last executing test programs: 5m20.059902992s ago: executing program 2 (id=860): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000010a6c310c6050d9223e5010203010902240001010000000904000202ff18ecff090503e5100000fa00090582"], 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff}}, [@tmpl={0x104, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x2a, 0x2, 0x0, 0xd1f}, {{@in=@private=0xa010102, 0x0, 0x3c}, 0x0, @in6=@dev, 0x0, 0x3, 0x0, 0x0, 0x100, 0x0, 0x80}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in=@local}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0xff}, 0x0, @in6=@private1, 0x0, 0x5}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0xc001004}, 0x40800) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 5m16.627793278s ago: executing program 2 (id=871): syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd69010000001406fffe800000000000000000000039fe8000000000000000000000000000aa4e224e24000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="51c2"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x10007, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00db6072000001ea89de2b4410000e60080b8785d960000100000000000000000000000000000000000527000dabeffff00", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd000000801900000000000000000000000000000000000000000100", [0x0, 0x2000000000001]}}) 5m16.316619699s ago: executing program 2 (id=874): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYRES16], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f0000e79000)=[{&(0x7f00003fb000)="f7", 0x7ffff000}], 0x1, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 5m12.530582237s ago: executing program 2 (id=882): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x200000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x50, 0xffffffffffffffff, 0x0) socket(0x18, 0x5, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00') r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0\x00') keyctl$dh_compute(0x17, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={'rmd160-generic\x00'}}) r5 = socket(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newqdisc={0x188, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {0x8, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x158, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0x8, 0x5, 0x1, 0x5, 0x17, 0x16, 0x5}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x2, 0x0, 0x6, 0xe, 0x19, 0xc, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xc4d, 0xb7, 0x8, 0x17, 0x1d, 0xd}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0xa79, 0x6, 0x5, 0x20, 0x12, 0x4}}, @TCA_CHOKE_STAB={0x104, 0x2, "2c6b91245b350807b26f92b339c6b22f23065f066b37a51d5f0ca09bed852428c5998bc261080c4c1b775a31e5be9a46734d60f854101c3333d071182000208aff328af237ce66ab019005b79efd1d6697f7edc8c0c438dbfbde24901cddd0709b6761c17f507a17fdbc957995941aab28c0b6819ae86b425aabd3daa700ce841808abf258e2b403e874277c1fef0019ffa1f3effc58108ae5c51e0e7a24ac4d68e80bc00251b8f6cb4ad0946ed60335217a301e82db1a0d83197064fce8c7e990969902a3be285b8732b377490ccd81a5b5b5da5d24ae4c079973d6731914a31253a33f1c08c2de0f17c8664a2b0b120197e9cd8a91146730d647a61191b35b"}]}}]}, 0x188}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000bc0)=@newtfilter={0x34, 0x28, 0x575ac7824d421509, 0x8070bd29, 0x4, {0x0, 0x0, 0x0, r8, {0x9}, {0xffff}, {0x0, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x11}, 0x40) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x14040001) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 5m10.315965969s ago: executing program 2 (id=887): r0 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x6e22, 0x9, @empty, 0x8}, 0x1c) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @empty}, 0x10) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r3, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r3, 0x80000003) syz_io_uring_setup(0x4ce3, &(0x7f0000000380)={0x0, 0x72af, 0x2, 0x0, 0x297}, 0x0, 0x0, 0x0) r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) landlock_restrict_self(r4, 0x2) r5 = syz_usb_connect(0x5, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_control_io$uac1(r5, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000001}, 0x1c) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x4) syz_kvm_setup_cpu$x86(r8, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000500)="2e6767670f1b5908b981020000b800000000ba008000000f300f0746311f3667460f01d1b9800000c00f3235000100000f303ef3450fc773a6260f01c5c442cdae202ef0432836", 0x47}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = syz_open_dev$I2C(&(0x7f0000000180), 0x1, 0x402) writev(r10, &(0x7f00000002c0)=[{&(0x7f0000000080)="039456", 0x3}], 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x0, 0x7fff0000}]}) 5m10.095360356s ago: executing program 2 (id=891): bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0xeb91, @remote, 0x2c5d}}, 0x24) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) write$dsp(r3, &(0x7f0000000040)="c7", 0x1) (async) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000100)) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r2, &(0x7f0000000100)='syz', 0x10000, &(0x7f0000000180)={@align=0x5, {0xe37, 0x7, 0x7, 0x401}}, 0xb, 0x0, 0x0}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x74, 0x5, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0x6, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) (async) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000140)={@private=0xa010101, @empty}, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 5m9.557840027s ago: executing program 32 (id=891): bind$rxrpc(0xffffffffffffffff, &(0x7f0000000080)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e24, 0xeb91, @remote, 0x2c5d}}, 0x24) (async) r0 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0) write$dsp(r3, &(0x7f0000000040)="c7", 0x1) (async) ioctl$SNDCTL_DSP_SYNC(r3, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r3, 0x800c5012, &(0x7f0000000100)) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000300)={r2, &(0x7f0000000100)='syz', 0x10000, &(0x7f0000000180)={@align=0x5, {0xe37, 0x7, 0x7, 0x401}}, 0xb, 0x0, 0x0}) (async) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x74, 0x5, 0x2, 0x4002004c4, 0x1004, 0x8000000000000000, 0x6, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0x5, 0x8d], 0xeeee8000, 0x2010d3}) (async) setsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000140)={@private=0xa010101, @empty}, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7.149457162s ago: executing program 5 (id=2179): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x2d, 0x20040040) ppoll(&(0x7f0000000000)=[{r1, 0x10a}, {r1, 0x212bdb8c3662ab0c}], 0x2, 0x0, 0x0, 0x0) r2 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) r3 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r7 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r8, &(0x7f0000000280)='L', 0x1) syz_usb_control_io$lan78xx(r7, 0x0, 0x0) syz_usb_disconnect(r7) read$char_usb(r8, 0x0, 0x0) setsockopt$inet_int(r5, 0x0, 0x17, 0x0, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x9, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0xb33}}}}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26e"], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, &(0x7f0000000000)) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) rt_sigprocmask(0x1, &(0x7f0000000080)={[0x9]}, 0x0, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) 6.595067175s ago: executing program 1 (id=2183): socketpair$unix(0x1, 0x2, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x100000}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000050}, 0x24044010) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, 0x0, 0x0) r2 = openat$panthor(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) pipe2(&(0x7f0000001180), 0x4800) syz_usb_connect$cdc_ncm(0x5, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x5, &(0x7f0000000380)={0x5, 0xf, 0x5}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24048045) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000240)={0x1, 0x1, [0x70b, 0x785, 0x468, 0xb00]}) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, 0x0) r3 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}, {0x0}], 0x2) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) 5.864567447s ago: executing program 0 (id=2185): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000300)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) rt_sigpending(0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88c00, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000d00)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r3 = syz_open_procfs(0x0, &(0x7f0000019240)='net/netstat\x00') pread64(r3, 0x0, 0x0, 0x200) getsockname$packet(r3, &(0x7f0000000140), &(0x7f0000000280)=0x14) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000100)=0x8) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000080)={0x28, 0x4, r2, 0x0, &(0x7f0000dc6000/0x3000)=nil, 0x3000, 0x11}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r4, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x3d3b4e, 0x200000000000000}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000700)={0x0, 0x0, r5, r5, 0xd, 0x81, 0xa, 0x9, {0x4, 0x2, 0x2, 0x4, 0x6, 0x9, 0x8, 0x8000, 0x5, 0x10, 0xaf36, 0x7, 0x2, 0x8, "fe27c227cf20ed8235e99238a9b12ef0d295d0e6bf8580808779e7cd8966615d"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100008b4cd740402053d8f6f8410203010902120001020000000904"], 0x0) 5.599876252s ago: executing program 1 (id=2186): socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x3, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0xd6, 0xb6, 0x8d, 0x10, 0x5ac, 0x246, 0x27b1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x3, 0xfa, 0x10, 0x3f, "", [{{0x9, 0x4, 0x14, 0x4, 0x0, 0x3, 0x46, 0x2, 0x2}}]}}]}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x6, @private0}, 0x1c) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000080)={0x9, 0x2, 0x9, 0x1, 0x8, 0x7, 0x6}) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x8400, 0x0) r3 = memfd_create(&(0x7f0000000100)='\xa9}\xbb\xcc\x96\x0eo\x1f\xe2@\xcc\xd4\xabd{\x8b\x8e7\xc3\x04', 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r5, 0x301, 0x800000, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x40006) fallocate(r3, 0x0, 0x2, 0x80000000) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r6, 0xc01c64ae, &(0x7f0000000100)={0x0, 0x4, 0xffffffff, 0x0, 0x20, 0x20}) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xc, 0x12, r3, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) ioctl$IOCTL_GET_NUM_DEVICES(r2, 0x40046104, &(0x7f0000000080)) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4650c10c}, 0xc, &(0x7f0000000780)={&(0x7f0000000600)={0x1c, 0x0, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r7 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000640)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000000080)={0x1, @pix={0x5, 0x3, 0x4745504d, 0x0, 0x6, 0x6, 0x5, 0x5, 0x1, 0x4, 0x1, 0x1}}) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) 5.077123315s ago: executing program 5 (id=2188): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) r2 = epoll_create1(0x80000) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r4, 0xa5, 0x30}, 0xc) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000200)={r4, 0x4}, 0x8) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x14}) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000140)={0x4000000, 0x100, 0x2}) r5 = accept4$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x80800) syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r6 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r7 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r7, 0xffff) fcntl$addseals(r7, 0x409, 0x7) r8 = ioctl$UDMABUF_CREATE(r6, 0x40187542, &(0x7f0000000000)={r7, 0x0, 0x0, 0x8000}) lseek(r8, 0x1000000000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_async', 0x80, 0x3) sendfile(r9, r9, 0x0, 0x0) r10 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) fspick(0xffffffffffffffff, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r10, 0x12a, 0x14, 0x17, 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000e80)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x9, @empty, 0x5}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)='^', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x4e24, 0x38f0, @dev={0xfe, 0x80, '\x00', 0x10}, 0x8}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000400)='!', 0x1}], 0x1}}], 0x2, 0x4040059) socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x1) write$binfmt_script(r9, &(0x7f0000000280)={'#! ', './file0', [{}, {0x20, '\x00'}, {0x20, 'y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'}, {0x20, '/dev/udmabuf\x00'}, {0x20, '/dev/dri/card#\x00'}, {0x20, '^.\'[,$--]))\\'}, {0x20, '/dev/udmabuf\x00'}, {0x20, '),\x84\'#]'}, {0x20, '-!]'}], 0xa, "add9971a1ccd820060133c3de3662580e185318bb3d7617ebcd75363611df973be9143f2fff47104937f16350bba268f62e619e98e67164bb4c6d21fc0be53cbf39d2c3c7b1c"}, 0xbc) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000005c0)={0x0, 0x80000001}, &(0x7f0000000780)=0x8) 4.236084639s ago: executing program 5 (id=2189): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 4.112143845s ago: executing program 0 (id=2191): timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000480)=ANY=[], 0x0) syz_usb_connect$midi(0x0, 0xb2, &(0x7f00000000c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa0, 0x1, 0x1, 0xfe, 0x0, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x5, 0x1, 0x3, 0x20, 0x80, [@midi_out_jack={0x9, 0x24, 0x3, 0x2, 0x5c, 0x1, [{0x96, 0x40}], 0x6}, @ms_header={0x7, 0x24, 0x1, 0x340, 0x7}, @midi_out_jack={0x13, 0x24, 0x3, 0x0, 0x2, 0x6, [{0x0, 0x4}, {0x4, 0xfa}, {0x3}, {0xa8, 0x9}, {0x7, 0x80}, {0x2, 0x7}], 0x7}], [{{0x9, 0x5, 0xb, 0x11, 0x3ff, 0x4, 0xfd, 0x9, {0x12, 0x25, 0x1, 0xe, "37f00b1732a873de47f48ccbd0a7"}}}, {{0x9, 0x5, 0xa, 0x2, 0x200, 0x10, 0xb, 0x9, {0xb, 0x25, 0x1, 0x7, "243a9ce8e63e88"}}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0x0, 0xf8, 0x5, {0x4}}}, {{0x9, 0x5, 0x5, 0x10, 0x8, 0x81, 0xa, 0x80, {0xe, 0x25, 0x1, 0xa, "50b69e48a19e743893a1"}}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0xc, 0x9, 0x0, {0xf, 0x25, 0x1, 0xb, "d59bd20c447ababbfb0b2d"}}}]}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x1, 0xd5, 0x80, 0x20, 0xff}, 0x109, &(0x7f00000001c0)={0x5, 0xf, 0x109, 0x6, [@generic={0xb8, 0x10, 0xa, "0f4695b545a6a52b3dbd1d1b844bdca64d27cc202ee87673c56864c7ea70d690b0b2e28632fedf4d0159b38c2a245d95b93b91a7bff6260f29ce5c747f5c5a996f6ddab54ef749026996037698686e3bade5da5c42a9197dc34da971185934eed0f21fd3823981202c3006bfe9e3ac29cc47897c6e320dbbb6bdbd60e2450bcf70187de4aa2de54be850d19450122a79059f2e0af316d7d8cdeeef973bc9b2af0c7b02c8be46336f45974fd02fc8216ee2ffc85ff2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x6, 0x7f, 0xb00}, @ssp_cap={0x1c, 0x10, 0xa, 0x5, 0x4, 0x8, 0xf, 0x6, [0x7, 0xffff00, 0xc000, 0xffc0f0]}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "f41a835b8332e99869e7553ec587f058"}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x3, 0xd, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x2, 0x7, 0x3, 0x1, 0x5}]}, 0xa, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x421}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44f}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x412}}, {0x8, &(0x7f00000003c0)=@string={0x8, 0x3, "b8fb35014ac5"}}, {0x59, &(0x7f0000000400)=@string={0x59, 0x3, "4643b7cc45264559f090b8fa20a23739cd771f8b7a5ec38eb4587fe380d0582cd6d81685abf9d554c1f46d7c599c2c5cde578ed29d7443d54f522ffed0ca1a201be6a2641575b3247b8a85ebfb79193acb65135d57e827"}}, {0x87, &(0x7f0000000940)=ANY=[@ANYBLOB="8703e9aab2de98f4f52ffc6f24b623af7cf1a55bc051a6634ce1321f1674fe8f1613cd220e5ce1eed598b4bad120fabbb32a4babd62e584884dc08deba8fb332defe07027814fdb9f6a439b49596194b80281f7f112a785b8a3497a3c380ce35b2f1983e85b4e69c12904bbbf54290656de3a733fd7a21a864d41d214a637699b32b2e41a40a0000000000"]}, {0xbb, &(0x7f0000000540)=ANY=[@ANYBLOB="bb0306c90a68140515a2072be5ebeb039dfbc791738544ae559a5ba3530a961585830f976992b084f894c8091ad4d6dfac2508f30c20b6323ad177e4f0e0abe5d0537a4a51e36237910003ad005fecc0bcc3ae77415fd130267a37105ae9bdc19c9aa10e8dc1baf980144ab81bebb46bf9ccdd1b15e12e6ea05dc4c96708d2072fc50d63642af047fa4659ef4a2e6924254aa74a70bd8eee312cc23c5f0670700a954255b7134b3c561634adcb6c9dd9e40872a95846bc8eb9ba06"]}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x1401}}, {0x102, &(0x7f0000000640)=@string={0x102, 0x3, "d02480b6061caf17c3419e35b267d4cf34b50431278e069cedda493dcae02a07655f4a52e06241d2057d0e60a8fe1a2b13c5c1eb95c5c06ef0e97bb4df354b321ac1466873b9e4e0e2d389999e12931466fe82976098d5f1c44fd241426382b7ea3ed6e1413f11c408967e45b63231bc728959ed00eed4250f3eedce558048a04877eb6bede3d81db2d175b95be9aaffd824fa25f0bb8d3a0cd8d98af294fca2142fbd457ba0fee531f112e637c4965909c2c204bf20981b18612f6b383ef323740672e668c1fffb033580f192a924d0f21982702a7b16b21c210780a9d0437d9e31b2fc6b8ac9ee983e5dfe42a809862b06657a3a26e04fcde6523f3df97e25"}}, {0xc6, &(0x7f0000000780)=@string={0xc6, 0x3, "a5b580c6a8cd45b08526da688458d8939fb0cf8db0b79dc86e1ad8c9ff302428e74a3d838e9336098e704377e8987f61c6dff257e5d39f1dbc89ecefc4c766920c908074983c9451e3e81305c1cef425667abc5df5df8c803dd7c628ab7f4a03c08018e71c3caa5d76d9074538b87389d2da7e9779ee3290d502ed26fe02efc7d0a822d1a031e751a373a29303be119e971b524828489d7b9d61b3b468ec290fc8f8e77326f8dc7785b925702758de12e0d74352f0c807986a465c00ecba47bb988729b2"}}]}) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) prctl$PR_SET_TIMERSLACK(0x1d, 0x83e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000c00)={0x1, &(0x7f0000000bc0)=[{0x60, 0x3, 0x5, 0x51}]}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) 3.907771205s ago: executing program 5 (id=2192): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x77ab7000) ftruncate(0xffffffffffffffff, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) unshare(0x20000400) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000002300)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x200000a, 0x13, r2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000180)=""/188) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000ac0), 0x800, 0x0) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000400)=ANY=[@ANYBLOB="00f8ffffffffffff02000000000000000800000000000000", @ANYRES32=r3, @ANYRESHEX=r3, @ANYBLOB="ae236831ed7c6b64b79e8d42c79e31438e3fe6b42215565b86437537c025c7ded60139c1ec5e2ef5384fd76df9b51281d37369713f3b1f", @ANYBLOB='\x00\x00\x00\x00\t\x00'/28, @ANYRES32=r3, @ANYBLOB="000000006edf00"/28, @ANYRES32=r4, @ANYBLOB="00000000030000000000008000"/28, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00$e\x00'/28, @ANYRES32=r3, @ANYRESDEC, @ANYRES32=r3, @ANYRES64=r2, @ANYRES32=r4, @ANYBLOB="000000000300"/28]) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000140)={0x7f, "f1cfb9b1cc000d306dc7259c2996eda525e19bde71dc4e52627da6fe00", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f0000000780)={"d1ed39d88b014076ab94c1fb10628c46d2e681cdb9e581a38ebb0ddd5f307e56", r5}) 3.796394304s ago: executing program 1 (id=2194): lsm_get_self_attr(0x66, 0x0, 0xfffffffffffffffc, 0xd1679f4207099f46) (async) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb78a405e0483020b990102030109022400010000000009040000025c291d0009050900000000000009050b01"], 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async) r2 = memfd_create(&(0x7f0000000180)='J=\t\xeb\xf8\xa7\x04\x9f\xe1hO\x8e\xd7\xb5\x93}\x8d\xed\x01L`\x93\xcd^2P\x00$x\"\xda\xf1Az\xfe_\xc5\xb3\x9b`;\x1c\xfc\xaf9\x98\x91\xe7', 0x1) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="31032fbd7000fddbdf250800000008000300", @ANYBLOB="9c9f8e566a88b63a12873f2e45d117a0ff83a523561002de9fa66569e47bf3f78be3ae2911f495aa505a3b951b64bd29403add9a88639fcfb99c152f0638071c9c610810a1526173c2b17e8bf7e3a2af40aa9fb5f54902d7dc0336331ee684ea230e33127386e7f1f4050fff7dd2d7269fc095c56a723a72e36470b30ac2b35243bda3a4c293004dfa500943cb9c0b14682b619973405808e1db17589b18555151ec385b498b3df435813a0671c30ae271db6696d750119ea200e4cdee14a3036edace1d9b", @ANYBLOB="05002d000100000008000600"], 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x40048c6) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='P\x00\x00@', @ANYRES16, @ANYBLOB="010000000200000000003b000000", @ANYRES32=r1, @ANYBLOB="2a003300d0000000ffffffffffff0802110000005050505050500000a7"], 0x50}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x18bdb, 0x325967a866143452) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000680)={'#! ', './file0', [{0x20, '#! '}], 0xa, "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"}, 0x202) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={r6, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) fallocate(r5, 0x3, 0x0, 0xffffffff000) (async) getsockopt(r4, 0xff, 0x1, 0x0, 0x0) (async) fsopen(&(0x7f0000000340)='iso9660\x00', 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) (async) r8 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x3) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r9, @ANYBLOB="0000000001000000b703000008000000850000006a00000095"], &(0x7f0000005d80)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (async) r10 = syz_open_dev$media(&(0x7f0000000040), 0x7ffffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r10, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) (async) r12 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r12, 0xc0205648, &(0x7f0000000180)={0xf010000, 0x0, 0x0, r11, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000180)={'dummy0\x00', &(0x7f00000000c0)=@ethtool_perm_addr={0x4b, 