last executing test programs: 10.070471208s ago: executing program 3 (id=1580): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x24, 0x26, 0x109, 0x870bd22, 0xfffffffa, {0x2}, [@nested={0x8, 0x3f, 0x0, 0x1, [@nested={0x4, 0xd}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x24}, 0x1, 0x0, 0x17000000, 0x1000c957}, 0x600c800) 9.830187024s ago: executing program 3 (id=1583): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000440)={{0x0, 0x5, 0x0, 0x25}, 'syz0\x00', 0x53}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r1, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r3 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r3, 0xc05c6104, &(0x7f0000004180)={"2370491d", 0x0, 0x5, 0x2, 0x8, 0x5, "000064640000001503fe00", '\x00', "0f00", "64bdac32", ["e86621d9cc668c391f77c506", "3549ffffffffffffff010800", "2fc7977386afe0374831c1f9", "cf6cce2296b3f853e224c4e0"]}) ioctl$CEC_TRANSMIT(r3, 0xc0386105, &(0x7f0000000480)={0x5, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x5, "0f6d00", 0x0, 0x2, 0x0, 0x6, 0x0, 0x4, 0xff}) syz_usb_connect(0x3, 0x3b9, &(0x7f0000001100)=ANY=[@ANYBLOB="1201000041914140f30c75932efd010203010902"], 0x0) r4 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) read$hiddev(r0, &(0x7f0000000040)=""/117, 0x75) 7.79479398s ago: executing program 3 (id=1600): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) socket(0x10, 0x803, 0x0) ioctl$VIDIOC_S_OUTPUT(0xffffffffffffffff, 0xc004562f, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r5 = fsopen(&(0x7f0000000800)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r8, r8, 0x0, 0x200) socket(0x10, 0x803, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x28b}) 5.397583759s ago: executing program 3 (id=1611): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32, @ANYBLOB="40ed0ffd090002"], 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) memfd_secret(0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 5.07787111s ago: executing program 0 (id=1614): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0xfffffffc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x20000000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000100001060000000000000000000000000000000000000000000000010b00033264756d6d7930000008001f0004000000180012000a00010064756d6d79"], 0x4c}], 0x1, 0x0, 0x0, 0x4040001}, 0x0) (fail_nth: 29) 4.50834174s ago: executing program 0 (id=1616): r0 = syz_usb_connect$cdc_ncm(0x2, 0x76, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f0100000400000000000306241a00000008241c0600070d000905810300020000120904010000020d00000904010102020d00000905820200020000000905030240"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) unshare(0x20040400) (async) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = eventfd(0x3) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000440)=[{0x20, 0x3, 0x78, 0xb9}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0x0, 0x1, 0xfffffffa}]}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r5, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd01000000000014"], 0xfdef) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f00000003c0)={0x5, 0x3000, 0x0, r3, 0x5}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000180)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x11, 0x9, 0x400, 0x14, 0x604, 0x823c, 0xc, 0x8001, 0x8, 0x4, 0xe4, 0x7}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="8b8487ceb639db8678aa117f4f3097d8375f2f76ec270400"], 0x0, 0x0, 0x0}, 0x0) 3.847125466s ago: executing program 1 (id=1618): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffff23, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15610}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x10000}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) chroot(&(0x7f0000000000)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000b00), 0x402040, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r6, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.698296373s ago: executing program 3 (id=1619): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x4, 0x4) readv(r0, &(0x7f0000003600)=[{&(0x7f0000002340)=""/138, 0x8a}], 0x1) r1 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0xa) unshare(0x2c020400) ftruncate(r2, 0x2007ffb) r3 = landlock_create_ruleset(&(0x7f0000000740)={0x182, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0xa) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) 3.493592572s ago: executing program 1 (id=1621): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, 0x0) 3.336580724s ago: executing program 1 (id=1622): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key$fscrypt_v1(0x0, &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, 0x0, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x1200) 3.242922158s ago: executing program 1 (id=1623): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x3ab601, 0x0) ioctl$SNDCTL_SYNTH_MEMAVL(r0, 0xc004510e, 0x0) 3.174017815s ago: executing program 1 (id=1625): r0 = socket$kcm(0x21, 0x7, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f00000002c0)="c311c2dff4c3d641af1e49b8190af1a434f0f78236aad5a4aa326a90298230b00a6849baa747c01ac41bd2c5a875c634a9fcb40daf7ef818aff8e82bf6ae6c1c3a4765205bf212e3be7e1cf419eccd734fe5ad32f4aaee047b9e08d1a6a8ebe1652558b9827f7eabb59b2b3daf5e53f16023", 0x72}, {&(0x7f00000004c0)="b2ed9c6bfc55adf5b62ddaa832243a7e9f5a235399eb64b38c9d46c3f5b6758b3da77da13c1ac7058801e327e3fd8a20a3bc9feaeac2e52fe2149b3bb3accbc17f379469b5ce4906d0fa5648f8c0cef53651dd287be8307f9783691c6923e6e2b45f8f541e2008fd3bc40bb468ffa108a58b4e8a582439e836219e4e9e9f4121831a5e18a3821653172d", 0x8a}, {&(0x7f0000000580)="172e66d0281562028efec546d27c811696d7dc50657b734e24992e32d652a04f4aed3cbba8df7868e04eb0d46e4e7dbbbfe7669efb034a3065fa2b591ba9e55ce74bc12d2040c68013d27f76e4e2ab9d0ae1650d1ae314bc72846fa38a2c66fa47178fbe1cfc08f6f632841f80460f34f8826966f912e540f198eff1fab6a18f0d873b17c75e4333449672e72fc7b2fe3200c7cbfc37b1c41abb6efd240c19b6f2897bbeed63e471cbb33ddc570f05a00d9fcf74926f01f2169806e15f2376d9c7b7866c6ee85a9818462847d9f9209f3d8581d618c84f44c123", 0xda}, {&(0x7f0000000700)="5a7d84aa4211e56a8b38f9d69ec4bee94875afcbc0ba54283b3aeac29e43a629e7fa87759a2d1f6eb962c9815f0b30f5c24b72a9f8c10025ecf18351eeb30b215306c55eb66b2009337d2c029b48c5affe0704c618dcee66b5ab53897de1fcf1aea6807c64b21b93105eefd50dcb51779be80fa9f3f9ec47ddbe17a1bda189be6d42d06e27b3e4153609e24e0283984ecf821b998e1acd2a45d921ae355114df5db6d680efa47f948347", 0xaa}, {&(0x7f0000000f80)="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", 0x1000}, {&(0x7f0000001f80)="ecd3d328119d7908301304f38df0c1f7a8b0aabdc779e7a2197df23b0b8b0dad84aa55884d0c78f0dc7f5e2d1d3c19f86b1f0995862120390ec624edf861ffaa633c8ee2d2", 0x45}], 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b8b376ae1c3f57977c27b40900000000000000da"], 0x10c0}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRES64=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x4008010) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x40ead000) r2 = socket(0x1, 0x5, 0xf06b) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_io_uring_setup(0x5fce, &(0x7f0000000940)={0x0, 0xa884, 0x1, 0x3, 0x35}, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000900)={&(0x7f0000003000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x3}, 0x1) syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xd9, 0x1b, 0x44, 0x40, 0x421, 0xdf51, 0xd7eb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd, 0xc, 0x0, 0x1, "", [{{0x9, 0x4, 0x66, 0x0, 0x0, 0x2, 0xfe, 0x48, 0xa}}]}}]}}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000380)={&(0x7f0000005000)={[{&(0x7f00000003c0)="4c9b74b5d89ab498a81e0338f3077107fbc6a0b6a7d66d730d43f3f38afb3459055c8fcd85c7b031599f1942321e4e8129fdfbdb5565626da20899ed894718e6fcf9a591c15f0fcc44fb6b1181d0e51e28f6e13f23d8a0489d76003e1b67e39407627e6752500b132ccca7f8788c", 0x6e}, {&(0x7f00000007c0)="79966f45a55882d082f4ba9cba9439a92315aac35ed2ea98b4fd7a03b7272cf50bde5289be15c9884deb8df6c9981d06f4bf89a18f780be6c6521977b090dbe71622e45509965ab012f9e84bd9e8c355df931a4697a5c637c9a77e7588bdc464c7a1416f42306b4e42f7931b07b05b9fc95a443c8a59f6680554c29ccdab8c17feed47ac19a8bdd2ad6429045b7050a17cb19c45fe5e03041526cd54efcb3658c2a3e7097258cfbece96a40436f0", 0xae, 