last executing test programs: 8.839273584s ago: executing program 3 (id=1282): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e1d, 0x1, @mcast1, 0x8}, 0x1c) (async) setsockopt$inet6_udp_int(r3, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4e23, 0x5b3, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x8}, 0x1c) (async) sendmmsg$inet6(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000340)="7d489d3ec0e4cfb361", 0x9}], 0x1}}], 0x1, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="280000001400090a0000000000000000021f4800"], 0x28}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x1000000, 0x0, {0x0, 0x0, 0x74, r2, {0x5, 0xf}, {0xfff3}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) r4 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, &(0x7f00000000c0)={0x100, 0x0, 0x2, 0xa, 0x4}) (async) syslog(0x3, &(0x7f0000000180)=""/37, 0x25) (async) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r5) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) (async) pipe(0x0) (async) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000100)={0x401, 0x3, 0x65e, 0x40, 0x81, 0x7fff, 0xc}) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="06000000e964eadab347df3a46d28c84084dfab907000000d526ba677dad6cafc7755baeafe93bff2c527ce848b3f04f1a9fb29307b23a3adcf481bac81a0b7ebcbacc69c8cf776a387d8d05fe4c21b574777e3b8df55006358ba9d4ddbd7cf60cd3490f37", @ANYRES32=0x0, @ANYBLOB, @ANYRES64=0x0], 0x20) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000240)={0x4, 0x6, 0x8080000, 0x1000, &(0x7f0000ffe000/0x1000)=nil}) 8.528886225s ago: executing program 0 (id=1283): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x1000001, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000140)={0x15, 0x1, 0x100, "2742528909000000ce0198666a0084feea0be6b8a80052d763e61f9d13f019e3", 0x4f565559}) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e1f, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x5}, 0x1c) sendmsg$inet6(r0, 0x0, 0x20000851) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e25, 0x31e, @dev={0xfe, 0x80, '\x00', 0x11}, 0x4}, 0x1c) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x40, &(0x7f0000000040), 0x4) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x6dc0c2, 0x0) connect$inet(r2, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x20000800) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2540229}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x4, 0x100, 0x6, 0x180107}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'}) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0xa0602, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) 7.52587099s ago: executing program 0 (id=1285): capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) r0 = socket$kcm(0x10, 0x2, 0x4) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0xfffffffd) r3 = socket$kcm(0x2b, 0x1, 0x0) close(0x3) r4 = socket$inet_tcp(0x2, 0x1, 0x6) r5 = socket(0x80000000000000a, 0x2, 0x0) unshare(0x20000400) close(0x3) signalfd4(r5, &(0x7f0000000080)={[0x6]}, 0x8, 0x800) setsockopt$inet_tcp_buf(r4, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) utimensat(r1, 0x0, &(0x7f0000000040)={{}, {0x0, 0x3ffffffe}}, 0x0) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f03446b000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x4000000) 7.376447281s ago: executing program 0 (id=1287): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003540)) syz_open_dev$video(&(0x7f0000000140), 0x3, 0x804000) (async, rerun: 64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) (async) memfd_secret(0x0) openat$khugepaged_scan(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x3, 0x0, @vifc_lcl_addr=@local, @local}, 0x10) (async) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) gettid() (async) r4 = socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r6 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x51}, 0x20040000) (async, rerun: 32) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x1, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) (async, rerun: 32) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaf7ffffffffff08004500001c00000000fb02907800000000e000030000009078006400d2"], 0x0) setsockopt$MRT_ADD_MFC_PROXY(r4, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe00003a4, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000000080)=0x3ff) 6.828194835s ago: executing program 1 (id=1289): r0 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r1 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @local}, 0x4}, 0x1c) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0x2d, 0x0, 0x0) syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000002180)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x17cc, 0x1021, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x3, 0x10, 0x3, {0x8, 0xb, 0x2, 0x1, 0x1, 0x3, 0x20, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x5, 0x8, 0x9, 0x3}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x9, 0x0, 0x1, {0x8, 0x25, 0x1, 0x80, 0x33, 0xe, 0xe}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x4, 0x6, 0x2, {0x8, 0x25, 0x1, 0x1, 0x3, 0x1c}}}}}}}}]}}, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x2, &(0x7f0000002300)=@string={0x2}}, {0x0, 0x0}, {0xd, &(0x7f00000023c0)=@string={0xd, 0x3, "439c2f29874fc9b01f002c"}}]}) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='nfsd.export/channel\x00', &(0x7f0000000080), &(0x7f0000000100)='nfsd.export/channel\x00', 0x14, 0x2) r2 = openat(r0, &(0x7f0000000e00)='nfsd.export/channel\x00', 0x2, 0x0) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) write(r2, &(0x7f0000000f00)='localhost /tmp 2000000000 0 0 0 0\n', 0x22) ioctl$I2C_PEC(r2, 0x708, 0x3) 6.485717052s ago: executing program 3 (id=1290): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) pipe2$9p(&(0x7f0000000000), 0x0) ioctl$RTC_AIE_ON(0xffffffffffffffff, 0x7001) (async) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) (async) setitimer(0xc3d0181c873aaa3f, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010100000000200000001809040000ff03000100092100000001220600090581031000000ff30900020360006a090d"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) (async) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000100)=0xb329, 0x4) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x25, 0x6, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x492e9351ee3e3e37) (async) r7 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) close(r7) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x40286608, &(0x7f0000000000)={0x31, 0x4, 0xffffffffffffffff, 0x6, 0x8e335, 0x9}) (async) r8 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) (async) r9 = fsmount(r8, 0x1, 0x0) fchdir(r9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xfff1, 0x8}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendto$inet(r2, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9025a01c95d4a068ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) 6.385671304s ago: executing program 0 (id=1291): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg(r1, &(0x7f000000b140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000005140)=[{0xc, 0x117, 0x9}], 0xc}}], 0x1, 0x4000840) 6.193876807s ago: executing program 0 (id=1293): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005c00)=[{{&(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="ea150b699ffb9229e3073b7cf8943a3da40c3341ab36a08d8eda0c4b3d917a129d011cf1d2272fb742d666fad05e56bb11ccfcccdb5aa848c1d9f808000000000000000997f860dde6f217bbf7373423640ed5979892703a8ce458375504126b7e1fbf9ec4be662546a462594ff36b0c528f738df256af921988fbe1a6b958646c950197a37e7d4474636d421df5455c98ea990600cd16f2024e78bad58e321648171d8100dd7500000000000000dc5b53fa6c37f7b2e384648c8f9744711619868e9055382465d0caccbce5a4bc2311f759c451a109006710c64a06964df47b57f47487ada52729727a1589b23be3af456ad656efecfdae1a65d21f4ab81bb177d43667e89072db7916edde584175d4483aa9746998ee85", 0x118}, {&(0x7f0000000180)="e9ab8ec232be59cbf1ffe367316ae1e7012d672f42579dc5e1279c6f6136", 0x1e}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0xbc}}], 0x2, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) r5 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000001240)="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") syz_ublk_add_dev(0xffffffffffffffff, r6, r7, r8, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r9, &(0x7f0000000180)={0x0, 0x1, 0x1000, 0xb, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xca58, 0x200, 0x2000, 0x10000004, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x35bc, 0x1, 0x0, 0x30b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc1cf, 0x2, 0x0, 0x3e3, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x2, 0x23e}}], 0x1, &(0x7f0000000340)={0x2e, 0x6, 0x0, r11, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x4, 0x0, 0x0}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004"], 0x48) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='0\x00g'], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="1b1b"]) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r0, &(0x7f00000000c0)="3f03fe7f0302140006121e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.124755197s ago: executing program 4 (id=1299): socket(0x1d, 0x6, 0x3) socket$inet(0x2, 0x2, 0x7d) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0xe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000840)="a43f70e77cdd", 0x6, 0x20000004, &(0x7f0000000940)={0xa, 0x4e21, 0x1c3a, @private0, 0x2}, 0x238) openat$nullb(0xffffff9c, &(0x7f0000000180), 0xe4600, 0x0) (async) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x500) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback, 0xfffffffe}, 0x1c) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x5, 0xf, 0x0, 0x2, 0x8, 0x8, 0xb31a, 0x3}, 0x0) (async, rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async, rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8bcb650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c1da009444a131f4da58ae36556dd38ea6c029607462029add0924000000000267517308a3d40aa1c788df6"}, 0xd8) (rerun: 64) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @loopback, 0x80000000}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "c0b2dbfe3e072758", '\x00', "f49315f1", "4eb58d5c7e25d11e"}, 0x28) (async) ioctl$int_in(r4, 0x5421, &(0x7f0000000140)=0x1) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(0xffffffffffffffff, 0x80845663, &(0x7f0000000500)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000104000000000101000000000000", @ANYRES32=0x0, @ANYBLOB="090000007d5ca4d69c479afc64e18427000000001c0012800b00010067656e65766500000c0002800800010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) writev(r4, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e21, @multicast1}, 0x10) (async) close(r4) (async, rerun: 64) r6 = syz_open_dev$vim2m(&(0x7f0000000040), 0x1000001, 0x2) (rerun: 64) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000140)={0x980912}) 3.929143136s ago: executing program 4 (id=1301): ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc45}) r0 = openat$drirender128(0xffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CAP(r0, 0xc010640c, &(0x7f00000001c0)={0x14}) r1 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r2 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r1) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000000)={r2, 0xffffffffffffff89, 0xe02}, &(0x7f0000000040)={'enc=', 'pkcs1', ' hash=', {'sha512\x00'}}, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f0000000080), 0xc0800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newtfilter={0x90, 0x2c, 0xf3f, 0x70bd28, 0x25dddbbd, {0x0, 0x0, 0x0, r5, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0xfffa}}, [@filter_kind_options=@f_basic={{0xa}, {0x60, 0x2, [@TCA_BASIC_EMATCHES={0x5c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x2, 0x3, 0x2}, {0x7, 0xfffffff9, 0x0, 0x3}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0xc50, 0x7, 0x2}, {{0x0, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0xc, 0x3, 0x11}, {0x7, 0x7ff, 0x2a39, 0x3}}}]}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20041089}, 0x4880) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f0000000300)={0x1d, 0x9, '\x00', [@jumbo={0xc2, 0x4, 0x7466}, @calipso={0x7, 0x40, {0x2, 0xe, 0x2, 0x0, [0x8000000000000000, 0x0, 0x4000000, 0x7, 0x80000001, 0xe, 0x3]}}]}, 0x50) r6 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r6, 0x4068aea3, &(0x7f00000000c0)={0x80, 0x0, 0x6}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x7f, 0x2d7, 0x7d, 0x8000000000000000, 0x5, 0x0, 0x9, 0x401, 0x2, 0x2, 0x8d], 0xeeee8000, 0x201e87}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x42282, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.736325331s ago: executing program 1 (id=1302): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009dea7840b418fbff7bdc01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000008c0)={0x10, &(0x7f0000010000)=ANY=[@ANYBLOB="00000100"], 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f00000000c0), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000001a40)={&(0x7f0000000180)=[{0x3, 0x200, 0x0, 0x0}], 0x1}) 3.349040859s ago: executing program 2 (id=1304): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x22002}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}]}}}]}, 0x48}}, 0x40800) sendmsg$NL80211_CMD_SET_BEACON(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)={0x4c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0x5b}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x2b, 0xe, [@erp={0x2a, 0x1, {0x0, 0x1, 0x1}}, @gcr_ga={0xbd, 0x6, @device_b}, @ht={0x2d, 0x1a, {0x34eb845b578b04fd, 0x1, 0x4, 0x0, {0x0, 0x9a3, 0x0, 0x7, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x400, 0x5, 0x7}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x24000890) 3.298107026s ago: executing program 2 (id=1305): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="691608030000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x47, &(0x7f00000000c0)=""/71, 0x40f00, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 3.219000736s ago: executing program 2 (id=1306): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0xffffffff, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x2}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x9}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x4e23, 0x0, @mcast1, 0x2}}}, 0x104) setsockopt$inet6_group_source_req(r2, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_FIOSETOWN(r3, 0x8901, &(0x7f0000000040)=0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000005bc0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000e20000000000a05040000000000000000050000000900010073797a3000000000140000001100010000000000000000000500000a"], 0x48}}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000400)=ANY=[@ANYBLOB="3000000002004e24ac1414bb000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002"], 0x20c) sendmsg$NFT_BATCH(r4, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a00000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000002280004800800014000000000080002400000000a140003006e657464657673696d30000000000000140000001100010000000000000000000500000a000000000000000080d711c7575c714368f9ff25f0f6a050b605a54fa67fb07452f567e38d4fbf35afcf5e11e5ad31c144d3c6fa8e1fc639b0cf9637c20f440b0975ba51932b342b7938a30e3cb1592fffb1"], 0x84}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0xbc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000070a01040000000000000000020000000c0003400000000000d34d110900020073797a320000000009000100"], 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) 3.097696872s ago: executing program 0 (id=1307): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x7f, 0x7ffc0002}]}) socket(0xa, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv6_delroute={0x2c, 0x19, 0x1, 0x1, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x0, 0xfd, 0x4, 0x0, 0x7, 0x3600}, [@RTA_PRIORITY={0x8, 0x1e, 0x1}, @RTA_EXPIRES={0x8, 0x17, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d5}, 0x4050) connect$inet(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x5, 0x8, &(0x7f0000006680)) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2a040980) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x0, 0x0}) unshare(0x28000600) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0xc8080) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000000)=0x639) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000200)=""/147, 0x93}, {0x0}], 0x2) openat$binderfs(0xffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x802, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000400)={{0x0, 0x6, 0xfefe, 0x2, 'syz0\x00', 0xfffffefd}, 0x2, 0x2, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl(r4, 0x4048aec9, &(0x7f00000000c0)="03000000000000000100000005") syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="00220f000000b0"], 0x0}, 0x0) r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r5, 0x4018480c, &(0x7f0000000340)={0x3, 0x200, 0x0, 0x4, 0x4, 0x7}) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040de28421100000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000140)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085000000854eb1"], 0x0, 0x0, 0x0, 0x0}, 0x0) r7 = syz_open_dev$hidraw(&(0x7f0000000000), 0x15e, 0x800) close_range(r7, 0xffffffffffffffff, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x47, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) 3.081292904s ago: executing program 2 (id=1308): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_GET_IRQCHIP(r1, 0xc208ae62, &(0x7f0000000840)={0x2, 0x0, @ioapic={0x8000000, 0x0, 0x3, 0x6, 0x0, [{0x0, 0xd, 0x5, '\x00', 0x8}, {0x5, 0x4, 0xa7}, {0xc, 0x3, 0x40, '\x00', 0xd}, {0x2, 0xc4, 0x6, '\x00', 0x3}, {0x6, 0x2, 0x19, '\x00', 0xd2}, {0x57, 0x2, 0x4, '\x00', 0x9}, {0x54, 0x9, 0x4, '\x00', 0xf}, {0x8, 0xfb, 0xa5, '\x00', 0x4}, {0xd, 0x9, 0x55, '\x00', 0x1}, {0x1e, 0x0, 0x8, '\x00', 0xf7}, {0x0, 0x0, 0x4, '\x00', 0x95}, {0x4, 0x3, 0x1, '\x00', 0x8}, {0x8, 0x66, 0xff, '\x00', 0x2}, {0x9, 0x9, 0xd, '\x00', 0x9}, {0xfb, 0x3, 0x7, '\x00', 0x80}, {0xfe, 0x7, 0x82, '\x00', 0x1b}, {0x7, 0x0, 0x2, '\x00', 0xa4}, {0x15, 0xff, 0x85}, {0x7, 0x5, 0x8}, {0x4, 0x4, 0x9, '\x00', 0xc}, {0xf9, 0xe, 0x9, '\x00', 0x3}, {0x9, 0x7, 0x1, '\x00', 0xfa}, {0xf3, 0x2, 0x2, '\x00', 0x5}, {0x8, 0xa, 0x6, '\x00', 0x5}]}}) 2.991896285s ago: executing program 3 (id=1309): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0xa8d, 0x156, 0x0, 0x2, 0x100000000, 0x19f5, 0x4, 0x19ef, 0x40000003, 0x6, 0x27fd, 0x2800, 0x440, 0x3, 0xf, 0x7, {0xb, 0x9}, 0xcd, 0x27}}) 2.948973931s ago: executing program 2 (id=1310): mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x0, &(0x7f0000a00000/0x600000)=nil) r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) (async) r1 = memfd_create(&(0x7f0000000480)='[\v\xdbX\xae[5\xa9\x90\xffc\x1f\x1a\xa9\xfd\xfa\xad\xd1md\xe7\xe2\x7f\x9b\xd5R\x10\xf3\xb6\xffT\xbf\xd1\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\x9fc\xda\xa9\x83r\xd8\x98\x00\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9', 0x0) write$binfmt_script(r1, &(0x7f0000000040)={'#! ', './file0', [{}, {0x20, '#! '}]}, 0x10) (async) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) (async) syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') (async) syz_create_resource$binfmt(&(0x7f0000000180)='./file0\x00') (async) openat$binfmt(0xffffff9c, 0x0, 0x41, 