0x26, "2d720787b641423f000000a6aa0825471829a0bc32e5cde91eaf6df1497941f89ca551d1e7de"}}) fcntl$addseals(r8, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE(r7, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0xfffff000}) 3.591946576s ago: executing program 4 (id=2195): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23effcbe6d55b57cb15663c15c46395916e2b388abc3d6ce231623"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (fail_nth: 12) 3.495611817s ago: executing program 1 (id=2196): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x28, 0x2, [@TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x7fff}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x6}, @TCA_RED_FLAGS={0xc, 0x4, {0x8, 0xf}}, @TCA_RED_MARK_BLOCK={0x8, 0x6, 0x6}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="2e00000011008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x24000000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f00000003c0)={0x0, 0xf0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400090200000000000000000000000000010c00028005000100000000004700028005000100010000000600040000000000060005"], 0xe4}}, 0x0) 3.093841974s ago: executing program 4 (id=2197): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000340)={0xdb, 0x8, 0xb}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000003c0)={0x3ff, 0x200010, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) fcntl$dupfd(r2, 0x406, r1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) getpid() ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7, 0x8}) close_range(r0, 0xffffffffffffffff, 0x0) 2.854186729s ago: executing program 4 (id=2199): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="ed", 0x1, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) recvfrom(r0, &(0x7f00000022c0)=""/4111, 0x100f, 0x80000001, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = io_uring_setup(0xaae, &(0x7f0000000080)={0x0, 0xffffeffa, 0x800, 0x3, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f0000000100)={0x2020}, 0x2020) read$FUSE(r2, &(0x7f000000b040)={0x2020, 0x0, 0x0}, 0x2020) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x894a, &(0x7f00000002c0)={'veth1_to_hsr\x00', 0x0}) write$FUSE_INTERRUPT(r2, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r5 = syz_open_dev$video4linux(&(0x7f0000003e80), 0x7, 0x8000) ioctl$VIDIOC_G_EXT_CTRLS(r5, 0xc0205647, &(0x7f0000003f40)={0x9e0000, 0x400, 0xb, 0xffffffffffffffff, 0x0, &(0x7f0000003f00)={0x9909df, 0x5, '\x00', @p_u32=0x0}}) r6 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000400)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r7) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) fstat(r2, &(0x7f00000064c0)) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000002140)={{'fd', 0x3d, r8}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r8, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r8, &(0x7f0000004300)={0x50, 0x0, r9, {0x7, 0x29, 0x0, 0x1400001, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r8, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x4, {0x2, 0x0, 0x7fffffff, 0x1ffffffffffff, 0xe5, 0xc, {0x1, 0x9, 0x1, 0x4, 0x5, 0x28e4000000000000, 0x8, 0x123, 0x3, 0x1000, 0x0, 0x0, r10, 0x6, 0x2000ffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r8, &(0x7f0000008ec0)="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", 0x2000, &(0x7f000000b340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006b00)={0x130, 0x0, 0x1, {0x3, 0x70e1, 0x0, '\x00', {0x7ff, 0xb, 0x4, 0x4, 0x0, r10, 0x1000, '\x00', 0xce, 0x9, 0xfffffffffffffffd, 0x8000000000000000, {0x0, 0x9}, {0xdd65}, {0x720, 0x1}, {0x3ff, 0x8}, 0x3, 0x9, 0x401, 0x7}}}}) getgid() 2.588064014s ago: executing program 3 (id=2201): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="3c0200001900010025bd700001000000fe8800000000000000000000000001010000000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000001000000000000000000000000001000500000000000000000000000000000005000000000000000000000000000000050000000000000000000000000000000000000000000000000800000000000000000000000000000002000000000000010001000000000084010500fc01000000000000000000000000000100000000330000000000000064010100000000000000000000000000ff340000000000000000000000000000402000007f000001000000000000000000000000000020003c00000002000000fe80000000000000000000000000000000000000000000000000000000000000000000007f000001000000000000000000000000000000006c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac14144300000000000000000000000000000000330000000200000000000000000000000000ffffac1414aa000000000000000000000000000000000000000020010000000000000000000000000000000004d26c"], 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 2.476060072s ago: executing program 3 (id=2202): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 2.424791499s ago: executing program 1 (id=2203): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x10, 0x0, 0xffffffd6}, 0x4b) 2.34324477s ago: executing program 3 (id=2204): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, [@sadb_key={0x6, 0x8, 0x108, 0x0, "041f6255dd400d223296421054f011855acec306fd5e47b5a703e12c5826a2e7e3"}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x9}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0xa0}, 0x1, 0x7}, 0x0) writev(r0, &(0x7f0000001540)=[{&(0x7f0000000180)="73bd367c02117d6538369770137d0fea0d2f9b7464a94cfa3b8d7cee40ee886076203512f2e91d4052e0a6c9b95647ed97fcb5fe959345c00ad108e9fced80f5c1ff17d1cc7f254923347ef9ee14b9e6f34a78336ca4094ef938ebce2b2405b83e23481182f83a8d37af6b1462554bafb2084e637ebef3ae235f799f99133805be3472dc89a02e69d9ca8c6309e0f17aaeed72d0dd8f1263409e4609bd21aff6", 0xa0}, {&(0x7f0000000240)="2c276f265e9a5cb011b075aefd79c23990230c6563790b8cb9c79ce6b8c7016dd73953808d392ad73f8f39fd49157852ff04d61c392fb09d2e04ba8456c4f599d34fc40fc123f4bfdd6558625ee548a0000ec6e29aae68bbcbc415a225ec5197d99c8dd8e040a55ecb8a60ffa08b4789c3d0961e087961e4e3c59463fa638ee2e6d5c6e967a283d03d000210015bdc3a900e029f71405409874041d09845637cc13c2b98d190112c9b277a67718ed0e1f155a7a44e412bb4614a2decd39550d6cd0bdb5f8cd4216fb536fd", 0xcb}, {&(0x7f0000000380)="3c6d4a695d69d77194d3af70ecffae4d7128acc008135fa5a73727347b59984d1685fe84f74cc6811b2fb1200ede677e51fc7687921f7b8485d3704292fe3c6a2505b626d7481e8b002e77a3af629eba33971fcc40e77d9c9eed216ded0c4241fce051b04b3150b0d5b08ab6b07eef7b0a037b444b5fc9f247f305", 0x7b}, {&(0x7f0000000400)="bc6defc17c0d512239fe6723cd12be936b0ac5a5a8d1807f20769c2cdfa7a0f03523b1d07288ca3875dc1d333f741993a4f086a799f4392b2866f115f16c0b681c09f18b2ec659e31b536b9e081487a51cf0545fcedc2bb522378de206469550b383b94c0324a1f71dbb43588cc6371ada2ec44ce402d30ddd85d99bc8df5a18f90230c53a7758d69b1a500fb0a3be5d837db14f6034869ebcb8185d8c05b8d996ab0370be4005c91e30ae913314b5701b9765e7527eaa4170fb", 0xba}, {&(0x7f00000004c0)="c6daf5d2b2f685681a90e018b47053fe95474a3d60b23687af60647fcd", 0x1d}, {&(0x7f0000000500)}, {&(0x7f0000000540)="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", 0x1000}], 0x7) 2.240501966s ago: executing program 3 (id=2205): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[], 0x100}, 0x1, 0x0, 0x0, 0x4040030}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x20, 0xfffff034}, {0x6}]}, 0x10) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) sendmsg(r0, &(0x7f0000000380)={&(0x7f0000000080)=@l2={0x1d, 0x400, @none, 0x1}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000100)="751edb18dbf46e8f09d97e5bbd402d11fea33f21e2", 0x15}, {&(0x7f00000001c0)="da", 0x1}, {&(0x7f0000000240)="6d5f67af894fc09d550067b675507cd5556770418b1b34525a6becaa1a13b103508a04d5cd215b761cd584cddde2539d4d275745d349805bf16f7bd8010d7104086c0e743d76d4de754ad1714e562adea566098cbd4bb4b351de0ed58f1361f6920b4598be11b9f546e6ba23ba5075072ef9d7362c255f7797866066f2697c324aa5dc055389df4d7725ef8f4e391c9bcbc80b7a9397f3f484ddc09076e854b1ee0569277a48abb91df8c3d57555dd4ed07a395e7c78444c971401bb04a219d661d01158a497c68330c7a8878ad272b2fd9915717c58efd568017a16947f3145cc2d", 0xe2}], 0x3}, 0x4010) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="0700a3fcf070d1ff"], 0xffdd) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23effcbe6d55b57cb15663c15c46395916e2b388abc3d6ce231623"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) 2.239838251s ago: executing program 1 (id=2206): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000180)=[{0x3, 0x1, 0x5b, 0x2}, {0x3, 0x13, 0xb, 0x3}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x400076, 0x484100) fsopen(&(0x7f00000000c0)='msdos\x00', 0x0) r2 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r3 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000000)={0x1, {'\x00', "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x806, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r3, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) r4 = socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r5, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x20000}}], 0x1, 0x4000080) sendmsg$inet6(r4, &(0x7f0000000bc0)={&(0x7f0000000100)={0xa, 0x4e20, 0x1, @mcast1, 0x8004}, 0x1c, 0x0}, 0x44890) ioctl$DVB_DEMUX_DMX_SET_FILTER(r2, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, 0xffffffffffffffff, 0x2ecf0000) mbind(&(0x7f0000000000/0x1000)=nil, 0x3000, 0x2, &(0x7f0000000300)=0x2, 0x7797, 0x3) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20200, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r9, 0x4048aecb, &(0x7f0000002400)={0x4, 0x0, [{0x40000001, 0xe63, 0x3, 0x2, 0x20002df3, 0x106, 0x5}, {0x40000001, 0x4, 0x3, 0x8002, 0x27, 0x7, 0x3}, {0xb, 0x5, 0x1, 0xfffffff7, 0xfffffff9, 0xff, 0x9}, {0x80000007, 0xc28, 0x3, 0xfffffffc, 0x5, 0xae, 0xffff}]}) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000280)="1400000016001963d25a80648c56915a1974a8d9", 0x14}], 0x1}, 0x44050) recvmsg(r10, 0x0, 0x10020) socket$xdp(0x2c, 0x3, 0x0) 1.756730398s ago: executing program 3 (id=2207): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23effcbe6d55b57cb15663c15c46395916e2b388abc3d6ce231623"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) (fail_nth: 13) 1.613932838s ago: executing program 4 (id=2208): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000300)={{@hyper, 0x800000}, @my=0x1, 0x0, 0x0, 0x2, 0xfffffffffffffffe}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000000c0)={{@host, 0xffffffff}, @host, 0x0, 0x0, 0x1, 0x4}) r1 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x76, 0x101301) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001880)=""/4087, 0xff7}, {&(0x7f0000001680)=""/109, 0x6d}, {&(0x7f0000000000)=""/57, 0x39}], 0x3}, 0x7}], 0x2, 0x2020, 0x0) r2 = msgget$private(0x0, 0x722) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x4ec, 0x6, 0x40, 0x3, 0x5, 0x3, 0x3baa, 0x7, 0x3, 0x1, 0xffffffffffffff83, 0x7fffffffffffffff, 0xffffffffffffffff, 0x1, 0x3], 0x1000, 0x100000}) msgsnd(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="39dbba"], 0x8, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010027bd700403dcdf2500000000", @ANYRES32, @ANYBLOB="800000000168030024001280110001006272696467655f736c617665000000000c000580050027"], 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008802) msgsnd(r2, &(0x7f00000002c0)={0x2, "9929c1e7a3fae6056d5f3bd4a8527faebe54843626c26e95f7618936847392966ff029fece063fb086d3a38696a3312548024c8f5eccdc30ab4cd42c176496c59ccff7ad79b3c09667df533397e47b4304a2cf5724bee7e6164251272a2ce1094e06422a93a9b921dcd9bc927aecf091aef263999fa0ab096391ef951cd8c99ba9377445f6a33a25f01c3535b039a48a72488cdcab2bfe78a319b454e28d37aabcb9ad9a2047027e548ccb4c4d45c4d9ff9d3355f417ec7c84324c95a701733092d0ed80be"}, 0xcd, 0x800) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = inotify_init1(0x80000) inotify_add_watch(r7, &(0x7f0000000040)='./file0\x00', 0x540004a9) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x6, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) umount2(&(0x7f0000000000)='./file0\x00', 0x3) r9 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r9, 0x83, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x802c550a, &(0x7f0000000440)=@urb_type_iso={0x0, {0x1, 0x1}, 0x402, 0x2, 0x0, 0x20, 0x5, 0x3, 0x0, 0x1, 0x8001, 0x0}) close(r0) 1.012357298s ago: executing program 3 (id=2209): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000740)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x265, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x9, "", [{{0x9, 0x4, 0x0, 0x10, 0x9, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0xfffc, 0x0, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x9, 0xfc}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, &(0x7f0000000000)={0x40, 0xa, 0x36, {0x36, 0xe, "62dc2610cc78d6291176b167ab2243e9ec5ed38c6e2b4fee4ea74328c31d71cdbded4126c7726c79b4020021ff07000000000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 929.234438ms ago: executing program 0 (id=2210): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0x7, 0x4) sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x4000010) write$cgroup_pressure(r1, &(0x7f0000000000)={'some', 0x20, 0x6, 0x20, 0x9}, 0x2f) recvfrom(r2, &(0x7f0000000a00)=""/4096, 0x1000, 0x40, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)=""/25, 0x19) ioctl$VIDIOC_ENUM_FREQ_BANDS(r0, 0xc0405665, &(0x7f0000000140)={0x9, 0x2, 0x2, 0x200, 0x2, 0x356}) r3 = memfd_secret(0x80000) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/crypto\x00', 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r4, 0xc034564b, &(0x7f0000000100)={0x10001, 0x59455247, 0xfffff001, 0x9, 0x2, @stepwise={{0x4, 0x6}, {0x0, 0x5}, {0xff, 0x3}}}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff4000/0x9000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x42}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x793d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r5, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r3, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 696.092453ms ago: executing program 4 (id=2211): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000ffffffff0000000000000000000000004e210000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000005000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff000000000000000000000000840005"], 0x1ac}}, 0x0) 584.037155ms ago: executing program 5 (id=2212): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x54, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x36, 0x33, @action={{{}, {}, @device_b}, @vht_group_id={0x15, 0x1, {0x0, "5584d2f515d56c029a92908b231c387c"}}}}]}, 0x54}}, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x2, @random="010000020200", 'batadv0\x00'}}, 0x1e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x5}}, 0x24) listen(r5, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, 0x0, 0x4008000) recvmmsg(r5, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}}], 0x1, 0x40000100, 0x0) read$FUSE(r5, &(0x7f0000000940)={0x2020}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) ioctl$PAGEMAP_SCAN(r6, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=[{0x800000000, 0x2000000}, {0xfffffffffffffffc}], 0x2, 0x100000c01, 0x38, 0x0, 0x70, 0x6e}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x2, 0x1000, &(0x7f0000000080)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 442.659935ms ago: executing program 4 (id=2213): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x9) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_open_dev$char_usb(0xc, 0xb4, 0x9) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040)) (async) 442.454469ms ago: executing program 0 (id=2214): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 254.514537ms ago: executing program 5 (id=2215): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) (async) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000040)=ANY=[], 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TCSETAW(r4, 0x5407, &(0x7f0000000040)={0x6, 0x7, 0xcd, 0x0, 0x12, "100056f200"}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000013c0)=@framed, &(0x7f0000001400)='syzkaller\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x8, 0x0, 0x0}}, 0x10) ioctl$TIOCMSET(r4, 0x5418, 0x0) (async) ioctl$TIOCMSET(r4, 0x5418, 0x0) openat$ttyS3(0xffffff9c, &(0x7f0000000140), 0x20040, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f00000001c0)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)={0x0, 0x1, 0x3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 186.276629ms ago: executing program 0 (id=2216): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000c80)=ANY=[@ANYBLOB="bc000000210001000000000000000000fc02000000003a000000000000000000fc02000000001100000000000000000100000000000000000200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100e0000001000000000000000000000000000000000000000000000000000000000a01010000000000000000000000000064010100000000000000eb09000000003c000000000000000a"], 0xbc}}, 0x0) 0s ago: executing program 0 (id=2217): writev(0xffffffffffffffff, &(0x7f0000000340), 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000004040)={0xa, 0x0, 0x0, @remote, 0x12}, 0x1c) setresuid(0x0, 0x0, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x122) fcntl$notify(r1, 0x402, 0x8000003d) fcntl$setown(r1, 0x8, 0xffffffffffffffff) r2 = open(&(0x7f0000000040)='./bus\x00', 0x4e142, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x2a0, 0x0, 0xb, 0x148, 0x130, 0x148, 0x208, 0x240, 0x240, 0x208, 0x215, 0x3, 0x0, {[{{@ip={@local, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x84, 0x0, 0x10}, 0x2e8, 0xe8, 0x130, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0x2b, [0x4e24, 0x4e23, 0x4e22, 0x4e21, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x2, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x1, 0x0, 0x0, 0x1, 0x1, 0x10, 0x1, 0x41, 0x0, 0x0, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x7, 0xab, 0x6, 'syz1\x00', {0x4}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x16}, @local, 0xffffff00, 0xff000000, 'pim6reg0\x00', 'netpci0\x00', {}, {0xff}, 0x1, 0x3, 0x1c}, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e22, 0x7, @mcast2, 0x2}}, 0x0, 0x0, 0x50, 0x0, "6a630c4fb7894a111a39863fd53c8cf7bd063070d5845f4f030bf876b10c0036affe34461b7e6a86a50034114c5eb90dfccfb2df0f01cdca0cb18215aaf68778bb454fe4ea7c391ec54f17b4cd467f68"}, 0xd8) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, &(0x7f00000000c0)="36f20f2da015b966b9800000c00f326635000400000f300f090f84b7763e3ef399f30faeebbad004b87900ef0fc7b2b700660f03253ef4", 0x37}], 0x1, 0x12, 0x0, 0xa7) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000003c0)={0x1b0003, 0x0, {[0x1000000004, 0x5, 0x5, 0x16, 0x2, 0xffffffff, 0x9, 0x5]}}) quotactl$Q_SETINFO(0xffffffff80000602, &(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, 0xee00, &(0x7f00000000c0)={0x40, 0x2, 0x0, 0x2}) r6 = getpid() syz_pidfd_open(r6, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYBLOB="797adf00fe00000000fb95bec0000000000000"], 0x2a041) socket$l2tp6(0xa, 0x2, 0x73) getsockname$l2tp6(r2, &(0x7f0000000380), &(0x7f00000003c0)=0x20) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x3e, &(0x7f0000000000)=0xc4, 0x4) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800900, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000440)='/proc/tty/ldiscs\x00', 0x0, 0x0) pread64(r8, &(0x7f0000000300)=""/86, 0x56, 0x81ffffffffffffe) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) kernel console output (not intermixed with test programs): dummy_hcd.3-1/input0 [ 539.181038][ T5710] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 539.203748][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.241538][ T5710] usb 6-1: config 0 descriptor?? [ 539.263730][ T5710] cp210x 6-1:0.0: cp210x converter detected [ 539.562853][T12518] loop4: detected capacity change from 0 to 7 [ 539.571758][T12518] Dev loop4: unable to read RDB block 7 [ 539.577643][T12518] loop4: unable to read partition table [ 539.586876][T12518] loop4: partition table beyond EOD, truncated [ 539.596089][T12518] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 539.830521][ T5710] cp210x 6-1:0.0: failed to get vendor val 0x370c size 13: -71 [ 539.870623][ T5710] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 539.901059][ T5710] usb 6-1: cp210x converter now attached to ttyUSB0 [ 539.924014][ T5710] usb 6-1: USB disconnect, device number 50 [ 539.956211][ T5710] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 539.981859][ T5710] cp210x 6-1:0.0: device disconnected [ 539.990519][ T807] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 540.013117][T12531] ip6t_REJECT: ECHOREPLY is not supported [ 540.026558][T12529] netlink: 'syz.5.1814': attribute type 2 has an invalid length. [ 540.157410][T12533] loop5: detected capacity change from 0 to 7 [ 540.172687][ T807] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 540.189729][T12533] loop5: p1 < > p3 p4 [ 540.204303][T12533] loop5: partition table partially beyond EOD, truncated [ 540.223614][ T807] usb 5-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 540.238173][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.239341][T12533] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 540.278714][ T807] usb 5-1: Product: syz [ 540.290206][T12533] loop5: p4 start 33554432 is beyond EOD, truncated [ 540.292120][ T807] usb 5-1: Manufacturer: syz [ 540.318183][ T807] usb 5-1: SerialNumber: syz [ 540.400994][ C1] plantronics 0003:047F:FFFF.0028: usb_submit_urb(ctrl) failed: -1 [ 540.462379][ T8802] udevd[8802]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 540.496324][ T5694] udevd[5694]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 540.540655][ T5710] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 540.559478][ T807] usb 5-1: selecting invalid altsetting 1 [ 540.580535][ T807] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 540.580652][ T807] dvb_usb_lmedm04 