0x3}, {&(0x7f0000000880)="4f5b1586797c111be676824a9fa5182931150498f5999beb58565e12ed88180118b5c5cfef48560f3ce0637cb2311c73cdf4d44ce822285cf45ddd79cd", 0x3d, 0x1}, {&(0x7f00000009c0)="04ce5316e88b6c3a0f8fa83d36f0d19e632db4dc7b71c8e18d6fe2a5d6232c45bec8525fda5aaca62aad74efa5dcaef7d07cf9215495fb70384c52e6297fe59c0900bc9547ffbebd39804517fd075030aa7af68ebcafbd5c25dabcbb3e24a27189aa520381977cc21186e7ac9a7292f3b90a2a3f14413be3daf9c5c8fc5c6be402aacc2a658fb939d8d3d68eda1a8185957c9bc35661c73253493491fed6cdc57ba3b53483f3baa562d837c4aecdab71ae5fb19efb8f6f46b2e70ba7ff7399b919", 0xc1, 0x2}, {&(0x7f0000000ac0)="1178a005819988672018931367a3e0914976e257d842e3c28139248cb6f150796797675a482fe8d584adf8bc2a75ca42bff6651b4f7e5911d2d2e290ea25bdd1d8a494ad0436eda1971288671664f40aabd9f86b8bed75ccc2786a6e734ecff1711a1e97564099377e02508de54e8515374253af36ebe3ddb55bf879d78a9d5df9564b8d94818c2852c1fdc20d4d33f491937695d503fcc711b1695916b91365de53ce66d05b94ebb87f117f7a39b2dcb879c41bb1ced3b28dffcf31ad7316ccbdbce60d737bb5b3f0b7a830ea69afbea5fcfed78e2bd64bd64f4a120c3c0d897091f1145d216aedfe2a71", 0xeb, 0x3}, {&(0x7f0000002000)="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", 0x1000, 0x3}]}, 0x6, 0xfffd}, 0x1) io_uring_register$IORING_UNREGISTER_PBUF_RING(r3, 0x17, &(0x7f0000000f40)={0x0, 0x0, 0x3}, 0x1) syz_usb_connect$uac1(0x2, 0x8e, &(0x7f0000000000)=ANY=[], 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x54, 0x3, 0xfffffffe, 0x6}, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0x7, 0x1, 0xfffffe0200000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x3ff, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x141000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) recvmmsg(0xffffffffffffffff, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x14) 2.976671661s ago: executing program 4 (id=1627): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfffff00c}, {0x6, 0x23, 0x7, 0xfffffff8}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) rt_sigprocmask(0x0, &(0x7f0000000180)={[0x1]}, 0x0, 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SET_FEATURES(r4, 0x40309439, &(0x7f0000000100)={0x0, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r5 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r5, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) dup(r2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x840) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x0) 2.677513302s ago: executing program 3 (id=1628): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = userfaultfd(0x801) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x400000, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000702000/0x3000)=nil, 0x3000}, 0x2}) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0xedcd, 0x9, 0x100}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0xcbed, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x844) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) r3 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4c34e01000109021b1901000000d409", @ANYRES64], 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000000)=@v={0x93, 0x5, 0x80, 0xc, @MIDI_NOTEON=@note=0x27, 0x8, 0x6}) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) bind$rds(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'ipvlan0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f0000000340)={&(0x7f0000000140)=@xdp={0x2c, 0x8, r6, 0x1b}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000380)='\x00', 0x5dc}], 0x1}, 0x4011) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) 2.593208245s ago: executing program 4 (id=1629): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) eventfd2(0x0, 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002280)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32, @ANYBLOB="40ed0ffd090002"], 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) memfd_secret(0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 2.403465969s ago: executing program 0 (id=1630): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="1f", 0x1, 0xfffffffffffffffe) r0 = socket$inet6(0x10, 0x80002, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x8, 0xfffffffd}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003100)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001480)={0x1, 0x0, 0x0, &(0x7f0000001280)=""/212, &(0x7f0000001380)=""/217, 0xdddd0000}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1}) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={'sha256\x00'}}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(0x3) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'vxcan1\x00'}}, 0x1e) sendmmsg$inet(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d6188ce88368c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554", 0xba}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{0x0, 0x12}, {0x0}, {&(0x7f0000001700)="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", 0xfd}], 0x3}}, {{&(0x7f0000001880)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f00000019c0)}}], 0x3, 0x40) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, 0x0) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 2.018233526s ago: executing program 0 (id=1631): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffff23, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15610}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x10000}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) chroot(&(0x7f0000000000)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000b00), 0x402040, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.817375945s ago: executing program 0 (id=1632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, 0x0, 0x0) 1.370811375s ago: executing program 0 (id=1633): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x6, 0x80800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r3, 0x7, 0x2, r2}) r4 = eventfd2(0xe5c, 0x80000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r4, 0x7, 0x2, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000440)) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000220a40308801b09e3401f010203010902240001010900060904a7a7025d81df0209058a01"], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0}) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)=':,.:\x00', 0x0) r6 = openat$random(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$RNDADDENTROPY(r6, 0x40085203, &(0x7f0000000200)={0x2, 0x5, "336d898bb5"}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x10) close_range(r7, 0xffffffffffffffff, 0x0) 1.314963909s ago: executing program 2 (id=1634): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0079d50000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) (fail_nth: 1) 1.228215665s ago: executing program 2 (id=1635): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) syz_open_dev$video(&(0x7f0000000040), 0xa8, 0x41841) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6bb, &(0x7f0000000040)={0x0, 0x3cb3, 0x1c080, 0xa, 0x20082f5}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x51}, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000100)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0079d50000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) r2 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r2) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f00000002c0)="0000000000000002ff690000000000010000001800000006000200861f4104bfeacdd5a9007d16dcdc2850b5", 0x2c, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)={0x4, &(0x7f0000000000)=[{0x4e1, 0x3, 0x5, 0x1ff}, {0x1, 0x1, 0x6, 0x8}, {0x44, 0x4, 0xc, 0x2}, {0x8, 0x50, 0x8, 0x5}]}) 1.074027448s ago: executing program 4 (id=1636): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000140)={0xfffffffffffffc04, 0x0, 0x2, r3, 0x11}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) sendto$inet6(r0, &(0x7f0000000f80)="900000001c001f4d154a817193278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0b21a1c69d33e02cdba86c9d2896c013bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$SG_IO(r6, 0x2285, &(0x7f00000005c0)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x2adff, 0x0}, &(0x7f0000000240)="a20000000000", 0x0, 0x7, 0x0, 0x8000000, 0x0}) preadv(r5, &(0x7f0000000700)=[{&(0x7f0000000000)=""/42, 0x2a}], 0x1, 0x33, 0x2000051b) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) openat$cgroup_ro(r4, &(0x7f0000000000)='blkio.bfq.io_merged\x00', 