955][ T5932] udevd[5932]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 139.337653][ T2246] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 139.508145][ T2246] usb 3-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 139.509165][ T2246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.509205][ T2246] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.509242][ T2246] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.513104][ T2246] usb 3-1: config 0 descriptor?? [ 139.614109][ T7349] netlink: 228 bytes leftover after parsing attributes in process `syz.1.498'. [ 139.835192][ T7356] netlink: 4 bytes leftover after parsing attributes in process `syz.3.501'. [ 139.915814][ T31] audit: type=1326 audit(1790090320.762:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7361 comm="syz.3.503" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa07cd9e159 code=0x0 [ 139.917013][ T4931] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 139.918566][ T7362] netlink: 12 bytes leftover after parsing attributes in process `syz.3.503'. [ 140.124641][ T2246] usbhid 3-1:0.0: can't add hid device: -32 [ 140.124710][ T2246] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 140.128956][ T7330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.129356][ T7330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.175638][ T5719] usb 3-1: USB disconnect, device number 30 [ 140.491191][ T7379] sctp: [Deprecated]: syz.1.509 (pid 7379) Use of int in max_burst socket option deprecated. [ 140.491191][ T7379] Use struct sctp_assoc_value instead [ 140.491918][ T7379] sctp: [Deprecated]: syz.1.509 (pid 7379) Use of int in max_burst socket option. [ 140.491918][ T7379] Use struct sctp_assoc_value instead [ 140.890021][ T5760] usb 1-1: USB disconnect, device number 24 [ 140.898522][ T5760] mos7840 1-1:1.0: device disconnected [ 141.110292][ T2246] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 141.269098][ T2246] usb 3-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 141.272066][ T2246] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.272089][ T2246] usb 3-1: Product: syz [ 141.272103][ T2246] usb 3-1: Manufacturer: syz [ 141.272123][ T2246] usb 3-1: SerialNumber: syz [ 141.387502][ T5719] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 141.537711][ T5719] usb 2-1: Using ep0 maxpacket: 16 [ 141.538380][ T5719] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 141.539435][ T5719] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.539476][ T5719] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 141.539498][ T5719] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 141.540355][ T5719] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 141.540374][ T5719] usb 2-1: Manufacturer: syz [ 141.543151][ T5719] usb 2-1: config 0 descriptor?? [ 141.679517][ T5760] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 141.751334][ T7398] FAULT_INJECTION: forcing a failure. [ 141.751334][ T7398] name failslab, interval 1, probability 0, space 0, times 0 [ 141.751410][ T7398] CPU: 0 UID: 0 PID: 7398 Comm: syz.1.518 Tainted: G L syzkaller #0 PREEMPT(full) [ 141.751438][ T7398] Tainted: [L]=SOFTLOCKUP [ 141.751446][ T7398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 141.751459][ T7398] Call Trace: [ 141.751467][ T7398] [ 141.751476][ T7398] dump_stack_lvl+0xe8/0x150 [ 141.751513][ T7398] should_fail_ex+0x3eb/0x540 [ 141.751541][ T7398] should_failslab+0xa8/0x100 [ 141.751566][ T7398] kmem_cache_alloc_lru_noprof+0xa2/0x5f0 [ 141.751597][ T7398] ? __d_alloc+0x37/0x6f0 [ 141.751623][ T7398] ? __d_alloc+0x37/0x6f0 [ 141.751656][ T7398] __d_alloc+0x37/0x6f0 [ 141.751683][ T7398] ? inode_set_ctime_to_ts+0x116/0x2e0 [ 141.751716][ T7398] d_alloc_pseudo+0x21/0xc0 [ 141.751746][ T7398] alloc_path_pseudo+0x107/0x220 [ 141.751772][ T7398] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 141.751794][ T7398] ? inode_set_ctime_current+0x287/0xb60 [ 141.751832][ T7398] alloc_file_pseudo+0xa8/0x1e0 [ 141.751855][ T7398] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 141.751881][ T7398] ? alloc_anon_inode+0x194/0x330 [ 141.751910][ T7398] aio_setup_ring+0x1eb/0xe20 [ 141.751949][ T7398] ? pcpu_alloc_noprof+0x1036/0x1900 [ 141.751977][ T7398] ? __pfx_aio_setup_ring+0x10/0x10 [ 141.752026][ T7398] ioctx_alloc+0x313/0x830 [ 141.752055][ T7398] ? __might_fault+0xaf/0x130 [ 141.752084][ T7398] __se_sys_io_setup+0x7b/0x1d0 [ 141.752114][ T7398] do_syscall_64+0x166/0x520 [ 141.752133][ T7398] ? trace_irq_disable+0x3b/0x140 [ 141.752161][ T7398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.752183][ T7398] ? clear_bhb_loop+0x70/0xc0 [ 141.752208][ T7398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.752229][ T7398] RIP: 0033:0x7f191eb9e159 [ 141.752256][ T7398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.752275][ T7398] RSP: 002b:00007f191fa41028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 141.752302][ T7398] RAX: ffffffffffffffda RBX: 00007f191ee25fa0 RCX: 00007f191eb9e159 [ 141.752317][ T7398] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 141.752331][ T7398] RBP: 00007f191ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 141.752344][ T7398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 141.752356][ T7398] R13: 00007f191ee26038 R14: 00007f191ee25fa0 R15: 00007ffd9356c958 [ 141.752389][ T7398] [ 141.754088][ T1218] usb 2-1: USB disconnect, device number 31 [ 141.809314][ T5760] usb 4-1: device descriptor read/64, error -71 [ 142.047526][ T5760] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 142.110133][ T2246] kalmia 3-1:1.0 wwan0: register 'kalmia' at usb-dummy_hcd.2-1, Samsung Kalmia LTE USB dongle, 02:00:00:00:00:01 [ 142.127582][ T6046] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 142.177972][ T5760] usb 4-1: device descriptor read/64, error -71 [ 142.279696][ T6046] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 142.280862][ T6046] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 142.280886][ T6046] usb 1-1: config 0 has no interface number 0 [ 142.280923][ T6046] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 142.280951][ T6046] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 142.280972][ T6046] usb 1-1: config 0 interface 113 has no altsetting 0 [ 142.284362][ T6046] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.284386][ T6046] usb 1-1: Product: syz [ 142.284400][ T6046] usb 1-1: Manufacturer: syz [ 142.284414][ T6046] usb 1-1: SerialNumber: syz [ 142.287921][ T5760] usb usb4-port1: attempt power cycle [ 142.299579][ T6046] usb 1-1: config 0 descriptor?? [ 142.320869][ C0] usb 1-1: NFC: Urb failure (status -71) [ 142.329548][ T6046] usb 1-1: NFC: Unable to get FW version [ 142.338363][ T6046] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 142.531127][ T6046] usb 1-1: USB disconnect, device number 25 [ 142.603536][ T7432] netlink: 'syz.1.524': attribute type 1 has an invalid length. [ 142.629789][ T5760] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 142.648702][ T7432] ovs-dp0: entered promiscuous mode [ 142.650116][ T5760] usb 4-1: device descriptor read/8, error -71 [ 142.888248][ T5760] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 142.908064][ T5760] usb 4-1: device descriptor read/8, error -71 [ 142.930019][ C1] kalmia 3-1:1.0 wwan0: Received unknown frame header: 00:00:00:00:00:00. Package length: 4 [ 142.976982][ T7450] __nla_validate_parse: 5 callbacks suppressed [ 142.977003][ T7450] netlink: 228 bytes leftover after parsing attributes in process `syz.1.528'. [ 143.023184][ T5760] usb usb4-port1: unable to enumerate USB device [ 143.224507][ T7457] loop7: detected capacity change from 0 to 16384 [ 143.305768][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.1.531'. [ 143.334004][ T2246] usb 3-1: USB disconnect, device number 31 [ 143.345655][ T2246] kalmia 3-1:1.0 wwan0: unregister 'kalmia' usb-dummy_hcd.2-1, Samsung Kalmia LTE USB dongle [ 143.357463][ C0] blk_print_req_error: 134 callbacks suppressed [ 143.357484][ C0] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 143.357609][ C0] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 143.357738][ C0] I/O error, dev loop7, sector 512 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 143.360496][ C0] I/O error, dev loop7, sector 16376 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 143.360586][ C0] buffer_io_error: 159 callbacks suppressed [ 143.360597][ C0] Buffer I/O error on dev loop7, logical block 2047, async page read [ 143.363580][ C0] I/O error, dev loop7, sector 256 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 143.363648][ C0] Buffer I/O error on dev loop7, logical block 32, async page read [ 143.363671][ C0] I/O error, dev loop7, sector 264 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 143.363724][ C0] Buffer I/O error on dev loop7, logical block 33, async page read [ 143.363742][ C0] I/O error, dev loop7, sector 272 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 143.363794][ C0] Buffer I/O error on dev loop7, logical block 34, async page read [ 143.363812][ C0] I/O error, dev loop7, sector 280 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 143.363863][ C0] Buffer I/O error on dev loop7, logical block 35, async page read [ 143.385582][ T7459] loop7: detected capacity change from 16384 to 0 [ 143.985116][ T7480] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 144.288026][ T987] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 144.443861][ T987] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 144.445109][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.445139][ T987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.445175][ T987] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.464359][ T987] usb 2-1: config 0 descriptor?? [ 144.494103][ T7503] netlink: 228 bytes leftover after parsing attributes in process `syz.3.538'. [ 144.629286][ T5760] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 144.779461][ T5760] usb 1-1: Using ep0 maxpacket: 16 [ 144.784012][ T5760] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 144.805129][ T5760] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.805178][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 144.805201][ T5760] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 144.806723][ T5760] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 144.806746][ T5760] usb 1-1: Manufacturer: syz [ 144.860516][ T5760] usb 1-1: config 0 descriptor?? [ 144.872496][ T7519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 144.891988][ T987] cp2112 0003:10C4:EA90.0005: item fetching failed at offset 3/7 [ 144.897200][ T987] cp2112 0003:10C4:EA90.0005: parse failed [ 144.897357][ T987] cp2112 0003:10C4:EA90.0005: probe with driver cp2112 failed with error -22 [ 144.928016][ T5719] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 145.078332][ T5719] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 145.079322][ T5719] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 145.079367][ T5719] usb 4-1: config 0 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 145.079393][ T5719] usb 4-1: config 0 interface 0 has no altsetting 0 [ 145.079425][ T5719] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.084646][ T5719] usb 4-1: config 0 descriptor?? [ 145.094466][ T5719] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 145.105162][ T5719] usb 2-1: USB disconnect, device number 32 [ 145.155344][ T7481] FAULT_INJECTION: forcing a failure. [ 145.155344][ T7481] name failslab, interval 1, probability 0, space 0, times 0 [ 145.155377][ T7481] CPU: 1 UID: 0 PID: 7481 Comm: syz.0.532 Tainted: G L syzkaller #0 PREEMPT(full) [ 145.155405][ T7481] Tainted: [L]=SOFTLOCKUP [ 145.155412][ T7481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 145.155425][ T7481] Call Trace: [ 145.155433][ T7481] [ 145.155441][ T7481] dump_stack_lvl+0xe8/0x150 [ 145.155474][ T7481] should_fail_ex+0x3eb/0x540 [ 145.155501][ T7481] should_failslab+0xa8/0x100 [ 145.155526][ T7481] __kmalloc_cache_noprof+0x9e/0x600 [ 145.155555][ T7481] ? percpu_ref_init+0xc5/0x350 [ 145.155573][ T7481] ? percpu_ref_init+0xc5/0x350 [ 145.155599][ T7481] ? __pfx_free_ioctx_reqs+0x10/0x10 [ 145.155626][ T7481] percpu_ref_init+0xc5/0x350 [ 145.155645][ T7481] ? __pfx_free_ioctx_users+0x10/0x10 [ 145.155675][ T7481] ioctx_alloc+0x23f/0x830 [ 145.155703][ T7481] ? __might_fault+0xaf/0x130 [ 145.155731][ T7481] __se_sys_io_setup+0x7b/0x1d0 [ 145.155759][ T7481] do_syscall_64+0x166/0x520 [ 145.155792][ T7481] ? trace_irq_disable+0x3b/0x140 [ 145.155820][ T7481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.155840][ T7481] ? clear_bhb_loop+0x70/0xc0 [ 145.155865][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.155885][ T7481] RIP: 0033:0x7f31a479e159 [ 145.155901][ T7481] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.155917][ T7481] RSP: 002b:00007f31a56a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 145.155939][ T7481] RAX: ffffffffffffffda RBX: 00007f31a4a25fa0 RCX: 00007f31a479e159 [ 145.155955][ T7481] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 145.155968][ T7481] RBP: 00007f31a483506b R08: 0000000000000000 R09: 0000000000000000 [ 145.155979][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.155994][ T7481] R13: 00007f31a4a26038 R14: 00007f31a4a25fa0 R15: 00007ffcfc97ab88 [ 145.156026][ T7481] [ 145.173685][ T987] usb 1-1: USB disconnect, device number 26 [ 145.226266][ T7527] netlink: 'syz.2.543': attribute type 10 has an invalid length. [ 146.005233][ T7561] netlink: 228 bytes leftover after parsing attributes in process `syz.2.547'. [ 146.033015][ T7556] sg_write: 55 callbacks suppressed [ 146.033033][ T7556] sg_write: data in/out 532444/136 bytes for SCSI command 0x0-- guessing data in; [ 146.033033][ T7556] program syz.1.546 not setting count and/or reply_len properly [ 146.060858][ T7556] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'. [ 146.174491][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.550'. [ 146.320531][ T7573] FAULT_INJECTION: forcing a failure. [ 146.320531][ T7573] name failslab, interval 1, probability 0, space 0, times 0 [ 146.320566][ T7573] CPU: 1 UID: 0 PID: 7573 Comm: syz.2.552 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.320595][ T7573] Tainted: [L]=SOFTLOCKUP [ 146.320601][ T7573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.320608][ T7573] Call Trace: [ 146.320614][ T7573] [ 146.320619][ T7573] dump_stack_lvl+0xe8/0x150 [ 146.320639][ T7573] should_fail_ex+0x3eb/0x540 [ 146.320654][ T7573] ? dup_task_struct+0x52/0xa00 [ 146.320667][ T7573] should_failslab+0xa8/0x100 [ 146.320680][ T7573] ? dup_task_struct+0x52/0xa00 [ 146.320691][ T7573] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 146.320708][ T7573] ? dup_task_struct+0x52/0xa00 [ 146.320722][ T7573] dup_task_struct+0x52/0xa00 [ 146.320738][ T7573] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.320757][ T7573] copy_process+0x81b/0x43e0 [ 146.320774][ T7573] ? __pfx___futex_wait+0x10/0x10 [ 146.320794][ T7573] ? try_to_wake_up+0x8c5/0x14d0 [ 146.320806][ T7573] ? __pfx_copy_process+0x10/0x10 [ 146.320824][ T7573] kernel_clone+0x2d7/0x940 [ 146.320839][ T7573] ? __pfx_kernel_clone+0x10/0x10 [ 146.320857][ T7573] ? do_futex+0x3e7/0x4e0 [ 146.320870][ T7573] __x64_sys_clone+0x1b6/0x230 [ 146.320885][ T7573] ? __pfx___x64_sys_clone+0x10/0x10 [ 146.320904][ T7573] ? __pfx___se_sys_futex+0x10/0x10 [ 146.320916][ T7573] ? __pfx_ksys_write+0x10/0x10 [ 146.320936][ T7573] do_syscall_64+0x166/0x520 [ 146.320945][ T7573] ? trace_irq_disable+0x3b/0x140 [ 146.320960][ T7573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.320971][ T7573] ? clear_bhb_loop+0x70/0xc0 [ 146.320984][ T7573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.320995][ T7573] RIP: 0033:0x7f6573b9e159 [ 146.321006][ T7573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.321015][ T7573] RSP: 002b:00007f6574b51fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 146.321028][ T7573] RAX: ffffffffffffffda RBX: 00007f6573e25fa0 RCX: 00007f6573b9e159 [ 146.321035][ T7573] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 146.321042][ T7573] RBP: 00007f6573c3506b R08: 0000000000000000 R09: 0000000000000000 [ 146.321048][ T7573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.321055][ T7573] R13: 00007f6573e26038 R14: 00007f6573e25fa0 R15: 00007ffe804fd6e8 [ 146.321070][ T7573] [ 146.561175][ T7578] FAULT_INJECTION: forcing a failure. [ 146.561175][ T7578] name failslab, interval 1, probability 0, space 0, times 0 [ 146.561208][ T7578] CPU: 1 UID: 0 PID: 7578 Comm: syz.2.553 Tainted: G L syzkaller #0 PREEMPT(full) [ 146.561242][ T7578] Tainted: [L]=SOFTLOCKUP [ 146.561249][ T7578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 146.561260][ T7578] Call Trace: [ 146.561267][ T7578] [ 146.561276][ T7578] dump_stack_lvl+0xe8/0x150 [ 146.561309][ T7578] should_fail_ex+0x3eb/0x540 [ 146.561335][ T7578] should_failslab+0xa8/0x100 [ 146.561355][ T7578] ? alloc_empty_file+0x5b/0x1d0 [ 146.561376][ T7578] kmem_cache_alloc_noprof+0x9c/0x600 [ 146.561404][ T7578] ? alloc_empty_file+0x5b/0x1d0 [ 146.561430][ T7578] alloc_empty_file+0x5b/0x1d0 [ 146.561451][ T7578] alloc_file_pseudo+0x110/0x1e0 [ 146.561474][ T7578] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 146.561497][ T7578] ? _raw_spin_unlock+0x28/0x50 [ 146.561521][ T7578] ? alloc_fd+0x651/0x6c0 [ 146.561547][ T7578] sock_alloc_file+0xb8/0x2e0 [ 146.561578][ T7578] ? __sys_socket+0x12b/0x1b0 [ 146.561607][ T7578] __sys_socket+0x13f/0x1b0 [ 146.561636][ T7578] __x64_sys_socket+0x7a/0x90 [ 146.561663][ T7578] do_syscall_64+0x166/0x520 [ 146.561681][ T7578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.561700][ T7578] ? clear_bhb_loop+0x70/0xc0 [ 146.561723][ T7578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.561742][ T7578] RIP: 0033:0x7f6573b9e159 [ 146.561759][ T7578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 146.561775][ T7578] RSP: 002b:00007f6574b31028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 146.561797][ T7578] RAX: ffffffffffffffda RBX: 00007f6573e26090 RCX: 00007f6573b9e159 [ 146.561811][ T7578] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000010 [ 146.561822][ T7578] RBP: 00007f6573c3506b R08: 0000000000000000 R09: 0000000000000000 [ 146.561835][ T7578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.561847][ T7578] R13: 00007f6573e26128 R14: 00007f6573e26090 R15: 00007ffe804fd6e8 [ 146.561876][ T7578] [ 147.662388][ T5719] usb 4-1: USB disconnect, device number 27 [ 147.899122][ T7597] netlink: 228 bytes leftover after parsing attributes in process `syz.1.559'. [ 147.993383][ T7599] FAULT_INJECTION: forcing a failure. [ 147.993383][ T7599] name failslab, interval 1, probability 0, space 0, times 0 [ 147.993419][ T7599] CPU: 1 UID: 0 PID: 7599 Comm: syz.0.560 Tainted: G L syzkaller #0 PREEMPT(full) [ 147.993448][ T7599] Tainted: [L]=SOFTLOCKUP [ 147.993455][ T7599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 147.993469][ T7599] Call Trace: [ 147.993476][ T7599] [ 147.993486][ T7599] dump_stack_lvl+0xe8/0x150 [ 147.993521][ T7599] should_fail_ex+0x3eb/0x540 [ 147.993549][ T7599] should_failslab+0xa8/0x100 [ 147.993572][ T7599] ? do_getname+0x2e/0x250 [ 147.993594][ T7599] kmem_cache_alloc_noprof+0x9c/0x600 [ 147.993621][ T7599] ? do_futex+0x3e7/0x4e0 [ 147.993644][ T7599] ? do_getname+0x2e/0x250 [ 147.993670][ T7599] do_getname+0x2e/0x250 [ 147.993690][ T7599] ? getname_flags+0x11/0x20 [ 147.993713][ T7599] do_sys_openat2+0xcc/0x200 [ 147.993734][ T7599] ? __se_sys_futex+0x3a8/0x450 [ 147.993755][ T7599] ? __pfx_do_sys_openat2+0x10/0x10 [ 147.993783][ T7599] ? rcu_is_watching+0x16/0xb0 [ 147.993807][ T7599] __x64_sys_openat+0x138/0x170 [ 147.993833][ T7599] do_syscall_64+0x166/0x520 [ 147.993851][ T7599] ? trace_irq_disable+0x3b/0x140 [ 147.993878][ T7599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.993898][ T7599] ? clear_bhb_loop+0x70/0xc0 [ 147.993921][ T7599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.993940][ T7599] RIP: 0033:0x7f31a475e98e [ 147.993959][ T7599] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 147.993976][ T7599] RSP: 002b:00007f31a56a6ec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 147.994004][ T7599] RAX: ffffffffffffffda RBX: 00007f31a56a76c0 RCX: 00007f31a475e98e [ 147.994020][ T7599] RDX: 0000000000000002 RSI: 00007f31a56a6f90 RDI: ffffffffffffff9c [ 147.994035][ T7599] RBP: 00007f31a483506b R08: 0000000000000000 R09: 0000000000000000 [ 147.994048][ T7599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.994060][ T7599] R13: 00007f31a4a26038 R14: 00007f31a4a25fa0 R15: 00007ffcfc97ab88 [ 147.994103][ T7599] [ 148.221640][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.562'. [ 148.285134][ T7603] FAULT_INJECTION: forcing a failure. [ 148.285134][ T7603] name failslab, interval 1, probability 0, space 0, times 0 [ 148.285169][ T7603] CPU: 1 UID: 0 PID: 7603 Comm: syz.1.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.285196][ T7603] Tainted: [L]=SOFTLOCKUP [ 148.285204][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.285216][ T7603] Call Trace: [ 148.285224][ T7603] [ 148.285233][ T7603] dump_stack_lvl+0xe8/0x150 [ 148.285264][ T7603] should_fail_ex+0x3eb/0x540 [ 148.285291][ T7603] should_failslab+0xa8/0x100 [ 148.285316][ T7603] __kmalloc_cache_node_noprof+0xa5/0x620 [ 148.285349][ T7603] ? __get_vm_area_node+0x155/0x2f0 [ 148.285372][ T7603] ? __get_vm_area_node+0x155/0x2f0 [ 148.285403][ T7603] __get_vm_area_node+0x155/0x2f0 [ 148.285426][ T7603] ? lock_acquire+0x115/0x350 [ 148.285458][ T7603] __vmalloc_node_range_noprof+0x340/0x1690 [ 148.285486][ T7603] ? copy_process+0x81b/0x43e0 [ 148.285542][ T7603] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.285569][ T7603] ? dup_task_struct+0x52/0xa00 [ 148.285587][ T7603] ? trace_kmem_cache_alloc+0x29/0xe0 [ 148.285612][ T7603] ? memcpy_and_pad+0x48/0x80 [ 148.285643][ T7603] __vmalloc_node_noprof+0xc2/0x100 [ 148.285669][ T7603] ? copy_process+0x81b/0x43e0 [ 148.285690][ T7603] ? copy_process+0x81b/0x43e0 [ 148.285712][ T7603] dup_task_struct+0x2c6/0xa00 [ 148.285739][ T7603] copy_process+0x81b/0x43e0 [ 148.285769][ T7603] ? preempt_schedule_thunk+0x16/0x40 [ 148.285802][ T7603] ? preempt_schedule_common+0x7f/0xd0 [ 148.285840][ T7603] ? try_to_wake_up+0x901/0x14d0 [ 148.285863][ T7603] ? __pfx_copy_process+0x10/0x10 [ 148.285888][ T7603] ? futex_private_hash_put+0x132/0x160 [ 148.285926][ T7603] kernel_clone+0x2d7/0x940 [ 148.285949][ T7603] ? __pfx_futex_wake+0x10/0x10 [ 148.285978][ T7603] ? __pfx_kernel_clone+0x10/0x10 [ 148.286011][ T7603] ? do_futex+0x458/0x4e0 [ 148.286038][ T7603] __x64_sys_clone+0x1b6/0x230 [ 148.286074][ T7603] ? __pfx___x64_sys_clone+0x10/0x10 [ 148.286114][ T7603] ? rcu_is_watching+0x16/0xb0 [ 148.286145][ T7603] do_syscall_64+0x166/0x520 [ 148.286163][ T7603] ? trace_irq_disable+0x3b/0x140 [ 148.286191][ T7603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.286211][ T7603] ? clear_bhb_loop+0x70/0xc0 [ 148.286235][ T7603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.286256][ T7603] RIP: 0033:0x7f191eb9e159 [ 148.286276][ T7603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.286293][ T7603] RSP: 002b:00007f191fa40fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 148.286315][ T7603] RAX: ffffffffffffffda RBX: 00007f191ee25fa0 RCX: 00007f191eb9e159 [ 148.286330][ T7603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.286343][ T7603] RBP: 00007f191ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 148.286356][ T7603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.286369][ T7603] R13: 00007f191ee26038 R14: 00007f191ee25fa0 R15: 00007ffd9356c958 [ 148.286399][ T7603] [ 148.307566][ T7603] syz.1.561: vmalloc error: size 32768, align 0x8000, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 148.307853][ T7603] CPU: 1 UID: 0 PID: 7603 Comm: syz.1.561 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.307881][ T7603] Tainted: [L]=SOFTLOCKUP [ 148.307887][ T7603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.307900][ T7603] Call Trace: [ 148.307908][ T7603] [ 148.307915][ T7603] dump_stack_lvl+0xe8/0x150 [ 148.307947][ T7603] warn_alloc+0x24d/0x270 [ 148.307978][ T7603] ? __kasan_kmalloc+0x22/0xb0 [ 148.308001][ T7603] ? __pfx_warn_alloc+0x10/0x10 [ 148.308026][ T7603] ? __get_vm_area_node+0x155/0x2f0 [ 148.308065][ T7603] ? __get_vm_area_node+0x2a9/0x2f0 [ 148.308087][ T7603] ? lock_acquire+0x115/0x350 [ 148.308121][ T7603] __vmalloc_node_range_noprof+0x368/0x1690 [ 148.308175][ T7603] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 148.308201][ T7603] ? dup_task_struct+0x52/0xa00 [ 148.308222][ T7603] ? trace_kmem_cache_alloc+0x29/0xe0 [ 148.308248][ T7603] ? memcpy_and_pad+0x48/0x80 [ 148.308280][ T7603] __vmalloc_node_noprof+0xc2/0x100 [ 148.308305][ T7603] ? copy_process+0x81b/0x43e0 [ 148.308324][ T7603] ? copy_process+0x81b/0x43e0 [ 148.308347][ T7603] dup_task_struct+0x2c6/0xa00 [ 148.308374][ T7603] copy_process+0x81b/0x43e0 [ 148.308402][ T7603] ? preempt_schedule_thunk+0x16/0x40 [ 148.308433][ T7603] ? preempt_schedule_common+0x7f/0xd0 [ 148.308470][ T7603] ? try_to_wake_up+0x901/0x14d0 [ 148.308491][ T7603] ? __pfx_copy_process+0x10/0x10 [ 148.308515][ T7603] ? futex_private_hash_put+0x132/0x160 [ 148.308550][ T7603] kernel_clone+0x2d7/0x940 [ 148.308573][ T7603] ? __pfx_futex_wake+0x10/0x10 [ 148.308600][ T7603] ? __pfx_kernel_clone+0x10/0x10 [ 148.308632][ T7603] ? do_futex+0x458/0x4e0 [ 148.308657][ T7603] __x64_sys_clone+0x1b6/0x230 [ 148.308683][ T7603] ? __pfx___x64_sys_clone+0x10/0x10 [ 148.308720][ T7603] ? rcu_is_watching+0x16/0xb0 [ 148.308749][ T7603] do_syscall_64+0x166/0x520 [ 148.308766][ T7603] ? trace_irq_disable+0x3b/0x140 [ 148.308793][ T7603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.308813][ T7603] ? clear_bhb_loop+0x70/0xc0 [ 148.308836][ T7603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.308855][ T7603] RIP: 0033:0x7f191eb9e159 [ 148.308874][ T7603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.308891][ T7603] RSP: 002b:00007f191fa40fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 148.308911][ T7603] RAX: ffffffffffffffda RBX: 00007f191ee25fa0 RCX: 00007f191eb9e159 [ 148.308925][ T7603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 148.308937][ T7603] RBP: 00007f191ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 148.308949][ T7603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.308961][ T7603] R13: 00007f191ee26038 R14: 00007f191ee25fa0 R15: 00007ffd9356c958 [ 148.308990][ T7603] [ 148.317829][ T7603] Mem-Info: [ 148.317842][ T7603] active_anon:27389 inactive_anon:2 isolated_anon:0 [ 148.317842][ T7603] active_file:0 inactive_file:55956 isolated_file:0 [ 148.317842][ T7603] unevictable:0 dirty:63 writeback:0 [ 148.317842][ T7603] slab_reclaimable:10257 slab_unreclaimable:93689 [ 148.317842][ T7603] mapped:28032 shmem:21748 pagetables:1177 [ 148.317842][ T7603] sec_pagetables:0 bounce:0 [ 148.317842][ T7603] kernel_misc_reclaimable:0 [ 148.317842][ T7603] free:1305554 free_pcp:9534 free_cma:0 [ 148.317908][ T7603] Node 0 active_anon:109556kB inactive_anon:8kB active_file:0kB inactive_file:223620kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:112128kB dirty:252kB writeback:0kB shmem:86992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12016kB pagetables:4576kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 148.317965][ T7603] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 148.318029][ T7603] Node 0 DMA free:15356kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 148.318097][ T7603] lowmem_reserve[]: 0 2482 2483 2483 2483 [ 148.318132][ T7603] Node 0 DMA32 free:1269972kB boost:0kB min:34092kB low:42612kB high:51132kB reserved_highatomic:0kB free_highatomic:0kB active_anon:109556kB inactive_anon:8kB active_file:0kB inactive_file:223620kB unevictable:0kB writepending:252kB zspages:0kB present:3129332kB managed:2541832kB mlocked:0kB bounce:0kB free_pcp:32660kB local_pcp:20448kB free_cma:0kB [ 148.318192][ T7603] lowmem_reserve[]: 0 0 1 1 1 [ 148.318224][ T7603] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1692kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 148.318279][ T7603] lowmem_reserve[]: 0 0 0 0 0 [ 148.318312][ T7603] Node 1 Normal free:3936888kB boost:0kB min:55784kB low:69728kB high:83672kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5472kB local_pcp:0kB free_cma:0kB [ 148.318369][ T7603] lowmem_reserve[]: 0 0 0 0 0 [ 148.318401][ T7603] Node 0 DMA: 1*4kB (U) 1*8kB (U) 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15356kB [ 148.318550][ T7603] Node 0 DMA32: 2*4kB (UE) 9*8kB (UE) 59*16kB (UME) 300*32kB (UME) 206*64kB (UME) 61*128kB (ME) 37*256kB (ME) 10*512kB (ME) 3*1024kB (UM) 2*2048kB (ME) 297*4096kB (M) = 1269888kB [ 148.318700][ T7603] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 148.318794][ T7603] Node 1 Normal: 8*4kB (UM) 9*8kB (UM) 9*16kB (UM) 8*32kB (UM) 10*64kB (UM) 4*128kB (UM) 2*256kB (UM) 3*512kB (UM) 1*1024kB (U) 2*2048kB (U) 959*4096kB (M) = 3936888kB [ 148.318947][ T7603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.318964][ T7603] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.318980][ T7603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 148.318995][ T7603] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 148.319010][ T7603] 77700 total pagecache pages [ 148.319022][ T7603] 0 pages in swap cache [ 148.319028][ T7603] Free swap = 124996kB [ 148.319036][ T7603] Total swap = 124996kB [ 148.319044][ T7603] 2097051 pages RAM [ 148.319056][ T7603] 0 pages HighMem/MovableOnly [ 148.319063][ T7603] 429554 pages reserved [ 148.319070][ T7603] 0 pages cma reserved [ 148.477518][ T5691] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 148.563331][ T2246] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 148.629205][ T5691] usb 4-1: Using ep0 maxpacket: 16 [ 148.630778][ T5691] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 148.632406][ T5691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 148.632449][ T5691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 148.632470][ T5691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 148.636708][ T5691] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 148.636731][ T5691] usb 4-1: Manufacturer: syz [ 148.652567][ T5691] usb 4-1: config 0 descriptor?? [ 148.759621][ T2246] usb 1-1: device descriptor read/64, error -71 [ 148.903667][ T7615] FAULT_INJECTION: forcing a failure. [ 148.903667][ T7615] name failslab, interval 1, probability 0, space 0, times 0 [ 148.903700][ T7615] CPU: 1 UID: 0 PID: 7615 Comm: syz.1.567 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.903730][ T7615] Tainted: [L]=SOFTLOCKUP [ 148.903738][ T7615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.903750][ T7615] Call Trace: [ 148.903758][ T7615] [ 148.903766][ T7615] dump_stack_lvl+0xe8/0x150 [ 148.903797][ T7615] should_fail_ex+0x3eb/0x540 [ 148.903825][ T7615] should_failslab+0xa8/0x100 [ 148.903849][ T7615] __kmalloc_noprof+0xf9/0x710 [ 148.903874][ T7615] ? rcu_is_watching+0x16/0xb0 [ 148.903896][ T7615] ? tomoyo_realpath_from_path+0xef/0x640 [ 148.903920][ T7615] ? tomoyo_realpath_from_path+0xef/0x640 [ 148.903951][ T7615] tomoyo_realpath_from_path+0xef/0x640 [ 148.903992][ T7615] ? tomoyo_path_number_perm+0x219/0x5f0 [ 148.904013][ T7615] tomoyo_path_number_perm+0x246/0x5f0 [ 148.904036][ T7615] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 148.904056][ T7615] ? __lock_acquire+0x747/0x2de0 [ 148.904098][ T7615] ? hook_file_ioctl+0x1f2/0x600 [ 148.904137][ T7615] ? __fget_files+0x2a/0x420 [ 148.904164][ T7615] ? __fget_files+0x2a/0x420 [ 148.904186][ T7615] ? __fget_files+0x3a2/0x420 [ 148.904208][ T7615] ? __fget_files+0x2a/0x420 [ 148.904236][ T7615] security_file_ioctl+0xc3/0x2a0 [ 148.904267][ T7615] __se_sys_ioctl+0x47/0x170 [ 148.904298][ T7615] do_syscall_64+0x166/0x520 [ 148.904316][ T7615] ? trace_irq_disable+0x3b/0x140 [ 148.904343][ T7615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.904363][ T7615] ? clear_bhb_loop+0x70/0xc0 [ 148.904386][ T7615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.904406][ T7615] RIP: 0033:0x7f191eb9e159 [ 148.904424][ T7615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.904442][ T7615] RSP: 002b:00007f191fa41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.904463][ T7615] RAX: ffffffffffffffda RBX: 00007f191ee25fa0 RCX: 00007f191eb9e159 [ 148.904477][ T7615] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003 [ 148.904489][ T7615] RBP: 00007f191ec3506b R08: 0000000000000000 R09: 0000000000000000 [ 148.904501][ T7615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.904513][ T7615] R13: 00007f191ee26038 R14: 00007f191ee25fa0 R15: 00007ffd9356c958 [ 148.904543][ T7615] [ 148.906196][ T7615] ERROR: Out of memory at tomoyo_realpath_from_path. [ 148.925645][ T7591] FAULT_INJECTION: forcing a failure. [ 148.925645][ T7591] name failslab, interval 1, probability 0, space 0, times 0 [ 148.925679][ T7591] CPU: 1 UID: 0 PID: 7591 Comm: syz.3.557 Tainted: G L syzkaller #0 PREEMPT(full) [ 148.925706][ T7591] Tainted: [L]=SOFTLOCKUP [ 148.925713][ T7591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.925725][ T7591] Call Trace: [ 148.925732][ T7591] [ 148.925740][ T7591] dump_stack_lvl+0xe8/0x150 [ 148.925772][ T7591] should_fail_ex+0x3eb/0x540 [ 148.925799][ T7591] should_failslab+0xa8/0x100 [ 148.925823][ T7591] __kmalloc_noprof+0xf9/0x710 [ 148.925851][ T7591] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 