last executing test programs: 8.242446408s ago: executing program 4 (id=895): r0 = socket(0xa, 0x3, 0x87) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x54, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) lseek(0xffffffffffffffff, 0x6, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x43}, 0x48) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bond0\x00'}) (async) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) (async) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8936, &(0x7f0000000000)) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x800, @rand_addr=0x64010100}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a40), 0x0, 0xc000) (async) shutdown(r4, 0x1) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000140)={0x0, 0x800}, 0x8) (async) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) (async) r5 = syz_open_dev$vbi(&(0x7f0000000140), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000200)={0x80000, 0x3, 0x9c}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) 6.998783735s ago: executing program 0 (id=898): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xfffffffe, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) unshare(0x24020400) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1222, 0x4) 6.98600285s ago: executing program 4 (id=899): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffff9c, 0x0, 0x802, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500000000000e71109b000500000000000000be7c9ee4fd306c00000006000000000000009500000000000000"], 0x0, 0x8000005}, 0x94) socket$inet(0x2, 0x2, 0x0) 6.874226671s ago: executing program 2 (id=900): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 6.66824079s ago: executing program 2 (id=901): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101040) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0xa, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x40000000, 0x3, {0x2, 0x48126b1c2af04b17, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1000b}, [@FRA_DST={0x8, 0x1, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000895}, 0x0) openat$dlm_control(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) 6.66732184s ago: executing program 0 (id=911): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xfffffffe, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) unshare(0x24020400) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x1222, 0x4) 6.532468028s ago: executing program 0 (id=902): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x50800, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYRES16=r4, @ANYRESHEX=r4, @ANYRES64=r4]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f252"], 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_procfs(0x0, 0x0) read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe88000000000000000000000000000000000000000000000000000107944e230005000000003a0000000000000000007c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd20000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003000000"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001d3a36c9cfc4d0000008f5e9c100a0575a700000000000000000000000001000107144e23000500000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @random="0c31b0d3ddb0"}, 0x6, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 'bridge0\x00'}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x884c) 5.66435988s ago: executing program 4 (id=905): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x4, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='bbr', 0x3) syz_open_dev$video4linux(&(0x7f0000000180), 0x7, 0x20000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8004, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0xf, 0x4, 0x4}) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x17a, 0x0, 0x7fffffff}]}) ioctl$KVM_X86_SET_MCE(r4, 0x4040ae9e, &(0x7f00000002c0)={0xed80000000000000, 0xeeef0000, 0xfffffffffffffffd, 0x0, 0x2}) r5 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) fchdir(r6) r7 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r7, 0x1) r8 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000", @ANYRES32], 0x0) syz_usb_control_io$printer(r8, 0x0, &(0x7f0000001580)={0x34, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r9, 0x40045b0a, &(0x7f0000000040)={0x3, 0x3, 0x7, 0x40000ff, 0x1, 0x6c1}) mkdir(&(0x7f00000008c0)='./bus\x00', 0x115) pwrite64(r1, 0x0, 0x0, 0x8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000000), &(0x7f0000000040)}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r10, 0x0, r11, 0x0, 0x6, 0x0) r12 = openat(r1, 0x0, 0x281c2, 0x30) fcntl$setlease(r12, 0x400, 0x1) mmap$panthor(&(0x7f00001d4000/0x3000)=nil, 0x3000, 0x1000007, 0x10, r12, 0x6) 4.353597633s ago: executing program 0 (id=907): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101040) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0xa, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r3, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x40000000, 0x3, {0x2, 0x48126b1c2af04b17, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1000b}, [@FRA_DST={0x8, 0x1, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000895}, 0x0) openat$dlm_control(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) 3.135873619s ago: executing program 1 (id=921): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, 0x0, 0x0, 0x4000ffe, 0x0) 3.078472796s ago: executing program 1 (id=912): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 2.978428869s ago: executing program 1 (id=913): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xfffffffe, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket(0x15, 0x5, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1222, 0x4) 2.928975488s ago: executing program 1 (id=914): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "63a7d38a4937c1fc", "5f90d5f023d7bd5bd799356c95abffc8", "09fe0891", "0aa3b9dd5fe7a771"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa", 0x6}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc15762c2f1de34c6380a6725f94600a82d87ccf80948babcadec31ca654671d17de360f20aaf04f4d44951661fe8fe7731174ec3aaf330aebeaed9620f694859785a36c5f787ce35e4425ed3387710fa346f04db11255c6985fa4cdbe54d25c942264b3383d60903bd2677611850fe125b", 0xdf3}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) 2.57766426s ago: executing program 2 (id=915): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000840000000500000010000000010000002c0000008400000001000000db02020009000000ce09000081000000040000000000000004000000", @ANYRES32=0x0], 0x40, 0x48001}], 0x1, 0x40) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_io_uring_setup(0x7d3f, &(0x7f0000000540)={0x0, 0xcf0b, 0x8000, 0x3, 0x11}, 0x0, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(0x0, r2, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x1, 0x6000, @fd_index=0x4, 0x4, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c980420000000000000000fd4a70f3"}, 0x40008, 0x5}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0xb16, 0x0, 0x9}]}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000100)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0xffffffff, 0x25dfdbff, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xffffffa4}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}]}}]}, 0x40}}, 0x4040) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 2.386467802s ago: executing program 3 (id=916): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffff9c, 0x0, 0x802, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500000000000e71109b000500000000000000be7c9ee4fd306c00000006000000000000009500000000000000"], 0x0, 0x8000005}, 0x94) socket$inet(0x2, 0x2, 0x0) 2.318045767s ago: executing program 4 (id=917): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = memfd_secret(0x80000) ioctl$SG_GET_PACK_ID(r0, 0x227c, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x4000004) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r1, &(0x7f0000000180), 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x101000, 0x0) write(r3, &(0x7f00000000c0)="87", 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='0', 0x1) unshare(0x68040000) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{&(0x7f00000034c0)}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r2], 0x1000f) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) fcntl$dupfd(r5, 0x0, r5) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000440)={0x1, 0x0, [{0x294}]}) 2.116628688s ago: executing program 2 (id=918): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x20, r3, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40810}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x25dfdbfb, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x0) 1.793596796s ago: executing program 1 (id=919): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x101040) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) unshare(0x2a060400) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x8}, 0x0, &(0x7f0000000240)={0x1f, 0xa, 0x8000000000000000}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x40) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008081}, 0x800) syz_usb_connect(0x6, 0x36, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0xfc}}, 0x0) connect$inet(r2, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x40000000, 0x3, {0x2, 0x48126b1c2af04b17, 0x0, 0x0, 0x7, 0x0, 0x0, 0x3, 0x1000b}, [@FRA_DST={0x8, 0x1, @private=0xa010102}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000895}, 0x0) r5 = openat$dlm_control(0xffffff9c, &(0x7f0000000180), 0x1, 0x0) r6 = accept4$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x800) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x0) 1.783691743s ago: executing program 2 (id=920): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{}, {0x77359400}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080), 0x50800, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r2, @ANYRES16=r4, @ANYRESHEX=r4, @ANYRES64=r4]) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r5, &(0x7f0000004100)={0x2020}, 0x2020) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="400000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="a7ffa88800000000200012800900010069706970000000fa0f000280040013000500090000000008f33a5798cb485f3a9776f093ab3e544599d87862ad961fa67f7215b55c42d37b9a100eb2ec063287898534c013c8f11d376156badd398f094e0e3b0cae09b813a27158392211de2312f252"], 0x40}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket(0x400000000010, 0x3, 0x0) r8 = syz_open_procfs(0x0, 0x0) read$FUSE(r8, &(0x7f0000002640)={0x2020}, 0x2020) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4401000010000100feffffbf00010000fe88000000000000000000000000000000000000000000000000000107944e230005000000003a0000000000000000007c", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000009000000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000ff0100000000000002000000fcffffff000000002abd700004350000020001fd20000000480003006465666c617465000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c0015005a07350003000000"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001d3a36c9cfc4d0000008f5e9c100a0575a700000000000000000000000001000107144e23000500000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000feffffffffffffff02000000fcffffff000000002abd7000043500000200010020000000480003006465666c61746500"/236], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000100)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x1, @random="0c31b0d3ddb0"}, 0x6, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}, 'bridge0\x00'}) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x30, 0x1, 0x4, 0x401, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x101}, @NFULA_CFG_MODE={0xa, 0x2, {0x9, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x884c) 1.40654818s ago: executing program 3 (id=922): socket$inet6_tcp(0xa, 0x1, 0x0) memfd_secret(0x80000) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000680)=[{0x0}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r0], 0x1000f) 1.333395344s ago: executing program 4 (id=923): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, 0x0, 0x0, 0x4000ffe, 0x0) 1.268967436s ago: executing program 3 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 1.152306353s ago: executing program 0 (id=925): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0xfffffffe, 0x4) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000001080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000001040)=[0x0, 0x0, 0x0, 0x0, 0x0]}) r1 = socket(0x15, 0x5, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000300)=0x1222, 0x4) 1.077056421s ago: executing program 3 (id=926): r0 = syz_open_dev$vim2m(&(0x7f0000000640), 0x1ff, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, 0x0) 1.07633679s ago: executing program 4 (id=927): r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$XFS_IOC_GETVERSION(r0, 0x80047601, &(0x7f0000000000)) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="230100004106cd40cd060f011bd50000000109022400010000800009040bfd023377610009050702001481400609058703"], 0x0) 918.263512ms ago: executing program 1 (id=928): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) clock_gettime(0x0, &(0x7f00000002c0)) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x2c, r5, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xf9}]}, 0x2c}}, 0x0) (fail_nth: 9) 917.482932ms ago: executing program 0 (id=929): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r1, &(0x7f0000001380)=[{&(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f00000001c0)}], 0x1, &(0x7f00000001c0)=ANY=[@ANYBLOB="14000000840000000500000010000000010000002c0000008400000001000000db02020009000000ce09000081000000040000000000000004000000", @ANYRES32=0x0], 0x40, 0x48001}], 0x1, 0x40) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x0, 0x6}) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_io_uring_setup(0x7d3f, &(0x7f0000000540)={0x0, 0xcf0b, 0x8000, 0x3, 0x11}, 0x0, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(0x0, r2, 0x0, &(0x7f0000000280)=@IORING_OP_WRITE={0x17, 0x1, 0x6000, @fd_index=0x4, 0x4, 0x0, 0x0, 0x4, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c980420000000000000000fd4a70f3"}, 0x40008, 0x5}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000340)={0x1, 0x0, [{0xb16, 0x0, 0x9}]}) ioctl$DVB_DEMUX_DMX_REMOVE_PID(r3, 0x40026f34, &(0x7f0000000100)) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080)={0x8, 0x6, 0x2}, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0xffffffff, 0x25dfdbff, {0x60, 0x0, 0x0, r9, {0x0, 0x3}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xffffffa4}, @TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0x6}]}}]}, 0x40}}, 0x4040) r10 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r11, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 877.510224ms ago: executing program 3 (id=930): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, 0x0, 0x0, 0x4000ffe, 0x0) 693.481435ms ago: executing program 3 (id=931): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ead01c202505a4a463200102030109022d000100fd20000904a70103a598850009050a020004060c110905068e"], 0x0) 0s ago: executing program 2 (id=932): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$uhid(0xffffff9c, 0x0, 0x802, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sync() write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b40500000000000e71109b000500000000000000be7c9ee4fd306c00000006000000000000009500000000000000"], 0x0, 0x8000005}, 0x94) socket$inet(0x2, 0x2, 0x0) kernel console output (not intermixed with test programs): ted. [ 229.962428][ T9] usb 4-1: USB disconnect, device number 30 [ 230.090148][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 230.300754][ T7715] netlink: 88 bytes leftover after parsing attributes in process `syz.1.588'. [ 230.322213][ T7715] netlink: 76 bytes leftover after parsing attributes in process `syz.1.588'. [ 230.496935][ T7717] netlink: 'syz.0.589': attribute type 10 has an invalid length. [ 230.525065][ T7717] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.542295][ T7717] team0: Port device netdevsim1 added [ 230.555928][ T7718] netlink: 'syz.0.589': attribute type 10 has an invalid length. [ 