5-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 540.636392][ T807] usb 5-1: USB disconnect, device number 74 [ 540.954966][T12542] ksmbd: Unknown IPC event: 4, ignore. [ 541.172214][ T9358] usb 4-1: USB disconnect, device number 99 [ 541.220508][ T807] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 541.417484][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 541.454313][ T807] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 541.483627][ T807] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 541.510488][ T807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.541127][ T807] usb 1-1: config 0 descriptor?? [ 541.590517][ T9358] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 541.770613][ T9358] usb 4-1: Using ep0 maxpacket: 8 [ 541.782417][ T9358] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 541.806080][ T9358] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x93, changing to 0x83 [ 541.834575][ T9358] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 541.869456][ T9358] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 541.899290][ T9358] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 541.926184][ T9358] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.953393][ T9358] usb 4-1: Product: syz [ 541.962907][ T9358] usb 4-1: Manufacturer: syz [ 541.979180][ T807] kone 0003:1E7D:2CED.0029: unexpected long global item [ 541.986501][ T9358] usb 4-1: SerialNumber: syz [ 542.010946][ T807] kone 0003:1E7D:2CED.0029: parse failed [ 542.016827][ T9358] usb 4-1: config 0 descriptor?? [ 542.030537][ T807] kone 0003:1E7D:2CED.0029: probe with driver kone failed with error -22 [ 542.047365][ C0] imon 4-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 542.070529][ T5710] usb 6-1: device descriptor read/64, error -71 [ 542.146203][ T9358] input: iMON Panel, Knob and Mouse(15c2:003b) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input66 [ 542.173805][ T5709] usb 1-1: USB disconnect, device number 89 [ 542.320783][ T5710] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 542.447575][ T9358] imon:send_packet: packet tx failed (-71) [ 542.490920][ T5710] usb 6-1: Using ep0 maxpacket: 8 [ 542.493926][ T9358] imon 4-1:0.0: panel buttons/knobs setup failed [ 542.508787][ T5710] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 542.527278][ T5710] usb 6-1: config 179 has no interface number 0 [ 542.545492][ T5710] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 542.583063][ T5710] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 542.627818][ T5710] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 542.668575][ T5710] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 542.706928][ T5710] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 542.730561][ T9358] rc_core: IR keymap rc-imon-pad not found [ 542.756282][ T5710] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 542.777012][ T5710] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.863380][T12552] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 542.896916][T12561] loop4: detected capacity change from 0 to 7 [ 542.917791][T12561] Dev loop4: unable to read RDB block 7 [ 542.930711][T12561] loop4: unable to read partition table [ 542.941288][T12561] loop4: partition table beyond EOD, truncated [ 542.958427][T12561] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 543.111093][ T9358] Registered IR keymap rc-empty [ 543.169265][ T9358] imon 4-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 543.218255][ T24] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input68 [ 543.282658][ T9358] imon 4-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 543.344819][ T9358] imon:send_packet: packet tx failed (-71) [ 543.400857][ T9358] imon 4-1:0.0: remote input dev register failed [ 543.418808][ T807] usb 6-1: USB disconnect, device number 52 [ 543.419028][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 543.433331][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 543.466385][ T9358] imon 4-1:0.0: imon_init_intf0: rc device setup failed [ 543.744617][T12572] batadv_slave_1: entered promiscuous mode [ 543.835527][ T9358] imon 4-1:0.0: unable to initialize intf0, err 0 [ 543.866558][ T9358] imon:imon_probe: failed to initialize context! [ 543.898028][ T9358] imon 4-1:0.0: unable to register, err -19 [ 543.947415][ T9358] usb 4-1: USB disconnect, device number 100 [ 544.115879][T12580] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 544.587134][T12579] netlink: 'syz.5.1826': attribute type 21 has an invalid length. [ 544.600417][T12579] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1826'. [ 544.639265][T12579] netlink: 'syz.5.1826': attribute type 4 has an invalid length. [ 544.661549][T12579] netlink: 'syz.5.1826': attribute type 3 has an invalid length. [ 544.674778][T12579] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1826'. [ 544.691032][T12589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.711745][T12592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 544.757471][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 544.779487][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 544.808037][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 544.820823][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 544.874483][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 544.885022][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 544.896928][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 544.915947][T12593] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1829'. [ 545.023892][ T24] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 545.107230][T12593] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 545.210814][ T5695] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 545.383101][ T5695] usb 2-1: unable to get BOS descriptor or descriptor too short [ 545.404273][ T5695] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 545.437489][ T5695] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 545.496757][ T5695] usb 2-1: string descriptor 0 read error: -22 [ 545.505749][ T5695] usb 2-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 545.538196][ T5695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.090267][ T5695] usb 2-1: USB disconnect, device number 94 [ 547.240543][ T5695] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 547.421865][ T5695] usb 6-1: Using ep0 maxpacket: 16 [ 547.439130][ T5695] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 547.466761][ T5695] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 547.491646][ T5695] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 547.528723][ T5695] usb 6-1: config 0 interface 0 has no altsetting 0 [ 547.546558][ T5695] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 547.571573][ T5695] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.608380][ T5695] usb 6-1: config 0 descriptor?? [ 547.891312][ T807] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 548.072240][ T807] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 548.102049][ T807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.133105][ T807] usb 1-1: config 0 has no interface number 0 [ 548.159729][ T807] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 548.188701][ T807] usb 1-1: config 0 interface 6 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 548.223479][ T807] usb 1-1: New USB device found, idVendor=10cf, idProduct=8061, bcdDevice=b7.12 [ 548.233077][ T807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.245866][ T807] usb 1-1: Product: syz [ 548.251736][ T807] usb 1-1: Manufacturer: syz [ 548.256566][ T807] usb 1-1: SerialNumber: syz [ 548.283907][ T807] usb 1-1: config 0 descriptor?? [ 548.293047][ T5695] usb 6-1: USB disconnect, device number 53 [ 548.324033][T12614] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 548.348926][T12614] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 548.449463][ T807] comedi comedi5: driver 'vmk80xx' has successfully auto-configured 'K8061 (VM140)'. [ 548.594441][ T807] usb 1-1: USB disconnect, device number 91 [ 548.610609][ T5702] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 548.800845][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 548.833082][ T5702] usb 5-1: config 0 has an invalid interface number: 213 but max is 1 [ 548.867354][ T5702] usb 5-1: config 0 has no interface number 1 [ 548.896702][ T5702] usb 5-1: config 0 interface 0 has no altsetting 0 [ 548.960119][ T5702] usb 5-1: New USB device found, idVendor=413c, idProduct=81d2, bcdDevice=25.e8 [ 549.020066][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.055447][ T5702] usb 5-1: Product: syz [ 549.084893][ T5702] usb 5-1: Manufacturer: syz [ 549.097721][ T5702] usb 5-1: SerialNumber: syz [ 549.143641][ T5702] usb 5-1: config 0 descriptor?? [ 549.207143][ T5702] usb 5-1: selecting invalid altsetting 0 [ 549.235837][ T5702] usb 5-1: Could not set interface, error -22 [ 549.649501][T12633] __nla_validate_parse: 44 callbacks suppressed [ 549.649531][T12633] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1840'. [ 549.678300][ T5709] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 549.823329][T12627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.854305][ T5709] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 549.869810][T12627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 549.878117][ T5709] usb 6-1: config 0 has no interface number 0 [ 549.893307][ T5709] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.916622][ T5709] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.937174][ T5709] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 549.962380][ T5709] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.004470][ T5709] usb 6-1: config 0 descriptor?? [ 550.363398][T12644] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 550.577904][ T5709] prodikeys 0003:041E:2801.002B: item fetching failed at offset 0/7 [ 550.602025][ T5709] prodikeys 0003:041E:2801.002B: hid parse failed [ 550.618076][T12648] loop4: detected capacity change from 0 to 7 [ 550.628021][ T5709] prodikeys 0003:041E:2801.002B: probe with driver prodikeys failed with error -22 [ 550.656955][T12648] Dev loop4: unable to read RDB block 7 [ 550.690422][T12648] loop4: unable to read partition table [ 550.719218][T12648] loop4: partition table beyond EOD, truncated [ 550.738830][T12644] netlink: 'syz.0.1844': attribute type 21 has an invalid length. [ 550.753479][T12648] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 550.771095][T12644] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1844'. [ 550.817124][T12644] netlink: 'syz.0.1844': attribute type 4 has an invalid length. [ 550.826363][T12644] netlink: 'syz.0.1844': attribute type 3 has an invalid length. [ 550.838139][T12644] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1844'. [ 550.873627][ T5709] usb 6-1: USB disconnect, device number 54 [ 551.350534][ T24] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 551.530879][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 551.575934][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 551.613538][ T24] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 551.637783][ T24] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 551.668065][ T24] usb 2-1: Manufacturer: syz [ 551.707749][ T24] usb 2-1: config 0 descriptor?? [ 551.927021][ T5702] usb 5-1: USB disconnect, device number 75 [ 551.991861][ T807] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 552.184169][ T807] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 130, using maximum allowed: 30 [ 552.216583][ T807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 552.260802][ T807] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 552.294821][ T807] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 552.335073][ T807] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b3e, bcdDevice= 0.00 [ 552.350894][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 552.373360][ T24] usbhid 2-1:0.0: can't add hid device: -71 [ 552.388370][ T807] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 552.391245][ T24] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 552.417158][T12659] loop5: detected capacity change from 0 to 7 [ 552.444467][ T24] usb 2-1: USB disconnect, device number 95 [ 552.450787][T12659] loop5: p1 < > p3 p4 [ 552.457267][T12659] loop5: partition table partially beyond EOD, truncated [ 552.504062][ T807] usb 6-1: config 0 descriptor?? [ 552.504067][T12659] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 552.516330][T12659] loop5: p4 start 33554432 is beyond EOD, truncated [ 552.622650][ T8802] udevd[8802]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 552.632704][ T5918] udevd[5918]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 553.009840][ T807] corsair 0003:1B1C:1B3E.002C: unknown main item tag 0x0 [ 553.028129][ T807] corsair 0003:1B1C:1B3E.002C: unknown main item tag 0x0 [ 553.037368][ T807] corsair 0003:1B1C:1B3E.002C: unknown main item tag 0x0 [ 553.046453][ T807] corsair 0003:1B1C:1B3E.002C: unknown main item tag 0x0 [ 553.054519][ T807] corsair 0003:1B1C:1B3E.002C: unknown main item tag 0x0 [ 553.064236][ T807] corsair 0003:1B1C:1B3E.002C: unknown main item tag 0x0 [ 553.071774][ T807] corsair 0003:1B1C:1B3E.002C: unknown main item tag 0x0 [ 553.079104][ T807] corsair 0003:1B1C:1B3E.002C: unknown main item tag 0x0 [ 553.088849][ T807] corsair 0003:1B1C:1B3E.002C: unknown main item tag 0x0 [ 553.098117][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 553.132819][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 553.142756][ T807] corsair 0003:1B1C:1B3E.002C: unknown main item tag 0x0 [ 553.165767][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 553.205996][ T807] corsair 0003:1B1C:1B3E.002C: failed to start in urb: -90 [ 553.224457][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 553.249473][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 553.273749][ T807] corsair 0003:1B1C:1B3E.002C: hidraw0: USB HID v6f.fd Device [HID 1b1c:1b3e] on usb-dummy_hcd.5-1/input0 [ 553.274879][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 553.356825][ T807] usb 6-1: USB disconnect, device number 55 [ 553.373727][T12670] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1853'. [ 553.474772][T12676] fido_id[12676]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory [ 553.782894][T12670] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 553.858965][T12670] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 554.098013][T12682] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 554.454336][ T30] audit: type=1326 audit(1777603445.765:678): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.5.1857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29cf9cdd9 code=0x7ffc0000 [ 554.539956][ T30] audit: type=1326 audit(1777603445.805:679): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.5.1857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fe29cf9cdd9 code=0x7ffc0000 [ 554.623752][ T30] audit: type=1326 audit(1777603445.805:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.5.1857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29cf9cdd9 code=0x7ffc0000 [ 554.712558][ T30] audit: type=1326 audit(1777603445.815:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.5.1857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe29cf9cdd9 code=0x7ffc0000 [ 554.759268][ T30] audit: type=1326 audit(1777603445.815:682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.5.1857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29cf9cdd9 code=0x7ffc0000 [ 554.914535][ T30] audit: type=1326 audit(1777603445.815:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.5.1857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fe29cf9cdd9 code=0x7ffc0000 [ 555.036526][ T30] audit: type=1326 audit(1777603445.815:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.5.1857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29cf9cdd9 code=0x7ffc0000 [ 555.138733][ T30] audit: type=1326 audit(1777603445.815:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.5.1857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe29cf9cdd9 code=0x7ffc0000 [ 555.205261][ T30] audit: type=1326 audit(1777603445.815:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.5.1857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29cf9cdd9 code=0x7ffc0000 [ 555.252995][ T24] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 555.315711][ T30] audit: type=1326 audit(1777603445.815:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12690 comm="syz.5.1857" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe29cf9cdd9 code=0x7ffc0000 [ 555.441322][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 555.448697][ T24] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 555.458120][ T24] usb 6-1: config 0 has no interface number 0 [ 555.468322][ T24] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 555.480024][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.490744][ T24] usb 6-1: Product: syz [ 555.498523][ T24] usb 6-1: Manufacturer: syz [ 555.503619][ T24] usb 6-1: SerialNumber: syz [ 555.541127][ T24] usb 6-1: config 0 descriptor?? [ 556.545236][T12717] loop5: detected capacity change from 0 to 7 [ 556.564165][T12717] loop5: p1 < > p3 p4 [ 556.581308][T12717] loop5: partition table partially beyond EOD, truncated [ 556.638833][T12717] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 556.687175][T12717] loop5: p4 start 33554432 is beyond EOD, truncated [ 556.806820][ T5694] udevd[5694]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 556.817687][ T5918] udevd[5918]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 557.638254][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 557.679908][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 558.975385][T12753] futex_wake_op: syz.3.1870 tries to shift op by -1; fix this program [ 559.017606][T12750] __nla_validate_parse: 57 callbacks suppressed [ 559.017629][T12750] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1874'. [ 559.075674][T12752] syzkaller1: entered promiscuous mode [ 559.110218][T12752] syzkaller1: entered allmulticast mode [ 559.170812][ T5709] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 559.281545][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 559.395778][ T5709] usb 2-1: Using ep0 maxpacket: 16 [ 559.505244][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.555888][ T5709] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 559.596488][ T24] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 559.610837][ T5709] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 559.650325][ T24] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 559.672033][ T5709] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 559.690305][ T24] usb 6-1: USB disconnect, device number 56 [ 559.697152][ T5709] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 559.773471][ T5709] usb 2-1: config 0 descriptor?? [ 560.232913][ T30] kauditd_printk_skb: 35 callbacks suppressed [ 560.232926][ T30] audit: type=1326 audit(1777603451.545:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.4.1875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d49b9cdd9 code=0x7ffc0000 [ 560.264437][ T5709] hid_parser_main: 222 callbacks suppressed [ 560.264456][ T5709] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 560.301309][ T5709] microsoft 0003:045E:07DA.002D: unknown main item tag 0x0 [ 560.329076][ T5709] microsoft 0003:045E:07DA.002D: unexpected long global item [ 560.378868][ T5709] microsoft 0003:045E:07DA.002D: parse failed [ 560.385638][ T30] audit: type=1326 audit(1777603451.585:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.4.1875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d49b9cdd9 code=0x7ffc0000 [ 560.421135][ T5709] microsoft 0003:045E:07DA.002D: probe with driver microsoft failed with error -22 [ 560.466200][ T30] audit: type=1326 audit(1777603451.585:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.4.1875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d49b9cdd9 code=0x7ffc0000 [ 560.564838][ T30] audit: type=1326 audit(1777603451.585:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.4.1875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d49b9cdd9 code=0x7ffc0000 [ 560.624854][T12770] loop5: detected capacity change from 0 to 7 [ 560.672293][T12770] loop5: p1 < > p3 p4 [ 560.694882][T12770] loop5: partition table partially beyond EOD, truncated [ 560.716723][ T30] audit: type=1326 audit(1777603451.585:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.4.1875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d49b9cdd9 code=0x7ffc0000 [ 560.778485][T12770] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 560.798903][ T30] audit: type=1326 audit(1777603451.585:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.4.1875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d49b9cdd9 code=0x7ffc0000 [ 560.804281][T12770] loop5: p4 start 33554432 is beyond EOD, truncated [ 560.898761][ T30] audit: type=1326 audit(1777603451.605:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.4.1875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d49b9cdd9 code=0x7ffc0000 [ 561.030200][ T30] audit: type=1326 audit(1777603451.605:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.4.1875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d49b9cdd9 code=0x7ffc0000 [ 561.103830][ T8802] udevd[8802]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 561.118410][ T30] audit: type=1326 audit(1777603451.605:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.4.1875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d49b9cdd9 