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}, 0x1}, 0x1c) r8 = getpgid(0xffffffffffffffff) syz_open_procfs(r8, &(0x7f0000000040)='comm\x00') sendto$inet6(r0, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x80, 0x0, 0x0) 869.69777ms ago: executing program 2 (id=1637): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 764.808034ms ago: executing program 4 (id=1638): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x10, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_VLAN_ETH_TYPE={0x6, 0x19, 0x8100}, @TCA_FLOWER_KEY_CVLAN_PRIO={0x5}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084) io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, 0xffffffffffffffff, 0x0}]) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002940)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x9, 0xb, 0x4, 0x8c45, 0x200}, 0x5b, 0xf}, [{0x5c, 0x721, 0x3, 0xfffffffe, 0x6, 0x1}, {0x5, 0x40, 0x2, 0xd, 0x401}, {0x5, 0xc, 0x8, 0xfffffffb, 0x3, 0xfffffffb}, {0x8, 0xfffffffc, 0x16, 0x9, 0x2, 0x9}, {0x0, 0x80000000, 0x3, 0x1, 0x76}, {0x10001, 0x459e, 0x5, 0xb8a5, 0x5, 0x8}, {0x8, 0x2, 0x1ff, 0xfffffffa, 0x8, 0x3}, {0x1b, 0x8, 0x900000, 0xfffffff8, 0x5, 0x8}, {0x9, 0x1, 0x9, 0xfffffff8, 0x4}, {0x0, 0xcc, 0x3, 0xffff, 0x7, 0x7}, {0x8, 0x6, 0xdc5, 0x3, 0x3, 0xfffffffa}, {0xa8, 0x5, 0x10000, 0xffffffff, 0x6b0c, 0x8e2}, {0x8, 0x8, 0x200, 0x1, 0x0, 0xffffffff}, {0x2, 0x3, 0x9, 0x0, 0x1, 0x8}, {0x7, 0x30000000, 0x4, 0xb, 0x5, 0x7}, {0x7fff, 0x6, 0x3, 0x6, 0x64, 0x6}, {0xa, 0x9, 0x6, 0x8, 0xfb}, {0xb1, 0xa37, 0xfffffeff, 0x100, 0x200, 0x7fff}, {0x100, 0x3, 0x8, 0x9, 0x7, 0x8}, {0x4e91, 0x7, 0xffffffff, 0x40f, 0x11, 0x1b}, {0xffff, 0x2, 0xfffffff0, 0x101, 0x7ff, 0x6}, {0x1, 0xb, 0x3, 0x5, 0xfffffffc, 0x5}, {0x2, 0x2, 0x400, 0x1a76, 0xa, 0x800}, {0xa578, 0x5, 0x5, 0x9c, 0x675, 0x88b}, {0xfffff221, 0x101, 0x5, 0xfffffff9, 0x80000000, 0x81}, {0x5, 0x0, 0x7, 0x0, 0xb, 0x3}, {0x3, 0xc11, 0x400, 0x6, 0x53f, 0x9}, {0x3, 0x7, 0x6, 0x4, 0x4, 0x4}, {0x5, 0x401, 0x1, 0x6, 0x4, 0x1ff}, {0xffffffff, 0x40089cf3, 0x5, 0x3, 0x9, 0x800}, {0x0, 0x5, 0x4, 0x9, 0x2}, {0x29f, 0xca, 0x0, 0x1, 0x5, 0xfffffffa}, {0x10001, 0x10001, 0x10, 0x4, 0x10000, 0x6}, {0xae7, 0x800, 0x80000001, 0xf, 0x6, 0x6}, {0x4, 0x4, 0x8, 0x2, 0x9, 0x4c}, {0x4, 0x1, 0xfffffff7, 0xcc, 0x7ff, 0xeb9a}, {0x8001, 0x3, 0x2bd2, 0x1621, 0x3, 0x2}, {0x8, 0xfffffe00, 0x9, 0xd5e, 0x5, 0x2}, {0x6, 0x4, 0x6, 0x11f, 0xc, 0x1}, {0x5, 0x103, 0x721, 0x100, 0x908, 0x8}, {0x2597, 0xa, 0x9, 0x8, 0x80000001, 0x4}, {0x3, 0x7fffffff, 0x200, 0x8ad, 0xd34e}, {0x7fff, 0x800, 0x6, 0x2, 0x7, 0xb2f6}, {0x4, 0x3, 0x6c, 0xfffffd20, 0x6, 0x1}, {0x401, 0x5, 0x3, 0xdf, 0x8, 0x5}, {0x5, 0x80, 0xe, 0x2, 0x6, 0xa2fe}, {0xfffff685, 0xfff, 0x4, 0xa6c, 0x9, 0x5}, {0x10, 0xc771, 0x1, 0x37, 0xe3f, 0x3ff}, {0x7, 0x0, 0xa, 0x1000, 0x6, 0x401}, {0x5, 0x3ff, 0x5, 0xff, 0x10000, 0x3}, {0x2, 0x9, 0xafa5, 0x0, 0x1, 0x4}, {0x4, 0x40, 0x2, 0xa, 0x2, 0xfffffff7}, {0xb, 0x1, 0x3, 0x100, 0xb, 0x7}, {0x9, 0x995, 0x374e, 0x9, 0x1000, 0xffffdb76}, {0x3, 0x4, 0xa6de, 0x9bf4, 0x3, 0x6}, {0x7ff, 0x0, 0x9, 0x0, 0xfffffffa, 0x1}, {0x7, 0x929, 0x7f, 0xe0000, 0x2, 0x81}, {0x1, 0x34, 0x0, 0x5, 0xe22, 0x6}, {0xfffffbfc, 0xaadf, 0xbc7, 0x6, 0x8, 0x2}, {0x6ef, 0x3, 0x9, 0x7, 0x4, 0x8000}, {0x2, 0x1, 0x2, 0xc3c1, 0x7, 0x4bbd}, {0x3ff, 0x4, 0xfffffffe, 0x100, 0x7fffffff, 0x3}, {0x7, 0x2, 0xff, 0x9, 0xb5a1, 0x2}, {0x9, 0x9, 0xffff, 0x100, 0xf8000000, 0x8000}, {0x0, 0xfff, 0x7, 0x7, 0xffffffff, 0xfffffffe}, {0x5, 0x9, 0x80, 0x9, 0x6, 0x9250}, {0x3, 0x5, 0x81, 0x4, 0x1, 0x6}, {0x6, 0x7fffffff, 0x0, 0x1b, 0x39, 0x4}, {0x5, 0x3ff, 0x40, 0xbe, 0xffff, 0x5}, {0x24, 0x53956696, 0x81, 0x4, 0x3, 0x5}, {0x80000001, 0x7, 0x0, 0x5, 0x2, 0x8001}, {0x10000, 0x400, 0x4, 0x1, 0x618, 0x1}, {0xf1, 0x5, 0xfffffbff, 0x5, 0x400, 0xa6}, {0x4, 0x7ff, 0x5, 0x8, 0x800, 0x8}, {0x8, 0x1, 0x1000, 0x100, 0x4, 0x45f2}, {0xd8, 0x8, 0x5, 0xf8b, 0x6, 0xb5}, {0x6, 0x7, 0xe9, 0x80, 0x5, 0xa}, {0x2, 0x0, 0x4, 0x400, 0x1, 0x6}, {0xfa9, 0x3, 0x7, 0xffff, 0x0, 0x3}, {0x99, 0x9, 0x6, 0x3, 0x5, 0x10000}, {0x7fff, 0x4, 0x6, 0x2, 0x48, 0x5}, {0xffffb1c7, 0x7, 0x80000001, 0x1, 0x3, 0xb54f}, {0x2, 0x1, 0x1000, 0x101, 0x9, 0xffffffff}, {0xfffff000, 0x7, 0x7, 0x6ba, 0x6}, {0x6, 0x0, 0x5, 0x6a7a, 0x545, 0x7}, {0xfffffffc, 0x2c04, 0x7, 0x8000000, 0x4, 0x8000}, {0xffff, 0x7fff, 0x3, 0x3, 0xe1f, 0x8}, {0x100, 0x400, 0x4800000, 0x835, 0x4, 0x52}, {0x4, 0x7b, 0xff, 0xfff, 0x1, 0x9}, {0x18000000, 0x9, 0x833b, 0xfffff251, 0x5, 0xa}, {0xf, 0x1, 0x8, 0x2, 0x5}, {0x40, 0xfffffffc, 0x4, 0x7f, 0x7, 0x3}, {0x2e, 0x80000001, 0x7fff, 0x3, 0x3, 0x401}, {0x9, 0xacc, 0xd, 0x1, 0x95e, 0x5}, {0x9c2, 0x6, 0x4, 0xffffffff, 0x1000}, {0x7b8, 0x5, 0xb, 0xa, 0x8, 0x200}, {0xf, 0xb7a, 0xe, 0x6, 0xc1, 0x7}, {0x7, 0x5f6b0af1, 0x6, 0x54, 0x0, 0xfff}, {0x78f6, 0x46000000, 0x0, 0x6, 0x8, 0xee96}, {0xfffffffe, 0x7, 0x80000001, 0xff, 0x0, 0x3}, {0x40, 0xf29, 0x9, 0xb, 0xcb, 0x1}, {0x91cb, 0x3, 0x0, 0x7, 0x3}, {0x9, 0xd0f, 0x8, 0xfffffffb, 0x8, 0x2}, {0x401, 0x7fffffff, 0x800, 0xfffff001, 0xc}, {0x6, 0x9, 0xc000, 0x0, 0x8000, 0x7fff}, {0x69, 0xffff, 0x1, 0x6, 0x80, 0x8}, {0x8c7, 0x2, 0xd0, 0x0, 0x4, 0x7}, {0x3ff, 0x4, 0x7, 0xffff, 0x1, 0xff}, {0x4, 0x1ff, 0xd, 0x9, 0x9, 0x2}, {0x7, 0x1, 0xc2, 0x7, 0x4}, {0x22b, 0x7, 0x704e, 0x3, 0x9, 0x6}, {0x80000001, 0x2, 0xffffd611, 0x8, 0x7}, {0x8000, 0x80, 0x9, 0xffff, 0x0, 0x2}, {0x6783edc, 0xaf2, 0x7, 0x8, 0x1, 0xff000000}, {0x7, 0x1, 0x140000, 0x4, 0xd, 0x200}, {0xb, 0x2, 0x8, 0xa, 0x1}, {0x7, 0x69a5, 0x100, 0x236, 0x4, 0x10001}, {0x3, 0xffff0000, 0x144, 0x2, 0x81, 0x8}, {0xde8, 0x2, 0x6, 0x9b, 0x88db, 0x401}, {0x0, 0x6, 0x40, 0x0, 0x9, 0xc9}, {0x2bd1272, 0x59, 0x3921, 0x57, 0x6, 0x7ffffffd}, {0x3, 0x7, 0xb861, 0x1, 0x6, 0x4}, {0x1, 0x3, 0x8, 0x9, 0x4, 0x8}, {0x0, 0x7, 0x80, 0xed2, 0x80000000, 0x8}, {0x2, 0xfffffc01, 0xfc3, 0x8d5, 0x8001, 0x3fffc000}, {0x8d, 0x6, 0x0, 0x5, 0x4, 0x1}, {0x6, 0x9, 0xeec6, 0x6, 0x7, 0x9}, {0x80000000, 0xd6187927, 0x1, 0x2a, 0xa, 0x7fffffff}], [{0x1, 0x1}, {0x4}, {0x2}, {0x2}, {0x0, 0x1}, {0x4}, {0x2}, {0x5, 0x1}, {0x1}, {0x3}, {0x1}, {0x2}, {0x2}, {0x5, 0x1}, {0x3}, {0x2}, {0x5, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x7}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4, 0x1}, {0x0, 0x1}, {}, {0x5, 0xd716e616b6744d43}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {}, {0x3, 0x1}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x1}, {0x5}, {0x1}, {0x1}, {0x4}, {0x4, 0x1}, {0x3}, {0x4, 0x1}, {}, {0x3, 0xb4d2ea9c256b621e}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x1}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x1, 0x1}, {0x5}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x0, 0x1}, {}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x1, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0xe270aa78089fc197}, {0x4}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3, 0x1}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x2}, {0x1}, {0x3}, {0x2}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, 0x0}, 0x0) ioctl$IOMMU_VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'rose0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32=r10, @ANYBLOB="080005", @ANYRES32=r10], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x240408d4) socket$inet6_sctp(0xa, 0x5, 0x84) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00004c2000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000150000/0x1000)=nil, &(0x7f0000b21000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00004c2000/0x1000)=nil, &(0x7f000069c000/0x2000)=nil, &(0x7f0000184000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) io_uring_setup(0xc01, &(0x7f0000000000)={0x0, 0x1e78, 0x40, 0x2, 0x20b}) 582.582383ms ago: executing program 1 (id=1639): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfffff00c}, {0x6, 0x23, 0x7, 0xfffffff8}]}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) rt_sigprocmask(0x0, &(0x7f0000000180)={[0x1]}, 0x0, 0x8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket$l2tp(0x2, 0x2, 0x73) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000100)={0x0, 0x3}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x0, 0x0, 0xd, 0xf, 0xfffffe0800000001, 0xfa11, 