230.637535][ T7718] team0: Port device netdevsim1 removed [ 230.652096][ T7717] ksmbd: Unknown IPC event: 3, ignore. [ 230.663003][ T7718] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.716495][ T7718] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 230.731903][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz.4.590'. [ 230.928858][ T5752] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 231.105498][ T5752] usb 4-1: Using ep0 maxpacket: 8 [ 231.126317][ T5752] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 231.154949][ T5752] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 231.187815][ T5752] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.215931][ T5752] usb 4-1: Product: syz [ 231.236055][ T5752] usb 4-1: Manufacturer: syz [ 231.261855][ T5752] usb 4-1: SerialNumber: syz [ 231.302042][ T5752] usb 4-1: config 0 descriptor?? [ 231.336449][ T5752] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 231.385577][ T5752] usb 4-1: setting power ON [ 231.407587][ T5752] dvb-usb: bulk message failed: -22 (2/0) [ 231.494172][ T5752] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 231.528000][ T5752] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 231.560588][ T5752] usb 4-1: media controller created [ 231.625618][ T5752] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 231.697732][ T5752] usb 4-1: selecting invalid altsetting 6 [ 231.712169][ T5752] usb 4-1: digital interface selection failed (-22) [ 231.723483][ T5752] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 231.736692][ T5752] usb 4-1: setting power OFF [ 231.744550][ T5752] dvb-usb: bulk message failed: -22 (2/0) [ 231.753230][ T5752] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 231.762952][ T5752] (NULL device *): no alternate interface [ 231.869289][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 231.932158][ T7725] input: syz0 as /devices/virtual/input/input34 [ 232.015473][ T5752] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 232.074821][ T5752] usb 4-1: USB disconnect, device number 31 [ 232.315278][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.594'. [ 232.351946][ T187] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 232.541047][ T187] usb 2-1: unable to get BOS descriptor or descriptor too short [ 232.551989][ T187] usb 2-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40 [ 232.579574][ T187] usb 2-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 232.608898][ T187] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7 [ 232.621246][ T187] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 97, changing to 7 [ 232.633407][ T187] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 24929, setting to 1024 [ 232.649984][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.658272][ T187] usb 2-1: Product: syz [ 232.664238][ T187] usb 2-1: Manufacturer: syz [ 232.669335][ T187] usb 2-1: SerialNumber: syz [ 232.749033][ T5346] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 232.759103][ T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 232.898837][ T5346] usb 1-1: Using ep0 maxpacket: 32 [ 232.905275][ T5346] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 232.917637][ T9] usb 3-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 232.930042][ T5346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.939798][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.952275][ T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 232.963302][ T5346] usb 1-1: config 0 descriptor?? [ 232.987144][ T9] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 233.001772][ T9] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 233.016361][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.174832][ T5346] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 233.204315][ T5346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 233.222558][ T187] usb 2-1: USB disconnect, device number 20 [ 233.231557][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ee9000: rx timeout, send abort [ 233.237200][ T5346] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 233.250666][ T7734] netlink: 4 bytes leftover after parsing attributes in process `syz.2.595'. [ 233.266507][ T5346] usb 1-1: media controller created [ 233.320511][ T5346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 233.434743][ T7744] udevd[7744]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 233.506845][ T7734] netlink: 12 bytes leftover after parsing attributes in process `syz.2.595'. [ 233.592799][ T7749] FAULT_INJECTION: forcing a failure. [ 233.592799][ T7749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.606177][ T7749] CPU: 0 UID: 0 PID: 7749 Comm: syz.3.601 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.606202][ T7749] Tainted: [L]=SOFTLOCKUP [ 233.606208][ T7749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 233.606217][ T7749] Call Trace: [ 233.606223][ T7749] [ 233.606229][ T7749] dump_stack_lvl+0xe8/0x150 [ 233.606256][ T7749] should_fail_ex+0x410/0x560 [ 233.606276][ T7749] _copy_from_user+0x2d/0xb0 [ 233.606303][ T7749] get_compat_msghdr+0xb3/0x4c0 [ 233.606323][ T7749] ? __pfx_get_compat_msghdr+0x10/0x10 [ 233.606349][ T7749] ___sys_sendmsg+0x201/0x360 [ 233.606374][ T7749] ? __lock_acquire+0x683/0x2cf0 [ 233.606399][ T7749] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.606423][ T7749] ? get_pid_task+0x20/0x1f0 [ 233.606445][ T7749] ? get_pid_task+0x20/0x1f0 [ 233.606464][ T7749] ? get_pid_task+0x20/0x1f0 [ 233.606506][ T7749] ? __fget_files+0x2a/0x420 [ 233.606520][ T7749] ? __fget_files+0x3a2/0x420 [ 233.606540][ T7749] __sys_sendmsg+0x177/0x240 [ 233.606565][ T7749] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.606601][ T7749] __do_fast_syscall_32+0x27a/0x6a0 [ 233.606618][ T7749] ? do_fast_syscall_32+0x33/0x70 [ 233.606633][ T7749] ? asm_int80_emulation+0x1a/0x20 [ 233.606648][ T7749] ? do_int80_emulation+0x299/0x500 [ 233.606662][ T7749] ? trace_irq_disable+0x3b/0x140 [ 233.606686][ T7749] do_fast_syscall_32+0x33/0x70 [ 233.606701][ T7749] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 233.606720][ T7749] RIP: 0023:0xf6fff0ec [ 233.606734][ T7749] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 233.606747][ T7749] RSP: 002b:00000000f53ed50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 233.606763][ T7749] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000340 [ 233.606774][ T7749] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 233.606783][ T7749] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 233.606793][ T7749] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 233.606802][ T7749] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 233.606824][ T7749] [ 233.738611][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035770800: rx timeout, send abort [ 233.833954][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022ee9000: abort rx timeout. Force session deactivation [ 233.998977][ T5752] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 234.005894][ T7753] netlink: 88 bytes leftover after parsing attributes in process `syz.3.603'. [ 234.018147][ T7753] netlink: 76 bytes leftover after parsing attributes in process `syz.3.603'. [ 234.159143][ T5752] usb 5-1: Using ep0 maxpacket: 8 [ 234.167584][ T5752] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.184280][ T5752] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 234.199299][ T5752] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 234.216916][ T5752] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 234.234424][ T5752] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 234.255987][ T5752] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 234.279376][ T9] usb 3-1: USB disconnect, device number 18 [ 234.288594][ T5752] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.323076][ T5752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.333229][ C1] vcan0: j1939_tp_rxtimer: 0xffff888035770800: abort rx timeout. Force session deactivation [ 234.495627][ T5346] az6027: usb out operation failed. (-71) [ 234.508331][ T5346] stb0899_attach: Driver disabled by Kconfig [ 234.518143][ T5346] az6027: no front-end attached [ 234.518143][ T5346] [ 234.529688][ T7757] input: syz0 as /devices/virtual/input/input35 [ 234.548727][ T5346] az6027: usb out operation failed. (-71) [ 234.569182][ T5346] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 234.591213][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.604185][ T5346] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input36 [ 234.624621][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.639655][ T5346] dvb-usb: schedule remote query interval to 400 msecs. [ 234.655557][ T5346] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 234.692091][ T7748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 234.713454][ T5346] usb 1-1: USB disconnect, device number 15 [ 234.787796][ T7748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.940383][ T5346] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 234.966289][ T7748] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.201678][ T7765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.606'. [ 235.238468][ T5752] usb 5-1: usb_control_msg returned -71 [ 235.256560][ T5752] usbtmc 5-1:16.0: can't read capabilities [ 235.305005][ T5752] usb 5-1: USB disconnect, device number 18 [ 235.529111][ T5613] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 235.699686][ T5613] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 235.727855][ T5613] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.740585][ T5613] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 235.749894][ T5613] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.763292][ T5613] usb 1-1: config 0 descriptor?? [ 235.916680][ T29] audit: type=1326 audit(1787201315.946:9931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 235.949622][ T5346] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 235.958497][ T29] audit: type=1326 audit(1787201315.976:9932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 235.996481][ T29] audit: type=1326 audit(1787201315.976:9933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 236.027782][ T29] audit: type=1326 audit(1787201315.976:9934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71674eb code=0x7ffc0000 [ 236.060323][ T29] audit: type=1326 audit(1787201315.976:9935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 236.096090][ T29] audit: type=1326 audit(1787201315.976:9936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 236.138819][ T29] audit: type=1326 audit(1787201315.976:9937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 236.167998][ T29] audit: type=1326 audit(1787201315.976:9938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 236.175067][ T5346] usb 5-1: Using ep0 maxpacket: 32 [ 236.201094][ T29] audit: type=1326 audit(1787201315.976:9939): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71674eb code=0x7ffc0000 [ 236.226813][ T5346] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 236.247084][ T29] audit: type=1326 audit(1787201315.976:9940): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7778 comm="syz.1.612" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 236.272578][ T5346] usb 5-1: config 0 has an invalid interface number: 12 but max is 0 [ 236.283859][ T5346] usb 5-1: config 0 has no interface number 0 [ 236.299465][ T5346] usb 5-1: config 0 interface 12 has no altsetting 0 [ 236.317382][ T5346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.326035][ T5346] usb 5-1: Product: syz [ 236.330524][ T5346] usb 5-1: Manufacturer: syz [ 236.335327][ T5346] usb 5-1: SerialNumber: syz [ 236.344609][ T5346] usb 5-1: config 0 descriptor?? [ 236.731846][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.749376][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.770832][ T7787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.786742][ T7787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.863913][ T7794] input: syz0 as /devices/virtual/input/input37 [ 237.581550][ T7804] FAULT_INJECTION: forcing a failure. [ 237.581550][ T7804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.597659][ T7804] CPU: 1 UID: 0 PID: 7804 Comm: syz.1.620 Tainted: G L syzkaller #0 PREEMPT(full) [ 237.597694][ T7804] Tainted: [L]=SOFTLOCKUP [ 237.597702][ T7804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 237.597713][ T7804] Call Trace: [ 237.597721][ T7804] [ 237.597731][ T7804] dump_stack_lvl+0xe8/0x150 [ 237.597767][ T7804] should_fail_ex+0x410/0x560 [ 237.597794][ T7804] _copy_to_user+0x31/0xb0 [ 237.597823][ T7804] simple_read_from_buffer+0xe1/0x170 [ 237.597864][ T7804] proc_fail_nth_read+0x1bb/0x230 [ 237.597894][ T7804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.597923][ T7804] ? rw_verify_area+0x24a/0x4c0 [ 237.597946][ T7804] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 237.597970][ T7804] vfs_read+0x213/0xa80 [ 237.597997][ T7804] ? __pfx___mutex_lock+0x10/0x10 [ 237.598018][ T7804] ? __pfx_vfs_read+0x10/0x10 [ 237.598042][ T7804] ? __fget_files+0x2a/0x420 [ 237.598066][ T7804] ? __fget_files+0x3a2/0x420 [ 237.598086][ T7804] ? __fget_files+0x2a/0x420 [ 237.598114][ T7804] ksys_read+0x150/0x270 [ 237.598139][ T7804] ? __pfx_ksys_read+0x10/0x10 [ 237.598166][ T7804] ? asm_int80_emulation+0x1a/0x20 [ 237.598194][ T7804] do_int80_emulation+0x198/0x500 [ 237.598216][ T7804] ? trace_irq_disable+0x3b/0x140 [ 237.598245][ T7804] ? asm_int80_emulation+0x1a/0x20 [ 237.598264][ T7804] ? clear_bhb_loop+0x70/0xc0 [ 237.598286][ T7804] ? clear_bhb_loop+0x70/0xc0 [ 237.598313][ T7804] asm_int80_emulation+0x1a/0x20 [ 237.598335][ T7804] RIP: 0023:0xf71674eb [ 237.598354][ T7804] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 237.598372][ T7804] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 237.598394][ T7804] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f54265d0 [ 237.598408][ T7804] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 237.598421][ T7804] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 237.598433][ T7804] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 237.598445][ T7804] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 237.598477][ T7804] [ 237.900559][ T7806] netlink: 8 bytes leftover after parsing attributes in process `syz.1.621'. [ 238.102399][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 238.117968][ T7811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.623'. [ 238.223696][ T9] usb 1-1: USB disconnect, device number 16 [ 238.424741][ T7822] input: syz0 as /devices/virtual/input/input38 [ 238.626553][ T7825] input: syz0 as /devices/virtual/input/input39 [ 238.626604][ T7825] input: failed to attach handler leds to device input39, error: -6 [ 238.679330][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 238.849198][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 238.858274][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 238.866409][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40 [ 238.880132][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 238.890618][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 238.903877][ T9] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 238.967172][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 238.998106][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.007289][ T9] usb 1-1: Product: syz [ 239.011935][ T9] usb 1-1: Manufacturer: syz [ 239.016653][ T9] usb 1-1: SerialNumber: syz [ 239.126281][ T7827] syzkaller0: entered promiscuous mode [ 239.131996][ T7827] syzkaller0: entered allmulticast mode [ 239.265852][ T7829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.631'. [ 239.277321][ T5346] f81534 5-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 239.285331][ T7831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.296888][ T7829] netlink: 277 bytes leftover after parsing attributes in process `syz.2.631'. [ 239.297936][ T5346] f81534 5-1:0.12: f81534_find_config_idx: read failed: -71 [ 239.322024][ T7829] netlink: 277 bytes leftover after parsing attributes in process `syz.2.631'. [ 239.335669][ T7831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.366464][ T5346] f81534 