code=0x7ffc0000 [ 561.201132][ T5918] udevd[5918]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 561.239255][ T30] audit: type=1326 audit(1777603451.605:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12760 comm="syz.4.1875" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7d49b9cdd9 code=0x7ffc0000 [ 561.489803][T12786] netlink: 'syz.4.1881': attribute type 10 has an invalid length. [ 561.760861][ T24] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 561.925311][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 561.937341][ T24] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 561.961882][ T24] usb 4-1: config 1 has no interface number 0 [ 561.970614][ T5709] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 561.984045][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 562.017199][ T24] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 562.053127][ T24] usb 4-1: config 1 interface 105 has no altsetting 0 [ 562.076780][ T24] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 562.101872][ T24] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 562.131213][ T5709] usb 6-1: device descriptor read/64, error -71 [ 562.139995][ T24] usb 4-1: Product: syz [ 562.155407][ T24] usb 4-1: Manufacturer: syz [ 562.170162][ T24] usb 4-1: SerialNumber: syz [ 562.178005][ T5710] usb 2-1: USB disconnect, device number 96 [ 562.211296][T12793] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.230591][T12793] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.380855][ T5709] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 562.531652][ T5709] usb 6-1: device descriptor read/64, error -71 [ 562.610530][ T5710] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 562.655627][T12788] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.666224][ T5709] usb usb6-port1: attempt power cycle [ 562.674379][T12788] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 562.782093][ T5710] usb 2-1: Using ep0 maxpacket: 16 [ 562.803939][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 562.821097][ T5710] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 562.831489][ T5710] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 562.845652][ T5710] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 562.858114][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.890227][ T5710] usb 2-1: config 0 descriptor?? [ 563.020784][ T5709] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 563.042381][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.048847][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.053562][ T5709] usb 6-1: device descriptor read/8, error -71 [ 563.092224][ T24] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 563.112098][T12805] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 563.125999][ T24] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 563.127484][T12805] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 563.146072][ T24] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: 0 [ 563.160799][T12813] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 563.230635][ T24] aqc111 4-1:1.105 eth5: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 52:a4:e2:cc:f4:37 [ 563.310518][ T5709] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 563.342142][ T5709] usb 6-1: device descriptor read/8, error -71 [ 563.366260][ T5710] microsoft 0003:045E:07DA.002E: unknown main item tag 0x0 [ 563.415862][ T5710] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.002E/input/input69 [ 563.431009][ T807] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 563.487074][ T5709] usb usb6-port1: unable to enumerate USB device [ 563.526327][ T5710] microsoft 0003:045E:07DA.002E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 563.586721][ T5710] usb 2-1: USB disconnect, device number 97 [ 563.605818][ T807] usb 5-1: unable to get BOS descriptor or descriptor too short [ 563.658319][ T807] usb 5-1: not running at top speed; connect to a high speed hub [ 563.707172][ T807] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 563.728441][ T5709] usb 4-1: USB disconnect, device number 101 [ 563.733515][ T807] usb 5-1: config 5 interface 0 has no altsetting 1 [ 563.758037][ T807] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 563.773742][ T5709] aqc111 4-1:1.105 eth5: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 563.779238][ T807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.817638][ T807] usb 5-1: Product: syz [ 563.845324][ T807] usb 5-1: Manufacturer: syz [ 563.866102][T12818] fido_id[12818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 563.872843][ T807] usb 5-1: SerialNumber: syz [ 563.952582][ T5709] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 563.973311][ T5709] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 564.006556][ T5709] aqc111 4-1:1.105 eth5 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 564.081576][T12812] syz.4.1889 (12812): drop_caches: 2 [ 564.118218][T12812] syz.4.1889 (12812): drop_caches: 2 [ 564.253573][ T807] usb 5-1: USB disconnect, device number 77 [ 564.289260][ T8802] udevd[8802]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 564.501821][T12840] loop5: detected capacity change from 0 to 7 [ 564.509209][T12840] loop5: p1 < > p3 p4 [ 564.513753][T12840] loop5: partition table partially beyond EOD, truncated [ 564.538107][T12840] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 564.567402][T12840] loop5: p4 start 33554432 is beyond EOD, truncated [ 564.641249][ T5918] udevd[5918]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 564.653735][ T5710] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 564.664489][ T8802] udevd[8802]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 564.788381][T12843] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 564.823466][ T5710] usb 4-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 564.862764][ T5710] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 564.882404][ T5710] usb 4-1: New USB device found, idVendor=046d, idProduct=0990, bcdDevice= 0.40 [ 564.907129][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.931153][ T5710] usb 4-1: Product: syz [ 564.939502][ T5710] usb 4-1: Manufacturer: syz [ 564.955212][ T5710] usb 4-1: SerialNumber: syz [ 565.136617][T12841] netlink: 'syz.1.1893': attribute type 21 has an invalid length. [ 565.168917][T12841] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1893'. [ 565.197201][T12841] netlink: 'syz.1.1893': attribute type 4 has an invalid length. [ 565.212067][T12841] netlink: 'syz.1.1893': attribute type 3 has an invalid length. [ 565.252795][T12841] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1893'. [ 565.254197][T12859] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.280712][ T5702] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 565.357014][T12859] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.409225][ T5710] usb 4-1: 0:1 : does not exist [ 565.430974][ T5710] usb 4-1: unit 6 not found! [ 565.449536][ T5710] usb 4-1: unit 2 not found! [ 565.464183][ T5702] usb 5-1: unable to get BOS descriptor or descriptor too short [ 565.496730][ T5702] usb 5-1: config 8 has an invalid interface number: 109 but max is 0 [ 565.524899][ T5702] usb 5-1: config 8 has no interface number 0 [ 565.559586][ T5702] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 8 [ 565.596398][ T5710] usb 4-1: USB disconnect, device number 102 [ 565.614996][ T5702] usb 5-1: config 8 interface 109 altsetting 0 endpoint 0x8E has invalid maxpacket 19095, setting to 8 [ 565.677171][ T5702] usb 5-1: config 8 interface 109 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 565.741210][ T5702] usb 5-1: string descriptor 0 read error: -22 [ 565.771733][ T5702] usb 5-1: New USB device found, idVendor=0c2e, idProduct=0720, bcdDevice=d4.29 [ 565.808337][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.858189][T12854] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 565.888364][ T5702] metro_usb 5-1:8.109: Metrologic USB to Serial converter detected [ 565.921267][ T5695] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 565.956120][ T5702] usb 5-1: Metrologic USB to Serial converter now attached to ttyUSB0 [ 566.119242][ T5702] usb 5-1: USB disconnect, device number 78 [ 566.141219][ T5695] usb 6-1: Using ep0 maxpacket: 32 [ 566.181892][ T5702] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0 [ 566.207338][ T5695] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.242046][ T5702] metro_usb 5-1:8.109: device disconnected [ 566.266442][ T5695] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 566.373791][ T5695] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 566.435781][ T5695] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 566.466023][ T5695] usb 6-1: Product: syz [ 566.489144][ T5695] usb 6-1: Manufacturer: syz [ 566.524038][ T5695] usb 6-1: SerialNumber: syz [ 566.587661][ T5695] usb 6-1: config 0 descriptor?? [ 566.881345][ T5710] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 567.070951][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 567.096951][ T5710] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.113478][ T5710] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.141877][ T5710] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 567.156314][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.178957][ T5710] usb 4-1: Product: syz [ 567.195250][ T5710] usb 4-1: Manufacturer: syz [ 567.215620][ T5710] usb 4-1: SerialNumber: syz [ 567.269596][ T5710] usb 4-1: 0:2 : does not exist [ 567.430458][ T5695] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 567.466833][ T5710] usb 4-1: 5:0: cannot get min/max values for control 4 (id 5) [ 567.488867][ T5710] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 567.516594][ T5710] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 567.530167][ T5710] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 567.543548][ T5702] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 567.573321][ T5710] usb 4-1: 5:0: cannot get min/max values for control 5 (id 5) [ 567.604002][ T5710] usb 4-1: USB disconnect, device number 103 [ 567.615234][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.627129][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 567.647469][ T5695] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 567.668622][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.690242][ T8802] udevd[8802]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 567.711624][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 567.720493][ T5702] usb 5-1: config 116 has an invalid interface number: 25 but max is 0 [ 567.741763][ T5695] usb 2-1: config 0 descriptor?? [ 567.748575][ T5702] usb 5-1: config 116 has no interface number 0 [ 567.775025][ T5702] usb 5-1: New USB device found, idVendor=3811, idProduct=9b95, bcdDevice=83.32 [ 567.785948][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.794952][ T5702] usb 5-1: Product: syz [ 567.799275][ T5702] usb 5-1: Manufacturer: syz [ 567.804135][ T5702] usb 5-1: SerialNumber: syz [ 567.984146][ T5695] usbhid 2-1:0.0: can't add hid device: -71 [ 568.006838][ T5695] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 568.043417][ T5702] uvcvideo 5-1:116.25: probe with driver uvcvideo failed with error -22 [ 568.058052][ T5695] usb 2-1: USB disconnect, device number 98 [ 568.097153][ T5702] usb 5-1: USB disconnect, device number 79 [ 568.390574][ T5709] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 568.520527][ T5695] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 568.542568][ T5709] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.553315][ T5709] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 568.563893][ T5709] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.579174][ T5709] usb 4-1: config 0 descriptor?? [ 568.600068][ T5709] pwc: Askey VC010 type 2 USB webcam detected. [ 568.628081][T12903] loop2: detected capacity change from 0 to 7 [ 568.643292][T12903] Dev loop2: unable to read RDB block 7 [ 568.656075][T12903] loop2: AHDI p1 p2 p3 [ 568.665134][T12903] loop2: partition table partially beyond EOD, truncated [ 568.689489][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 568.705322][T12903] loop2: p1 start 1818582900 is beyond EOD, truncated [ 568.723060][ T5695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 568.738916][T12903] loop2: p3 start 335544320 is beyond EOD, truncated [ 568.751658][ T5695] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00 [ 568.770020][ T5695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 568.798176][T12898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.827150][T12898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.843188][ T5695] usb 2-1: config 0 descriptor?? [ 568.859090][T12898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.880144][ T5702] usb 6-1: USB disconnect, device number 61 [ 568.906624][T12898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.934710][T12898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.957969][T12898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 568.976096][T12898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 568.993935][T12898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.033695][T12898] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 569.072030][T12898] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 569.152535][ T5709] pwc: recv_control_msg error -32 req 02 val 2b00 [ 569.160084][T12906] loop5: detected capacity change from 0 to 7 [ 569.170571][ T5709] pwc: recv_control_msg error -32 req 02 val 2700 [ 569.180479][T12908] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1909'. [ 569.189688][T12906] loop5: p1 < > p3 p4 [ 569.192964][T12908] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 569.195109][T12906] loop5: partition table partially beyond EOD, [ 569.203339][ T5709] pwc: recv_control_msg error -32 req 02 val 2c00 [ 569.227093][T12906] truncated [ 569.237193][ T5709] pwc: recv_control_msg error -32 req 04 val 1000 [ 569.244569][T12906] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 569.255390][T12906] loop5: p4 start 33554432 is beyond EOD, truncated [ 569.262700][ T5709] pwc: recv_control_msg error -32 req 04 val 1300 [ 569.270629][ T5709] pwc: recv_control_msg error -32 req 04 val 1400 [ 569.282890][ T5709] pwc: recv_control_msg error -32 req 02 val 2000 [ 569.305773][ T5709] pwc: recv_control_msg error -32 req 02 val 2100 [ 569.306136][ T5695] steelseries 0003:1038:12B6.002F: item fetching failed at offset 5/7 [ 569.316477][ T5709] pwc: recv_control_msg error -32 req 04 val 1500 [ 569.353104][ T5695] steelseries 0003:1038:12B6.002F: probe with driver steelseries failed with error -22 [ 569.365622][ T5709] pwc: recv_control_msg error -32 req 02 val 2500 [ 569.378958][ T5918] udevd[5918]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 569.394179][ T8802] udevd[8802]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 569.407139][ T5709] pwc: recv_control_msg error -32 req 02 val 2400 [ 569.417925][ T5709] pwc: recv_control_msg error -32 req 02 val 2600 [ 569.435044][ T5709] pwc: recv_control_msg error -32 req 02 val 2900 [ 569.456812][ T5709] pwc: recv_control_msg error -32 req 02 val 2800 [ 569.472678][ T5709] pwc: recv_control_msg error -32 req 04 val 1100 [ 569.480114][ T5709] pwc: recv_control_msg error -32 req 04 val 1200 [ 569.507578][ T5709] pwc: Registered as video103. [ 569.531546][ T5709] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input70 [ 569.594157][ T5709] usb 4-1: USB disconnect, device number 104 [ 570.030864][T12513] usb 1-1: new full-speed USB device number 92 using dummy_hcd [ 570.065344][T12933] tipc: Started in network mode [ 570.074272][T12933] tipc: Node identity 6e79dddaecbe, cluster identity 4711 [ 570.094975][T12933] tipc: Enabled bearer , priority 0 [ 570.112411][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 570.130937][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1915'. [ 570.176710][T12931] syzkaller0: entered promiscuous mode [ 570.192754][T12513] usb 1-1: config 0 has an invalid interface number: 214 but max is 0 [ 570.202283][T12931] syzkaller0: entered allmulticast mode [ 570.213475][T12513] usb 1-1: config 0 has no interface number 0 [ 570.220290][T12513] usb 1-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 570.235450][T12513] usb 1-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 570.253083][T12513] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 570.262936][T12513] usb 1-1: Manufacturer: syz [ 570.270759][T12933] tipc: Resetting bearer [ 570.279442][T12513] usb 1-1: SerialNumber: syz [ 570.293912][T12513] usb 1-1: config 0 descriptor?? [ 570.418414][T12930] tipc: Resetting bearer [ 570.468780][T12930] tipc: Disabling bearer [ 570.565830][T12513] usbtouchscreen 1-1:0.214: Failed to read FW rev: -71 [ 570.593371][T12513] usbtouchscreen 1-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 570.614598][ T5709] usb 2-1: USB disconnect, device number 99 [ 570.708882][T12513] usb 1-1: USB disconnect, device number 92 [ 570.857648][T12940] loop2: detected capacity change from 0 to 7 [ 570.914583][T12940] Dev loop2: unable to read RDB block 7 [ 570.962661][T12940] loop2: AHDI p1 p2 p3 [ 570.973126][T12940] loop2: partition table partially beyond EOD, truncated [ 570.986928][T12940] loop2: p1 start 1818582900 is beyond EOD, truncated [ 571.009759][T12940] loop2: p3 start 335544320 is beyond EOD, truncated [ 571.574011][T12954] fuse: Unknown parameter '' [ 571.839074][T12962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1925'. [ 572.326592][T12954] x_tables: ip_tables: osf match: only valid for protocol 6 [ 572.442447][ T5693] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 572.610520][ T5693] usb 2-1: Using ep0 maxpacket: 32 [ 572.632532][ T5693] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 572.665767][ T5693] usb 2-1: config 0 has no interface number 0 [ 572.678704][T12976] xt_policy: output policy not valid in PREROUTING and INPUT [ 572.687515][T12979] loop2: detected capacity change from 0 to 7 [ 572.713361][T12979] Dev loop2: unable to read RDB block 7 [ 572.722864][T12979] loop2: AHDI p1 p2 p3 [ 572.740149][T12979] loop2: partition table partially beyond EOD, truncated [ 572.740271][ T5693] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 572.780069][T12979] loop2: p1 start 1818582900 is beyond EOD, truncated [ 572.794891][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.808011][T12979] loop2: p3 start 335544320 is beyond EOD, truncated [ 572.852481][ T5693] usb 2-1: Product: syz [ 572.873225][ T5693] usb 2-1: Manufacturer: syz [ 572.890570][ T5693] usb 2-1: SerialNumber: syz [ 572.927600][ T5693] usb 2-1: config 0 descriptor?? [ 573.149348][T12981] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 573.276545][T12981] batman_adv: batadv0: Adding interface: ip6gretap1 [ 573.351736][T12981] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 573.404340][T12981] batman_adv: batadv0: Interface activated: ip6gretap1 [ 573.583601][T12513] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 573.774727][T12513] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 573.797667][T12513] usb 6-1: config 0 has no interfaces? [ 573.813584][T12513] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 573.832039][T12513] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 573.859072][T12513] usb 6-1: Product: syz [ 573.872290][T12513] usb 6-1: Manufacturer: syz [ 573.891615][T12513] usb 6-1: config 0 descriptor?? [ 574.046409][ T5693] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 574.080659][ T5702] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 574.092496][ T5693] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 574.127694][ T5695] usb 6-1: USB disconnect, device number 62 [ 574.260748][ T5702] usb 5-1: Using ep0 maxpacket: 16 [ 574.268597][ T5702] usb 5-1: config 3 has an invalid interface number: 20 but max is 0 [ 574.300791][ T5702] usb 5-1: config 3 has no interface number 0 [ 574.309980][ T5702] usb 5-1: config 3 interface 20 has no altsetting 0 [ 574.340173][ T5702] usb 5-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 574.363585][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.384106][ T5702] usb 5-1: Product: syz [ 574.394123][ T5702] usb 5-1: Manufacturer: syz [ 574.404588][ T5702] usb 5-1: SerialNumber: syz [ 574.726955][ T5693] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 574.765012][ T5702] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:3.20/input/input72 [ 574.783186][ T5693] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 574.811158][ T4979] bcm5974 5-1:3.20: could not read from device [ 574.853425][ T5693] usb 2-1: USB disconnect, device number 100 [ 574.879170][ T4979] bcm5974 5-1:3.20: could not read from device [ 574.894468][ T5702] usb 5-1: USB disconnect, device number 80 [ 574.931217][ T4979] bcm5974 5-1:3.20: could not read from device [ 575.105193][T12995] bond11: Removing last arp target with arp_interval on [ 575.115010][T12995] bond11: entered promiscuous mode [ 575.120272][T12995] bond11: entered allmulticast mode [ 575.126379][T12995] 8021q: adding VLAN 0 to HW filter on device bond11 [ 575.590985][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 575.630182][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 575.675528][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 575.700560][T12513] usb 5-1: new full-speed USB device number 81 using dummy_hcd [ 575.710251][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 575.719610][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 