0xf7ffffff}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000332000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000002000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000053000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000691000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r4 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xc4}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000001480)}], 0x1) io_uring_enter(r4, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) dup(r2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x840) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x0) 497.469353ms ago: executing program 2 (id=1640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) unshare(0x2040400) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0xffffffe3, 0xe3ff, 0x0}, &(0x7f0000000080)=0x40) 345.599648ms ago: executing program 4 (id=1641): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x87, 0x7ffc0201}]}) rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000140)="1f", 0x1, 0xfffffffffffffffe) r0 = socket$inet6(0x10, 0x80002, 0x6) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xffeffffe}, {0x16, 0x0, 0x8, 0xfffffffd}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="100000001200050f0c1000000049b23e", 0x10, 0x0, 0x0, 0x0) r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003100)) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001480)={0x1, 0x0, 0x0, &(0x7f0000001280)=""/212, &(0x7f0000001380)=""/217, 0xdddd0000}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1}) keyctl$dh_compute(0x17, &(0x7f0000000100)={0x0, r1}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={'sha256\x00'}}) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) close(0x3) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'vxcan1\x00'}}, 0x1e) sendmmsg$inet(r3, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000340)="be177dbe6dc1fe2b2a0e8c6743f448687e14f1d7ebeff7cffd42ea22c8a2ac263d3788aa034dc019349e1be5cf505a9b501fbab07396bab3afec71f9767193f0b5309295e6d6188ce88368c55c5a2958d8800a3c2b81faff89887512fde0509148e68ab9788a6a6f8513e442607a7154e11fa396094eb9cc404b6b408c2c38b1ad77e8f41cbe776bf9a3e6961f39350c4a0c157f4dd8ed04ed53312ab6db19962fdc0d0f8cf23aff69951ac76e2deb4f3e8cd737a4f232eb5554", 0xba}], 0x1}}, {{&(0x7f0000001400)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000001800)=[{0x0, 0x12}, {0x0}, {&(0x7f0000001700)="567dde672061bf3404515d0852fd1d1f17ccfa51f23ae8fc7318bb8f550b9e0b2e3af9f50d1c0ccbe76adc32baeee13e8f009c6fe2eb40759f8385a1938e95ffbc67cc59819f5509b4b76204741df20894b1a81a77247a1eb6707d10a31168935ed151cafc78aacfc5ab2a1fe8410352369fff3112495a19d0d18c910adcca16ec1c110e383ab9c4b76f26701d399ea8cd3e30d044cd300b666c5929fbca2e52d4b480a9df35b76ae60f7dd5b5585eced76c2b5847b1b1676c5bd1c0e9eb87abc71d2497808d4580ff0864e97e7980d50565e56eacf9e592370129e3b6d10a96eb028740e18b92b2f579dcbeb7b8a158d3dcdd12539cc38e8d23f065e9", 0xfd}], 0x3}}, {{&(0x7f0000001880)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x10, &(0x7f00000019c0)}}], 0x3, 0x40) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000280)={0xa3, 0x0, 0x0}) write$P9_RSETATTR(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 242.672153ms ago: executing program 2 (id=1642): connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0xffffff23, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15610}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}, @IFLA_MTU={0x8, 0x4, 0x10000}]}, 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) chroot(&(0x7f0000000000)='./file0\x00') socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000b00), 0x402040, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x24, r2, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xf}]}, 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 112.991917ms ago: executing program 4 (id=1643): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xffffffffffffff59}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, 0x0, 0x0) 0s ago: executing program 2 (id=1644): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b3, 0x0, 0x1, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r5, 0x0, &(0x7f0000000480)) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x1, 0x9, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x0, 0xb, 0xfffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff, 0xffffffff, 0x2000, 0xa8, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$vim2m(&(0x7f0000000140), 0x401, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000000)={0x7, 0x1, 0x10, "839148ae34f8a738fcea570009000000052b21e1bf1a32dcc9000000004000", 0x64737664}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000700)=ANY=[@ANYBLOB=']\b\x00\x00\x00\x00\x00\x00', @ANYRESOCT=r1, @ANYBLOB="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"], 0x70}}, 0x8000) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r8 = syz_open_dev$loop(&(0x7f0000000140), 0x5, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r10 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r10, 0x29, 0x16, &(0x7f0000000000)=0xfffffffe, 0x4) write$binfmt_misc(r9, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000400)={r9, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x800000000000208, 0x0, 0x0, 0x2, 0xc, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100000000020000ffffffffff00", "2809e8dbe108598948224ad54afac11d875397bd3c5240f45f819e01177d2d458dd4992861ac00", "90be8b1c5500000000004000f0f9ffff0000000000ffff00", [0x80000000006, 0x6]}}) ioctl$LOOP_CHANGE_FD(r8, 0x4c06, r9) socket(0x40000000015, 0x5, 0xf5b1) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f00000005c0)) r12 = openat$kvm(0xffffffffffffff9c, 0x0, 0x40, 0x0) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r13 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r13, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="020300030d000000000000000000000003000600ff00000002400000000000000000000000000000020005000000000002000000ac14140000000000000000000200090008000000e90000000000000002000100000000000000000000000000010018000bd80000"], 0x68}, 0x1, 0x7}, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) kernel console output (not intermixed with test programs): ptor too short (expected 6427, got 27) [ 335.301855][ T990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.301873][ T990] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 335.303651][ T990] usb 3-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 335.303675][ T990] usb 3-1: Product: syz [ 335.303689][ T990] usb 3-1: Manufacturer: syz [ 335.308520][ T990] usb 3-1: config 0 descriptor?? [ 335.513215][ T990] usb 1-1: USB disconnect, device number 72 [ 335.940103][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 336.101987][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 336.120689][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.129152][ T9] usb 5-1: Product: syz [ 336.134187][ T9] usb 5-1: Manufacturer: syz [ 336.134210][ T9] usb 5-1: SerialNumber: syz [ 336.390180][ T990] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 336.486339][ T9845] bond1: option downdelay: invalid value (18446744073709551609) [ 336.498738][ T9845] bond1: option downdelay: allowed values 0 - 2147483647 [ 336.503730][ T9845] bond1 (unregistering): Released all slaves [ 336.540190][ T990] usb 1-1: Using ep0 maxpacket: 8 [ 336.542713][ T9847] xt_hashlimit: size too large, truncated to 1048576 [ 336.557528][ T990] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 336.568547][ T990] usb 1-1: config 0 has no interfaces? [ 336.574367][ T990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.591086][ T990] usb 1-1: config 0 descriptor?? [ 336.861026][ T5715] usb 1-1: USB disconnect, device number 73 [ 336.863252][ T5717] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 337.010149][ T5717] usb 2-1: Using ep0 maxpacket: 32 [ 337.015890][ T5717] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 337.017108][ T5717] usb 2-1: config 0 has no interfaces? [ 337.019873][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.019897][ T5717] usb 2-1: Product: syz [ 337.019911][ T5717] usb 2-1: Manufacturer: syz [ 337.019925][ T5717] usb 2-1: SerialNumber: syz [ 337.026692][ T5717] usb 2-1: config 0 descriptor?? [ 337.076854][ T990] usb 4-1: USB disconnect, device number 55 [ 337.258669][ T9854] JFS: charset not found [ 337.628642][ T9858] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 