0x1ff) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x31cf, &(0x7f0000000040)={0x0, 0x5000, 0x400, 0x0, 0x1005}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) close(0x3) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000041c0)=@new_dev={0x1, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x11}}}, 0x0) (async) r7 = epoll_create1(0x0) (async) r8 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1003ffffff9]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r8, &(0x7f0000000100)={0xc0000005}) prlimit64(0x0, 0xb, &(0x7f0000000140), 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_perm_addr={0x4b, 0x21, "49720700000079997fdd02cb203d602fc919cdd1982e27d57a8319331a03335b02"}}) r10 = gettid() rt_sigqueueinfo(r10, 0x21, &(0x7f00000007c0)={0x0, 0xfffffffa}) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb8}}, 0x0) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 2.885965566s ago: executing program 4 (id=1311): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={&(0x7f0000000100)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)='f', 0x1}], 0x1, 0x0, 0x35}, 0x400404c) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x102b, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x30, 0x0) landlock_restrict_self(r1, 0x7) 2.885235131s ago: executing program 3 (id=1312): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) r11 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r11, 0x8993, &(0x7f0000000080)={'bond0\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x0, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000005, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000f7ff, 0x8, 0xfffffffe, 0x2d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x40000002, 0x4000e3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 2.843738909s ago: executing program 4 (id=1313): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r10) r11 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r11, 0x8993, &(0x7f0000000080)={'bond0\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) syz_ublk_setup_queues(0xffffffffffffffff, r8, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x0, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000005, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000f7ff, 0x8, 0xfffffffe, 0x2d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x40000002, 0x4000e3, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) 1.795310374s ago: executing program 3 (id=1314): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r1 = fsopen(&(0x7f0000000140)='cgroup\x00', 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000640)=0x10) close(r4) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='sour:e', &(0x7f0000000040)='c:::\x00', 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r6, 0x80ad}], 0x1, 0x2) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x4c, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x60823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x11}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6}]}, 0x4c}}, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000240)={0x64, 0x0, &(0x7f00000003c0)=[@release={0x40046306, 0x2}, @request_death={0x400c630e, 0xfffffffc}, @increfs={0x40046304, 0xfffffffd}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0xd0664646e2745034, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000740)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/21, 0x15, 0x2, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/255, 0xff, 0x1, 0x3c}, @ptr={0x70742a85, 0xffffffff, &(0x7f0000000300)=""/187, 0xbb, 0x2, 0x2a}}, &(0x7f0000000700)={0x0, 0x28, 0x50}}}], 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsopen(&(0x7f0000000200)='befs\x00', 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) inotify_init() 1.793511459s ago: executing program 2 (id=1324): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x101, 0x2, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x7, 0x5, 0x7}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffb, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x12004, 0x3, 0x2, 0xf250, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x4623f, 0x0, 0x10001, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da8, 0x2, 0x200, 0xffffffff, 0x5, 0x8, 0x4, 0x2, 0x6f, 0x243, 0x7, 0x1, 0x199d, 0x6, 0x1ff, 0x9, 0xffffffff, 0x4, 0x6, 0x1000, 0x5, 0x41, 0x8, 0xa, 0x5], [0x7, 0x1e, 0x3, 0x8000, 0xfffffffd, 0x3, 0x1, 0x24, 0x5, 0xfffffffb, 0x8, 0x7fff, 0x72c, 0x1c32, 0x2, 0x8, 0x10000, 0x3fe, 0x7ffd, 0x3, 0x3, 0x297, 0x8, 0x0, 0xa, 0x4, 0x0, 0x3ff, 0x3, 0xff, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffffffff, 0x6, 0x2000008, 0x800, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0x0, 0x2, 0x401, 0xc, 0x3, 0xb, 0x9, 0xe, 0x1, 0x7, 0x6, 0x2, 0x800001, 0x0, 0x8, 0x4, 0x1f6, 0x3], [0x401, 0x8000e584, 0xffff, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0xc, 0x0, 0x7, 0x1e86, 0x5, 0x3d, 0x8, 0x3f92, 0x1000, 0x0, 0x10, 0x1, 0xfffffff9, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x5, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x0, 0x3, 0x400004, 0x3, 0x6d7e, 0x9, 0x8, 0x3, 0xbf23, 0x9, 0x9, 0x956, 0x0, 0x5, 0xe, 0x8000006, 0x100fffd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x1000088, 0x2, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x406, 0xc, 0xfff, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x8000, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x0, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4, 0x20008, 0x8a5, 0x8a, 0x46, 0xc09, 0x6, 0x4, 0x168, 0x800, 0x4, 0xffffffff, 0x7fff, 0xfdff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x7, 0xd4, 0xfffffffd, 0xa, 0xe, 0x101, 0xfff, 0xe, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x7ffc0000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x142, 0x14) socket$nl_netfilter(0x10, 0x3, 0xc) write(r3, &(0x7f0000000080)='4', 0x1) 1.513780506s ago: executing program 4 (id=1315): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x100000a, 0x4082172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000006000/0x2000)=nil) syz_emit_ethernet(0x22, &(0x7f0000002840)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x84, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xe}}}}}}, 0x0) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000006000/0x1000)=nil) syz_clone(0x204000, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="b1", 0xffe0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (fail_nth: 22) 957.691026ms ago: executing program 4 (id=1316): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x15, @loopback}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000019c0)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="090b00000000000000000500000008000300", @ANYRES32=r3], 0x1c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x86090038}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x24000000) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@mpls_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c4000000000010902247251000000000904"], 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000009a00000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r7, 0x0, 0x0, 0xa635c4ca7f0a3408}, 0x20) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000104000002000000000000000000", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, 0x0, 0x400c) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) listen(r0, 0x5) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000000b80)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000540)={0x5cc, r9, 0x8, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME={0x50b, 0x33, @data_frame={@msdu=@type10={{0x0, 0x2, 0x2, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @from_mac=@device_b, @broadcast, @broadcast, {0x9, 0x9}, "", @void, @value=@ver_80211n={0x0, 0xff, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}}, @random="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"}}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x1c}, @NL80211_ATTR_FRAME={0x98, 0x33, @ctrl_frame=@ba={{}, {0x10}, @broadcast, @broadcast, @basic={{0x0, 0x0, 0x0, 0x0, 0x4}, {0x4, 0xa8}, "dd1221509b551c6b01b5eb0214fbaf53fd6694be85651f28de052345fe170b3d68374158f0803e1cecae33e3658102a5bbd1709564d2b70d77635d0412e105bbe236b5b32660d763f7a5fd3fb6b2205d310d0049b628cc17764e7ea46a1aec9bd2f70ef4d6111cff8fa7431f230489bd4e0aaf9ea6318d3cbcd408a015a115b3"}}}]}, 0x5cc}, 0x1, 0x0, 0x0, 0x800}, 0x45) r11 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r11, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) write(r11, &(0x7f0000000400)='PASV\r\n', 0x6) accept4(r0, 0x0, 0x0, 0x0) open(&(0x7f00000000c0)='./file0\x00', 0x108242, 0x78e22799f4a46f8e) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x7, 0x82, &(0x7f0000000140)) 629.629455ms ago: executing program 1 (id=1317): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x20) fcntl$notify(r0, 0x402, 0x80000034) fcntl$notify(r0, 0x402, 0x80000018) 459.416769ms ago: executing program 1 (id=1318): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000034) fcntl$notify(r0, 0x402, 0x80000018) 247.682347ms ago: executing program 1 (id=1319): writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b7", 0x2d}], 0x1) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x3a0af83a) shutdown(r1, 0x1) listen(r1, 0x28) shutdown(r1, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0xfc) 155.183577ms ago: executing program 3 (id=1320): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x80000034) fcntl$notify(r0, 0x402, 0x80000018) (fail_nth: 1) 0s ago: executing program 1 (id=1321): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) close(0xffffffffffffffff) r11 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r11, 0x8993, &(0x7f0000000080)={'bond0\x00', 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) syz_ublk_setup_queues(r10, r8, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x0, 0x2000000}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x3, 0x10000005, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4000f7ff, 0x8, 0xfffffffe, 0x2d5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7c10, 0x10, 0x40000002, 0x4000e3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8000, 0x1, 0x392}}], 0x1, &(0x7f0000000340)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0x0, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x2f, {0x9, 0x0, 0x200001, 0xffff, 0x4, 0x400}}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) kernel console output (not intermixed with test programs): al 1, probability 0, space 0, times 0 [ 236.339827][ T8992] CPU: 0 UID: 0 PID: 8992 Comm: syz.0.874 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.339853][ T8992] Tainted: [L]=SOFTLOCKUP [ 236.339861][ T8992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 236.339872][ T8992] Call Trace: [ 236.339880][ T8992] [ 236.339888][ T8992] dump_stack_lvl+0xe8/0x150 [ 236.339921][ T8992] should_fail_ex+0x410/0x560 [ 236.339946][ T8992] ? __alloc_skb+0x1db/0x7a0 [ 236.339968][ T8992] should_failslab+0xa8/0x100 [ 236.339993][ T8992] ? __alloc_skb+0x1db/0x7a0 [ 236.340012][ T8992] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 236.340040][ T8992] ? __alloc_skb+0x18d/0x7a0 [ 236.340062][ T8992] ? __alloc_skb+0x1db/0x7a0 [ 236.340089][ T8992] __alloc_skb+0x1db/0x7a0 [ 236.340115][ T8992] rtmsg_fib+0xda/0x440 [ 236.340143][ T8992] fib_table_insert+0xd54/0x1b10 [ 236.340190][ T8992] fib_magic+0x43b/0x530 [ 236.340222][ T8992] ? __pfx_fib_magic+0x10/0x10 [ 236.340260][ T8992] ? ip_mc_up+0x273/0x2e0 [ 236.340289][ T8992] ? inetdev_event+0x10d8/0x15e0 [ 236.340322][ T8992] fib_add_ifaddr+0x376/0x5d0 [ 236.340357][ T8992] fib_netdev_event+0x382/0x490 [ 236.340390][ T8992] notifier_call_chain+0x1a5/0x3d0 [ 236.340430][ T8992] netif_open+0x10f/0x190 [ 236.340451][ T8992] ? __pfx_netif_open+0x10/0x10 [ 236.340473][ T8992] ? __kmalloc_noprof+0x38c/0x720 [ 236.340497][ T8992] dev_open+0x101/0x220 [ 236.340524][ T8992] team_add_slave+0x6d5/0x28c0 [ 236.340574][ T8992] ? __pfx_team_add_slave+0x10/0x10 [ 236.340593][ T8992] ? __dev_notify_flags+0x3d4/0x510 [ 236.340621][ T8992] ? __pfx___dev_notify_flags+0x10/0x10 [ 236.340643][ T8992] ? __dev_change_flags+0x5f1/0x820 [ 236.340671][ T8992] ? mutex_is_locked+0x17/0x50 [ 236.340695][ T8992] do_set_master+0x563/0x720 [ 236.340725][ T8992] do_setlink+0xe7b/0x4670 [ 236.340747][ T8992] ? lockdep_hardirqs_on+0x7b/0x110 [ 236.340775][ T8992] ? __lock_acquire+0x747/0x2de0 [ 236.340797][ T8992] ? __pfx_do_setlink+0x10/0x10 [ 236.340838][ T8992] ? do_raw_spin_lock+0x12b/0x2f0 [ 236.340882][ T8992] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 236.340915][ T8992] ? __mutex_lock+0x1096/0x1550 [ 236.340941][ T8992] ? __mutex_lock+0x5d4/0x1550 [ 236.340965][ T8992] ? rtnl_newlink+0xc10/0x1c30 [ 236.340990][ T8992] ? __pfx___mutex_lock+0x10/0x10 [ 236.341020][ T8992] ? ns_capable+0x89/0xe0 [ 236.341047][ T8992] ? rtnl_nets_add+0x16c/0x300 [ 236.341068][ T8992] ? refcount_inc+0x46/0x70 [ 236.341089][ T8992] rtnl_newlink+0x15a3/0x1c30 [ 236.341123][ T8992] ? __pfx_rtnl_newlink+0x10/0x10 [ 236.341146][ T8992] ? __lock_acquire+0x747/0x2de0 [ 236.341173][ T8992] ? __lock_acquire+0x747/0x2de0 [ 236.341207][ T8992] ? lock_acquire+0x115/0x350 [ 236.341234][ T8992] ? lock_acquire+0x115/0x350 [ 236.341262][ T8992] ? is_bpf_text_address+0x26/0x2b0 [ 236.341299][ T8992] ? __lock_acquire+0x747/0x2de0 [ 236.341325][ T8992] ? __kernel_text_address+0xd/0x30 [ 236.341347][ T8992] ? unwind_get_return_address+0x4d/0x90 [ 236.341370][ T8992] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 236.341390][ T8992] ? arch_stack_walk+0xfb/0x150 [ 236.341424][ T8992] ? lock_acquire+0x115/0x350 [ 236.341444][ T8992] ? __pfx_rtnl_newlink+0x10/0x10 [ 236.341483][ T8992] ? __pfx_rtnl_newlink+0x10/0x10 [ 236.341504][ T8992] rtnetlink_rcv_msg+0x802/0xc00 [ 236.341525][ T8992] ? netlink_sendmsg+0x5d4/0xb40 [ 236.341555][ T8992] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 236.341576][ T8992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.341599][ T8992] ? __lock_acquire+0x747/0x2de0 [ 236.341632][ T8992] netlink_rcv_skb+0x226/0x4a0 [ 236.341660][ T8992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 236.341684][ T8992] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 236.341723][ T8992] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.341750][ T8992] ? netlink_deliver_tap+0x2e/0x1b0 [ 236.341780][ T8992] netlink_unicast+0x7bd/0x940 [ 236.341816][ T8992] netlink_sendmsg+0x813/0xb40 [ 236.341853][ T8992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.341888][ T8992] ? apparmor_socket_sendmsg+0x98/0x360 [ 236.341912][ T8992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 236.341938][ T8992] sock_sendmsg_nosec+0x13a/0x180 [ 236.341972][ T8992] ____sys_sendmsg+0x54e/0x850 [ 236.342001][ T8992] ? __pfx_____sys_sendmsg+0x10/0x10 [ 236.342042][ T8992] ___sys_sendmsg+0x2a5/0x360 [ 236.342065][ T8992] ? __lock_acquire+0x747/0x2de0 [ 236.342089][ T8992] ? __pfx____sys_sendmsg+0x10/0x10 [ 236.342113][ T8992] ? get_pid_task+0x20/0x1f0 [ 236.342132][ T8992] ? get_pid_task+0x20/0x1f0 [ 236.342148][ T8992] ? get_pid_task+0x20/0x1f0 [ 236.342195][ T8992] ? __fget_files+0x2a/0x420 [ 236.342220][ T8992] ? __fget_files+0x3a2/0x420 [ 236.342253][ T8992] __sys_sendmsg+0x177/0x240 [ 236.342287][ T8992] ? __pfx___sys_sendmsg+0x10/0x10 [ 236.342330][ T8992] __do_fast_syscall_32+0x27a/0x6a0 [ 236.342353][ T8992] ? do_fast_syscall_32+0x33/0x70 [ 236.342375][ T8992] ? asm_int80_emulation+0x1a/0x20 [ 236.342393][ T8992] ? do_int80_emulation+0x299/0x500 [ 236.342414][ T8992] ? trace_irq_disable+0x3b/0x140 [ 236.342438][ T8992] do_fast_syscall_32+0x33/0x70 [ 236.342460][ T8992] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 236.342483][ T8992] RIP: 0023:0xf70bf0ec [ 236.342502][ T8992] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 236.342519][ T8992] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 236.342541][ T8992] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000600 [ 236.342554][ T8992] RDX: 0000000000004800 RSI: 0000000000000000 RDI: 0000000000000000 [ 236.342567][ T8992] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 236.342578][ T8992] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 236.342590][ T8992] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 236.342619][ T8992] [ 236.525036][ T8992] team0: Device veth0_vlan failed to register rx_handler [ 236.531291][ T8996] netlink: 52 bytes leftover after parsing attributes in process `syz.4.875'. [ 237.257295][ T8994] input: syz1 as /devices/virtual/input/input26 [ 237.259113][ T990] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 237.272431][ T9014] fuse: Bad value for 'fd' [ 237.401759][ T9016] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 237.410437][ T990] usb 1-1: Using ep0 maxpacket: 32 [ 237.411627][ T990] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 237.415723][ T990] usb 1-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 237.415770][ T990] usb 1-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 237.415796][ T990] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 248, changing to 11 [ 237.415822][ T990] usb 1-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 8348, setting to 1024 [ 237.415848][ T990] usb 1-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 237.418639][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.418663][ T990] usb 1-1: Product: syz [ 237.418677][ T990] usb 1-1: Manufacturer: syz [ 237.418691][ T990] usb 1-1: SerialNumber: syz [ 237.442069][ C1] imon 1-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 237.444105][ T990] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/input/input27 [ 237.494291][ T30] audit: type=1326 audit(1789487439.375:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9015 comm="syz.4.883" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000 [ 237.668179][ T990] imon 1-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 237.668194][ T990] (id 0x00) [ 237.767923][ T990] rc_core: IR keymap rc-imon-pad not found [ 237.767943][ T990] Registered IR keymap rc-empty [ 237.768018][ T990] imon 1-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 237.768036][ T990] imon 1-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 237.879049][ T990] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0 [ 237.881256][ T990] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:155.0/rc/rc0/input28 [ 237.891408][ T990] imon 1-1:155.0: iMON device (15c2:ffdc, intf0) on usb<1:43> initialized [ 238.800235][ T990] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 238.826376][ T9046] pim6reg: entered allmulticast mode [ 238.836399][ T9047] coredump: 520(syz.2.891): Core dump to core aborted: cannot preserve file permissions [ 238.852354][ T9046] ªªªªªª: renamed from vlan0 [ 238.958069][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 238.959308][ T990] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 238.965708][ T990] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.965735][ T990] usb 2-1: config 0 has no interface number 0 [ 238.977499][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.977527][ T990] usb 2-1: Product: syz [ 238.977541][ T990] usb 2-1: Manufacturer: syz [ 238.977555][ T990] usb 2-1: SerialNumber: syz [ 238.985618][ T990] usb 2-1: config 0 descriptor?? [ 239.000567][ T990] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 239.000600][ T990] usb 