575.750127][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 575.773603][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 575.797566][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 575.880299][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1939'. [ 576.039331][T13006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.064319][T13006] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.101662][T13006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.192723][T13006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.227571][T13006] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 576.238428][T13006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.270699][T13006] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 576.300793][T13012] gretap0: Device is already in use. [ 576.435675][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.442967][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 576.506145][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.513461][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 576.589273][T13025] netlink: 'syz.3.1944': attribute type 29 has an invalid length. [ 576.653133][T13026] netlink: 'syz.3.1944': attribute type 29 has an invalid length. [ 576.661684][T13024] IPVS: Unknown mcast interface: veth1_to_bridge [ 576.729494][T13025] IPVS: stopping master sync thread 11313 ... [ 577.040905][ T5709] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 577.086862][T13034] __nla_validate_parse: 41 callbacks suppressed [ 577.086926][T13034] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1946'. [ 577.225673][ T5709] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 577.236407][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.253433][ T5709] usb 4-1: Product: syz [ 577.260802][ T5709] usb 4-1: Manufacturer: syz [ 577.270182][ T5709] usb 4-1: SerialNumber: syz [ 577.292715][ T5709] usb 4-1: config 0 descriptor?? [ 577.332834][T12513] usb 5-1: unable to get BOS descriptor or descriptor too short [ 577.352535][ T5709] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 577.370621][T12513] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 577.395884][T12513] usb 5-1: can't read configurations, error -71 [ 577.406261][ T5709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 577.419443][ T5709] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 577.435546][ T5709] usb 4-1: media controller created [ 577.460291][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 577.520074][T13026] dvb-usb: bulk message failed: -22 (7/0) [ 577.755375][ T5709] DVB: Unable to find symbol mt352_attach() [ 577.935028][ T5709] DVB: Unable to find symbol nxt6000_attach() [ 577.944593][T13049] fuse: Bad value for 'fd' [ 577.948245][ T5709] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 577.975052][ T5709] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input73 [ 578.024150][ T5709] dvb-usb: schedule remote query interval to 1000 msecs. [ 578.033815][ T5709] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 578.047022][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 578.054635][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 578.240886][ T29] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 578.412386][ T29] usb 2-1: Using ep0 maxpacket: 32 [ 578.422234][ T29] usb 2-1: config index 0 descriptor too short (expected 6701, got 45) [ 578.431210][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 578.451570][ T29] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.486644][ T29] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.523328][ T29] usb 2-1: config 0 interface 0 has no altsetting 0 [ 578.546458][ T29] usb 2-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.9d [ 578.570635][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.604390][ T29] usb 2-1: config 0 descriptor?? [ 578.857792][T13061] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 579.046717][ T5709] dvb-usb: bulk message failed: -22 (7/0) [ 579.073114][ T5709] dvb-usb: error while querying for an remote control event. [ 579.136493][T13062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1954'. [ 579.173445][T13072] netlink: 'syz.1.1950': attribute type 6 has an invalid length. [ 579.422298][ T5702] usb 4-1: USB disconnect, device number 105 [ 579.517584][ T5702] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 579.623631][ T5709] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 579.800852][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 579.812554][ T5709] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 33, changing to 7 [ 579.845467][ T5709] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 579.860431][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.880434][ T5709] usb 1-1: Product: syz [ 579.884822][ T5709] usb 1-1: Manufacturer: syz [ 579.889478][ T5709] usb 1-1: SerialNumber: syz [ 579.917938][ T5709] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 580.220026][ T5709] usb 1-1: USB disconnect, device number 93 [ 580.339107][ T8802] udevd[8802]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 580.509874][T13092] netlink: 'syz.4.1963': attribute type 10 has an invalid length. [ 580.537142][T13092] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 581.010257][ T29] usbhid 2-1:0.0: can't add hid device: -71 [ 581.030944][ T29] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 581.061008][ T29] usb 2-1: USB disconnect, device number 101 [ 581.100559][T12513] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 581.270487][T12513] usb 1-1: Using ep0 maxpacket: 16 [ 581.290526][T12513] usb 1-1: config 3 has an invalid interface number: 20 but max is 0 [ 581.311786][T12513] usb 1-1: config 3 has no interface number 0 [ 581.330837][T12513] usb 1-1: config 3 interface 20 has no altsetting 0 [ 581.342611][T12513] usb 1-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 581.359786][T12513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.377790][T12513] usb 1-1: Product: syz [ 581.387700][T12513] usb 1-1: Manufacturer: syz [ 581.397126][T12513] usb 1-1: SerialNumber: syz [ 581.731672][ T5693] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 581.762131][T12513] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:3.20/input/input74 [ 581.797154][ T4979] bcm5974 1-1:3.20: could not read from device [ 581.865620][ T4979] bcm5974 1-1:3.20: could not read from device [ 581.872920][T12513] usb 1-1: USB disconnect, device number 94 [ 581.922547][ T5693] usb 5-1: config 0 has an invalid interface number: 17 but max is 0 [ 581.937792][ T5693] usb 5-1: config 0 has no interface number 0 [ 581.944315][ T5693] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 581.956232][ T5693] usb 5-1: config 0 interface 17 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 581.966661][ T5693] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 581.993823][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.003920][T13114] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1971'. [ 582.043734][ T5693] usb 5-1: config 0 descriptor?? [ 582.209162][T13116] loop2: detected capacity change from 0 to 7 [ 582.221540][T13116] Dev loop2: unable to read RDB block 7 [ 582.235651][T13116] loop2: AHDI p1 p2 p3 [ 582.264818][T13116] loop2: partition table partially beyond EOD, truncated [ 582.283732][T13116] loop2: p1 start 1818582900 is beyond EOD, truncated [ 582.298112][T13116] loop2: p3 start 335544320 is beyond EOD, truncated [ 582.487291][T13122] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1975'. [ 582.713466][T13127] xt_l2tp: missing protocol rule (udp|l2tpip) [ 582.817518][T13126] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 582.902719][ T5693] usbhid 5-1:0.17: can't add hid device: -71 [ 582.932301][ T5693] usbhid 5-1:0.17: probe with driver usbhid failed with error -71 [ 582.982803][ T5693] usb 5-1: USB disconnect, device number 83 [ 583.086265][T13130] overlayfs: missing 'lowerdir' [ 584.259498][T13159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1983'. [ 584.332806][T13163] IPVS: set_ctl: invalid protocol: 137 127.0.0.1:20001 [ 584.415668][T13165] input: syz0 as /devices/virtual/input/input75 [ 584.982067][T12513] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 585.024138][T13182] loop2: detected capacity change from 0 to 7 [ 585.096268][T13182] Dev loop2: unable to read RDB block 7 [ 585.138043][T13182] loop2: AHDI p1 p2 p3 [ 585.161459][T13182] loop2: partition table partially beyond EOD, truncated [ 585.229839][T13182] loop2: p1 start 1818582900 is beyond EOD, truncated [ 585.251327][T13182] loop2: p3 start 335544320 is beyond EOD, truncated [ 585.695811][T13190] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1991'. [ 585.845437][ T5702] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 586.010572][ T5702] usb 5-1: Using ep0 maxpacket: 8 [ 586.043629][ T5702] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 586.076052][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 586.112367][ T5702] usb 5-1: Product: syz [ 586.128316][ T5702] usb 5-1: Manufacturer: syz [ 586.151713][ T5702] usb 5-1: SerialNumber: syz [ 586.197289][ T5702] usb 5-1: config 0 descriptor?? [ 586.219517][ T5702] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 586.759014][T13197] binder: 13193:13197 ioctl 4018620d 0 returned -22 [ 587.796640][T13200] ucma_write: process 1377 (syz.0.1994) changed security contexts after opening file descriptor, this is not allowed. [ 588.320903][ T5693] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 588.500872][ T5693] usb 4-1: Using ep0 maxpacket: 16 [ 588.557520][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.613625][ T5693] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 588.647823][ T5693] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 588.684551][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 588.697934][ T5693] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 588.729001][ T5693] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.748053][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 588.766954][ T5693] usb 4-1: config 0 descriptor?? [ 588.775923][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 588.812389][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 588.872245][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 588.881848][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 588.894174][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 588.911455][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 588.923455][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 588.956598][ T5702] gspca_sonixj: reg_w1 err -71 [ 588.984637][T13217] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2000'. [ 589.001316][ T5702] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 589.022057][ T5702] usb 5-1: USB disconnect, device number 84 [ 589.235685][T13217] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 589.464368][ T5693] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 589.501396][ T5693] microsoft 0003:045E:07DA.0030: unknown main item tag 0x0 [ 589.522033][ T5693] microsoft 0003:045E:07DA.0030: unexpected long global item [ 589.568509][ T5693] microsoft 0003:045E:07DA.0030: parse failed [ 589.594550][ T5693] microsoft 0003:045E:07DA.0030: probe with driver microsoft failed with error -22 [ 589.718814][T13222] program syz.4.2001 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.038379][T13227] bond0: entered promiscuous mode [ 590.056421][T13227] bond_slave_0: entered promiscuous mode [ 590.080852][T13227] bond_slave_1: entered promiscuous mode [ 590.106337][T13227] veth0_to_bond: entered promiscuous mode [ 590.130076][T13227] batadv0: entered promiscuous mode [ 590.159289][T13227] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 590.220826][T13227] bond0: left promiscuous mode [ 590.229270][T13227] bond_slave_0: left promiscuous mode [ 590.244286][T13227] bond_slave_1: left promiscuous mode [ 590.258171][T13227] veth0_to_bond: left promiscuous mode [ 590.275491][T13227] batadv0: left promiscuous mode [ 591.372505][ T5702] usb 4-1: USB disconnect, device number 106 [ 591.832082][T13264] loop2: detected capacity change from 0 to 7 [ 591.877863][T13264] Dev loop2: unable to read RDB block 7 [ 591.901654][T13264] loop2: AHDI p1 p2 p3 [ 591.919099][T13264] loop2: partition table partially beyond EOD, truncated [ 591.960552][T13264] loop2: p1 start 1818582900 is beyond EOD, truncated [ 591.988164][T13264] loop2: p3 start 335544320 is beyond EOD, truncated [ 592.214958][T13274] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 592.243082][T13274] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 592.688328][T12513] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 592.870765][T12513] usb 1-1: Using ep0 maxpacket: 16 [ 592.913581][T12513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 592.956830][T12513] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 592.998234][T12513] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 593.033598][T12513] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 593.070426][T12513] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 593.112975][T12513] usb 1-1: config 0 descriptor?? [ 593.182965][T13287] netlink: zone id is out of range [ 593.188157][T13287] netlink: zone id is out of range [ 593.259753][T13287] netlink: zone id is out of range [ 593.299709][T13287] netlink: zone id is out of range [ 593.311813][T13287] netlink: zone id is out of range [ 593.317056][T13287] netlink: zone id is out of range [ 593.323970][T13287] netlink: zone id is out of range [ 593.338875][T13287] netlink: zone id is out of range [ 593.357441][T13287] netlink: get zone limit has 4 unknown bytes [ 593.550056][T12513] belkin 0003:1020:0006.0031: unknown main item tag 0x0 [ 593.575617][T12513] belkin 0003:1020:0006.0031: unknown main item tag 0x0 [ 593.596596][T12513] belkin 0003:1020:0006.0031: unknown main item tag 0x0 [ 593.605617][T12513] belkin 0003:1020:0006.0031: unknown main item tag 0x0 [ 593.614593][T12513] belkin 0003:1020:0006.0031: unknown main item tag 0x0 [ 593.623481][T12513] belkin 0003:1020:0006.0031: unknown main item tag 0x0 [ 593.632313][T12513] belkin 0003:1020:0006.0031: unknown main item tag 0x6 [ 593.639777][T12513] belkin 0003:1020:0006.0031: invalid report_size 858 [ 593.649148][T12513] belkin 0003:1020:0006.0031: item 0 2 1 7 parsing failed [ 593.659351][T12513] belkin 0003:1020:0006.0031: parse failed [ 593.666850][T12513] belkin 0003:1020:0006.0031: probe with driver belkin failed with error -22 [ 593.752987][T12513] usb 1-1: USB disconnect, device number 96 [ 593.970700][ T9358] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 594.140290][ T9358] usb 5-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 594.164773][ T9358] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.186846][ T9358] usb 5-1: Product: syz [ 594.199750][ T9358] usb 5-1: Manufacturer: syz [ 594.214406][ T9358] usb 5-1: SerialNumber: syz [ 594.225994][T13310] loop2: detected capacity change from 0 to 7 [ 594.235611][ T9358] usb 5-1: config 0 descriptor?? [ 594.251032][T13310] Dev loop2: unable to read RDB block 7 [ 594.252775][ T9358] i2c-tiny-usb 5-1:0.0: version 6d.cc found at bus 005 address 085 [ 594.330513][T13310] loop2: AHDI p1 p2 p3 [ 594.358441][T13310] loop2: partition table partially beyond EOD, truncated [ 594.415289][T13310] loop2: p1 start 1818582900 is beyond EOD, truncated [ 594.437408][T13310] loop2: p3 start 335544320 is beyond EOD, truncated [ 594.719470][ T9358] (null): failure reading functionality [ 594.766465][ T9358] i2c i2c-1: failure reading functionality [ 594.797730][ T9358] i2c i2c-1: connected i2c-tiny-usb device [ 594.828702][ T9358] usb 5-1: USB disconnect, device number 85 [ 595.301678][ T5693] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 595.481472][ T5693] usb 6-1: Using ep0 maxpacket: 16 [ 595.505170][ T5693] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 595.528169][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.555984][ T5693] usb 6-1: Product: syz [ 595.569780][ T5693] usb 6-1: Manufacturer: syz [ 595.585353][ T5693] usb 6-1: SerialNumber: syz [ 595.632059][ T5693] usb 6-1: config 0 descriptor?? [ 595.684733][T13341] __nla_validate_parse: 40 callbacks suppressed [ 595.684750][T13341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2036'. [ 596.108138][T13329] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2032'. [ 596.289047][ T5693] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 596.328335][ T5693] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 596.348424][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2038'. [ 596.389542][ T5693] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 596.415608][ T5693] usb 6-1: media controller created [ 596.484222][ T5693] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 596.672782][ T5693] zl10353_read_register: readreg error (reg=127, ret==0) [ 596.695014][ T5693] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 596.715074][ T5693] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 596.751611][ T5693] usb 6-1: USB disconnect, device number 63 [ 597.083309][T13364] FAULT_INJECTION: forcing a failure. [ 597.083309][T13364] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 597.118684][ T5693] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 597.157822][T13364] CPU: 0 UID: 0 PID: 13364 Comm: syz.4.2042 Tainted: G L syzkaller #0 PREEMPT(full) [ 597.157854][T13364] Tainted: [L]=SOFTLOCKUP [ 597.157862][T13364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 597.157876][T13364] Call Trace: [ 597.157885][T13364] [ 597.157893][T13364] dump_stack_lvl+0xe8/0x150 [ 597.157924][T13364] should_fail_ex+0x412/0x560 [ 597.157960][T13364] _copy_from_user+0x2d/0xb0 [ 597.157992][T13364] ___sys_sendmsg+0x1c6/0x360 [ 597.158019][T13364] ? __lock_acquire+0x6b5/0x2cf0 [ 597.158047][T13364] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.158111][T13364] ? __fget_files+0x2a/0x420 [ 597.158135][T13364] ? __fget_files+0x3a0/0x420 [ 597.158171][T13364] __x64_sys_sendmsg+0x1bd/0x2a0 [ 597.158202][T13364] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.158239][T13364] ? __pfx_ksys_write+0x10/0x10 [ 597.158278][T13364] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.158301][T13364] do_syscall_64+0x15f/0xf80 [ 597.158327][T13364] ? trace_irq_disable+0x3b/0x140 [ 597.158358][T13364] ? clear_bhb_loop+0x40/0x90 [ 597.158385][T13364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.158406][T13364] RIP: 0033:0x7f7d49b9cdd9 [ 597.158426][T13364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.158445][T13364] RSP: 002b:00007f7d4a982028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.158467][T13364] RAX: ffffffffffffffda RBX: 00007f7d49e16090 RCX: 00007f7d49b9cdd9 [ 597.158483][T13364] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 597.158498][T13364] RBP: 00007f7d4a982090 R08: 0000000000000000 R09: 0000000000000000 [ 597.158511][T13364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 597.158523][T13364] R13: 00007f7d49e16128 R14: 00007f7d49e16090 R15: 00007f7d49f3fa48 [ 597.158556][T13364] [ 597.508190][T13373] tipc: Enabled bearer , priority 0 [ 597.547301][T13373] tipc: Resetting bearer [ 597.611508][T13372] tipc: Disabling bearer [ 597.731710][T12513] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 597.902810][T12513] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 597.916905][T12513] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 597.933232][T12513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.942860][T12513] usb 1-1: Product: syz [ 597.947168][T12513] usb 1-1: Manufacturer: syz [ 597.952807][T12513] usb 1-1: SerialNumber: syz [ 597.967931][T12513] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 598.020523][ T5693] usb 6-1: new high-speed USB device number 64 using dummy_hcd [ 598.170474][ T5693] usb 6-1: device descriptor read/64, error -71 [ 598.431526][ T5693] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 598.578038][T13406] FAULT_INJECTION: forcing a failure. [ 598.578038][T13406] name failslab, interval 1, probability 0, space 0, times 0 [ 598.591468][ T5693] usb 6-1: device descriptor read/64, error -71 [ 598.606057][T13406] CPU: 0 UID: 0 PID: 13406 Comm: syz.1.2057 Tainted: G L syzkaller #0 PREEMPT(full) [ 598.606095][T13406] Tainted: [L]=SOFTLOCKUP [ 598.606104][T13406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 598.606118][T13406] Call Trace: [ 598.606128][T13406] [ 598.606138][T13406] dump_stack_lvl+0xe8/0x150 [ 598.606169][T13406] should_fail_ex+0x412/0x560 [ 598.606203][T13406] should_failslab+0xa8/0x100 [ 598.606246][T13406] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 598.606277][T13406] ? __alloc_skb+0x186/0x7d0 [ 598.606301][T13406] ? __alloc_skb+0x1d0/0x7d0 [ 598.606324][T13406] ? __local_bh_enable_ip+0xd0/0x130 [ 598.606352][T13406] __alloc_skb+0x1d0/0x7d0 [ 598.606377][T13406] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 598.606413][T13406] netlink_sendmsg+0x5d4/0xb40 [ 598.606452][T13406] ? __pfx_netlink_sendmsg+0x10/0x10 [ 598.606484][T13406] ? aa_sock_msg_perm+0xf1/0x1b0 [ 598.606514][T13406] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 598.606548][T13406] ____sys_sendmsg+0x972/0x9f0 [ 598.606576][T13406] ? __might_fault+0xaf/0x130 [ 598.606611][T13406] ? __pfx_____sys_sendmsg+0x10/0x10 [ 598.606657][T13406] ? import_iovec+0x73/0xa0 [ 598.606693][T13406] ___sys_sendmsg+0x2a5/0x360 [ 598.606720][T13406] ? __lock_acquire+0x6b5/0x2cf0 [ 598.606749][T13406] ? __pfx____sys_sendmsg+0x10/0x10 [ 598.606818][T13406] ? __fget_files+0x2a/0x420 [ 