337.757944][ T9858] syzkaller0: entered promiscuous mode [ 337.757988][ T9858] syzkaller0: entered allmulticast mode [ 337.774534][ T9859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1350'. [ 337.829432][ T5715] usb 3-1: USB disconnect, device number 51 [ 338.381088][ T990] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 338.551292][ T990] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 338.562014][ T990] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 338.571547][ T990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.571573][ T990] usb 3-1: config 0 has no interface number 0 [ 338.571615][ T990] usb 3-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 338.604779][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.613003][ T990] usb 3-1: Product: syz [ 338.613025][ T990] usb 3-1: Manufacturer: syz [ 338.613041][ T990] usb 3-1: SerialNumber: syz [ 338.641063][ T990] usb 3-1: config 0 descriptor?? [ 338.648443][ T990] yurex 3-1:0.50: Could not find endpoints [ 338.701535][ T5715] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 338.736522][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 338.748683][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 338.759719][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 338.783394][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 338.810150][ T9] usb 5-1: USB disconnect, device number 61 [ 338.861131][ T5715] usb 4-1: Using ep0 maxpacket: 16 [ 338.876531][ T5715] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 338.909890][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.919156][ T5715] usb 4-1: Product: à°‰ [ 338.923835][ T5715] usb 4-1: Manufacturer: á°‰ [ 338.944618][ T9872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.945058][ T9872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.106655][ T990] usb 3-1: USB disconnect, device number 52 [ 339.191568][ T5715] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 339.401807][ T5715] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 339.480991][ T990] usb 2-1: USB disconnect, device number 54 [ 339.559509][ T5715] usb 4-1: USB disconnect, device number 56 [ 339.757276][ T7844] udevd[7844]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 340.100189][ T5692] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 340.250113][ T990] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 340.263152][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 340.263964][ T5692] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 340.265298][ T5692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.265344][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.268027][ T5692] usb 3-1: config 0 descriptor?? [ 340.274450][ T5692] hub 3-1:0.0: USB hub found [ 340.420903][ T990] usb 4-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 340.422494][ T990] usb 4-1: config 1 has an invalid interface number: 3 but max is 0 [ 340.422537][ T990] usb 4-1: config 1 has no interface number 0 [ 340.425929][ T990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.425960][ T990] usb 4-1: Product: syz [ 340.426326][ T990] usb 4-1: Manufacturer: syz [ 340.426371][ T990] usb 4-1: SerialNumber: syz [ 340.446898][ T990] usb 4-1: 3:1 : does not exist [ 340.446923][ T990] usb 4-1: 3:2 : does not exist [ 340.471096][ T5692] hub 3-1:0.0: 1 port detected [ 340.656543][ T9887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.657047][ T9887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.672558][ T5692] hub 3-1:0.0: config failed, can't get hub status (err -5) [ 341.114564][ T5692] hid-generic 0003:046D:C31C.0020: item fetching failed at offset 0/1 [ 341.116669][ T5692] hid-generic 0003:046D:C31C.0020: probe with driver hid-generic failed with error -22 [ 341.300407][ T990] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 341.447733][ T5692] usb 3-1: USB disconnect, device number 53 [ 341.460548][ T990] usb 5-1: Using ep0 maxpacket: 8 [ 341.465754][ T990] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 341.466435][ T990] usb 5-1: config 0 has no interfaces? [ 341.466469][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.471833][ T990] usb 5-1: config 0 descriptor?? [ 341.754971][ T5715] usb 5-1: USB disconnect, device number 62 [ 342.395775][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 342.404021][ T30] audit: type=1326 audit(1788819784.700:3202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9898 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 342.430100][ T30] audit: type=1326 audit(1788819784.700:3203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9898 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 342.472169][ T30] audit: type=1326 audit(1788819784.760:3204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9898 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 342.472238][ T30] audit: type=1326 audit(1788819784.760:3205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9898 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 342.472296][ T30] audit: type=1326 audit(1788819784.760:3206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9898 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 342.472338][ T30] audit: type=1326 audit(1788819784.760:3207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9898 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 342.472378][ T30] audit: type=1326 audit(1788819784.770:3208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9898 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 342.472416][ T30] audit: type=1326 audit(1788819784.770:3209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9898 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 342.472455][ T30] audit: type=1326 audit(1788819784.770:3210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9898 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 342.472499][ T30] audit: type=1326 audit(1788819784.770:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9898 comm="syz.4.1361" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 342.773152][ T5692] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 342.921019][ T5692] usb 5-1: Using ep0 maxpacket: 8 [ 342.924212][ T5692] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 342.929052][ T5692] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 342.929079][ T5692] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.929098][ T5692] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.935428][ T5692] usb 5-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 342.935455][ T5692] usb 5-1: Product: syz [ 342.935469][ T5692] usb 5-1: Manufacturer: syz [ 342.947486][ T5692] usb 5-1: config 0 descriptor?? [ 343.078815][ T5692] usb 4-1: USB disconnect, device number 57 [ 343.148975][ T9907] JFS: charset not found [ 343.600708][ T5715] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 343.751814][ T5715] usb 2-1: Using ep0 maxpacket: 16 [ 343.759438][ T5715] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 343.778769][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.788105][ T5715] usb 2-1: Product: à°‰ [ 343.792520][ T5715] usb 2-1: Manufacturer: á°‰ [ 344.019039][ T5715] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 344.226461][ T5715] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 344.450134][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 344.459757][ T5715] usb 2-1: USB disconnect, device number 55 [ 344.558633][ T7844] udevd[7844]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 344.610366][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 344.616186][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 344.627235][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.638352][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.650109][ T9] usb 1-1: config 0 descriptor?? [ 344.663305][ T9] hub 1-1:0.0: USB hub found [ 344.782062][ T9931] team_slave_1: Caught tx_queue_len zero misconfig [ 344.807313][ T9931] syzkaller0: entered promiscuous mode [ 344.807362][ T9931] syzkaller0: entered allmulticast mode [ 344.864037][ T9] hub 1-1:0.0: 1 port detected [ 344.920167][ T5692] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 345.064601][ T9] hub 1-1:0.0: config failed, can't get hub status (err -5) [ 