5-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 239.392003][ T5346] f81534 5-1:0.12: probe with driver f81534 failed with error -71 [ 239.464275][ T5346] usb 5-1: USB disconnect, device number 19 [ 239.622757][ T9] usb 1-1: USB disconnect, device number 17 [ 239.690254][ T7833] FAULT_INJECTION: forcing a failure. [ 239.690254][ T7833] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.718586][ T7833] CPU: 1 UID: 0 PID: 7833 Comm: syz.1.632 Tainted: G L syzkaller #0 PREEMPT(full) [ 239.718615][ T7833] Tainted: [L]=SOFTLOCKUP [ 239.718620][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.718630][ T7833] Call Trace: [ 239.718637][ T7833] [ 239.718644][ T7833] dump_stack_lvl+0xe8/0x150 [ 239.718673][ T7833] should_fail_ex+0x410/0x560 [ 239.718695][ T7833] _copy_to_user+0x31/0xb0 [ 239.718717][ T7833] simple_read_from_buffer+0xe1/0x170 [ 239.718752][ T7833] proc_fail_nth_read+0x1bb/0x230 [ 239.718774][ T7833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.718795][ T7833] ? rw_verify_area+0x24a/0x4c0 [ 239.718814][ T7833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.718833][ T7833] vfs_read+0x213/0xa80 [ 239.718855][ T7833] ? __pfx___mutex_lock+0x10/0x10 [ 239.718883][ T7833] ? __pfx_vfs_read+0x10/0x10 [ 239.718903][ T7833] ? __fget_files+0x2a/0x420 [ 239.718922][ T7833] ? __fget_files+0x3a2/0x420 [ 239.718937][ T7833] ? __fget_files+0x2a/0x420 [ 239.718959][ T7833] ksys_read+0x150/0x270 [ 239.718981][ T7833] ? __pfx_ksys_read+0x10/0x10 [ 239.719004][ T7833] ? asm_int80_emulation+0x1a/0x20 [ 239.719028][ T7833] do_int80_emulation+0x198/0x500 [ 239.719046][ T7833] ? trace_irq_disable+0x3b/0x140 [ 239.719070][ T7833] ? asm_int80_emulation+0x1a/0x20 [ 239.719087][ T7833] ? clear_bhb_loop+0x70/0xc0 [ 239.719105][ T7833] ? clear_bhb_loop+0x70/0xc0 [ 239.719128][ T7833] asm_int80_emulation+0x1a/0x20 [ 239.719148][ T7833] RIP: 0023:0xf71674eb [ 239.719164][ T7833] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 239.719178][ T7833] RSP: 002b:00000000f54264bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 239.719197][ T7833] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54265d0 [ 239.719208][ T7833] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 239.719217][ T7833] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 239.719227][ T7833] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 239.719237][ T7833] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 239.719262][ T7833] [ 240.133492][ T7817] syz.3.626 (7817): drop_caches: 2 [ 240.258382][ T7841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.635'. [ 240.418008][ T7852] input: syz0 as /devices/virtual/input/input40 [ 240.608882][ T7856] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 241.379017][ T5694] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 241.549851][ T5694] usb 1-1: Using ep0 maxpacket: 32 [ 241.559834][ T5694] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 241.582427][ T5694] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 241.596290][ T5694] usb 1-1: config 0 has no interface number 0 [ 241.604430][ T5694] usb 1-1: config 0 interface 12 has no altsetting 0 [ 241.619405][ T5694] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.627775][ T5694] usb 1-1: Product: syz [ 241.634929][ T5694] usb 1-1: Manufacturer: syz [ 241.640506][ T5694] usb 1-1: SerialNumber: syz [ 241.649917][ T5694] usb 1-1: config 0 descriptor?? [ 241.763119][ T7880] input: syz0 as /devices/virtual/input/input41 [ 242.162815][ T29] kauditd_printk_skb: 949 callbacks suppressed [ 242.162842][ T29] audit: type=1326 audit(1787201322.196:10890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 242.194978][ T29] audit: type=1326 audit(1787201322.196:10891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 242.223719][ T29] audit: type=1326 audit(1787201322.216:10892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 242.249709][ T29] audit: type=1326 audit(1787201322.226:10893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 242.275894][ T29] audit: type=1326 audit(1787201322.226:10894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 242.310057][ T29] audit: type=1326 audit(1787201322.236:10895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 242.336865][ T29] audit: type=1326 audit(1787201322.236:10896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 242.365907][ T29] audit: type=1326 audit(1787201322.256:10897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 242.390945][ T29] audit: type=1326 audit(1787201322.256:10898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 242.419430][ T29] audit: type=1326 audit(1787201322.256:10899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7886 comm="syz.3.653" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 242.794895][ T7893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.655'. [ 243.589066][ T5711] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 243.739642][ T5711] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 243.750480][ T5711] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 243.762998][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 243.775116][ T5711] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 243.785909][ T5711] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 243.799747][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.813990][ T5711] usb 4-1: config 0 descriptor?? [ 244.212653][ T7909] input: syz0 as /devices/virtual/input/input42 [ 244.243781][ T5711] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 244.263417][ T5711] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 244.278962][ T5711] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 244.293082][ T5711] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 244.305444][ T5711] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 244.313788][ T5711] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 244.322004][ T5711] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 244.330996][ T5711] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 244.340694][ T5711] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 244.362346][ T5694] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 244.364269][ T5711] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0 [ 244.390554][ T5694] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 244.415028][ T5694] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 244.444007][ T5694] f81534 1-1:0.12: probe with driver f81534 failed with error -71 [ 244.450464][ T5711] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 244.495623][ T5694] usb 1-1: USB disconnect, device number 18 [ 244.618884][ T5613] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 244.758577][ T7916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 244.770536][ T7916] netlink: 277 bytes leftover after parsing attributes in process `syz.4.663'. [ 244.780355][ T7916] netlink: 277 bytes leftover after parsing attributes in process `syz.4.663'. [ 244.790586][ T5613] usb 3-1: Using ep0 maxpacket: 8 [ 244.798490][ T5613] usb 3-1: unable to get BOS descriptor or descriptor too short [ 244.812410][ T5613] usb 3-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=5d.24 [ 244.833382][ T5613] usb 3-1: config 117 has an invalid interface number: 163 but max is 0 [ 244.847127][ T5613] usb 3-1: config 117 has no interface number 0 [ 244.861854][ T5613] usb 3-1: config 117 interface 163 has no altsetting 0 [ 244.879229][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.893165][ T5613] usb 3-1: Product: syz [ 244.898027][ T5613] usb 3-1: Manufacturer: syz [ 244.903356][ T5613] usb 3-1: SerialNumber: syz [ 245.077302][ T7921] input: syz0 as /devices/virtual/input/input43 [ 245.170844][ T7923] netlink: 88 bytes leftover after parsing attributes in process `syz.4.664'. [ 245.184640][ T7923] netlink: 76 bytes leftover after parsing attributes in process `syz.4.664'. [ 245.551628][ T5613] f81534a_ctrl 3-1:117.163: probe with driver f81534a_ctrl failed with error -121 [ 245.752093][ T5752] usb 4-1: reset high-speed USB device number 32 using dummy_hcd [ 246.157272][ T7928] trusted_key: syz.0.667 sent an empty control message without MSG_MORE. [ 246.244791][ T7928] mmap: syz.0.667 (7928) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 246.893962][ T7942] FAULT_INJECTION: forcing a failure. [ 246.893962][ T7942] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.942451][ T7942] CPU: 1 UID: 0 PID: 7942 Comm: syz.0.669 Tainted: G L syzkaller #0 PREEMPT(full) [ 246.942488][ T7942] Tainted: [L]=SOFTLOCKUP [ 246.942501][ T7942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 246.942514][ T7942] Call Trace: [ 246.942523][ T7942] [ 246.942532][ T7942] dump_stack_lvl+0xe8/0x150 [ 246.942569][ T7942] should_fail_ex+0x410/0x560 [ 246.942599][ T7942] _copy_from_user+0x2d/0xb0 [ 246.942628][ T7942] kstrtouint_from_user+0xd6/0x180 [ 246.942667][ T7942] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 246.942724][ T7942] proc_fail_nth_write+0x8e/0x210 [ 246.942750][ T7942] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 246.942785][ T7942] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 246.942810][ T7942] vfs_write+0x296/0xba0 [ 246.942842][ T7942] ? __pfx_vfs_write+0x10/0x10 [ 246.942867][ T7942] ? __fget_files+0x2a/0x420 [ 246.942893][ T7942] ? __fget_files+0x3a2/0x420 [ 246.942913][ T7942] ? __fget_files+0x2a/0x420 [ 246.942942][ T7942] ksys_write+0x150/0x270 [ 246.942969][ T7942] ? __pfx_ksys_write+0x10/0x10 [ 246.942997][ T7942] ? asm_int80_emulation+0x1a/0x20 [ 246.943026][ T7942] do_int80_emulation+0x198/0x500 [ 246.943049][ T7942] ? trace_irq_disable+0x3b/0x140 [ 246.943078][ T7942] ? asm_int80_emulation+0x1a/0x20 [ 246.943099][ T7942] ? clear_bhb_loop+0x70/0xc0 [ 246.943122][ T7942] ? clear_bhb_loop+0x70/0xc0 [ 246.943149][ T7942] asm_int80_emulation+0x1a/0x20 [ 246.943171][ T7942] RIP: 0023:0xf71c74eb [ 246.943190][ T7942] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 246.943208][ T7942] RSP: 002b:00000000f547d4bc EFLAGS: 00000246 ORIG_RAX: 0000000000000004 [ 246.943231][ T7942] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f547d5d0 [ 246.943246][ T7942] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000 [ 246.943259][ T7942] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 246.943271][ T7942] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 246.943284][ T7942] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 246.943316][ T7942] [ 247.232161][ T29] kauditd_printk_skb: 531 callbacks suppressed [ 247.232180][ T29] audit: type=1326 audit(1787201327.266:11431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.668" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 247.380730][ T5613] usb 4-1: USB disconnect, device number 32 [ 247.426111][ T29] audit: type=1326 audit(1787201327.306:11432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.668" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 247.531635][ T29] audit: type=1326 audit(1787201327.306:11433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.668" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 247.641604][ T29] audit: type=1326 audit(1787201327.316:11434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.668" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 247.680270][ T5712] usb 3-1: USB disconnect, device number 19 [ 247.690071][ T29] audit: type=1326 audit(1787201327.316:11435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.668" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 247.764064][ T29] audit: type=1326 audit(1787201327.316:11436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.668" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 247.845903][ T29] audit: type=1326 audit(1787201327.326:11437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.668" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 247.910114][ T29] audit: type=1326 audit(1787201327.326:11438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.668" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 247.958949][ T29] audit: type=1326 audit(1787201327.326:11439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.668" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 248.041209][ T29] audit: type=1326 audit(1787201327.326:11440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7936 comm="syz.3.668" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=267 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 248.234005][ T7965] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 248.818917][ T5712] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 248.981007][ T5712] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 249.015963][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 249.043540][ T5712] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 249.090245][ T5712] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 249.131525][ T5712] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 249.210991][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.271402][ T7983] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[7984] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[7983] [ 249.289492][ T5712] usb 1-1: config 0 descriptor?? [ 249.499836][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.4.680'. [ 249.557730][ T5712] hdpvr 1-1:0.0: firmware version 0xd9 dated LW@'^R"5DBUN=rp]E/ [ 249.574699][ T5712] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 249.585513][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.680'. [ 249.761283][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.682'. [ 250.040007][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.091190][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.207725][ T7974] fuse: Bad value for 'rootmode' [ 250.317282][ T5712] hdpvr 1-1:0.0: device init failed [ 250.327300][ T5712] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12 [ 250.355590][ T5712] usb 1-1: USB disconnect, device number 19 [ 250.364952][ T8002] netlink: 32 bytes leftover after parsing attributes in process `syz.4.687'. [ 250.394860][ T8002] netlink: 88 bytes leftover after parsing attributes in process `syz.4.687'. [ 250.406388][ T8002] netlink: 76 bytes leftover after parsing attributes in process `syz.4.687'. [ 250.679252][ T8004] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 250.689551][ T8004] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 250.696632][ T8004] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 250.703996][ T8004] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 250.712703][ T8004] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 251.006410][ T8008] netlink: 4 bytes leftover after parsing attributes in process `syz.0.690'. [ 251.316551][ T8012] FAULT_INJECTION: forcing a failure. [ 251.316551][ T8012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.332295][ T8012] CPU: 1 UID: 0 PID: 8012 Comm: syz.4.692 Tainted: G L syzkaller #0 PREEMPT(full) [ 251.332329][ T8012] Tainted: [L]=SOFTLOCKUP [ 251.332338][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 251.332352][ T8012] Call Trace: [ 251.332360][ T8012] [ 251.332369][ T8012] dump_stack_lvl+0xe8/0x150 [ 251.332406][ T8012] should_fail_ex+0x410/0x560 [ 251.332435][ T8012] _copy_from_user+0x2d/0xb0 [ 251.332464][ T8012] get_compat_msghdr+0xb3/0x4c0 [ 251.332490][ T8012] ? __pfx_get_compat_msghdr+0x10/0x10 [ 251.332526][ T8012] ___sys_sendmsg+0x201/0x360 [ 251.332560][ T8012] ? __lock_acquire+0x683/0x2cf0 [ 251.332602][ T8012] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.332636][ T8012] ? get_pid_task+0x20/0x1f0 [ 251.332666][ T8012] ? get_pid_task+0x20/0x1f0 [ 251.332693][ T8012] ? get_pid_task+0x20/0x1f0 [ 251.332753][ T8012] ? __fget_files+0x2a/0x420 [ 251.332773][ T8012] ? __fget_files+0x3a2/0x420 [ 251.332804][ T8012] __sys_sendmsg+0x177/0x240 [ 251.332838][ T8012] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.332889][ T8012] __do_fast_syscall_32+0x27a/0x6a0 [ 251.332913][ T8012] ? do_fast_syscall_32+0x33/0x70 [ 251.332934][ T8012] ? asm_int80_emulation+0x1a/0x20 [ 251.332963][ T8012] ? do_int80_emulation+0x299/0x500 [ 251.332983][ T8012] ? trace_irq_disable+0x3b/0x140 [ 251.333016][ T8012] do_fast_syscall_32+0x33/0x70 [ 251.333039][ T8012] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 251.333066][ T8012] RIP: 0023:0xf7f840ec [ 251.333085][ T8012] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 251.333103][ T8012] RSP: 002b:00000000f544650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 251.333127][ T8012] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000000 [ 251.333142][ T8012] RDX: 0000000004004804 RSI: 0000000000000000 RDI: 0000000000000000 [ 251.333155][ T8012] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 251.333168][ T8012] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 251.333181][ T8012] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 251.333217][ T8012] [ 251.799696][ T8020] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 252.388115][ T8024] loop7: detected capacity change from 0 to 7 [ 252.437069][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.446904][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.479580][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.489297][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.499313][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.509097][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.547692][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.557460][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.566224][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.569511][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 252.576289][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.594734][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.604404][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.614295][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.623996][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.631918][ T8024] ldm_validate_partition_table(): Disk read failed. [ 252.638783][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.648443][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.656571][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.666217][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.672178][ T9] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 252.683879][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 252.693541][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 252.707602][ T8024] Dev loop7: unable to read RDB block 0 [ 252.716634][ T8024] loop7: unable to read partition table [ 252.726620][ T8024] loop7: partition table beyond EOD, truncated [ 252.748888][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 252.753811][ T5628] Bluetooth: hci3: command 0x0406 tx timeout [ 252.755027][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 252.761787][ T4930] Bluetooth: hci0: command 0x0406 tx timeout [ 252.767032][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 252.837537][ T8024] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 252.961812][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.698'. [ 252.972467][ T9] usb 5-1: New USB device found, idVendor=1608, idProduct=0305, bcdDevice=98.de [ 253.033092][ T9] usb 5-1: config 2 has an invalid interface number: 68 but max is 0 [ 253.107126][ T9] usb 5-1: config 2 has no interface number 0 [ 253.187821][ T9] usb 5-1: config 2 interface 68 altsetting 13 bulk endpoint 0x1 has invalid maxpacket 64 [ 253.228818][ T9] usb 5-1: config 2 interface 68 altsetting 13 bulk endpoint 0x83 has invalid maxpacket 8 [ 253.248935][ T9] usb 5-1: config 2 interface 68 has no altsetting 0 [ 253.273310][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.286941][ T8019] syz.0.696 (8019): drop_caches: 2 [ 253.297383][ T9] usb 5-1: Product: syz [ 253.325007][ T9] usb 5-1: Manufacturer: syz [ 253.345232][ T9] usb 5-1: SerialNumber: syz [ 253.369122][ T8025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 253.427133][ T8025] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 253.563382][ T8036] FAULT_INJECTION: forcing a failure. [ 253.563382][ T8036] name failslab, interval 1, probability 0, space 0, times 0 [ 253.596321][ T8036] CPU: 1 UID: 0 PID: 8036 Comm: syz.2.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 253.596355][ T8036] Tainted: [L]=SOFTLOCKUP [ 253.596366][ T8036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.596379][ T8036] Call Trace: [ 253.596388][ T8036] [ 253.596397][ T8036] dump_stack_lvl+0xe8/0x150 [ 253.596433][ T8036] should_fail_ex+0x410/0x560 [ 253.596461][ T8036] should_failslab+0xa8/0x100 [ 253.596498][ T8036] __kmalloc_cache_noprof+0xa8/0x660 [ 253.596521][ T8036] ? __kmalloc_cache_noprof+0x152/0x660 [ 253.596568][ T8036] ? snd_seq_prioq_new+0x47/0xa0 [ 253.596593][ T8036] ? snd_seq_prioq_new+0x47/0xa0 [ 253.596632][ T8036] snd_seq_prioq_new+0x47/0xa0 [ 253.596652][ T8036] snd_seq_queue_alloc+0x137/0x730 [ 253.596670][ T8036] ? clientptr+0x17/0x160 [ 253.596713][ T8036] snd_seq_ioctl_create_queue+0x7f/0x3c0 [ 253.596752][ T8036] snd_seq_oss_open+0x657/0xf40 [ 253.596794][ T8036] ? __pfx_snd_seq_oss_open+0x10/0x10 [ 253.596858][ T8036] ? rcu_is_watching+0x16/0xb0 [ 253.596880][ T8036] ? trace_contention_end+0x3d/0x140 [ 253.596922][ T8036] ? __pfx___mutex_lock+0x10/0x10 [ 253.596956][ T8036] ? __pfx_snd_seq_oss_event_input+0x10/0x10 [ 253.596972][ T8036] ? __pfx_free_devinfo+0x10/0x10 [ 253.596985][ T8036] ? do_raw_spin_unlock+0xf5/0x200 [ 253.597023][ T8036] ? soundcore_open+0x2da/0x490 [ 253.597049][ T8036] odev_open+0x67/0xa0 [ 253.597080][ T8036] chrdev_open+0x4d9/0x600 [ 253.597124][ T8036] ? __pfx_chrdev_open+0x10/0x10 [ 253.597144][ T8036] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 253.597202][ T8036] ? __pfx_chrdev_open+0x10/0x10 [ 253.597230][ T8036] do_dentry_open+0x816/0x1380 [ 253.597270][ T8036] vfs_open+0x3b/0x340 [ 253.597308][ T8036] ? path_openat+0x1428/0x1d60 [ 253.597327][ T8036] path_openat+0x1443/0x1d60 [ 253.597382][ T8036] do_file_open+0x23e/0x4a0 [ 253.597428][ T8036] ? __pfx_do_file_open+0x10/0x10 [ 253.597471][ T8036] ? _raw_spin_unlock+0x28/0x50 [ 253.597491][ T8036] ? alloc_fd+0x651/0x6c0 [ 253.597549][ T8036] do_sys_openat2+0x115/0x200 [ 253.597579][ T8036] ? __fget_files+0x3a2/0x420 [ 253.597602][ T8036] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.597627][ T8036] ? fput+0xa0/0xd0 [ 253.597648][ T8036] ? ksys_write+0x242/0x270 [ 253.597690][ T8036] __ia32_compat_sys_openat+0x131/0x160 [ 253.597727][ T8036] __do_fast_syscall_32+0x27a/0x6a0 [ 253.597756][ T8036] ? do_fast_syscall_32+0x33/0x70 [ 253.597771][ T8036] ? asm_int80_emulation+0x1a/0x20 [ 253.597785][ T8036] ? do_int80_emulation+0x299/0x500 [ 253.597799][ T8036] ? trace_irq_disable+0x3b/0x140 [ 253.597846][ T8036] do_fast_syscall_32+0x33/0x70 [ 253.597867][ T8036] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 253.597892][ T8036] RIP: 0023:0xf7f170ec [ 253.597916][ T8036] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 253.597929][ T8036] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000127 [ 253.597950][ T8036] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 0000000080000000 [ 253.597962][ T8036] RDX: 0000000000080383 RSI: 0000000000000000 RDI: 0000000000000000 [ 253.597989][ T8036] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 253.598002][ T8036] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 253.598015][ T8036] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 253.598044][ T8036] [ 253.968539][ T9] io_ti 5-1:2.68: required endpoints missing [ 254.011256][ T9] usb 5-1: USB disconnect, device number 20 [ 254.400053][ T5346] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 254.579679][ T5346] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 254.590903][ T8049] netlink: 4 bytes leftover after parsing attributes in process `syz.2.706'. [ 254.618872][ T5346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.640756][ T5346] usb 1-1: config 0 descriptor?? [ 254.682150][ T8054] input: syz0 as /devices/virtual/input/input45 [ 254.876560][ T8062] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 254.894810][ T8062] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.304246][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.715'. [ 255.711995][ T1305] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.719163][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.919755][ T5694] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 255.982945][ T29] kauditd_printk_skb: 79 callbacks suppressed [ 255.982965][ T29] audit: type=1326 audit(1787201336.016:11520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 256.097600][ T29] audit: type=1326 audit(1787201336.016:11521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 256.147811][ T5694] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 256.193719][ T29] audit: type=1326 audit(1787201336.066:11522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 256.221964][ T5694] usb 2-1: config 128 interface 0 has no altsetting 0 [ 256.248987][ T5694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.343509][ T29] audit: type=1326 audit(1787201336.066:11523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 256.459948][ T187] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 256.495810][ T29] audit: type=1326 audit(1787201336.086:11524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71874eb code=0x7ffc0000 [ 256.538770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 256.573577][ T5694] usb 2-1: string descriptor 0 read error: -71 [ 256.581550][ T29] audit: type=1326 audit(1787201336.086:11525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 256.627421][ T29] audit: type=1326 audit(1787201336.086:11526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 256.701557][ T5694] usb 2-1: selecting invalid altsetting 3 [ 256.726517][ T5694] comedi comedi5: could not set alternate setting 3 in high speed [ 256.730328][ T29] audit: type=1326 audit(1787201336.106:11527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 256.761385][ T187] usb 3-1: Using ep0 maxpacket: 16 [ 256.774348][ T5694] usbduxsigma 2-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 256.782609][ T29] audit: type=1326 audit(1787201336.106:11528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f840ec code=0x7ffc0000 [ 256.815272][ T187] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 256.830964][ T187] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 256.843727][ T29] audit: type=1326 audit(1787201336.106:11529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8093 comm="syz.4.722" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71874eb code=0x7ffc0000 [ 256.876074][ T187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.890560][ T187] usb 3-1: Product: syz [ 256.900286][ T5694] usbduxsigma 2-1:128.0: probe with driver usbduxsigma failed with error -22 [ 256.910308][ T187] usb 3-1: Manufacturer: syz [ 256.921080][ T187] usb 3-1: SerialNumber: syz [ 256.939864][ T5694] usb 2-1: USB disconnect, device number 21 [ 256.982756][ T187] r8152-cfgselector 3-1: Unknown version 0x0000 [ 257.008691][ T187] r8152-cfgselector 3-1: config 0 descriptor?? [ 257.234072][ T8112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.724'. [ 257.374518][ T5346] usb 1-1: Cannot set autoneg [ 257.379632][ T5346] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 257.400039][ T8112] netlink: 88 bytes leftover after parsing attributes in process `syz.3.724'. [ 257.459312][ T5346] usb 1-1: USB disconnect, device number 20 [ 257.499174][ T8112] netlink: 76 bytes leftover after parsing attributes in process `syz.3.724'. [ 257.583905][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.727'. [ 257.768972][ T8120] input: syz0 as /devices/virtual/input/input46 [ 258.863589][ T5752] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 259.049526][ T5752] usb 2-1: Using ep0 maxpacket: 8 [ 259.076003][ T5752] usb 2-1: New USB device found, idVendor=5140, idProduct=5015, bcdDevice= 0.00 [ 259.124055][ T5752] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.198445][ T5752] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 259.246240][ T5752] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.293037][ T5752] usb 2-1: config 0 descriptor?? [ 259.384176][ T187] r8152-cfgselector 3-1: Unknown version 0x0000 [ 259.420891][ T187] r8152-cfgselector 3-1: No union descriptors [ 259.496377][ T187] r8152-cfgselector 3-1: USB disconnect, device number 20 [ 259.719723][ T8135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 259.728685][ T8135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 259.743175][ T8135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 259.750041][ T8135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 259.764089][ T8135] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 259.770744][ T8139] fuse: Bad value for 'fd' [ 259.850928][ T8143] GUP no longer grows the stack in syz.1.730 (8143): 80007000-80008000 (80004000) [ 259.875037][ T8143] CPU: 0 UID: 0 PID: 8143 Comm: syz.1.730 Tainted: G L syzkaller #0 PREEMPT(full) [ 259.875075][ T8143] Tainted: [L]=SOFTLOCKUP [ 259.875084][ T8143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 259.875098][ T8143] Call Trace: [ 259.875108][ T8143] [ 259.875117][ T8143] dump_stack_lvl+0xe8/0x150 [ 259.875156][ T8143] fixup_user_fault+0x637/0x6f0 [ 259.875190][ T8143] fault_in_user_writeable+0x71/0xd0 [ 259.875229][ T8143] futex_lock_pi+0x7bd/0xac0 [ 259.875254][ T8143] ? futex_unqueue+0x211/0x240 [ 259.875299][ T8143] ? __pfx_futex_lock_pi+0x10/0x10 [ 259.875354][ T8143] ? __pfx_futex_wake_mark+0x10/0x10 [ 259.875397][ T8143] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 259.875430][ T8143] do_futex+0x330/0x4e0 [ 259.875460][ T8143] ? __pfx_do_futex+0x10/0x10 [ 259.875482][ T8143] ? __vm_munmap+0x2fe/0x3e0 [ 259.875514][ T8143] __se_sys_futex_time32+0x3ab/0x440 [ 259.875548][ T8143] ? __pfx___se_sys_futex_time32+0x10/0x10 [ 259.875572][ T8143] ? rcu_is_watching+0x16/0xb0 [ 259.875614][ T8143] ? __ia32_sys_futex_time32+0x21/0xf0 [ 259.875644][ T8143] __do_fast_syscall_32+0x27a/0x6a0 [ 259.875671][ T8143] ? do_fast_syscall_32+0x33/0x70 [ 259.875692][ T8143] ? asm_int80_emulation+0x1a/0x20 [ 259.875714][ T8143] ? do_int80_emulation+0x299/0x500 [ 259.875742][ T8143] ? trace_irq_disable+0x3b/0x140 [ 259.875777][ T8143] do_fast_syscall_32+0x33/0x70 [ 259.875808][ T8143] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 259.875848][ T8143] RIP: 0023:0xf7f650ec [ 259.875868][ T8143] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 259.875886][ T8143] RSP: 002b:00000000f540550c EFLAGS: 00000206 ORIG_RAX: 00000000000000f0 [ 259.875910][ T8143] RAX: ffffffffffffffda RBX: 0000000080004000 RCX: 000000000000008d [ 259.875926][ T8143] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000000 [ 259.875938][ T8143] RBP: 0000000000000082 R08: 0000000000000000 R09: 0000000000000000 [ 259.875952][ T8143] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 259.875965][ T8143] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 259.875994][ T8143] [ 260.659815][ T8152] FAULT_INJECTION: forcing a failure. [ 260.659815][ T8152] name failslab, interval 1, probability 0, space 0, times 0 [ 260.742476][ T8152] CPU: 0 UID: 0 PID: 8152 Comm: syz.2.737 Tainted: G L syzkaller #0 PREEMPT(full) [ 260.742511][ T8152] Tainted: [L]=SOFTLOCKUP [ 260.742519][ T8152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 260.742531][ T8152] Call Trace: [ 260.742540][ T8152] [ 260.742548][ T8152] dump_stack_lvl+0xe8/0x150 [ 260.742587][ T8152] should_fail_ex+0x410/0x560 [ 260.742616][ T8152] should_failslab+0xa8/0x100 [ 260.742653][ T8152] __kmalloc_cache_noprof+0xa8/0x660 [ 260.742686][ T8152] ? snd_virmidi_input_open+0xb4/0x3a0 [ 260.742718][ T8152] ? snd_virmidi_input_open+0xb4/0x3a0 [ 260.742796][ T8152] snd_virmidi_input_open+0xb4/0x3a0 [ 260.742835][ T8152] open_substream+0x3f5/0x780 [ 260.742867][ T8152] rawmidi_open_priv+0x93/0x630 [ 260.742890][ T8152] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 260.742927][ T8152] snd_rawmidi_open+0x41c/0xac0 [ 260.742965][ T8152] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 260.742993][ T8152] ? __pfx_default_wake_function+0x10/0x10 [ 260.743034][ T8152] chrdev_open+0x4d9/0x600 [ 260.743065][ T8152] ? __pfx_chrdev_open+0x10/0x10 [ 260.743094][ T8152] ? fsnotify_open_perm_and_set_mode+0x135/0x6b0 [ 260.743129][ T8152] ? __pfx_chrdev_open+0x10/0x10 [ 260.743162][ T8152] do_dentry_open+0x816/0x1380 [ 260.743204][ T8152] vfs_open+0x3b/0x340 [ 260.743236][ T8152] ? path_openat+0x1428/0x1d60 [ 260.743270][ T8152] path_openat+0x1443/0x1d60 [ 260.743315][ T8152] do_file_open+0x23e/0x4a0 [ 260.743347][ T8152] ? __pfx_do_file_open+0x10/0x10 [ 260.743396][ T8152] ? _raw_spin_unlock+0x28/0x50 [ 260.743425][ T8152] ? alloc_fd+0x651/0x6c0 [ 260.743468][ T8152] do_sys_openat2+0x115/0x200 [ 260.743503][ T8152] ? __pfx_do_sys_openat2+0x10/0x10 [ 260.743536][ T8152] ? ksys_write+0x242/0x270 [ 260.743562][ T8152] ? __pfx_ksys_write+0x10/0x10 [ 260.743590][ T8152] __ia32_compat_sys_openat+0x131/0x160 [ 260.743629][ T8152] do_int80_emulation+0x198/0x500 [ 260.743649][ T8152] ? trace_irq_disable+0x3b/0x140 [ 260.743679][ T8152] ? asm_int80_emulation+0x1a/0x20 [ 260.743701][ T8152] ? clear_bhb_loop+0x70/0xc0 [ 260.743723][ T8152] ? clear_bhb_loop+0x70/0xc0 [ 260.743749][ T8152] asm_int80_emulation+0x1a/0x20 [ 260.743770][ T8152] RIP: 0023:0xf71174eb [ 260.743798][ T8152] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 260.743816][ T8152] RSP: 002b:00000000f53d603c EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 260.743838][ T8152] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f53d6100 [ 260.743853][ T8152] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 260.743866][ T8152] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 260.743878][ T8152] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 260.743890][ T8152] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 260.743921][ T8152] [ 260.931769][ T8155] fuse: Bad value for 'user_id' [ 261.201220][ T8155] fuse: Bad value for 'user_id' [ 261.656569][ T5752] usbhid 2-1:0.0: can't add hid device: -71 [ 261.687041][ T5752] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 261.732565][ T5752] usb 2-1: USB disconnect, device number 22 [ 261.798916][ T5624] Bluetooth: hci3: command 0x0406 tx timeout [ 261.805048][ T5628] Bluetooth: hci2: command 0x0406 tx timeout [ 261.805079][ T4930] Bluetooth: hci0: command 0x0406 tx timeout [ 261.811154][ T5628] Bluetooth: hci1: command 0x0406 tx timeout [ 261.811437][ T5615] Bluetooth: hci4: command 0x0406 tx timeout [ 261.954957][ T8180] ip6tnl1: entered promiscuous mode [ 262.443752][ T8196] netlink: 'syz.4.747': attribute type 12 has an invalid length. [ 262.475867][ T8196] netlink: 'syz.4.747': attribute type 29 has an invalid length. [ 262.501344][ T8196] netlink: 148 bytes leftover after parsing attributes in process `syz.4.747'. [ 262.528364][ T8196] netlink: 59 bytes leftover after parsing attributes in process `syz.4.747'. [ 263.148906][ T5613] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 263.359935][ T5613] usb 3-1: Using ep0 maxpacket: 32 [ 263.366974][ T5613] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 263.395992][ T5613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.407479][ T5613] usb 3-1: Product: syz [ 263.411318][ T5346] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 263.413137][ T5613] usb 3-1: Manufacturer: syz [ 263.425510][ T5613] usb 3-1: SerialNumber: syz [ 263.433380][ T5613] usb 3-1: config 0 descriptor?? [ 263.568870][ T5346] usb 4-1: device descriptor read/64, error -71 [ 263.786779][ T8224] netlink: 4 bytes leftover after parsing attributes in process `syz.0.758'. [ 263.828882][ T5711] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 263.830426][ T5346] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 263.858217][ T5613] airspy 3-1:0.0: Board ID: 00 [ 263.873596][ T5613] airspy 3-1:0.0: Firmware version: [ 263.999056][ T5346] usb 4-1: device descriptor read/64, error -71 [ 264.021175][ T5711] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 264.054595][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.079010][ T5711] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.108888][ T5711] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.110854][ T5346] usb usb4-port1: attempt power cycle [ 264.143762][ T5711] usb 2-1: config 0 descriptor?? [ 264.394239][ T5613] airspy 3-1:0.0: usb_control_msg() failed -71 request 0e [ 264.418097][ T5613] airspy 3-1:0.0: Registered as swradio24 [ 264.424336][ T5613] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 264.443268][ T5613] usb 3-1: USB disconnect, device number 21 [ 264.479428][ T5346] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 264.520953][ T5346] usb 4-1: device descriptor read/8, error -71 [ 264.661700][ T5711] usbhid 2-1:0.0: can't add hid device: -71 [ 264.673107][ T5711] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 264.691938][ T5711] usb 2-1: USB disconnect, device number 23 [ 264.768864][ T5346] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 264.789614][ T5346] usb 4-1: device descriptor read/8, error -71 [ 264.912457][ T5346] usb usb4-port1: unable to enumerate USB device [ 264.990330][ T8229] batadv_slave_1: entered promiscuous mode [ 264.997631][ T8228] batadv_slave_1: left promiscuous mode [ 265.489133][ T5346] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 265.618892][ T5346] usb 3-1: device descriptor read/64, error -71 [ 265.869161][ T5346] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 265.998842][ T5346] usb 3-1: device descriptor read/64, error -71 [ 266.109213][ T5346] usb usb3-port1: attempt power cycle [ 266.216264][ T29] kauditd_printk_skb: 100 callbacks suppressed [ 266.216694][ T29] audit: type=1326 audit(1787201346.246:11630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.3.764" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 266.248021][ T29] audit: type=1326 audit(1787201346.246:11631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.3.764" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 266.274064][ T29] audit: type=1326 audit(1787201346.246:11632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.3.764" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 266.307421][ T29] audit: type=1326 audit(1787201346.246:11633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.3.764" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 266.344395][ T29] audit: type=1326 audit(1787201346.256:11634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.3.764" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 266.369417][ T29] audit: type=1326 audit(1787201346.336:11635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.3.764" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 266.401817][ T29] audit: type=1326 audit(1787201346.336:11636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.3.764" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 266.431427][ T29] audit: type=1326 audit(1787201346.336:11637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.3.764" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 266.455919][ T5346] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 266.464261][ T29] audit: type=1326 audit(1787201346.386:11638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.3.764" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 266.491601][ T5346] usb 3-1: device descriptor read/8, error -71 [ 266.510650][ T8243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.763'. [ 266.525607][ T29] audit: type=1326 audit(1787201346.386:11639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8239 comm="syz.3.764" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71374eb code=0x7ffc0000 [ 266.749453][ T5346] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 266.789549][ T5346] usb 3-1: device descriptor read/8, error -71 [ 266.901702][ T5346] usb usb3-port1: unable to enumerate USB device [ 267.114703][ T8258] netlink: 16 bytes leftover after parsing attributes in process `syz.4.770'. [ 267.209849][ T5346] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 267.361450][ T8262] netlink: 32 bytes leftover after parsing attributes in process `syz.4.771'. [ 267.398993][ T5346] usb 1-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 267.410252][ T8262] netlink: 16 bytes leftover after parsing attributes in process `syz.4.771'. [ 267.423373][ T5346] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 267.437502][ T5346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.449174][ T5346] usb 1-1: Product: syz [ 267.453590][ T5346] usb 1-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 267.474497][ T5346] usb 1-1: SerialNumber: syz [ 268.035482][ T5711] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 268.202620][ T5711] usb 2-1: device descriptor read/64, error -71 [ 268.430061][ T5695] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 268.498936][ T5711] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 268.522165][ T8276] netlink: 4 bytes leftover after parsing attributes in process `syz.2.776'. [ 268.602722][ T5695] usb 4-1: not running at top speed; connect to a high speed hub [ 268.618911][ T5695] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 268.640590][ T5695] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 268.649455][ T5711] usb 2-1: device descriptor read/64, error -71 [ 268.682892][ T5695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.694152][ T5695] usb 4-1: Product: syz [ 268.702735][ T5695] usb 4-1: Manufacturer: syz [ 268.712301][ T5695] usb 4-1: SerialNumber: syz [ 268.793847][ T5711] usb usb2-port1: attempt power cycle [ 268.958435][ T8272] netlink: 'syz.3.775': attribute type 2 has an invalid length. [ 268.995740][ T8272] netlink: 'syz.3.775': attribute type 2 has an invalid length. [ 269.026700][ T8272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.775'. [ 269.070349][ T8273] tipc: Enabling of bearer rejected, failed to enable media [ 269.158914][ T5711] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 269.199651][ T5711] usb 2-1: device descriptor read/8, error -71 [ 269.234839][ T8273] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.292354][ T8272] macvtap1: entered promiscuous mode [ 269.300611][ T8273] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.316494][ T8272] dummy0: entered promiscuous mode [ 269.330748][ T8272] macvtap1: entered allmulticast mode [ 269.342599][ T8272] dummy0: entered allmulticast mode [ 269.448977][ T5711] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 269.481308][ T5711] usb 2-1: device descriptor read/8, error -71 [ 269.499251][ T5695] usb 4-1: USB disconnect, device number 37 [ 269.599674][ T5711] usb usb2-port1: unable to enumerate USB device [ 270.083957][ T5346] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 270.099363][ T5346] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 270.449848][ T5346] usb 1-1: USB disconnect, device number 21 [ 270.494258][ T8294] netlink: 'syz.3.781': attribute type 12 has an invalid length. [ 270.535398][ T8294] netlink: 'syz.3.781': attribute type 29 has an invalid length. [ 270.567830][ T8294] netlink: 148 bytes leftover after parsing attributes in process `syz.3.781'. [ 270.592153][ T8294] netlink: 59 bytes leftover after parsing attributes in process `syz.3.781'. [ 270.640350][ T7339] udevd[7339]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 270.999006][ T5613] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 271.181425][ T5613] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 271.218289][ T5613] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 271.253528][ T5613] usb 5-1: config 0 has no interface number 0 [ 271.279142][ T5613] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 271.309285][ T5613] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 271.356269][ T5613] usb 5-1: config 0 interface 255 has no altsetting 0 [ 271.391190][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.419052][ T5613] usb 5-1: Product: syz [ 271.435772][ T5613] usb 5-1: Manufacturer: syz [ 271.455033][ T5613] usb 5-1: SerialNumber: syz [ 271.505869][ T5613] usb 5-1: config 0 descriptor?? [ 271.988063][ T5346] usb 5-1: USB disconnect, device number 21 [ 272.305428][ T8306] ptrace attach of "ci-upstream-kasan-gce-386/syz-executor exec"[8307] was attempted by "ci-upstream-kasan-gce-386/syz-executor exec"[8306] [ 272.422906][ T8316] netlink: 32 bytes leftover after parsing attributes in process `syz.1.786'. [ 272.432497][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 272.432510][ T29] audit: type=1800 audit(1787201352.456:11654): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.784" name="SYSV00000000" dev="tmpfs" ino=2 res=0 errno=0 [ 272.469554][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.784'. [ 272.497435][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 272.518315][ T8316] netlink: 88 bytes leftover after parsing attributes in process `syz.1.786'. [ 272.536526][ T8316] netlink: 76 bytes leftover after parsing attributes in process `syz.1.786'. [ 272.913170][ T5711] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 273.081839][ T5711] usb 3-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 273.093713][ T5613] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 273.127854][ T5711] usb 3-1: config 128 interface 0 has no altsetting 0 [ 273.139156][ T5711] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.279904][ T5613] usb 5-1: New USB device found, idVendor=041e, idProduct=3042, bcdDevice= 0.40 [ 273.329371][ T5613] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 273.369271][ T5613] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.398197][ T5711] usb 3-1: string descriptor 0 read error: -71 [ 273.408690][ T5613] usb 5-1: Product: syz [ 273.427631][ T5613] usb 5-1: Manufacturer: 췗镪ӝᱟ帬ꨱ鍾܇涓岑誥䑎ṃ齎d獚﫡ᵳ阛䏰죋⹙㋗纹꯲搜豨먾믖ꊺ媎᣽㶩弈돸師尓啞褫ᤗꓽ [ 273.490938][ T8330] [U] [ 273.493819][ T8330] [U] [ 273.496556][ T8330] [U] [ 273.499259][ T8330] [U] [ 273.508112][ T5711] usb 3-1: selecting invalid altsetting 3 [ 273.514098][ T5613] usb 5-1: SerialNumber: syz [ 273.526177][ T5711] comedi comedi5: could not set alternate setting 3 in high speed [ 273.550421][ T5711] usbduxsigma 3-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 273.581053][ T8330] [U] [ 273.583866][ T8330] [U] [ 273.586611][ T8330] [U] [ 273.589349][ T8330] [U] [ 273.604875][ T5711] usbduxsigma 3-1:128.0: probe with driver usbduxsigma failed with error -22 [ 273.647729][ T5711] usb 3-1: USB disconnect, device number 26 [ 273.670013][ T8330] [U] [ 273.672791][ T8330] [U] [ 273.675540][ T8330] [U] [ 273.733679][ T8329] [U] [ 273.865424][ T8327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.792'. [ 273.890498][ T8327] netlink: 288 bytes leftover after parsing attributes in process `syz.0.792'. [ 275.072446][ T8356] netlink: 32 bytes leftover after parsing attributes in process `syz.2.801'. [ 275.194073][ T8356] netlink: 88 bytes leftover after parsing attributes in process `syz.2.801'. [ 275.293852][ T8358] netlink: 76 bytes leftover after parsing attributes in process `syz.2.801'. [ 275.996693][ T5613] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 276.040433][ T5613] usb 5-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 276.252947][ T8372] program syz.4.804 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 276.429800][ T5613] usb 5-1: USB disconnect, device number 22 [ 277.046115][ T8385] netlink: 32 bytes leftover after parsing attributes in process `syz.1.808'. [ 277.148813][ T5613] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 277.212552][ T8389] netlink: 88 bytes leftover after parsing attributes in process `syz.1.808'. [ 277.274605][ T8385] netlink: 76 bytes leftover after parsing attributes in process `syz.1.808'. [ 277.314150][ T5613] usb 5-1: Using ep0 maxpacket: 8 [ 277.333834][ T5613] usb 5-1: New USB device found, idVendor=5140, idProduct=5015, bcdDevice= 0.00 [ 277.357887][ T5613] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.377221][ T5613] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 277.426348][ T5613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.464792][ T5613] usb 5-1: config 0 descriptor?? [ 277.628651][ T8387] netlink: 'syz.0.809': attribute type 12 has an invalid length. [ 277.649250][ T8387] netlink: 'syz.0.809': attribute type 29 has an invalid length. [ 277.682288][ T8387] netlink: 148 bytes leftover after parsing attributes in process `syz.0.809'. [ 