last executing test programs: 7.438133727s ago: executing program 1 (id=372): capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000180)={0x6, 0xe, 0x13e, 0x89, 0x2, 0x6}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000002d000701feffffffffdb7c00000000d1eca88d04b44389b7c7cd14284da1dda8b5c790d264fb3602b3db3f8257d2606b804ad66701f95cecf9103fb04dee14c00731a94cf966d346313cc606952bc73989643b2edf6d2c74f09cc88dcad96a1092562ba62755bc8fba16a93e1743ec69dcbaa1ae331bf613319999ffeec007347a773ca0c2c3884a90aa1bda198cd0e975cf7ff780565c9e493ca05cf800adb51dca"], 0x14}, 0x1, 0x0, 0x0, 0x400d4}, 0x2000c010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000140)=ANY=[], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0}) close(r1) mkdir(&(0x7f00000005c0)='./ms\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./ms\x00', &(0x7f0000000640)='sysfs\x00', 0x0, 0x0) r2 = open(&(0x7f0000000680)='./ms/fs/ocfs2/cluster_stack\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='user', 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000003c0)) socket$inet_tcp(0x2, 0x1, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) openat$fuse(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) write$FUSE_DIRENT(r8, 0x0, 0x0) splice(r5, 0x0, r7, 0x0, 0x80, 0x4) write$FUSE_INIT(r6, &(0x7f0000000500)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) getsockopt$inet6_int(r3, 0x29, 0x3c, 0x0, &(0x7f0000000240)) r9 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/net/afs/sysname\x00', 0x2, 0x0) write$6lowpan_control(r9, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 2', 0x1b) open_tree(0xffffffffffffffff, 0x0, 0x9b00) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) 4.736672625s ago: executing program 3 (id=386): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000880)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$can_bcm(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000b40)=ANY=[@ANYBLOB="0708000001008d04d0fa0000d7fd3ab9561f0157a96b00c62a91cda5cc29d298e20ed5092bcf6adb2e43733b356419de70a1a934e753f52c24304922ca04a12bb932acade5061ba48a5bd8d2a552958f6a185c27b182ed0408a944e764f0462957ee51587e01c80f8f315bac0770d25509cb0e48d722bfa8258b801af8ad778e4a35bbcab6fd48f854e8e0f1cbdcbc7c1885d70e7c72b35478e940", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="00000000020000000000000001000000f21a810183bdfbff"], 0x48}, 0x300, 0x0, 0x0, 0x8800}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r3, &(0x7f0000000200)='6', 0x32) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000280), r4) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x3c, r5, 0x1, 0x0, 0xffffffff, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x13}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_FD={0x8}]}, 0x3c}}, 0x0) sendmsg$L2TP_CMD_SESSION_CREATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="34000000ca237af0cc45100ac0a1c96a93a87b44ca437a82ea983cd5796982718d05f7bc95ac07c92fc141f6db1bf39d96a3d5e01c16969f370704c2b5b1cac775f3be57519a779a24b150c1641737a36c80ba0f1c413954ad9d4d2d59cbb567a207fe9ded62f46ee38a10c3910487097c9829cdaa6431e64bb2c419f0c0b015f4becbacd815215ce053061ec662ea13b567b374de1328b7af83539cf6b7f621", @ANYRES16=r5, @ANYBLOB="0100000000000000000005000000080009000100000008000b000100000008000c00010000000600010005000000"], 0x34}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x38, r5, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @dev={0xfe, 0x80, '\x00', 0x40}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x811) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000a00)=@urb_type_iso={0x0, {0x9, 0x1}, 0x3, 0x80, &(0x7f0000000740)="e0d37e2738fdbf8822295f89277b1d693ad06567d993a157bae864de02c2bb5fd48ba0778b7a76bf50940f41f0139195", 0x30, 0x4, 0xb, 0x13, 0x8, 0x5ba, &(0x7f0000000780)="adb8ad5d3684693e461e97d7e43bef98246b5492c86603bceef857c867dd141176ba68a1f952be1eb809233a343acc9768d9b1c3fdd297f7a07d88859bfb036ac035cc55fb7eb1db59f89e706c64cc98a8147b03d65781cc4acd952eaed764ce88925c3ad85bae2d6ee9253756633ecffac6a9e961bc578d8ef9097a33d07f0e71f1f3e0d6b41a78076ca7fec8ae08b207709365", [{0x0, 0x200, 0x7}, {0x1, 0x40, 0x5}, {0x1, 0x6, 0xd}, {0x3ff, 0x8, 0x10001}, {0x6, 0x51, 0x4}, {0x7, 0x4, 0x100}, {0x3ff, 0x3, 0x2}, {0xf, 0x5, 0x4}, {0x3, 0x2, 0x6}, {0xea0c, 0x9, 0x7}, {0xdb, 0x3, 0x1000}, {0x2, 0x40000, 0x101}, {0xfffffffa, 0x0, 0x8}, {0x81, 0x7, 0x42ad}, {0xd9d1, 0x5, 0x2}, {0x4, 0x1, 0x5}, {0x40, 0x6, 0x4}, {0x33b7, 0x1, 0x6}, {0x0, 0x1ff, 0x9}]}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0xef) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000260008000300000010001b0000000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/uprobe_events\x00', 0x81, 0x41) write(r7, &(0x7f0000000180)="703a745f73742f6576656e7431202e2f66696c65303a307830202d8afc717edc400ff5cc5c68f971a57f18f4a128", 0x2e) r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) mknodat$md(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x6180, 0x0) openat$md_node(0xffffffffffffff9c, &(0x7f0000000680)='./md0\x00', 0x2, 0x0) 4.558213212s ago: executing program 3 (id=387): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000240)={0x60, 0x3000000, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x0, 0x1a6, 0x0, 0x0, 0x0, 0x25}) 4.192057376s ago: executing program 1 (id=389): unshare(0x22020400) r0 = eventfd(0xfffffffe) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./mysys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000580)={{0x1, 0x1, 0x18, r0, {0x7}}, './mysys\x00'}) r2 = openat(r1, &(0x7f0000000500)='./mysys\x00', 0x280040, 0x112) read(r2, &(0x7f0000000540), 0x100) flistxattr(r0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x7, 0x23}, 0x90) socket$vsock_stream(0x28, 0x1, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) epoll_create1(0x80000) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000180)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x7a, 0x885, {}, 0x1119dfc, 0xffffffff80000006, 0xcd41}}}, 0x90) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f00000002c0)={0x14, 0x88, 0xfa00, {r5, 0x30, 0x0, @ib={0x1b, 0x7a, 0x889, {}, 0x1119dfc, 0xffffffff80000006, 0xcd41}}}, 0x90) r8 = syz_open_dev$vbi(&(0x7f0000000280), 0x1, 0x2) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) ioctl$VIDIOC_REQBUFS(r8, 0xc0145608, &(0x7f0000000380)={0x3, 0x5, 0x1, 0x0, 0x2}) ioctl$VIDIOC_S_FMT(r8, 0xc0d05605, &(0x7f0000000b40)={0x7, @pix={0x4, 0x5, 0x32314d59, 0x5, 0x5, 0x80000001, 0xa, 0x7, 0x1, 0x8, 0x1, 0x6}}) setsockopt$inet_sctp6_SCTP_ECN_SUPPORTED(r3, 0x84, 0x82, &(0x7f0000000540)={0x0, 0x9}, 0x8) 4.008065126s ago: executing program 3 (id=390): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000000100)={{0x80}, 'port0\x00', 0xa3, 0x1b1c07, 0x0, 0x0, 0x1000}) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000400)=""/46, 0x2e}], 0x1) close_range(r1, r1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x1f00) 3.805580337s ago: executing program 1 (id=391): r0 = socket$inet(0x2, 0x4000000000000004, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x9}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000000c0)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="90cb", 0x2}], 0x1}, 0x4011) close(0x3) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = fanotify_init(0x200, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000002c0)='\\', 0x1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) fanotify_mark(r3, 0x1, 0x1015, r2, 0x0) read(r3, &(0x7f0000000300)=""/190, 0xbe) writev(r2, &(0x7f00000003c0)=[{0x0}], 0x1) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000001140)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000001180)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000011c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000001200)=[{{&(0x7f0000001240)={0xa, 0x4e23, 0x4, @loopback, 0x280020}, 0x1c, &(0x7f0000001280)=[{&(0x7f00000012c0)='\x00', 0x1}], 0x1}}], 0x1, 0x20008050) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000001300)={0x0, 0xfffd, 0x4}, 0x8) 3.673012147s ago: executing program 3 (id=392): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x304) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000240)={0x0, [[0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0xfffffbfc, 0xffffffff, 0xffffffff, 0xfffffeff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x6, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r3, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r3, 0x40184150, &(0x7f00000004c0)={0x0, &(0x7f0000000500)='\x00', 0x10040}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r3, 0xc2604111, &(0x7f0000000540)={0x93, [[0x7, 0x6, 0xca8, 0x7, 0x8, 0x43b6, 0xffff, 0x2], [0x2, 0x0, 0x6, 0x5177, 0xb11, 0x4, 0x7cb, 0x944c], [0x8000, 0x80000000, 0x3, 0x38e2, 0xfffffff2, 0x50f, 0x8000, 0x8]], '\x00', [{0x4000e7a8, 0x5, 0x1, 0x1, 0x1, 0x1}, {0x2, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x0, 0xe40ee43b, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x9, 0x0, 0x1, 0x0, 0x1}, {0x81, 0x5, 0x0, 0x1, 0x1}, {0x1ff, 0x3, 0x1, 0x1, 0x0, 0x1}, {0x6, 0x2, 0x0, 0x0, 0x1}, {0x43c1, 0x727b25e0, 0x0, 0x1}, {0x7aff, 0xa4f2, 0x1, 0x1, 0x1, 0x1}, {0xfffffffe, 0x0, 0x0, 0x1}, {0x3fc, 0xffff, 0x1, 0x1, 0x1, 0x1}, {0x5, 0x8, 0x0, 0x1, 0x1, 0x1}], '\x00', 0x5}) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r2, 0x8983, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x81800) bind$x25(r4, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}}, 0x12) 3.586302336s ago: executing program 0 (id=393): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000300)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000340)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000380)={{@hyper, 0x2}, @hyper=0x1000000, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 3.344528458s ago: executing program 0 (id=394): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'netdevsim0\x00', &(0x7f0000000100)=@ethtool_cmd={0x4f, 0x9, 0xb, 0x8, 0x4, 0x86, 0xd6, 0x1, 0x0, 0x2f, 0x4, 0x1, 0xc, 0x72, 0x8, 0x0, [0x4d, 0x7]}}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd/portlist\x00', 0x2002, 0x1) write(r1, &(0x7f0000000140)='t>p 2', 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = syz_open_dev$video(&(0x7f0000000240), 0x10001, 0x8000) ioctl$VIDIOC_S_FBUF(r3, 0x4030560b, &(0x7f0000000280)={0x20, 0x2, 0x0, {0xefc3, 0x1, 0x41416770, 0xf, 0x2, 0x5, 0x6, 0x4}}) ioctl$sock_ifreq(r2, 0x8920, &(0x7f0000000040)={'veth1_to_bridge\x00', @ifru_ivalue=0xd3d4}) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0x90000) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180), 0x202002) read$FUSE(r4, 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x4, 0x8, 0x7fff, 0x9, 0x10001, 0xae, 0x0, 0x0, 0x40, 0x1}}, 0x50) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) capset(&(0x7f0000a31000)={0x20080522}, 0x0) 3.141174616s ago: executing program 0 (id=395): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', 0x1}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000000080)='X', 0x14f8d, 0x0, &(0x7f00000000c0)={0xa, 0x4e23, 0x100, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r3, 0xa9ac}, &(0x7f0000000200)=0x8) write(r0, &(0x7f0000000400)="ffffffffffffaabbccddeeff88ca", 0xe) 2.885423303s ago: executing program 0 (id=396): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000000400010000000000000000000600000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800014000000014080002400000000308000340000000120900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) 2.848333179s ago: executing program 1 (id=397): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x80580, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x30, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, 0x0, 0x800) close_range(r0, 0xffffffffffffffff, 0x0) ioctl$DVB_DVR_DMX_EXPBUF(0xffffffffffffffff, 0xc00c6f3e, &(0x7f0000000040)={0x3ff, 0x80000, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r8, 0x80184132, &(0x7f0000000080)) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f0000000180)='debugfs\x00', 0x800088, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/ieee80211/phy0/netdev:wlan0/state\x00', 0x0, 0x0) read(r10, 0x0, 0x0) r11 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x2, "", [{{0x9, 0x4, 0x0, 0x5, 0x92, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x15, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f0000004840)={0x24, 0x0, 0x0, &(0x7f0000004880)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f00000048c0), 0xa, 0x62080) close_range(r9, 0xffffffffffffffff, 0x0) 2.717027725s ago: executing program 0 (id=398): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040501d4d610001000000010902200001010080320904000002ff00000007050102"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000100)=ANY=[@ANYBLOB="20c81e0000004d61501d010000000000000010000034242d2e5e8bd75e0000003804"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./mydev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mydev/ttyS0\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) syz_open_procfs$pagemap(r2, &(0x7f0000000200)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f00000003c0)={0x60, 0x0, &(0x7f000025a000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x8, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x31}) 2.670640225s ago: executing program 3 (id=399): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r3, @ANYBLOB="2e003300d0000000080211000001080211000000505050505050000425", @ANYRES64], 0x4c}}, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000300)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000340)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000380)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) 2.562585334s ago: executing program 3 (id=400): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x11, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x35e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xf0, 0x46}}}}}]}}]}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect$uac1(0x3, 0xcc, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x7, 0x50, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2f}, [@extension_unit={0xb, 0x24, 0x8, 0x3, 0x1, 0x5, "a208f8ff"}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x71, "17d46fac"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x5, 0x9, "cdcb55"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x9, 0x3c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7ff, 0xffff, 0xb6, "afc6"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0xd, 0x8, "369b4e12899a"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x1002}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0xff, 0x5, "95f6fa157b"}, @as_header={0x7, 0x24, 0x1, 0xee, 0x0, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x6, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x10, 0x6, {0x7, 0x25, 0x1, 0x0, 0xf5, 0xe0}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x8, 0xa, 0x36, 0x40, 0x5}, 0x29, &(0x7f0000000280)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x7, 0xf000, 0x1c, [0xf, 0xff0000, 0x1fe00cf, 0xc0, 0xff3f00, 0x0]}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180c}}]}) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000540)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x11, "", [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x5, 0x1, {0x22, 0x35e}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x4, 0xf0, 0x46}}}}}]}}]}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_usb_connect$uac1(0x3, 0xcc, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x582, 0x2b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xba, 0x3, 0x1, 0x7, 0x50, 0x4, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x2f}, [@extension_unit={0xb, 0x24, 0x8, 0x3, 0x1, 0x5, "a208f8ff"}, @mixer_unit={0x9, 0x24, 0x4, 0x3, 0x71, "17d46fac"}, @processing_unit={0xa, 0x24, 0x7, 0x4, 0x5, 0x9, "cdcb55"}, @extension_unit={0x7, 0x24, 0x8, 0x3, 0x9, 0x3c}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0xb, 0x24, 0x2, 0x2, 0x7ff, 0xffff, 0xb6, "afc6"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x3, 0xd, 0x8, "369b4e12899a"}, @as_header={0x7, 0x24, 0x1, 0x5, 0x9, 0x1002}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x7, 0x1, 0xff, 0x5, "95f6fa157b"}, @as_header={0x7, 0x24, 0x1, 0xee, 0x0, 0x4}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x3, 0x6, 0x1, {0x7, 0x25, 0x1, 0x4, 0x5, 0x100}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x0, 0x10, 0x6, {0x7, 0x25, 0x1, 0x0, 0xf5, 0xe0}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x300, 0x8, 0xa, 0x36, 0x40, 0x5}, 0x29, &(0x7f0000000280)={0x5, 0xf, 0x29, 0x1, [@ssp_cap={0x24, 0x10, 0xa, 0x1, 0x6, 0x7, 0xf000, 0x1c, [0xf, 0xff0000, 0x1fe00cf, 0xc0, 0xff3f00, 0x0]}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0x180c}}]}) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x6c}}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0xfffffffffffffe2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0x371, {0xfffffffffffffef6, 0x21, 0xfffd}}}, &(0x7f0000000540)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 2.433069644s ago: executing program 2 (id=401): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a58000000060a0b040000000000000000020000002c0004802800018008000100666962001c0002800800014000000014080002400000000308000340000000120900010073797a30000000000900020073797a32"], 0x80}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) (fail_nth: 8) 1.836682382s ago: executing program 2 (id=402): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x3401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f00000002c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x1}, 0x8, 0x1, 0xffffffc0, 0x0, 0x5, 0x0, 0x0}) (fail_nth: 9) 1.445904391s ago: executing program 2 (id=403): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = fsopen(&(0x7f00000000c0)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f0000000100)='fd', 0x0, r1) syz_extract_tcp_res(&(0x7f00000002c0)={0x41424344}, 0x5, 0x2) syz_extract_tcp_res$synack(&(0x7f0000000300)={0x41424344}, 0x1, 0x0) write$tun(r2, &(0x7f0000000340)={@val={0x0, 0x12}, @void, @ipv4=@tcp={{0x1d, 0x4, 0x3, 0x8, 0x137, 0x66, 0x0, 0x10, 0x6, 0x0, @multicast2, @multicast1, {[@timestamp_prespec={0x44, 0x4c, 0xf0, 0x3, 0x3, [{@multicast1, 0x1}, {@empty, 0x5aa}, {@loopback, 0x36e}, {@empty, 0x9eff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}, {@broadcast, 0x7}, {@dev={0xac, 0x14, 0x14, 0x39}, 0xfffffff9}, {@rand_addr=0x64010100, 0xfffffffe}, {@loopback, 0x3}]}, @rr={0x7, 0x13, 0xd6, [@remote, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2]}]}}, {{0x4e23, 0x4e23, r4, r5, 0x0, 0x0, 0x14, 0x0, 0x4, 0x0, 0x7, {[@fastopen={0x22, 0x11, "62e3c7b881f5cedf7a20013753077a"}, @sack={0x5, 0x26, [0xc09, 0x5, 0x4, 0x4, 0x1f6, 0x8, 0x3, 0xed7, 0xb6]}, @mptcp=@mp_join={0x1e, 0x3, 0xb}]}}, {"5b1e0e1eb7888d6bbe0ef54f27ca2c4c4638774bc6b767fbaf9294c12f4b820d77a4d1099ac22e11a2a79abffc879558018b3ee5227272e2d629303836c00d021993616b1a6e7a738bf8914350f1076a390c4cc79304f56b3415a91291e4a69c313a660cfb17460bfcb5bcf26bb1f52dc025fb"}}}}, 0x13b) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', 0x1}) write$tun(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e0000001000088be00189078040000004ae6598de04333cacba086a9d9000000006558000000000000"], 0xfdef) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) r8 