598.606844][T13406] ? __fget_files+0x3a0/0x420 [ 598.606881][T13406] __x64_sys_sendmsg+0x1bd/0x2a0 [ 598.606914][T13406] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 598.606954][T13406] ? __pfx_ksys_write+0x10/0x10 [ 598.606995][T13406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.607019][T13406] do_syscall_64+0x15f/0xf80 [ 598.607045][T13406] ? trace_irq_disable+0x3b/0x140 [ 598.607078][T13406] ? clear_bhb_loop+0x40/0x90 [ 598.607107][T13406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.607130][T13406] RIP: 0033:0x7ff8e099cdd9 [ 598.607151][T13406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 598.607170][T13406] RSP: 002b:00007ff8e17cf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 598.607194][T13406] RAX: ffffffffffffffda RBX: 00007ff8e0c15fa0 RCX: 00007ff8e099cdd9 [ 598.607211][T13406] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 598.607227][T13406] RBP: 00007ff8e17cf090 R08: 0000000000000000 R09: 0000000000000000 [ 598.607241][T13406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.607255][T13406] R13: 00007ff8e0c16038 R14: 00007ff8e0c15fa0 R15: 00007ff8e0d3fa48 [ 598.607290][T13406] [ 599.140556][ T5693] usb usb6-port1: attempt power cycle [ 599.491173][ T5693] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 599.516030][ T5693] usb 6-1: device descriptor read/8, error -71 [ 599.695781][T13416] netlink: 'syz.1.2061': attribute type 12 has an invalid length. [ 599.770474][ T5693] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 599.804984][ T5693] usb 6-1: device descriptor read/8, error -71 [ 599.858352][T13416] syzkaller0: entered promiscuous mode [ 599.865133][T13416] syzkaller0: entered allmulticast mode [ 599.923769][ T5693] usb usb6-port1: unable to enumerate USB device [ 601.005873][T13435] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2067'. [ 601.234429][T12513] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 601.275964][T12513] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 601.312751][T12513] usb 1-1: media controller created [ 601.354222][T12513] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 601.645571][T13447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 601.679032][T12513] usb 1-1: USB disconnect, device number 97 [ 601.850444][ T5693] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 602.030423][ T5693] usb 6-1: Using ep0 maxpacket: 16 [ 602.057764][ T5693] usb 6-1: config 3 has an invalid interface number: 20 but max is 0 [ 602.082362][ T5693] usb 6-1: config 3 has no interface number 0 [ 602.099233][ T5693] usb 6-1: config 3 interface 20 has no altsetting 0 [ 602.125443][ T5693] usb 6-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 602.156495][ T5693] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.196687][ T5693] usb 6-1: Product: syz [ 602.217879][ T5693] usb 6-1: Manufacturer: syz [ 602.228670][ T5693] usb 6-1: SerialNumber: syz [ 602.628503][ T5693] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:3.20/input/input76 [ 602.724555][ T4979] bcm5974 6-1:3.20: could not read from device [ 602.777992][ T4979] bcm5974 6-1:3.20: could not read from device [ 602.789101][ T5693] usb 6-1: USB disconnect, device number 68 [ 602.807481][ T4979] bcm5974 6-1:3.20: could not read from device [ 604.003447][ T5693] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 604.157138][ T5693] usb 1-1: device descriptor read/64, error -71 [ 604.413224][ T5693] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 604.564681][ T5693] usb 1-1: device descriptor read/64, error -71 [ 604.691341][ T9358] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 604.701116][ T5693] usb usb1-port1: attempt power cycle [ 604.791981][T13486] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2078'. [ 604.861148][ T9358] usb 2-1: Using ep0 maxpacket: 16 [ 604.876088][ T9358] usb 2-1: config 0 has no interfaces? [ 604.902682][ T9358] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 604.946862][ T9358] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.985351][ T9358] usb 2-1: config 0 descriptor?? [ 605.050976][ T5693] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 605.083749][ T5693] usb 1-1: device descriptor read/8, error -71 [ 605.344041][ T5693] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 605.401536][ T5693] usb 1-1: device descriptor read/8, error -71 [ 605.515149][T13494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 605.527645][ T5693] usb usb1-port1: unable to enumerate USB device [ 605.567646][T13494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 605.629530][ T5693] usb 2-1: USB disconnect, device number 102 [ 606.266086][T13512] loop2: detected capacity change from 0 to 7 [ 606.288635][T13512] Dev loop2: unable to read RDB block 7 [ 606.304049][T13512] loop2: AHDI p1 p2 p3 [ 606.315809][T13512] loop2: partition table partially beyond EOD, truncated [ 606.335822][T13512] loop2: p1 start 1818582900 is beyond EOD, truncated [ 606.355800][T13512] loop2: p3 start 335544320 is beyond EOD, truncated [ 606.490757][ T5693] usb 4-1: new full-speed USB device number 107 using dummy_hcd [ 606.661605][ T29] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 606.664715][ T5693] usb 4-1: not running at top speed; connect to a high speed hub [ 606.709209][ T5693] usb 4-1: config 11 has an invalid interface number: 95 but max is 0 [ 606.733317][ T5693] usb 4-1: config 11 has no interface number 0 [ 606.753194][ T5693] usb 4-1: config 11 interface 95 altsetting 64 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 606.791800][ T5702] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 606.802629][ T5693] usb 4-1: config 11 interface 95 has no altsetting 0 [ 606.823483][ T5693] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 606.834210][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 606.849045][ T5693] usb 4-1: Manufacturer: syz [ 607.003156][ T5702] usb 2-1: config index 0 descriptor too short (expected 65402, got 45) [ 607.038425][ T5702] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 607.052955][ T5702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.063548][ T5702] usb 2-1: Product: syz [ 607.069595][ T5702] usb 2-1: Manufacturer: syz [ 607.080469][ T5702] usb 2-1: SerialNumber: syz [ 607.102037][ T5693] usbtouchscreen 4-1:11.95: probe with driver usbtouchscreen failed with error -71 [ 607.165112][ T5693] usb 4-1: USB disconnect, device number 107 [ 607.420775][ T5709] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 607.515222][T13528] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 607.590489][ T5709] usb 1-1: Using ep0 maxpacket: 32 [ 607.614544][ T5709] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 607.639142][ T5709] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.667253][ T5709] usb 1-1: Product: syz [ 607.682430][ T5709] usb 1-1: Manufacturer: syz [ 607.687265][ T5709] usb 1-1: SerialNumber: syz [ 607.717704][ T5709] usb 1-1: config 0 descriptor?? [ 607.759836][ T5709] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 607.791098][ T5709] dvb-usb: bulk message failed: -22 (4/0) [ 607.824317][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 607.858843][ T5709] dvb-usb: bulk message failed: -22 (5/0) [ 607.868810][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 607.890094][ T5709] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 607.913901][ T5709] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 607.930735][ T5709] usb 1-1: media controller created [ 607.960910][T13519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.994251][ T5709] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 608.015750][T13519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.063488][T13535] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 608.077062][ T5709] usb 1-1: selecting invalid altsetting 3 [ 608.093091][ T5709] ttusb2: set interface to alts=3 failed [ 608.227026][ T5702] rtl8150 2-1:1.0: couldn't reset the device [ 608.238518][ T5702] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5 [ 608.257819][ T5709] DVB: Unable to find symbol tda10086_attach() [ 608.273079][ T5709] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 608.283401][ T5709] dvb-usb: bulk message failed: -22 (4/0) [ 608.294885][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 608.315803][ T5709] dvb-usb: bulk message failed: -22 (5/0) [ 608.324979][ T5709] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 608.335883][ T5709] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 608.368263][ T5709] usb 1-1: USB disconnect, device number 102 [ 608.559278][ T5709] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 608.737228][T13549] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2096'. [ 608.840114][T13542] geneve2: entered promiscuous mode [ 608.855291][T13542] geneve2: entered allmulticast mode [ 609.482783][ T5709] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 609.565978][T12513] usb 2-1: USB disconnect, device number 103 [ 609.630759][ T5709] usb 1-1: device descriptor read/64, error -71 [ 609.880780][ T5709] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 610.020545][ T5709] usb 1-1: device descriptor read/64, error -71 [ 610.154333][ T5709] usb usb1-port1: attempt power cycle [ 610.521540][ T5709] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 610.582779][ T5709] usb 1-1: device descriptor read/8, error -71 [ 610.850866][ T5709] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 610.891578][ T5709] usb 1-1: device descriptor read/8, error -71 [ 611.011249][ T5709] usb usb1-port1: unable to enumerate USB device [ 611.165640][T13581] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 611.289266][T13587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2108'. [ 611.300311][T13579] netlink: 'syz.5.2105': attribute type 21 has an invalid length. [ 611.309611][T13579] netlink: 128 bytes leftover after parsing attributes in process `syz.5.2105'. [ 611.320075][T13579] netlink: 'syz.5.2105': attribute type 4 has an invalid length. [ 611.328517][T13579] netlink: 'syz.5.2105': attribute type 3 has an invalid length. [ 611.339300][T13579] netlink: 3 bytes leftover after parsing attributes in process `syz.5.2105'. [ 611.450697][ T5709] usb 4-1: new full-speed USB device number 108 using dummy_hcd [ 611.612928][ T5709] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 611.637105][ T5709] usb 4-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 611.663534][ T5709] usb 4-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 611.688146][ T5709] usb 4-1: config 150 has no interface number 0 [ 611.704655][ T5709] usb 4-1: config 150 interface 204 has no altsetting 0 [ 611.729325][ T5709] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 611.752912][ T5709] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.783233][ T5709] usb 4-1: Product: syz [ 611.793464][ T5709] usb 4-1: Manufacturer: syz [ 611.808508][ T5709] usb 4-1: SerialNumber: syz [ 612.367300][ T5709] usb 4-1: USB disconnect, device number 108 [ 613.240597][ T5693] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 613.260475][ T29] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 613.403829][ T5693] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 613.430745][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 613.441448][ T5693] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 613.471373][ T29] usb 5-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 613.495178][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.514484][ T5693] usb 1-1: config 0 has no interface number 0 [ 613.538459][ T29] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 613.559458][ T5693] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 613.613236][ T5693] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 613.631615][ T5693] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 613.674765][ T5693] usb 1-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 613.695903][ T5693] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.713770][T13626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2119'. [ 613.718567][ T5693] usb 1-1: config 0 descriptor?? [ 613.940474][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 613.967281][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.037802][T13628] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2120'. [ 614.212656][ T5693] holtek_mouse 0003:04D9:A04A.0032: unknown main item tag 0x0 [ 614.240200][ T5693] holtek_mouse 0003:04D9:A04A.0032: unknown main item tag 0x0 [ 614.270502][ T5693] holtek_mouse 0003:04D9:A04A.0032: unknown main item tag 0x0 [ 614.297269][ T5693] holtek_mouse 0003:04D9:A04A.0032: unknown main item tag 0x0 [ 614.327844][ T5693] holtek_mouse 0003:04D9:A04A.0032: unknown main item tag 0x0 [ 614.355843][ T5693] holtek_mouse 0003:04D9:A04A.0032: unknown main item tag 0x0 [ 614.390545][ T5693] holtek_mouse 0003:04D9:A04A.0032: unknown main item tag 0x0 [ 614.408241][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.423295][ T5693] holtek_mouse 0003:04D9:A04A.0032: unknown main item tag 0x0 [ 614.445893][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.458242][ T5693] holtek_mouse 0003:04D9:A04A.0032: unknown main item tag 0x0 [ 614.482393][T13621] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 614.491169][ T5693] holtek_mouse 0003:04D9:A04A.0032: unknown main item tag 0x0 [ 614.513470][T13621] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 614.532392][ T5693] holtek_mouse 0003:04D9:A04A.0032: hidraw0: USB HID v7f.fd Device [HID 04d9:a04a] on usb-dummy_hcd.0-1/input1 [ 614.554445][ T29] gspca_nw80x: reg_w err -71 [ 614.584893][ T29] nw80x 5-1:3.0: probe with driver nw80x failed with error -71 [ 614.624883][ T5693] usb 1-1: USB disconnect, device number 107 [ 614.649254][ T29] usb 5-1: USB disconnect, device number 87 [ 614.867518][T13631] fido_id[13631]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 615.303879][T13639] capability: warning: `syz.0.2124' uses 32-bit capabilities (legacy support in use) [ 615.893974][T13663] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2130'. [ 616.101477][ T29] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 616.168776][T13670] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2131'. [ 616.260645][ T29] usb 1-1: Using ep0 maxpacket: 8 [ 616.277276][ T29] usb 1-1: unable to get BOS descriptor or descriptor too short [ 616.308565][ T29] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 616.326954][ T29] usb 1-1: can't read configurations, error -71 [ 616.366829][T13672] xt_hashlimit: size too large, truncated to 1048576 [ 616.431773][T13673] loop5: detected capacity change from 0 to 7 [ 616.485781][T13673] Dev loop5: unable to read RDB block 7 [ 616.499036][T13673] loop5: AHDI p1 p2 p3 [ 616.509198][T13673] loop5: partition table partially beyond EOD, truncated [ 616.545676][T13673] loop5: p1 start 1601398130 is beyond EOD, truncated [ 616.571069][T13673] loop5: p2 start 1702059890 is beyond EOD, truncated [ 616.886307][ T4994] Dev loop5: unable to read RDB block 7 [ 616.905284][ T4994] loop5: AHDI p1 p2 p3 [ 616.919170][ T4994] loop5: partition table partially beyond EOD, truncated [ 616.939333][ T4994] loop5: p1 start 1601398130 is beyond EOD, truncated [ 616.953774][ T4994] loop5: p2 start 1702059890 is beyond EOD, truncated [ 617.234290][T13693] FAULT_INJECTION: forcing a failure. [ 617.234290][T13693] name failslab, interval 1, probability 0, space 0, times 0 [ 617.266149][T13693] CPU: 1 UID: 0 PID: 13693 Comm: syz.3.2138 Tainted: G L syzkaller #0 PREEMPT(full) [ 617.266187][T13693] Tainted: [L]=SOFTLOCKUP [ 617.266196][T13693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 617.266209][T13693] Call Trace: [ 617.266219][T13693] [ 617.266229][T13693] dump_stack_lvl+0xe8/0x150 [ 617.266259][T13693] should_fail_ex+0x412/0x560 [ 617.266293][T13693] should_failslab+0xa8/0x100 [ 617.266334][T13693] ? do_getname+0x2e/0x250 [ 617.266357][T13693] kmem_cache_alloc_noprof+0x87/0x650 [ 617.266395][T13693] do_getname+0x2e/0x250 [ 617.266416][T13693] ? __se_sys_renameat2+0x28/0x2c0 [ 617.266443][T13693] __se_sys_renameat2+0x34/0x2c0 [ 617.266468][T13693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.266492][T13693] do_syscall_64+0x15f/0xf80 [ 617.266649][T13693] ? trace_irq_disable+0x3b/0x140 [ 617.266687][T13693] ? clear_bhb_loop+0x40/0x90 [ 617.266715][T13693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.266738][T13693] RIP: 0033:0x7fe5b279cdd9 [ 617.266759][T13693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 617.266778][T13693] RSP: 002b:00007fe5b373f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 617.266875][T13693] RAX: ffffffffffffffda RBX: 00007fe5b2a15fa0 RCX: 00007fe5b279cdd9 [ 617.266898][T13693] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c [ 617.266915][T13693] RBP: 00007fe5b373f090 R08: 0000000000000000 R09: 0000000000000000 [ 617.266930][T13693] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 617.266945][T13693] R13: 00007fe5b2a16038 R14: 00007fe5b2a15fa0 R15: 00007fe5b2b3fa48 [ 617.266980][T13693] [ 617.698108][T13703] netlink: 'syz.3.2143': attribute type 1 has an invalid length. [ 617.738104][T13703] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2143'. [ 617.781300][T13705] tipc: Enabling of bearer rejected, already enabled [ 617.796041][T13702] syzkaller0: entered promiscuous mode [ 617.818743][T13702] syzkaller0: entered allmulticast mode [ 618.107561][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2146'. [ 618.130587][T12513] usb 5-1: new full-speed USB device number 88 using dummy_hcd [ 618.292933][T12513] usb 5-1: unable to get BOS descriptor or descriptor too short [ 618.309372][T12513] usb 5-1: not running at top speed; connect to a high speed hub [ 618.324956][ T5702] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 618.336308][T12513] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 618.468093][T12513] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 618.500467][ T5702] usb 1-1: Using ep0 maxpacket: 16 [ 618.511035][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.531111][ T5702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 618.555885][ T5702] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 618.583911][ T5702] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 618.603347][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.623039][ T5702] usb 1-1: config 0 descriptor?? [ 618.642833][T13723] erspan1: entered promiscuous mode [ 618.662769][T13723] erspan1: entered allmulticast mode [ 618.862238][ T5702] microsoft 0003:045E:07DA.0033: ignoring exceeding usage max [ 618.902976][ T5702] microsoft 0003:045E:07DA.0033: report is too long [ 618.925947][ T5702] microsoft 0003:045E:07DA.0033: item 0 4 0 8 parsing failed [ 618.954072][ T5702] microsoft 0003:045E:07DA.0033: parse failed [ 618.979869][ T5702] microsoft 0003:045E:07DA.0033: probe with driver microsoft failed with error -22 [ 619.006539][T12513] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 619.027796][T12513] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 619.044614][T12513] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 619.061522][ T5702] usb 1-1: USB disconnect, device number 110 [ 619.144338][T12513] usb 5-1: SerialNumber: syz [ 619.159030][T13683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.167473][T13683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.182632][T13737] QAT: failed to copy from user. [ 619.247495][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 619.247514][ T30] audit: type=1326 audit(1777603510.555:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13729 comm="syz.1.2151" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff8e099cdd9 code=0xffff0000 [ 619.393917][T13683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.440890][T13683] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 619.733546][T13745] FAULT_INJECTION: forcing a failure. [ 619.733546][T13745] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 619.777301][T13745] CPU: 0 UID: 0 PID: 13745 Comm: syz.0.2155 Tainted: G L syzkaller #0 PREEMPT(full) [ 619.777344][T13745] Tainted: [L]=SOFTLOCKUP [ 619.777354][T13745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 619.777376][T13745] Call Trace: [ 619.777387][T13745] [ 619.777397][T13745] dump_stack_lvl+0xe8/0x150 [ 619.777429][T13745] should_fail_ex+0x412/0x560 [ 619.777466][T13745] strncpy_from_user+0x36/0x2b0 [ 619.777498][T13745] do_getname+0x77/0x250 [ 619.777527][T13745] __se_sys_renameat2+0x34/0x2c0 [ 619.777555][T13745] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.777580][T13745] do_syscall_64+0x15f/0xf80 [ 619.777608][T13745] ? trace_irq_disable+0x3b/0x140 [ 619.777643][T13745] ? clear_bhb_loop+0x40/0x90 [ 619.777671][T13745] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 619.777694][T13745] RIP: 0033:0x7f0329d9cdd9 [ 619.777715][T13745] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 619.777736][T13745] RSP: 002b:00007f0327ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000013c [ 619.777761][T13745] RAX: ffffffffffffffda RBX: 00007f032a015fa0 RCX: 00007f0329d9cdd9 [ 619.777779][T13745] RDX: ffffffffffffff9c RSI: 0000200000000000 RDI: ffffffffffffff9c [ 619.777796][T13745] RBP: 00007f0327ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 619.777812][T13745] R10: 00002000000004c0 R11: 0000000000000246 R12: 0000000000000001 [ 619.777827][T13745] R13: 00007f032a016038 R14: 00007f032a015fa0 R15: 00007f032a13fa48 [ 619.777862][T13745] [ 620.120268][T12513] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 620.674341][ T30] audit: type=1326 audit(1777603511.985:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13682 