148.925880][ T7591] ? __memcg_list_lru_alloc+0x1d9/0x760 [ 148.925915][ T7591] __memcg_list_lru_alloc+0x1d9/0x760 [ 148.925943][ T7591] ? xa_load+0x60/0x210 [ 148.925970][ T7591] ? __pfx___memcg_list_lru_alloc+0x10/0x10 [ 148.926012][ T7591] ? xa_load+0x60/0x210 [ 148.926046][ T7591] __memcg_slab_post_alloc_hook+0x3c3/0xd90 [ 148.926078][ T7591] ? __memcg_slab_post_alloc_hook+0x202/0xd90 [ 148.926121][ T7591] kmem_cache_alloc_lru_noprof+0x34c/0x5f0 [ 148.926149][ T7591] ? kmem_cache_alloc_lru_noprof+0x14e/0x5f0 [ 148.926174][ T7591] ? aio_alloc_inode+0x2a/0x80 [ 148.926202][ T7591] ? aio_alloc_inode+0x2a/0x80 [ 148.926232][ T7591] ? __pfx_aio_alloc_inode+0x10/0x10 [ 148.926259][ T7591] aio_alloc_inode+0x2a/0x80 [ 148.926287][ T7591] alloc_inode+0x6a/0x1b0 [ 148.926311][ T7591] alloc_anon_inode+0x1e/0x330 [ 148.926339][ T7591] aio_setup_ring+0x104/0xe20 [ 148.926370][ T7591] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 148.926399][ T7591] ? pcpu_alloc_noprof+0x1036/0x1900 [ 148.926426][ T7591] ? __pfx_aio_setup_ring+0x10/0x10 [ 148.926465][ T7591] ioctx_alloc+0x313/0x830 [ 148.926489][ T7591] ? __might_fault+0xaf/0x130 [ 148.926521][ T7591] __se_sys_io_setup+0x7b/0x1d0 [ 148.926551][ T7591] do_syscall_64+0x166/0x520 [ 148.926569][ T7591] ? trace_irq_disable+0x3b/0x140 [ 148.926596][ T7591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.926616][ T7591] ? clear_bhb_loop+0x70/0xc0 [ 148.926640][ T7591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.926659][ T7591] RIP: 0033:0x7fa07cd9e159 [ 148.926676][ T7591] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.926694][ T7591] RSP: 002b:00007fa07dd4a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 148.926715][ T7591] RAX: ffffffffffffffda RBX: 00007fa07d025fa0 RCX: 00007fa07cd9e159 [ 148.926730][ T7591] RDX: 0000000000000000 RSI: 0000200000001380 RDI: 0000000000000006 [ 148.926742][ T7591] RBP: 00007fa07ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 148.926754][ T7591] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.926767][ T7591] R13: 00007fa07d026038 R14: 00007fa07d025fa0 R15: 00007ffcd6447628 [ 148.926797][ T7591] [ 148.947142][ T5691] usb 4-1: USB disconnect, device number 28 [ 148.994240][ T7615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 149.122540][ T2246] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 149.357572][ T2246] usb 1-1: device descriptor read/64, error -71 [ 149.472223][ T2246] usb usb1-port1: attempt power cycle [ 149.949751][ T2246] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 149.969338][ T2246] usb 1-1: device descriptor read/8, error -71 [ 150.217539][ T2246] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 150.238875][ T2246] usb 1-1: device descriptor read/8, error -71 [ 150.282666][ T7626] netlink: 228 bytes leftover after parsing attributes in process `syz.3.571'. [ 150.348833][ T2246] usb usb1-port1: unable to enumerate USB device [ 150.474499][ T7628] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 151.519443][ T7632] FAULT_INJECTION: forcing a failure. [ 151.519443][ T7632] name failslab, interval 1, probability 0, space 0, times 0 [ 151.519477][ T7632] CPU: 0 UID: 0 PID: 7632 Comm: syz.3.574 Tainted: G L syzkaller #0 PREEMPT(full) [ 151.519505][ T7632] Tainted: [L]=SOFTLOCKUP [ 151.519513][ T7632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 151.519524][ T7632] Call Trace: [ 151.519533][ T7632] [ 151.519541][ T7632] dump_stack_lvl+0xe8/0x150 [ 151.519573][ T7632] should_fail_ex+0x3eb/0x540 [ 151.519598][ T7632] ? dup_task_struct+0x52/0xa00 [ 151.519621][ T7632] should_failslab+0xa8/0x100 [ 151.519644][ T7632] ? dup_task_struct+0x52/0xa00 [ 151.519664][ T7632] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 151.519696][ T7632] ? dup_task_struct+0x52/0xa00 [ 151.519723][ T7632] dup_task_struct+0x52/0xa00 [ 151.519747][ T7632] ? _raw_spin_unlock_irq+0x23/0x50 [ 151.519784][ T7632] copy_process+0x81b/0x43e0 [ 151.519815][ T7632] ? __pfx___futex_wait+0x10/0x10 [ 151.519854][ T7632] ? try_to_wake_up+0x8c5/0x14d0 [ 151.519877][ T7632] ? __pfx_copy_process+0x10/0x10 [ 151.519911][ T7632] kernel_clone+0x2d7/0x940 [ 151.519952][ T7632] ? __pfx_kernel_clone+0x10/0x10 [ 151.519986][ T7632] ? do_futex+0x3e7/0x4e0 [ 151.520013][ T7632] __x64_sys_clone+0x1b6/0x230 [ 151.520041][ T7632] ? __pfx___x64_sys_clone+0x10/0x10 [ 151.520079][ T7632] ? rcu_is_watching+0x16/0xb0 [ 151.520111][ T7632] do_syscall_64+0x166/0x520 [ 151.520130][ T7632] ? trace_irq_disable+0x3b/0x140 [ 151.520157][ T7632] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.520178][ T7632] ? clear_bhb_loop+0x70/0xc0 [ 151.520202][ T7632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.520222][ T7632] RIP: 0033:0x7fa07cd9e159 [ 151.520240][ T7632] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.520257][ T7632] RSP: 002b:00007fa07dd49fd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 151.520278][ T7632] RAX: ffffffffffffffda RBX: 00007fa07d025fa0 RCX: 00007fa07cd9e159 [ 151.520292][ T7632] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 151.520304][ T7632] RBP: 00007fa07ce3506b R08: 0000000000000000 R09: 0000000000000000 [ 151.520315][ T7632] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.520327][ T7632] R13: 00007fa07d026038 R14: 00007fa07d025fa0 R15: 00007ffcd6447628 [ 151.520355][ T7632] [ 152.000774][ T7641] netlink: 68 bytes leftover after parsing attributes in process `syz.3.577'. [ 152.288037][ T2246] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 152.438194][ T2246] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 152.439186][ T2246] usb 1-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 152.439216][ T2246] usb 1-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 152.439242][ T2246] usb 1-1: config 0 interface 0 has no altsetting 0 [ 152.439274][ T2246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.442075][ T2246] usb 1-1: config 0 descriptor?? [ 152.847105][ T2246] hid (null): usage index exceeded [ 152.847127][ T2246] hid (null): usage index exceeded [ 152.856007][ T2246] hid-multitouch 0003:0EEF:72C4.0006: ignoring exceeding usage max [ 152.857126][ T2246] hid-multitouch 0003:0EEF:72C4.0006: ignoring exceeding usage max [ 152.857143][ T2246] hid-multitouch 0003:0EEF:72C4.0006: usage index exceeded [ 152.857156][ T2246] hid-multitouch 0003:0EEF:72C4.0006: item 0 1 2 2 parsing failed [ 152.867989][ T2246] hid-multitouch 0003:0EEF:72C4.0006: probe with driver hid-multitouch failed with error -22 [ 153.054639][ T7643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.055271][ T7643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.058451][ T2246] usb 1-1: USB disconnect, device number 31 [ 162.426464][ T5616] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 162.441216][ T5616] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.447541][ T987] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 162.456757][ T5616] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.464680][ T5616] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.465273][ T5616] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 162.522340][ T7657] netlink: 228 bytes leftover after parsing attributes in process `syz.3.580'. [ 162.599116][ T987] usb 1-1: Using ep0 maxpacket: 16 [ 162.599810][ T987] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 162.600906][ T987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 162.600932][ T987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 162.605338][ T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.605361][ T987] usb 1-1: Product: syz [ 162.605374][ T987] usb 1-1: Manufacturer: syz [ 162.605388][ T987] usb 1-1: SerialNumber: syz [ 162.615485][ T987] usb 1-1: config 0 descriptor?? [ 162.843862][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 162.885898][ T987] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14 [ 162.964503][ T987] imon:send_packet: packet tx failed (-71) [ 162.979858][ T987] imon 1-1:0.0: panel buttons/knobs setup failed [ 163.014220][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.582'. [ 163.019955][ T44] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.118719][ T987] rc_core: IR keymap rc-imon-pad not found [ 163.118737][ T987] Registered IR keymap rc-empty [ 163.118811][ T987] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 163.118828][ T987] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 