2-1: selecting invalid altsetting 1 [ 239.000617][ T990] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 239.010524][ T990] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 239.011025][ T990] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 239.011095][ T990] usb 2-1: media controller created [ 239.050783][ T990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 239.116456][ T9053] fuse: Bad value for 'fd' [ 239.457948][ T25] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 239.619278][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 239.619322][ T25] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 239.620461][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 239.622076][ T25] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 239.622101][ T25] usb 5-1: Product: syz [ 239.622116][ T25] usb 5-1: Manufacturer: syz [ 239.633790][ T25] uvcvideo 5-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 239.871764][ T9026] imon:send_packet: task interrupted [ 239.871782][ T9026] imon:send_packet: packet tx failed (-512) [ 239.872210][ T9026] imon:vfd_write: send packet #1 failed [ 239.895649][ T48] usb 1-1: USB disconnect, device number 43 [ 240.131418][ T990] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 240.131527][ T990] zl10353_read_register: readreg error (reg=127, ret==-110) [ 240.137520][ T30] kauditd_printk_skb: 71 callbacks suppressed [ 240.137543][ T30] audit: type=1326 audit(1789487442.025:3605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.1.886" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 240.137626][ T30] audit: type=1326 audit(1789487442.025:3606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9030 comm="syz.1.886" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 240.413423][ T25] uvcvideo 5-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 240.416322][ T25] uvcvideo 5-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 240.416381][ T25] uvcvideo 5-1:1.1: Failed to initialize the device (-71). [ 240.417034][ T25] uvcvideo 5-1:1.0: probe with driver uvcvideo failed with error -71 [ 240.444792][ T25] usb 5-1: USB disconnect, device number 29 [ 240.559761][ T9080] tipc: Enabling of bearer rejected, failed to enable media [ 240.584761][ T9081] coredump: 609(syz.3.905): Core dump to core aborted: cannot preserve file permissions [ 240.635611][ T9062] input: syz1 as /devices/virtual/input/input29 [ 240.685555][ T990] usb 2-1: USB disconnect, device number 23 [ 240.746923][ T9087] fuse: Bad value for 'fd' [ 241.110156][ T9100] netlink: 'syz.1.913': attribute type 10 has an invalid length. [ 241.110191][ T9100] bond0: left promiscuous mode [ 241.110217][ T9100] netdevsim netdevsim1 netdevsim1: left promiscuous mode [ 241.112846][ T9100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.113753][ T9100] bond0: entered promiscuous mode [ 241.113774][ T9100] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 241.116284][ T9100] team0: Port device bond0 added [ 241.119205][ T9100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.913'. [ 241.176188][ T5666] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 241.209613][ T9102] program syz.1.914 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 241.273600][ T9103] netlink: 60 bytes leftover after parsing attributes in process `syz.1.914'. [ 241.307912][ T5666] usb 5-1: device descriptor read/64, error -71 [ 241.548161][ T5666] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 241.557911][ T990] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 241.688211][ T5666] usb 5-1: device descriptor read/64, error -71 [ 241.710874][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 241.712518][ T990] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.40 [ 241.714629][ T990] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.714652][ T990] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 241.716780][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.716805][ T990] usb 2-1: Product: syz [ 241.716819][ T990] usb 2-1: Manufacturer: syz [ 241.716832][ T990] usb 2-1: SerialNumber: syz [ 241.798495][ T5666] usb usb5-port1: attempt power cycle [ 242.138408][ T5666] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 242.160314][ T5666] usb 5-1: device descriptor read/8, error -71 [ 242.206162][ T9121] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 242.225641][ T10] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 242.369526][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 242.369564][ T10] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 242.371390][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.373047][ T10] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 242.373072][ T10] usb 4-1: Product: syz [ 242.373086][ T10] usb 4-1: Manufacturer: syz [ 242.406587][ T5666] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 242.433366][ T5666] usb 5-1: device descriptor read/8, error -71 [ 242.454820][ T10] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 242.504796][ T9128] fuse: Invalid rootmode [ 242.538529][ T5666] usb usb5-port1: unable to enumerate USB device [ 242.939648][ T990] usb 2-1: interface 2 not found [ 243.003590][ T990] usb 2-1: USB disconnect, device number 24 [ 243.176398][ T10] uvcvideo 4-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 243.176874][ T10] uvcvideo 4-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 243.176930][ T10] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 243.177599][ T10] uvcvideo 4-1:1.0: probe with driver uvcvideo failed with error -71 [ 243.236566][ T10] usb 4-1: USB disconnect, device number 32 [ 243.671236][ T9145] trusted_key: encrypted_key: insufficient parameters specified [ 243.724367][ T9147] netlink: 48 bytes leftover after parsing attributes in process `syz.0.926'. [ 243.748133][ T990] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 243.846420][ T9147] syz.0.926 (9147): /proc/9146/oom_adj is deprecated, please use /proc/9146/oom_score_adj instead. [ 243.908633][ T990] usb 4-1: Using ep0 maxpacket: 16 [ 243.909143][ T990] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 243.910007][ T990] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 243.910031][ T990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 243.910043][ T990] usb 4-1: config 0 has no interface number 0 [ 243.911913][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.911928][ T990] usb 4-1: Product: syz [ 243.911936][ T990] usb 4-1: Manufacturer: syz [ 243.911944][ T990] usb 4-1: SerialNumber: syz [ 243.914057][ T990] usb 4-1: config 0 descriptor?? [ 243.917994][ T5666] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 243.942120][ T990] uvcvideo 4-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 243.947574][ T990] uvcvideo 4-1:0.105: No valid video chain found. [ 244.070058][ T5666] usb 2-1: unable to get BOS descriptor or descriptor too short [ 244.070597][ T5666] usb 2-1: not running at top speed; connect to a high speed hub [ 244.070632][ T5666] usb 2-1: New USB device found, idVendor=0557, idProduct=2022, bcdDevice=90.e9 [ 244.071630][ T5666] usb 2-1: config 202 has an invalid interface number: 93 but max is 0 [ 244.071656][ T5666] usb 2-1: config 202 has no interface number 0 [ 244.071690][ T5666] usb 2-1: config 202 interface 93 altsetting 4 endpoint 0x8D has invalid maxpacket 1023, setting to 64 [ 244.071706][ T5666] usb 2-1: config 202 interface 93 has no altsetting 0 [ 244.073681][ T5666] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.073703][ T5666] usb 2-1: Product: syz [ 244.073717][ T5666] usb 2-1: Manufacturer: syz [ 244.073731][ T5666] usb 2-1: SerialNumber: syz [ 244.077102][ T9145] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 244.340121][ T5666] pl2303 2-1:202.93: required interrupt-in endpoint missing [ 244.360002][ T5666] usb 2-1: USB disconnect, device number 25 [ 244.915843][ T9158] netlink: 8 bytes leftover after parsing attributes in process `syz.2.930'. [ 244.919269][ T9159] fuse: Invalid rootmode [ 245.328034][ T5666] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 245.369904][ T9161] input: syz1 as /devices/virtual/input/input30 [ 245.464866][ T9157] input: syz1 as /devices/virtual/input/input31 [ 245.478524][ T5666] usb 3-1: Using ep0 maxpacket: 32 [ 245.479429][ T5666] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 245.480623][ T5666] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 245.480650][ T5666] usb 3-1: config 0 has no interface number 0 [ 245.480690][ T5666] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 245.482878][ T5666] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.482903][ T5666] usb 3-1: Product: syz [ 245.482918][ T5666] usb 3-1: Manufacturer: syz [ 245.482934][ T5666] usb 3-1: SerialNumber: syz [ 245.549062][ T5666] usb 3-1: config 0 descriptor?? [ 245.549987][ T9164] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.765361][ T9164] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 245.934958][ T9169] pim6reg: entered allmulticast mode [ 245.973315][ T9169] ªªªªªª: renamed from vlan0 [ 246.378087][ T48] usb 4-1: USB disconnect, device number 33 [ 246.813244][ T9171] input: syz1 as /devices/virtual/input/input32 [ 247.106202][ T9187] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 247.106231][ T9187] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 247.109042][ T9187] vhci_hcd vhci_hcd.0: Device attached [ 247.301080][ T48] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 247.301538][ T9193] vhci_hcd: connection closed [ 247.301832][ T7574] vhci_hcd vhci_hcd.4: stop threads [ 247.301855][ T7574] vhci_hcd vhci_hcd.4: release socket [ 247.301932][ T7574] vhci_hcd vhci_hcd.4: disconnect device [ 247.361549][ T48] usb 41-1: new full-speed USB device number 8 using vhci_hcd [ 247.361609][ T48] usb 41-1: enqueue for inactive port 0 [ 247.401121][ T5666] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 247.401156][ T5666] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 247.402593][ T5666] asix 3-1:0.188: probe with driver asix failed with error -71 [ 247.438023][ T48] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 247.472575][ T5666] usb 3-1: USB disconnect, device number 46 [ 247.921646][ T9207] netlink: 'syz.4.944': attribute type 10 has an invalid length. [ 247.921860][ T9207] veth0_vlan: left promiscuous mode [ 247.927120][ T9207] team0: Device veth0_vlan failed to register rx_handler [ 248.618388][ T9227] fuse: Bad value for 'rootmode' [ 248.844778][ T9235] FAULT_INJECTION: forcing a failure. [ 248.844778][ T9235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.844813][ T9235] CPU: 0 UID: 0 PID: 9235 Comm: syz.0.955 Tainted: G L syzkaller #0 PREEMPT(full) [ 248.844838][ T9235] Tainted: [L]=SOFTLOCKUP [ 248.844844][ T9235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 248.844854][ T9235] Call Trace: [ 248.844860][ T9235] [ 248.844868][ T9235] dump_stack_lvl+0xe8/0x150 [ 248.844898][ T9235] should_fail_ex+0x410/0x560 [ 248.844924][ T9235] _copy_to_user+0x31/0xb0 [ 248.844962][ T9235] simple_read_from_buffer+0xe1/0x170 [ 248.844995][ T9235] proc_fail_nth_read+0x1bb/0x230 [ 248.845024][ T9235] ? common_file_perm+0x20e/0x2b0 [ 248.845050][ T9235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.845082][ T9235] ? rw_verify_area+0x24a/0x4c0 [ 248.845108][ T9235] ? tun_chr_write_iter+0x18a/0x200 [ 248.845128][ T9235] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.845155][ T9235] vfs_read+0x213/0xa80 [ 248.845185][ T9235] ? __pfx___mutex_lock+0x10/0x10 [ 248.845207][ T9235] ? __pfx_vfs_read+0x10/0x10 [ 248.845234][ T9235] ? __fget_files+0x2a/0x420 [ 248.845265][ T9235] ? __fget_files+0x3a2/0x420 [ 248.845288][ T9235] ? __fget_files+0x2a/0x420 [ 248.845319][ T9235] ksys_read+0x150/0x270 [ 248.845349][ T9235] ? __pfx_ksys_read+0x10/0x10 [ 248.845379][ T9235] ? asm_int80_emulation+0x1a/0x20 [ 248.845403][ T9235] do_int80_emulation+0x198/0x500 [ 248.845423][ T9235] ? trace_irq_disable+0x3b/0x140 [ 248.845440][ T9235] ? asm_int80_emulation+0x1a/0x20 [ 248.845458][ T9235] ? clear_bhb_loop+0x70/0xc0 [ 248.845475][ T9235] ? clear_bhb_loop+0x70/0xc0 [ 248.845497][ T9235] asm_int80_emulation+0x1a/0x20 [ 248.845513][ T9235] RIP: 0023:0xf71f75ab [ 248.845529][ T9235] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 248.845544][ T9235] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 248.845563][ T9235] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54ad5d0 [ 248.845575][ T9235] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 248.845586][ T9235] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 248.845596][ T9235] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 248.845605][ T9235] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 248.845631][ T9235] [ 249.458886][ T9252] coredump: 566(syz.0.958): Core dump to core aborted: cannot preserve file permissions [ 250.219978][ T9232] input: syz1 as /devices/virtual/input/input33 [ 250.340634][ T9265] bridge0: port 1(syz_tun) entered blocking state [ 250.340761][ T9265] bridge0: port 1(syz_tun) entered disabled state [ 250.341116][ T9265] syz_tun: entered allmulticast mode [ 250.350716][ T9264] netlink: 'syz.0.962': attribute type 8 has an invalid length. [ 250.356205][ T9266] netlink: 'syz.0.962': attribute type 8 has an invalid length. [ 250.362157][ T9265] syz_tun: entered promiscuous mode [ 250.406248][ T9268] fuse: Bad value for 'rootmode' [ 251.068490][ T5666] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 251.109723][ T9299] fuse: Unknown parameter 'use00000000000000000000' [ 251.220638][ T5666] usb 2-1: not running at top speed; connect to a high speed hub [ 251.220674][ T5666] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 251.221872][ T5666] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.224628][ T5666] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 251.224653][ T5666] usb 2-1: Product: syz [ 251.224666][ T5666] usb 2-1: Manufacturer: syz [ 251.290484][ T5666] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 251.354955][ T9288] input: syz1 as /devices/virtual/input/input34 [ 252.115482][ T5666] uvcvideo 2-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 252.115789][ T5666] uvcvideo 2-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 252.115820][ T5666] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 252.116313][ T5666] uvcvideo 2-1:1.0: probe with driver uvcvideo failed with error -71 [ 252.173677][ T5666] usb 2-1: USB disconnect, device number 26 [ 252.312886][ T9333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.984'. [ 252.399412][ T9334] netlink: 16 bytes leftover after parsing attributes in process `syz.2.983'. [ 252.559993][ T9338] fuse: Unknown parameter 'use00000000000000000000' [ 252.659273][ T9342] FAULT_INJECTION: forcing a failure. [ 252.659273][ T9342] name failslab, interval 1, probability 0, space 0, times 0 [ 252.659313][ T9342] CPU: 0 UID: 0 PID: 9342 Comm: syz.0.988 Tainted: G L syzkaller #0 PREEMPT(full) [ 252.659340][ T9342] Tainted: [L]=SOFTLOCKUP [ 252.659347][ T9342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 252.659360][ T9342] Call Trace: [ 252.659368][ T9342] [ 252.659377][ T9342] dump_stack_lvl+0xe8/0x150 [ 252.659410][ T9342] should_fail_ex+0x410/0x560 [ 252.659437][ T9342] should_failslab+0xa8/0x100 [ 252.659462][ T9342] __kmalloc_cache_noprof+0xa3/0x600 [ 252.659484][ T9342] ? do_raw_spin_lock+0x12b/0x2f0 [ 252.659510][ T9342] ? nd_alloc_stack+0x7d/0xf0 [ 252.659535][ T9342] ? nd_alloc_stack+0x7d/0xf0 [ 252.659571][ T9342] nd_alloc_stack+0x7d/0xf0 [ 252.659599][ T9342] pick_link+0xdb2/0xfe0 [ 252.659635][ T9342] step_into_slowpath+0x58a/0x820 [ 252.659664][ T9342] ? __pfx_step_into_slowpath+0x10/0x10 [ 252.659694][ T9342] ? inode_permission+0x2bc/0x5f0 [ 252.659723][ T9342] link_path_walk+0xd5e/0x1910 [ 252.659767][ T9342] path_lookupat+0xe4/0x8c0 [ 252.659807][ T9342] filename_lookup+0x265/0x5d0 [ 252.659837][ T9342] ? __pfx_filename_lookup+0x10/0x10 [ 252.659878][ T9342] ? __pfx_shmem_put_link+0x10/0x10 [ 252.659901][ T9342] ? __pfx_shmem_put_link+0x10/0x10 [ 252.659930][ T9342] ? getname_long+0xbc/0x130 [ 252.659956][ T9342] ? do_getname+0x151/0x250 [ 252.659982][ T9342] __se_sys_file_setattr+0x350/0x4b0 [ 252.660014][ T9342] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 252.660040][ T9342] ? __pfx___se_sys_file_setattr+0x10/0x10 [ 252.660076][ T9342] ? ksys_write+0x242/0x270 [ 252.660111][ T9342] ? __ia32_sys_file_setattr+0x20/0xc0 [ 252.660142][ T9342] __do_fast_syscall_32+0x27a/0x6a0 [ 252.660166][ T9342] ? do_fast_syscall_32+0x33/0x70 [ 252.660187][ T9342] ? asm_int80_emulation+0x1a/0x20 [ 252.660207][ T9342] ? do_int80_emulation+0x299/0x500 [ 252.660227][ T9342] ? trace_irq_disable+0x3b/0x140 [ 252.660250][ T9342] do_fast_syscall_32+0x33/0x70 [ 252.660273][ T9342] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 252.660296][ T9342] RIP: 0023:0xf70bf0ec [ 252.660314][ T9342] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 252.660331][ T9342] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 00000000000001d5 [ 252.660354][ T9342] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000f40 [ 252.660367][ T9342] RDX: 0000000080001f40 RSI: 0000000000000018 RDI: 0000000000000100 [ 252.660380][ T9342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 252.660393][ T9342] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 252.660404][ T9342] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 252.660432][ T9342] [ 253.087316][ T9346] loop4: detected capacity change from 0 to 7 [ 253.159638][ T9346] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 253.159677][ T9346] loop4: partition table partially beyond EOD, truncated [ 253.191023][ T9346] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 253.231822][ T9332] input: syz1 as /devices/virtual/input/input35 [ 253.258289][ T25] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 253.409482][ T25] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 253.411497][ T25] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 253.411533][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 253.411560][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 253.413944][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.413960][ T25] usb 4-1: Product: syz [ 253.413969][ T25] usb 4-1: Manufacturer: syz [ 253.413977][ T25] usb 4-1: SerialNumber: syz [ 253.417754][ T25] usb 4-1: config 0 descriptor?? [ 253.431695][ T25] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 253.637368][ T25] usb 4-1: USB disconnect, device number 34 [ 254.425927][ T9374] fuse: Unknown parameter 'use00000000000000000000' [ 254.474449][ T9375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.997'. [ 254.504587][ T9361] input: syz1 as /devices/virtual/input/input36 [ 255.251655][ T9406] fuse: Unknown parameter 'user_i00000000000000000000' [ 255.394074][ T30] audit: type=1326 audit(1789487457.285:3607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.0.1012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 255.394467][ T30] audit: type=1326 audit(1789487457.285:3608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.0.1012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 255.395864][ T30] audit: type=1326 audit(1789487457.285:3609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.0.1012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 255.396059][ T30] audit: type=1326 