comm="syz.4.2136" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d49b9cdd9 code=0x0 [ 620.681178][ T5702] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 620.910431][ T5702] usb 6-1: Using ep0 maxpacket: 16 [ 620.932744][ T5702] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 620.960822][ T5702] usb 6-1: config 0 has no interface number 0 [ 620.968693][ T5702] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.004015][ T5702] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.034090][ T5702] usb 6-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 621.066595][ T5702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.093111][ T5702] usb 6-1: config 0 descriptor?? [ 621.318052][ T5693] usb 5-1: USB disconnect, device number 88 [ 621.713733][ T5702] uclogic 0003:28BD:0071.0034: pen parameters not found [ 621.727468][ T5702] uclogic 0003:28BD:0071.0034: interface is invalid, ignoring [ 621.953882][ T5710] usb 6-1: USB disconnect, device number 69 [ 622.172195][ T29] usb 4-1: new high-speed USB device number 109 using dummy_hcd [ 622.351486][ T29] usb 4-1: Using ep0 maxpacket: 8 [ 622.371530][ T29] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.391796][ T29] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 622.471522][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 622.521138][ T29] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 622.546887][ T29] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 622.575877][ T29] usb 4-1: Product: syz [ 622.589462][ T29] usb 4-1: Manufacturer: syz [ 622.602869][ T29] usb 4-1: SerialNumber: syz [ 622.628236][ T29] usb 4-1: config 0 descriptor?? [ 622.751637][ T29] rc_core: IR keymap rc-imon-rsc not found [ 622.773300][ T29] Registered IR keymap rc-empty [ 622.800115][ T29] rc rc0: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 622.829427][ T29] input: iMON Station as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input79 [ 623.440702][ T5702] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 623.624579][ T5702] usb 1-1: unable to get BOS descriptor or descriptor too short [ 623.648992][ T5702] usb 1-1: config 3 has an invalid interface number: 73 but max is 1 [ 623.682537][ T5702] usb 1-1: config 3 has no interface number 1 [ 623.704265][ T5702] usb 1-1: config 3 interface 73 altsetting 14 endpoint 0x2 has an invalid bInterval 136, changing to 7 [ 623.745956][ T5702] usb 1-1: config 3 interface 0 has no altsetting 0 [ 623.769342][ T5702] usb 1-1: config 3 interface 73 has no altsetting 0 [ 623.793534][ T5702] usb 1-1: New USB device found, idVendor=07ca, idProduct=2835, bcdDevice=eb.e7 [ 623.817589][ T5702] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.844618][ T5702] usb 1-1: Product: syz [ 623.867079][ T5702] usb 1-1: Manufacturer: syz [ 623.880551][ T5702] usb 1-1: SerialNumber: syz [ 624.105837][T13800] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2171'. [ 624.220787][ T5702] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 624.272257][ T5702] dvb_usb_af9035 1-1:3.0: probe with driver dvb_usb_af9035 failed with error -22 [ 624.342940][ T5702] usb 1-1: USB disconnect, device number 111 [ 624.482311][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.499277][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.881529][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 624.893955][T13810] binder: 13809:13810 ioctl c05c6104 200000000080 returned -22 [ 625.178508][ T29] usb 4-1: USB disconnect, device number 109 [ 625.321120][ T5702] usb 1-1: new full-speed USB device number 112 using dummy_hcd [ 625.492683][ T5702] usb 1-1: config 0 has an invalid interface number: 120 but max is 0 [ 625.515479][ T5702] usb 1-1: config 0 has no interface number 0 [ 625.546569][ T5702] usb 1-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.584190][ T5702] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 625.606735][ T5702] usb 1-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 625.619300][T13821] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 625.636804][ T5702] usb 1-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 625.648805][ T5702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.685614][ T5702] usb 1-1: config 0 descriptor?? [ 625.691491][ T29] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 625.731495][ T5702] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.120/input/input80 [ 625.870725][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 625.885558][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 625.901547][ T29] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 625.908971][ T9358] usb 6-1: new full-speed USB device number 70 using dummy_hcd [ 625.920728][ T5710] usb 1-1: USB disconnect, device number 112 [ 625.928366][ T29] usb 4-1: New USB device found, idVendor=046d, idProduct=c50c, bcdDevice= 0.00 [ 625.943051][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.998618][ T29] usb 4-1: config 0 descriptor?? [ 626.093411][ T9358] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 626.106623][ T9358] usb 6-1: config 17 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 626.117062][ T9358] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 626.128446][ T9358] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.230511][ T5702] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 626.410491][ T5702] usb 5-1: Using ep0 maxpacket: 32 [ 626.422733][ T5702] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 626.434043][ T5702] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 626.445382][ T5702] usb 5-1: config 0 interface 0 has no altsetting 0 [ 626.454951][ T5702] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 626.464330][ T5702] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.486393][ T29] hid_parser_main: 223 callbacks suppressed [ 626.491417][ T5702] usb 5-1: Product: syz [ 626.497844][ T29] logitech 0003:046D:C50C.0035: unknown main item tag 0x0 [ 626.509884][ T29] logitech 0003:046D:C50C.0035: unknown main item tag 0x0 [ 626.512281][ T5702] usb 5-1: Manufacturer: syz [ 626.526197][ T29] logitech 0003:046D:C50C.0035: unknown main item tag 0x0 [ 626.532469][ T5702] usb 5-1: SerialNumber: syz [ 626.540295][ T29] logitech 0003:046D:C50C.0035: unknown main item tag 0x0 [ 626.550097][ T29] logitech 0003:046D:C50C.0035: unknown main item tag 0x0 [ 626.561566][T13824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 626.563893][ T5702] usb 5-1: config 0 descriptor?? [ 626.584684][ T29] logitech 0003:046D:C50C.0035: unknown main item tag 0x0 [ 626.593249][ T29] logitech 0003:046D:C50C.0035: unknown main item tag 0x0 [ 626.601284][T13824] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 626.610095][ T29] logitech 0003:046D:C50C.0035: unknown main item tag 0x0 [ 626.618830][ T29] logitech 0003:046D:C50C.0035: unknown main item tag 0x0 [ 626.626493][ T29] logitech 0003:046D:C50C.0035: unknown main item tag 0x0 [ 626.638102][ T29] logitech 0003:046D:C50C.0035: item 0 0 0 8 parsing failed [ 626.648636][ T29] logitech 0003:046D:C50C.0035: parse failed [ 626.655749][ T29] logitech 0003:046D:C50C.0035: probe with driver logitech failed with error -22 [ 626.706017][T13838] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2184'. [ 626.718198][T13838] unsupported nlmsg_type 40 [ 626.722959][T13815] netlink: 'syz.3.2175': attribute type 12 has an invalid length. [ 626.722980][T13815] netlink: 'syz.3.2175': attribute type 29 has an invalid length. [ 626.722995][T13815] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2175'. [ 626.738089][ T29] usb 4-1: USB disconnect, device number 110 [ 626.835304][ T9358] aiptek 6-1:17.0: Aiptek using 400 ms programming speed [ 626.844469][ T30] audit: type=1326 audit(1777603518.155:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz.0.2185" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0329d9cdd9 code=0x7ffc0000 [ 626.888729][ T9358] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:17.0/input/input81 [ 626.912480][ T30] audit: type=1326 audit(1777603518.185:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz.0.2185" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0329d9cdd9 code=0x7ffc0000 [ 626.916747][ T9358] input: failed to attach handler kbd to device input81, error: -5 [ 626.953512][ T30] audit: type=1326 audit(1777603518.185:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz.0.2185" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=127 compat=0 ip=0x7f0329d9cdd9 code=0x7ffc0000 [ 627.007506][ T9358] usb 6-1: USB disconnect, device number 70 [ 627.057241][ T30] audit: type=1326 audit(1777603518.185:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz.0.2185" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0329d9cdd9 code=0x7ffc0000 [ 627.087153][ T5702] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 627.147898][ T30] audit: type=1326 audit(1777603518.185:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz.0.2185" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0329d5d60e code=0x7ffc0000 [ 627.183045][ T5695] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 627.205992][ T30] audit: type=1326 audit(1777603518.185:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz.0.2185" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0329d9cdd9 code=0x7ffc0000 [ 627.283966][ T30] audit: type=1326 audit(1777603518.185:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz.0.2185" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0329d9cdd9 code=0x7ffc0000 [ 627.302085][T13832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 627.325577][T13832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 627.370827][ T30] audit: type=1326 audit(1777603518.185:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz.0.2185" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0329d9cdd9 code=0x7ffc0000 [ 627.397157][ T5693] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 627.410801][ T5695] usb 1-1: New USB device found, idVendor=2040, idProduct=d853, bcdDevice=f8.f6 [ 627.420931][ T5695] usb 1-1: New USB device strings: Mfr=65, Product=2, SerialNumber=3 [ 627.430387][ T5695] usb 1-1: Product: syz [ 627.435195][ T30] audit: type=1326 audit(1777603518.195:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz.0.2185" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0329d9cdd9 code=0x7ffc0000 [ 627.459889][ T5695] usb 1-1: Manufacturer: syz [ 627.464723][ T5695] usb 1-1: SerialNumber: syz [ 627.496473][ T5695] usb 1-1: dvb_usb_v2: found a 'Hauppauge Mercury' in warm state [ 627.534614][ T30] audit: type=1326 audit(1777603518.195:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13839 comm="syz.0.2185" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0329d9cdd9 code=0x7ffc0000 [ 627.567143][ T5695] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 627.591465][ T5693] usb 2-1: Using ep0 maxpacket: 16 [ 627.596869][ T5695] dvbdev: DVB: registering new adapter (Hauppauge Mercury) [ 627.615112][ T5695] usb 1-1: media controller created [ 627.621240][ T5693] usb 2-1: config 3 has an invalid interface number: 20 but max is 0 [ 627.629599][ T5693] usb 2-1: config 3 has no interface number 0 [ 627.638693][ T5693] usb 2-1: config 3 interface 20 has no altsetting 0 [ 627.658890][ T5693] usb 2-1: New USB device found, idVendor=05ac, idProduct=0246, bcdDevice=27.b1 [ 627.670942][ T5693] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.682717][ T5695] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 627.713886][ T5693] usb 2-1: Product: syz [ 627.725286][ T5693] usb 2-1: Manufacturer: syz [ 627.750461][ T5693] usb 2-1: SerialNumber: syz [ 627.777340][ T5695] usb 1-1: selecting invalid altsetting 1 [ 627.818222][ T5702] usb 5-1: USB disconnect, device number 89 [ 627.854399][ T5695] set interface failed [ 627.854460][ T5695] usb 1-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 627.872345][ T5695] error writing reg: 0xff, val: 0x00 [ 628.070192][ T5695] dvb_usb_mxl111sf 1-1:2.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 628.146536][ T5695] usb 1-1: USB disconnect, device number 113 [ 628.227925][ T5693] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:3.20/input/input82 [ 628.262245][ T4979] bcm5974 2-1:3.20: could not read from device [ 628.288664][ T4979] bcm5974 2-1:3.20: could not read from device [ 628.300963][ T5693] usb 2-1: USB disconnect, device number 104 [ 628.897483][T13868] input: syz0 as /devices/virtual/input/input83 [ 628.932356][ T5710] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 629.090570][ T5710] usb 1-1: device descriptor read/64, error -71 [ 629.179723][T13878] FAULT_INJECTION: forcing a failure. [ 629.179723][T13878] name failslab, interval 1, probability 0, space 0, times 0 [ 629.203880][T13878] CPU: 0 UID: 0 PID: 13878 Comm: syz.4.2195 Tainted: G L syzkaller #0 PREEMPT(full) [ 629.203926][T13878] Tainted: [L]=SOFTLOCKUP [ 629.203935][T13878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 629.203948][T13878] Call Trace: [ 629.203958][T13878] [ 629.203968][T13878] dump_stack_lvl+0xe8/0x150 [ 629.203999][T13878] should_fail_ex+0x412/0x560 [ 629.204033][T13878] should_failslab+0xa8/0x100 [ 629.204068][T13878] __kvmalloc_node_noprof+0x178/0x8a0 [ 629.204101][T13878] ? nf_tables_commit+0xc2c/0xa7b0 [ 629.204135][T13878] ? nf_tables_commit+0x936/0xa7b0 [ 629.204172][T13878] nf_tables_commit+0xc2c/0xa7b0 [ 629.204204][T13878] ? do_raw_spin_lock+0x12b/0x2f0 [ 629.204234][T13878] ? lock_acquire+0x106/0x350 [ 629.204269][T13878] ? lock_acquire+0x106/0x350 [ 629.204303][T13878] ? __pfx_nf_tables_commit+0x10/0x10 [ 629.204340][T13878] ? __free_frozen_pages+0x749/0xd30 [ 629.204379][T13878] ? nf_tables_newrule+0x2590/0x28b0 [ 629.204429][T13878] ? __pfx_nf_tables_newrule+0x10/0x10 [ 629.204460][T13878] ? nfnl_pernet+0x23/0x240 [ 629.204493][T13878] nfnetlink_rcv+0x1c19/0x27b0 [ 629.204560][T13878] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 629.204603][T13878] ? ref_tracker_free+0x693/0x840 [ 629.204669][T13878] ? __netlink_deliver_tap+0x807/0x850 [ 629.204696][T13878] ? netlink_deliver_tap+0x2e/0x1b0 [ 629.204714][T13878] ? netlink_deliver_tap+0x2e/0x1b0 [ 629.204737][T13878] netlink_unicast+0x75c/0x8e0 [ 629.204761][T13878] netlink_sendmsg+0x813/0xb40 [ 629.204787][T13878] ? __pfx_netlink_sendmsg+0x10/0x10 [ 629.204809][T13878] ? aa_sock_msg_perm+0xf1/0x1b0 [ 629.204830][T13878] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 629.204853][T13878] ____sys_sendmsg+0x972/0x9f0 [ 629.204873][T13878] ? __might_fault+0xaf/0x130 [ 629.204897][T13878] ? __pfx_____sys_sendmsg+0x10/0x10 [ 629.204929][T13878] ? import_iovec+0x73/0xa0 [ 629.204953][T13878] ___sys_sendmsg+0x2a5/0x360 [ 629.204973][T13878] ? __lock_acquire+0x6b5/0x2cf0 [ 629.204992][T13878] ? __pfx____sys_sendmsg+0x10/0x10 [ 629.205038][T13878] ? __fget_files+0x2a/0x420 [ 629.205056][T13878] ? __fget_files+0x3a0/0x420 [ 629.205082][T13878] __x64_sys_sendmsg+0x1bd/0x2a0 [ 629.205110][T13878] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 629.205142][T13878] ? __pfx_ksys_write+0x10/0x10 [ 629.205172][T13878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.205189][T13878] do_syscall_64+0x15f/0xf80 [ 629.205208][T13878] ? trace_irq_disable+0x3b/0x140 [ 629.205231][T13878] ? clear_bhb_loop+0x40/0x90 [ 629.205249][T13878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 629.205265][T13878] RIP: 0033:0x7f7d49b9cdd9 [ 629.205280][T13878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 629.205293][T13878] RSP: 002b:00007f7d4a9a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 629.205310][T13878] RAX: ffffffffffffffda RBX: 00007f7d49e15fa0 RCX: 00007f7d49b9cdd9 [ 629.205321][T13878] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 629.205331][T13878] RBP: 00007f7d4a9a3090 R08: 0000000000000000 R09: 0000000000000000 [ 629.205341][T13878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 629.205350][T13878] R13: 00007f7d49e16038 R14: 00007f7d49e15fa0 R15: 00007f7d49f3fa48 [ 629.205374][T13878] [ 629.721091][ T5710] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 629.767438][T13882] netlink: 'syz.1.2196': attribute type 10 has an invalid length. [ 629.821077][T13886] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2196'. [ 629.836483][T13886] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2196'. [ 629.845576][T13886] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2196'. [ 629.871095][ T5710] usb 1-1: device descriptor read/64, error -71 [ 629.971740][T13882] team0 (unregistering): Port device team_slave_0 removed [ 630.021044][ T5710] usb usb1-port1: attempt power cycle [ 630.045763][T13882] team0 (unregistering): Port device team_slave_1 removed [ 630.380848][ T5710] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 630.432499][ T5710] usb 1-1: device descriptor read/8, error -71 [ 630.695606][ T5710] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 630.736133][ T5710] usb 1-1: device descriptor read/8, error -71 [ 630.875621][ T5710] usb usb1-port1: unable to enumerate USB device [ 631.019849][T13927] FAULT_INJECTION: forcing a failure. [ 631.019849][T13927] name failslab, interval 1, probability 0, space 0, times 0 [ 631.037702][T13927] CPU: 1 UID: 0 PID: 13927 Comm: syz.3.2207 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.037738][T13927] Tainted: [L]=SOFTLOCKUP [ 631.037746][T13927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 631.037760][T13927] Call Trace: [ 631.037769][T13927] [ 631.037778][T13927] dump_stack_lvl+0xe8/0x150 [ 631.037809][T13927] should_fail_ex+0x412/0x560 [ 631.037844][T13927] should_failslab+0xa8/0x100 [ 631.037880][T13927] __kvmalloc_node_noprof+0x178/0x8a0 [ 631.037913][T13927] ? nf_hook_entries_grow+0x288/0x720 [ 631.037953][T13927] nf_hook_entries_grow+0x288/0x720 [ 631.038005][T13927] __nf_register_net_hook+0x2c9/0x930 [ 631.038048][T13927] nf_register_net_hook+0xb2/0x190 [ 631.038081][T13927] nf_register_net_hooks+0x44/0x1b0 [ 631.038116][T13927] nf_ct_netns_do_get+0x3bf/0x5c0 [ 631.038153][T13927] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 631.038193][T13927] ? nf_ct_netns_get+0xe9/0x320 [ 631.038227][T13927] helper_mt_check+0x74/0x150 [ 631.038252][T13927] xt_check_match+0x4f1/0xc50 [ 631.038290][T13927] ? __pfx_xt_check_match+0x10/0x10 [ 631.038339][T13927] ? flush_work+0xd/0x30 [ 631.038370][T13927] __nft_match_init+0x682/0x8d0 [ 631.038395][T13927] ? do_syscall_64+0x15f/0xf80 [ 631.038420][T13927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.038452][T13927] ? __pfx___nft_match_init+0x10/0x10 [ 631.038517][T13927] ? __kmalloc_noprof+0x37d/0x760 [ 631.038549][T13927] ? nf_tables_newrule+0x152c/0x28b0 [ 631.038580][T13927] ? __kmalloc_noprof+0x1b8/0x760 [ 631.038615][T13927] nf_tables_newrule+0x17ac/0x28b0 [ 631.038670][T13927] ? __pfx_nf_tables_newrule+0x10/0x10 [ 631.038702][T13927] ? nfnl_pernet+0x23/0x240 [ 631.038728][T13927] ? nfnl_pernet+0x23/0x240 [ 631.038763][T13927] ? __nla_parse+0x40/0x60 [ 631.038800][T13927] nfnetlink_rcv+0x123e/0x27b0 [ 631.038864][T13927] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 631.038940][T13927] ? netlink_deliver_tap+0x2e/0x1b0 [ 631.038988][T13927] ? netlink_deliver_tap+0x2e/0x1b0 [ 631.039016][T13927] ? netlink_deliver_tap+0x2e/0x1b0 [ 631.039050][T13927] netlink_unicast+0x75c/0x8e0 [ 631.039087][T13927] netlink_sendmsg+0x813/0xb40 [ 631.039126][T13927] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.039159][T13927] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.039189][T13927] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.039222][T13927] ____sys_sendmsg+0x972/0x9f0 [ 631.039252][T13927] ? __might_fault+0xaf/0x130 [ 631.039287][T13927] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.039324][T13927] ? import_iovec+0x73/0xa0 [ 631.039359][T13927] ___sys_sendmsg+0x2a5/0x360 [ 631.039386][T13927] ? __lock_acquire+0x6b5/0x2cf0 [ 631.039413][T13927] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.039476][T13927] ? __fget_files+0x2a/0x420 [ 631.039500][T13927] ? __fget_files+0x3a0/0x420 [ 631.039535][T13927] __x64_sys_sendmsg+0x1bd/0x2a0 [ 631.039566][T13927] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.039602][T13927] ? __pfx_ksys_write+0x10/0x10 [ 631.039642][T13927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.039665][T13927] do_syscall_64+0x15f/0xf80 [ 631.039690][T13927] ? trace_irq_disable+0x3b/0x140 [ 631.039722][T13927] ? clear_bhb_loop+0x40/0x90 [ 631.039760][T13927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.039781][T13927] RIP: 0033:0x7fe5b279cdd9 [ 631.039802][T13927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.039820][T13927] RSP: 002b:00007fe5b373f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.039843][T13927] RAX: ffffffffffffffda RBX: 00007fe5b2a15fa0 RCX: 00007fe5b279cdd9 [ 631.039858][T13927] RDX: 0000000004000800 RSI: 0000200000000000 RDI: 0000000000000003 [ 631.039873][T13927] RBP: 00007fe5b373f090 R08: 0000000000000000 R09: 0000000000000000 [ 631.039887][T13927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 631.039900][T13927] R13: 00007fe5b2a16038 R14: 00007fe5b2a15fa0 R15: 00007fe5b2b3fa48 [ 631.039948][T13927] [ 631.462591][T13927] xt_helper: cannot load conntrack support for proto=2 [ 631.797481][T13937] fuse: Bad value for 'fd' [ 632.030926][T12513] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 632.210411][T12513] usb 4-1: Using ep0 maxpacket: 8 [ 632.236336][T12513] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 632.277963][T12513] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 632.315931][T12513] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 632.368836][T12513] usb 4-1: config 0 interface 0 has no altsetting 0 [ 632.396699][T12513] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 632.435778][T12513] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.475667][T12513] usb 4-1: config 0 descriptor?? [ 632.568404][T13956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2216'. [ 632.630824][ T5693] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 632.734468][T13959] [ 632.736868][T13959] ===================================================== [ 632.743828][T13959] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected [ 632.751317][T13959] syzkaller #0 Tainted: G L [ 632.757318][T13959] ----------------------------------------------------- [ 632.764270][T13959] syz.0.2217/13959 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 632.772027][T13959] ffffffff8e60a058 (tasklist_lock){.