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r8, &(0x7f00000004c0)='4', 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 500.896585ms ago: executing program 1 (id=404): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'ip6tnl0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x8080, &(0x7f00000003c0)={0x11, 0x18, r3, 0x1, 0x7, 0x6, @remote}, 0x14) 421.244612ms ago: executing program 1 (id=405): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x3401) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000003c0), 0x800, 0x0) fchdir(r1) r2 = syz_clone(0x141d4000, &(0x7f0000002840)="c1c31ea9e0e9b13f0c6764d0cb9dd9551956042b7a770549ebad7d03f0a1cbab46035840282608d04d0e897fdf683ce1f88b5a15ca510c400d1880e84e4cb82d34d4da659304916b02d1ce50248da41486aa3f83208cb6f22a27de5c2a39afc4493ce4f1d128448e8e1ffa13dd192978811f8317db4918e4f391701accac9416a8f453db81c6fab63b0532fbc86e024a4ee41fc094dff5734ece074b06fd1242ae2176488669b7ca61eeb044513fcf7923e1f69122190e6288", 0xb9, &(0x7f0000002900), &(0x7f0000002940), &(0x7f0000002980)="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") syz_open_procfs$namespace(r2, &(0x7f0000000400)='ns/pid\x00') mount(&(0x7f0000003980)=@filename='./file0\x00', &(0x7f0000000480)='./cgroup\x00', 0x0, 0x81001, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000002700)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f0000007000/0x18000)=nil, &(0x7f0000002740)=[@text32={0x20, &(0x7f0000003a40)="0f01763466baf80cb8013665840f01c866bafc0cb024eeea006000003301b9250a0000b8ff8700000f01c40f300f01df0f01c9660f3882310f01d1c4e14565488826670f01ca", 0x46}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000002780)=[@text64={0x40, &(0x7f00000027c0)="48b801000000000000000f21f8640f808c6a060623f848b8fcffffffffffffff0f23d80f21f835800000100f23f86464660f38807d0036400f23f440dec93e460f01c4af0f20d835200000000f22d8b91e0200000f32440f01d1", 0x5a}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000004c0)='mountinfo\x00') read$FUSE(r7, &(0x7f0000000500)={0x2020}, 0x2020) r8 = socket$inet_sctp(0x2, 0x5, 0x84) timer_create(0x0, &(0x7f0000002680)={0x0, 0x3a, 0x0, @thr={&(0x7f0000002540)="48a3bacd693f04898b2ba79f78a346621f6cd10b278d2509e6b00f1b61ce8501acadeb7728d4a03d9df55db79af74903d9db2f0e92d2195c6e5a1f8adec85ece5f49eab2899a4218f2d8867f732f3c8287053248ebcfd94c17fdc12feec40ea98d0a45435d1dff701d64ad86777be8b9e803b97052af14e355e515911788f336b9acc9420cdb5c2392722a9119e0299456fc72106c91a276470dbc7fc8364890aeb9", &(0x7f0000002600)="22d75349ea0f15d819f4b5b7f5e490c25698c85d23b03c4a2c387f7a46e81052e032a9d053429bc1130d67b6fc38d446e9a98c92236c708e69109372f37ba864a4c7a74fe507fb4f9da168a4cb52"}}, &(0x7f00000026c0)) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f0000000000)={0x0, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='mnt\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x39, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff000000070581024000000705020240000007058303a5"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000300)='mnt/ttyUSB0\x00', 0x44002, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x0}, 0x0, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x8, 0x0, &(0x7f00000002c0)={0x20, 0x3, 0x14, 0x1, 0x3}, 0x8, 0x1, 0xffffffc0, 0x0, 0x5, 0x0, 0x0}) 294.424897ms ago: executing program 0 (id=406): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_usb_connect$rtl8150(0x0, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b40)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000b80)='./sys\x00', &(0x7f0000000bc0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/kernel/mm/lru_gen/enabled\x00', 0x1, 0x0) memfd_create(0x0, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) write(r2, &(0x7f0000000c40)='n', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000580)='./trace\x00', &(0x7f00000005c0)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0) writev(r3, &(0x7f0000000640)=[{&(0x7f0000000680)="4002", 0x2}], 0x1) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000280)={0x14, &(0x7f00000000c0)={0x0, 0x8, 0xcc, {0xcc, 0xf, "1bc699f2e174b794e0dd84624713f191393116e19f2798287724f0ea2c0e807201d9b242a7116494e9712382c1b6e63cbb2388d0e5f9428fb1384014301ea8fc01b5dca9f0afe06b0227f73346239ab034334ebf23032d29260ae23d383bcf32267c58a8a31c620bbfde81efa94ea253d3025ce88d3eabdc9ea976dc106fc8a1d7b125c0fc8ef61f2f5049915d3aae26cd2ada5e0de437d703e21178ddcc34737924c745b0231276b9b80ef313cdc488d085af78ecdbb69028481c2be8fb4f14862440de8211dd49bc23"}}, &(0x7f00000001c0)={0x0, 0x3, 0x95, @string={0x95, 0x3, "2c05f521d0135e524d597f5a23420ca3849374f7e55f24712287f25a91cfa4e24f5af837c57b4912810a1aa550d4b7c2a7794620ca6b296f0afdf37599786484b3981168c20e70a39cd240e8a4ba085e5fd63cbc148faffbde21723dc0a4e10162716a84722c49d30f0524dd53b8c14bd5f4e0d59e94ecf797578ae3a1800aa60b2b25fa0f1f1d061f91cc9a86c4c7f86669a2"}}}, &(0x7f00000004c0)={0x44, &(0x7f00000002c0)={0x0, 0xf, 0x5, "9935a361e1"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x96}, &(0x7f0000000380)={0x20, 0x81, 0x3, "8abede"}, &(0x7f00000003c0)={0x20, 0x82, 0x1, "fa"}, &(0x7f0000000400)={0x20, 0x83, 0x1, 'd'}, &(0x7f0000000440)={0x20, 0x84, 0x4, "11aece3c"}, &(0x7f0000000480)={0x20, 0x85, 0x3, "31fc39"}}) syz_usb_control_io$printer(r0, 0x0, 0x0) landlock_create_ruleset(0x0, 0x0, 0x2) syz_usb_control_io$hid(r0, &(0x7f00000007c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000840)={0x14, &(0x7f00000006c0)={0x20, 0x4, 0xd9, {0xd9, 0x2, "3fb97617ef3894ba897ddd202af33437fbd61da8b3cd5c0cdf64289d49d9ddb35f231d05d581aea880fc95d40ddd8de1b3926630d4b596206cab1184adb7064643784f192d8e9819b35e4c397db01d1030932b58f54f2f6354e4bba2994cd25443fc8db06b81cec3cc0923565bb4a030081d3781d241e87222ad0eca56e802f8ddd026eb18ebc6e7c90d344cd7d0692f184ca6ec3cc04e747b5a69b6c1d2c518dc83d7b2e6fd162ee19ab558329880846dfdac82e6b9972be1c98aa67f72e7e508f3cb5cd1aba792df3adb04a7b9e8ce73db241a70162a"}}, &(0x7f0000000800)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ac0)={0x44, &(0x7f0000000880)={0x0, 0x30, 0x81, "d6c570585c3c72662f871e865d9a690da70d766f761f0c396d59a0de3521ad7dab995942a19b2ae8080a171e7d6453b598af70caf9467ff7db19f43389cd3cd80317ee6919134e6b73b33bc1435bf409b79327854d30084d31a4d392d7a4dce98cc38a343a70995432677e321e2edf4276aac402aead61c0a1f1fb924171751419"}, 0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000980)={0x20, 0x80, 0x1c, {0x8, 0x5, 0xa3, 0x7, 0x8001, 0x40, 0x2, 0x1, 0x2, 0x1, 0x8, 0x6}}, &(0x7f00000009c0)={0x20, 0x85, 0x4, 0x80000001}, &(0x7f0000000a00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000a40)={0x20, 0x87, 0x2, 0x80}, &(0x7f0000000a80)={0x20, 0x89, 0x2}}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000f00)={0x44, &(0x7f0000000d00)={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 168.960905ms ago: executing program 2 (id=407): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x77, 0x3401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0x6ffec, 0x0, &(0x7f00000002c0)={0x4b5a9da54893e123, 0x3, 0x14, 0x1}, 0x8, 0x1, 0xffffffc0, 0x0, 0x5, 0x0, 0x0}) 78.955163ms ago: executing program 2 (id=408): mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000200)="d1", 0x1}, 0x68) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x20004005}, 0x0) 0s ago: executing program 2 (id=409): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) (async, rerun: 64) listen(r1, 0xfffffffc) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), r2) (async) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f00000000c0)="1c", 0x10002, 0x0, 0x0, 0x0) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000100)={0x0, 0x300, &(0x7f0000000140)={&(0x7f0000000180)={0x28, r3, 0x7, 0x400000, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (rerun: 32) sendto$inet(r4, &(0x7f00000001c0)="af", 0x1, 0x4000, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000240)={0x16fdf}, 0x30, 0x0) landlock_restrict_self(r5, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, 0x0) r6 = add_key$user(&(0x7f0000000200), &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) (async) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x5b) (async) ioctl$KVM_SET_NESTED_STATE(r7, 0x4080aebf, &(0x7f0000001380)=@svm={0x10b, 0x1, 0x1080, {0x1, 0xfffffffffffffffe}, {"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"}}) (async) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000001340)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2) kernel console output (not intermixed with test programs): [ 113.091617][ T6509] R13: 00007fecd0c26038 R14: 00007ffd97d6ae70 R15: 00007ffd97d6af58 [ 113.091648][ T6509] [ 113.290849][ T5739] ft260 0003:0403:6030.000B: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 113.491132][ T5739] ft260 0003:0403:6030.000B: failed to retrieve status: -32, no wakeup [ 113.709694][ T6472] ft260 0003:0403:6030.000B: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 113.765898][ T6472] ft260 0003:0403:6030.000B: ft260_i2c_write: failed with -38 [ 113.967855][ T5739] usb 2-1: USB disconnect, device number 13 [ 114.051119][ T6534] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 114.521773][ T5739] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 114.592248][ T5722] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 114.657189][ T6553] syzkaller1: entered promiscuous mode [ 114.657208][ T6553] syzkaller1: entered allmulticast mode [ 114.679618][ T5739] usb 1-1: New USB device found: idVendor=dc4e, idProduct=b536, bcdDevice=26.64 [ 114.681049][ T5739] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 114.681081][ T5739] usb 1-1: can't read configurations, error -61 [ 114.743056][ T5722] usb 3-1: Using ep0 maxpacket: 32 [ 114.745163][ T5722] usb 3-1: New USB device found: idVendor=0582, idProduct=0025, bcdDevice=0.40 [ 114.748829][ T5722] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.748851][ T5722] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 114.748902][ T5722] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 114.781105][ T5722] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.781215][ T5722] usb 3-1: Product: syz [ 114.781249][ T5722] usb 3-1: Manufacturer: syz [ 114.781286][ T5722] usb 3-1: SerialNumber: syz [ 114.816541][ T5739] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 114.973259][ T5739] usb 1-1: New USB device found: idVendor=dc4e, idProduct=b536, bcdDevice=26.64 [ 114.975051][ T5739] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 114.975089][ T5739] usb 1-1: can't read configurations, error -61 [ 114.975399][ T5739] usb usb1-port1: attempt power cycle [ 115.227745][ T5722] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 115.312728][ T5739] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 115.331324][ T6547] FAULT_INJECTION: forcing a failure. [ 115.331324][ T6547] name failslab, interval 1, probability 0, space 0, times 0 [ 115.331380][ T6547] CPU: 1 UID: 0 PID: 6547 Comm: syz.2.211 Not tainted syzkaller #0 PREEMPT(full) [ 115.331402][ T6547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 115.331414][ T6547] Call Trace: [ 115.331421][ T6547] [ 115.331429][ T6547] dump_stack_lvl+0xe8/0x150 [ 115.331473][ T6547] should_fail_ex+0x3eb/0x540 [ 115.331510][ T6547] ? __alloc_skb+0x1db/0x7a0 [ 115.331533][ T6547] should_failslab+0xa8/0x100 [ 115.331561][ T6547] ? __alloc_skb+0x1db/0x7a0 [ 115.331582][ T6547] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 115.331602][ T6547] ? __alloc_skb+0x18d/0x7a0 [ 115.331625][ T6547] ? __alloc_skb+0x1db/0x7a0 [ 115.331655][ T6547] __alloc_skb+0x1db/0x7a0 [ 115.331682][ T6547] netlink_ack+0x136/0xb30 [ 115.331700][ T6547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.331732][ T6547] ? __asan_memcpy+0x40/0x70 [ 115.331760][ T6547] netlink_rcv_skb+0x2a4/0x4a0 [ 115.331781][ T6547] ? __pfx_genl_rcv_msg+0x10/0x10 [ 115.331809][ T6547] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 115.331845][ T6547] ? down_read+0x2b9/0x320 [ 115.331869][ T6547] genl_rcv+0x28/0x40 [ 115.331892][ T6547] netlink_unicast+0x8ef/0xa80 [ 115.331948][ T6547] netlink_sendmsg+0x7f0/0xb20 [ 115.331976][ T6547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.332001][ T6547] ? aa_sock_msg_perm+0x144/0x210 [ 115.332033][ T6547] ? apparmor_socket_sendmsg+0x98/0x360 [ 115.332059][ T6547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 115.332080][ T6547] sock_sendmsg_nosec+0x14e/0x190 [ 115.332102][ T6547] ____sys_sendmsg+0x54e/0x850 [ 115.332133][ T6547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 115.332167][ T6547] ? import_iovec+0x73/0xa0 [ 115.332201][ T6547] ___sys_sendmsg+0x2a6/0x360 [ 115.332225][ T6547] ? __lock_acquire+0x747/0x2de0 [ 115.332251][ T6547] ? __pfx____sys_sendmsg+0x10/0x10 [ 115.332281][ T6547] ? futex_wait+0x2a2/0x390 [ 115.332329][ T6547] ? __fget_files+0x3a2/0x420 [ 115.332351][ T6547] ? __fget_files+0x2a/0x420 [ 115.332382][ T6547] __x64_sys_sendmsg+0x1b1/0x290 [ 115.332411][ T6547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 115.332457][ T6547] do_syscall_64+0x166/0x520 [ 115.332484][ T6547] ? trace_irq_disable+0x3b/0x140 [ 115.332508][ T6547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.332527][ T6547] ? clear_bhb_loop+0x70/0xc0 [ 115.332551][ T6547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.332570][ T6547] RIP: 0033:0x7ff82ed9f559 [ 115.332593][ T6547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.332610][ T6547] RSP: 002b:00007ff82fc34028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 115.332634][ T6547] RAX: ffffffffffffffda RBX: 00007ff82f026090 RCX: 00007ff82ed9f559 [ 115.332648][ T6547] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000084 [ 115.332660][ T6547] RBP: 00007ff82ee36b50 R08: 0000000000000000 R09: 0000000000000000 [ 115.332672][ T6547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 115.332683][ T6547] R13: 00007ff82f026128 R14: 00007ff82f026090 R15: 00007ffec60e0e88 [ 115.332714][ T6547] [ 115.341559][ T5739] usb 1-1: New USB device found: idVendor=dc4e, idProduct=b536, bcdDevice=26.64 [ 115.396123][ T5739] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 115.396274][ T5739] usb 1-1: can't read configurations, error -61 [ 115.553389][ T5739] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 115.584497][ T5739] usb 1-1: New USB device found: idVendor=dc4e, idProduct=b536, bcdDevice=26.64 [ 115.628202][ T5739] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 115.628356][ T5739] usb 1-1: can't read configurations, error -61 [ 115.629758][ T5739] usb usb1-port1: unable to enumerate USB device [ 115.721909][ T5722] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 115.919067][ T5722] usb 3-1: USB disconnect, device number 12 [ 116.184978][ T6570] warning: `syz.1.216' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 116.551829][ T5722] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 116.602042][ T6580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.221'. [ 116.681943][ T5722] usb 2-1: device descriptor read/64, error -71 [ 116.699885][ T6583] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 116.792359][ T5739] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 116.840932][ T194] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 116.856417][ T194] hid-generic 0000:0000:0000.000C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 116.921782][ T5722] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 116.941767][ T5739] usb 3-1: Using ep0 maxpacket: 32 [ 116.943818][ T5739] usb 3-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 116.945571][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.945599][ T5739] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.945634][ T5739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.949040][ T5739] usb 3-1: config 0 descriptor?? [ 117.051904][ T5722] usb 2-1: device descriptor read/64, error -71 [ 117.162167][ T5722] usb usb2-port1: attempt power cycle [ 117.373109][ T5739] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 117.373141][ T5739] ft260 0003:0403:6030.000D: unknown main item tag 0x0 [ 117.381430][ T6592] syzkaller1: entered promiscuous mode [ 117.381447][ T6592] syzkaller1: entered allmulticast mode [ 117.501790][ T5722] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 117.522483][ T5722] usb 2-1: device descriptor read/8, error -71 [ 117.565030][ T5739] ft260 0003:0403:6030.000D: chip code: 0000 0000 [ 117.691364][ T6596] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 117.761912][ T5722] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 117.765868][ T5739] ft260 0003:0403:6030.000D: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 117.794601][ T5722] usb 2-1: device descriptor read/8, error -71 [ 117.902021][ T5722] usb usb2-port1: unable to enumerate USB device [ 117.976487][ T5739] ft260 0003:0403:6030.000D: failed to retrieve status: -32, no wakeup [ 118.199411][ T6578] ft260 0003:0403:6030.000D: ft260_hid_output_report_check_status: failed to start transfer, ret -38 [ 118.254546][ T6578] ft260 0003:0403:6030.000D: ft260_i2c_write: failed with -38 [ 118.424261][ T6611] netlink: 204 bytes leftover after parsing attributes in process `syz.3.230'. [ 118.458509][ T5797] usb 3-1: USB disconnect, device number 13 [ 119.156311][ T32] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 119.321813][ T5797] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 119.322298][ T32] usb 4-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 119.323230][ T32] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 119.323272][ T32] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 119.323294][ T32] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 119.323316][ T32] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 119.323356][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.332096][ T6627] device-mapper: table: 248:2: flakey: Gap in table (-EINVAL) [ 119.332115][ T6627] device-mapper: ioctl: error adding target to table [ 119.475589][ T5797] usb 1-1: Using ep0 maxpacket: 8 [ 119.478678][ T5797] usb 1-1: New USB device found: idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 119.481600][ T5797] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 119.481642][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.515047][ T5797] usb 1-1: config 0 descriptor?? [ 119.572404][ T6632] netlink: 24 bytes leftover after parsing attributes in process `syz.2.239'. [ 119.572490][ T6632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.239'. [ 119.734889][ T6621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.738816][ T6621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.797013][ T5797] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 119.819897][ T6638] Bluetooth: MGMT ver 1.23 [ 119.900372][ T32] usb 4-1: USB disconnect, device number 10 [ 119.992389][ T6644] tipc: Enabling of bearer rejected, failed to enable media [ 120.201514][ T5797] usb 1-1: USB disconnect, device number 18 [ 120.871408][ T6664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.248'. [ 120.871443][ T6664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.248'. [ 120.967279][ T6665] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 120.967408][ T6665] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.041622][ T6665] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 121.074286][ T6665] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.074392][ T6665] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.087836][ T6665] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 121.129281][ T6671] fuse: Bad value for 'fd' [ 121.151370][ T6665] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.158532][ T6665] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.185457][ T6665] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 121.215226][ T6665] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 121.215289][ T6665] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.231536][ T6665] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 121.254656][ T6673] TCP: TCP_TX_DELAY enabled [ 121.533421][ T5797] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 121.581820][ T11] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 121.691889][ T5797] usb 2-1: Using ep0 maxpacket: 32 [ 121.692541][ T5797] usb 2-1: New USB device found: idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 121.694087][ T5797] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 121.694111][ T5797] usb 2-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 121.694134][ T5797] usb 2-1: config 0 interface 0 has no altsetting 0 [ 121.696081][ T5797] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.696105][ T5797] usb 2-1: Product: syz [ 121.696118][ T5797] usb 2-1: Manufacturer: syz [ 121.696132][ T5797] usb 2-1: SerialNumber: syz [ 121.698736][ T5797] usb 2-1: config 0 descriptor?? [ 121.754183][ T11] usb 1-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 121.760634][ T11] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.760784][ T11] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 121.760947][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.990940][ T6683] netlink: 'syz.3.255': attribute type 12 has an invalid length. [ 122.022715][ T11] dvbdev: DVB: registering new adapter (DEC2000-t) [ 122.053194][ T11] usb 1-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 122.105762][ T5797] gs_usb 2-1:0.0: Configuring for 1 interfaces [ 122.107111][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.256'. [ 122.230059][ T6677] FAULT_INJECTION: forcing a failure. [ 122.230059][ T6677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.230086][ T6677] CPU: 0 UID: 0 PID: 6677 Comm: syz.0.252 Not tainted syzkaller #0 PREEMPT(full) [ 122.230109][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.230121][ T6677] Call Trace: [ 122.230128][ T6677] [ 122.230136][ T6677] dump_stack_lvl+0xe8/0x150 [ 122.230169][ T6677] should_fail_ex+0x3eb/0x540 [ 122.230205][ T6677] prepare_alloc_pages+0x21e/0x5f0 [ 122.230234][ T6677] __alloc_frozen_pages_noprof+0x17c/0x410 [ 122.230259][ T6677] ? __lock_acquire+0x1511/0x2de0 [ 122.230284][ T6677] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 122.230318][ T6677] ? policy_nodemask+0x31b/0x980 [ 122.230351][ T6677] alloc_pages_mpol+0x21e/0x390 [ 122.230384][ T6677] alloc_pages_noprof+0xb1/0x2b0 [ 122.230415][ T6677] get_free_pages_noprof+0xf/0x80 [ 122.230438][ T6677] __kasan_populate_vmalloc+0x38/0x1c0 [ 122.230460][ T6677] ? do_raw_spin_unlock+0xf5/0x200 [ 122.230493][ T6677] alloc_vmap_area+0xd10/0x1410 [ 122.230535][ T6677] ? __pfx_alloc_vmap_area+0x10/0x10 [ 122.230566][ T6677] ? __get_vm_area_node+0x195/0x330 [ 122.230593][ T6677] ? __get_vm_area_node+0x195/0x330 [ 122.230626][ T6677] __get_vm_area_node+0x24a/0x330 [ 122.230662][ T6677] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 122.230682][ T6677] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 122.230732][ T6677] ? rcu_is_watching+0x16/0xb0 [ 122.230768][ T6677] ? __kasan_kmalloc+0x93/0xb0 [ 122.230795][ T6677] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.230814][ T6677] ? __kmalloc_cache_noprof+0x148/0x600 [ 122.230834][ T6677] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 122.230857][ T6677] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 122.230888][ T6677] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 122.230914][ T6677] vmalloc_noprof+0xb2/0xe0 [ 122.230933][ T6677] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 122.230961][ T6677] dvb_dmxdev_filter_start+0x107/0x10d0 [ 122.230986][ T6677] ? dvb_dmxdev_pes_filter_set+0x4cb/0x600 [ 122.231023][ T6677] dvb_demux_do_ioctl+0x48b/0x540 [ 122.231053][ T6677] dvb_usercopy+0x199/0x2e0 [ 122.231076][ T6677] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 122.231101][ T6677] ? __pfx_dvb_usercopy+0x10/0x10 [ 122.231136][ T6677] ? __fget_files+0x2a/0x420 [ 122.231162][ T6677] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 122.231186][ T6677] dvb_demux_ioctl+0x29/0x40 [ 122.231211][ T6677] __se_sys_ioctl+0xfc/0x170 [ 122.231241][ T6677] do_syscall_64+0x166/0x520 [ 122.231267][ T6677] ? trace_irq_disable+0x3b/0x140 [ 122.231291][ T6677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.231311][ T6677] ? clear_bhb_loop+0x70/0xc0 [ 122.231334][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.231353][ T6677] RIP: 0033:0x7f5c0d59f559 [ 122.231373][ T6677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.231389][ T6677] RSP: 002b:00007f5c0e513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.231409][ T6677] RAX: ffffffffffffffda RBX: 00007f5c0d825fa0 RCX: 00007f5c0d59f559 [ 122.231424][ T6677] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000004 [ 122.231437][ T6677] RBP: 00007f5c0e513090 R08: 0000000000000000 R09: 0000000000000000 [ 122.231448][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.231460][ T6677] R13: 00007f5c0d826038 R14: 00007f5c0d825fa0 R15: 00007fffeaa5ebb8 [ 122.231491][ T6677] [ 122.253659][ T6677] warn_alloc: 1 callbacks suppressed [ 122.253694][ T6677] syz.0.252: vmalloc error: size 8192, align 0x1, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 122.267333][ T6677] CPU: 0 UID: 0 PID: 6677 Comm: syz.0.252 Not tainted syzkaller #0 PREEMPT(full) [ 122.267391][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 122.267407][ T6677] Call Trace: [ 122.267432][ T6677] [ 122.267452][ T6677] dump_stack_lvl+0xe8/0x150 [ 122.267524][ T6677] warn_alloc+0x24d/0x270 [ 122.267578][ T6677] ? kasan_quarantine_put+0xbb/0x1f0 [ 122.267648][ T6677] ? __pfx_warn_alloc+0x10/0x10 [ 122.267700][ T6677] ? __get_vm_area_node+0x263/0x330 [ 122.267790][ T6677] ? __get_vm_area_node+0x263/0x330 [ 122.267877][ T6677] __vmalloc_node_range_noprof+0x396/0x16f0 [ 122.267981][ T6677] ? rcu_is_watching+0x16/0xb0 [ 122.268047][ T6677] ? __kasan_kmalloc+0x93/0xb0 [ 122.268129][ T6677] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 122.268217][ T6677] ? __kmalloc_cache_noprof+0x148/0x600 [ 122.268292][ T6677] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 122.268355][ T6677] ? dvb_dmxdev_add_pid+0x150/0x7a0 [ 122.268455][ T6677] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 122.268518][ T6677] vmalloc_noprof+0xb2/0xe0 [ 122.268577][ T6677] ? dvb_dmxdev_filter_start+0x107/0x10d0 [ 122.268696][ T6677] dvb_dmxdev_filter_start+0x107/0x10d0 [ 122.268779][ T6677] ? dvb_dmxdev_pes_filter_set+0x4cb/0x600 [ 122.268889][ T6677] dvb_demux_do_ioctl+0x48b/0x540 [ 122.268979][ T6677] dvb_usercopy+0x199/0x2e0 [ 122.269044][ T6677] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 122.269124][ T6677] ? __pfx_dvb_usercopy+0x10/0x10 [ 122.269229][ T6677] ? __fget_files+0x2a/0x420 [ 122.269322][ T6677] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 122.269427][ T6677] dvb_demux_ioctl+0x29/0x40 [ 122.269511][ T6677] __se_sys_ioctl+0xfc/0x170 [ 122.269594][ T6677] do_syscall_64+0x166/0x520 [ 122.269693][ T6677] ? trace_irq_disable+0x3b/0x140 [ 122.269763][ T6677] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.269811][ T6677] ? clear_bhb_loop+0x70/0xc0 [ 122.269882][ T6677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.269909][ T6677] RIP: 0033:0x7f5c0d59f559 [ 122.269926][ T6677] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 122.269942][ T6677] RSP: 002b:00007f5c0e513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 122.269961][ T6677] RAX: ffffffffffffffda RBX: 00007f5c0d825fa0 RCX: 00007f5c0d59f559 [ 122.269975][ T6677] RDX: 0000200000000000 RSI: 0000000040146f2c RDI: 0000000000000004 [ 122.269987][ T6677] RBP: 00007f5c0e513090 R08: 0000000000000000 R09: 0000000000000000 [ 122.269999][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 122.270010][ T6677] R13: 00007f5c0d826038 R14: 00007f5c0d825fa0 R15: 00007fffeaa5ebb8 [ 122.270041][ T6677] [ 122.304927][ T6677] Mem-Info: [ 122.305020][ T6677] active_anon:6784 inactive_anon:0 isolated_anon:0 [ 122.305020][ T6677] active_file:0 inactive_file:56211 isolated_file:0 [ 122.305020][ T6677] unevictable:0 dirty:64 writeback:0 [ 122.305020][ T6677] slab_reclaimable:19701 slab_unreclaimable:88257 [ 122.305020][ T6677] mapped:26078 shmem:1671 pagetables:1188 [ 122.305020][ T6677] sec_pagetables:0 bounce:0 [ 122.305020][ T6677] kernel_misc_reclaimable:0 [ 122.305020][ T6677] free:1304206 free_pcp:19929 free_cma:0 [ 122.305197][ T6677] Node 0 active_anon:27136kB inactive_anon:0kB active_file:0kB inactive_file:224640kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:104312kB dirty:252kB writeback:0kB shmem:6684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13324kB pagetables:4616kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 122.305370][ T6677] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 122.305538][ T6677] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.308908][ T6677] lowmem_reserve[]: 0 2460 2461 2461 2461 [ 122.308998][ T6677] Node 0 DMA32 free:1259316kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27136kB inactive_anon:0kB active_file:0kB inactive_file:224640kB unevictable:0kB writepending:252kB zspages:0kB present:3129332kB managed:2519516kB mlocked:0kB bounce:0kB free_pcp:79716kB local_pcp:35920kB free_cma:0kB [ 122.309260][ T6677] lowmem_reserve[]: 0 0 1 1 1 [ 122.309334][ T6677] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1320kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 122.309527][ T6677] lowmem_reserve[]: 0 0 0 0 0 [ 122.309600][ T6677] Node 1 Normal free:3942148kB boost:0kB min:55968kB low:69960kB high:83952kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 122.309826][ T6677] lowmem_reserve[]: 0 0 0 0 0 [ 122.339686][ T6677] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 122.340211][ T6677] Node 0 DMA32: 22*4kB (UE) 59*8kB (UE) 152*16kB (UM) 229*32kB (UME) 142*64kB (UME) 120*128kB (ME) 77*256kB (M) 27*512kB (M) 11*1024kB (M) 4*2048kB (UM) 286*4096kB (M) = 1259216kB [ 122.340882][ T6677] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 122.341217][ T6677] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 13*16kB (UM) 7*32kB (UM) 3*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942148kB [ 122.368849][ T6677] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.368865][ T6677] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.368881][ T6677] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 122.368896][ T6677] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 122.368911][ T6677] 57928 total pagecache pages [ 122.368943][ T6677] 0 pages in swap cache [ 122.368964][ T6677] Free swap = 124996kB [ 122.368984][ T6677] Total swap = 124996kB [ 122.369008][ T6677] 2097051 pages RAM [ 122.369031][ T6677] 0 pages HighMem/MovableOnly [ 122.369048][ T6677] 435226 pages reserved [ 122.369141][ T6677] 0 pages cma reserved [ 122.378054][ T11] ttusb_dec_send_command: command bulk message failed: error -71 [ 122.456037][ T11] usb 1-1: USB disconnect, device number 19 [ 122.571509][ T6669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.579312][ T6669] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.074110][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.141832][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.232463][ T5639] Bluetooth: hci3: command 0x0405 tx timeout [ 123.232572][ T5639] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.623397][ T5722] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 123.671080][ T6699] FAULT_INJECTION: forcing a failure. [ 123.671080][ T6699] name failslab, interval 1, probability 0, space 0, times 0 [ 123.671106][ T6699] CPU: 0 UID: 0 PID: 6699 Comm: syz.2.261 Not tainted syzkaller #0 PREEMPT(full) [ 123.671127][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 123.671139][ T6699] Call Trace: [ 123.671146][ T6699] [ 123.671154][ T6699] dump_stack_lvl+0xe8/0x150 [ 123.671187][ T6699] should_fail_ex+0x3eb/0x540 [ 123.671222][ T6699] should_failslab+0xa8/0x100 [ 123.671251][ T6699] __kvmalloc_node_noprof+0x171/0x820 [ 123.671277][ T6699] ? __kvmalloc_node_noprof+0x340/0x820 [ 123.671300][ T6699] ? pfifo_fast_init+0x372/0x6c0 [ 123.671328][ T6699] ? pfifo_fast_init+0x372/0x6c0 [ 123.671362][ T6699] pfifo_fast_init+0x372/0x6c0 [ 123.671394][ T6699] qdisc_create_dflt+0x13b/0x4e0 [ 123.671427][ T6699] dev_activate+0x37a/0x1150 [ 123.671458][ T6699] __dev_open+0x699/0x850 [ 123.671485][ T6699] ? __pfx___dev_open+0x10/0x10 [ 123.671504][ T6699] ? __dev_change_flags+0x2e2/0x820 [ 123.671532][ T6699] ? __local_bh_enable_ip+0xd6/0x140 [ 123.671561][ T6699] __dev_change_flags+0x329/0x820 [ 123.671593][ T6699] ? __pfx___dev_change_flags+0x10/0x10 [ 123.671625][ T6699] ? dev_ioctl+0x7a4/0x1150 [ 123.671652][ T6699] ? __pfx___mutex_lock+0x10/0x10 [ 123.671684][ T6699] ? full_name_hash+0x92/0xe0 [ 123.671708][ T6699] netif_change_flags+0x7c/0x1b0 [ 123.671738][ T6699] dev_change_flags+0x128/0x260 [ 123.671767][ T6699] dev_ioctl+0x7b4/0x1150 [ 123.671795][ T6699] sock_do_ioctl+0x23e/0x320 [ 123.671816][ T6699] ? __pfx_sock_do_ioctl+0x10/0x10 [ 123.671862][ T6699] sock_ioctl+0x57a/0x7e0 [ 123.671891][ T6699] ? __fget_files+0x2a/0x420 [ 123.671911][ T6699] ? __pfx_sock_ioctl+0x10/0x10 [ 123.671940][ T6699] ? __fget_files+0x2a/0x420 [ 123.671961][ T6699] ? __fget_files+0x2a/0x420 [ 123.671986][ T6699] ? bpf_lsm_file_ioctl+0x9/0x20 [ 123.672011][ T6699] ? __pfx_sock_ioctl+0x10/0x10 [ 123.672039][ T6699] __se_sys_ioctl+0xfc/0x170 [ 123.672067][ T6699] do_syscall_64+0x166/0x520 [ 123.672094][ T6699] ? trace_irq_disable+0x3b/0x140 [ 123.672118][ T6699] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.672137][ T6699] ? clear_bhb_loop+0x70/0xc0 [ 123.672160][ T6699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.672180][ T6699] RIP: 0033:0x7ff82ed9f559 [ 123.672198][ T6699] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.672214][ T6699] RSP: 002b:00007ff82fc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 123.672234][ T6699] RAX: ffffffffffffffda RBX: 00007ff82f025fa0 RCX: 00007ff82ed9f559 [ 123.672249][ T6699] RDX: 00002000000001c0 RSI: 0000000000008914 RDI: 0000000000000006 [ 123.672261][ T6699] RBP: 00007ff82fc55090 R08: 0000000000000000 R09: 0000000000000000 [ 123.672273][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 123.672284][ T6699] R13: 00007ff82f026038 R14: 00007ff82f025fa0 R15: 00007ffec60e0e88 [ 123.672315][ T6699] [ 123.691305][ T6699] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 123.799599][ T5722] usb 4-1: New USB device found: idVendor=08b7, idProduct=0000, bcdDevice=0.00 [ 123.821857][ T11] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 123.824620][ T5722] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.824642][ T5722] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 123.870072][ T5722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 123.870097][ T5722] usb 4-1: SerialNumber: syz [ 123.993298][ T11] usb 1-1: Using ep0 maxpacket: 8 [ 124.002049][ T11] usb 1-1: New USB device found: idVendor=05ac, idProduct=921d, bcdDevice=23.4f [ 124.020644][ T11] usb 1-1: config 6 has an invalid interface number: 26 but max is 3 [ 124.020698][ T11] usb 1-1: config 6 has an invalid interface number: 14 but max is 3 [ 124.020751][ T11] usb 1-1: config 6 contains an unexpected descriptor of type 0x2, skipping [ 124.020794][ T11] usb 1-1: config 6 has an invalid interface number: 102 but max is 3 [ 124.020840][ T11] usb 1-1: config 6 has an invalid interface number: 124 but max is 3 [ 124.020884][ T11] usb 1-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 124.020928][ T11] usb 1-1: config 6 has no interface number 0 [ 124.020964][ T11] usb 1-1: config 6 has no interface number 1 [ 124.021000][ T11] usb 1-1: config 6 has no interface number 2 [ 124.021035][ T11] usb 1-1: config 6 has no interface number 3 [ 124.021194][ T11] usb 1-1: config 6 interface 26 altsetting 10 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 124.021261][ T11] usb 1-1: config 6 interface 26 altsetting 10 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 124.021334][ T11] usb 1-1: config 6 interface 26 altsetting 10 has a duplicate endpoint with address 0x2, skipping [ 124.021392][ T11] usb 1-1: config 6 interface 26 altsetting 10 endpoint 0xB has invalid maxpacket 576, setting to 64 [ 124.021454][ T11] usb 1-1: config 6 interface 26 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 124.021511][ T11] usb 1-1: config 6 interface 26 altsetting 10 has an invalid descriptor for endpoint zero, skipping [ 124.021581][ T11] usb 1-1: config 6 interface 14 altsetting 7 has an endpoint descriptor with address 0x35, changing to 0x5 [ 124.037463][ T11] usb 1-1: config 6 interface 14 altsetting 7 endpoint 0x5 has an invalid bInterval 210, changing to 11 [ 124.037642][ T11] usb 1-1: config 6 interface 14 altsetting 7 endpoint 0x5 has invalid maxpacket 18389, setting to 1024 [ 124.037728][ T11] usb 1-1: config 6 interface 14 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 124.037780][ T11] usb 1-1: config 6 interface 14 altsetting 7 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 124.037841][ T11] usb 1-1: config 6 interface 14 altsetting 7 bulk endpoint 0xF has invalid maxpacket 32 [ 124.037894][ T11] usb 1-1: config 6 interface 14 altsetting 7 has a duplicate endpoint with address 0x2, skipping [ 124.037965][ T11] usb 1-1: config 6 interface 14 altsetting 7 has a duplicate endpoint with address 0x9, skipping [ 124.038017][ T11] usb 1-1: config 6 interface 14 altsetting 7 has 8 endpoint descriptors, different from the interface descriptor's value: 7 [ 124.042555][ T11] usb 1-1: config 6 interface 102 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 124.042580][ T11] usb 1-1: config 6 interface 102 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 124.042603][ T11] usb 1-1: config 6 interface 102 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 124.042624][ T11] usb 1-1: config 6 interface 102 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 124.042662][ T11] usb 1-1: config 6 interface 102 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 124.042730][ T11] usb 1-1: config 6 interface 102 altsetting 1 has an endpoint descriptor with address 0x1A, changing to 0xA [ 124.042832][ T11] usb 1-1: config 6 interface 102 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 124.042888][ T11] usb 1-1: config 6 interface 102 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 124.042934][ T11] usb 1-1: config 6 interface 102 altsetting 1 has a duplicate endpoint with address 0xC, skipping [ 124.043010][ T11] usb 1-1: config 6 interface 102 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 124.043062][ T11] usb 1-1: config 6 interface 102 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 124.043142][ T11] usb 1-1: config 6 interface 124 altsetting 130 has a duplicate endpoint with address 0xD, skipping [ 124.043195][ T11] usb 1-1: config 6 interface 124 altsetting 130 has an invalid descriptor for