audit(1789487457.285:3610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.0.1012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 255.396452][ T30] audit: type=1326 audit(1789487457.285:3611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.0.1012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 255.396769][ T30] audit: type=1326 audit(1789487457.285:3612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.0.1012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 255.397613][ T30] audit: type=1326 audit(1789487457.285:3613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.0.1012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 255.399655][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1010'. [ 255.580548][ T30] audit: type=1326 audit(1789487457.285:3614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.0.1012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=446 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 255.580598][ T30] audit: type=1326 audit(1789487457.475:3615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.0.1012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 255.580631][ T30] audit: type=1326 audit(1789487457.475:3616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9411 comm="syz.0.1012" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 255.663430][ T9412] FAULT_INJECTION: forcing a failure. [ 255.663430][ T9412] name failslab, interval 1, probability 0, space 0, times 0 [ 255.663470][ T9412] CPU: 1 UID: 0 PID: 9412 Comm: syz.0.1012 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.663497][ T9412] Tainted: [L]=SOFTLOCKUP [ 255.663503][ T9412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 255.663515][ T9412] Call Trace: [ 255.663523][ T9412] [ 255.663531][ T9412] dump_stack_lvl+0xe8/0x150 [ 255.663566][ T9412] should_fail_ex+0x410/0x560 [ 255.663595][ T9412] ? __alloc_skb+0x1db/0x7a0 [ 255.663624][ T9412] should_failslab+0xa8/0x100 [ 255.663650][ T9412] ? __alloc_skb+0x1db/0x7a0 [ 255.663669][ T9412] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 255.663701][ T9412] ? __alloc_skb+0x1db/0x7a0 [ 255.663729][ T9412] __alloc_skb+0x1db/0x7a0 [ 255.663754][ T9412] audit_log_start+0x1b3/0xa10 [ 255.663787][ T9412] ? __pfx_audit_log_start+0x10/0x10 [ 255.663816][ T9412] ? kasan_quarantine_put+0xbb/0x1f0 [ 255.663836][ T9412] ? lockdep_hardirqs_on+0x7b/0x110 [ 255.663862][ T9412] ? __seccomp_filter+0xd14/0x1de0 [ 255.663887][ T9412] audit_seccomp+0x63/0x190 [ 255.663911][ T9412] ? clear_bhb_loop+0x70/0xc0 [ 255.663931][ T9412] ? clear_bhb_loop+0xe/0xc0 [ 255.663955][ T9412] __seccomp_filter+0xd14/0x1de0 [ 255.663990][ T9412] ? __pfx___seccomp_filter+0x10/0x10 [ 255.664011][ T9412] ? __mutex_unlock_slowpath+0x731/0x900 [ 255.664035][ T9412] ? __fget_files+0x2a/0x420 [ 255.664063][ T9412] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 255.664086][ T9412] ? __fget_files+0x3a2/0x420 [ 255.664132][ T9412] ? __seccomp_permit_syscall+0xe7/0x2b0 [ 255.664159][ T9412] do_int80_emulation+0x153/0x500 [ 255.664181][ T9412] ? trace_irq_disable+0x3b/0x140 [ 255.664200][ T9412] ? asm_int80_emulation+0x1a/0x20 [ 255.664218][ T9412] ? clear_bhb_loop+0x70/0xc0 [ 255.664237][ T9412] ? clear_bhb_loop+0x70/0xc0 [ 255.664260][ T9412] asm_int80_emulation+0x1a/0x20 [ 255.664279][ T9412] RIP: 0023:0xf71f75ab [ 255.664297][ T9412] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 255.664314][ T9412] RSP: 002b:00000000f54ad4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 255.664336][ T9412] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54ad5d0 [ 255.664350][ T9412] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 255.664362][ T9412] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 255.664374][ T9412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 255.664387][ T9412] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 255.664415][ T9412] [ 255.813406][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.813466][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.837653][ T9417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1014'. [ 256.052984][ T9429] netlink: 'syz.4.1019': attribute type 1 has an invalid length. [ 256.141414][ T9431] fuse: Unknown parameter 'user_i00000000000000000000' [ 256.188252][ T25] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 256.318361][ T25] usb 3-1: device descriptor read/64, error -71 [ 256.339656][ T9436] netlink: 'syz.4.1022': attribute type 4 has an invalid length. [ 256.339676][ T9436] netlink: 'syz.4.1022': attribute type 3 has an invalid length. [ 256.534996][ T9433] input: syz1 as /devices/virtual/input/input37 [ 256.558485][ T25] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 256.598091][ T48] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 256.688500][ T25] usb 3-1: device descriptor read/64, error -71 [ 256.749027][ T48] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 256.752558][ T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.752576][ T48] usb 2-1: Product: syz [ 256.752584][ T48] usb 2-1: Manufacturer: syz [ 256.752592][ T48] usb 2-1: SerialNumber: syz [ 256.798358][ T25] usb usb3-port1: attempt power cycle [ 256.954717][ T48] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 257.138009][ T25] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 257.159058][ T25] usb 3-1: device descriptor read/8, error -71 [ 257.171297][ T9438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.171898][ T9438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.401514][ T990] usb 2-1: USB disconnect, device number 27 [ 257.415656][ T25] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 257.429044][ T25] usb 3-1: device descriptor read/8, error -71 [ 257.539100][ T25] usb usb3-port1: unable to enumerate USB device [ 257.620989][ T9461] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1032'. [ 257.658840][ T9463] fuse: Unknown parameter 'user_i00000000000000000000' [ 257.820416][ T9468] fuse: Unknown parameter 'fdF½ ¬‡Ÿáõ;}ÂÒLÙzY“˜¡êN_oé—Î7$O¹iÙÇ U)<°ðûCçT4î' [ 257.897888][ T5666] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 258.049110][ T5666] usb 4-1: not running at top speed; connect to a high speed hub [ 258.049146][ T5666] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 258.050372][ T48] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 258.052818][ T48] ath9k_htc: Failed to initialize the device [ 258.052913][ T5666] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 258.052976][ T5666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.058981][ T990] usb 2-1: ath9k_htc: USB layer deinitialized [ 258.127145][ T5666] uvcvideo 4-1:1.0: Found UVC 1.00 device (046d:0825) [ 258.127213][ T5666] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 258.398136][ T990] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 258.528019][ T990] usb 2-1: device descriptor read/64, error -71 [ 258.768360][ T990] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 258.894913][ T25] usb 4-1: USB disconnect, device number 35 [ 258.900573][ T990] usb 2-1: device descriptor read/64, error -71 [ 258.969541][ T5666] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 259.014387][ T990] usb usb2-port1: attempt power cycle [ 259.357947][ T990] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 259.390697][ T990] usb 2-1: device descriptor read/8, error -71 [ 259.627924][ T25] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 259.628093][ T990] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 259.654689][ T990] usb 2-1: device descriptor read/8, error -71 [ 259.758386][ T990] usb usb2-port1: unable to enumerate USB device [ 259.777937][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 259.778636][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 259.780005][ T25] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 259.780029][ T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.780056][ T25] usb 3-1: config 0 has no interface number 0 [ 259.786186][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.786208][ T25] usb 3-1: Product: syz [ 259.786215][ T25] usb 3-1: Manufacturer: syz [ 259.786223][ T25] usb 3-1: SerialNumber: syz [ 259.803853][ T25] usb 3-1: config 0 descriptor?? [ 259.817485][ T25] uvcvideo 3-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 259.817518][ T25] uvcvideo 3-1:0.105: No valid video chain found. [ 260.323549][ T9517] fuse: Unknown parameter 'user_id00000000000000000000' [ 260.997905][ T10] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 261.147950][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 261.153255][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 261.153306][ T10] usb 1-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 261.157662][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.157688][ T10] usb 1-1: Product: syz [ 261.157702][ T10] usb 1-1: Manufacturer: syz [ 261.157739][ T10] usb 1-1: SerialNumber: syz [ 261.291712][ T30] kauditd_printk_skb: 304 callbacks suppressed [ 261.291742][ T30] audit: type=1326 audit(1789487463.185:3919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.1.1049" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 261.293717][ T30] audit: type=1326 audit(1789487463.185:3920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.1.1049" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 261.293864][ T30] audit: type=1326 audit(1789487463.185:3921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.1.1049" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 261.294230][ T30] audit: type=1326 audit(1789487463.185:3922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.1.1049" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 261.294361][ T30] audit: type=1326 audit(1789487463.185:3923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.1.1049" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 261.295110][ T30] audit: type=1326 audit(1789487463.185:3924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.1.1049" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=125 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 261.295150][ T30] audit: type=1326 audit(1789487463.185:3925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.1.1049" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 261.295191][ T30] audit: type=1326 audit(1789487463.185:3926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.1.1049" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 261.296244][ T30] audit: type=1326 audit(1789487463.185:3927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.1.1049" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 261.296928][ T30] audit: type=1326 audit(1789487463.185:3928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9529 comm="syz.1.1049" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 261.478604][ T9524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.480584][ T9524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.510142][ T5702] hid (null): unknown global tag 0xc [ 261.511737][ T5702] hid (null): invalid report_size 57076 [ 261.511802][ T5702] hid (null): bogus close delimiter [ 261.511815][ T5702] hid (null): unknown global tag 0xd [ 261.511862][ T5702] hid (null): invalid report_size -1048731548 [ 261.536410][ T5702] hid-generic 0003:0006:8001.0005: unknown global tag 0xc [ 261.536460][ T5702] hid-generic 0003:0006:8001.0005: item 0 4 1 12 parsing failed [ 261.537182][ T5702] hid-generic 0003:0006:8001.0005: probe with driver hid-generic failed with error -22 [ 261.941662][ T9536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.033933][ T10] usb 1-1: USB disconnect, device number 44 [ 262.179056][ T25] usb 3-1: USB disconnect, device number 51 [ 262.265014][ T7151] udevd[7151]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.496121][ T9549] fuse: Unknown parameter 'user_id00000000000000000000' [ 262.688066][ T9557] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1058'. [ 262.761129][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1058'. [ 262.978204][ T9563] loop8: detected capacity change from 0 to 16384 [ 263.028274][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 263.178113][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 263.178337][ T10] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 263.182660][ T25] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 263.185519][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 263.185534][ T25] usb 2-1: config 0 has no interface number 0 [ 263.234289][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.234306][ T25] usb 2-1: Product: syz [ 263.234314][ T25] usb 2-1: Manufacturer: syz [ 263.234321][ T25] usb 2-1: SerialNumber: syz [ 263.276214][ T25] usb 2-1: config 0 descriptor?? [ 263.296435][ T25] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 263.296456][ T25] usb 2-1: selecting invalid altsetting 1 [ 263.296465][ T25] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 263.329370][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 263.331278][ T10] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 263.334277][ T10] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 263.334305][ T10] usb 1-1: config 0 has no interface number 0 [ 263.340187][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.340233][ T10] usb 1-1: Product: syz [ 263.340247][ T10] usb 1-1: Manufacturer: syz [ 263.340260][ T10] usb 1-1: SerialNumber: syz [ 263.404269][ T25] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 263.404646][ T25] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 263.404691][ T25] usb 2-1: media controller created [ 263.460728][ T10] usb 1-1: config 0 descriptor?? [ 263.466936][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 263.505006][ T10] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 263.674955][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 263.728972][ T10] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 263.893939][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - change_port message too short [ 263.969493][ T9583] FAULT_INJECTION: forcing a failure. [ 263.969493][ T9583] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 263.969520][ T9583] CPU: 0 UID: 0 PID: 9583 Comm: syz.4.1064 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.969549][ T9583] Tainted: [L]=SOFTLOCKUP [ 263.969557][ T9583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 263.969568][ T9583] Call Trace: [ 263.969577][ T9583] [ 263.969585][ T9583] dump_stack_lvl+0xe8/0x150 [ 263.969615][ T9583] should_fail_ex+0x410/0x560 [ 263.969631][ T9583] prepare_alloc_pages+0x223/0x600 [ 263.969647][ T9583] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 263.969661][ T9583] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 263.969698][ T9583] ? __pfx_policy_nodemask+0x10/0x10 [ 263.969721][ T9583] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 263.969758][ T9583] alloc_pages_mpol+0x21e/0x390 [ 263.969772][ T9583] ? vhost_dev_set_owner+0x2a7/0xb00 [ 263.969788][ T9583] ___kmalloc_large_node+0x4f/0x120 [ 263.969805][ T9583] __kmalloc_large_node_noprof+0x18/0x90 [ 263.969819][ T9583] __kmalloc_noprof+0x3fb/0x720 [ 263.969838][ T9583] ? trace_kmalloc+0x2a/0xf0 [ 263.969864][ T9583] ? vhost_dev_set_owner+0x2a7/0xb00 [ 263.969893][ T9583] vhost_dev_set_owner+0x2a7/0xb00 [ 263.969917][ T9583] vhost_net_ioctl+0x8fd/0x17d0 [ 263.969935][ T9583] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 263.969950][ T9583] ? __fget_files+0x2a/0x420 [ 263.969969][ T9583] ? __fget_files+0x2a/0x420 [ 263.969998][ T9583] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 263.970029][ T9583] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 263.970054][ T9583] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 263.970066][ T9583] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 263.970079][ T9583] ? __fget_files+0x3a2/0x420 [ 263.970096][ T9583] ? fput+0xa0/0xd0 [ 263.970108][ T9583] ? ksys_write+0x242/0x270 [ 263.970143][ T9583] __do_fast_syscall_32+0x27a/0x6a0 [ 263.970169][ T9583] ? do_fast_syscall_32+0x33/0x70 [ 263.970192][ T9583] ? asm_int80_emulation+0x1a/0x20 [ 263.970208][ T9583] ? do_int80_emulation+0x299/0x500 [ 263.970219][ T9583] ? trace_irq_disable+0x3b/0x140 [ 263.970232][ T9583] do_fast_syscall_32+0x33/0x70 [ 263.970243][ T9583] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 263.970256][ T9583] RIP: 0023:0xf7f330ec [ 263.970267][ T9583] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 263.970283][ T9583] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 263.970305][ T9583] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000af01 [ 263.970318][ T9583] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 263.970329][ T9583] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 263.970341][ T9583] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 263.970353][ T9583] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 263.970382][ T9583] [ 264.300553][ T25] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 264.300611][ T25] zl10353_read_register: readreg error (reg=127, ret==-71) [ 264.301084][ T25] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 264.455705][ T25] usb 2-1: USB disconnect, device number 32 [ 264.500995][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 264.512912][ T10] usb 1-1: USB disconnect, device number 45 [ 264.632459][ T10] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 264.718565][ T10] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 264.718993][ T10] quatech2 1-1:0.51: device disconnected [ 264.883103][ T9601] fuse: Unknown parameter 'user_id00000000000000000000' [ 265.136476][ T9608] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1070'. [ 265.136535][ T9608] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1070'. [ 265.207918][ T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 265.358096][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 265.359632][ T25] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 265.360672][ T25] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 265.360687][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.360698][ T25] usb 5-1: config 0 has no interface number 0 [ 265.362629][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.362654][ T25] usb 5-1: Product: syz [ 265.362670][ T25] usb 5-1: Manufacturer: syz [ 265.362684][ T25] usb 5-1: SerialNumber: syz [ 265.366577][ T25] usb 5-1: config 0 descriptor?? [ 265.442485][ T25] uvcvideo 5-1:0.105: Found UVC 0.00 device syz (046d:08f3) [ 265.442506][ T25] uvcvideo 5-1:0.105: No valid video chain found. [ 266.825541][ T9647] blk_print_req_error: 11 callbacks suppressed [ 266.825557][ T9647] I/O error, dev loop8, sector 4608 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 266.845177][ T9647] I/O error, dev loop8, sector 4864 op 0x0:(READ) flags 0x80700 phys_seg 2 prio class 2 [ 266.871056][ T9647] I/O error, dev loop8, sector 4608 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.871079][ T9647] buffer_io_error: 10 callbacks suppressed [ 266.871086][ T9647] Buffer I/O error on dev loop8, logical block 576, async page read [ 266.871110][ T9647] I/O error, dev loop8, sector 4616 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.871123][ T9647] Buffer I/O error on dev loop8, logical block 577, async page read [ 266.871141][ T9647] I/O error, dev loop8, sector 4624 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.871153][ T9647] Buffer I/O error on dev loop8, logical block 578, async page read [ 266.871177][ T9647] I/O