+.+}-{3:3}, at: send_sigio+0x101/0x370 [ 632.780712][T13959] [ 632.780712][T13959] and this task is already holding: [ 632.788094][T13959] ffff888020f912a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 632.796780][T13959] which would create a new lock dependency: [ 632.802704][T13959] (&f_owner->lock){....}-{3:3} -> (tasklist_lock){.+.+}-{3:3} [ 632.810330][T13959] [ 632.810330][T13959] but this new dependency connects a SOFTIRQ-irq-safe lock: [ 632.819804][T13959] (&dev->event_lock#2){..-.}-{3:3} [ 632.819836][T13959] [ 632.819836][T13959] ... which became SOFTIRQ-irq-safe at: [ 632.832817][T13959] lock_acquire+0x106/0x350 [ 632.837532][T13959] _raw_spin_lock_irqsave+0x40/0x60 [ 632.843193][T13959] input_event+0x71/0xc0 [ 632.847575][T13959] atp_complete_geyser_3_4+0x114e/0x1d90 [ 632.853337][T13959] __usb_hcd_giveback_urb+0x376/0x540 [ 632.858837][T13959] dummy_timer+0xbc0/0x4650 [ 632.863448][T13959] __hrtimer_run_queues+0x3c0/0xa20 [ 632.868795][T13959] hrtimer_run_softirq+0x17a/0x240 [ 632.874026][T13959] handle_softirqs+0x22a/0x840 [ 632.878914][T13959] __irq_exit_rcu+0xca/0x220 [ 632.883609][T13959] irq_exit_rcu+0x9/0x30 [ 632.887974][T13959] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 632.893717][T13959] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 632.899809][T13959] _raw_spin_unlock_irqrestore+0x47/0x80 [ 632.905544][T13959] dummy_urb_enqueue+0x58a/0x780 [ 632.910615][T13959] usb_hcd_submit_urb+0x328/0x1b70 [ 632.915856][T13959] atp_open+0x60/0x90 [ 632.919962][T13959] input_open_device+0x1f8/0x3b0 [ 632.925022][T13959] mousedev_open_device+0xcc/0x150 [ 632.930255][T13959] mousedev_open+0x2ef/0x4a0 [ 632.934967][T13959] chrdev_open+0x4cd/0x5e0 [ 632.939487][T13959] do_dentry_open+0x785/0x14e0 [ 632.940416][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 632.944410][T13959] vfs_open+0x3b/0x340 [ 632.956824][T13959] path_openat+0x2e08/0x3860 [ 632.961565][T13959] do_file_open+0x23e/0x4a0 [ 632.966219][T13959] do_sys_openat2+0x113/0x200 [ 632.971008][T13959] __x64_sys_openat+0x138/0x170 [ 632.976123][T13959] do_syscall_64+0x15f/0xf80 [ 632.980936][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.986948][T13959] [ 632.986948][T13959] to a SOFTIRQ-irq-unsafe lock: [ 632.993998][T13959] (tasklist_lock){.+.+}-{3:3} [ 632.994035][T13959] [ 632.994035][T13959] ... which became SOFTIRQ-irq-unsafe at: [ 633.006711][T13959] ... [ 633.006735][T13959] lock_acquire+0x106/0x350 [ 633.013993][T13959] _raw_read_lock+0x36/0x50 [ 633.018655][T13959] __do_wait+0xde/0x740 [ 633.022931][T13959] do_wait+0x1e7/0x510 [ 633.027118][T13959] kernel_wait+0xd6/0x1c0 [ 633.031556][T13959] call_usermodehelper_exec_work+0xbe/0x230 [ 633.037594][T13959] process_scheduled_works+0xb5d/0x1860 [ 633.043260][T13959] worker_thread+0xa53/0xfc0 [ 633.047972][T13959] kthread+0x388/0x470 [ 633.052161][T13959] ret_from_fork+0x514/0xb70 [ 633.056865][T13959] ret_from_fork_asm+0x1a/0x30 [ 633.061785][T13959] [ 633.061785][T13959] other info that might help us debug this: [ 633.061785][T13959] [ 633.072043][T13959] Chain exists of: [ 633.072043][T13959] &dev->event_lock#2 --> &f_owner->lock --> tasklist_lock [ 633.072043][T13959] [ 633.085220][T13959] Possible interrupt unsafe locking scenario: [ 633.085220][T13959] [ 633.093582][T13959] CPU0 CPU1 [ 633.099017][T13959] ---- ---- [ 633.104508][T13959] lock(tasklist_lock); [ 633.108871][T13959] local_irq_disable(); [ 633.115661][T13959] lock(&dev->event_lock#2); [ 633.122913][T13959] lock(&f_owner->lock); [ 633.129789][T13959] [ 633.133261][T13959] lock(&dev->event_lock#2); [ 633.138139][T13959] [ 633.138139][T13959] *** DEADLOCK *** [ 633.138139][T13959] [ 633.140423][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 633.146288][T13959] 5 locks held by syz.0.2217/13959: [ 633.159657][T13959] #0: ffff88807b924410 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 633.168870][T13959] #1: ffff8880576b1498 (&type->i_mutex_dir_key#5){++++}-{4:4}, at: path_openat+0xb4c/0x3860 [ 633.179132][T13959] #2: ffffffff9a4bf9f8 (&fsnotify_mark_srcu){.+.?}-{0:0}, at: fsnotify+0x74c/0x1ae0 [ 633.188721][T13959] #3: ffff88805e9a4d80 (&mark->lock){+.+.}-{3:3}, at: dnotify_handle_event+0x62/0x440 [ 633.190476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 633.198423][T13959] #4: ffff888020f912a0 (&f_owner->lock){....}-{3:3}, at: send_sigio+0x38/0x370 [ 633.215778][T13959] [ 633.215778][T13959] the dependencies between SOFTIRQ-irq-safe lock and the holding lock: [ 633.226211][T13959] -> (&dev->event_lock#2){..-.}-{3:3} { [ 633.232167][T13959] IN-SOFTIRQ-W at: [ 633.236621][T13959] lock_acquire+0x106/0x350 [ 633.243504][T13959] _raw_spin_lock_irqsave+0x40/0x60 [ 633.251083][T13959] input_event+0x71/0xc0 [ 633.257715][T13959] atp_complete_geyser_3_4+0x114e/0x1d90 [ 633.265743][T13959] __usb_hcd_giveback_urb+0x376/0x540 [ 633.273530][T13959] dummy_timer+0xbc0/0x4650 [ 633.280437][T13959] __hrtimer_run_queues+0x3c0/0xa20 [ 633.288009][T13959] hrtimer_run_softirq+0x17a/0x240 [ 633.295505][T13959] handle_softirqs+0x22a/0x840 [ 633.302682][T13959] __irq_exit_rcu+0xca/0x220 [ 633.309662][T13959] irq_exit_rcu+0x9/0x30 [ 633.316271][T13959] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 633.324269][T13959] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 633.332618][T13959] _raw_spin_unlock_irqrestore+0x47/0x80 [ 633.340622][T13959] dummy_urb_enqueue+0x58a/0x780 [ 633.347957][T13959] usb_hcd_submit_urb+0x328/0x1b70 [ 633.355442][T13959] atp_open+0x60/0x90 [ 633.361790][T13959] input_open_device+0x1f8/0x3b0 [ 633.369157][T13959] mousedev_open_device+0xcc/0x150 [ 633.376651][T13959] mousedev_open+0x2ef/0x4a0 [ 633.383624][T13959] chrdev_open+0x4cd/0x5e0 [ 633.390428][T13959] do_dentry_open+0x785/0x14e0 [ 633.397614][T13959] vfs_open+0x3b/0x340 [ 633.404060][T13959] path_openat+0x2e08/0x3860 [ 633.411063][T13959] do_file_open+0x23e/0x4a0 [ 633.417979][T13959] do_sys_openat2+0x113/0x200 [ 633.425025][T13959] __x64_sys_openat+0x138/0x170 [ 633.432253][T13959] do_syscall_64+0x15f/0xf80 [ 633.439231][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.447518][T13959] INITIAL USE at: [ 633.451798][T13959] lock_acquire+0x106/0x350 [ 633.458588][T13959] _raw_spin_lock_irqsave+0x40/0x60 [ 633.466204][T13959] input_inject_event+0xa4/0x330 [ 633.473564][T13959] kbd_led_trigger_activate+0xbc/0x100 [ 633.481360][T13959] led_trigger_set+0x535/0x960 [ 633.488440][T13959] led_trigger_set_default+0x260/0x2a0 [ 633.490450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 633.496215][T13959] led_classdev_register_ext+0x787/0x9c0 [ 633.512368][T13959] input_leds_connect+0x517/0x790 [ 633.519702][T13959] input_register_device+0xce0/0x1140 [ 633.527370][T13959] atkbd_connect+0x71e/0xa10 [ 633.534251][T13959] serio_driver_probe+0x82/0xb0 [ 633.541413][T13959] really_probe+0x267/0xaf0 [ 633.548210][T13959] __driver_probe_device+0x1ef/0x380 [ 633.555795][T13959] driver_probe_device+0x4f/0x240 [ 633.563115][T13959] __driver_attach+0x34c/0x640 [ 633.570180][T13959] bus_for_each_dev+0x23b/0x2c0 [ 633.577333][T13959] serio_handle_event+0x1af/0xf80 [ 633.584670][T13959] process_scheduled_works+0xb5d/0x1860 [ 633.592531][T13959] worker_thread+0xa53/0xfc0 [ 633.599426][T13959] kthread+0x388/0x470 [ 633.605810][T13959] ret_from_fork+0x514/0xb70 [ 633.612804][T13959] ret_from_fork_asm+0x1a/0x30 [ 633.619892][T13959] } [ 633.622772][T13959] ... key at: [] input_allocate_device.__key.7+0x0/0x20 [ 633.632275][T13959] -> (kbd_event_lock){....}-{3:3} { [ 633.637887][T13959] INITIAL USE at: [ 633.642079][T13959] lock_acquire+0x106/0x350 [ 633.648709][T13959] _raw_spin_lock_irqsave+0x40/0x60 [ 633.656113][T13959] vt_reset_unicode+0x2b/0x160 [ 633.663024][T13959] reset_vc+0x68/0x1b0 [ 633.669218][T13959] vc_init+0x70/0x4a0 [ 633.675358][T13959] con_init+0x377/0x6a0 [ 633.681629][T13959] console_init+0x10b/0x4a0 [ 633.688247][T13959] start_kernel+0x230/0x3e0 [ 633.694862][T13959] x86_64_start_reservations+0x24/0x30 [ 633.702527][T13959] x86_64_start_kernel+0x143/0x1c0 [ 633.709745][T13959] common_startup_64+0x13e/0x147 [ 633.716916][T13959] } [ 633.719702][T13959] ... key at: [] kbd_event_lock+0x18/0xa0 [ 633.727816][T13959] ... acquired at: [ 633.731988][T13959] _raw_spin_lock+0x2e/0x40 [ 633.736690][T13959] kbd_event+0xd7/0x42f0 [ 633.741157][T13959] input_handle_events_default+0xd4/0x1a0 [ 633.747101][T13959] input_pass_values+0x288/0x890 [ 633.752256][T13959] input_event_dispose+0x330/0x6b0 [ 633.757571][T13959] input_inject_event+0x1dc/0x330 [ 633.762798][T13959] evdev_write+0x325/0x4c0 [ 633.767420][T13959] vfs_write+0x29a/0xb90 [ 633.771886][T13959] ksys_write+0x150/0x270 [ 633.776464][T13959] do_syscall_64+0x15f/0xf80 [ 633.781276][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.787379][T13959] [ 633.789723][T13959] -> (&tty->flow.lock){....}-{3:3} { [ 633.795229][T13959] INITIAL USE at: [ 633.799339][T13959] lock_acquire+0x106/0x350 [ 633.805793][T13959] _raw_spin_lock_irqsave+0x40/0x60 [ 633.812943][T13959] start_tty+0x1b/0x50 [ 633.818967][T13959] n_tty_set_termios+0xa7c/0x10a0 [ 633.825948][T13959] tty_set_termios+0xdb3/0x1800 [ 633.832759][T13959] set_termios+0x566/0x710 [ 633.839229][T13959] tty_mode_ioctl+0x4a6/0x7d0 [ 633.845852][T13959] tty_ioctl+0x9c5/0xde0 [ 633.852060][T13959] __se_sys_ioctl+0xfc/0x170 [ 633.858609][T13959] do_syscall_64+0x15f/0xf80 [ 633.865242][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.873079][T13959] } [ 633.875767][T13959] ... key at: [] alloc_tty_struct.__key.35+0x0/0x20 [ 633.884651][T13959] ... acquired at: [ 633.888670][T13959] _raw_spin_lock_irqsave+0x40/0x60 [ 633.894079][T13959] stop_tty+0x2f/0x140 [ 633.898365][T13959] kbd_event+0x2f91/0x42f0 [ 633.902994][T13959] input_handle_events_default+0xd4/0x1a0 [ 633.908959][T13959] input_pass_values+0x288/0x890 [ 633.914110][T13959] input_event_dispose+0x330/0x6b0 [ 633.919426][T13959] input_inject_event+0x1dc/0x330 [ 633.924648][T13959] evdev_write+0x325/0x4c0 [ 633.929267][T13959] vfs_write+0x29a/0xb90 [ 633.933719][T13959] ksys_write+0x150/0x270 [ 633.938266][T13959] do_syscall_64+0x15f/0xf80 [ 633.943108][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.949195][T13959] [ 633.951534][T13959] -> (&new->fa_lock){....}-{3:3} { [ 633.956798][T13959] INITIAL USE at: [ 633.960802][T13959] lock_acquire+0x106/0x350 [ 633.967077][T13959] _raw_write_lock_irq+0x3d/0x50 [ 633.973772][T13959] fasync_remove_entry+0xf1/0x1c0 [ 633.980576][T13959] __fput+0x890/0xa60 [ 633.986357][T13959] task_work_run+0x1d9/0x270 [ 633.992899][T13959] exit_to_user_mode_loop+0xed/0x480 [ 633.999966][T13959] do_syscall_64+0x33e/0xf80 [ 634.006332][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.014006][T13959] INITIAL READ USE at: [ 634.018524][T13959] lock_acquire+0x106/0x350 [ 634.025245][T13959] _raw_read_lock_irqsave+0x48/0x60 [ 634.032682][T13959] kill_fasync+0x199/0x4d0 [ 634.039308][T13959] sock_wake_async+0x137/0x160 [ 634.046276][T13959] sk_wake_async+0x184/0x280 [ 634.053103][T13959] unix_release_sock+0x74f/0xc80 [ 634.060273][T13959] unix_release+0x92/0xd0 [ 634.066842][T13959] sock_close+0xc3/0x240 [ 634.073308][T13959] __fput+0x44f/0xa60 [ 634.079488][T13959] task_work_run+0x1d9/0x270 [ 634.086330][T13959] get_signal+0x11eb/0x1330 [ 634.093035][T13959] arch_do_signal_or_restart+0xbc/0x830 [ 634.100915][T13959] exit_to_user_mode_loop+0x86/0x480 [ 634.108402][T13959] do_syscall_64+0x33e/0xf80 [ 634.115185][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.123271][T13959] } [ 634.125895][T13959] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 634.134685][T13959] ... acquired at: [ 634.138606][T13959] _raw_read_lock_irqsave+0x48/0x60 [ 634.144013][T13959] kill_fasync+0x199/0x4d0 [ 634.148634][T13959] __start_tty+0x18c/0x220 [ 634.153249][T13959] tty_send_xchar+0x1cf/0x4b0 [ 634.158136][T13959] tty_ioctl+0x9c5/0xde0 [ 634.162617][T13959] __se_sys_ioctl+0xfc/0x170 [ 634.167423][T13959] do_syscall_64+0x15f/0xf80 [ 634.172233][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.178340][T13959] [ 634.180705][T13959] -> (&f_owner->lock){....}-{3:3} { [ 634.186045][T13959] INITIAL USE at: [ 634.189987][T13959] lock_acquire+0x106/0x350 [ 634.196079][T13959] _raw_write_lock_irq+0x3d/0x50 [ 634.202659][T13959] __f_setown+0x67/0x370 [ 634.208516][T13959] do_fcntl+0x171c/0x1a20 [ 634.214453][T13959] __se_sys_fcntl+0xc8/0x150 [ 634.220762][T13959] do_syscall_64+0x15f/0xf80 [ 634.226966][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.234482][T13959] INITIAL READ USE at: [ 634.238890][T13959] lock_acquire+0x106/0x350 [ 634.245429][T13959] _raw_read_lock_irqsave+0x48/0x60 [ 634.252678][T13959] send_sigio+0x38/0x370 [ 634.258954][T13959] kill_fasync+0x24d/0x4d0 [ 634.265503][T13959] sock_wake_async+0x137/0x160 [ 634.272328][T13959] sk_wake_async+0x184/0x280 [ 634.278955][T13959] unix_release_sock+0x74f/0xc80 [ 634.285928][T13959] unix_release+0x92/0xd0 [ 634.292280][T13959] sock_close+0xc3/0x240 [ 634.298558][T13959] __fput+0x44f/0xa60 [ 634.304572][T13959] task_work_run+0x1d9/0x270 [ 634.311195][T13959] get_signal+0x11eb/0x1330 [ 634.317728][T13959] arch_do_signal_or_restart+0xbc/0x830 [ 634.325316][T13959] exit_to_user_mode_loop+0x86/0x480 [ 634.332639][T13959] do_syscall_64+0x33e/0xf80 [ 634.339337][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.347245][T13959] } [ 634.349778][T13959] ... key at: [] file_f_owner_allocate.__key+0x0/0x20 [ 634.358670][T13959] ... acquired at: [ 634.362495][T13959] _raw_read_lock_irqsave+0x48/0x60 [ 634.367917][T13959] send_sigio+0x38/0x370 [ 634.372371][T13959] kill_fasync+0x24d/0x4d0 [ 634.377004][T13959] sock_wake_async+0x137/0x160 [ 634.381970][T13959] sk_wake_async+0x184/0x280 [ 634.386862][T13959] unix_release_sock+0x74f/0xc80 [ 634.392041][T13959] unix_release+0x92/0xd0 [ 634.396614][T13959] sock_close+0xc3/0x240 [ 634.401084][T13959] __fput+0x44f/0xa60 [ 634.405321][T13959] task_work_run+0x1d9/0x270 [ 634.410192][T13959] get_signal+0x11eb/0x1330 [ 634.414911][T13959] arch_do_signal_or_restart+0xbc/0x830 [ 634.420668][T13959] exit_to_user_mode_loop+0x86/0x480 [ 634.426198][T13959] do_syscall_64+0x33e/0xf80 [ 634.431014][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.437114][T13959] [ 634.439457][T13959] [ 634.439457][T13959] the dependencies between the lock to be acquired [ 634.439471][T13959] and SOFTIRQ-irq-unsafe lock: [ 634.453055][T13959] -> (tasklist_lock){.+.+}-{3:3} { [ 634.458256][T13959] HARDIRQ-ON-R at: [ 634.462283][T13959] lock_acquire+0x106/0x350 [ 634.468501][T13959] _raw_read_lock+0x36/0x50 [ 634.474700][T13959] __do_wait+0xde/0x740 [ 634.480559][T13959] do_wait+0x1e7/0x510 [ 634.486315][T13959] kernel_wait+0xd6/0x1c0 [ 634.492368][T13959] call_usermodehelper_exec_work+0xbe/0x230 [ 634.499949][T13959] process_scheduled_works+0xb5d/0x1860 [ 634.507180][T13959] worker_thread+0xa53/0xfc0 [ 634.513462][T13959] kthread+0x388/0x470 [ 634.519254][T13959] ret_from_fork+0x514/0xb70 [ 634.525571][T13959] ret_from_fork_asm+0x1a/0x30 [ 634.532048][T13959] SOFTIRQ-ON-R at: [ 634.536070][T13959] lock_acquire+0x106/0x350 [ 634.542255][T13959] _raw_read_lock+0x36/0x50 [ 634.548452][T13959] __do_wait+0xde/0x740 [ 634.554317][T13959] do_wait+0x1e7/0x510 [ 634.560098][T13959] kernel_wait+0xd6/0x1c0 [ 634.566134][T13959] call_usermodehelper_exec_work+0xbe/0x230 [ 634.573716][T13959] process_scheduled_works+0xb5d/0x1860 [ 634.580994][T13959] worker_thread+0xa53/0xfc0 [ 634.587280][T13959] kthread+0x388/0x470 [ 634.593046][T13959] ret_from_fork+0x514/0xb70 [ 634.599320][T13959] ret_from_fork_asm+0x1a/0x30 [ 634.605781][T13959] INITIAL USE at: [ 634.609717][T13959] lock_acquire+0x106/0x350 [ 634.615810][T13959] _raw_write_lock_irq+0x3d/0x50 [ 634.622358][T13959] copy_process+0x2b5e/0x4450 [ 634.628617][T13959] kernel_clone+0x284/0x8f0 [ 634.634715][T13959] user_mode_thread+0x110/0x180 [ 634.641164][T13959] rest_init+0x23/0x300 [ 634.646937][T13959] start_kernel+0x38a/0x3e0 [ 634.653055][T13959] x86_64_start_reservations+0x24/0x30 [ 634.660095][T13959] x86_64_start_kernel+0x143/0x1c0 [ 634.666800][T13959] common_startup_64+0x13e/0x147 [ 634.673365][T13959] INITIAL READ USE at: [ 634.677733][T13959] lock_acquire+0x106/0x350 [ 634.684292][T13959] _raw_read_lock+0x36/0x50 [ 634.690862][T13959] __do_wait+0xde/0x740 [ 634.697075][T13959] do_wait+0x1e7/0x510 [ 634.703198][T13959] kernel_wait+0xd6/0x1c0 [ 634.709594][T13959] call_usermodehelper_exec_work+0xbe/0x230 [ 634.717533][T13959] process_scheduled_works+0xb5d/0x1860 [ 634.725113][T13959] worker_thread+0xa53/0xfc0 [ 634.731853][T13959] kthread+0x388/0x470 [ 634.738166][T13959] ret_from_fork+0x514/0xb70 [ 634.744811][T13959] ret_from_fork_asm+0x1a/0x30 [ 634.751641][T13959] } [ 634.754174][T13959] ... key at: [] tasklist_lock+0x18/0x40 [ 634.761995][T13959] ... acquired at: [ 634.765859][T13959] _raw_read_lock+0x36/0x50 [ 634.770581][T13959] send_sigio+0x101/0x370 [ 634.775136][T13959] dnotify_handle_event+0x169/0x440 [ 634.780547][T13959] fsnotify+0x1831/0x1ae0 [ 634.785106][T13959] path_openat+0x15c2/0x3860 [ 634.789941][T13959] do_file_open+0x23e/0x4a0 [ 634.794696][T13959] do_sys_openat2+0x113/0x200 [ 634.799635][T13959] __x64_sys_open+0x11e/0x150 [ 634.804529][T13959] do_syscall_64+0x15f/0xf80 [ 634.809353][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.815472][T13959] [ 634.817825][T13959] [ 634.817825][T13959] stack backtrace: [ 634.823785][T13959] CPU: 0 UID: 0 PID: 13959 Comm: syz.0.2217 Tainted: G L syzkaller #0 PREEMPT(full) [ 634.823818][T13959] Tainted: [L]=SOFTLOCKUP [ 634.823827][T13959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 634.823842][T13959] Call Trace: [ 634.823858][T13959] [ 634.823866][T13959] dump_stack_lvl+0xe8/0x150 [ 634.823887][T13959] __lock_acquire+0x2a94/0x2cf0 [ 634.823930][T13959] ? send_sigio+0x101/0x370 [ 634.823962][T13959] lock_acquire+0x106/0x350 [ 634.823984][T13959] ? send_sigio+0x101/0x370 [ 634.824022][T13959] _raw_read_lock+0x36/0x50 [ 634.824038][T13959] ? send_sigio+0x101/0x370 [ 634.824059][T13959] send_sigio+0x101/0x370 [ 634.824105][T13959] dnotify_handle_event+0x169/0x440 [ 634.824132][T13959] fsnotify+0x1831/0x1ae0 [ 634.824173][T13959] ? fsnotify+0x74c/0x1ae0 [ 634.824193][T13959] ? __pfx_fsnotify+0x10/0x10 [ 634.824212][T13959] ? do_raw_spin_unlock+0xf5/0x210 [ 634.824258][T13959] ? d_make_persistent+0x10c/0x180 [ 634.824292][T13959] ? shmem_mknod+0x2ea/0x360 [ 634.824330][T13959] path_openat+0x15c2/0x3860 [ 634.824364][T13959] ? __pfx_path_openat+0x10/0x10 [ 634.824404][T13959] ? __x64_sys_open+0x11e/0x150 [ 634.824439][T13959] do_file_open+0x23e/0x4a0 [ 634.824473][T13959] ? __pfx_do_file_open+0x10/0x10 [ 634.824508][T13959] ? _raw_spin_unlock+0x28/0x50 [ 634.824561][T13959] ? alloc_fd+0x64b/0x6c0 [ 634.824591][T13959] do_sys_openat2+0x113/0x200 [ 634.824616][T13959] ? __se_sys_futex+0x3a8/0x450 [ 634.824654][T13959] ? __pfx_do_sys_openat2+0x10/0x10 [ 634.824672][T13959] ? __fget_files+0x2a/0x420 [ 634.824705][T13959] ? __pfx___se_sys_futex+0x10/0x10 [ 634.824736][T13959] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.824758][T13959] __x64_sys_open+0x11e/0x150 [ 634.824791][T13959] do_syscall_64+0x15f/0xf80 [ 634.824811][T13959] ? trace_irq_disable+0x3b/0x140 [ 634.824834][T13959] ? clear_bhb_loop+0x40/0x90 [ 634.824870][T13959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.824894][T13959] RIP: 0033:0x7f0329d9cdd9 [ 634.824913][T13959] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 634.824933][T13959] RSP: 002b:00007f0327ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 634.824959][T13959] RAX: ffffffffffffffda RBX: 00007f032a015fa0 RCX: 00007f0329d9cdd9 [ 634.824972][T13959] RDX: 0000000000000000 RSI: 000000000004e142 RDI: 0000200000000040 [ 634.824983][T13959] RBP: 00007f0329e32d69 R08: 0000000000000000 R09: 0000000000000000 [ 634.824993][T13959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 634.825018][T13959] R13: 00007f032a016038 R14: 00007f032a015fa0 R15: 00007f032a13fa48 [ 634.825045][T13959] [ 635.170894][ T5693] usb 5-1: Using ep0 maxpacket: 8 [ 635.177680][ T5693] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 635.189360][ T5693] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 635.199681][ T5693] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 635.211169][ T5693] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 635.224351][ T5693] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 635.233669][ T5693] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.299698][T12513] usbhid 4-1:0.0: can't add hid device: -71 [ 635.318690][T12513] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 635.352510][T12513] usb 4-1: USB disconnect, device number 111 [ 635.366611][ T5693] usb 5-1: usb_control_msg returned -71 [ 635.372468][ T5693] usbtmc 5-1:16.0: can't read capabilities [ 635.389729][ T5693] usb 5-1: USB disconnect, device number 90