277.689202][ T5752] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 277.723039][ T8387] netlink: 59 bytes leftover after parsing attributes in process `syz.0.809'. [ 277.874584][ T5752] usb 3-1: not running at top speed; connect to a high speed hub [ 277.896397][ T5752] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 277.917371][ T5752] usb 3-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 277.939893][ T5752] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.959749][ T5752] usb 3-1: Product: syz [ 277.976510][ T5752] usb 3-1: Manufacturer: syz [ 277.993981][ T5752] usb 3-1: SerialNumber: syz [ 278.293323][ T8395] netlink: 'syz.2.812': attribute type 2 has an invalid length. [ 278.361541][ T8395] netlink: 'syz.2.812': attribute type 2 has an invalid length. [ 278.475754][ T8395] macvtap1: entered promiscuous mode [ 278.499003][ T8395] dummy0: entered promiscuous mode [ 278.524594][ T8395] macvtap1: entered allmulticast mode [ 278.567779][ T8395] dummy0: entered allmulticast mode [ 278.580157][ T8397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 278.612833][ T8397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 278.787791][ T5752] usb 3-1: USB disconnect, device number 27 [ 278.829045][ T6150] udevd[6150]: setting mode of /dev/bus/usb/003/027 to 020664 failed: No such file or directory [ 278.874428][ T6150] udevd[6150]: setting owner of /dev/bus/usb/003/027 to uid=0, gid=0 failed: No such file or directory [ 279.453370][ T8422] fuse: Bad value for 'fd' [ 279.702327][ T5613] usbhid 5-1:0.0: can't add hid device: -71 [ 279.743211][ T5613] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 279.803515][ T5613] usb 5-1: USB disconnect, device number 23 [ 280.174712][ T8438] netlink: 'syz.1.819': attribute type 12 has an invalid length. [ 280.213490][ T8438] netlink: 'syz.1.819': attribute type 29 has an invalid length. [ 280.253891][ T8438] __nla_validate_parse: 2 callbacks suppressed [ 280.253911][ T8438] netlink: 148 bytes leftover after parsing attributes in process `syz.1.819'. [ 280.323350][ T8438] netlink: 59 bytes leftover after parsing attributes in process `syz.1.819'. [ 280.946069][ T8435] netlink: 'syz.4.818': attribute type 12 has an invalid length. [ 280.991895][ T8435] netlink: 'syz.4.818': attribute type 29 has an invalid length. [ 281.068967][ T8435] netlink: 148 bytes leftover after parsing attributes in process `syz.4.818'. [ 281.131444][ T8435] netlink: 59 bytes leftover after parsing attributes in process `syz.4.818'. [ 281.727714][ T8449] netlink: 'syz.2.825': attribute type 12 has an invalid length. [ 281.782845][ T8449] netlink: 'syz.2.825': attribute type 29 has an invalid length. [ 281.815166][ T8449] netlink: 148 bytes leftover after parsing attributes in process `syz.2.825'. [ 281.836475][ T8449] netlink: 59 bytes leftover after parsing attributes in process `syz.2.825'. [ 281.868916][ T5752] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 282.029712][ T5752] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 282.062676][ T5752] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.080595][ T5752] usb 2-1: Product: syz [ 282.094360][ T5752] usb 2-1: Manufacturer: syz [ 282.111333][ T5752] usb 2-1: SerialNumber: syz [ 282.497612][ T5711] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 282.757727][ T8458] syz.2.827: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 282.874877][ T8458] CPU: 0 UID: 0 PID: 8458 Comm: syz.2.827 Tainted: G L syzkaller #0 PREEMPT(full) [ 282.874914][ T8458] Tainted: [L]=SOFTLOCKUP [ 282.874922][ T8458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 282.874941][ T8458] Call Trace: [ 282.874947][ T8458] [ 282.874954][ T8458] dump_stack_lvl+0xe8/0x150 [ 282.874982][ T8458] warn_alloc+0x24c/0x270 [ 282.875033][ T8458] ? __pfx_warn_alloc+0x10/0x10 [ 282.875064][ T8458] ? trace_kmalloc+0x2a/0xf0 [ 282.875096][ T8458] ? alloc_pages_mpol+0x24a/0x390 [ 282.875131][ T8458] __vmalloc_node_range_noprof+0x1175/0x1730 [ 282.875174][ T8458] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 282.875217][ T8458] ? alloc_pages_mpol+0x24a/0x390 [ 282.875240][ T8458] ? rcu_is_watching+0x16/0xb0 [ 282.875271][ T8458] ? rcu_is_watching+0x16/0xb0 [ 282.875291][ T8458] ? kvm_dev_ioctl+0x12b/0x1770 [ 282.875326][ T8458] __kvmalloc_node_noprof+0x5d1/0x870 [ 282.875350][ T8458] ? kvm_dev_ioctl+0x12b/0x1770 [ 282.875394][ T8458] ? _raw_spin_unlock+0x28/0x50 [ 282.875429][ T8458] ? kvm_dev_ioctl+0x12b/0x1770 [ 282.875468][ T8458] kvm_dev_ioctl+0x12b/0x1770 [ 282.875506][ T8458] ? __fget_files+0x2a/0x420 [ 282.875523][ T8458] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 282.875569][ T8458] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 282.875603][ T8458] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 282.875635][ T8458] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 282.875675][ T8458] ? __se_sys_futex_time32+0x3ab/0x440 [ 282.875698][ T8458] ? rcu_is_watching+0x16/0xb0 [ 282.875721][ T8458] __do_fast_syscall_32+0x27a/0x6a0 [ 282.875757][ T8458] ? do_fast_syscall_32+0x33/0x70 [ 282.875780][ T8458] ? asm_int80_emulation+0x1a/0x20 [ 282.875802][ T8458] ? do_int80_emulation+0x299/0x500 [ 282.875834][ T8458] ? trace_irq_disable+0x3b/0x140 [ 282.875869][ T8458] do_fast_syscall_32+0x33/0x70 [ 282.875884][ T8458] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 282.875903][ T8458] RIP: 0023:0xf7f170ec [ 282.875930][ T8458] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 282.875949][ T8458] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 282.875971][ T8458] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 000000000000ae01 [ 282.875986][ T8458] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.875999][ T8458] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 282.876010][ T8458] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 282.876022][ T8458] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 282.876050][ T8458] [ 282.876075][ T8458] Mem-Info: [ 282.938843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 282.948915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 283.018923][ T8458] active_anon:9357 inactive_anon:12 isolated_anon:0 [ 283.018923][ T8458] active_file:261 inactive_file:44083 isolated_file:0 [ 283.018923][ T8458] unevictable:0 dirty:22 writeback:0 [ 283.018923][ T8458] slab_reclaimable:7516 slab_unreclaimable:98467 [ 283.018923][ T8458] mapped:34278 shmem:3553 pagetables:1457 [ 283.018923][ T8458] sec_pagetables:0 bounce:0 [ 283.018923][ T8458] kernel_misc_reclaimable:0 [ 283.018923][ T8458] free:1322341 free_pcp:9467 free_cma:0 [ 283.268458][ T8458] Node 0 active_anon:38128kB inactive_anon:48kB active_file:1044kB inactive_file:177156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:136312kB dirty:88kB writeback:0kB shmem:15012kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12936kB pagetables:5708kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.365597][ T8458] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 283.458786][ T8458] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.511757][ T8458] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 283.517611][ T8458] Node 0 DMA32 free:1331332kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33700kB inactive_anon:48kB active_file:1044kB inactive_file:177284kB unevictable:0kB writepending:88kB zspages:1144kB present:3129332kB managed:2548176kB mlocked:0kB bounce:0kB free_pcp:38704kB local_pcp:19804kB free_cma:0kB [ 283.572298][ T8458] lowmem_reserve[]: 0 0 0 0 0 [ 283.603616][ T8458] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.634833][ T5711] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 283.667762][ T5711] ath9k_htc: Failed to initialize the device [ 283.672639][ T8458] lowmem_reserve[]: 0 0 0 0 0 [ 283.679502][ T8458] Node 1 Normal free:3944912kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 283.755689][ T8458] lowmem_reserve[]: 0 0 0 0 0 [ 283.762492][ T5711] usb 2-1: ath9k_htc: USB layer deinitialized [ 283.776087][ T8458] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 283.803827][ T8470] program syz.0.831 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 283.819064][ T8458] Node 0 DMA32: 428*4kB (UME) 709*8kB (UM) 633*16kB (UME) 301*32kB (UME) 201*64kB (UME) 98*128kB (UM) 79*256kB (UM) 43*512kB (UME) 16*1024kB (ME) 4*2048kB (UM) 296*4096kB (UM) = 1331784kB [ 283.862660][ T8458] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 283.885864][ T8458] Node 1 Normal: 0*4kB 6*8kB (UM) 8*16kB (UM) 7*32kB (UM) 5*64kB (UM) 4*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944912kB [ 283.913771][ T8458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.931899][ T8458] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.946568][ T8458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 283.978003][ T8458] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 283.993444][ T8458] 48020 total pagecache pages [ 284.000113][ T8458] 11 pages in swap cache [ 284.018820][ T8458] Free swap = 123964kB [ 284.035226][ T8458] Total swap = 124996kB [ 284.052543][ T8458] 2097051 pages RAM [ 284.070614][ T8458] 0 pages HighMem/MovableOnly [ 284.089720][ T8458] 428326 pages reserved [ 284.115626][ T5613] usb 2-1: USB disconnect, device number 28 [ 284.123850][ T8458] 0 pages cma reserved [ 284.241242][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.832'. [ 284.315628][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.833'. [ 285.411804][ T8493] netlink: 'syz.4.837': attribute type 12 has an invalid length. [ 285.450833][ T8493] netlink: 'syz.4.837': attribute type 29 has an invalid length. [ 285.473354][ T8493] netlink: 148 bytes leftover after parsing attributes in process `syz.4.837'. [ 285.510094][ T8493] netlink: 59 bytes leftover after parsing attributes in process `syz.4.837'. [ 286.618986][ T5711] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 286.701464][ T5695] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 286.770533][ T5711] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 286.789938][ T5711] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.809140][ T5711] usb 3-1: Product: syz [ 286.813741][ T5711] usb 3-1: Manufacturer: syz [ 286.818457][ T5711] usb 3-1: SerialNumber: syz [ 286.846664][ T5613] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 286.882047][ T5695] usb 5-1: not running at top speed; connect to a high speed hub [ 286.893888][ T5695] usb 5-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 286.912992][ T5695] usb 5-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 286.936600][ T5695] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.956576][ T5695] usb 5-1: Product: syz [ 286.964119][ T5695] usb 5-1: Manufacturer: syz [ 286.974989][ T5695] usb 5-1: SerialNumber: syz [ 287.217624][ T8507] netlink: 'syz.4.841': attribute type 2 has an invalid length. [ 287.277317][ T8507] netlink: 'syz.4.841': attribute type 2 has an invalid length. [ 287.318409][ T8507] netlink: 8 bytes leftover after parsing attributes in process `syz.4.841'. [ 287.341513][ T8510] tipc: Enabling of bearer rejected, failed to enable media [ 287.479651][ T8507] macvtap1: entered promiscuous mode [ 287.487058][ T8507] dummy0: entered promiscuous mode [ 287.492787][ T8507] macvtap1: entered allmulticast mode [ 287.500740][ T8507] dummy0: entered allmulticast mode [ 287.571190][ T5695] usb 5-1: USB disconnect, device number 24 [ 287.600453][ T8528] netlink: 'syz.3.848': attribute type 12 has an invalid length. [ 287.640652][ T8528] netlink: 'syz.3.848': attribute type 29 has an invalid length. [ 287.671399][ T8528] netlink: 148 bytes leftover after parsing attributes in process `syz.3.848'. [ 287.698823][ T8528] netlink: 59 bytes leftover after parsing attributes in process `syz.3.848'. [ 287.951291][ T5613] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 287.971235][ T5613] ath9k_htc: Failed to initialize the device [ 288.019226][ T5613] usb 3-1: ath9k_htc: USB layer deinitialized [ 288.116196][ T5695] usb 3-1: USB disconnect, device number 28 [ 288.482196][ T8539] netlink: 88 bytes leftover after parsing attributes in process `syz.2.851'. [ 288.514852][ T8539] netlink: 76 bytes leftover after parsing attributes in process `syz.2.851'. [ 288.692257][ T29] audit: type=1326 audit(1787201368.726:11655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.3.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 288.722889][ T29] audit: type=1326 audit(1787201368.756:11656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.3.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 288.753689][ T29] audit: type=1326 audit(1787201368.786:11657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.3.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 288.825337][ T29] audit: type=1326 audit(1787201368.786:11658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.3.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 288.862185][ T29] audit: type=1326 audit(1787201368.786:11659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.3.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 288.889935][ T29] audit: type=1326 audit(1787201368.816:11660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.3.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 288.953058][ T29] audit: type=1326 audit(1787201368.816:11661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.3.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 289.020138][ T29] audit: type=1326 audit(1787201368.816:11662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.3.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 289.079149][ T5712] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 289.099065][ T29] audit: type=1326 audit(1787201368.816:11663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.3.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 289.158871][ T29] audit: type=1326 audit(1787201368.816:11664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8545 comm="syz.3.858" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 289.222975][ T5712] usb 1-1: device descriptor read/64, error -71 [ 289.488813][ T5712] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 289.699911][ T5712] usb 1-1: device descriptor read/64, error -71 [ 289.829243][ T5712] usb usb1-port1: attempt power cycle [ 290.191214][ T5712] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 290.250944][ T5712] usb 1-1: device descriptor read/8, error -71 [ 290.408864][ T5695] usb 3-1: new low-speed USB device number 29 using dummy_hcd [ 290.519000][ T5712] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 290.550429][ T5712] usb 1-1: device descriptor read/8, error -71 [ 290.600860][ T5695] usb 3-1: unable to get BOS descriptor or descriptor too short [ 290.628994][ T5695] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=b2.43 [ 290.659458][ T5695] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 290.679725][ T5712] usb usb1-port1: unable to enumerate USB device [ 291.762931][ T8592] netlink: 'syz.1.870': attribute type 12 has an invalid length. [ 291.797866][ T8592] netlink: 'syz.1.870': attribute type 29 has an invalid length. [ 291.833742][ T8592] netlink: 148 bytes leftover after parsing attributes in process `syz.1.870'. [ 291.870054][ T8592] netlink: 59 bytes leftover after parsing attributes in process `syz.1.870'. [ 292.879117][ T5346] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 293.059065][ T5346] usb 2-1: Using ep0 maxpacket: 8 [ 293.079586][ T5346] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 293.119616][ T5346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.149856][ T5346] usb 2-1: Product: syz [ 293.162162][ T5346] usb 2-1: Manufacturer: syz [ 293.180213][ T5346] usb 2-1: SerialNumber: syz [ 293.215005][ T5346] usb 2-1: config 0 descriptor?? [ 293.252955][ T5346] gspca_main: se401-2.14.0 probing 047d:5003 [ 293.307266][ T5695] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.345543][ T5695] usb 3-1: can't set config #8, error -71 [ 293.371595][ T8604] macvtap1: entered promiscuous mode [ 293.400832][ T5695] usb 3-1: USB disconnect, device number 29 [ 293.409949][ T8604] dummy0: entered promiscuous mode [ 293.450442][ T8604] macvtap1: entered allmulticast mode [ 