error, dev loop8, sector 4632 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.871190][ T9647] Buffer I/O error on dev loop8, logical block 579, async page read [ 266.871207][ T9647] I/O error, dev loop8, sector 4640 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.871220][ T9647] Buffer I/O error on dev loop8, logical block 580, async page read [ 266.871237][ T9647] I/O error, dev loop8, sector 4648 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.871250][ T9647] Buffer I/O error on dev loop8, logical block 581, async page read [ 266.871289][ T9647] I/O error, dev loop8, sector 4656 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.871303][ T9647] Buffer I/O error on dev loop8, logical block 582, async page read [ 266.871320][ T9647] I/O error, dev loop8, sector 4664 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 266.871333][ T9647] Buffer I/O error on dev loop8, logical block 583, async page read [ 266.871351][ T9647] Buffer I/O error on dev loop8, logical block 584, async page read [ 266.871370][ T9647] Buffer I/O error on dev loop8, logical block 585, async page read [ 267.278194][ T30] kauditd_printk_skb: 105 callbacks suppressed [ 267.278213][ T30] audit: type=1326 audit(1789487469.175:4034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.1.1077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 267.279046][ T30] audit: type=1326 audit(1789487469.175:4035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.1.1077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 267.338541][ T30] audit: type=1326 audit(1789487469.225:4036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.1.1077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 267.338586][ T30] audit: type=1326 audit(1789487469.225:4037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.1.1077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 267.339853][ T30] audit: type=1326 audit(1789487469.235:4038): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.1.1077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 267.340054][ T30] audit: type=1326 audit(1789487469.235:4039): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.1.1077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 267.341239][ T30] audit: type=1326 audit(1789487469.235:4040): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.1.1077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 267.341282][ T30] audit: type=1326 audit(1789487469.235:4041): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.1.1077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 267.341320][ T30] audit: type=1326 audit(1789487469.235:4042): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.1.1077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf702f0ec code=0x7ffc0000 [ 267.341360][ T30] audit: type=1326 audit(1789487469.235:4043): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9654 comm="syz.1.1077" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71675ab code=0x7ffc0000 [ 267.640916][ T10] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 267.725631][ T5702] usb 5-1: USB disconnect, device number 35 [ 267.787936][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 267.790896][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 267.798974][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.799002][ T10] usb 2-1: config 0 has no interface number 0 [ 267.826538][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.826565][ T10] usb 2-1: Product: syz [ 267.826579][ T10] usb 2-1: Manufacturer: syz [ 267.826594][ T10] usb 2-1: SerialNumber: syz [ 267.835384][ T10] usb 2-1: config 0 descriptor?? [ 267.856347][ T10] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 267.856374][ T10] usb 2-1: selecting invalid altsetting 1 [ 267.856390][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 267.872637][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 267.873031][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 267.873077][ T10] usb 2-1: media controller created [ 267.919896][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.967300][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1081'. [ 267.967325][ T9663] bridge_slave_0: default FDB implementation only supports local addresses [ 268.037238][ T9666] loop4: detected capacity change from 0 to 7 [ 268.053799][ T9666] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 268.053821][ T9666] loop4: partition table partially beyond EOD, truncated [ 268.053956][ T9666] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 268.191438][ T9672] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.1080'. [ 268.191680][ T9672] net_ratelimit: 10 callbacks suppressed [ 268.191720][ T9672] openvswitch: netlink: Message has 512 unknown bytes. [ 268.298245][ T5666] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 268.448455][ T5666] usb 4-1: Using ep0 maxpacket: 16 [ 268.449884][ T5666] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 268.454802][ T5666] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 268.454855][ T5666] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 268.454866][ T5666] usb 4-1: config 0 has no interface number 0 [ 268.454888][ T5666] usb 4-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 268.454912][ T5666] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.512823][ T5666] usb 4-1: config 0 descriptor?? [ 268.536540][ T5666] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 269.008669][ T10] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 269.008718][ T10] zl10353_read_register: readreg error (reg=127, ret==-110) [ 269.016865][ T5666] snd-usb-audio 4-1:0.126: probe with driver snd-usb-audio failed with error -2 [ 269.032591][ T5666] usb 4-1: USB disconnect, device number 36 [ 269.181832][ T9677] FAULT_INJECTION: forcing a failure. [ 269.181832][ T9677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 269.181861][ T9677] CPU: 0 UID: 0 PID: 9677 Comm: syz.0.1086 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.181880][ T9677] Tainted: [L]=SOFTLOCKUP [ 269.181884][ T9677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 269.181890][ T9677] Call Trace: [ 269.181895][ T9677] [ 269.181900][ T9677] dump_stack_lvl+0xe8/0x150 [ 269.181920][ T9677] should_fail_ex+0x410/0x560 [ 269.181934][ T9677] _copy_from_user+0x2d/0xb0 [ 269.181948][ T9677] sk_setsockopt+0x2b5/0x2f10 [ 269.181964][ T9677] ? __pfx_sk_setsockopt+0x10/0x10 [ 269.181979][ T9677] ? aa_sk_perm+0x713/0x900 [ 269.181992][ T9677] ? lock_acquire+0x115/0x350 [ 269.182006][ T9677] ? __pfx_aa_sk_perm+0x10/0x10 [ 269.182021][ T9677] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 269.182037][ T9677] do_sock_setsockopt+0x11b/0x1b0 [ 269.182052][ T9677] __ia32_sys_setsockopt+0x13d/0x1b0 [ 269.182067][ T9677] __do_fast_syscall_32+0x27a/0x6a0 [ 269.182080][ T9677] ? do_fast_syscall_32+0x33/0x70 [ 269.182091][ T9677] ? asm_int80_emulation+0x1a/0x20 [ 269.182101][ T9677] ? do_int80_emulation+0x299/0x500 [ 269.182112][ T9677] ? trace_irq_disable+0x3b/0x140 [ 269.182124][ T9677] do_fast_syscall_32+0x33/0x70 [ 269.182136][ T9677] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 269.182148][ T9677] RIP: 0023:0xf70bf0ec [ 269.182158][ T9677] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 269.182168][ T9677] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 269.182180][ T9677] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001 [ 269.182187][ T9677] RDX: 000000000000001a RSI: 0000000080000040 RDI: 0000000000000008 [ 269.182193][ T9677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 269.182199][ T9677] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 269.182205][ T9677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 269.182219][ T9677] [ 269.583213][ T10] usb 2-1: USB disconnect, device number 33 [ 269.731728][ T9685] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 269.731764][ T9685] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 269.731842][ T9685] vhci_hcd vhci_hcd.0: Device attached [ 269.844071][ T9691] vhci_hcd: connection closed [ 269.845638][ T59] vhci_hcd vhci_hcd.4: stop threads [ 269.845657][ T59] vhci_hcd vhci_hcd.4: release socket [ 269.845691][ T59] vhci_hcd vhci_hcd.4: disconnect device [ 269.908021][ T5666] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 270.269595][ T9683] input: syz1 as /devices/virtual/input/input38 [ 270.937940][ T10] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 271.029141][ T9722] bridge0: port 1(syz_tun) entered blocking state [ 271.029214][ T9722] bridge0: port 1(syz_tun) entered forwarding state [ 271.043321][ T9722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.046435][ T9722] 8021q: adding VLAN 0 to HW filter on device team0 [ 271.054042][ T9722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 271.091000][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 271.097016][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 271.097064][ T10] usb 5-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 271.106845][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.106872][ T10] usb 5-1: Product: syz [ 271.106886][ T10] usb 5-1: Manufacturer: syz [ 271.106900][ T10] usb 5-1: SerialNumber: syz [ 271.169945][ T9722] 0·: left allmulticast mode [ 271.169962][ T9722] hsr_slave_0: left allmulticast mode [ 271.169971][ T9722] hsr_slave_1: left allmulticast mode [ 271.174391][ T9722] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 271.333402][ T9720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.333727][ T9720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.367671][ T25] hid (null): unknown global tag 0xc [ 271.367691][ T25] hid (null): invalid report_size 57076 [ 271.367709][ T25] hid (null): bogus close delimiter [ 271.367717][ T25] hid (null): unknown global tag 0xd [ 271.367764][ T25] hid (null): invalid report_size -1048731548 [ 271.400488][ T25] hid-generic 0003:0006:8001.0006: unknown global tag 0xc [ 271.400514][ T25] hid-generic 0003:0006:8001.0006: item 0 4 1 12 parsing failed [ 271.401610][ T25] hid-generic 0003:0006:8001.0006: probe with driver hid-generic failed with error -22 [ 271.560602][ T9731] faux_driver vgem: [drm] Unknown color mode 11176; guessing buffer size. [ 271.566890][ T10] usb 5-1: USB disconnect, device number 36 [ 271.654720][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 271.998355][ T25] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 272.112826][ T9742] loop4: detected capacity change from 0 to 7 [ 272.128066][ T990] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 272.148643][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 272.149724][ T25] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 272.157373][ T25] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.157405][ T25] usb 3-1: config 0 has no interface number 0 [ 272.168451][ T9742] loop4: [CUMANA/ADFS] p1 [ADFS] p1 [ 272.168487][ T9742] loop4: partition table partially beyond EOD, truncated [ 272.177386][ T9742] loop4: p1 size 2989602745 extends beyond EOD, truncated [ 272.209708][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.209740][ T25] usb 3-1: Product: syz [ 272.209754][ T25] usb 3-1: Manufacturer: syz [ 272.209768][ T25] usb 3-1: SerialNumber: syz [ 272.219046][ T25] usb 3-1: config 0 descriptor?? [ 272.250837][ T25] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 272.250867][ T25] usb 3-1: selecting invalid altsetting 1 [ 272.250883][ T25] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 272.257271][ T25] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 272.257462][ T25] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 272.257493][ T25] usb 3-1: media controller created [ 272.306827][ T990] usb 4-1: not running at top speed; connect to a high speed hub [ 272.306868][ T990] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 1.00 [ 272.308352][ T990] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.308421][ T990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.354733][ T990] gspca_main: spca501-2.14.0 probing 0000:0000 [ 272.383459][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 272.454774][ T30] kauditd_printk_skb: 118 callbacks suppressed [ 272.454798][ T30] audit: type=1326 audit(1789487474.345:4162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.2.1100" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f240ec code=0x7ffc0000 [ 272.454844][ T30] audit: type=1326 audit(1789487474.345:4163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.2.1100" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f240ec code=0x7ffc0000 [ 272.466698][ T30] audit: type=1326 audit(1789487474.355:4164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.2.1100" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71275ab code=0x7ffc0000 [ 272.466747][ T30] audit: type=1326 audit(1789487474.355:4165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.2.1100" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f240ec code=0x7ffc0000 [ 272.466784][ T30] audit: type=1326 audit(1789487474.355:4166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.2.1100" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f240ec code=0x7ffc0000 [ 272.471012][ T30] audit: type=1326 audit(1789487474.365:4167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.2.1100" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f240ec code=0x7ffc0000 [ 272.692737][ T9747] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.698944][ T9747] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.858408][ T990] gspca_spca501: reg write: error -110 [ 272.858460][ T990] spca501 4-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 272.858535][ T990] spca501 4-1:1.0: probe with driver spca501 failed with error -22 [ 272.859594][ T990] uvcvideo 4-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 272.859656][ T990] uvcvideo 4-1:1.0: Found UVC 1.00 device (0000:0000) [ 272.859708][ T990] uvcvideo 4-1:1.0: No streaming interface found for terminal 32774. [ 273.166439][ T9740] input: syz1 as /devices/virtual/input/input39 [ 273.489154][ T25] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 273.489230][ T25] zl10353_read_register: readreg error (reg=127, ret==-110) [ 273.492736][ T30] audit: type=1326 audit(1789487475.385:4168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.2.1100" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f240ec code=0x7ffc0000 [ 273.492769][ T30] audit: type=1326 audit(1789487475.385:4169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.2.1100" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f240ec code=0x7ffc0000 [ 273.930143][ T9758] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 273.930171][ T9758] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 273.931116][ T9758] vhci_hcd vhci_hcd.0: Device attached [ 274.001394][ T9765] vhci_hcd: connection closed [ 274.003586][ T165] vhci_hcd vhci_hcd.4: stop threads [ 274.003614][ T165] vhci_hcd vhci_hcd.4: release socket [ 274.003634][ T165] vhci_hcd vhci_hcd.4: disconnect device [ 274.056079][ T25] usb 3-1: USB disconnect, device number 52 [ 274.081276][ T5769] udevd[5769]: setting mode of /dev/bus/usb/003/052 to 020664 failed: No such file or directory [ 274.081396][ T5769] udevd[5769]: setting owner of /dev/bus/usb/003/052 to uid=0, gid=0 failed: No such file or directory [ 274.279640][ T9771] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 274.279668][ T9771] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 274.279738][ T9771] vhci_hcd vhci_hcd.0: Device attached [ 274.322692][ T9763] input: syz1 as /devices/virtual/input/input40 [ 274.394577][ T9775] vhci_hcd: connection closed [ 274.394920][ T7572] vhci_hcd vhci_hcd.2: stop threads [ 274.394944][ T7572] vhci_hcd vhci_hcd.2: release socket [ 274.395005][ T7572] vhci_hcd vhci_hcd.2: disconnect device [ 274.457968][ T9] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 274.823034][ T10] usb 4-1: USB disconnect, device number 37 [ 275.053981][ T5702] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 275.076911][ T9783] input: syz1 as /devices/virtual/input/input41 [ 275.199551][ T5702] usb 2-1: Using ep0 maxpacket: 16 [ 275.204095][ T5702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 275.204146][ T5702] usb 2-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice= 0.40 [ 275.207448][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.207482][ T5702] usb 2-1: Product: syz [ 275.207498][ T5702] usb 2-1: Manufacturer: syz [ 275.207513][ T5702] usb 2-1: SerialNumber: syz [ 275.377912][ T25] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 275.482906][ T9786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.483944][ T9786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 275.497678][ T191] hid (null): unknown global tag 0xc [ 275.497699][ T191] hid (null): invalid report_size 57076 [ 275.497726][ T191] hid (null): bogus close delimiter [ 275.497738][ T191] hid (null): unknown global tag 0xd [ 275.498160][ T191] hid (null): invalid report_size -1048731548 [ 275.509761][ T191] hid-generic 0003:0006:8001.0007: unknown global tag 0xc [ 275.509784][ T191] hid-generic 0003:0006:8001.0007: item 0 4 1 12 parsing failed [ 275.510467][ T191] hid-generic 0003:0006:8001.0007: probe with driver hid-generic failed with error -22 [ 275.535343][ T25] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 275.575018][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.575046][ T25] usb 4-1: Product: syz [ 275.575061][ T25] usb 4-1: Manufacturer: syz [ 275.575075][ T25] usb 4-1: SerialNumber: syz [ 275.608910][ T25] usb 4-1: USB2VGA dongle found at address 38 [ 275.615652][ T25] usb 4-1: Allocated 8 output buffers [ 275.732481][ T30] audit: type=1326 audit(1789487477.625:4170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.0.1121" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 275.732643][ T30] audit: type=1326 audit(1789487477.625:4171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9801 comm="syz.0.1121" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70bf0ec code=0x7ffc0000 [ 275.796700][ T5702] usb 2-1: USB disconnect, device number 34 [ 275.813262][ T9804] fuse: Unknown parameter '0x0000000000000004' [ 275.960950][ T5619] udevd[5619]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.261517][ T9797] input: syz1 as /devices/virtual/input/input42 [ 276.351146][ T9813] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 276.351174][ T9813] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 276.351232][ T9813] vhci_hcd vhci_hcd.0: Device attached [ 276.443796][ T9817] vhci_hcd: connection closed [ 276.444120][ T13] vhci_hcd vhci_hcd.1: stop threads [ 276.444144][ T13] vhci_hcd vhci_hcd.1: release socket [ 276.444226][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 276.941457][ T9825] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7) [ 276.941484][ T9825] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 276.941563][ T9825] vhci_hcd vhci_hcd.0: Device attached [ 277.053383][ T9834] vhci_hcd: connection closed [ 277.060301][ T59] vhci_hcd vhci_hcd.4: stop threads [ 277.060329][ T59] vhci_hcd vhci_hcd.4: release socket [ 277.060380][ T59] vhci_hcd vhci_hcd.4: disconnect device [ 277.105668][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1129'. [ 277.118011][ T5702] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 277.287929][ T191] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 277.330387][ T9832] input: syz1 as /devices/virtual/input/input43 [ 277.859363][ T9856] fuse: Unknown parameter '0x0000000000000004' [ 277.976104][ T9858] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 277.976134][ T9858] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 277.992983][ T9858] vhci_hcd vhci_hcd.0: Device attached [ 278.055442][ T9863] vhci_hcd: connection closed [ 278.055769][ T165] vhci_hcd vhci_hcd.2: stop threads [ 278.055793][ T165] vhci_hcd vhci_hcd.2: release socket [ 278.055811][ T165] vhci_hcd vhci_hcd.2: disconnect device [ 278.140846][ T9854] input: syz1 as /devices/virtual/input/input44 [ 278.381479][ T25] usb 4-1: Failed to early initialize device [ 278.394443][ T25] usb 4-1: USB disconnect, device number 38 [ 279.158176][ T25] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 279.318553][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 279.324258][ T25] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 279.366197][ T25] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 279.366225][ T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.366262][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.400639][ T25] usb 5-1: config 0 descriptor?? [ 279.402544][ T25] pxrc 5-1:0.0: Could not find endpoint [ 279.628782][ T25] usb 5-1: USB disconnect, device number 37 [ 280.332521][ T9908] fuse: Unknown parameter '0x0000000000000004' [ 280.431686][ T9910] FAULT_INJECTION: forcing a failure. [ 280.431686][ T9910] name failslab, interval 1, probability 0, space 0, times 0 [ 280.431723][ T9910] CPU: 1 UID: 0 PID: 9910 Comm: syz.2.1149 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.431750][ T9910] Tainted: [L]=SOFTLOCKUP [ 280.431756][ T9910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 280.431768][ T9910] Call Trace: [ 280.431776][ T9910] [ 280.431784][ T9910] dump_stack_lvl+0xe8/0x150 [ 280.431817][ T9910] should_fail_ex+0x410/0x560 [ 280.431845][ T9910] should_failslab+0xa8/0x100 [ 280.431872][ T9910] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 280.431894][ T9910] ? ethnl_default_set_doit+0x9a4/0x1080 [ 280.431914][ T9910] ? ethnl_default_set_doit+0x9a4/0x1080 [ 280.431935][ T9910] ? ethnl_default_set_doit+0x169/0x1080 [ 280.431959][ T9910] kmemdup_noprof+0x2b/0x70 [ 280.431983][ T9910] ethnl_default_set_doit+0x9a4/0x1080 [ 280.432015][ T9910] genl_family_rcv_msg_doit+0x233/0x340 [ 280.432045][ T9910] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 280.432079][ T9910] ? bpf_lsm_capable+0x9/0x20 [ 280.432116][ T9910] ? security_capable+0x7e/0x2c0 [ 280.432144][ T9910] genl_rcv_msg+0x614/0x7a0 [ 280.432170][ T9910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.432190][ T9910] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 280.432224][ T9910] netlink_rcv_skb+0x226/0x4a0 [ 280.432251][ T9910] ? __pfx_genl_rcv_msg+0x10/0x10 [ 280.432274][ T9910] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 280.432311][ T9910] ? down_read+0x2be/0x330 [ 280.432337][ T9910] genl_rcv+0x28/0x40 [ 280.432356][ T9910] netlink_unicast+0x7bd/0x940 [ 280.432389][ T9910] netlink_sendmsg+0x813/0xb40 [ 280.432423][ T9910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.432459][ T9910] ? apparmor_socket_sendmsg+0x98/0x360 [ 280.432482][ T9910] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.432509][ T9910] sock_sendmsg_nosec+0x13a/0x180 [ 280.432544][ T9910] ____sys_sendmsg+0x54e/0x850 [ 280.432575][ T9910] ? __pfx_____sys_sendmsg+0x10/0x10 [ 280.432624][ T9910] ___sys_sendmsg+0x2a5/0x360 [ 280.432647][ T9910] ? __lock_acquire+0x747/0x2de0 [ 280.432671][ T9910] ? __pfx____sys_sendmsg+0x10/0x10 [ 280.432695][ T9910] ? get_pid_task+0x20/0x1f0 [ 280.432714][ T9910] ? get_pid_task+0x20/0x1f0 [ 280.432731][ T9910] ? get_pid_task+0x20/0x1f0 [ 280.432780][ T9910] ? __fget_files+0x2a/0x420 [ 280.432807][ T9910] ? __fget_files+0x3a2/0x420 [ 280.432843][ T9910] __sys_sendmsg+0x177/0x240 [ 280.432870][ T9910] ? __pfx___sys_sendmsg+0x10/0x10 [ 280.432915][ T9910] __do_fast_syscall_32+0x27a/0x6a0 [ 280.432939][ T9910] ? do_fast_syscall_32+0x33/0x70 [ 280.432960][ T9910] ? asm_int80_emulation+0x1a/0x20 [ 280.432979][ T9910] ? do_int80_emulation+0x299/0x500 [ 280.433000][ T9910] ? trace_irq_disable+0x3b/0x140 [ 280.433024][ T9910] do_fast_syscall_32+0x33/0x70 [ 280.433047][ T9910] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 280.433070][ T9910] RIP: 0023:0xf7f240ec [ 280.433088][ T9910] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 280.433105][ T9910] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 280.433125][ T9910] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080001540 [ 280.433139][ T9910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 280.433151][ T9910] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 280.433162][ T9910] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 280.433174][ T9910] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 280.433204][ T9910] [ 280.991425][ T9917] ip6gre1: entered allmulticast mode [ 281.103905][ T30] kauditd_printk_skb: 31 callbacks suppressed [ 281.103930][ T30] audit: type=1326 audit(1789487482.995:4203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f560ec code=0x7ffc0000 [ 281.105547][ T30] audit: type=1326 audit(1789487482.995:4204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=342 compat=1 ip=0xf7f560ec code=0x7ffc0000 [ 281.164265][ T30] audit: type=1326 audit(1789487482.995:4205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f560ec code=0x7ffc0000 [ 281.164321][ T30] audit: type=1326 audit(1789487482.995:4206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f560ec code=0x7ffc0000 [ 281.164358][ T30] audit: type=1326 audit(1789487483.035:4207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=322 compat=1 ip=0xf7f560ec code=0x7ffc0000 [ 281.164397][ T30] audit: type=1326 audit(1789487483.035:4208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f560ec code=0x7ffc0000 [ 281.164433][ T30] audit: type=1326 audit(1789487483.035:4209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f560ec code=0x7ffc0000 [ 281.164469][ T30] audit: type=1326 audit(1789487483.035:4210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f560ec code=0x7ffc0000 [ 281.164502][ T30] audit: type=1326 audit(1789487483.035:4211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f560ec code=0x7ffc0000 [ 281.164553][ T30] audit: type=1326 audit(1789487483.055:4212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9919 comm="syz.3.1153" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71575ab code=0x7ffc0000 [ 281.318299][ T191] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 281.498736][ T5702] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 281.557556][ T191] usb 3-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 281.560184][ T191] usb 3-1: config 0 has an invalid interface number: 26 but max is 0 [ 281.560212][ T191] usb 3-1: config 0 has no interface number 0 [ 281.560242][ T191] usb 3-1: config 0 interface 26 has no altsetting 0 [ 281.564363][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.564394][ T191] usb 3-1: Product: syz [ 281.564408][ T191] usb 3-1: Manufacturer: syz [ 281.564422][ T191] usb 3-1: SerialNumber: syz [ 281.567342][ T191] usb 3-1: config 0 descriptor?? [ 281.648550][ T5702] usb 4-1: Using ep0 maxpacket: 32 [ 281.654709][ T5702] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 281.667213][ T5702] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.667245][ T5702] usb 4-1: config 0 has no interface number 0 [ 281.692279][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.692333][ T5702] usb 4-1: Product: syz [ 281.692348][ T5702] usb 4-1: Manufacturer: syz [ 281.692363][ T5702] usb 4-1: SerialNumber: syz [ 281.701894][ T5702] usb 4-1: config 0 descriptor?? [ 281.714944][ T5702] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 281.714975][ T5702] usb 4-1: selecting invalid altsetting 1 [ 281.714992][ T5702] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 281.725764][ T5702] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 281.726316][ T5702] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 281.726362][ T5702] usb 4-1: media controller created [ 281.789160][ T5702] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.869029][ T9929] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1156'. [ 281.931109][ T9914] input: syz1 as /devices/virtual/input/input45 [ 282.509009][ T9944] sctp: [Deprecated]: syz.4.1159 (pid 9944) Use of int in max_burst socket option deprecated. [ 282.509009][ T9944] Use struct sctp_assoc_value instead [ 282.643959][ T9946] fuse: Unknown parameter '0x0000000000000004' [ 282.928559][ T5702] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 282.928625][ T5702] zl10353_read_register: readreg error (reg=127, ret==-110) [ 283.638804][ T10] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 283.787912][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 283.788734][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 283.789936][ T10] usb 2-1: config 0 has too many interfaces: 217, using maximum allowed: 32 [ 283.789956][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 217 [ 283.792967][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.792985][ T10] usb 2-1: Product: syz [ 283.792992][ T10] usb 2-1: Manufacturer: syz [ 283.793000][ T10] usb 2-1: SerialNumber: syz [ 283.805482][ T10] usb 2-1: config 0 descriptor?? [ 284.002464][ T191] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 284.020809][ T5702] usb 4-1: USB disconnect, device number 39 [ 284.023118][ T191] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 284.026924][ T191] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 284.026959][ T191] usb 3-1: media controller created [ 284.133883][ T191] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 284.197129][ T9975] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1169'. [ 284.240524][ T191] DVB: Unable to find symbol mt352_attach() [ 284.301674][ T191] DVB: Unable to find symbol nxt6000_attach() [ 284.301686][ T191] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 284.311852][ T191] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input46 [ 284.339976][ T191] dvb-usb: schedule remote query interval to 1000 msecs. [ 284.339997][ T191] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 284.340012][ T191] dvb-usb: bulk message failed: -22 (7/0) [ 284.340130][ T191] dvb-usb: bulk message failed: -22 (7/0) [ 284.360099][ T191] usb 3-1: USB disconnect, device number 53 [ 284.620890][ T191] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 284.849763][ T5702] usb 2-1: USB disconnect, device number 36 [ 284.959880][ T9981] input: syz1 as /devices/virtual/input/input47 [ 285.149080][ T9984] fuse: Unknown parameter '0x0000000000000004' [ 285.868035][ T5702] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 286.019066][ T5702] usb 2-1: Using ep0 maxpacket: 16 [ 286.021482][ T5702] usb 2-1: unable to get BOS descriptor or descriptor too short [ 286.021527][ T5702] usb 2-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 0.40 [ 286.022950][ T5702] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 286.022965][ T5702] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 286.025251][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.025266][ T5702] usb 2-1: Product: syz [ 286.025274][ T5702] usb 2-1: Manufacturer: syz [ 286.025281][ T5702] usb 2-1: SerialNumber: syz [ 286.278306][ T9993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1174'. [ 286.386868][ T5702] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 286.397355][ T5702] usb 2-1: selecting invalid altsetting 1 [ 286.397380][ T5702] snd-usb-caiaq 2-1:1.0: can't set alt interface. [ 286.397391][ T5702] usb 2-1: unable to init card! (ret=-5) [ 286.397642][ T5702] snd-usb-caiaq 2-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 286.429892][ T5702] usb 2-1: selecting invalid altsetting 1 [ 286.429907][ T5702] snd-usb-caiaq 2-1:1.1: can't set alt interface. [ 286.429915][ T5702] usb 2-1: unable to init card! (ret=-5) [ 286.430124][ T5702] snd-usb-caiaq 2-1:1.1: probe with driver snd-usb-caiaq failed with error -5 [ 286.436392][ T5702] usb 2-1: USB disconnect, device number 37 [ 286.501780][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 286.844131][T10013] fuse: Unknown parameter 'fd0x0000000000000005' [ 286.859449][T10013] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1181'. [ 286.861772][T10013] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.875976][T10016] fuse: Unknown parameter '0x0000000000000004' [ 286.942337][T10011] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 286.942367][T10011] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 286.942475][T10011] vhci_hcd vhci_hcd.0: Device attached [ 287.009907][T10019] vhci_hcd: connection closed [ 287.017046][ T7574] vhci_hcd vhci_hcd.3: stop threads [ 287.017074][ T7574] vhci_hcd vhci_hcd.3: release socket [ 287.017094][ T7574] vhci_hcd vhci_hcd.3: disconnect device [ 287.398306][ T990] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 287.568132][ T990] usb 3-1: Using ep0 maxpacket: 8 [ 287.568663][ T990] usb 3-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 287.569760][ T990] usb 3-1: config 0 has too many interfaces: 217, using maximum allowed: 32 [ 287.569786][ T990] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 217 [ 287.571802][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.571820][ T990] usb 3-1: Product: syz [ 287.571828][ T990] usb 3-1: Manufacturer: syz [ 287.571835][ T990] usb 3-1: SerialNumber: syz [ 287.573890][ T990] usb 3-1: config 0 descriptor?? [ 287.632074][T10035] input: syz1 as /devices/virtual/input/input48 [ 288.293391][ T5702] usb 3-1: USB disconnect, device number 54 [ 288.658821][T10052] FAULT_INJECTION: forcing a failure. [ 288.658821][T10052] name failslab, interval 1, probability 0, space 0, times 0 [ 288.658857][T10052] CPU: 1 UID: 0 PID: 10052 Comm: syz.1.1190 Tainted: G L syzkaller #0 PREEMPT(full) [ 288.658884][T10052] Tainted: [L]=SOFTLOCKUP [ 288.658893][T10052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 288.658905][T10052] Call Trace: [ 288.658912][T10052] [ 288.658921][T10052] dump_stack_lvl+0xe8/0x150 [ 288.658953][T10052] should_fail_ex+0x410/0x560 [ 288.658980][T10052] should_failslab+0xa8/0x100 [ 288.659005][T10052] __kmalloc_noprof+0xfe/0x720 [ 288.659025][T10052] ? io_cache_alloc_new+0x40/0x100 [ 288.659054][T10052] ? io_cache_alloc_new+0x40/0x100 [ 288.659089][T10052] io_cache_alloc_new+0x40/0x100 [ 288.659120][T10052] __io_prep_rw+0x281/0xe70 [ 288.659151][T10052] ? __pfx___io_prep_rw+0x10/0x10 [ 288.659173][T10052] ? percpu_ref_get_many+0x18c/0x1e0 [ 288.659206][T10052] ? __io_alloc_req_refill+0x284/0x310 [ 288.659239][T10052] io_prep_rwv+0x81/0x390 [ 288.659261][T10052] ? __pfx_io_prep_rwv+0x10/0x10 [ 288.659280][T10052] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 288.659314][T10052] ? io_task_refs_refill+0xba/0x180 [ 288.659352][T10052] io_submit_sqes+0xbde/0x2310 [ 288.659403][T10052] __se_sys_io_uring_enter+0x35b/0x1bb0 [ 288.659433][T10052] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 288.659456][T10052] ? __fget_files+0x3a2/0x420 [ 288.659484][T10052] ? __pfx___se_sys_io_uring_enter+0x10/0x10 [ 288.659508][T10052] ? fput+0xa0/0xd0 [ 288.659533][T10052] ? ksys_write+0x242/0x270 [ 288.659567][T10052] ? __ia32_sys_io_uring_enter+0x21/0xf0 [ 288.659591][T10052] __do_fast_syscall_32+0x27a/0x6a0 [ 288.659615][T10052] ? do_fast_syscall_32+0x33/0x70 [ 288.659636][T10052] ? asm_int80_emulation+0x1a/0x20 [ 288.659654][T10052] ? do_int80_emulation+0x299/0x500 [ 288.659676][T10052] ? trace_irq_disable+0x3b/0x140 [ 288.659699][T10052] do_fast_syscall_32+0x33/0x70 [ 288.659721][T10052] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 288.659744][T10052] RIP: 0023:0xf702f0ec [ 288.659761][T10052] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 288.659778][T10052] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 00000000000001aa [ 288.659800][T10052] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000002000 [ 288.659813][T10052] RDX: 00000000fffffffd RSI: 0000000000000009 RDI: 0000000000000000 [ 288.659825][T10052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 288.659837][T10052] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 288.659849][T10052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 288.659879][T10052] [ 289.053373][T10062] fuse: Unknown parameter 'fd0x0000000000000004' [ 289.067355][T10064] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1194'. [ 289.548071][ T990] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 289.702561][ T990] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 289.704722][ T990] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 289.704748][ T990] usb 5-1: config 0 has no interface number 0 [ 289.711886][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.711911][ T990] usb 5-1: Product: syz [ 289.711925][ T990] usb 5-1: Manufacturer: syz [ 289.711940][ T990] usb 5-1: SerialNumber: syz [ 289.733395][ T990] usb 5-1: config 0 descriptor?? [ 289.936032][T10081] input: syz1 as /devices/virtual/input/input49 [ 289.953596][ T990] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 289.957398][ T990] usb 5-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 289.957424][ T990] usb 5-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 290.447634][T10098] FAULT_INJECTION: forcing a failure. [ 290.447634][T10098] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 290.447671][T10098] CPU: 1 UID: 0 PID: 10098 Comm: syz.1.1207 Tainted: G L syzkaller #0 PREEMPT(full) [ 290.447697][T10098] Tainted: [L]=SOFTLOCKUP [ 290.447705][T10098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 290.447716][T10098] Call Trace: [ 290.447724][T10098] [ 290.447733][T10098] dump_stack_lvl+0xe8/0x150 [ 290.447770][T10098] should_fail_ex+0x410/0x560 [ 290.447799][T10098] prepare_alloc_pages+0x223/0x600 [ 290.447822][T10098] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 290.447846][T10098] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 290.447878][T10098] ? __pfx_policy_nodemask+0x10/0x10 [ 290.447905][T10098] ? __lock_acquire+0x747/0x2de0 [ 290.447926][T10098] alloc_pages_mpol+0x21e/0x390 [ 290.447953][T10098] folio_alloc_mpol_noprof+0x39/0x160 [ 290.447978][T10098] vma_alloc_folio_noprof+0xe1/0x1e0 [ 290.448005][T10098] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 290.448031][T10098] ? lock_acquire+0x115/0x350 [ 290.448057][T10098] do_pte_missing+0x173a/0x34b0 [ 290.448105][T10098] handle_mm_fault+0x1a53/0x3750 [ 290.448142][T10098] ? handle_mm_fault+0xf1/0x3750 [ 290.448177][T10098] ? __pfx_handle_mm_fault+0x10/0x10 [ 290.448204][T10098] ? follow_page_pte+0x748/0xf10 [ 290.448239][T10098] ? __pfx_follow_page_pte+0x10/0x10 [ 290.448276][T10098] __get_user_pages+0x1675/0x2750 [ 290.448331][T10098] __gup_longterm_locked+0xd52/0x15c0 [ 290.448358][T10098] ? lock_acquire+0x115/0x350 [ 290.448379][T10098] ? gup_fast_fallback+0x20d/0x20e0 [ 290.448406][T10098] ? sanity_check_pinned_pages+0x817/0x8d0 [ 290.448436][T10098] gup_fast_fallback+0x1d92/0x20e0 [ 290.448491][T10098] ? __pfx_gup_fast_fallback+0x10/0x10 [ 290.448515][T10098] ? rds_info_getsockopt+0x254/0x730 [ 290.448540][T10098] ? rcu_is_watching+0x16/0xb0 [ 290.448563][T10098] ? is_valid_gup_args+0x11f/0x200 [ 290.448590][T10098] ? pin_user_pages_fast+0x4d/0xb0 [ 290.448617][T10098] iov_iter_extract_pages+0x3a1/0x690 [ 290.448651][T10098] rds_info_getsockopt+0x289/0x730 [ 290.448682][T10098] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 290.448710][T10098] ? lock_acquire+0x115/0x350 [ 290.448737][T10098] ? lock_acquire+0x115/0x350 [ 290.448762][T10098] rds_getsockopt+0x38b/0x600 [ 290.448787][T10098] ? __pfx_rds_getsockopt+0x10/0x10 [ 290.448817][T10098] do_sock_getsockopt+0x6ae/0x7e0 [ 290.448854][T10098] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 290.448894][T10098] ? __fget_files+0x2a/0x420 [ 290.448919][T10098] ? __fget_files+0x3a2/0x420 [ 290.448944][T10098] ? __fget_files+0x2a/0x420 [ 290.448976][T10098] __ia32_sys_getsockopt+0x1a4/0x240 [ 290.449009][T10098] __do_fast_syscall_32+0x27a/0x6a0 [ 290.449033][T10098] ? do_fast_syscall_32+0x33/0x70 [ 290.449070][T10098] ? asm_int80_emulation+0x1a/0x20 [ 290.449089][T10098] ? do_int80_emulation+0x299/0x500 [ 290.449110][T10098] ? trace_irq_disable+0x3b/0x140 [ 290.449133][T10098] do_fast_syscall_32+0x33/0x70 [ 290.449155][T10098] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 290.449178][T10098] RIP: 0023:0xf702f0ec [ 290.449196][T10098] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 290.449212][T10098] RSP: 002b:00000000f541d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016d [ 290.449234][T10098] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000114 [ 290.449248][T10098] RDX: 0000000000002716 RSI: 0000000080c35fff RDI: 0000000080000000 [ 290.449261][T10098] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 290.449272][T10098] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 290.449284][T10098] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 290.449313][T10098] [ 290.988326][T10104] fuse: Unknown parameter 'fd0x0000000000000004' [ 291.174940][T10090] input: syz1 as /devices/virtual/input/input50 [ 292.217255][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1214'. [ 292.270937][ T5702] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 292.419860][ T5702] usb 2-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 0.00 [ 292.420960][ T5702] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.971300][ T5702] msi2500 2-1:1.0: Registered as swradio24 [ 292.971316][ T5702] msi2500 2-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 293.593933][T10135] input: syz1 as /devices/virtual/input/input51 [ 293.632398][T10150] ip6gre1: entered allmulticast mode [ 293.688089][ T5702] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 293.838568][ T5702] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 293.839444][ T5702] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.839460][ T5702] usb 4-1: config 0 has no interface number 0 [ 293.846236][ T5702] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.846254][ T5702] usb 4-1: Product: syz [ 293.846262][ T5702] usb 4-1: Manufacturer: syz [ 293.846270][ T5702] usb 4-1: SerialNumber: syz [ 293.854945][ T5702] usb 4-1: config 0 descriptor?? [ 294.075196][ T5702] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 294.189618][T10153] fuse: Unknown parameter 'fd0x0000000000000004' [ 294.307675][T10157] FAULT_INJECTION: forcing a failure. [ 294.307675][T10157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 294.307710][T10157] CPU: 1 UID: 0 PID: 10157 Comm: syz.2.1223 Tainted: G L syzkaller #0 PREEMPT(full) [ 294.307738][T10157] Tainted: [L]=SOFTLOCKUP [ 294.307745][T10157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 294.307756][T10157] Call Trace: [ 294.307764][T10157] [ 294.307773][T10157] dump_stack_lvl+0xe8/0x150 [ 294.307805][T10157] should_fail_ex+0x410/0x560 [ 294.307829][T10157] _copy_from_user+0x2d/0xb0 [ 294.307852][T10157] get_compat_msghdr+0xb3/0x4c0 [ 294.307880][T10157] ? __pfx_get_compat_msghdr+0x10/0x10 [ 294.307908][T10157] ? __lock_acquire+0x747/0x2de0 [ 294.307935][T10157] ___sys_recvmsg+0x1db/0x5a0 [ 294.307966][T10157] ? __pfx____sys_recvmsg+0x10/0x10 [ 294.307996][T10157] ? lock_acquire+0x115/0x350 [ 294.308029][T10157] ? __fget_files+0x3a2/0x420 [ 294.308065][T10157] do_recvmmsg+0x38b/0x7f0 [ 294.308098][T10157] ? __pfx_do_recvmmsg+0x10/0x10 [ 294.308136][T10157] ? __mutex_unlock_slowpath+0x731/0x900 [ 294.308171][T10157] __sys_recvmmsg+0x1a5/0x290 [ 294.308199][T10157] ? __pfx___sys_recvmmsg+0x10/0x10 [ 294.308226][T10157] ? ksys_write+0x242/0x270 [ 294.308261][T10157] __ia32_compat_sys_recvmmsg_time32+0xbf/0xe0 [ 294.308294][T10157] __do_fast_syscall_32+0x27a/0x6a0 [ 294.308317][T10157] ? do_fast_syscall_32+0x33/0x70 [ 294.308346][T10157] ? asm_int80_emulation+0x1a/0x20 [ 294.308365][T10157] ? do_int80_emulation+0x299/0x500 [ 294.308384][T10157] ? trace_irq_disable+0x3b/0x140 [ 294.308408][T10157] do_fast_syscall_32+0x33/0x70 [ 294.308430][T10157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 294.308454][T10157] RIP: 0023:0xf7f240ec [ 294.308472][T10157] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 294.308488][T10157] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000151 [ 294.308507][T10157] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000400 [ 294.308520][T10157] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000000 [ 294.308530][T10157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 294.308540][T10157] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 294.308551][T10157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 294.308579][T10157] [ 294.770698][ T191] usb 2-1: USB disconnect, device number 38 [ 295.075753][T10159] input: syz1 as /devices/virtual/input/input52 [ 295.542453][T10163] nvme nvme0: failed to connect socket: -512 [ 296.384514][T10192] input: syz1 as /devices/virtual/input/input53 [ 297.137535][T10201] input: syz1 as /devices/virtual/input/input54 [ 297.628620][ T191] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 297.648331][T10209] tc_dump_action: action bad kind [ 297.778969][ T191] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 297.781432][ T191] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 297.781458][ T191] usb 3-1: config 0 has no interface number 0 [ 297.784862][ T191] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.784878][ T191] usb 3-1: Product: syz [ 297.784886][ T191] usb 3-1: Manufacturer: syz [ 297.784894][ T191] usb 3-1: SerialNumber: syz [ 297.835658][ T191] usb 3-1: config 0 descriptor?? [ 298.074162][ T191] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 298.738280][T10229] input: syz1 as /devices/virtual/input/input55 [ 298.832163][T10217] nvme nvme0: failed to connect socket: -512 [ 299.400235][T10251] netlink: 'syz.2.1253': attribute type 1 has an invalid length. [ 299.458410][T10251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 299.589630][T10257] netlink: 'syz.2.1253': attribute type 10 has an invalid length. [ 299.589650][T10257] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1253'. [ 299.595536][T10254] bond1: (slave veth3): Enslaving as an active interface with a down link [ 299.618189][T10251] dummy0: left promiscuous mode [ 299.668066][T10251] bond1: (slave dummy0): making interface the new active one [ 299.746225][T10251] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 299.752940][T10257] dummy0: entered promiscuous mode [ 299.785665][T10257] bond1: (slave dummy0): Releasing active interface [ 299.879875][T10260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1255'. [ 299.997257][T10269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1258'. [ 300.114498][T10274] syzkaller0: entered promiscuous mode [ 300.114532][T10274] syzkaller0: entered allmulticast mode [ 300.228053][ T10] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 300.240946][T10261] input: syz1 as /devices/virtual/input/input56 [ 300.379757][ T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 300.381076][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 300.381103][ T10] usb 2-1: config 0 has no interface number 0 [ 300.384932][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.384957][ T10] usb 2-1: Product: syz [ 300.384971][ T10] usb 2-1: Manufacturer: syz [ 300.384985][ T10] usb 2-1: SerialNumber: syz [ 300.397471][ T10] usb 2-1: config 0 descriptor?? [ 300.584971][T10277] nvme nvme0: failed to connect socket: -111 [ 300.628855][ T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 300.704603][T10283] ip6gre1: entered allmulticast mode [ 300.874463][T10286] binder: 10280:10286 ioctl 4018620d 0 returned -22 [ 301.705074][T10288] input: syz1 as /devices/virtual/input/input57 [ 302.429097][T10307] netlink: 'syz.3.1270': attribute type 1 has an invalid length. [ 302.482488][T10307] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1270'. [ 303.372563][T10312] input: syz1 as /devices/virtual/input/input58 [ 303.895859][T10338] FAULT_INJECTION: forcing a failure. [ 303.895859][T10338] name failslab, interval 1, probability 0, space 0, times 0 [ 303.895907][T10338] CPU: 0 UID: 0 PID: 10338 Comm: syz.0.1279 Tainted: G L syzkaller #0 PREEMPT(full) [ 303.895934][T10338] Tainted: [L]=SOFTLOCKUP [ 303.895942][T10338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 303.895957][T10338] Call Trace: [ 303.895969][T10338] [ 303.895978][T10338] dump_stack_lvl+0xe8/0x150 [ 303.896011][T10338] should_fail_ex+0x410/0x560 [ 303.896039][T10338] should_failslab+0xa8/0x100 [ 303.896065][T10338] __kmalloc_cache_noprof+0xa3/0x600 [ 303.896085][T10338] ? __kmalloc_cache_noprof+0x14d/0x600 [ 303.896104][T10338] ? sctp_add_bind_addr+0x8c/0x370 [ 303.896150][T10338] ? sctp_add_bind_addr+0x8c/0x370 [ 303.896197][T10338] sctp_add_bind_addr+0x8c/0x370 [ 303.896243][T10338] sctp_copy_local_addr_list+0x31a/0x4e0 [ 303.896275][T10338] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 303.896315][T10338] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 303.896343][T10338] ? sctp_v4_is_any+0x35/0x60 [ 303.896367][T10338] ? sctp_copy_one_addr+0x93/0x360 [ 303.896393][T10338] sctp_bind_addr_copy+0xb3/0x3c0 [ 303.896432][T10338] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 303.896458][T10338] sctp_connect_new_asoc+0x2ff/0x6b0 [ 303.896481][T10338] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 303.896505][T10338] ? __local_bh_enable_ip+0xd6/0x140 [ 303.896527][T10338] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 303.896552][T10338] ? security_sctp_bind_connect+0x7e/0x2c0 [ 303.896587][T10338] sctp_sendmsg+0x159b/0x2d00 [ 303.896640][T10338] ? __pfx_sctp_sendmsg+0x10/0x10 [ 303.896677][T10338] ? lock_acquire+0x115/0x350 [ 303.896701][T10338] ? aa_sock_msg_perm+0xfc/0x210 [ 303.896724][T10338] ? sock_rps_record_flow+0x19/0x350 [ 303.896757][T10338] ? inet_sendmsg+0x298/0x320 [ 303.896787][T10338] ? __pfx_inet_sendmsg+0x10/0x10 [ 303.896814][T10338] sock_sendmsg_nosec+0x10e/0x180 [ 303.896847][T10338] ____sys_sendmsg+0x54e/0x850 [ 303.896878][T10338] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.896921][T10338] ___sys_sendmsg+0x2a5/0x360 [ 303.896945][T10338] ? __lock_acquire+0x747/0x2de0 [ 303.896970][T10338] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.896995][T10338] ? get_pid_task+0x20/0x1f0 [ 303.897012][T10338] ? get_pid_task+0x20/0x1f0 [ 303.897027][T10338] ? get_pid_task+0x20/0x1f0 [ 303.897070][T10338] ? __fget_files+0x2a/0x420 [ 303.897094][T10338] ? __fget_files+0x3a2/0x420 [ 303.897131][T10338] __sys_sendmsg+0x177/0x240 [ 303.897159][T10338] ? __pfx___sys_sendmsg+0x10/0x10 [ 303.897205][T10338] __do_fast_syscall_32+0x27a/0x6a0 [ 303.897231][T10338] ? do_fast_syscall_32+0x33/0x70 [ 303.897254][T10338] ? asm_int80_emulation+0x1a/0x20 [ 303.897274][T10338] ? do_int80_emulation+0x299/0x500 [ 303.897296][T10338] ? trace_irq_disable+0x3b/0x140 [ 303.897321][T10338] do_fast_syscall_32+0x33/0x70 [ 303.897345][T10338] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 303.897370][T10338] RIP: 0023:0xf70bf0ec [ 303.897388][T10338] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 303.897407][T10338] RSP: 002b:00000000f54ad50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 303.897429][T10338] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080007940 [ 303.897444][T10338] RDX: 0000000004044008 RSI: 0000000000000000 RDI: 0000000000000000 [ 303.897457][T10338] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 303.897470][T10338] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 303.897483][T10338] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 303.897513][T10338] [ 304.307536][T10350] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1282'. [ 304.318996][T10348] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'. [ 304.874830][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1284'. [ 304.955536][T10360] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.987384][T10362] 8021q: adding VLAN 0 to HW filter on device bond2 [ 304.987698][T10362] bond2: (slave gre1): The slave device specified does not support setting the MAC address [ 305.013801][T10362] bond2: (slave gre1): Error -95 calling set_mac_address [ 305.137636][T10360] macvlan2: entered promiscuous mode [ 305.137652][T10360] macvlan2: entered allmulticast mode [ 305.151464][T10360] bond2: (slave macvlan2): Error -98 calling set_mac_address [ 305.758371][T10370] dvmrp8: entered allmulticast mode [ 306.726376][T10391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1295'. [ 306.800046][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 306.800065][ T30] audit: type=1326 audit(1789487508.695:4294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.4.1296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000 [ 306.800297][ T30] audit: type=1326 audit(1789487508.695:4295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.4.1296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000 [ 306.800654][ T30] audit: type=1326 audit(1789487508.695:4296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.4.1296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000 [ 306.800864][ T30] audit: type=1326 audit(1789487508.695:4297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.4.1296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=427 compat=1 ip=0xf7f330ec code=0x7ffc0000 [ 306.801120][ T30] audit: type=1326 audit(1789487508.695:4298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.4.1296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000 [ 306.801323][ T30] audit: type=1326 audit(1789487508.695:4299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.4.1296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000 [ 306.801528][ T30] audit: type=1326 audit(1789487508.695:4300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.4.1296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000 [ 306.801852][ T30] audit: type=1326 audit(1789487508.695:4301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.4.1296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000 [ 306.802090][ T30] audit: type=1326 audit(1789487508.695:4302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.4.1296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=428 compat=1 ip=0xf7f330ec code=0x7ffc0000 [ 306.802462][ T30] audit: type=1326 audit(1789487508.695:4303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.4.1296" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f330ec code=0x7ffc0000 [ 307.529899][T10400] FAULT_INJECTION: forcing a failure. [ 307.529899][T10400] name failslab, interval 1, probability 0, space 0, times 0 [ 307.529924][T10400] CPU: 0 UID: 0 PID: 10400 Comm: syz.2.1297 Tainted: G L syzkaller #0 PREEMPT(full) [ 307.529939][T10400] Tainted: [L]=SOFTLOCKUP [ 307.529943][T10400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 307.529950][T10400] Call Trace: [ 307.529955][T10400] [ 307.529960][T10400] dump_stack_lvl+0xe8/0x150 [ 307.529980][T10400] should_fail_ex+0x410/0x560 [ 307.529995][T10400] should_failslab+0xa8/0x100 [ 307.530010][T10400] __kmalloc_noprof+0xfe/0x720 [ 307.530020][T10400] ? rcu_is_watching+0x16/0xb0 [ 307.530033][T10400] ? tomoyo_realpath_from_path+0xef/0x640 [ 307.530047][T10400] ? tomoyo_realpath_from_path+0xef/0x640 [ 307.530064][T10400] tomoyo_realpath_from_path+0xef/0x640 [ 307.530082][T10400] ? tomoyo_path_number_perm+0x219/0x5f0 [ 307.530093][T10400] tomoyo_path_number_perm+0x246/0x5f0 [ 307.530106][T10400] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 307.530117][T10400] ? __lock_acquire+0x747/0x2de0 [ 307.530135][T10400] ? hook_file_ioctl_compat+0x1f2/0x600 [ 307.530158][T10400] ? __fget_files+0x2a/0x420 [ 307.530178][T10400] ? __fget_files+0x3a2/0x420 [ 307.530191][T10400] ? __fget_files+0x2a/0x420 [ 307.530206][T10400] security_file_ioctl_compat+0xc3/0x2a0 [ 307.530219][T10400] __ia32_compat_sys_ioctl+0x139/0x950 [ 307.530233][T10400] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 307.530245][T10400] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 307.530258][T10400] ? __fget_files+0x3a2/0x420 [ 307.530275][T10400] ? fput+0xa0/0xd0 [ 307.530288][T10400] ? ksys_write+0x242/0x270 [ 307.530309][T10400] __do_fast_syscall_32+0x27a/0x6a0 [ 307.530322][T10400] ? do_fast_syscall_32+0x33/0x70 [ 307.530334][T10400] ? asm_int80_emulation+0x1a/0x20 [ 307.530344][T10400] ? do_int80_emulation+0x299/0x500 [ 307.530360][T10400] ? trace_irq_disable+0x3b/0x140 [ 307.530373][T10400] do_fast_syscall_32+0x33/0x70 [ 307.530386][T10400] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 307.530398][T10400] RIP: 0023:0xf7f240ec [ 307.530409][T10400] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 307.530419][T10400] RSP: 002b:00000000f53e650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 307.530431][T10400] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080086f53 [ 307.530439][T10400] RDX: 0000000080000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 307.530446][T10400] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 307.530452][T10400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 307.530458][T10400] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 307.530473][T10400] [ 307.530499][T10400] ERROR: Out of memory at tomoyo_realpath_from_path. [ 307.673553][T10402] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 307.891579][T10404] can: request_module (can-proto-3) failed. [ 308.285981][T10420] binder: 10406:10420 ioctl 4018620d 0 returned -22 [ 311.449027][T10468] FAULT_INJECTION: forcing a failure. [ 311.449027][T10468] name failslab, interval 1, probability 0, space 0, times 0 [ 311.449056][T10468] CPU: 0 UID: 0 PID: 10468 Comm: syz.4.1315 Tainted: G L syzkaller #0 PREEMPT(full) [ 311.449071][T10468] Tainted: [L]=SOFTLOCKUP [ 311.449075][T10468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 311.449083][T10468] Call Trace: [ 311.449088][T10468] [ 311.449093][T10468] dump_stack_lvl+0xe8/0x150 [ 311.449119][T10468] should_fail_ex+0x410/0x560 [ 311.449136][T10468] should_failslab+0xa8/0x100 [ 311.449153][T10468] __kmalloc_cache_noprof+0xa3/0x600 [ 311.449165][T10468] ? __kmalloc_cache_noprof+0x14d/0x600 [ 311.449175][T10468] ? sctp_add_bind_addr+0x8c/0x370 [ 311.449190][T10468] ? sctp_add_bind_addr+0x8c/0x370 [ 311.449207][T10468] sctp_add_bind_addr+0x8c/0x370 [ 311.449224][T10468] sctp_copy_local_addr_list+0x31a/0x4e0 [ 311.449241][T10468] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 311.449256][T10468] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 311.449272][T10468] ? sctp_v6_is_any+0x64/0x80 [ 311.449290][T10468] ? sctp_copy_one_addr+0x93/0x360 [ 311.449306][T10468] sctp_bind_addr_copy+0xb3/0x3c0 [ 311.449321][T10468] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 