endpoint zero, skipping [ 124.043247][ T11] usb 1-1: config 6 interface 124 altsetting 130 endpoint 0x84 has invalid wMaxPacketSize 0 [ 124.043299][ T11] usb 1-1: config 6 interface 124 altsetting 130 has a duplicate endpoint with address 0x7, skipping [ 124.043340][ T11] usb 1-1: config 6 interface 26 has no altsetting 0 [ 124.043385][ T11] usb 1-1: config 6 interface 14 has no altsetting 0 [ 124.043422][ T11] usb 1-1: config 6 interface 102 has no altsetting 0 [ 124.043464][ T11] usb 1-1: config 6 interface 124 has no altsetting 0 [ 124.083728][ T11] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.083794][ T11] usb 1-1: Product: ⠊ [ 124.083829][ T11] usb 1-1: Manufacturer: 胘氩줙髉삞恺ꨙ [ 124.083864][ T11] usb 1-1: SerialNumber: ᐉ [ 124.410650][ T5722] usb 4-1: 0:2 : does not exist [ 124.410736][ T5722] usb 4-1: unit 5 not found! [ 124.491485][ T194] usb 2-1: USB disconnect, device number 18 [ 124.605449][ T5722] usb 4-1: USB disconnect, device number 11 [ 124.624525][ T6704] netlink: 'syz.2.262': attribute type 21 has an invalid length. [ 124.624572][ T6704] netlink: 128 bytes leftover after parsing attributes in process `syz.2.262'. [ 124.624642][ T6704] netlink: 'syz.2.262': attribute type 4 has an invalid length. [ 124.624654][ T6704] netlink: 3 bytes leftover after parsing attributes in process `syz.2.262'. [ 124.662547][ T11] appledisplay 1-1:6.26: Could not find int-in endpoint [ 124.692383][ T11] usbhid 1-1:6.26: couldn't find an input interrupt endpoint [ 124.774284][ T11] usb 1-1: USB disconnect, device number 20 [ 124.847448][ T6709] jffs2: notice: (6709) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 125.121926][ T5797] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 125.142294][ T5643] Bluetooth: hci1: command 0x0c1a tx timeout [ 125.223761][ T5643] Bluetooth: hci2: command 0x0c1a tx timeout [ 125.262147][ T5797] usb 3-1: device descriptor read/64, error -71 [ 125.292488][ T6720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.267'. [ 125.292511][ T6720] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 125.302411][ T5643] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.302493][ T5643] Bluetooth: hci3: command 0x0405 tx timeout [ 125.511874][ T5797] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 125.531824][ T11] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 125.644293][ T5797] usb 3-1: device descriptor read/64, error -71 [ 125.669628][ T6730] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 125.682623][ T11] usb 1-1: Using ep0 maxpacket: 32 [ 125.683180][ T11] usb 1-1: New USB device found: idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 125.686836][ T11] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.690568][ T6728] ip6tnl0 speed is unknown, defaulting to 1000 [ 125.691611][ T6728] ip6tnl0 speed is unknown, defaulting to 1000 [ 125.697351][ T11] usb 1-1: config 0 descriptor?? [ 125.728685][ T11] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 125.743756][ T6728] FAULT_INJECTION: forcing a failure. [ 125.743756][ T6728] name failslab, interval 1, probability 0, space 0, times 0 [ 125.743787][ T6728] CPU: 0 UID: 0 PID: 6728 Comm: syz.3.270 Not tainted syzkaller #0 PREEMPT(full) [ 125.743814][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 125.743827][ T6728] Call Trace: [ 125.743836][ T6728] [ 125.743847][ T6728] dump_stack_lvl+0xe8/0x150 [ 125.743885][ T6728] should_fail_ex+0x3eb/0x540 [ 125.743925][ T6728] should_failslab+0xa8/0x100 [ 125.743958][ T6728] ? __kernfs_new_node+0xe6/0x980 [ 125.743993][ T6728] kmem_cache_alloc_noprof+0x9c/0x600 [ 125.744019][ T6728] ? __kernfs_new_node+0xe6/0x980 [ 125.744059][ T6728] __kernfs_new_node+0xe6/0x980 [ 125.744102][ T6728] ? __pfx___kernfs_new_node+0x10/0x10 [ 125.744134][ T6728] ? lock_acquire+0x115/0x350 [ 125.744158][ T6728] ? kernfs_root+0x1c/0x230 [ 125.744196][ T6728] ? kernfs_root+0x1c/0x230 [ 125.744227][ T6728] ? kernfs_root+0x1c/0x230 [ 125.744256][ T6728] ? kernfs_root+0x1c/0x230 [ 125.744292][ T6728] kernfs_new_node+0xeb/0x140 [ 125.744330][ T6728] __kernfs_create_file+0x4b/0x2e0 [ 125.744359][ T6728] sysfs_add_file_mode_ns+0x237/0x300 [ 125.744395][ T6728] sysfs_merge_group+0x183/0x320 [ 125.744439][ T6728] ? __pfx_sysfs_merge_group+0x10/0x10 [ 125.744471][ T6728] ? device_add_attrs+0x5c3/0x600 [ 125.744504][ T6728] ? __pfx_device_add_attrs+0x10/0x10 [ 125.744538][ T6728] dpm_sysfs_add+0xd2/0x270 [ 125.744576][ T6728] device_add+0x4ca/0xb80 [ 125.744607][ T6728] ib_register_device+0xd55/0x1080 [ 125.744639][ T6728] ? __pfx_ib_register_device+0x10/0x10 [ 125.744665][ T6728] ? ib_device_set_netdev+0x5c4/0x6c0 [ 125.744693][ T6728] rxe_register_device+0x1e3/0x350 [ 125.744714][ T6728] rxe_net_add+0x81/0x110 [ 125.744733][ T6728] rxe_newlink+0xf4/0x1c0 [ 125.744758][ T6728] nldev_newlink+0x5be/0x650 [ 125.744786][ T6728] ? __pfx_nldev_newlink+0x10/0x10 [ 125.744878][ T6728] ? __pfx_hook_capable+0x10/0x10 [ 125.744903][ T6728] ? __pfx_hook_capable+0x10/0x10 [ 125.744940][ T6728] ? apparmor_capable+0x126/0x170 [ 125.744959][ T6728] ? security_capable+0x7e/0x2c0 [ 125.744985][ T6728] ? __pfx_nldev_newlink+0x10/0x10 [ 125.745010][ T6728] rdma_nl_rcv+0x6ef/0xa40 [ 125.745044][ T6728] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 125.745086][ T6728] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.745105][ T6728] ? netlink_deliver_tap+0x2e/0x1b0 [ 125.745128][ T6728] netlink_unicast+0x8ef/0xa80 [ 125.745167][ T6728] netlink_sendmsg+0x7f0/0xb20 [ 125.745190][ T6728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.745212][ T6728] ? aa_sock_msg_perm+0x144/0x210 [ 125.745239][ T6728] ? apparmor_socket_sendmsg+0x98/0x360 [ 125.745262][ T6728] ? __pfx_netlink_sendmsg+0x10/0x10 [ 125.745280][ T6728] sock_sendmsg_nosec+0x14e/0x190 [ 125.745300][ T6728] ____sys_sendmsg+0x54e/0x850 [ 125.745327][ T6728] ? __pfx_____sys_sendmsg+0x10/0x10 [ 125.745357][ T6728] ? import_iovec+0x73/0xa0 [ 125.745387][ T6728] ___sys_sendmsg+0x2a6/0x360 [ 125.745408][ T6728] ? __lock_acquire+0x747/0x2de0 [ 125.745440][ T6728] ? __pfx____sys_sendmsg+0x10/0x10 [ 125.745468][ T6728] ? futex_wait+0x2a2/0x390 [ 125.745512][ T6728] ? __fget_files+0x3a2/0x420 [ 125.745531][ T6728] ? __fget_files+0x2a/0x420 [ 125.745557][ T6728] __x64_sys_sendmsg+0x1b1/0x290 [ 125.745582][ T6728] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 125.745621][ T6728] do_syscall_64+0x166/0x520 [ 125.745647][ T6728] ? trace_irq_disable+0x3b/0x140 [ 125.745670][ T6728] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.745688][ T6728] ? clear_bhb_loop+0x70/0xc0 [ 125.745712][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.745730][ T6728] RIP: 0033:0x7fecd099f559 [ 125.745746][ T6728] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.745760][ T6728] RSP: 002b:00007fecd18b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.745780][ T6728] RAX: ffffffffffffffda RBX: 00007fecd0c25fa0 RCX: 00007fecd099f559 [ 125.745794][ T6728] RDX: 000000000000c000 RSI: 00002000000003c0 RDI: 0000000000000005 [ 125.745807][ T6728] RBP: 00007fecd0a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 125.745820][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.745831][ T6728] R13: 00007fecd0c26038 R14: 00007fecd0c25fa0 R15: 00007ffd97d6af58 [ 125.745857][ T6728] [ 125.776864][ T5797] usb usb3-port1: attempt power cycle [ 125.893314][ T6728] rdma_rxe: rxe_newlink: failed to add ip6tnl0 [ 126.154865][ T6721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.160845][ T6721] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.163888][ T5797] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 126.182072][ T11] gspca_vc032x: reg_w err -71 [ 126.182108][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182135][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182154][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182174][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182201][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182221][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182241][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182260][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182286][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182305][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182324][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182344][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182363][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182391][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182410][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182435][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182454][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182475][ T11] gspca_vc032x: I2c Bus Busy Wait 00 [ 126.182494][ T11] gspca_vc032x: Unknown sensor... [ 126.182679][ T11] vc032x 1-1:0.0: probe with driver vc032x failed with error -22 [ 126.217119][ T5797] usb 3-1: device descriptor read/8, error -71 [ 126.227686][ T11] usb 1-1: USB disconnect, device number 21 [ 126.452493][ T5797] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 126.478072][ T5797] usb 3-1: device descriptor read/8, error -71 [ 126.584244][ T5797] usb usb3-port1: unable to enumerate USB device [ 126.671770][ T5739] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 126.691801][ T5369] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 126.824196][ T5739] usb 4-1: New USB device found: idVendor=0b48, idProduct=1008, bcdDevice=1.00 [ 126.825544][ T5739] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.825589][ T5739] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 126.825628][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.851857][ T5369] usb 2-1: Using ep0 maxpacket: 16 [ 126.854506][ T5369] usb 2-1: New USB device found: idVendor=28bd, idProduct=0934, bcdDevice=0.00 [ 126.856688][ T5369] usb 2-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 126.856783][ T5369] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.856905][ T5369] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.856959][ T5369] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 126.857020][ T5369] usb 2-1: config 0 interface 0 has no altsetting 0 [ 126.857090][ T5369] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.869270][ T5369] usb 2-1: config 0 descriptor?? [ 126.983091][ T6741] netlink: 'syz.0.276': attribute type 4 has an invalid length. [ 126.987948][ T6741] FAULT_INJECTION: forcing a failure. [ 126.987948][ T6741] name failslab, interval 1, probability 0, space 0, times 0 [ 126.987976][ T6741] CPU: 1 UID: 0 PID: 6741 Comm: syz.0.276 Not tainted syzkaller #0 PREEMPT(full) [ 126.987998][ T6741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 126.988011][ T6741] Call Trace: [ 126.988019][ T6741] [ 126.988027][ T6741] dump_stack_lvl+0xe8/0x150 [ 126.988064][ T6741] should_fail_ex+0x3eb/0x540 [ 126.988101][ T6741] should_failslab+0xa8/0x100 [ 126.988130][ T6741] ? vm_area_dup+0x32/0x8e0 [ 126.988159][ T6741] kmem_cache_alloc_noprof+0x9c/0x600 [ 126.988183][ T6741] ? vm_area_dup+0x32/0x8e0 [ 126.988219][ T6741] vm_area_dup+0x32/0x8e0 [ 126.988253][ T6741] __split_vma+0x2c2/0xa40 [ 126.988285][ T6741] ? __pfx___split_vma+0x10/0x10 [ 126.988313][ T6741] ? rcu_is_watching+0x16/0xb0 [ 126.988349][ T6741] ? __pfx___up_read+0x10/0x10 [ 126.988385][ T6741] vms_gather_munmap_vmas+0x322/0x1370 [ 126.988411][ T6741] ? vms_complete_munmap_vmas+0x996/0xc10 [ 126.988449][ T6741] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 126.988492][ T6741] do_vmi_align_munmap+0x2b4/0x4b0 [ 126.988535][ T6741] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 126.988580][ T6741] ? mas_walk+0x37e/0x490 [ 126.988611][ T6741] ? mas_find+0x642/0xcb0 [ 126.988633][ T6741] do_vmi_munmap+0x252/0x2d0 [ 126.988665][ T6741] __vm_munmap+0x240/0x420 [ 126.988695][ T6741] ? __pfx___vm_munmap+0x10/0x10 [ 126.988721][ T6741] ? vm_mmap_pgoff+0x378/0x520 [ 126.988754][ T6741] ? do_user_addr_fault+0xd3f/0x1480 [ 126.988783][ T6741] __x64_sys_munmap+0x60/0x70 [ 126.988814][ T6741] do_syscall_64+0x166/0x520 [ 126.988842][ T6741] ? trace_irq_disable+0x3b/0x140 [ 126.988867][ T6741] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.988887][ T6741] ? clear_bhb_loop+0x70/0xc0 [ 126.988911][ T6741] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.988931][ T6741] RIP: 0033:0x7f5c0d59f387 [ 126.988948][ T6741] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 0b 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.988966][ T6741] RSP: 002b:00007f5c0e511d18 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 126.988987][ T6741] RAX: ffffffffffffffda RBX: 00007f5c04000000 RCX: 00007f5c0d59f387 [ 126.989001][ T6741] RDX: 0000000000000000 RSI: 0000000003600000 RDI: 00007f5c08000000 [ 126.989014][ T6741] RBP: 0000000000021000 R08: 00000000ffffffff R09: 0000000000000000 [ 126.989027][ T6741] R10: 0000000000000022 R11: 0000000000000206 R12: 0000000004000000 [ 126.989039][ T6741] R13: 0000000000001000 R14: 00007f5c08000000 R15: 0000000000a00000 [ 126.989069][ T6741] [ 127.226325][ T5739] dvbdev: DVB: registering new adapter (DEC2000-t) [ 127.232506][ T5639] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.288482][ T5739] usb 4-1: DVB: registering adapter 1 frontend 0 (TechnoTrend/Hauppauge DEC2000-t Frontend)... [ 127.304067][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.304605][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.312389][ T5639] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.333804][ T5797] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 127.338037][ T5369] input: HID 28bd:0934 Mouse as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:0934.000E/input/input12 [ 127.365300][ T5739] ttusb_dec_send_command: command bulk message failed: error -71 [ 127.368495][ T5739] usb 4-1: USB disconnect, device number 12 [ 127.391858][ T5643] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.391898][ T5639] Bluetooth: hci3: command 0x0405 tx timeout [ 127.418759][ T5369] uclogic 0003:28BD:0934.000E: input,hidraw0: USB HID v0.01 Mouse [HID 28bd:0934] on usb-dummy_hcd.1-1/input0 [ 127.491847][ T5797] usb 1-1: Using ep0 maxpacket: 16 [ 127.492380][ T5797] usb 1-1: New USB device found: idVendor=04d8, idProduct=00dd, bcdDevice=0.00 [ 127.493340][ T5797] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.493368][ T5797] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.493389][ T5797] usb 1-1: config 0 interface 0 has no altsetting 0 [ 127.493420][ T5797] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.495819][ T5797] usb 1-1: config 0 descriptor?? [ 127.530704][ T6736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.572937][ T6736] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.572984][ T6743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.573470][ T6743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.917110][ T5797] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 127.917148][ T5797] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 127.917178][ T5797] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 127.917207][ T5797] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 127.917244][ T5797] mcp2221 0003:04D8:00DD.000F: unknown main item tag 0x0 [ 127.918096][ T5797] mcp2221 0003:04D8:00DD.000F: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 128.111353][ T5369] usb 1-1: USB disconnect, device number 22 [ 128.251769][ T5797] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 128.401734][ T5797] usb 3-1: Using ep0 maxpacket: 16 [ 128.402437][ T5797] usb 3-1: New USB device found: idVendor=046d, idProduct=08f3, bcdDevice=b.28 [ 128.403570][ T5797] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 128.403594][ T5797] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.403613][ T5797] usb 3-1: config 0 has no interface number 0 [ 128.407044][ T5797] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.407078][ T5797] usb 3-1: Product: syz [ 128.407091][ T5797] usb 3-1: Manufacturer: syz [ 128.407106][ T5797] usb 3-1: SerialNumber: syz [ 128.410862][ T5797] usb 3-1: config 0 descriptor?? [ 128.439551][ T5797] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 128.439670][ T5797] uvcvideo 3-1:0.105: No valid video chain found. [ 128.476461][ T6765] netlink: 20 bytes leftover after parsing attributes in process `syz.3.281'. [ 128.630035][ T5797] usb 3-1: USB disconnect, device number 18 [ 129.070230][ T6783] netlink: 'syz.3.289': attribute type 13 has an invalid length. [ 129.229088][ T6750] syz.2.277 (6750) used greatest stack depth: 12224 bytes left [ 129.340493][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.293'. [ 129.517059][ T5739] usb 2-1: USB disconnect, device number 19 [ 129.715694][ T6797] fuse: Bad value for 'group_id' [ 129.715712][ T6797] fuse: Bad value for 'group_id' [ 129.770134][ T6799] netlink: 128 bytes leftover after parsing attributes in process `syz.2.295'. [ 129.788773][ T6799] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.112238][ T5739] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 130.262722][ T5739] usb 4-1: Using ep0 maxpacket: 16 [ 130.265341][ T5739] usb 4-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 130.266327][ T5739] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 130.266350][ T5739] usb 4-1: config 0 has no interface number 0 [ 130.266387][ T5739] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 130.266411][ T5739] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 130.276959][ T5739] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.276982][ T5739] usb 4-1: Product: syz [ 130.276996][ T5739] usb 4-1: Manufacturer: syz [ 130.277009][ T5739] usb 4-1: SerialNumber: syz [ 130.304311][ T5739] usb 4-1: config 0 descriptor?? [ 130.357777][ T6801] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.357905][ T6801] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.575552][ T6801] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.575680][ T6801] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 130.628467][ T6815] netlink: 'syz.1.300': attribute type 58 has an invalid length. [ 130.628484][ T6815] netlink: 152 bytes leftover after parsing attributes in process `syz.1.300'. [ 130.787770][ T5739] asix 4-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 131.971775][ T5369] usb 3-1: new full-speed USB device number 19 using dummy_hcd [ 132.005199][ T5739] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 132.005228][ T5739] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 132.005510][ T5739] asix 4-1:0.34: probe with driver asix failed with error -71 [ 132.018224][ T5739] usb 4-1: USB disconnect, device number 13 [ 132.122777][ T5369] usb 3-1: not running at top speed; connect to a high speed hub [ 132.122806][ T5369] usb 3-1: New USB device found: idVendor=06cd, idProduct=0131, bcdDevice=1.00 [ 132.123752][ T5369] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.123794][ T5369] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 132.127803][ T5369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.127825][ T5369] usb 3-1: Product: syz [ 132.127840][ T5369] usb 3-1: Manufacturer: syz [ 132.127853][ T5369] usb 3-1: SerialNumber: syz [ 132.199949][ T5369] keyspan 3-1:1.0: Keyspan 4 port adapter converter detected [ 132.200283][ T5369] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 81 [ 132.200350][ T5369] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 88 [ 132.226328][ T5369] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 1 [ 132.230858][ T5369] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 132.250392][ T5369] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 2 [ 132.261222][ T5369] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 132.271094][ T5369] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 4 [ 132.285012][ T5369] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 132.288129][ T5369] keyspan 3-1:1.0: found no endpoint descriptor for endpoint 6 [ 132.289717][ T5369] usb 3-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 132.465490][ T6838] FAULT_INJECTION: forcing a failure. [ 132.465490][ T6838] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 132.465518][ T6838] CPU: 1 UID: 0 PID: 6838 Comm: syz.1.308 Not tainted syzkaller #0 PREEMPT(full) [ 132.465540][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 132.465552][ T6838] Call Trace: [ 132.465560][ T6838] [ 132.465568][ T6838] dump_stack_lvl+0xe8/0x150 [ 132.465602][ T6838] should_fail_ex+0x3eb/0x540 [ 132.465638][ T6838] prepare_alloc_pages+0x21e/0x5f0 [ 132.465669][ T6838] __alloc_frozen_pages_noprof+0x17c/0x410 [ 132.465698][ T6838] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.465722][ T6838] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 132.465749][ T6838] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 132.465782][ T6838] __alloc_pages_noprof+0x10/0x100 [ 132.465807][ T6838] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 132.465840][ T6838] ? alloc_pages_noprof+0x140/0x2b0 [ 132.465872][ T6838] __kasan_populate_vmalloc+0xb7/0x1c0 [ 132.465902][ T6838] alloc_vmap_area+0xd10/0x1410 [ 132.465945][ T6838] ? __pfx_alloc_vmap_area+0x10/0x10 [ 132.465977][ T6838] ? __get_vm_area_node+0x195/0x330 [ 132.466005][ T6838] ? __get_vm_area_node+0x195/0x330 [ 132.466039][ T6838] __get_vm_area_node+0x24a/0x330 [ 132.466075][ T6838] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 132.466096][ T6838] ? do_replace+0x22f/0x470 [ 132.466116][ T6838] ? __lock_acquire+0x747/0x2de0 [ 132.466155][ T6838] ? rcu_is_watching+0x16/0xb0 [ 132.466186][ T6838] ? lock_acquire+0x115/0x350 [ 132.466210][ T6838] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.466241][ T6838] ? do_replace+0x22f/0x470 [ 132.466270][ T6838] __vmalloc_noprof+0xd2/0x120 [ 132.466295][ T6838] ? do_replace+0x22f/0x470 [ 132.466317][ T6838] do_replace+0x22f/0x470 [ 132.466342][ T6838] ? __pfx_do_replace+0x10/0x10 [ 132.466373][ T6838] ? bpf_lsm_capable+0x9/0x20 [ 132.466400][ T6838] ? security_capable+0x7e/0x2c0 [ 132.466433][ T6838] do_ebt_set_ctl+0x2fb/0x1020 [ 132.466455][ T6838] ? __lock_acquire+0x747/0x2de0 [ 132.466477][ T6838] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 132.466503][ T6838] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 132.466531][ T6838] ? ip4_datagram_release_cb+0x976/0xbe0 [ 132.466561][ T6838] ? __mutex_trylock_common+0x15f/0x270 [ 132.466591][ T6838] ? __pfx___mutex_trylock_common+0x10/0x10 [ 132.466622][ T6838] ? rcu_is_watching+0x16/0xb0 [ 132.466649][ T6838] ? trace_contention_end+0x3d/0x140 [ 132.466685][ T6838] ? nf_setsockopt+0x221/0x290 [ 132.466719][ T6838] ? __mutex_unlock_slowpath+0x731/0x900 [ 132.466755][ T6838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.466799][ T6838] nf_setsockopt+0x26f/0x290 [ 132.466829][ T6838] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 132.466853][ T6838] do_sock_setsockopt+0x17c/0x1b0 [ 132.466883][ T6838] __x64_sys_setsockopt+0x13d/0x1b0 [ 132.466914][ T6838] do_syscall_64+0x166/0x520 [ 132.466942][ T6838] ? trace_irq_disable+0x3b/0x140 [ 132.466966][ T6838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.466987][ T6838] ? clear_bhb_loop+0x70/0xc0 [ 132.467011][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.467030][ T6838] RIP: 0033:0x7f3dddd9f559 [ 132.467048][ T6838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.467065][ T6838] RSP: 002b:00007f3dded0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.467086][ T6838] RAX: ffffffffffffffda RBX: 00007f3dde025fa0 RCX: 00007f3dddd9f559 [ 132.467101][ T6838] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 132.467112][ T6838] RBP: 00007f3ddde36b50 R08: 0000000000000296 R09: 0000000000000000 [ 132.467125][ T6838] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000000 [ 132.467138][ T6838] R13: 00007f3dde026038 R14: 00007f3dde025fa0 R15: 00007fff253f2e88 [ 132.467169][ T6838] [ 132.476125][ T6838] syz.1.308: vmalloc error: size 536870912, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 132.476325][ T6838] CPU: 1 UID: 0 PID: 6838 Comm: syz.1.308 Not tainted syzkaller #0 PREEMPT(full) [ 132.476384][ T6838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 132.476411][ T6838] Call Trace: [ 132.476429][ T6838] [ 132.476448][ T6838] dump_stack_lvl+0xe8/0x150 [ 132.476510][ T6838] warn_alloc+0x24d/0x270 [ 132.476556][ T6838] ? kasan_quarantine_put+0xbb/0x1f0 [ 132.476621][ T6838] ? __pfx_warn_alloc+0x10/0x10 [ 132.476674][ T6838] ? __get_vm_area_node+0x263/0x330 [ 132.476754][ T6838] ? __get_vm_area_node+0x263/0x330 [ 132.476841][ T6838] __vmalloc_node_range_noprof+0x396/0x16f0 [ 132.476889][ T6838] ? __lock_acquire+0x747/0x2de0 [ 132.476979][ T6838] ? rcu_is_watching+0x16/0xb0 [ 132.477045][ T6838] ? lock_acquire+0x115/0x350 [ 132.477110][ T6838] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 132.477188][ T6838] ? do_replace+0x22f/0x470 [ 132.477232][ T6838] __vmalloc_noprof+0xd2/0x120 [ 132.477284][ T6838] ? do_replace+0x22f/0x470 [ 132.477346][ T6838] do_replace+0x22f/0x470 [ 132.477400][ T6838] ? __pfx_do_replace+0x10/0x10 [ 132.477471][ T6838] ? bpf_lsm_capable+0x9/0x20 [ 132.477551][ T6838] ? security_capable+0x7e/0x2c0 [ 132.477672][ T6838] do_ebt_set_ctl+0x2fb/0x1020 [ 132.477725][ T6838] ? __lock_acquire+0x747/0x2de0 [ 132.477779][ T6838] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 132.477841][ T6838] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 132.477907][ T6838] ? ip4_datagram_release_cb+0x976/0xbe0 [ 132.477979][ T6838] ? __mutex_trylock_common+0x15f/0x270 [ 132.478051][ T6838] ? __pfx___mutex_trylock_common+0x10/0x10 [ 132.478111][ T6838] ? rcu_is_watching+0x16/0xb0 [ 132.478181][ T6838] ? trace_contention_end+0x3d/0x140 [ 132.478264][ T6838] ? nf_setsockopt+0x221/0x290 [ 132.478353][ T6838] ? __mutex_unlock_slowpath+0x731/0x900 [ 132.478471][ T6838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 132.478572][ T6838] nf_setsockopt+0x26f/0x290 [ 132.478656][ T6838] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 132.478714][ T6838] do_sock_setsockopt+0x17c/0x1b0 [ 132.478809][ T6838] __x64_sys_setsockopt+0x13d/0x1b0 [ 132.478881][ T6838] do_syscall_64+0x166/0x520 [ 132.478972][ T6838] ? trace_irq_disable+0x3b/0x140 [ 132.479037][ T6838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.479106][ T6838] ? clear_bhb_loop+0x70/0xc0 [ 132.479160][ T6838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.479206][ T6838] RIP: 0033:0x7f3dddd9f559 [ 132.479244][ T6838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.479295][ T6838] RSP: 002b:00007f3dded0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 132.479340][ T6838] RAX: ffffffffffffffda RBX: 00007f3dde025fa0 RCX: 00007f3dddd9f559 [ 132.479376][ T6838] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000004 [ 132.479405][ T6838] RBP: 00007f3ddde36b50 R08: 0000000000000296 R09: 0000000000000000 [ 132.479439][ T6838] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000000 [ 132.479467][ T6838] R13: 00007f3dde026038 R14: 00007f3dde025fa0 R15: 00007fff253f2e88 [ 132.479540][ T6838] [ 132.497865][ T6838] Mem-Info: [ 132.497888][ T6838] active_anon:15351 inactive_anon:0 isolated_anon:0 [ 132.497888][ T6838] active_file:0 inactive_file:57861 isolated_file:0 [ 132.497888][ T6838] unevictable:23 dirty:153 writeback:0 [ 132.497888][ T6838] slab_reclaimable:22360 slab_unreclaimable:85615 [ 132.497888][ T6838] mapped:34089 shmem:10225 pagetables:1236 [ 132.497888][ T6838] sec_pagetables:0 bounce:0 [ 132.497888][ T6838] kernel_misc_reclaimable:0 [ 132.497888][ T6838] free:1292283 free_pcp:21790 free_cma:0 [ 132.498007][ T6838] Node 0 active_anon:61404kB inactive_anon:0kB active_file:0kB inactive_file:231240kB unevictable:92kB isolated(anon):0kB isolated(file):0kB mapped:136356kB dirty:612kB writeback:0kB shmem:40900kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13212kB pagetables:4808kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 132.498171][ T6838] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 132.498296][ T6838] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.498438][ T6838] lowmem_reserve[]: 0 2460 2461 2461 2461 [ 132.498520][ T6838] Node 0 DMA32 free:1211624kB boost:0kB min:33916kB low:42392kB high:50868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:61404kB inactive_anon:0kB active_file:0kB inactive_file:231240kB unevictable:92kB writepending:612kB zspages:0kB present:3129332kB managed:2519516kB mlocked:0kB bounce:0kB free_pcp:87156kB local_pcp:51696kB free_cma:0kB [ 132.498672][ T6838] lowmem_reserve[]: 0 0 1 1 1 [ 132.498751][ T6838] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1320kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 132.498872][ T6838] lowmem_reserve[]: 0 0 0 0 0 [ 132.498952][ T6838] Node 1 Normal free:3942148kB boost:0kB min:55968kB low:69960kB high:83952kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 132.499108][ T6838] lowmem_reserve[]: 0 0 0 0 0 [ 132.499196][ T6838] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 132.506761][ T6838] Node 0 DMA32: 136*4kB (UME) 416*8kB (UM) 259*16kB (UME) 246*32kB (UE) 27*64kB (UME) 15*128kB (UME) 2*256kB (ME) 1*512kB (U) 7*1024kB (UM) 6*2048kB (M) 286*4096kB (M) = 1211472kB [ 132.507150][ T6838] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 132.507382][ T6838] Node 1 Normal: 3*4kB (UM) 1*8kB (M) 13*16kB (UM) 7*32kB (UM) 3*64kB (UM) 3*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 1*2048kB (U) 961*4096kB (M) = 3942148kB [ 132.507769][ T6838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.507801][ T6838] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.507842][ T6838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 132.507878][ T6838] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 132.507897][ T6838] 68157 total pagecache pages [ 132.507909][ T6838] 0 pages in swap cache [ 132.507926][ T6838] Free swap = 124996kB [ 132.507945][ T6838] Total swap = 124996kB [ 132.507951][ T6838] 2097051 pages RAM [ 132.507963][ T6838] 0 pages HighMem/MovableOnly [ 132.507980][ T6838] 435226 pages reserved [ 132.507992][ T6838] 0 pages cma reserved [ 132.633873][ T5639] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 132.638521][ T5639] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 132.827420][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.827578][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.033389][ T32] usb 3-1: USB disconnect, device number 19 [ 133.136174][ T32] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 133.184219][ T32] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 133.246867][ T32] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 133.347325][ T32] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 133.356687][ T32] keyspan 3-1:1.0: device disconnected [ 133.732517][ T5739] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 133.817907][ T6843] file system registered [ 133.879187][ T6845] jffs2: notice: (6845) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 133.886344][ T5739] usb 4-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 133.927631][ T5739] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.927651][ T5739] usb 4-1: config 0 has no interfaces? [ 133.927678][ T5739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.949724][ T5739] usb 4-1: config 0 descriptor?? [ 134.225944][ T5739] usb 4-1: USB disconnect, device number 14 [ 135.089129][ T5739] logitech-hidpp-device 0005:046D:B012.0010: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 135.161804][ T5369] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 135.287851][ T6879] FAULT_INJECTION: forcing a failure. [ 135.287851][ T6879] name failslab, interval 1, probability 0, space 0, times 0 [ 135.287878][ T6879] CPU: 1 UID: 0 PID: 6879 Comm: syz.2.317 Not tainted syzkaller #0 PREEMPT(full) [ 135.287900][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 135.287912][ T6879] Call Trace: [ 135.287920][ T6879] [ 135.287927][ T6879] dump_stack_lvl+0xe8/0x150 [ 135.287960][ T6879] should_fail_ex+0x3eb/0x540 [ 135.287994][ T6879] should_failslab+0xa8/0x100 [ 135.288023][ T6879] __kmalloc_noprof+0xf9/0x710 [ 135.288045][ T6879] ? rfkill_alloc+0xa8/0x300 [ 135.288069][ T6879] ? rfkill_alloc+0xa8/0x300 [ 135.288101][ T6879] rfkill_alloc+0xa8/0x300 [ 135.288133][ T6879] wiphy_new_nm+0x129b/0x1ae0 [ 135.288165][ T6879] ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10 [ 135.288189][ T6879] ieee80211_alloc_hw_nm+0x3f3/0x1f00 [ 135.288213][ T6879] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 135.288241][ T6879] mac80211_hwsim_new_radio+0x1f6/0x5990 [ 135.288299][ T6879] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 135.288326][ T6879] ? trace_kmalloc+0x2a/0xf0 [ 135.288354][ T6879] hwsim_new_radio_nl+0xd8b/0xf90 [ 135.288394][ T6879] genl_family_rcv_msg_doit+0x233/0x340 [ 135.288427][ T6879] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 135.288466][ T6879] ? bpf_lsm_capable+0x9/0x20 [ 135.288491][ T6879] ? security_capable+0x7e/0x2c0 [ 135.288528][ T6879] genl_rcv_msg+0x614/0x7a0 [ 135.288562][ T6879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.288587][ T6879] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 135.288616][ T6879] ? __asan_memcpy+0x40/0x70 [ 135.288643][ T6879] netlink_rcv_skb+0x226/0x4a0 [ 135.288664][ T6879] ? __pfx_genl_rcv_msg+0x10/0x10 [ 135.288691][ T6879] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 135.288726][ T6879] ? down_read+0x2b9/0x320 [ 135.288749][ T6879] genl_rcv+0x28/0x40 [ 135.288772][ T6879] netlink_unicast+0x8ef/0xa80 [ 135.288817][ T6879] netlink_sendmsg+0x7f0/0xb20 [ 135.288844][ T6879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.288869][ T6879] ? aa_sock_msg_perm+0x144/0x210 [ 135.288900][ T6879] ? apparmor_socket_sendmsg+0x98/0x360 [ 135.288925][ T6879] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.288945][ T6879] sock_sendmsg_nosec+0x14e/0x190 [ 135.288967][ T6879] ____sys_sendmsg+0x54e/0x850 [ 135.288998][ T6879] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.289032][ T6879] ? import_iovec+0x73/0xa0 [ 135.289064][ T6879] ___sys_sendmsg+0x2a6/0x360 [ 135.289087][ T6879] ? __lock_acquire+0x747/0x2de0 [ 135.289113][ T6879] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.289173][ T6879] ? __fget_files+0x3a2/0x420 [ 135.289193][ T6879] ? __fget_files+0x2a/0x420 [ 135.289223][ T6879] __x64_sys_sendmsg+0x1b1/0x290 [ 135.289250][ T6879] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.289297][ T6879] do_syscall_64+0x166/0x520 [ 135.289323][ T6879] ? trace_irq_disable+0x3b/0x140 [ 135.289346][ T6879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.289364][ T6879] ? clear_bhb_loop+0x70/0xc0 [ 135.289387][ T6879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.289406][ T6879] RIP: 0033:0x7ff82ed9f559 [ 135.289423][ T6879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.289440][ T6879] RSP: 002b:00007ff82fc55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.289460][ T6879] RAX: ffffffffffffffda RBX: 00007ff82f025fa0 RCX: 00007ff82ed9f559 [ 135.289473][ T6879] RDX: 0000000004080040 RSI: 0000200000000300 RDI: 0000000000000004 [ 135.289486][ T6879] RBP: 00007ff82fc55090 R08: 0000000000000000 R09: 0000000000000000 [ 135.289502][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.289513][ T6879] R13: 00007ff82f026038 R14: 00007ff82f025fa0 R15: 00007ffec60e0e88 [ 135.289544][ T6879] [ 135.384336][ T5369] usb 4-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 135.408523][ T5369] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.408544][ T5369] usb 4-1: config 0 has no interfaces? [ 135.408569][ T5369] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.621086][ T5369] usb 4-1: config 0 descriptor?? [ 135.855301][ T6877] bcache: register_bcache() error : failed to open device [ 135.900853][ T5722] usb 4-1: USB disconnect, device number 15 [ 135.961763][ T5369] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 136.112234][ T5369] usb 3-1: New USB device found: idVendor=0458, idProduct=5003, bcdDevice=0.00 [ 136.113466][ T5369] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.113488][ T5369] usb 3-1: config 0 has no interfaces? [ 136.113515][ T5369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.118537][ T5369] usb 3-1: config 0 descriptor?? [ 136.329590][ T6881] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 136.329611][ T6881] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 136.372771][ T5369] usb 3-1: USB disconnect, device number 20 [ 136.683891][ T32] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 136.782191][ T6894] kernel profiling enabled (shift: 63) [ 136.782208][ T6894] profiling shift: 63 too large [ 136.832010][ T32] usb 2-1: Using ep0 maxpacket: 32 [ 136.832674][ T32] usb 2-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 136.833656][ T32] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 136.833678][ T32] usb 2-1: config 0 has no interface number 0 [ 136.833716][ T32] usb 2-1: config 0 interface 184 has no altsetting 0 [ 136.835614][ T32] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.835635][ T32] usb 2-1: Product: syz [ 136.835649][ T32] usb 2-1: Manufacturer: syz [ 136.835663][ T32] usb 2-1: SerialNumber: syz [ 136.840722][ T32] usb 2-1: config 0 descriptor?? [ 137.056015][ T6899] binder: Failure when writing BR_NOOP at beginning of buffer. [ 137.056081][ T6899] binder: Read failure Err(EFAULT) in pid:202 [ 137.262564][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 137.262593][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 137.262611][ T32] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 137.262833][ T32] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -61 [ 137.407109][ T6908] sctp: [Deprecated]: syz.2.327 (pid 6908) Use of int in maxseg socket option. [ 137.407109][ T6908] Use struct sctp_assoc_value instead [ 137.928307][ T6923] FAULT_INJECTION: forcing a failure. [ 137.928307][ T6923] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 137.928337][ T6923] CPU: 1 UID: 0 PID: 6923 Comm: syz.0.332 Not tainted syzkaller #0 PREEMPT(full) [ 137.928358][ T6923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 137.928370][ T6923] Call Trace: [ 137.928377][ T6923] [ 137.928385][ T6923] dump_stack_lvl+0xe8/0x150 [ 137.928417][ T6923] should_fail_ex+0x3eb/0x540 [ 137.928452][ T6923] prepare_alloc_pages+0x21e/0x5f0 [ 137.928482][ T6923] __alloc_frozen_pages_noprof+0x17c/0x410 [ 137.928505][ T6923] ? __lock_acquire+0x747/0x2de0 [ 137.928530][ T6923] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 137.928558][ T6923] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 137.928579][ T6923] ? __get_vm_area_node+0x195/0x330 [ 137.928606][ T6923] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 137.928627][ T6923] ? policy_nodemask+0x31b/0x980 [ 137.928651][ T6923] ? kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 137.928669][ T6923] ? kvm_vcpu_ioctl+0xa61/0xfd0 [ 137.928688][ T6923] ? __se_sys_ioctl+0xfc/0x170 [ 137.928712][ T6923] ? do_syscall_64+0x166/0x520 [ 137.928743][ T6923] alloc_pages_mpol+0x21e/0x390 [ 137.928776][ T6923] alloc_pages_noprof+0xb1/0x2b0 [ 137.928806][ T6923] get_free_pages_noprof+0xf/0x80 [ 137.928830][ T6923] __kasan_populate_vmalloc+0x38/0x1c0 [ 137.928852][ T6923] ? do_raw_spin_unlock+0xf5/0x200 [ 137.928886][ T6923] alloc_vmap_area+0xd10/0x1410 [ 137.928932][ T6923] ? __pfx_alloc_vmap_area+0x10/0x10 [ 137.928963][ T6923] ? __get_vm_area_node+0x195/0x330 [ 137.928989][ T6923] ? __get_vm_area_node+0x195/0x330 [ 137.929022][ T6923] __get_vm_area_node+0x24a/0x330 [ 137.929057][ T6923] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 137.929077][ T6923] ? copy_process+0x7ea/0x4510 [ 137.929112][ T6923] ? percpu_ref_get_many+0x19/0x140 [ 137.929147][ T6923] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 137.929184][ T6923] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.929204][ T6923] ? dup_task_struct+0x52/0xa00 [ 137.929225][ T6923] ? trace_kmem_cache_alloc+0x29/0xe0 [ 137.929251][ T6923] ? memcpy_and_pad+0x48/0x80 [ 137.929278][ T6923] __vmalloc_node_noprof+0xc2/0x100 [ 137.929297][ T6923] ? copy_process+0x7ea/0x4510 [ 137.929318][ T6923] ? copy_process+0x7ea/0x4510 [ 137.929343][ T6923] dup_task_struct+0x2c6/0xa00 [ 137.929373][ T6923] copy_process+0x7ea/0x4510 [ 137.929422][ T6923] ? rcu_is_watching+0x16/0xb0 [ 137.929452][ T6923] ? __pfx_copy_process+0x10/0x10 [ 137.929484][ T6923] ? mutex_init_lockdep+0xdf/0x110 [ 137.929512][ T6923] vhost_task_create+0x1f9/0x380 [ 137.929534][ T6923] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 137.929557][ T6923] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 137.929583][ T6923] ? __pfx_vhost_task_create+0x10/0x10 [ 137.929601][ T6923] ? register_lock_class+0x31/0x2e0 [ 137.929629][ T6923] ? __pfx_vhost_task_fn+0x10/0x10 [ 137.929658][ T6923] ? kasan_quarantine_put+0xbb/0x1f0 [ 137.929688][ T6923] kvm_mmu_post_init_vm+0x147/0x2b0 [ 137.929717][ T6923] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 137.929743][ T6923] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 137.929770][ T6923] kvm_vcpu_ioctl+0xa61/0xfd0 [ 137.929796][ T6923] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 137.929837][ T6923] ? __fget_files+0x2a/0x420 [ 137.929861][ T6923] ? __fget_files+0x2a/0x420 [ 137.929883][ T6923] ? __fget_files+0x2a/0x420 [ 137.929908][ T6923] ? bpf_lsm_file_ioctl+0x9/0x20 [ 137.929933][ T6923] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 137.929954][ T6923] __se_sys_ioctl+0xfc/0x170 [ 137.929983][ T6923] do_syscall_64+0x166/0x520 [ 137.930010][ T6923] ? trace_irq_disable+0x3b/0x140 [ 137.930034][ T6923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.930054][ T6923] ? clear_bhb_loop+0x70/0xc0 [ 137.930077][ T6923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.930097][ T6923] RIP: 0033:0x7f5c0d59f559 [ 137.930114][ T6923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.930131][ T6923] RSP: 002b:00007f5c0e513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.930151][ T6923] RAX: ffffffffffffffda RBX: 00007f5c0d825fa0 RCX: 00007f5c0d59f559 [ 137.930166][ T6923] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a [ 137.930178][ T6923] RBP: 00007f5c0e513090 R08: 0000000000000000 R09: 0000000000000000 [ 137.930190][ T6923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 137.930201][ T6923] R13: 00007f5c0d826038 R14: 00007f5c0d825fa0 R15: 00007fffeaa5ebb8 [ 137.930232][ T6923] [ 138.022070][ T6920] x_tables: eb_tables: cgroup match: used from hooks PREROUTING, but only valid from INPUT/OUTPUT/POSTROUTING [ 138.554116][ T6941] jffs2: notice: (6941) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 138.793421][ T32] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 138.941745][ T32] usb 1-1: Using ep0 maxpacket: 16 [ 138.944423][ T32] usb 1-1: New USB device found: idVendor=04b4, idProduct=bca1, bcdDevice=0.00 [ 138.945422][ T32] usb 1-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.945451][ T32] usb 1-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 138.945475][ T32] usb 1-1: config 0 interface 0 has no altsetting 0 [ 138.945506][ T32] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.949904][ T32] usb 1-1: config 0 descriptor?? [ 139.168539][ T6942] FAULT_INJECTION: forcing a failure. [ 139.168539][ T6942] name failslab, interval 1, probability 0, space 0, times 0 [ 139.168566][ T6942] CPU: 1 UID: 0 PID: 6942 Comm: syz.0.335 Not tainted syzkaller #0 PREEMPT(full) [ 139.168588][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 139.168600][ T6942] Call Trace: [ 139.168610][ T6942] [ 139.168617][ T6942] dump_stack_lvl+0xe8/0x150 [ 139.168658][ T6942] should_fail_ex+0x3eb/0x540 [ 139.168693][ T6942] should_failslab+0xa8/0x100 [ 139.168719][ T6942] ? dup_fd+0x59/0xbf0 [ 139.168737][ T6942] kmem_cache_alloc_noprof+0x9c/0x600 [ 139.168760][ T6942] ? dup_fd+0x59/0xbf0 [ 139.168784][ T6942] dup_fd+0x59/0xbf0 [ 139.168805][ T6942] ? __kmalloc_noprof+0x387/0x710 [ 139.168825][ T6942] ? __kmalloc_noprof+0x1a6/0x710 [ 139.168844][ T6942] ? security_task_alloc+0x4d/0x330 [ 139.168866][ T6942] ? security_task_alloc+0x4d/0x330 [ 139.168890][ T6942] ? apparmor_task_alloc+0x1ef/0x2d0 [ 139.168919][ T6942] copy_files+0xb5/0x140 [ 139.168945][ T6942] copy_process+0x1cfc/0x4510 [ 139.168980][ T6942] ? copy_process+0xd17/0x4510 [ 139.169020][ T6942] ? __pfx_copy_process+0x10/0x10 [ 139.169044][ T6942] ? get_pid_task+0x20/0x1f0 [ 139.169061][ T6942] ? get_pid_task+0x20/0x1f0 [ 139.169087][ T6942] kernel_clone+0x2d7/0x940 [ 139.169118][ T6942] ? __pfx_kernel_clone+0x10/0x10 [ 139.169161][ T6942] __x64_sys_clone+0x1b6/0x230 [ 139.169190][ T6942] ? __pfx___x64_sys_clone+0x10/0x10 [ 139.169230][ T6942] ? __pfx_ksys_write+0x10/0x10 [ 139.169265][ T6942] do_syscall_64+0x166/0x520 [ 139.169293][ T6942] ? trace_irq_disable+0x3b/0x140 [ 139.169316][ T6942] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.169336][ T6942] ? clear_bhb_loop+0x70/0xc0 [ 139.169360][ T6942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.169379][ T6942] RIP: 0033:0x7f5c0d59f559 [ 139.169396][ T6942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.169412][ T6942] RSP: 002b:00007f5c0e4d2fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 139.169433][ T6942] RAX: ffffffffffffffda RBX: 00007f5c0d826090 RCX: 00007f5c0d59f559 [ 139.169447][ T6942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008000 [ 139.169458][ T6942] RBP: 00007f5c0e4d3090 R08: 0000000000000000 R09: 0000000000000000 [ 139.169470][ T6942] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 139.169482][ T6942] R13: 00007f5c0d826128 R14: 00007f5c0d826090 R15: 00007fffeaa5ebb8 [ 139.169511][ T6942] [ 139.687734][ T5369] usb 2-1: USB disconnect, device number 20 [ 139.841952][ T5739] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 139.902157][ T5722] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 139.947882][ T32] usbhid 1-1:0.0: can't add hid device: -71 [ 139.947972][ T32] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 139.957204][ T32] usb 1-1: USB disconnect, device number 23 [ 139.975146][ T5739] usb 4-1: device descriptor read/64, error -71 [ 139.994866][ T6959] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 139.995529][ T6959] FAULT_INJECTION: forcing a failure. [ 139.995529][ T6959] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 139.995560][ T6959] CPU: 1 UID: 0 PID: 6959 Comm: syz.1.342 Not tainted syzkaller #0 PREEMPT(full) [ 139.995581][ T6959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 139.995593][ T6959] Call Trace: [ 139.995601][ T6959] [ 139.995609][ T6959] dump_stack_lvl+0xe8/0x150 [ 139.995641][ T6959] should_fail_ex+0x3eb/0x540 [ 139.995677][ T6959] prepare_alloc_pages+0x21e/0x5f0 [ 139.995706][ T6959] __alloc_frozen_pages_noprof+0x17c/0x410 [ 139.995734][ T6959] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.995757][ T6959] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 139.995783][ T6959] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 139.995812][ T6959] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 139.995833][ T6959] ? __get_vm_area_node+0x195/0x330 [ 139.995865][ T6959] __alloc_pages_noprof+0x10/0x100 [ 139.995890][ T6959] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 139.995921][ T6959] ? alloc_pages_noprof+0x140/0x2b0 [ 139.995953][ T6959] __kasan_populate_vmalloc+0xb7/0x1c0 [ 139.995982][ T6959] alloc_vmap_area+0xd10/0x1410 [ 139.996026][ T6959] ? __pfx_alloc_vmap_area+0x10/0x10 [ 139.996056][ T6959] ? __get_vm_area_node+0x195/0x330 [ 139.996083][ T6959] ? __get_vm_area_node+0x195/0x330 [ 139.996117][ T6959] __get_vm_area_node+0x24a/0x330 [ 139.996153][ T6959] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 139.996173][ T6959] ? copy_process+0x7ea/0x4510 [ 139.996208][ T6959] ? percpu_ref_get_many+0x19/0x140 [ 139.996244][ T6959] ? __memcg_slab_post_alloc_hook+0x46f/0xdb0 [ 139.996281][ T6959] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 139.996301][ T6959] ? dup_task_struct+0x52/0xa00 [ 139.996322][ T6959] ? trace_kmem_cache_alloc+0x29/0xe0 [ 139.996343][ T6959] ? memcpy_and_pad+0x48/0x80 [ 139.996370][ T6959] __vmalloc_node_noprof+0xc2/0x100 [ 139.996389][ T6959] ? copy_process+0x7ea/0x4510 [ 139.996410][ T6959] ? copy_process+0x7ea/0x4510 [ 139.996436][ T6959] dup_task_struct+0x2c6/0xa00 [ 139.996466][ T6959] copy_process+0x7ea/0x4510 [ 139.996516][ T6959] ? rcu_is_watching+0x16/0xb0 [ 139.996552][ T6959] ? __pfx_copy_process+0x10/0x10 [ 139.996586][ T6959] ? mutex_init_lockdep+0xdf/0x110 [ 139.996614][ T6959] vhost_task_create+0x1f9/0x380 [ 139.996636][ T6959] ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 139.996659][ T6959] ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 139.996684][ T6959] ? __pfx_vhost_task_create+0x10/0x10 [ 139.996702][ T6959] ? register_lock_class+0x31/0x2e0 [ 139.996731][ T6959] ? __pfx_vhost_task_fn+0x10/0x10 [ 139.996760][ T6959] ? kasan_quarantine_put+0xbb/0x1f0 [ 139.996791][ T6959] kvm_mmu_post_init_vm+0x147/0x2b0 [ 139.996820][ T6959] kvm_arch_vcpu_ioctl_run+0x79/0x18b0 [ 139.996847][ T6959] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 139.996874][ T6959] kvm_vcpu_ioctl+0xa61/0xfd0 [ 139.996900][ T6959] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 139.996941][ T6959] ? __fget_files+0x2a/0x420 [ 139.996964][ T6959] ? __fget_files+0x2a/0x420 [ 139.996986][ T6959] ? __fget_files+0x2a/0x420 [ 139.997012][ T6959] ? bpf_lsm_file_ioctl+0x9/0x20 [ 139.997037][ T6959] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 139.997059][ T6959] __se_sys_ioctl+0xfc/0x170 [ 139.997088][ T6959] do_syscall_64+0x166/0x520 [ 139.997116][ T6959] ? trace_irq_disable+0x3b/0x140 [ 139.997140][ T6959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.997160][ T6959] ? clear_bhb_loop+0x70/0xc0 [ 139.997184][ T6959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.997203][ T6959] RIP: 0033:0x7f3dddd9f559 [ 139.997220][ T6959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.997237][ T6959] RSP: 002b:00007f3dded0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 139.997257][ T6959] RAX: ffffffffffffffda RBX: 00007f3dde025fa0 RCX: 00007f3dddd9f559 [ 139.997272][ T6959] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 139.997283][ T6959] RBP: 00007f3dded0e090 R08: 0000000000000000 R09: 0000000000000000 [ 139.997295][ T6959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.997306][ T6959] R13: 00007f3dde026038 R14: 00007f3dde025fa0 R15: 00007fff253f2e88 [ 139.997337][ T6959] [ 140.063539][ T5722] usb 3-1: Using ep0 maxpacket: 16 [ 140.065018][ T5722] usb 3-1: New USB device found: idVendor=04b4, idProduct=bca1, bcdDevice=0.00 [ 140.068142][ T5722] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.068211][ T5722] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 140.068277][ T5722] usb 3-1: config 0 interface 0 has no altsetting 0 [ 140.068377][ T5722] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.092464][ T5722] usb 3-1: config 0 descriptor?? [ 140.212556][ T5739] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 140.344953][ T5739] usb 4-1: device descriptor read/64, error -71 [ 140.455747][ T5739] usb usb4-port1: attempt power cycle [ 140.774068][ T6970] ksmbd: Unknown IPC event: 0, ignore. [ 140.793972][ T5722] usbhid 3-1:0.0: can't add hid device: -71 [ 140.794064][ T5722] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 140.802525][ T5739] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 140.823498][ T5739] usb 4-1: device descriptor read/8, error -71 [ 140.829165][ T5722] usb 3-1: USB disconnect, device number 21 [ 141.063741][ T5739] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 141.086345][ T5739] usb 4-1: device descriptor read/8, error -71 [ 141.106441][ T6980] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 141.106464][ T6980] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 141.111342][ T6980] vhci_hcd vhci_hcd.0: Device attached [ 141.117933][ T6982] vhci_hcd: cannot find a urb of seqnum 0 max seqnum 0 [ 141.143034][ T6973] vhci_hcd vhci_hcd.0: stop threads [ 141.143050][ T6973] vhci_hcd vhci_hcd.0: release socket [ 141.143078][ T6973] vhci_hcd vhci_hcd.0: disconnect device [ 141.192912][ T5739] usb usb4-port1: unable to enumerate USB device [ 141.369041][ T6988] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 141.369060][ T6988] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 141.428486][ T6990] netlink: 36 bytes leftover after parsing attributes in process `syz.2.349'. [ 141.490239][ T6992] FAULT_INJECTION: forcing a failure. [ 141.490239][ T6992] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.490265][ T6992] CPU: 1 UID: 0 PID: 6992 Comm: syz.2.350 Not tainted syzkaller #0 PREEMPT(full) [ 141.490286][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 141.490298][ T6992] Call Trace: [ 141.490305][ T6992] [ 141.490314][ T6992] dump_stack_lvl+0xe8/0x150 [ 141.490346][ T6992] should_fail_ex+0x3eb/0x540 [ 141.490381][ T6992] prepare_alloc_pages+0x21e/0x5f0 [ 141.490410][ T6992] __alloc_frozen_pages_noprof+0x17c/0x410 [ 141.490447][ T6992] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 141.490478][ T6992] ? policy_nodemask+0x31b/0x980 [ 141.490506][ T6992] ? __lock_acquire+0x747/0x2de0 [ 141.490531][ T6992] alloc_pages_mpol+0x21e/0x390 [ 141.490564][ T6992] folio_alloc_mpol_noprof+0x39/0x160 [ 141.490594][ T6992] vma_alloc_folio_noprof+0xe1/0x1e0 [ 141.490625][ T6992] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 141.490659][ T6992] ? vma_has_anon_rmap+0x95/0x270 [ 141.490687][ T6992] do_pte_missing+0x16d4/0x3570 [ 141.490724][ T6992] handle_mm_fault+0x1807/0x2f80 [ 141.490764][ T6992] ? handle_mm_fault+0xee/0x2f80 [ 141.490796][ T6992] ? follow_page_pte+0x660/0xf10 [ 141.490822][ T6992] ? __pfx_handle_mm_fault+0x10/0x10 [ 141.490851][ T6992] ? follow_page_pte+0x748/0xf10 [ 141.490884][ T6992] ? __pfx_follow_page_pte+0x10/0x10 [ 141.490922][ T6992] __get_user_pages+0x1670/0x2750 [ 141.490977][ T6992] __gup_longterm_locked+0xe24/0x16f0 [ 141.491015][ T6992] ? sanity_check_pinned_pages+0x810/0x8d0 [ 141.491046][ T6992] gup_fast_fallback+0x360/0x27a0 [ 141.491114][ T6992] ? __pfx_gup_fast_fallback+0x10/0x10 [ 141.491138][ T6992] ? rds_info_getsockopt+0x254/0x730 [ 141.491166][ T6992] ? rcu_is_watching+0x16/0xb0 [ 141.491191][ T6992] ? is_valid_gup_args+0x11f/0x200 [ 141.491217][ T6992] ? pin_user_pages_fast+0x4d/0xb0 [ 141.491244][ T6992] iov_iter_extract_pages+0x3a1/0x690 [ 141.491284][ T6992] rds_info_getsockopt+0x289/0x730 [ 141.491317][ T6992] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 141.491358][ T6992] ? __might_fault+0xaf/0x130 [ 141.491393][ T6992] rds_getsockopt+0x38b/0x600 [ 141.491424][ T6992] ? __pfx_rds_getsockopt+0x10/0x10 [ 141.491447][ T6992] ? __might_fault+0xaf/0x130 [ 141.491482][ T6992] do_sock_getsockopt+0x40c/0x640 [ 141.491514][ T6992] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 141.491555][ T6992] ? __fget_files+0x3a2/0x420 [ 141.491575][ T6992] ? __fget_files+0x2a/0x420 [ 141.491604][ T6992] __x64_sys_getsockopt+0x1a4/0x240 [ 141.491638][ T6992] do_syscall_64+0x166/0x520 [ 141.491666][ T6992] ? trace_irq_disable+0x3b/0x140 [ 141.491690][ T6992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.491710][ T6992] ? clear_bhb_loop+0x70/0xc0 [ 141.491733][ T6992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.491752][ T6992] RIP: 0033:0x7ff82ed9f559 [ 141.491770][ T6992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 141.491785][ T6992] RSP: 002b:00007ff82fc55028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 141.491806][ T6992] RAX: ffffffffffffffda RBX: 00007ff82f025fa0 RCX: 00007ff82ed9f559 [ 141.491819][ T6992] RDX: 0000000000002713 RSI: 0000200000000114 RDI: 0000000000000003 [ 141.491831][ T6992] RBP: 00007ff82fc55090 R08: 0000200000002ac0 R09: 0000000000000000 [ 141.491844][ T6992] R10: 0000200000002a80 R11: 0000000000000246 R12: 0000000000000001 [ 141.491856][ T6992] R13: 00007ff82f026038 R14: 00007ff82f025fa0 R15: 00007ffec60e0e88 [ 141.491887][ T6992] [ 141.855953][ T6994] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 141.855977][ T6994] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 141.863144][ T6994] F2FS-fs (loop1): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 141.863197][ T6994] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 141.931005][ T6994] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 142.092666][ T7002] netlink: 40 bytes leftover after parsing attributes in process `syz.1.354'. [ 142.141812][ T194] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 142.221831][ T5722] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 142.301823][ T194] usb 3-1: Using ep0 maxpacket: 8 [ 142.302449][ T194] usb 3-1: New USB device found: idVendor=102c, idProduct=6151, bcdDevice=4a.36 [ 142.306642][ T194] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.306665][ T194] usb 3-1: Product: syz [ 142.306678][ T194] usb 3-1: Manufacturer: syz [ 142.306692][ T194] usb 3-1: SerialNumber: syz [ 142.371758][ T5722] usb 1-1: Using ep0 maxpacket: 32 [ 142.412703][ T5369] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 142.521481][ T194] gspca_main: etoms-2.14.0 probing 102c:6151 [ 142.562756][ T5369] usb 2-1: New USB device found: idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 142.568317][ T5369] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.568339][ T5369] usb 2-1: Product: syz [ 142.568354][ T5369] usb 2-1: Manufacturer: syz [ 142.568367][ T5369] usb 2-1: SerialNumber: syz [ 142.607819][ T5369] usb 2-1: config 0 descriptor?? [ 142.640092][ T5722] usb 1-1: unable to get BOS descriptor or descriptor too short [ 142.640132][ T5722] usb 1-1: New USB device found: idVendor=0403, idProduct=6030, bcdDevice=0.00 [ 142.644770][ T5722] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 142.644855][ T5722] usb 1-1: can't read configurations, error -71 [ 142.681058][ T7006] FAULT_INJECTION: forcing a failure. [ 142.681058][ T7006] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.681079][ T194] usb 3-1: USB disconnect, device number 22 [ 142.681084][ T7006] CPU: 1 UID: 0 PID: 7006 