163.130394][ T987] imon:send_packet: packet tx failed (-71) [ 163.152765][ T987] imon 1-1:0.0: remote input dev register failed [ 163.154282][ T987] imon 1-1:0.0: imon_init_intf0: rc device setup failed [ 163.188547][ T44] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.280418][ T987] imon 1-1:0.0: unable to initialize intf0, err 0 [ 163.280439][ T987] imon:imon_probe: failed to initialize context! [ 163.280451][ T987] imon 1-1:0.0: unable to register, err -19 [ 163.286718][ T987] usb 1-1: USB disconnect, device number 32 [ 163.361538][ T44] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.461349][ T44] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.497514][ T5691] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 163.577518][ T987] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 163.653069][ T5691] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 163.669546][ T5691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.669587][ T5691] usb 4-1: Product: syz [ 163.669601][ T5691] usb 4-1: Manufacturer: syz [ 163.669615][ T5691] usb 4-1: SerialNumber: syz [ 163.727664][ T987] usb 1-1: Using ep0 maxpacket: 16 [ 163.728421][ T987] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 163.729752][ T987] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 163.729784][ T987] usb 1-1: config 0 interface 0 has no altsetting 0 [ 163.738890][ T987] usb 1-1: string descriptor 0 read error: -22 [ 163.739039][ T987] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.774193][ T987] usb 1-1: config 0 descriptor?? [ 163.824776][ T987] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input16 [ 164.107454][ T987] rc_core: IR keymap rc-imon-pad not found [ 164.107495][ T987] Registered IR keymap rc-empty [ 164.107568][ T987] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 164.107586][ T987] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 164.107829][ T5691] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 164.107882][ T5691] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPROTO [ 164.114029][ T5691] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 164.114108][ T5691] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 164.142719][ T5691] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 164.176501][ T5691] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 164.211442][ T5691] usb 4-1: USB disconnect, device number 29 [ 164.242536][ T987] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 164.279693][ T987] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 164.288844][ T987] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:33> initialized [ 164.386790][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.401469][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.406977][ T44] bond0 (unregistering): Released all slaves [ 164.568301][ T4931] Bluetooth: hci4: command tx timeout [ 164.617304][ C1] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 164.619121][ T5691] usb 1-1: USB disconnect, device number 33 [ 165.005349][ T7654] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.007016][ T7654] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.007156][ T7654] bridge_slave_0: entered allmulticast mode [ 165.011571][ T7654] bridge_slave_0: entered promiscuous mode [ 165.021169][ T7654] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.021266][ T7654] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.021394][ T7654] bridge_slave_1: entered allmulticast mode [ 165.027599][ T7654] bridge_slave_1: entered promiscuous mode [ 165.128819][ T1218] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 165.231196][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 165.248608][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 165.251033][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 165.256933][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 165.257558][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 165.298224][ T1218] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 165.299682][ T1218] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.326862][ T1218] usb 4-1: config 0 descriptor?? [ 165.389902][ T44] hsr_slave_0: left promiscuous mode [ 165.390679][ T44] hsr_slave_1: left promiscuous mode [ 165.406623][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.406658][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.425329][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.425351][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.482287][ T44] veth1_macvtap: left promiscuous mode [ 165.482350][ T44] veth0_macvtap: left promiscuous mode [ 165.495369][ T7705] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 165.543672][ T1218] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 165.733471][ T44] team0 (unregistering): Port device team_slave_1 removed [ 165.748900][ T44] team0 (unregistering): Port device team_slave_0 removed [ 165.787462][ T1218] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 1 [ 165.787487][ T1218] [drm] Initialized udl on minor 1 [ 165.899968][ T5277] 8021q: adding VLAN 0 to HW filter on device eth1 [ 165.911014][ T7654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.965744][ T7654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.040723][ T7654] team0: Port device team_slave_0 added [ 166.059837][ T7654] team0: Port device team_slave_1 added [ 166.122736][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.122755][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.122780][ T7654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.127368][ T7654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.129907][ T7654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.129937][ T7654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.316040][ T7654] hsr_slave_0: entered promiscuous mode [ 166.317133][ T7654] hsr_slave_1: entered promiscuous mode [ 166.319242][ T7654] debugfs: 'hsr0' already exists in 'hsr' [ 166.319262][ T7654] Cannot create hsr debugfs directory [ 166.605668][ T44] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.650378][ T4931] Bluetooth: hci4: command tx timeout [ 166.850551][ T44] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.960642][ T44] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.000314][ T5277] 8021q: adding VLAN 0 to HW filter on device eth2 [ 167.052242][ T44] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.369227][ T4931] Bluetooth: hci1: command tx timeout [ 167.461268][ T7654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.489044][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.535349][ T7654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.560579][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.580522][ T7654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.598702][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.601439][ T7654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 167.622536][ T7654] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.637675][ T2246] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 167.798826][ T2246] usb 1-1: New USB device found, idVendor=1235, idProduct=8215, bcdDevice= 0.40 [ 167.810009][ T2246] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.810033][ T2246] usb 1-1: Product: syz [ 167.810046][ T2246] usb 1-1: Manufacturer: syz [ 167.810060][ T2246] usb 1-1: SerialNumber: syz [ 167.954367][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.956998][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.976150][ T44] bond0 (unregistering): Released all slaves [ 168.048885][ T2246] usb 1-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8215); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 168.048964][ T2246] usb 1-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 168.084385][ T44] ovs-dp0: left promiscuous mode [ 168.115429][ T5277] 8021q: adding VLAN 0 to HW filter on device eth3 [ 168.145942][ T2246] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 168.166889][ T7700] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.166989][ T7700] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.167111][ T7700] bridge_slave_0: entered allmulticast mode [ 168.172532][ T7700] bridge_slave_0: entered promiscuous mode [ 168.184462][ T7700] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.184590][ T7700] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.184704][ T7700] bridge_slave_1: entered allmulticast mode [ 168.186696][ T7700] bridge_slave_1: entered promiscuous mode [ 168.224243][ T7700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.250916][ T2246] usb 1-1: USB disconnect, device number 34 [ 168.252570][ T7700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.298786][ T7651] udevd[7651]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 168.369825][ T7700] team0: Port device team_slave_0 added [ 168.390363][ T7700] team0: Port device team_slave_1 added [ 168.448856][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.448897][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.448923][ T7700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.456689][ T7700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.456705][ T7700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.456732][ T7700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.674487][ T44] hsr_slave_0: left promiscuous mode [ 168.675231][ T44] hsr_slave_1: left promiscuous mode [ 168.676087][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.676107][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.678514][ T44] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.678533][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.724297][ T7783] netlink: 228 bytes leftover after parsing attributes in process `syz.0.592'. [ 168.727597][ T4931] Bluetooth: hci4: command tx timeout [ 168.742099][ T44] veth1_macvtap: left promiscuous mode [ 168.742135][ T44] veth0_macvtap: left promiscuous mode [ 168.742234][ T44] veth1_vlan: left promiscuous mode [ 168.742335][ T44] veth0_vlan: left promiscuous mode [ 168.896233][ T7788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 169.085971][ T44] team0 (unregistering): Port device team_slave_1 removed [ 169.100128][ T44] team0 (unregistering): Port device team_slave_0 removed [ 169.233958][ T5277] 8021q: adding VLAN 0 to HW filter on device eth4 [ 169.320072][ T7654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.382338][ T7792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.594'. [ 169.395271][ T7700] hsr_slave_0: entered promiscuous mode [ 169.396207][ T7700] hsr_slave_1: entered promiscuous mode [ 169.440835][ T7792] usb usb8: usbfs: process 7792 (syz.0.594) did not claim interface 0 before use [ 169.453555][ T4931] Bluetooth: hci1: command tx timeout [ 169.502990][ T7654] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.553123][ T6058] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.553228][ T6058] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.591705][ T6058] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.591808][ T6058] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.822978][ T7801] netlink: 64 bytes leftover after parsing attributes in process `syz.0.596'. [ 169.925873][ T7700] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 169.940245][ T7700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 169.941422][ T7700] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 169.949234][ T7700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 169.972213][ T7700] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 169.990159][ T7700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 169.994212][ T7700] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 170.011322][ T7700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 170.107487][ T5760] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 170.181366][ T7700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.223308][ T7700] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.237458][ T6056] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.237555][ T6056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.265661][ T44] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.265767][ T44] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.283977][ T5760] usb 1-1: New USB device found, idVendor=2040, idProduct=5500, bcdDevice=4d.8b [ 170.285164][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 170.285190][ T5760] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 170.285237][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 205, changing to 7 [ 170.285262][ T5760] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 16586, setting to 1024 [ 170.285302][ T5760] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.350210][ T7700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 170.350235][ T7700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.351938][ T5760] usb 1-1: config 0 descriptor?? [ 170.387891][ T5760] smsusb:smsusb_probe: board id=8, interface number 0 [ 170.393694][ T5760] smsusb:siano_media_device_register: media controller created [ 170.413838][ T5760] smsusb:smsusb_start_streaming: smsusb_submit_urb(...) failed [ 170.413867][ T5760] smsusb:smsusb_init_device: smsusb_start_streaming(...) failed [ 170.436532][ T5760] ------------[ cut here ]------------ [ 170.436546][ T5760] !PageLargeKmalloc(page) [ 170.436559][ T5760] WARNING: mm/slub.c:6730 at free_large_kmalloc+0x97/0x110, CPU#0: kworker/0:4/5760 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 170.455984][ T5760] Modules linked in: [ 170.459961][ T5760] CPU: 0 UID: 0 PID: 5760 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.470997][ T5760] Tainted: [L]=SOFTLOCKUP [ 170.475754][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.485900][ T5760] Workqueue: usb_hub_wq hub_event [ 170.491041][ T5760] RIP: 0010:free_large_kmalloc+0x97/0x110 [ 170.496829][ T5760] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 7a af fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 06 aa 5b 8e 5b 41 5e 5d e9 83 76 fb fe [ 170.516552][ T5760] RSP: 0018:ffffc90004d1eb08 EFLAGS: 00010206 [ 170.522711][ T5760] RAX: 00000000ff000000 RBX: ffffea00016c7880 RCX: 0000000000000001 [ 170.530832][ T5760] RDX: ffffc90019cbb000 RSI: ffff88805b1e2000 RDI: ffffea00016c7880 [ 170.538886][ T5760] RBP: 0000000000000000 R08: ffff888063fe9003 R09: 1ffff1100c7fd200 [ 170.546927][ T5760] R10: dffffc0000000000 R11: ffffed100c7fd201 R12: 1ffff110043e1082 [ 170.556686][ T5760] R13: 0000000000000000 R14: ffff888063fe9060 R15: dffffc0000000000 [ 170.564797][ T5760] FS: 0000000000000000(0000) GS:ffff88812485b000(0000) knlGS:0000000000000000 [ 170.573798][ T5760] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 170.580442][ T5760] CR2: 00007f23ebd67e9c CR3: 000000000ed48000 CR4: 00000000003526f0 [ 170.588499][ T5760] Call Trace: [ 170.591820][ T5760] [ 170.594784][ T5760] usb_free_urb+0xd0/0x120 [ 170.599564][ T5760] smsusb_term_device+0x1d0/0x3d0 [ 170.604744][ T5760] smsusb_probe+0x1aba/0x2280 [ 170.609530][ T5760] ? __pfx_smsusb_probe+0x10/0x10 [ 170.614626][ T5760] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 170.620345][ T5760] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 170.626234][ T5760] ? __pm_runtime_set_status+0xa96/0xd80 [ 170.631951][ T5760] usb_probe_interface+0x788/0xe50 [ 170.637119][ T5760] ? __pfx_usb_probe_interface+0x10/0x10 [ 170.642845][ T5760] ? sysfs_do_create_link_sd+0xe0/0x110 [ 170.648575][ T5760] ? driver_sysfs_add+0x1fe/0x210 [ 170.653650][ T5760] ? __pfx_usb_probe_interface+0x10/0x10 [ 170.659369][ T5760] really_probe+0x254/0xae0 [ 170.663920][ T5760] __driver_probe_device+0x1e8/0x360 [ 170.669300][ T5760] driver_probe_device+0x4f/0x240 [ 170.674384][ T5760] __device_attach_driver+0x270/0x410 [ 170.679844][ T5760] bus_for_each_drv+0x258/0x2f0 [ 170.684738][ T5760] ? __pfx___device_attach_driver+0x10/0x10 [ 170.690696][ T5760] ? __pfx_bus_for_each_drv+0x10/0x10 [ 170.696709][ T5760] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 170.702607][ T5760] __device_attach+0x2c4/0x450 [ 170.707545][ T5760] ? __pfx___device_attach+0x10/0x10 [ 170.712881][ T5760] ? do_raw_spin_unlock+0xf5/0x200 [ 170.718071][ T5760] ? _raw_spin_unlock+0x28/0x50 [ 170.722975][ T5760] device_initial_probe+0xa1/0xd0 [ 170.728137][ T5760] bus_probe_device+0x12a/0x220 [ 170.733032][ T5760] device_add+0x7d7/0xb80 [ 170.737452][ T5760] usb_set_configuration+0x1ad8/0x2180 [ 170.742990][ T5760] usb_generic_driver_probe+0x8d/0x150 [ 170.748551][ T5760] usb_probe_device+0x1c3/0x3b0 [ 170.753482][ T5760] ? __pfx_usb_probe_device+0x10/0x10 [ 170.758915][ T5760] really_probe+0x254/0xae0 [ 170.763474][ T5760] __driver_probe_device+0x1e8/0x360 [ 170.768824][ T5760] driver_probe_device+0x4f/0x240 [ 170.773896][ T5760] __device_attach_driver+0x270/0x410 [ 170.779329][ T5760] bus_for_each_drv+0x258/0x2f0 [ 170.784223][ T5760] ? __pfx___device_attach_driver+0x10/0x10 [ 170.790207][ T5760] ? __pfx_bus_for_each_drv+0x10/0x10 [ 170.793581][ T5277] 8021q: adding VLAN 0 to HW filter on device eth5 [ 170.802209][ T5760] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 170.808166][ T5760] __device_attach+0x2c4/0x450 [ 170.808703][ T4931] Bluetooth: hci4: command tx timeout [ 170.818390][ T5760] ? __pfx___device_attach+0x10/0x10 [ 170.823728][ T5760] ? do_raw_spin_unlock+0xf5/0x200 [ 170.828928][ T5760] ? _raw_spin_unlock+0x28/0x50 [ 170.833832][ T5760] device_initial_probe+0xa1/0xd0 [ 170.838927][ T5760] bus_probe_device+0x12a/0x220 [ 170.843822][ T5760] device_add+0x7d7/0xb80 [ 170.848240][ T5760] usb_new_device+0x9aa/0x1690 [ 170.853075][ T5760] ? __pfx_usb_new_device+0x10/0x10 [ 170.858361][ T5760] ? _raw_spin_unlock_irq+0x23/0x50 [ 170.863612][ T5760] hub_event+0x28e8/0x4d30 [ 170.868141][ T5760] ? __pfx_hub_event+0x10/0x10 [ 170.872961][ T5760] ? rcu_is_watching+0x16/0xb0 [ 170.877787][ T5760] ? process_scheduled_works+0x97a/0x1630 [ 170.883542][ T5760] process_scheduled_works+0xc3d/0x1630 [ 170.889401][ T5760] ? __pfx_process_scheduled_works+0x10/0x10 [ 170.895454][ T5760] ? assign_work+0x3cf/0x5d0 [ 170.901605][ T5760] worker_thread+0xa47/0xfb0 [ 170.906271][ T5760] ? __kthread_parkme+0x71/0x1f0 [ 170.911300][ T5760] kthread+0x38b/0x480 [ 170.915412][ T5760] ? __pfx_worker_thread+0x10/0x10 [ 170.920595][ T5760] ? __pfx_kthread+0x10/0x10 [ 170.925231][ T5760] ret_from_fork+0x514/0xb70 [ 170.929885][ T5760] ? __pfx_ret_from_fork+0x10/0x10 [ 170.935043][ T5760] ? __switch_to+0xc89/0x1420 [ 170.939792][ T5760] ? __pfx_kthread+0x10/0x10 [ 170.944432][ T5760] ret_from_fork_asm+0x1a/0x30 [ 170.949337][ T5760] [ 170.952406][ T5760] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 170.959697][ T5760] CPU: 0 UID: 0 PID: 5760 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 170.970647][ T5760] Tainted: [L]=SOFTLOCKUP [ 170.974975][ T5760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 170.985039][ T5760] Workqueue: usb_hub_wq hub_event [ 170.990085][ T5760] Call Trace: [ 170.993371][ T5760] [ 170.996306][ T5760] vpanic+0x56d/0xa70 [ 171.000315][ T5760] ? __pfx__printk+0x10/0x10 [ 171.004920][ T5760] ? __pfx_vpanic+0x10/0x10 [ 171.009443][ T5760] ? is_bpf_text_address+0x292/0x2b0 [ 171.014741][ T5760] ? is_bpf_text_address+0x26/0x2b0 [ 171.019955][ T5760] panic+0xc5/0xd0 [ 171.023692][ T5760] ? __pfx_panic+0x10/0x10 [ 171.028130][ T5760] ? ret_from_fork_asm+0x1a/0x30 [ 171.033094][ T5760] __warn+0x315/0x4c0 [ 171.037096][ T5760] ? free_large_kmalloc+0x97/0x110 [ 171.042238][ T5760] ? free_large_kmalloc+0x97/0x110 [ 171.047383][ T5760] __report_bug+0x276/0x570 [ 171.051911][ T5760] ? bus_for_each_drv+0x258/0x2f0 [ 171.056936][ T5760] ? __device_attach+0x2c4/0x450 [ 171.061872][ T5760] ? device_initial_probe+0xa1/0xd0 [ 171.067085][ T5760] ? free_large_kmalloc+0x97/0x110 [ 171.072213][ T5760] ? __pfx___report_bug+0x10/0x10 [ 171.077241][ T5760] ? bus_probe_device+0x12a/0x220 [ 171.082261][ T5760] ? device_add+0x7d7/0xb80 [ 171.086778][ T5760] ? usb_new_device+0x9aa/0x1690 [ 171.091730][ T5760] ? hub_event+0x28e8/0x4d30 [ 171.096322][ T5760] ? process_scheduled_works+0xc3d/0x1630 [ 171.102047][ T5760] ? worker_thread+0xa47/0xfb0 [ 171.106808][ T5760] ? kthread+0x38b/0x480 [ 171.111062][ T5760] ? smscore_unregister_device+0x651/0x780 [ 171.116889][ T5760] ? free_large_kmalloc+0x97/0x110 [ 171.122018][ T5760] report_bug+0x16b/0x220 [ 171.126408][ T5760] ? free_large_kmalloc+0x97/0x110 [ 171.131542][ T5760] ? free_large_kmalloc+0x99/0x110 [ 171.136679][ T5760] handle_bug+0x9c/0x200 [ 171.140946][ T5760] exc_invalid_op+0x1a/0x50 [ 171.145452][ T5760] asm_exc_invalid_op+0x1a/0x20 [ 171.150300][ T5760] RIP: 0010:free_large_kmalloc+0x97/0x110 [ 171.156047][ T5760] Code: 8b 43 30 83 f8 ff 74 13 25 00 00 00 ff 3d 00 00 00 f8 75 7a c7 43 30 ff ff ff ff 48 89 df 89 ee 5b 41 5e 5d e9 7a af fc ff 90 <0f> 0b 90 48 89 df 48 c7 c6 06 aa 5b 8e 5b 41 5e 5d e9 83 76 fb fe [ 171.175667][ T5760] RSP: 0018:ffffc90004d1eb08 EFLAGS: 00010206 [ 171.181748][ T5760] RAX: 00000000ff000000 RBX: ffffea00016c7880 RCX: 0000000000000001 [ 171.189723][ T5760] RDX: ffffc90019cbb000 RSI: ffff88805b1e2000 RDI: ffffea00016c7880 [ 171.197701][ T5760] RBP: 0000000000000000 R08: ffff888063fe9003 R09: 1ffff1100c7fd200 [ 171.205677][ T5760] R10: dffffc0000000000 R11: ffffed100c7fd201 R12: 1ffff110043e1082 [ 171.213657][ T5760] R13: 0000000000000000 R14: ffff888063fe9060 R15: dffffc0000000000 [ 171.221664][ T5760] usb_free_urb+0xd0/0x120 [ 171.226107][ T5760] smsusb_term_device+0x1d0/0x3d0 [ 171.231158][ T5760] smsusb_probe+0x1aba/0x2280 [ 171.235852][ T5760] ? __pfx_smsusb_probe+0x10/0x10 [ 171.240890][ T5760] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 171.246464][ T5760] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 171.252296][ T5760] ? __pm_runtime_set_status+0xa96/0xd80 [ 171.257956][ T5760] usb_probe_interface+0x788/0xe50 [ 171.263095][ T5760] ? __pfx_usb_probe_interface+0x10/0x10 [ 171.268744][ T5760] ? sysfs_do_create_link_sd+0xe0/0x110 [ 171.274307][ T5760] ? driver_sysfs_add+0x1fe/0x210 [ 171.279345][ T5760] ? __pfx_usb_probe_interface+0x10/0x10 [ 171.284984][ T5760] really_probe+0x254/0xae0 [ 171.289514][ T5760] __driver_probe_device+0x1e8/0x360 [ 171.294813][ T5760] driver_probe_device+0x4f/0x240 [ 171.299851][ T5760] __device_attach_driver+0x270/0x410 [ 171.305244][ T5760] bus_for_each_drv+0x258/0x2f0 [ 171.310106][ T5760] ? __pfx___device_attach_driver+0x10/0x10 [ 171.316009][ T5760] ? __pfx_bus_for_each_drv+0x10/0x10 [ 171.321388][ T5760] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 171.327220][ T5760] __device_attach+0x2c4/0x450 [ 171.332001][ T5760] ? __pfx___device_attach+0x10/0x10 [ 171.337293][ T5760] ? do_raw_spin_unlock+0xf5/0x200 [ 171.342421][ T5760] ? _raw_spin_unlock+0x28/0x50 [ 171.347290][ T5760] device_initial_probe+0xa1/0xd0 [ 171.352330][ T5760] bus_probe_device+0x12a/0x220 [ 171.357274][ T5760] device_add+0x7d7/0xb80 [ 171.361611][ T5760] usb_set_configuration+0x1ad8/0x2180 [ 171.367117][ T5760] usb_generic_driver_probe+0x8d/0x150 [ 171.372605][ T5760] usb_probe_device+0x1c3/0x3b0 [ 171.377478][ T5760] ? __pfx_usb_probe_device+0x10/0x10 [ 171.382859][ T5760] really_probe+0x254/0xae0 [ 171.387385][ T5760] __driver_probe_device+0x1e8/0x360 [ 171.392690][ T5760] driver_probe_device+0x4f/0x240 [ 171.397736][ T5760] __device_attach_driver+0x270/0x410 [ 171.403119][ T5760] bus_for_each_drv+0x258/0x2f0 [ 171.407973][ T5760] ? __pfx___device_attach_driver+0x10/0x10 [ 171.413883][ T5760] ? __pfx_bus_for_each_drv+0x10/0x10 [ 171.419273][ T5760] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 171.425104][ T5760] __device_attach+0x2c4/0x450 [ 171.429881][ T5760] ? __pfx___device_attach+0x10/0x10 [ 171.435178][ T5760] ? do_raw_spin_unlock+0xf5/0x200 [ 171.440292][ T5760] ? _raw_spin_unlock+0x28/0x50 [ 171.445150][ T5760] device_initial_probe+0xa1/0xd0 [ 171.450176][ T5760] bus_probe_device+0x12a/0x220 [ 171.455047][ T5760] device_add+0x7d7/0xb80 [ 171.459414][ T5760] usb_new_device+0x9aa/0x1690 [ 171.464208][ T5760] ? __pfx_usb_new_device+0x10/0x10 [ 171.469428][ T5760] ? _raw_spin_unlock_irq+0x23/0x50 [ 171.474653][ T5760] hub_event+0x28e8/0x4d30 [ 171.479127][ T5760] ? __pfx_hub_event+0x10/0x10 [ 171.483911][ T5760] ? rcu_is_watching+0x16/0xb0 [ 171.488687][ T5760] ? process_scheduled_works+0x97a/0x1630 [ 171.494410][ T5760] process_scheduled_works+0xc3d/0x1630 [ 171.499990][ T5760] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.505998][ T5760] ? assign_work+0x3cf/0x5d0 [ 171.510611][ T5760] worker_thread+0xa47/0xfb0 [ 171.515242][ T5760] ? __kthread_parkme+0x71/0x1f0 [ 171.520204][ T5760] kthread+0x38b/0x480 [ 171.524305][ T5760] ? __pfx_worker_thread+0x10/0x10 [ 171.529434][ T5760] ? __pfx_kthread+0x10/0x10 [ 171.534040][ T5760] ret_from_fork+0x514/0xb70 [ 171.538650][ T5760] ? __pfx_ret_from_fork+0x10/0x10 [ 171.543773][ T5760] ? __switch_to+0xc89/0x1420 [ 171.548455][ T5760] ? __pfx_kthread+0x10/0x10 [ 171.553073][ T5760] ret_from_fork_asm+0x1a/0x30 [ 171.557866][ T5760] [ 171.561008][ T5760] Kernel Offset: disabled [ 171.565322][ T5760] Rebooting in 86400 seconds..