311.449336][T10468] sctp_connect_new_asoc+0x2ff/0x6b0 [ 311.449350][T10468] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 311.449365][T10468] ? __local_bh_enable_ip+0xd6/0x140 [ 311.449379][T10468] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 311.449396][T10468] ? security_sctp_bind_connect+0x7e/0x2c0 [ 311.449421][T10468] sctp_sendmsg+0x159b/0x2d00 [ 311.449439][T10468] ? __pfx_sctp_sendmsg+0x10/0x10 [ 311.449451][T10468] ? lock_acquire+0x115/0x350 [ 311.449471][T10468] ? aa_sock_msg_perm+0xf5/0x210 [ 311.449484][T10468] ? sock_rps_record_flow+0x19/0x350 [ 311.449502][T10468] ? inet_sendmsg+0x298/0x320 [ 311.449518][T10468] ? __pfx_inet_sendmsg+0x10/0x10 [ 311.449532][T10468] sock_sendmsg_nosec+0x10e/0x180 [ 311.449552][T10468] __sys_sendto+0x408/0x5a0 [ 311.449567][T10468] ? __pfx___sys_sendto+0x10/0x10 [ 311.449585][T10468] ? __fget_files+0x3a2/0x420 [ 311.449606][T10468] ? ksys_write+0x242/0x270 [ 311.449626][T10468] __ia32_sys_sendto+0xdd/0x100 [ 311.449640][T10468] __do_fast_syscall_32+0x27a/0x6a0 [ 311.449654][T10468] ? do_fast_syscall_32+0x33/0x70 [ 311.449665][T10468] ? asm_int80_emulation+0x1a/0x20 [ 311.449676][T10468] ? do_int80_emulation+0x299/0x500 [ 311.449687][T10468] ? trace_irq_disable+0x3b/0x140 [ 311.449701][T10468] do_fast_syscall_32+0x33/0x70 [ 311.449713][T10468] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 311.449726][T10468] RIP: 0023:0xf7f330ec [ 311.449737][T10468] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 311.449747][T10468] RSP: 002b:00000000f53d550c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 311.449761][T10468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000080 [ 311.449769][T10468] RDX: 000000000000ffe0 RSI: 000000000400c0d4 RDI: 0000000080000140 [ 311.449775][T10468] RBP: 000000000000001c R08: 0000000000000000 R09: 0000000000000000 [ 311.449782][T10468] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 311.449788][T10468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 311.449803][T10468] [ 311.763715][T10469] binder: 10459:10469 ioctl 4018620d 0 returned -22 [ 311.888379][T10458] input: syz1 as /devices/virtual/input/input59 [ 312.662326][T10477] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1319'. [ 312.662464][T10477] 0·: renamed from hsr0 [ 312.670445][T10477] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.670476][T10477] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.676663][T10477] 0·: left promiscuous mode [ 312.676726][T10477] 0·: entered allmulticast mode [ 312.676741][T10477] hsr_slave_0: entered allmulticast mode [ 312.676759][T10477] hsr_slave_1: entered allmulticast mode [ 312.684207][T10477] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 312.698537][T10477] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1319'. [ 312.698675][T10477] 1·: renamed from c0· (while UP) [ 312.710862][T10477] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 312.749498][T10479] FAULT_INJECTION: forcing a failure. [ 312.749498][T10479] name failslab, interval 1, probability 0, space 0, times 0 [ 312.749538][T10479] CPU: 1 UID: 0 PID: 10479 Comm: syz.3.1320 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.749567][T10479] Tainted: [L]=SOFTLOCKUP [ 312.749575][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 312.749586][T10479] Call Trace: [ 312.749595][T10479] [ 312.749604][T10479] dump_stack_lvl+0xe8/0x150 [ 312.749639][T10479] should_fail_ex+0x410/0x560 [ 312.749667][T10479] should_failslab+0xa8/0x100 [ 312.749692][T10479] ? fcntl_dirnotify+0x1d8/0x6a0 [ 312.749717][T10479] kmem_cache_alloc_noprof+0xa1/0x600 [ 312.749748][T10479] ? __lock_acquire+0x747/0x2de0 [ 312.749767][T10479] ? fcntl_dirnotify+0x1d8/0x6a0 [ 312.749796][T10479] fcntl_dirnotify+0x1d8/0x6a0 [ 312.749827][T10479] do_fcntl+0x77e/0x1a30 [ 312.749845][T10479] ? get_pid_task+0x20/0x1f0 [ 312.749869][T10479] ? __pfx_ ** replaying previous printk message ** [ 312.749869][T10479] ? __pfx_do_fcntl+0x10/0x10 [ 312.749894][T10479] ? __fget_files+0x2a/0x420 [ 312.749924][T10479] ? __fget_files+0x2a/0x420 [ 312.749950][T10479] ? tomoyo_file_fcntl+0x78/0x220 [ 312.749979][T10479] ? bpf_lsm_file_fcntl+0x9/0x20 [ 312.750011][T10479] do_compat_fcntl64+0x50c/0x760 [ 312.750033][T10479] ? __pfx_do_compat_fcntl64+0x10/0x10 [ 312.750052][T10479] ? __fget_files+0x3a2/0x420 [ 312.750083][T10479] ? fput+0xa0/0xd0 [ 312.750107][T10479] ? ksys_write+0x242/0x270 [ 312.750144][T10479] __do_fast_syscall_32+0x27a/0x6a0 [ 312.750168][T10479] ? do_fast_syscall_32+0x33/0x70 [ 312.750189][T10479] ? asm_int80_emulation+0x1a/0x20 [ 312.750207][T10479] ? do_int80_emulation+0x299/0x500 [ 312.750235][T10479] ? trace_irq_disable+0x3b/0x140 [ 312.750259][T10479] do_fast_syscall_32+0x33/0x70 [ 312.750281][T10479] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 312.750303][T10479] RIP: 0023:0xf7f560ec [ 312.750321][T10479] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 312.750339][T10479] RSP: 002b:00000000f541650c EFLAGS: 00000206 ORIG_RAX: 0000000000000037 [ 312.750360][T10479] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000402 [ 312.750375][T10479] RDX: 0000000080000018 RSI: 0000000000000000 RDI: 0000000000000000 [ 312.750387][T10479] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 312.750398][T10479] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 312.750411][T10479] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 312.750438][T10479] [ 312.772832][ T31] INFO: task kworker/1:3:4943 blocked for more than 143 seconds. [ 312.772861][ T31] Tainted: G L syzkaller #0 [ 312.772873][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 312.772883][ T31] task:kworker/1:3 state:D stack:21536 pid:4943 tgid:4943 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 312.772938][ T31] Workqueue: usb_hub_wq hub_event [ 312.772967][ T31] Call Trace: [ 312.772975][ T31] [ 312.772988][ T31] __schedule+0x17db/0x58f0 [ 312.773039][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 312.773074][ T31] ? __pfx___schedule+0x10/0x10 [ 312.773114][ T31] ? schedule+0x90/0x2b0 [ 312.773146][ T31] schedule+0x164/0x2b0 [ 312.773180][ T31] schedule_preempt_disabled+0x13/0x30 [ 312.773214][ T31] __mutex_lock+0x7c1/0x1550 [ 312.773240][ T31] ? __mutex_lock+0x5d4/0x1550 [ 312.773262][ T31] ? hub_event+0x20c9/0x4d30 [ 312.773283][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 312.773318][ T31] hub_event+0x20c9/0x4d30 [ 312.773340][ T31] ? do_raw_spin_unlock+0xf5/0x200 [ 312.773381][ T31] ? register_lock_class+0x31/0x2e0 [ 312.773435][ T31] ? __pfx_hub_event+0x10/0x10 [ 312.773467][ T31] ? rcu_is_watching+0x16/0xb0 [ 312.773492][ T31] ? process_scheduled_works+0x97a/0x1630 [ 312.773521][ T31] process_scheduled_works+0xc3d/0x1630 [ 312.773579][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 312.773613][ T31] ? assign_work+0x3cf/0x5d0 [ 312.773644][ T31] worker_thread+0xa47/0xfb0 [ 312.773686][ T31] ? __kthread_parkme+0x71/0x1f0 [ 312.773732][ T31] kthread+0x38b/0x480 [ 312.773754][ T31] ? __pfx_worker_thread+0x10/0x10 [ 312.773779][ T31] ? __pfx_kthread+0x10/0x10 [ 312.773801][ T31] ret_from_fork+0x514/0xb70 [ 312.773825][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 312.773857][ T31] ? __switch_to+0xc89/0x1420 [ 312.773904][ T31] ? __pfx_kthread+0x10/0x10 [ 312.773926][ T31] ret_from_fork_asm+0x1a/0x30 [ 312.773974][ T31] [ 312.774114][ T31] [ 312.774114][ T31] Showing all locks held in the system: [ 312.774126][ T31] locks held by kworker/0:1/10: 5, on CPU#0: [ 312.774142][ T31] #0: ffff888022edb140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.774200][ T31] #1: ffffc900000f7c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.774254][ T31] #2: ffff8880297ae1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 312.774304][ T31] #3: ffff888077df01d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 312.774355][ T31] #4: ffff8880290131a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 312.774405][ T31] locks held by kworker/u8:1/13: 2, on CPU#1: [ 312.774419][ T31] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.774473][ T31] #1: ffffc90000127c40 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.774526][ T31] locks held by pr/ttyS0/16: 1, last CPU#0: [ 312.774541][ T31] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 312.774595][ T31] locks held by khungtaskd/31: 1, last CPU#0: [ 312.774610][ T31] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 312.774665][ T31] locks held by kworker/0:2/191: 5, on CPU#0: [ 312.774679][ T31] #0: ffff888022edb140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.774737][ T31] #1: ffffc90003087c40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.774787][ T31] #2: ffff8880299341d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 312.774830][ T31] #3: ffff88807b1841d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 312.774876][ T31] #4: ffff88807d3851a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 312.774925][ T31] locks held by kworker/1:2/990: 6, on CPU#1: [ 312.774939][ T31] #0: ffff888022edb140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.774989][ T31] #1: ffffc9000506fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.775041][ T31] #2: ffff8880299671d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 312.775090][ T31] #3: ffff8880799c11d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 312.775138][ T31] #4: ffff888056c4f1a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 312.775186][ T31] #5: ffffffff8ebf7d08 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 312.775253][ T31] locks held by kworker/1:3/4943: 5, on CPU#1: [ 312.775267][ T31] #0: ffff888022edb140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.775320][ T31] #1: ffffc900071bfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.775369][ T31] #2: ffff88802accf1d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 312.775418][ T31] #3: ffff88802ad03568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 312.775467][ T31] #4: ffff88802a750c60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 312.775518][ T31] locks held by getty/5370: 2, on CPU#0: [ 312.775533][ T31] #0: ffff88807fe530a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 312.775589][ T31] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 312.775642][ T31] locks held by udevd/5617: 4, on CPU#1: [ 312.775657][ T31] #0: ffff8880203ef2d8 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 312.775706][ T31] #1: ffff888057182c80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 312.775770][ T31] #2: ffff8880255c73c8 (kn->active#28){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 312.775827][ T31] #3: ffff8880799c11d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 312.775884][ T31] locks held by kworker/1:4/5695: 5, on CPU#1: [ 312.775898][ T31] #0: ffff888022edb140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.775948][ T31] #1: ffffc900050dfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.775996][ T31] #2: ffff88802ad161d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 312.776038][ T31] #3: ffff88802ad42568 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x20a1/0x4d30 [ 312.776087][ T31] #4: ffff88802a750c60 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x20c9/0x4d30 [ 312.776133][ T31] locks held by kworker/0:8/5702: 5, on CPU#0: [ 312.776148][ T31] #0: ffff888022edb140 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.776201][ T31] #1: ffffc9000516fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 312.776254][ T31] #2: ffff8880299f31d8 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4d30 [ 312.776304][ T31] #3: ffff88807a5fb1d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 312.776354][ T31] #4: ffff8880336001a0 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 312.776404][ T31] locks held by udevd/5769: 4, on CPU#0: [ 312.776419][ T31] #0: ffff888042789758 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 312.776468][ T31] #1: ffff88807ff9bc80 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 312.776525][ T31] #2: ffff88805810f968 (kn->active#28){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 312.776581][ T31] #3: ffff88807a5fb1d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 312.776625][ T31] locks held by udevd/6587: 4, on CPU#0: [ 312.776638][ T31] #0: ffff888022ffd638 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 312.776683][ T31] #1: ffff8880571e5480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 312.776755][ T31] #2: ffff88807b954878 (kn->active#28){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 312.776812][ T31] #3: ffff88807b1841d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 312.776861][ T31] locks held by udevd/7151: 4, on CPU#1: [ 312.776875][ T31] #0: ffff888075075878 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xa4/0xca0 [ 312.776922][ T31] #1: ffff88807b8de480 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x5d/0x420 [ 312.776979][ T31] #2: ffff888022abdc38 (kn->active#28){.+.+}-{0:0}, at: kernfs_seq_start+0xb2/0x420 [ 312.777035][ T31] #3: ffff888077df01d8 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 312.777086][ T31] locks held by syz.0.1307/10435: 2, last CPU#1: [ 312.777101][ T31] #0: ffff888034eeb6b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 312.777157][ T31] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 312.777200][ T31] locks held by syz.2.1324/10458: 4, last CPU#1: [ 312.777214][ T31] #0: ffff888038c290b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 312.777263][ T31] #1: ffff888033d26460 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 312.777323][ T31] #2: ffff88807deb3480 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 312.777370][ T31] #3: ffff888076f705a8 (kn->active#57){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 312.777427][ T31] locks held by syz.1.1319/10477: 2, last CPU#1: [ 312.777442][ T31] #0: ffff8880334fb6b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 312.777494][ T31] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 312.777547][ T31] locks held by syz.3.1320/10479: 4, last CPU#1: [ 312.777562][ T31] #0: ffff88807ed7c378 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 312.777615][ T31] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 312.777668][ T31] #2: ffff8880756744f8 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 312.777732][ T31] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: page_table_check_clear+0x124/0x500 [ 312.862920][ T31] [ 312.862933][ T31] ============================================= [ 312.862933][ T31] [ 312.862943][ T31] NMI backtrace for cpu 1 [ 312.862962][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 312.862988][ T31] Tainted: [L]=SOFTLOCKUP [ 312.862995][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 312.863008][ T31] Call Trace: [ 312.863017][ T31] [ 312.863025][ T31] dump_stack_lvl+0xe8/0x150 [ 312.863060][ T31] nmi_cpu_backtrace+0x274/0x2d0 [ 312.863089][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 312.863122][ T31] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 312.863152][ T31] sys_info+0x135/0x170 [ 312.863175][ T31] watchdog+0xfd7/0x1030 [ 312.863201][ T31] ? watchdog+0x1c7/0x1030 [ 312.863238][ T31] kthread+0x38b/0x480 [ 312.863258][ T31] ? __pfx_watchdog+0x10/0x10 [ 312.863275][ T31] ? __pfx_kthread+0x10/0x10 [ 312.863295][ T31] ret_from_fork+0x514/0xb70 [ 312.863316][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 312.863346][ T31] ? __switch_to+0xc89/0x1420 [ 312.863374][ T31] ? __pfx_kthread+0x10/0x10 [ 312.863393][ T31] ret_from_fork_asm+0x1a/0x30 [ 312.863436][ T31] [ 312.863444][ T31] Sending NMI from CPU 1 to CPUs 0: [ 312.863481][ C0] NMI backtrace for cpu 0 [ 312.863498][ C0] CPU: 0 UID: 0 PID: 16 Comm: pr/ttyS0 Tainted: G L syzkaller #0 PREEMPT(full) [ 312.863522][ C0] Tainted: [L]=SOFTLOCKUP [ 312.863529][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 312.863540][ C0] RIP: 0010:io_serial_in+0x77/0xc0 [ 312.863563][ C0] Code: e8 1e 35 55 fc 44 89 f9 d3 e3 49 83 c6 40 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 0f 35 c5 fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f c3 cc cc cc cc cc 44 89 f9 80 e1 07 [ 312.863580][ C0] RSP: 0018:ffffc900001578b8 EFLAGS: 00000002 [ 312.863598][ C0] RAX: 1ffffffff35a7200 RBX: 00000000000003fd RCX: 0000000000000000 [ 312.863611][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000020 [ 312.863622][ C0] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 312.863634][ C0] R10: dffffc0000000000 R11: ffffffff85729520 R12: dffffc0000000000 [ 312.863648][ C0] R13: 0000000000000000 R14: ffffffff9ad390c0 R15: 0000000000000000 [ 312.863661][ C0] FS: 0000000000000000(0000) GS:ffff888124cd2000(0000) knlGS:0000000000000000 [ 312.863676][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 312.863689][ C0] CR2: 00000000f50bfe7f CR3: 000000000eb48000 CR4: 00000000003526f0 [ 312.863705][ C0] Call Trace: [ 312.863718][ C0] [ 312.863726][ C0] wait_for_lsr+0x184/0x2f0 [ 312.863747][ C0] __serial8250_console_fifo_write+0xcd/0x3e0 [ 312.863776][ C0] serial8250_console_write+0xaa1/0x1200 [ 312.863799][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 312.863817][ C0] ? ktime_get+0x45/0x220 [ 312.863841][ C0] nbcon_emit_next_record+0xef5/0x1a90 [ 312.863869][ C0] ? __pfx_nbcon_emit_next_record+0x10/0x10 [ 312.863891][ C0] ? nbcon_context_try_acquire+0x819/0xbd0 [ 312.863918][ C0] ? _raw_spin_lock_irqsave+0x4c/0x60 [ 312.863947][ C0] nbcon_kthread_func+0x679/0x880 [ 312.863969][ C0] ? nbcon_kthread_func+0x163/0x880 [ 312.863986][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 312.864007][ C0] ? __kthread_parkme+0x71/0x1f0 [ 312.864031][ C0] ? __kthread_parkme+0x199/0x1f0 [ 312.864057][ C0] kthread+0x38b/0x480 [ 312.864074][ C0] ? __pfx_nbcon_kthread_func+0x10/0x10 [ 312.864091][ C0] ? __pfx_kthread+0x10/0x10 [ 312.864108][ C0] ret_from_fork+0x514/0xb70 [ 312.864126][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 312.864151][ C0] ? __switch_to+0xc89/0x1420 [ 312.864175][ C0] ? __pfx_kthread+0x10/0x10 [ 312.864192][ C0] ret_from_fork_asm+0x1a/0x30 [ 312.864225][ C0] [ 312.876379][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 314.359556][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 314.370235][ T31] Tainted: [L]=SOFTLOCKUP [ 314.374544][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 314.384588][ T31] Call Trace: [ 314.387949][ T31] [ 314.390877][ T31] vpanic+0x56d/0xa60 [ 314.394862][ T31] ? __pfx___schedule+0x10/0x10 [ 314.399729][ T31] ? __pfx_vpanic+0x10/0x10 [ 314.404237][ T31] panic+0xc5/0xd0 [ 314.407961][ T31] ? __pfx_panic+0x10/0x10 [ 314.412371][ T31] ? preempt_schedule_common+0x7f/0xd0 [ 314.417832][ T31] ? preempt_schedule_thunk+0x16/0x40 [ 314.423199][ T31] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 314.429349][ T31] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 314.435500][ T31] watchdog+0x1030/0x1030 [ 314.439841][ T31] ? watchdog+0x1c7/0x1030 [ 314.444282][ T31] kthread+0x38b/0x480 [ 314.448344][ T31] ? __pfx_watchdog+0x10/0x10 [ 314.453012][ T31] ? __pfx_kthread+0x10/0x10 [ 314.457614][ T31] ret_from_fork+0x514/0xb70 [ 314.462283][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 314.467483][ T31] ? __switch_to+0xc89/0x1420 [ 314.472159][ T31] ? __pfx_kthread+0x10/0x10 [ 314.476741][ T31] ret_from_fork_asm+0x1a/0x30 [ 314.481516][ T31] [ 314.484839][ T31] Kernel Offset: disabled [ 314.489160][ T31] Rebooting in 86400 seconds..