293.511362][ T8604] dummy0: entered allmulticast mode [ 293.678126][ T5346] gspca_se401: ExtraFeatures: 255 [ 293.703625][ T5346] gspca_se401: Frame size: 0x65535 bayer [ 293.739679][ T5346] gspca_se401: Frame size: 0x0 1/16th janggu [ 293.754265][ T5346] gspca_se401: Frame size: 0x0 1/16th janggu [ 293.892595][ T8600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.929567][ T8600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.987308][ T6671] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.013055][ T6671] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.074221][ T8618] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.288824][ T5712] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 294.418937][ T5695] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 294.468912][ T5712] usb 5-1: Using ep0 maxpacket: 8 [ 294.486107][ T5712] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 294.522042][ T5712] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 294.544724][ T5712] usb 5-1: config 16 has an invalid interface number: 255 but max is 0 [ 294.573050][ T5712] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 294.599607][ T5695] usb 1-1: device descriptor read/64, error -71 [ 294.620405][ T5712] usb 5-1: config 16 has no interface number 0 [ 294.633298][ T5712] usb 5-1: too many endpoints for config 16 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 294.670018][ T5712] usb 5-1: config 16 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 294.708799][ T5712] usb 5-1: config 16 interface 255 has no altsetting 0 [ 294.739156][ T5712] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.789934][ T8628] netlink: 32 bytes leftover after parsing attributes in process `syz.3.882'. [ 294.827776][ T8628] netlink: 88 bytes leftover after parsing attributes in process `syz.3.882'. [ 294.849066][ T5346] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input47 [ 294.870183][ T5695] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 294.898315][ T8628] netlink: 76 bytes leftover after parsing attributes in process `syz.3.882'. [ 295.018828][ T5695] usb 1-1: device descriptor read/64, error -71 [ 295.142429][ T5695] usb usb1-port1: attempt power cycle [ 295.253545][ T8631] IPVS: Error connecting to the multicast addr [ 295.508827][ T187] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 295.516491][ T5695] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 295.555017][ T5695] usb 1-1: device descriptor read/8, error -71 [ 295.689435][ T187] usb 3-1: Using ep0 maxpacket: 8 [ 295.704776][ T187] usb 3-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 295.734190][ T187] usb 3-1: config 0 has an invalid descriptor of length 112, skipping remainder of the config [ 295.748190][ T187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.765546][ T187] usb 3-1: config 0 descriptor?? [ 295.828949][ T5695] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 295.870171][ T5695] usb 1-1: device descriptor read/8, error -71 [ 295.889234][ T5694] usb 2-1: USB disconnect, device number 29 [ 295.974470][ T29] kauditd_printk_skb: 48 callbacks suppressed [ 295.974488][ T29] audit: type=1326 audit(1787201376.006:11713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.885" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 296.021726][ T5695] usb usb1-port1: unable to enumerate USB device [ 296.029367][ T29] audit: type=1326 audit(1787201376.046:11714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.885" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 296.083087][ T187] usb 3-1: string descriptor 0 read error: -71 [ 296.086120][ T29] audit: type=1326 audit(1787201376.046:11715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.885" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 296.150366][ T187] uvcvideo 3-1:0.0: Found UVC 0.00 device (2833:0201) [ 296.160141][ T29] audit: type=1326 audit(1787201376.046:11716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.885" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 296.185208][ T29] audit: type=1326 audit(1787201376.046:11717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.885" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 296.216767][ T187] uvcvideo 3-1:0.0: No valid video chain found. [ 296.253896][ T187] usb 3-1: USB disconnect, device number 30 [ 296.265894][ T29] audit: type=1326 audit(1787201376.046:11718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.885" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 296.296205][ T29] audit: type=1326 audit(1787201376.046:11719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.885" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 296.325129][ T29] audit: type=1326 audit(1787201376.046:11720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.885" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 296.366161][ T29] audit: type=1326 audit(1787201376.046:11721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.885" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 296.390977][ T29] audit: type=1326 audit(1787201376.046:11722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8636 comm="syz.1.885" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f650ec code=0x7ffc0000 [ 296.851070][ T5712] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 296.894622][ T8649] macvtap0: entered promiscuous mode [ 296.909911][ T8649] dummy0: entered promiscuous mode [ 296.931915][ T8649] macvtap0: entered allmulticast mode [ 296.945305][ T8649] dummy0: entered allmulticast mode [ 297.011881][ T5712] usb 4-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 297.034328][ T187] usb 5-1: USB disconnect, device number 25 [ 297.045694][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.071982][ T8651] syz.2.891: vmalloc error: size 12288, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 297.101255][ T5712] usb 4-1: config 0 descriptor?? [ 297.153472][ T5712] pwc: Creative Labs Webcam 5 detected. [ 297.187479][ T8651] CPU: 0 UID: 0 PID: 8651 Comm: syz.2.891 Tainted: G L syzkaller #0 PREEMPT(full) [ 297.187515][ T8651] Tainted: [L]=SOFTLOCKUP [ 297.187523][ T8651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 297.187536][ T8651] Call Trace: [ 297.187544][ T8651] [ 297.187553][ T8651] dump_stack_lvl+0xe8/0x150 [ 297.187590][ T8651] warn_alloc+0x24c/0x270 [ 297.187628][ T8651] ? __pfx_warn_alloc+0x10/0x10 [ 297.187658][ T8651] ? trace_kmalloc+0x2a/0xf0 [ 297.187691][ T8651] ? alloc_pages_mpol+0x24a/0x390 [ 297.187723][ T8651] __vmalloc_node_range_noprof+0x1175/0x1730 [ 297.187782][ T8651] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 297.187821][ T8651] ? alloc_pages_mpol+0x24a/0x390 [ 297.187844][ T8651] ? rcu_is_watching+0x16/0xb0 [ 297.187886][ T8651] ? rcu_is_watching+0x16/0xb0 [ 297.187909][ T8651] ? kvm_dev_ioctl+0x12b/0x1770 [ 297.187946][ T8651] __kvmalloc_node_noprof+0x5d1/0x870 [ 297.187982][ T8651] ? kvm_dev_ioctl+0x12b/0x1770 [ 297.188023][ T8651] ? _raw_spin_unlock+0x28/0x50 [ 297.188058][ T8651] ? kvm_dev_ioctl+0x12b/0x1770 [ 297.188101][ T8651] kvm_dev_ioctl+0x12b/0x1770 [ 297.188140][ T8651] ? __fget_files+0x2a/0x420 [ 297.188166][ T8651] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 297.188208][ T8651] ? bpf_lsm_file_ioctl_compat+0x9/0x20 [ 297.188242][ T8651] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 297.188287][ T8651] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 297.188322][ T8651] ? __se_sys_futex_time32+0x3ab/0x440 [ 297.188355][ T8651] ? rcu_is_watching+0x16/0xb0 [ 297.188389][ T8651] __do_fast_syscall_32+0x27a/0x6a0 [ 297.188412][ T8651] ? do_fast_syscall_32+0x33/0x70 [ 297.188433][ T8651] ? asm_int80_emulation+0x1a/0x20 [ 297.188454][ T8651] ? do_int80_emulation+0x299/0x500 [ 297.188475][ T8651] ? trace_irq_disable+0x3b/0x140 [ 297.188507][ T8651] do_fast_syscall_32+0x33/0x70 [ 297.188530][ T8651] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 297.188557][ T8651] RIP: 0023:0xf7f170ec [ 297.188576][ T8651] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 297.188594][ T8651] RSP: 002b:00000000f53d650c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 297.188617][ T8651] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 000000000000ae01 [ 297.188632][ T8651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 297.188645][ T8651] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 297.188658][ T8651] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 297.188671][ T8651] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 297.188701][ T8651] [ 297.188709][ T8651] Mem-Info: [ 297.639368][ T8651] active_anon:9305 inactive_anon:12 isolated_anon:0 [ 297.639368][ T8651] active_file:535 inactive_file:43835 isolated_file:0 [ 297.639368][ T8651] unevictable:0 dirty:32 writeback:0 [ 297.639368][ T8651] slab_reclaimable:7655 slab_unreclaimable:97482 [ 297.639368][ T8651] mapped:36647 shmem:3373 pagetables:1413 [ 297.639368][ T8651] sec_pagetables:0 bounce:0 [ 297.639368][ T8651] kernel_misc_reclaimable:0 [ 297.639368][ T8651] free:1324070 free_pcp:9739 free_cma:0 [ 297.684932][ T8651] Node 0 active_anon:37220kB inactive_anon:48kB active_file:2140kB inactive_file:175140kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:146588kB dirty:128kB writeback:0kB shmem:13492kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12952kB pagetables:5532kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 297.719436][ T8651] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 297.768765][ T8651] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.801357][ T8651] lowmem_reserve[]: 0 2488 2488 2488 2488 [ 297.818806][ T8651] Node 0 DMA32 free:1336008kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:37320kB inactive_anon:48kB active_file:2140kB inactive_file:175140kB unevictable:0kB writepending:228kB zspages:1144kB present:3129332kB managed:2548176kB mlocked:0kB bounce:0kB free_pcp:39000kB local_pcp:18520kB free_cma:0kB [ 297.878796][ T8651] lowmem_reserve[]: 0 0 0 0 0 [ 297.883698][ T8651] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 297.957818][ T8651] lowmem_reserve[]: 0 0 0 0 0 [ 297.985051][ T8651] Node 1 Normal free:3944912kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 298.019109][ T187] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 298.079756][ T8651] lowmem_reserve[]: 0 0 0 0 0 [ 298.089000][ T8651] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 298.119080][ T8651] Node 0 DMA32: 2883*4kB (UME) 584*8kB (UME) 463*16kB (UME) 256*32kB (UME) 183*64kB (UME) 96*128kB (ME) 88*256kB (UME) 48*512kB (UME) 16*1024kB (ME) 2*2048kB (M) 298*4096kB (UM) = 1343996kB [ 298.150640][ T8651] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 298.170548][ T5712] pwc: recv_control_msg error -32 req 02 val 2700 [ 298.171980][ T187] usb 2-1: not running at top speed; connect to a high speed hub [ 298.187372][ T8651] Node 1 Normal: 0*4kB 6*8kB (UM) 8*16kB (UM) 7*32kB (UM) 5*64kB (UM) 4*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (M) = 3944912kB [ 298.195572][ T187] usb 2-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=60.1b [ 298.229043][ T8651] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.258149][ T187] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 298.258949][ T8651] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.287073][ T187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.300449][ T187] usb 2-1: Product: syz [ 298.304763][ T187] usb 2-1: Manufacturer: syz [ 298.310116][ T187] usb 2-1: SerialNumber: syz [ 298.317895][ T8651] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 298.342875][ T8651] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 298.368895][ T8651] 44924 total pagecache pages [ 298.375311][ T8651] 11 pages in swap cache [ 298.388893][ T8651] Free swap = 123964kB [ 298.394824][ T8651] Total swap = 124996kB [ 298.408833][ T8651] 2097051 pages RAM [ 298.412739][ T8651] 0 pages HighMem/MovableOnly [ 298.417506][ T8651] 428326 pages reserved [ 298.432892][ T8651] 0 pages cma reserved [ 298.554288][ T5712] pwc: recv_control_msg error -71 req 02 val 2c00 [ 298.564317][ T5712] pwc: recv_control_msg error -71 req 04 val 1000 [ 298.582613][ T8657] netlink: 'syz.1.894': attribute type 2 has an invalid length. [ 298.589644][ T5712] pwc: recv_control_msg error -71 req 04 val 1300 [ 298.620163][ T5712] pwc: recv_control_msg error -71 req 04 val 1400 [ 298.628589][ T8657] netlink: 'syz.1.894': attribute type 2 has an invalid length. [ 298.652566][ T5712] pwc: recv_control_msg error -71 req 02 val 2000 [ 298.666004][ T8657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.894'. [ 298.678045][ T8663] tipc: Enabling of bearer rejected, failed to enable media [ 298.690504][ T5712] pwc: recv_control_msg error -71 req 02 val 2100 [ 298.698046][ T5712] pwc: recv_control_msg error -71 req 06 val 0600 [ 298.705598][ T5712] pwc: recv_control_msg error -71 req 04 val 1500 [ 298.713023][ T5712] pwc: recv_control_msg error -71 req 02 val 2500 [ 298.720277][ T5712] pwc: recv_control_msg error -71 req 02 val 2400 [ 298.736560][ T5712] pwc: recv_control_msg error -71 req 02 val 2600 [ 298.766146][ T5712] pwc: recv_control_msg error -71 req 02 val 2900 [ 298.810455][ T5712] pwc: recv_control_msg error -71 req 02 val 2800 [ 298.819926][ T8657] macvtap1: entered promiscuous mode [ 298.836953][ T5712] pwc: recv_control_msg error -71 req 04 val 1100 [ 298.852794][ T8657] macvtap1: entered allmulticast mode [ 298.859627][ T5712] pwc: recv_control_msg error -71 req 04 val 1200 [ 298.872845][ T5712] pwc: Failed to power off camera (-71) [ 298.921171][ T5712] pwc: Registered as video103. [ 298.937616][ T187] videodev: could not get a free minor [ 298.966971][ T5712] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input48 [ 298.974181][ T187] dsbr100 2-1:9.0: couldn't register video device [ 299.016600][ T187] dsbr100 2-1:9.0: probe with driver dsbr100 failed with error -23 [ 299.042196][ T5712] usb 4-1: USB disconnect, device number 38 [ 299.063966][ T187] usb 2-1: USB disconnect, device number 30 [ 299.104744][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.901'. [ 299.332206][ T8689] netlink: 88 bytes leftover after parsing attributes in process `syz.0.902'. [ 299.385870][ T8689] netlink: 76 bytes leftover after parsing attributes in process `syz.0.902'. [ 299.537606][ T8691] netlink: 'syz.3.903': attribute type 12 has an invalid length. [ 299.571130][ T8691] netlink: 'syz.3.903': attribute type 29 has an invalid length. [ 299.589531][ T8691] netlink: 148 bytes leftover after parsing attributes in process `syz.3.903'. [ 299.635554][ T8691] netlink: 59 bytes leftover after parsing attributes in process `syz.3.903'. [ 300.280772][ T5695] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 300.348811][ T5346] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 300.478929][ T5695] usb 2-1: Using ep0 maxpacket: 16 [ 300.497291][ T5695] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.535359][ T5695] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 300.547824][ T5346] usb 5-1: Using ep0 maxpacket: 8 [ 300.560760][ T5346] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.578830][ T5695] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.595580][ T5346] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 300.625025][ T5346] usb 5-1: config 16 has an invalid descriptor of length 255, skipping remainder of the config [ 300.639013][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.647196][ T5346] usb 5-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.661290][ T5695] usb 2-1: Product: syz [ 300.666769][ T5695] usb 2-1: Manufacturer: syz [ 300.671795][ T5695] usb 2-1: SerialNumber: syz [ 300.676599][ T5346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.697908][ T5695] usb 2-1: 0:2 : does not exist [ 300.713873][ T5346] usbtmc 5-1:16.0: bulk endpoints not found [ 300.881056][ T8700] netlink: 4 bytes leftover after parsing attributes in process `syz.3.906'. [ 300.912474][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 300.933090][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz.1.904'. [ 301.167559][ T6672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.189265][ T6672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.214275][ T8695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.259786][ T8695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.272656][ T8695] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.284464][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.0.907'. [ 301.327037][ T5695] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 301.433036][ T5695] usb 2-1: USB disconnect, device number 31 [ 301.520148][ T6150] udevd[6150]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 302.947104][ T5711] usb 5-1: USB disconnect, device number 26 [ 303.045270][ T8725] netlink: 'syz.2.915': attribute type 12 has an invalid length. [ 303.064228][ T8725] netlink: 'syz.2.915': attribute type 29 has an invalid length. [ 303.124212][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 303.124232][ T29] audit: type=1326 audit(1787201383.156:11772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 303.163848][ T29] audit: type=1326 audit(1787201383.196:11773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 303.207091][ T29] audit: type=1326 audit(1787201383.236:11774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=386 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 303.235802][ T29] audit: type=1326 audit(1787201383.266:11775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 303.263600][ T29] audit: type=1326 audit(1787201383.266:11776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 303.314775][ T29] audit: type=1326 audit(1787201383.296:11777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 303.363065][ T29] audit: type=1326 audit(1787201383.296:11778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 303.394131][ T29] audit: type=1326 audit(1787201383.296:11779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 303.444062][ T29] audit: type=1326 audit(1787201383.326:11780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 303.503506][ T29] audit: type=1326 audit(1787201383.326:11781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8726 comm="syz.3.916" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf6fff0ec code=0x7ffc0000 [ 303.799763][ T8737] __nla_validate_parse: 3 callbacks suppressed [ 303.799785][ T8737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.919'. [ 303.959403][ T8744] netlink: 88 bytes leftover after parsing attributes in process `syz.2.920'. [ 303.998785][ T8744] netlink: 76 bytes leftover after parsing attributes in process `syz.2.920'. [ 304.682995][ T8759] FAULT_INJECTION: forcing a failure. [ 304.682995][ T8759] name failslab, interval 1, probability 0, space 0, times 0 [ 304.719072][ T5613] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 304.747257][ T8759] CPU: 0 UID: 0 PID: 8759 Comm: syz.1.928 Tainted: G L syzkaller #0 PREEMPT(full) [ 304.747294][ T8759] Tainted: [L]=SOFTLOCKUP [ 304.747302][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 304.747322][ T8759] Call Trace: [ 304.747331][ T8759] [ 304.747345][ T8759] dump_stack_lvl+0xe8/0x150 [ 304.747382][ T8759] should_fail_ex+0x410/0x560 [ 304.747411][ T8759] should_failslab+0xa8/0x100 [ 304.747453][ T8759] __kmalloc_noprof+0xfe/0x720 [ 304.747485][ T8759] ? ieee80211_mesh_build_beacon+0xbe/0x1b90 [ 304.747513][ T8759] ? ieee80211_mesh_build_beacon+0xbe/0x1b90 [ 304.747547][ T8759] ieee80211_mesh_build_beacon+0xbe/0x1b90 [ 304.747586][ T8759] ieee80211_mesh_rebuild_beacon+0xc7/0x170 [ 304.747616][ T8759] ieee80211_mesh_csa_beacon+0x140/0x2c0 [ 304.747648][ T8759] ieee80211_set_csa_beacon+0x3e2/0x9c0 [ 304.747691][ T8759] ieee80211_channel_switch+0x8b0/0xcb0 [ 304.747735][ T8759] ? __pfx_ieee80211_channel_switch+0x10/0x10 [ 304.747766][ T8759] ? cfg80211_chandef_valid+0xa75/0xe60 [ 304.747793][ T8759] ? cfg80211_get_end_freq+0xff/0x1b0 [ 304.747846][ T8759] ? cfg80211_get_end_freq+0xff/0x1b0 [ 304.747884][ T8759] ? rcu_is_watching+0x16/0xb0 [ 304.747908][ T8759] ? cfg80211_reg_check_beaconing+0xcf3/0x11d0 [ 304.747940][ T8759] rdev_channel_switch+0xfc/0x290 [ 304.747966][ T8759] nl80211_channel_switch+0xb8a/0xe90 [ 304.748001][ T8759] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 304.748100][ T8759] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 304.748133][ T8759] ? __nla_parse+0x40/0x60 [ 304.748166][ T8759] ? nl80211_pre_doit+0x53d/0x890 [ 304.748195][ T8759] genl_family_rcv_msg_doit+0x233/0x340 [ 304.748231][ T8759] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 304.748272][ T8759] ? bpf_lsm_capable+0x9/0x20 [ 304.748303][ T8759] ? security_capable+0x7e/0x2c0 [ 304.748333][ T8759] genl_rcv_msg+0x614/0x7a0 [ 304.748366][ T8759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.748390][ T8759] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 304.748413][ T8759] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 304.748434][ T8759] ? __pfx_nl80211_post_doit+0x10/0x10 [ 304.748460][ T8759] ? __pfx_ref_tracker_free+0x10/0x10 [ 304.748486][ T8759] ? __asan_memcpy+0x40/0x70 [ 304.748511][ T8759] ? __skb_clone+0x5c/0x6c0 [ 304.748552][ T8759] netlink_rcv_skb+0x226/0x4a0 [ 304.748586][ T8759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.748614][ T8759] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.748663][ T8759] ? down_read+0x2be/0x330 [ 304.748691][ T8759] genl_rcv+0x28/0x40 [ 304.748713][ T8759] netlink_unicast+0x7bd/0x940 [ 304.748752][ T8759] netlink_sendmsg+0x813/0xb40 [ 304.748781][ T8759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.748805][ T8759] ? aa_sock_msg_perm+0xf6/0x1c0 [ 304.748836][ T8759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.748855][ T8759] sock_sendmsg_nosec+0x13a/0x180 [ 304.748884][ T8759] ____sys_sendmsg+0x54e/0x850 [ 304.748924][ T8759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.748973][ T8759] ___sys_sendmsg+0x2a5/0x360 [ 304.749006][ T8759] ? __lock_acquire+0x683/0x2cf0 [ 304.749042][ T8759] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.749074][ T8759] ? get_pid_task+0x20/0x1f0 [ 304.749111][ T8759] ? get_pid_task+0x20/0x1f0 [ 304.749137][ T8759] ? get_pid_task+0x20/0x1f0 [ 304.749195][ T8759] ? __fget_files+0x2a/0x420 [ 304.749215][ T8759] ? __fget_files+0x3a2/0x420 [ 304.749246][ T8759] __sys_sendmsg+0x177/0x240 [ 304.749299][ T8759] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.749351][ T8759] __do_fast_syscall_32+0x27a/0x6a0 [ 304.749372][ T8759] ? do_fast_syscall_32+0x33/0x70 [ 304.749391][ T8759] ? asm_int80_emulation+0x1a/0x20 [ 304.749411][ T8759] ? do_int80_emulation+0x299/0x500 [ 304.749431][ T8759] ? trace_irq_disable+0x3b/0x140 [ 304.749463][ T8759] do_fast_syscall_32+0x33/0x70 [ 304.749484][ T8759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 304.749509][ T8759] RIP: 0023:0xf7f650ec [ 304.749528][ T8759] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 304.749547][ T8759] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 304.749569][ T8759] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 304.749584][ T8759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 304.749597][ T8759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 304.749610][ T8759] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 304.749623][ T8759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 304.749655][ T8759] [ 305.439690][ T5613] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 305.443148][ T8759] [ 305.451804][ T8759] ============================= [ 305.458578][ T8759] WARNING: suspicious RCU usage [ 305.464144][ T8759] syzkaller #0 Tainted: G L [ 305.470672][ T8759] ----------------------------- [ 305.475560][ T8759] net/mac80211/mesh.c:1558 suspicious rcu_dereference_check() usage! [ 305.477966][ T8766] netlink: 12 bytes leftover after parsing attributes in process `syz.3.931'. [ 305.484796][ T8759] [ 305.484796][ T8759] other info that might help us debug this: [ 305.484796][ T8759] [ 305.503424][ T8759] [ 305.503424][ T8759] rcu_scheduler_active = 2, debug_locks = 1 [ 305.512208][ T8759] locks held by syz.1.928/8759: 2, last CPU#0: [ 305.518409][ T8759] #0: ffffffff9009d9e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 305.520931][ T5613] usb 5-1: config 0 has an invalid interface number: 11 but max is 0 [ 305.527909][ T8759] #1: ffff888057ae07a0 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_pre_doit+0x3c0/0x890 [ 305.546461][ T8759] [ 305.546461][ T8759] stack backtrace: [ 305.552610][ T8759] CPU: 0 UID: 0 PID: 8759 Comm: syz.1.928 Tainted: G L syzkaller #0 PREEMPT(full) [ 305.552642][ T8759] Tainted: [L]=SOFTLOCKUP [ 305.552650][ T8759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.552661][ T8759] Call Trace: [ 305.552669][ T8759] [ 305.552678][ T8759] dump_stack_lvl+0xe8/0x150 [ 305.552714][ T8759] lockdep_rcu_suspicious+0x140/0x1d0 [ 305.552753][ T8759] ieee80211_mesh_csa_beacon+0x280/0x2c0 [ 305.552788][ T8759] ieee80211_set_csa_beacon+0x3e2/0x9c0 [ 305.552832][ T8759] ieee80211_channel_switch+0x8b0/0xcb0 [ 305.552876][ T8759] ? __pfx_ieee80211_channel_switch+0x10/0x10 [ 305.552909][ T8759] ? cfg80211_chandef_valid+0xa75/0xe60 [ 305.552965][ T8759] ? cfg80211_get_end_freq+0xff/0x1b0 [ 305.553002][ T8759] ? cfg80211_get_end_freq+0xff/0x1b0 [ 305.553040][ T8759] ? rcu_is_watching+0x16/0xb0 [ 305.553063][ T8759] ? cfg80211_reg_check_beaconing+0xcf3/0x11d0 [ 305.553095][ T8759] rdev_channel_switch+0xfc/0x290 [ 305.553122][ T8759] nl80211_channel_switch+0xb8a/0xe90 [ 305.553157][ T8759] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 305.553238][ T8759] ? __pfx___cfg80211_wdev_from_attrs+0x10/0x10 [ 305.553271][ T8759] ? __nla_parse+0x40/0x60 [ 305.553303][ T8759] ? nl80211_pre_doit+0x53d/0x890 [ 305.553331][ T8759] genl_family_rcv_msg_doit+0x233/0x340 [ 305.553367][ T8759] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 305.553408][ T8759] ? bpf_lsm_capable+0x9/0x20 [ 305.553438][ T8759] ? security_capable+0x7e/0x2c0 [ 305.553468][ T8759] genl_rcv_msg+0x614/0x7a0 [ 305.553501][ T8759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.553527][ T8759] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 305.553550][ T8759] ? __pfx_nl80211_channel_switch+0x10/0x10 [ 305.553572][ T8759] ? __pfx_nl80211_post_doit+0x10/0x10 [ 305.553598][ T8759] ? __pfx_ref_tracker_free+0x10/0x10 [ 305.553635][ T8759] ? __asan_memcpy+0x40/0x70 [ 305.553662][ T8759] ? __skb_clone+0x5c/0x6c0 [ 305.553700][ T8759] netlink_rcv_skb+0x226/0x4a0 [ 305.553734][ T8759] ? __pfx_genl_rcv_msg+0x10/0x10 [ 305.553762][ T8759] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.553829][ T8759] ? down_read+0x2be/0x330 [ 305.553857][ T8759] genl_rcv+0x28/0x40 [ 305.553880][ T8759] netlink_unicast+0x7bd/0x940 [ 305.553923][ T8759] netlink_sendmsg+0x813/0xb40 [ 305.553962][ T8759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.553988][ T8759] ? aa_sock_msg_perm+0xf6/0x1c0 [ 305.554019][ T8759] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.554040][ T8759] sock_sendmsg_nosec+0x13a/0x180 [ 305.554069][ T8759] ____sys_sendmsg+0x54e/0x850 [ 305.554109][ T8759] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.554161][ T8759] ___sys_sendmsg+0x2a5/0x360 [ 305.554193][ T8759] ? __lock_acquire+0x683/0x2cf0 [ 305.554228][ T8759] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.554261][ T8759] ? get_pid_task+0x20/0x1f0 [ 305.554291][ T8759] ? get_pid_task+0x20/0x1f0 [ 305.554319][ T8759] ? get_pid_task+0x20/0x1f0 [ 305.554381][ T8759] ? __fget_files+0x2a/0x420 [ 305.554401][ T8759] ? __fget_files+0x3a2/0x420 [ 305.554433][ T8759] __sys_sendmsg+0x177/0x240 [ 305.554468][ T8759] ? __pfx___sys_sendmsg+0x10/0x10 [ 305.554521][ T8759] __do_fast_syscall_32+0x27a/0x6a0 [ 305.554544][ T8759] ? do_fast_syscall_32+0x33/0x70 [ 305.554565][ T8759] ? asm_int80_emulation+0x1a/0x20 [ 305.554586][ T8759] ? do_int80_emulation+0x299/0x500 [ 305.554606][ T8759] ? trace_irq_disable+0x3b/0x140 [ 305.554647][ T8759] do_fast_syscall_32+0x33/0x70 [ 305.554670][ T8759] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 305.554697][ T8759] RIP: 0023:0xf7f650ec [ 305.554716][ T8759] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 305.554735][ T8759] RSP: 002b:00000000f542650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 305.554758][ T8759] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080000200 [ 305.554773][ T8759] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 305.554785][ T8759] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 305.554798][ T8759] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 305.554811][ T8759] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 305.554842][ T8759] [ 305.635071][ T5613] usb 5-1: config 0 has no interface number 0 [ 305.992884][ T5613] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 5120, setting to 1024 [ 306.004395][ T5613] usb 5-1: config 0 interface 11 altsetting 253 bulk endpoint 0x7 has invalid maxpacket 1024 [ 306.014875][ T5613] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 306.026864][ T5613] usb 5-1: config 0 interface 11 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 306.037220][ T5613] usb 5-1: config 0 interface 11 has no altsetting 0 [ 306.044120][ T5613] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.057091][ T5613] usb 5-1: config 0 descriptor?? [ 306.065881][ T5613] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected [ 306.077444][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81 [ 306.085444][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82 [ 306.097099][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1 [ 306.105167][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2 [ 306.113223][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85 [ 306.121274][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5 [ 306.135034][ T5613] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 306.146761][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83 [ 306.155546][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84 [ 306.163790][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3 [ 306.171910][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4 [ 306.180051][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86 [ 306.188007][ T5613] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6 [ 306.201263][ T5613] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 306.209445][ T8772] netlink: 'syz.0.929': attribute type 12 has an invalid length. [ 306.232897][ T8772] netlink: 'syz.0.929': attribute type 29 has an invalid length. [ 306.297182][ T5613] usb 5-1: USB disconnect, device number 27 [ 306.299582][ T5346] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 306.322736][ T8772] netlink: 148 bytes leftover after parsing attributes in process `syz.0.929'. [ 306.343299][ T5613] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 306.356966][ T8772] netlink: 59 bytes leftover after parsing attributes in process `syz.0.929'. [ 306.377531][ T5613] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 306.394030][ T5613] keyspan 5-1:0.11: device disconnected [ 306.463521][ T5346] usb 4-1: Using ep0 maxpacket: 32 [ 306.474893][ T5346] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 306.496479][ T5346] usb 4-1: config 0 has an invalid interface number: 167 but max is 0 [ 306.512390][ T5346] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.532904][ T5346] usb 4-1: config 0 has no interface number 0 [ 306.540948][ T5346] usb 4-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 306.559003][ T5346] usb 4-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 306.578875][ T5346] usb 4-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 306.598988][ T5346] usb 4-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 306.628831][ T5346] usb 4-1: config 0 interface 167 has no altsetting 0 [ 306.638675][ T5346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.658815][ T5346] usb 4-1: Product: syz [ 306.663084][ T5346] usb 4-1: Manufacturer: syz [ 306.667700][ T5346] usb 4-1: SerialNumber: syz [ 306.681902][ T5346] usb 4-1: config 0 descriptor?? [ 306.699585][ T8768] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 306.917741][ T5346] usbtest 4-1:0.167: couldn't get endpoints, -22 [ 306.925701][ T5346] usbtest 4-1:0.167: probe with driver usbtest failed with error -22 [ 306.939513][ T5346] usb 4-1: USB disconnect, device number 39