Comm: syz.3.356 Not tainted syzkaller #0 PREEMPT(full) [ 142.681105][ T7006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.681117][ T7006] Call Trace: [ 142.681123][ T7006] [ 142.681131][ T7006] dump_stack_lvl+0xe8/0x150 [ 142.681165][ T7006] should_fail_ex+0x3eb/0x540 [ 142.681200][ T7006] _copy_to_user+0x31/0xb0 [ 142.681221][ T7006] simple_read_from_buffer+0xe1/0x170 [ 142.681247][ T7006] proc_fail_nth_read+0x1bb/0x230 [ 142.681278][ T7006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.681310][ T7006] ? rw_verify_area+0x24a/0x4c0 [ 142.681335][ T7006] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 142.681362][ T7006] vfs_read+0x213/0xa80 [ 142.681390][ T7006] ? __pfx___mutex_lock+0x10/0x10 [ 142.681420][ T7006] ? __pfx_vfs_read+0x10/0x10 [ 142.681445][ T7006] ? __fget_files+0x2a/0x420 [ 142.681465][ T7006] ? __fget_files+0x3a2/0x420 [ 142.681485][ T7006] ? __fget_files+0x2a/0x420 [ 142.681510][ T7006] ? fdget+0x1ac/0x250 [ 142.681537][ T7006] ksys_read+0x150/0x270 [ 142.681563][ T7006] ? __pfx_ksys_read+0x10/0x10 [ 142.681597][ T7006] do_syscall_64+0x166/0x520 [ 142.681624][ T7006] ? trace_irq_disable+0x3b/0x140 [ 142.681647][ T7006] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.681670][ T7006] ? clear_bhb_loop+0x70/0xc0 [ 142.681694][ T7006] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.681713][ T7006] RIP: 0033:0x7fecd095fd8e [ 142.681731][ T7006] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 142.681748][ T7006] RSP: 002b:00007fecd18b5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 142.681769][ T7006] RAX: ffffffffffffffda RBX: 00007fecd18b66c0 RCX: 00007fecd095fd8e [ 142.681789][ T7006] RDX: 000000000000000f RSI: 00007fecd18b60a0 RDI: 0000000000000004 [ 142.681801][ T7006] RBP: 00007fecd18b6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.681813][ T7006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.681824][ T7006] R13: 00007fecd0c26038 R14: 00007fecd0c25fa0 R15: 00007ffd97d6af58 [ 142.681855][ T7006] [ 142.951354][ T7008] tipc: Started in network mode [ 142.951380][ T7008] tipc: Node identity 2e4ea54fec05, cluster identity 4711 [ 142.951565][ T7008] tipc: Enabled bearer , priority 0 [ 142.975107][ T7008] FAULT_INJECTION: forcing a failure. [ 142.975107][ T7008] name failslab, interval 1, probability 0, space 0, times 0 [ 142.975133][ T7008] CPU: 0 UID: 0 PID: 7008 Comm: syz.3.357 Not tainted syzkaller #0 PREEMPT(full) [ 142.975155][ T7008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 142.975166][ T7008] Call Trace: [ 142.975174][ T7008] [ 142.975182][ T7008] dump_stack_lvl+0xe8/0x150 [ 142.975214][ T7008] should_fail_ex+0x3eb/0x540 [ 142.975251][ T7008] ? __alloc_skb+0x1db/0x7a0 [ 142.975280][ T7008] should_failslab+0xa8/0x100 [ 142.975309][ T7008] ? __alloc_skb+0x1db/0x7a0 [ 142.975330][ T7008] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 142.975351][ T7008] ? __alloc_skb+0x18d/0x7a0 [ 142.975374][ T7008] ? __alloc_skb+0x1db/0x7a0 [ 142.975403][ T7008] __alloc_skb+0x1db/0x7a0 [ 142.975430][ T7008] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 142.975461][ T7008] addrconf_ifdown+0x1873/0x1bd0 [ 142.975501][ T7008] ? __pfx_addrconf_ifdown+0x10/0x10 [ 142.975530][ T7008] ? inetdev_event+0x1dc/0x1610 [ 142.975565][ T7008] addrconf_notify+0x1bc/0x1050 [ 142.975591][ T7008] notifier_call_chain+0x1a5/0x3d0 [ 142.975620][ T7008] netif_set_mtu_ext+0x5ac/0x830 [ 142.975652][ T7008] ? __pfx_netif_set_mtu_ext+0x10/0x10 [ 142.975680][ T7008] ? __mutex_trylock_common+0x15f/0x270 [ 142.975725][ T7008] netif_set_mtu+0xd7/0x1b0 [ 142.975751][ T7008] ? __pfx_hook_capable+0x10/0x10 [ 142.975779][ T7008] ? __pfx_netif_set_mtu+0x10/0x10 [ 142.975803][ T7008] ? kasan_quarantine_put+0xbb/0x1f0 [ 142.975838][ T7008] ? __dev_get_by_name+0xe5/0x130 [ 142.975873][ T7008] dev_set_mtu+0x105/0x210 [ 142.975901][ T7008] dev_ioctl+0x7b4/0x1150 [ 142.975930][ T7008] sock_do_ioctl+0x23e/0x320 [ 142.975951][ T7008] ? __pfx_sock_do_ioctl+0x10/0x10 [ 142.975997][ T7008] sock_ioctl+0x57a/0x7e0 [ 142.976026][ T7008] ? __fget_files+0x2a/0x420 [ 142.976047][ T7008] ? __pfx_sock_ioctl+0x10/0x10 [ 142.976077][ T7008] ? __fget_files+0x2a/0x420 [ 142.976098][ T7008] ? __fget_files+0x2a/0x420 [ 142.976124][ T7008] ? bpf_lsm_file_ioctl+0x9/0x20 [ 142.976148][ T7008] ? __pfx_sock_ioctl+0x10/0x10 [ 142.976177][ T7008] __se_sys_ioctl+0xfc/0x170 [ 142.976205][ T7008] do_syscall_64+0x166/0x520 [ 142.976234][ T7008] ? trace_irq_disable+0x3b/0x140 [ 142.976263][ T7008] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.976284][ T7008] ? clear_bhb_loop+0x70/0xc0 [ 142.976307][ T7008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.976326][ T7008] RIP: 0033:0x7fecd099f559 [ 142.976344][ T7008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.976361][ T7008] RSP: 002b:00007fecd18b6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 142.976380][ T7008] RAX: ffffffffffffffda RBX: 00007fecd0c25fa0 RCX: 00007fecd099f559 [ 142.976395][ T7008] RDX: 0000200000000800 RSI: 0000000000008922 RDI: 0000000000000004 [ 142.976407][ T7008] RBP: 00007fecd18b6090 R08: 0000000000000000 R09: 0000000000000000 [ 142.976419][ T7008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.976430][ T7008] R13: 00007fecd0c26038 R14: 00007fecd0c25fa0 R15: 00007ffd97d6af58 [ 142.976461][ T7008] [ 142.976593][ T7008] syzkaller0: MTU not usable for tipc bearer [ 142.976609][ T7008] tipc: Disabling bearer [ 143.100158][ T5369] usb 2-1: Firmware: major: 63, minor: 28, hardware type: UNKNOWN (21) [ 143.323369][ T5369] usb 2-1: no permanent extended address found, random address set [ 143.323391][ T5369] usb 2-1: atusb_probe: initialization failed, error = -524 [ 143.323791][ T5369] atusb 2-1:0.0: probe with driver atusb failed with error -524 [ 143.536974][ T5739] usb 2-1: USB disconnect, device number 21 [ 143.830432][ T7022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.364'. [ 143.851940][ T5369] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 143.932521][ T7023] smpboot: CPU 1 is now offline [ 144.003824][ T5369] usb 4-1: New USB device found: idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 144.004859][ T5369] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 144.004881][ T5369] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 144.004897][ T5369] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 144.006599][ T5369] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.006616][ T5369] usb 4-1: Product: syz [ 144.006626][ T5369] usb 4-1: Manufacturer: syz [ 144.006635][ T5369] usb 4-1: SerialNumber: syz [ 144.063716][ T5369] usb 4-1: config 0 descriptor?? [ 144.064763][ T7014] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.098395][ T5369] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 144.183539][ T7023] tipc: Enabled bearer , priority 0 [ 144.196028][ T7023] syzkaller0: MTU not usable for tipc bearer [ 144.196040][ T7023] tipc: Disabling bearer [ 144.245188][ T7020] [U] [ 144.312456][ T7014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.360'. [ 144.340122][ T5369] usb 4-1: USB disconnect, device number 20 [ 144.507159][ T7036] FAULT_INJECTION: forcing a failure. [ 144.507159][ T7036] name failslab, interval 1, probability 0, space 0, times 0 [ 144.507181][ T7036] CPU: 0 UID: 0 PID: 7036 Comm: syz.0.368 Not tainted syzkaller #0 PREEMPT(full) [ 144.507196][ T7036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 144.507204][ T7036] Call Trace: [ 144.507210][ T7036] [ 144.507215][ T7036] dump_stack_lvl+0xe8/0x150 [ 144.507239][ T7036] should_fail_ex+0x3eb/0x540 [ 144.507264][ T7036] should_failslab+0xa8/0x100 [ 144.507284][ T7036] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 144.507306][ T7036] kmem_cache_alloc_noprof+0x9c/0x600 [ 144.507320][ T7036] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 144.507341][ T7036] ? kmem_cache_alloc_noprof+0x151/0x600 [ 144.507354][ T7036] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 144.507380][ T7036] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 144.507409][ T7036] mmu_topup_memory_caches+0x21/0x1a0 [ 144.507426][ T7036] kvm_mmu_load+0x9d/0x21e0 [ 144.507442][ T7036] ? kvm_msr_allowed+0x9a/0x490 [ 144.507456][ T7036] ? kvm_msr_allowed+0x9a/0x490 [ 144.507470][ T7036] ? kvm_msr_allowed+0x9a/0x490 [ 144.507483][ T7036] ? kvm_msr_allowed+0x3f4/0x490 [ 144.507496][ T7036] ? kvm_msr_allowed+0x9a/0x490 [ 144.507509][ T7036] ? kvm_apic_has_interrupt+0x740/0x770 [ 144.507536][ T7036] vcpu_run+0x4f5b/0x7a90 [ 144.507595][ T7036] ? __pfx_vcpu_run+0x10/0x10 [ 144.507608][ T7036] ? lock_acquire+0x115/0x350 [ 144.507627][ T7036] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 144.507645][ T7036] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 144.507672][ T7036] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 144.507688][ T7036] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 144.507702][ T7036] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 144.507721][ T7036] kvm_vcpu_ioctl+0xa61/0xfd0 [ 144.507739][ T7036] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 144.507766][ T7036] ? __fget_files+0x2a/0x420 [ 144.507783][ T7036] ? __fget_files+0x2a/0x420 [ 144.507799][ T7036] ? __fget_files+0x2a/0x420 [ 144.507816][ T7036] ? bpf_lsm_file_ioctl+0x9/0x20 [ 144.507835][ T7036] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 144.507850][ T7036] __se_sys_ioctl+0xfc/0x170 [ 144.507871][ T7036] do_syscall_64+0x166/0x520 [ 144.507891][ T7036] ? trace_irq_disable+0x3b/0x140 [ 144.507908][ T7036] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.507922][ T7036] ? clear_bhb_loop+0x70/0xc0 [ 144.507939][ T7036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 144.507952][ T7036] RIP: 0033:0x7f5c0d59f559 [ 144.507964][ T7036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 144.507976][ T7036] RSP: 002b:00007f5c0e513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 144.507991][ T7036] RAX: ffffffffffffffda RBX: 00007f5c0d825fa0 RCX: 00007f5c0d59f559 [ 144.508001][ T7036] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 144.508009][ T7036] RBP: 00007f5c0e513090 R08: 0000000000000000 R09: 0000000000000000 [ 144.508017][ T7036] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 144.508025][ T7036] R13: 00007f5c0d826038 R14: 00007f5c0d825fa0 R15: 00007fffeaa5ebb8 [ 144.508047][ T7036] [ 145.030910][ T7041] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 145.031123][ T6413] IPVS: starting estimator thread 0... [ 145.112482][ T7046] IPVS: using max 45 ests per chain, 108000 per kthread [ 145.223941][ T7049] capability: warning: `syz.1.372' uses 32-bit capabilities (legacy support in use) [ 145.453964][ T7059] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 145.453980][ T7059] netlink: 40 bytes leftover after parsing attributes in process `syz.3.376'. [ 145.454063][ T7059] team0: entered promiscuous mode [ 145.454075][ T7059] team_slave_0: entered promiscuous mode [ 145.454196][ T7059] team_slave_1: entered promiscuous mode [ 145.454296][ T7059] team0: entered allmulticast mode [ 145.454304][ T7059] team_slave_0: entered allmulticast mode [ 145.454314][ T7059] team_slave_1: entered allmulticast mode [ 145.454851][ T7059] bridge0: port 3(team0) entered blocking state [ 145.454981][ T7059] bridge0: port 3(team0) entered disabled state [ 145.493077][ T11] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 145.518735][ T7059] bridge0: port 3(team0) entered blocking state [ 145.518906][ T7059] bridge0: port 3(team0) entered forwarding state [ 145.600797][ T7058] FAULT_INJECTION: forcing a failure. [ 145.600797][ T7058] name failslab, interval 1, probability 0, space 0, times 0 [ 145.600817][ T7058] CPU: 0 UID: 0 PID: 7058 Comm: syz.0.375 Not tainted syzkaller #0 PREEMPT(full) [ 145.600832][ T7058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 145.600841][ T7058] Call Trace: [ 145.600854][ T7058] [ 145.600860][ T7058] dump_stack_lvl+0xe8/0x150 [ 145.600884][ T7058] should_fail_ex+0x3eb/0x540 [ 145.600914][ T7058] should_failslab+0xa8/0x100 [ 145.600933][ T7058] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 145.600956][ T7058] kmem_cache_alloc_noprof+0x9c/0x600 [ 145.600971][ T7058] ? __kvmalloc_node_noprof+0x340/0x820 [ 145.600987][ T7058] ? __kvm_mmu_topup_memory_cache+0x461/0x600 [ 145.601013][ T7058] ? __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 145.601039][ T7058] __kvm_mmu_topup_memory_cache+0x1b2/0x600 [ 145.601068][ T7058] mmu_topup_memory_caches+0x21/0x1a0 [ 145.601084][ T7058] kvm_mmu_load+0x9d/0x21e0 [ 145.601100][ T7058] ? kvm_msr_allowed+0x9a/0x490 [ 145.601113][ T7058] ? kvm_msr_allowed+0x3f4/0x490 [ 145.601126][ T7058] ? kvm_msr_allowed+0x9a/0x490 [ 145.601138][ T7058] ? kvm_msr_allowed+0x9a/0x490 [ 145.601155][ T7058] ? kvm_apic_has_interrupt+0x4b1/0x770 [ 145.601183][ T7058] vcpu_run+0x4f5b/0x7a90 [ 145.601241][ T7058] ? __pfx_vcpu_run+0x10/0x10 [ 145.601254][ T7058] ? lock_acquire+0x115/0x350 [ 145.601273][ T7058] ? fpu_swap_kvm_fpstate+0xbe/0x510 [ 145.601291][ T7058] ? vmx_unhandleable_emulation_required+0x77/0x230 [ 145.601318][ T7058] kvm_arch_vcpu_ioctl_run+0xe83/0x18b0 [ 145.601334][ T7058] ? kvm_arch_vcpu_ioctl_run+0x1f5/0x18b0 [ 145.601348][ T7058] ? kvm_vcpu_ioctl+0xe8f/0xfd0 [ 145.601366][ T7058] kvm_vcpu_ioctl+0xa61/0xfd0 [ 145.601385][ T7058] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 145.601412][ T7058] ? __fget_files+0x2a/0x420 [ 145.601429][ T7058] ? __fget_files+0x2a/0x420 [ 145.601445][ T7058] ? __fget_files+0x2a/0x420 [ 145.601462][ T7058] ? bpf_lsm_file_ioctl+0x9/0x20 [ 145.601480][ T7058] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 145.601495][ T7058] __se_sys_ioctl+0xfc/0x170 [ 145.601516][ T7058] do_syscall_64+0x166/0x520 [ 145.601536][ T7058] ? trace_irq_disable+0x3b/0x140 [ 145.601553][ T7058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.601567][ T7058] ? clear_bhb_loop+0x70/0xc0 [ 145.601584][ T7058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.601597][ T7058] RIP: 0033:0x7f5c0d59f559 [ 145.601610][ T7058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.601621][ T7058] RSP: 002b:00007f5c0e513028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 145.601636][ T7058] RAX: ffffffffffffffda RBX: 00007f5c0d825fa0 RCX: 00007f5c0d59f559 [ 145.601646][ T7058] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 145.601654][ T7058] RBP: 00007f5c0e513090 R08: 0000000000000000 R09: 0000000000000000 [ 145.601664][ T7058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.601672][ T7058] R13: 00007f5c0d826038 R14: 00007f5c0d825fa0 R15: 00007fffeaa5ebb8 [ 145.601693][ T7058] [ 145.637247][ T11] usb 2-1: device descriptor read/64, error -71 [ 145.934894][ T11] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 146.049166][ T7059] kvm: apic: phys broadcast and lowest prio [ 146.093383][ T11] usb 2-1: device descriptor read/64, error -71 [ 146.202007][ T11] usb usb2-port1: attempt power cycle [ 146.542737][ T5369] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 146.551776][ T11] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 146.572926][ T11] usb 2-1: device descriptor read/8, error -71 [ 146.702323][ T5369] usb 3-1: Using ep0 maxpacket: 16 [ 146.705869][ T5369] usb 3-1: New USB device found: idVendor=045e, idProduct=07da, bcdDevice=0.00 [ 146.708260][ T5369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.708279][ T5369] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 146.708293][ T5369] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 146.708319][ T5369] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.710351][ T5369] usb 3-1: config 0 descriptor?? [ 146.831913][ T11] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 146.854936][ T11] usb 2-1: device descriptor read/8, error -71 [ 146.961977][ T11] usb usb2-port1: unable to enumerate USB device [ 147.169769][ T5369] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0011/input/input13 [ 147.203871][ T5754] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 147.230911][ T5369] microsoft 0003:045E:07DA.0011: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 147.355056][ T5754] usb 1-1: New USB device found: idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 147.358655][ T5754] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.358670][ T5754] usb 1-1: Product: syz [ 147.358679][ T5754] usb 1-1: Manufacturer: syz [ 147.358688][ T5754] usb 1-1: SerialNumber: syz [ 147.399149][ T5754] usb 1-1: config 0 descriptor?? [ 147.413871][ T5754] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 147.430113][ T7070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 147.430436][ T7070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.479355][ T11] usb 3-1: USB disconnect, device number 23 [ 148.328648][ T5754] gspca_stk1135: reg_w 0x5 err -71 [ 148.329696][ T5754] gspca_stk1135: serial bus timeout: status=0x00 [ 148.329703][ T5754] gspca_stk1135: Sensor write failed [ 148.329725][ T5754] gspca_stk1135: serial bus timeout: status=0x00 [ 148.329735][ T5754] gspca_stk1135: Sensor write failed [ 148.329757][ T5754] gspca_stk1135: serial bus timeout: status=0x00 [ 148.329763][ T5754] gspca_stk1135: Sensor read failed [ 148.329785][ T5754] gspca_stk1135: serial bus timeout: status=0x00 [ 148.329790][ T5754] gspca_stk1135: Sensor read failed [ 148.329795][ T5754] gspca_stk1135: Detected sensor type unknown (0x0) [ 148.329822][ T5754] gspca_stk1135: serial bus timeout: status=0x00 [ 148.329828][ T5754] gspca_stk1135: Sensor read failed [ 148.329850][ T5754] gspca_stk1135: serial bus timeout: status=0x00 [ 148.329856][ T5754] gspca_stk1135: Sensor read failed [ 148.329877][ T5754] gspca_stk1135: serial bus timeout: status=0x00 [ 148.329883][ T5754] gspca_stk1135: Sensor write failed [ 148.329904][ T5754] gspca_stk1135: serial bus timeout: status=0x00 [ 148.329910][ T5754] gspca_stk1135: Sensor write failed [ 148.329955][ T5754] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71 [ 148.462287][ T5369] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 148.467691][ T5754] usb 1-1: USB disconnect, device number 26 [ 148.612994][ T5369] usb 3-1: New USB device found: idVendor=0846, idProduct=1001, bcdDevice=1.00 [ 148.613918][ T5369] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 148.613937][ T5369] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 148.616560][ T5369] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.616576][ T5369] usb 3-1: Product: syz [ 148.616585][ T5369] usb 3-1: Manufacturer: syz [ 148.616594][ T5369] usb 3-1: SerialNumber: syz [ 148.972972][ T5369] kaweth 3-1:1.0: Firmware present in device. [ 149.117286][ T5369] kaweth 3-1:1.0: Statistics collection: 0 [ 149.117302][ T5369] kaweth 3-1:1.0: Multicast filter limit: 0 [ 149.117311][ T5369] kaweth 3-1:1.0: MTU: 0 [ 149.117320][ T5369] kaweth 3-1:1.0: Read MAC address 00:00:00:00:00:00 [ 149.521892][ T5369] kaweth 3-1:1.0: Error setting SOFS wait [ 149.524090][ T5369] kaweth 3-1:1.0: probe with driver kaweth failed with error -5 [ 149.552909][ T5369] usb 3-1: USB disconnect, device number 24 [ 150.107385][ T7129] FAULT_INJECTION: forcing a failure. [ 150.107385][ T7129] name failslab, interval 1, probability 0, space 0, times 0 [ 150.107410][ T7129] CPU: 0 UID: 0 PID: 7129 Comm: syz.2.401 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.107428][ T7129] Tainted: [L]=SOFTLOCKUP [ 150.107433][ T7129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 150.107441][ T7129] Call Trace: [ 150.107446][ T7129] [ 150.107452][ T7129] dump_stack_lvl+0xe8/0x150 [ 150.107476][ T7129] should_fail_ex+0x3eb/0x540 [ 150.107501][ T7129] should_failslab+0xa8/0x100 [ 150.107522][ T7129] __kmalloc_cache_noprof+0x9e/0x600 [ 150.107538][ T7129] ? nft_trans_rule_add+0x59/0x440 [ 150.107554][ T7129] ? nft_trans_rule_add+0x59/0x440 [ 150.107574][ T7129] nft_trans_rule_add+0x59/0x440 [ 150.107599][ T7129] nf_tables_newrule+0x1b50/0x28a0 [ 150.107623][ T7129] ? __pfx_nf_tables_newrule+0x10/0x10 [ 150.107637][ T7129] ? lock_acquire+0x115/0x350 [ 150.107652][ T7129] ? nfnl_pernet+0x23/0x240 [ 150.107671][ T7129] ? __nla_parse+0x40/0x60 [ 150.107689][ T7129] nfnetlink_rcv+0x1288/0x28c0 [ 150.107724][ T7129] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 150.107765][ T7129] ? skb_clone+0x246/0x3a0 [ 150.107793][ T7129] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.107808][ T7129] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.107826][ T7129] netlink_unicast+0x8ef/0xa80 [ 150.107859][ T7129] netlink_sendmsg+0x7f0/0xb20 [ 150.107877][ T7129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.107895][ T7129] ? aa_sock_msg_perm+0x144/0x210 [ 150.107918][ T7129] ? apparmor_socket_sendmsg+0x98/0x360 [ 150.107937][ T7129] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.107951][ T7129] sock_sendmsg_nosec+0x14e/0x190 [ 150.107967][ T7129] ____sys_sendmsg+0x54e/0x850 [ 150.107988][ T7129] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.108013][ T7129] ? import_iovec+0x73/0xa0 [ 150.108036][ T7129] ___sys_sendmsg+0x2a6/0x360 [ 150.108054][ T7129] ? __lock_acquire+0x747/0x2de0 [ 150.108072][ T7129] ? __pfx____sys_sendmsg+0x10/0x10 [ 150.108113][ T7129] ? __fget_files+0x3a2/0x420 [ 150.108128][ T7129] ? __fget_files+0x2a/0x420 [ 150.108149][ T7129] __x64_sys_sendmsg+0x1b1/0x290 [ 150.108169][ T7129] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 150.108202][ T7129] do_syscall_64+0x166/0x520 [ 150.108222][ T7129] ? trace_irq_disable+0x3b/0x140 [ 150.108239][ T7129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.108252][ T7129] ? clear_bhb_loop+0x70/0xc0 [ 150.108269][ T7129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.108282][ T7129] RIP: 0033:0x7ff82ed9f559 [ 150.108295][ T7129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 150.108306][ T7129] RSP: 002b:00007ff82fc55028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.108321][ T7129] RAX: ffffffffffffffda RBX: 00007ff82f025fa0 RCX: 00007ff82ed9f559 [ 150.108331][ T7129] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 150.108340][ T7129] RBP: 00007ff82fc55090 R08: 0000000000000000 R09: 0000000000000000 [ 150.108348][ T7129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.108356][ T7129] R13: 00007ff82f026038 R14: 00007ff82f025fa0 R15: 00007ffec60e0e88 [ 150.108377][ T7129] [ 150.124063][ T5369] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 150.177353][ T5754] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 150.284107][ T11] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 150.289888][ T5369] usb 1-1: New USB device found: idVendor=1d50, idProduct=614d, bcdDevice=1.00 [ 150.329364][ T5369] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.329394][ T5369] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 150.329408][ T5369] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 150.329422][ T5369] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 150.329448][ T5369] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.425748][ T5754] usb 2-1: Using ep0 maxpacket: 32 [ 150.434583][ T5754] usb 2-1: New USB device found: idVendor=1fd2, idProduct=6007, bcdDevice=0.00 [ 150.485167][ T11] usb 4-1: New USB device found: idVendor=172f, idProduct=0501, bcdDevice=0.00 [ 150.526610][ T5754] usb 2-1: too many endpoints for config 0 interface 0 altsetting 5: 146, using maximum allowed: 30 [ 150.526678][ T5754] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.526695][ T5754] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 146 [ 150.526712][ T5754] usb 2-1: config 0 interface 0 has no altsetting 0 [ 150.526738][ T5754] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.643414][ T5754] usb 2-1: config 0 descriptor?? [ 150.645921][ T11] usb 4-1: config 0 interface 0 has no altsetting 0 [ 150.645943][ T11] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.675021][ T11] usb 4-1: config 0 descriptor?? [ 150.759987][ T7131] FAULT_INJECTION: forcing a failure. [ 150.759987][ T7131] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.760008][ T7131] CPU: 0 UID: 0 PID: 7131 Comm: syz.2.402 Tainted: G L syzkaller #0 PREEMPT(full) [ 150.760029][ T7131] Tainted: [L]=SOFTLOCKUP [ 150.760034][ T7131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 150.760042][ T7131] Call Trace: [ 150.760047][ T7131] [ 150.760053][ T7131] dump_stack_lvl+0xe8/0x150 [ 150.760076][ T7131] should_fail_ex+0x3eb/0x540 [ 150.760102][ T7131] _copy_to_user+0x31/0xb0 [ 150.760117][ T7131] simple_read_from_buffer+0xe1/0x170 [ 150.760136][ T7131] proc_fail_nth_read+0x1bb/0x230 [ 150.760159][ T7131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.760182][ T7131] ? rw_verify_area+0x24a/0x4c0 [ 150.760200][ T7131] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 150.760220][ T7131] vfs_read+0x213/0xa80 [ 150.760240][ T7131] ? __pfx___mutex_lock+0x10/0x10 [ 150.760262][ T7131] ? __pfx_vfs_read+0x10/0x10 [ 150.760280][ T7131] ? __fget_files+0x2a/0x420 [ 150.760294][ T7131] ? __fget_files+0x3a2/0x420 [ 150.760309][ T7131] ? __fget_files+0x2a/0x420 [ 150.760326][ T7131] ? fdget+0x1ac/0x250 [ 150.760346][ T7131] ksys_read+0x150/0x270 [ 150.760364][ T7131] ? __pfx_ksys_read+0x10/0x10 [ 150.760380][ T7131] ? __pfx_usbdev_ioctl+0x10/0x10 [ 150.760402][ T7131] do_syscall_64+0x166/0x520 [ 150.760422][ T7131] ? trace_irq_disable+0x3b/0x140 [ 150.760440][ T7131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.760454][ T7131] ? clear_bhb_loop+0x70/0xc0 [ 150.760471][ T7131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.760484][ T7131] RIP: 0033:0x7ff82ed5fd8e [ 150.760497][ T7131] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 150.760509][ T7131] RSP: 002b:00007ff82fc54fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 150.760523][ T7131] RAX: ffffffffffffffda RBX: 00007ff82fc556c0 RCX: 00007ff82ed5fd8e [ 150.760533][ T7131] RDX: 000000000000000f RSI: 00007ff82fc550a0 RDI: 0000000000000004 [ 150.760541][ T7131] RBP: 00007ff82fc55090 R08: 0000000000000000 R09: 0000000000000000 [ 150.760550][ T7131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.760558][ T7131] R13: 00007ff82f026038 R14: 00007ff82f025fa0 R15: 00007ffec60e0e88 [ 150.760579][ T7131] [ 151.018569][ T7127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.018889][ T7127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.042380][ T5369] gud 1-1:1.0: No supported pixel formats found [ 151.042398][ T5369] gud 1-1:1.0: probe with driver gud failed with error -22 [ 151.192578][ T5754] hid-multitouch 0003:1FD2:6007.0012: hiddev0,hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 151.258664][ T11] hid (null): unknown global tag 0xfd [ 151.303312][ T11] waltop 0003:172F:0501.0013: unexpected long global item [ 151.308005][ T11] waltop 0003:172F:0501.0013: probe with driver waltop failed with error -22 [ 151.435055][ T5754] usb 2-1: USB disconnect, device number 26 [ 151.458573][ T7127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.458841][ T7127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.482533][ T7137] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 151.489379][ T7137] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.755329][ T5754] usb 1-1: USB disconnect, device number 27 syzkaller syzkaller login: [ 152.602399][ T5369] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 152.631897][ T5754] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 158.661683][ C0] sched: DL replenish lagged too much [ 170.276486][ T5754] usb 2-1: device not accepting address 27, error -71 [ 198.245890][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.254102][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 229.892287][ T5369] usb 1-1: device descriptor read/all, error -110 [ 260.733393][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.749713][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 269.641626][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 269.648690][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7156/1:b..l.. [ 269.657592][ C0] rcu: (detected by 0, t=10502 jiffies, g=34001, q=849846 ncpus=1) [ 269.665566][ C0] task:syz.2.409 state:R running task stack:26920 pid:7156 tgid:7156 ppid:7155 task_flags:0x40044c flags:0x00080002 [ 269.679049][ C0] Call Trace: [ 269.682320][ C0] [ 269.685252][ C0] __schedule+0x17dd/0x5830 [ 269.689769][ C0] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 269.695754][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 269.702090][ C0] ? __pfx___schedule+0x10/0x10 [ 269.706941][ C0] ? lock_acquire+0x115/0x350 [ 269.711616][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 269.716984][ C0] preempt_schedule_common+0x7f/0xd0 [ 269.722274][ C0] preempt_schedule_thunk+0x16/0x40 [ 269.727470][ C0] _raw_spin_unlock+0x41/0x50 [ 269.732143][ C0] __zap_vma_range+0x3d59/0x4b90 [ 269.737117][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 269.742412][ C0] ? mas_find+0x6d6/0xcb0 [ 269.746739][ C0] unmap_vmas+0x38b/0x550 [ 269.751065][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 269.755909][ C0] ? mas_next_slot+0xc91/0xd70 [ 269.760698][ C0] exit_mmap+0x290/0xa40 [ 269.764952][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 269.769729][ C0] ? __pfx_exit_aio+0x10/0x10 [ 269.774413][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 269.779609][ C0] __mmput+0x118/0x420 [ 269.783671][ C0] exit_mm+0x18e/0x240 [ 269.787745][ C0] do_exit+0x6a8/0x2360 [ 269.791914][ C0] ? __pfx_do_exit+0x10/0x10 [ 269.796511][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 269.801541][ C0] do_group_exit+0x22d/0x2f0 [ 269.806127][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 269.811342][ C0] get_signal+0x136a/0x1430 [ 269.815887][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 269.821446][ C0] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 269.826640][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 269.832800][ C0] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 269.838518][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 269.843891][ C0] ? rcu_is_watching+0x16/0xb0 [ 269.848673][ C0] do_syscall_64+0x328/0x520 [ 269.853271][ C0] ? trace_irq_disable+0x3b/0x140 [ 269.858302][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.864362][ C0] ? clear_bhb_loop+0x70/0xc0 [ 269.869031][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.874916][ C0] RIP: 0033:0x7ff82ed5fd8e [ 269.879322][ C0] RSP: 002b:00007ff82fc54f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 269.887728][ C0] RAX: 0000000000000000 RBX: 00007ff82fc556c0 RCX: 00007ff82ed5fd8e [ 269.895690][ C0] RDX: 00007ff82fc54fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 269.903655][ C0] RBP: 00007ff82ee36b50 R08: 0000000000000000 R09: 0000000000000000 [ 269.911624][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.919592][ C0] R13: 00007ff82f026038 R14: 00007ff82f025fa0 R15: 00007ffec60e0e88 [ 269.927571][ C0] [ 269.930583][ C0] rcu: rcu_preempt kthread starved for 317 jiffies! g34001 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 269.941419][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 269.951375][ C0] rcu: RCU grace-period kthread stack dump: [ 269.957250][ C0] task:rcu_preempt state:R running task stack:27368 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 269.970727][ C0] Call Trace: [ 269.974002][ C0] [ 269.976957][ C0] __schedule+0x17dd/0x5830 [ 269.981481][ C0] ? __lock_acquire+0x747/0x2de0 [ 269.986423][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 269.991543][ C0] ? __pfx___schedule+0x10/0x10 [ 269.996391][ C0] ? lock_acquire+0x115/0x350 [ 270.001069][ C0] ? schedule+0x90/0x2b0 [ 270.005317][ C0] schedule+0x164/0x2b0 [ 270.009473][ C0] schedule_timeout+0x152/0x2c0 [ 270.014320][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 270.019686][ C0] ? __pfx_process_timeout+0x10/0x10 [ 270.024968][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 270.030771][ C0] ? prepare_to_swait_event+0x220/0x3e0 [ 270.036339][ C0] ? prepare_to_swait_event+0x35e/0x3e0 [ 270.041892][ C0] rcu_gp_fqs_loop+0x30c/0x1230 [ 270.046747][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 270.052901][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 270.058213][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 270.063416][ C0] rcu_gp_kthread+0x9c/0x340 [ 270.068012][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 270.073214][ C0] ? __kthread_parkme+0x71/0x1f0 [ 270.078165][ C0] ? __kthread_parkme+0x199/0x1f0 [ 270.083190][ C0] kthread+0x38b/0x480 [ 270.087251][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 270.092441][ C0] ? __pfx_kthread+0x10/0x10 [ 270.097026][ C0] ret_from_fork+0x514/0xb70 [ 270.101618][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 270.106721][ C0] ? __switch_to+0xc78/0x1410 [ 270.111402][ C0] ? __pfx_kthread+0x10/0x10 [ 270.115989][ C0] ret_from_fork_asm+0x1a/0x30 [ 270.120764][ C0] [ 270.123777][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 270.130105][ C0] CPU: 0 UID: 0 PID: 6102 Comm: kworker/u8:18 Tainted: G L syzkaller #0 PREEMPT(full) [ 270.141232][ C0] Tainted: [L]=SOFTLOCKUP [ 270.145546][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 270.155596][ C0] Workqueue: bat_events batadv_tt_purge [ 270.161140][ C0] RIP: 0010:__kmalloc_cache_noprof+0x312/0x600 [ 270.167288][ C0] Code: 75 59 41 8b 4f 18 48 8b 7c 24 18 4c 89 ee 4c 8b 74 24 08 4c 89 f2 41 89 d8 41 b9 ff ff ff ff e8 74 de ff ff 4c 89 ff 4c 89 ee <4c> 89 f2 89 d9 e8 84 b9 0b 00 65 48 8b 0d 54 27 b6 12 48 3b 4c 24 [ 270.186891][ C0] RSP: 0018:ffffc90000006c98 EFLAGS: 00000296 [ 270.192970][ C0] RAX: 0000000000000001 RBX: 0000000000002920 RCX: 8000000000000102 [ 270.200949][ C0] RDX: 0000000000000020 RSI: ffff888051392740 RDI: ffff88813ff37780 [ 270.208915][ C0] RBP: ffff8880b8240901 R08: 0000000000002920 R09: 00000000ffffffff [ 270.216883][ C0] R10: ffff888051392740 R11: fffff52000000dbc R12: 0000000000000000 [ 270.224845][ C0] R13: ffff888051392740 R14: 0000000000000020 R15: ffff88813ff37780 [ 270.232810][ C0] FS: 0000000000000000(0000) GS:ffff888123376000(0000) knlGS:0000000000000000 [ 270.241757][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 270.248380][ C0] CR2: 00007f19cbbe6e9d CR3: 000000007f048000 CR4: 00000000003526f0 [ 270.256346][ C0] Call Trace: [ 270.259621][ C0] [ 270.262462][ C0] ? __kmalloc_cache_noprof+0x148/0x600 [ 270.268042][ C0] ? ref_tracker_alloc+0x221/0x530 [ 270.273152][ C0] ? ref_tracker_alloc+0x221/0x530 [ 270.278292][ C0] ref_tracker_alloc+0x221/0x530 [ 270.283225][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 270.288686][ C0] ? dst_alloc+0x105/0x170 [ 270.293104][ C0] ? kmem_cache_alloc_noprof+0x31a/0x600 [ 270.298735][ C0] ? dst_alloc+0x105/0x170 [ 270.303150][ C0] ? kmem_cache_alloc_noprof+0x151/0x600 [ 270.308777][ C0] dst_init+0xbe/0x470 [ 270.312858][ C0] ? dst_alloc+0x112/0x170 [ 270.317310][ C0] dst_alloc+0x12a/0x170 [ 270.321570][ C0] ip_route_output_key_hash_rcu+0x14ac/0x2720 [ 270.327693][ C0] ? ip_route_output_key_hash+0xd8/0x2a0 [ 270.333332][ C0] ip_route_output_key_hash+0x18d/0x2a0 [ 270.338886][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 270.344969][ C0] ? lock_acquire+0x115/0x350 [ 270.349662][ C0] ip_route_output_flow+0x2a/0x150 [ 270.354772][ C0] ? ip_route_me_harder+0x74b/0xfe0 [ 270.359981][ C0] ip_route_me_harder+0x762/0xfe0 [ 270.365025][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 270.370591][ C0] ? __alloc_skb+0x27a/0x7a0 [ 270.375198][ C0] ? __cookie_v4_init_sequence+0x273/0x510 [ 270.381008][ C0] ? kmem_cache_alloc_node_noprof+0x3b9/0x600 [ 270.387083][ C0] synproxy_send_tcp+0x332/0x670 [ 270.392031][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 270.397850][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 270.404180][ C0] ? nft_jhash_init+0x238/0x640 [ 270.409029][ C0] ? synproxy_pernet+0x45/0x270 [ 270.413884][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 270.419088][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 270.424801][ C0] ? nf_ip_checksum+0x13c/0x510 [ 270.429697][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 270.434893][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 270.440607][ C0] ? __ip_vs_conn_in_get+0xa6/0x10f0 [ 270.445893][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 270.451528][ C0] nft_do_chain+0x48d/0x1b10 [ 270.456128][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 270.461156][ C0] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 270.467062][ C0] nft_do_chain_inet+0x360/0x4b0 [ 270.472015][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 270.477487][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 270.482895][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 270.488347][ C0] nf_hook_slow+0xc5/0x220 [ 270.492771][ C0] NF_HOOK+0x21f/0x3c0 [ 270.496853][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 270.502831][ C0] ? NF_HOOK+0x9e/0x3c0 [ 270.506978][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 270.511598][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 270.517583][ C0] ? ip_local_deliver+0x113/0x190 [ 270.522605][ C0] NF_HOOK+0x336/0x3c0 [ 270.526671][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 270.531786][ C0] ? NF_HOOK+0x9e/0x3c0 [ 270.535938][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 270.540524][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 270.545628][ C0] ? ip_rcv_core+0x88d/0xd50 [ 270.550213][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 270.554710][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 270.559208][ C0] process_backlog+0xa6b/0x18b0 [ 270.564089][ C0] ? process_backlog+0x3de/0x18b0 [ 270.569172][ C0] __napi_poll+0xaa/0x330 [ 270.573504][ C0] net_rx_action+0x61d/0xf50 [ 270.578118][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 270.583267][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 270.588469][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 270.593767][ C0] handle_softirqs+0x265/0x8d0 [ 270.598554][ C0] ? batadv_tt_purge+0x4ee/0xa40 [ 270.603490][ C0] do_softirq+0x77/0xd0 [ 270.607640][ C0] [ 270.610567][ C0] [ 270.613494][ C0] __local_bh_enable_ip+0x100/0x140 [ 270.618704][ C0] batadv_tt_purge+0x4ee/0xa40 [ 270.623475][ C0] ? process_scheduled_works+0x97a/0x1630 [ 270.629197][ C0] process_scheduled_works+0xc3d/0x1630 [ 270.634782][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 270.640820][ C0] ? assign_work+0x3cf/0x5d0 [ 270.645420][ C0] worker_thread+0xa47/0xfb0 [ 270.650029][ C0] kthread+0x38b/0x480 [ 270.654147][ C0] ? __pfx_worker_thread+0x10/0x10 [ 270.659311][ C0] ? __pfx_kthread+0x10/0x10 [ 270.663922][ C0] ret_from_fork+0x514/0xb70 [ 270.668511][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 270.673618][ C0] ? __switch_to+0xc78/0x1410 [ 270.678306][ C0] ? __pfx_kthread+0x10/0x10 [ 270.682890][ C0] ret_from_fork_asm+0x1a/0x30 [ 270.687665][ C0]