345.111900][ T5692] usb 3-1: Using ep0 maxpacket: 8 [ 345.114618][ T5692] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 345.115292][ T5692] usb 3-1: config 0 has no interfaces? [ 345.115325][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.119327][ T5692] usb 3-1: config 0 descriptor?? [ 345.394972][ T5692] usb 3-1: USB disconnect, device number 54 [ 345.491111][ T9] hid-generic 0003:046D:C31C.0021: item fetching failed at offset 0/1 [ 345.503023][ T9] hid-generic 0003:046D:C31C.0021: probe with driver hid-generic failed with error -22 [ 345.637676][ T5692] usb 5-1: USB disconnect, device number 63 [ 345.856265][ T4948] usb 1-1: USB disconnect, device number 74 [ 346.133850][ T9964] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1382'. [ 346.167324][ T9964] tipc: Enabled bearer , priority 0 [ 346.219086][ T9967] JFS: charset not found [ 346.396972][ T9969] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 346.771840][ T5715] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 346.933813][ T5715] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 346.959265][ T5715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.959313][ T5715] usb 1-1: Product: syz [ 346.959351][ T5715] usb 1-1: Manufacturer: syz [ 346.959369][ T5715] usb 1-1: SerialNumber: syz [ 347.080166][ T5692] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 347.236375][ T5692] usb 4-1: Using ep0 maxpacket: 32 [ 347.254511][ T5692] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 347.258592][ T5692] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 347.267709][ T5692] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 347.267736][ T5692] usb 4-1: Product: syz [ 347.267751][ T5692] usb 4-1: Manufacturer: syz [ 347.267765][ T5692] usb 4-1: SerialNumber: syz [ 347.272016][ T5692] usb 4-1: config 0 descriptor?? [ 347.272969][ T9979] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 347.412125][ T30] kauditd_printk_skb: 81 callbacks suppressed [ 347.412183][ T30] audit: type=1326 audit(1788819789.720:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.1.1389" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210839e159 code=0x7ffc0000 [ 347.450838][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 347.610145][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 347.617551][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 347.635203][ T9] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 347.645156][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.645183][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.673945][ T9] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 347.682912][ T9] usb 2-1: Product: syz [ 347.682926][ T9] usb 2-1: Manufacturer: syz [ 347.699238][ T9] usb 2-1: config 0 descriptor?? [ 347.935821][ T30] audit: type=1326 audit(1788819790.240:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9982 comm="syz.1.1389" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f210839ddeb code=0x7ffc0000 [ 348.120685][ T5692] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 348.270943][ T5692] usb 3-1: Using ep0 maxpacket: 8 [ 348.276737][ T5692] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 348.277725][ T5692] usb 3-1: config 0 has no interfaces? [ 348.277759][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.287176][ T5692] usb 3-1: config 0 descriptor?? [ 348.519315][T10001] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1500) ! [ 348.559248][ T5717] usb 3-1: USB disconnect, device number 55 [ 348.636782][T10001] syzkaller0: entered promiscuous mode [ 348.636824][T10001] syzkaller0: entered allmulticast mode [ 348.641729][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1394'. [ 348.694219][ T5692] usb 4-1: USB disconnect, device number 58 [ 349.230179][ T5692] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 349.255391][T10009] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1396'. [ 349.400657][ T5692] usb 4-1: Using ep0 maxpacket: 32 [ 349.403120][ T5692] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 349.404278][ T5692] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.404322][ T5692] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.445345][ T5692] usb 4-1: config 0 descriptor?? [ 349.470479][ T5692] hub 4-1:0.0: USB hub found [ 349.597079][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 349.597153][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 349.597192][ T5715] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 349.678302][ T5715] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 349.698033][ T5692] hub 4-1:0.0: 1 port detected [ 349.720496][ T5715] usb 1-1: USB disconnect, device number 75 [ 349.913699][ T5692] hub 4-1:0.0: config failed, can't get hub status (err -5) [ 350.348198][ T990] usb 2-1: USB disconnect, device number 56 [ 350.369088][ T5692] hid-generic 0003:046D:C31C.0022: item fetching failed at offset 0/1 [ 350.369781][ T5692] hid-generic 0003:046D:C31C.0022: probe with driver hid-generic failed with error -22 [ 350.522545][T10022] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1400'. [ 350.690465][ T5715] usb 4-1: USB disconnect, device number 59 [ 350.782811][ T5692] usb 3-1: new full-speed USB device number 56 using dummy_hcd [ 353.917904][T10014] ip6tnl0: Caught tx_queue_len zero misconfig [ 353.999336][ T30] audit: type=1326 audit(1788819796.300:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440b99e159 code=0x7ffc0000 [ 353.999569][ T30] audit: type=1326 audit(1788819796.300:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440b99e159 code=0x7ffc0000 [ 354.002469][ T30] audit: type=1326 audit(1788819796.300:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f440b99e159 code=0x7ffc0000 [ 354.002514][ T30] audit: type=1326 audit(1788819796.300:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440b99e159 code=0x7ffc0000 [ 354.002556][ T30] audit: type=1326 audit(1788819796.300:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440b99e159 code=0x7ffc0000 [ 354.002858][ T30] audit: type=1326 audit(1788819796.300:3300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f440b99e159 code=0x7ffc0000 [ 354.003093][ T30] audit: type=1326 audit(1788819796.300:3301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440b99e159 code=0x7ffc0000 [ 354.003266][ T30] audit: type=1326 audit(1788819796.300:3302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440b99e159 code=0x7ffc0000 [ 354.003575][ T30] audit: type=1326 audit(1788819796.300:3303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f440b95e98e code=0x7ffc0000 [ 354.004248][ T30] audit: type=1326 audit(1788819796.300:3304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1404" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f440b99e159 code=0x7ffc0000 [ 354.310470][T10038] batadv_slave_1: entered promiscuous mode [ 354.318450][T10040] FAULT_INJECTION: forcing a failure. [ 354.318450][T10040] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.318530][T10040] CPU: 1 UID: 0 PID: 10040 Comm: syz.1.1405 Tainted: G L syzkaller #0 PREEMPT(full) [ 354.318554][T10040] Tainted: [L]=SOFTLOCKUP [ 354.318561][T10040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 354.318572][T10040] Call Trace: [ 354.318669][T10040] [ 354.318748][T10040] dump_stack_lvl+0xe8/0x150 [ 354.318896][T10040] should_fail_ex+0x410/0x560 [ 354.319023][T10040] _copy_to_user+0x31/0xb0 [ 354.319109][T10040] simple_read_from_buffer+0xe1/0x170 [ 354.319168][T10040] proc_fail_nth_read+0x1bb/0x230 [ 354.319202][T10040] ? common_file_perm+0x20e/0x2b0 [ 354.319276][T10040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.319308][T10040] ? rw_verify_area+0x24a/0x4c0 [ 354.319338][T10040] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.319366][T10040] vfs_read+0x213/0xa80 [ 354.319398][T10040] ? __pfx___mutex_lock+0x10/0x10 [ 354.319495][T10040] ? __pfx_vfs_read+0x10/0x10 [ 354.319524][T10040] ? __fget_files+0x2a/0x420 [ 354.319554][T10040] ? __fget_files+0x3a2/0x420 [ 354.319577][T10040] ? __fget_files+0x2a/0x420 [ 354.319610][T10040] ksys_read+0x150/0x270 [ 354.319641][T10040] ? __pfx_ksys_read+0x10/0x10 [ 354.319678][T10040] do_syscall_64+0x166/0x520 [ 354.319724][T10040] ? trace_irq_disable+0x3b/0x140 [ 354.319767][T10040] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.319803][T10040] ? clear_bhb_loop+0x70/0xc0 [ 354.319826][T10040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.319846][T10040] RIP: 0033:0x7f210835e98e [ 354.319892][T10040] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 354.319909][T10040] RSP: 002b:00007f21065f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.319969][T10040] RAX: ffffffffffffffda RBX: 00007f21065f66c0 RCX: 00007f210835e98e [ 354.319983][T10040] RDX: 000000000000000f RSI: 00007f21065f60a0 RDI: 0000000000000004 [ 354.319996][T10040] RBP: 00007f21065f6090 R08: 0000000000000000 R09: 0000000000000000 [ 354.320008][T10040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.320021][T10040] R13: 00007f2108626128 R14: 00007f2108626090 R15: 00007f210874fa48 [ 354.320052][T10040] [ 354.427204][T10036] batadv_slave_1: left promiscuous mode [ 354.530422][ T5692] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 354.620755][T10046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1407'. [ 354.680099][ T5692] usb 5-1: Using ep0 maxpacket: 8 [ 354.681567][ T5692] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 354.682104][ T5692] usb 5-1: config 0 has no interfaces? [ 354.682134][ T5692] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.684841][ T5692] usb 5-1: config 0 descriptor?? [ 354.698042][T10046] ipvlan2: entered allmulticast mode [ 354.698065][T10046] erspan0: entered allmulticast mode [ 354.840464][ T990] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 354.955827][ T4948] usb 5-1: USB disconnect, device number 64 [ 355.016473][ T990] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 355.019620][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.019647][ T990] usb 2-1: Product: syz [ 355.019662][ T990] usb 2-1: Manufacturer: syz [ 355.019677][ T990] usb 2-1: SerialNumber: syz [ 355.090365][ T5692] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 355.248927][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 355.248984][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 355.249005][ T990] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 355.265032][ T990] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 355.272251][ T5692] usb 1-1: Using ep0 maxpacket: 8 [ 355.275510][ T5692] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 355.276838][ T5692] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 355.276864][ T5692] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.276885][ T5692] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 355.287603][ T5692] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 355.287632][ T5692] usb 1-1: Product: syz [ 355.287660][ T5692] usb 1-1: Manufacturer: syz [ 355.288855][ T990] usb 2-1: USB disconnect, device number 57 [ 355.298649][ T5692] usb 1-1: config 0 descriptor?? [ 355.340391][ T25] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 355.480761][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 355.481639][ T25] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 355.484085][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.484131][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.488072][ T25] usb 3-1: config 0 descriptor?? [ 355.491218][ T25] hub 3-1:0.0: USB hub found [ 355.691147][ T25] hub 3-1:0.0: 1 port detected [ 355.892145][ T25] hub 3-1:0.0: config failed, can't get hub status (err -5) [ 355.980243][ T990] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 356.130142][ T990] usb 5-1: Using ep0 maxpacket: 16 [ 356.131121][ T990] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=ec.5c [ 356.148386][ T990] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 356.148420][ T990] usb 5-1: config 0 has no interfaces? [ 356.168505][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.168540][ T990] usb 5-1: Product: syz [ 356.168802][ T990] usb 5-1: Manufacturer: syz [ 356.168818][ T990] usb 5-1: SerialNumber: syz [ 356.173057][ T990] usb 5-1: config 0 descriptor?? [ 356.200947][ T5692] usb 2-1: new full-speed USB device number 58 using dummy_hcd [ 356.318995][ T25] hid-generic 0003:046D:C31C.0023: item fetching failed at offset 0/1 [ 356.326640][ T25] hid-generic 0003:046D:C31C.0023: probe with driver hid-generic failed with error -22 [ 356.330348][ T5692] usb 2-1: device descriptor read/64, error -71 [ 356.570115][ T5692] usb 2-1: new full-speed USB device number 59 using dummy_hcd [ 356.640790][ T25] usb 3-1: USB disconnect, device number 57 [ 356.701101][ T5692] usb 2-1: device descriptor read/64, error -71 [ 356.810488][ T5692] usb usb2-port1: attempt power cycle [ 357.151394][ T5692] usb 2-1: new full-speed USB device number 60 using dummy_hcd [ 357.170739][ T5692] usb 2-1: device descriptor read/8, error -71 [ 357.410181][ T5692] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 357.431688][ T5692] usb 2-1: device descriptor read/8, error -71 [ 357.541436][ T5692] usb usb2-port1: unable to enumerate USB device [ 357.590256][ T4948] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 357.742366][ T4948] usb 3-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 357.752887][ T4948] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 357.752939][ T4948] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 357.769055][ T4948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.769084][ T4948] usb 3-1: Product: syz [ 357.769099][ T4948] usb 3-1: Manufacturer: syz [ 357.769113][ T4948] usb 3-1: SerialNumber: syz [ 357.776005][T10074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.776131][T10074] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 357.807965][ T5692] usb 1-1: USB disconnect, device number 76 [ 357.978727][ T4948] zaurus 3-1:1.0: probe with driver zaurus failed with error -71 [ 358.004407][ T4948] usb 3-1: USB disconnect, device number 58 [ 358.201073][ T5692] usb 1-1: new full-speed USB device number 77 using dummy_hcd [ 358.350914][ T5692] usb 1-1: New USB device found, idVendor=046d, idProduct=c211, bcdDevice= 0.00 [ 358.361323][ T5692] usb 1-1: too many endpoints for config 0 interface 0 altsetting 9: 223, using maximum allowed: 30 [ 358.361380][ T5692] usb 1-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 358.361407][ T5692] usb 1-1: config 0 interface 0 has no altsetting 0 [ 358.361441][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.365041][ T5692] usb 1-1: config 0 descriptor?? [ 358.420815][ T4948] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 358.570343][ T4948] usb 4-1: Using ep0 maxpacket: 8 [ 358.571380][ T4948] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 358.573333][ T4948] usb 4-1: config 0 has no interfaces? [ 358.573368][ T4948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.608376][ T4948] usb 4-1: config 0 descriptor?? [ 358.623914][T10090] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 358.638105][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1423'. [ 358.712474][ T4948] usb 5-1: USB disconnect, device number 65 [ 358.885253][ T5717] usb 4-1: USB disconnect, device number 60 [ 359.100930][ T4948] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 359.160121][ T990] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 359.186908][T10084] dummy0: Caught tx_queue_len zero misconfig [ 359.251456][ T4948] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 359.255541][ T4948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.255612][ T4948] usb 5-1: Product: syz [ 359.255628][ T4948] usb 5-1: Manufacturer: syz [ 359.255646][ T4948] usb 5-1: SerialNumber: syz [ 359.310190][ T990] usb 3-1: Using ep0 maxpacket: 32 [ 359.313523][ T990] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 359.314816][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.314860][ T990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.318405][ T990] usb 3-1: config 0 descriptor?? [ 359.328188][ T990] hub 3-1:0.0: USB hub found [ 359.464442][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 359.471723][ T30] audit: type=1326 audit(1788819801.770:3343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b679e159 code=0x7ffc0000 [ 359.489891][ T4948] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 359.489951][ T4948] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 359.490071][ T4948] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 359.496639][ T30] audit: type=1326 audit(1788819801.770:3344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b679e159 code=0x7ffc0000 [ 359.496686][ T30] audit: type=1326 audit(1788819801.770:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f93b679e159 code=0x7ffc0000 [ 359.496725][ T30] audit: type=1326 audit(1788819801.770:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b679e159 code=0x7ffc0000 [ 359.496764][ T30] audit: type=1326 audit(1788819801.770:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b679e159 code=0x7ffc0000 [ 359.496805][ T30] audit: type=1326 audit(1788819801.770:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f93b679e159 code=0x7ffc0000 [ 359.496854][ T30] audit: type=1326 audit(1788819801.770:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b679e159 code=0x7ffc0000 [ 359.496895][ T30] audit: type=1326 audit(1788819801.770:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b679e159 code=0x7ffc0000 [ 359.496935][ T30] audit: type=1326 audit(1788819801.770:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f93b679e159 code=0x7ffc0000 [ 359.496974][ T30] audit: type=1326 audit(1788819801.780:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10100 comm="syz.3.1427" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93b679e159 code=0x7ffc0000 [ 359.501985][ T4948] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 359.519668][ T4948] usb 5-1: USB disconnect, device number 66 [ 359.526114][ T990] hub 3-1:0.0: 1 port detected [ 359.730766][ T990] hub 3-1:0.0: config failed, can't get hub status (err -5) [ 360.120902][ T5717] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 360.220124][ T25] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 360.221432][ T990] hid-generic 0003:046D:C31C.0024: item fetching failed at offset 0/1 [ 360.222333][ T990] hid-generic 0003:046D:C31C.0024: probe with driver hid-generic failed with error -22 [ 360.320798][ T5717] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 360.331636][ T5717] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 360.331704][ T5717] usb 4-1: config 0 has no interface number 0 [ 360.348289][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.356517][ T5717] usb 4-1: Product: syz [ 360.361339][ T5717] usb 4-1: Manufacturer: syz [ 360.366048][ T5717] usb 4-1: SerialNumber: syz [ 360.370905][ T25] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.372452][ T25] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 360.372476][ T25] usb 2-1: config 0 has no interfaces? [ 360.372505][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.376834][ T25] usb 2-1: config 0 descriptor?? [ 360.417960][ T5717] usb 4-1: config 0 descriptor?? [ 360.455306][T10117] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 360.465814][ T5715] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 360.553413][T10119] FAULT_INJECTION: forcing a failure. [ 360.553413][T10119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.566858][T10119] CPU: 0 UID: 0 PID: 10119 Comm: syz.4.1434 Tainted: G L syzkaller #0 PREEMPT(full) [ 360.566891][T10119] Tainted: [L]=SOFTLOCKUP [ 360.566899][T10119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 360.566911][T10119] Call Trace: [ 360.566919][T10119] [ 360.566927][T10119] dump_stack_lvl+0xe8/0x150 [ 360.566964][T10119] should_fail_ex+0x410/0x560 [ 360.567000][T10119] _copy_from_user+0x2d/0xb0 [ 360.567025][T10119] lo_ioctl+0x798/0x2010 [ 360.567189][T10119] ? lock_acquire+0x115/0x350 [ 360.567233][T10119] ? __pfx_lo_ioctl+0x10/0x10 [ 360.567261][T10119] ? is_bpf_text_address+0x26/0x2b0 [ 360.567289][T10119] ? is_bpf_text_address+0x292/0x2b0 [ 360.567312][T10119] ? is_bpf_text_address+0x26/0x2b0 [ 360.567338][T10119] ? kernel_text_address+0xa5/0xe0 [ 360.567379][T10119] ? __lock_acquire+0x747/0x2de0 [ 360.567414][T10119] ? __lock_acquire+0x747/0x2de0 [ 360.567442][T10119] ? __lock_acquire+0x747/0x2de0 [ 360.567470][T10119] ? __lock_acquire+0x747/0x2de0 [ 360.567496][T10119] ? __lock_acquire+0x747/0x2de0 [ 360.567530][T10119] ? lock_acquire+0x115/0x350 [ 360.567556][T10119] ? lock_acquire+0x115/0x350 [ 360.567584][T10119] ? is_bpf_text_address+0x26/0x2b0 [ 360.567612][T10119] ? is_bpf_text_address+0x292/0x2b0 [ 360.567635][T10119] ? is_bpf_text_address+0x26/0x2b0 [ 360.567659][T10119] ? kernel_text_address+0xa5/0xe0 [ 360.567681][T10119] ? __kernel_text_address+0xd/0x30 [ 360.567709][T10119] ? unwind_get_return_address+0x4d/0x90 [ 360.567739][T10119] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 360.567780][T10119] ? arch_stack_walk+0xfb/0x150 [ 360.567823][T10119] ? stack_trace_save+0xa9/0x100 [ 360.567852][T10119] ? __pfx_stack_trace_save+0x10/0x10 [ 360.567879][T10119] ? kasan_save_track+0x4f/0x80 [ 360.567915][T10119] ? stack_depot_save_flags+0x33/0x7f0 [ 360.567973][T10119] ? __lock_acquire+0x747/0x2de0 [ 360.567996][T10119] ? kasan_save_track+0x4f/0x80 [ 360.568014][T10119] ? kasan_save_track+0x3e/0x80 [ 360.568032][T10119] ? kasan_save_free_info+0x40/0x50 [ 360.568057][T10119] ? __kasan_slab_free+0x5c/0x80 [ 360.568077][T10119] ? kfree+0x1c5/0x650 [ 360.568113][T10119] ? tomoyo_path_number_perm+0x4ba/0x5f0 [ 360.568205][T10119] ? security_file_ioctl+0xc3/0x2a0 [ 360.568282][T10119] ? __se_sys_ioctl+0x47/0x170 [ 360.568301][T10119] ? do_syscall_64+0x166/0x520 [ 360.568321][T10119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.568346][T10119] ? __asan_memset+0x22/0x50 [ 360.568376][T10119] ? blk_get_meta_cap+0x19d/0x780 [ 360.568462][T10119] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 360.568491][T10119] ? blkdev_common_ioctl+0x14b7/0x3250 [ 360.568554][T10119] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 360.568579][T10119] ? kasan_quarantine_put+0xbb/0x1f0 [ 360.568607][T10119] ? tomoyo_path_number_perm+0x219/0x5f0 [ 360.568639][T10119] ? tomoyo_path_number_perm+0x219/0x5f0 [ 360.568677][T10119] ? do_vfs_ioctl+0x116f/0x1530 [ 360.568740][T10119] ? __pfx_lo_ioctl+0x10/0x10 [ 360.568765][T10119] blkdev_ioctl+0x5e3/0x740 [ 360.568790][T10119] ? __pfx_blkdev_ioctl+0x10/0x10 [ 360.568812][T10119] ? __fget_files+0x2a/0x420 [ 360.568841][T10119] ? bpf_lsm_file_ioctl+0x9/0x20 [ 360.568885][T10119] ? __pfx_blkdev_ioctl+0x10/0x10 [ 360.568908][T10119] __se_sys_ioctl+0xfc/0x170 [ 360.568931][T10119] do_syscall_64+0x166/0x520 [ 360.568950][T10119] ? trace_irq_disable+0x3b/0x140 [ 360.568970][T10119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.568990][T10119] ? clear_bhb_loop+0x70/0xc0 [ 360.569015][T10119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.569034][T10119] RIP: 0033:0x7fd6dd59e159 [ 360.569055][T10119] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 360.569073][T10119] RSP: 002b:00007fd6de477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 360.569095][T10119] RAX: ffffffffffffffda RBX: 00007fd6dd825fa0 RCX: 00007fd6dd59e159 [ 360.569110][T10119] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 360.569124][T10119] RBP: 00007fd6de477090 R08: 0000000000000000 R09: 0000000000000000 [ 360.569137][T10119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.569149][T10119] R13: 00007fd6dd826038 R14: 00007fd6dd825fa0 R15: 00007fd6dd94fa48 [ 360.569180][T10119] [ 360.570613][ T25] usb 3-1: USB disconnect, device number 59 [ 360.653687][ T25] usb 2-1: USB disconnect, device number 62 [ 360.684063][T10107] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1431'. [ 360.753857][ T5717] usb 4-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 360.949108][ T5717] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 360.949491][ T5717] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 360.949598][ T5717] usb 4-1: media controller created [ 360.997545][ T5692] usbhid 1-1:0.0: can't add hid device: -71 [ 360.997673][ T5692] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 361.015273][ T5692] usb 1-1: USB disconnect, device number 77 [ 361.089714][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 361.130850][ T5717] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 361.198332][ T5717] usb 4-1: USB disconnect, device number 61 [ 361.672917][ T25] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 361.831318][ T25] usb 3-1: Using ep0 maxpacket: 8 [ 361.832147][ T25] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 361.832736][ T25] usb 3-1: config 0 has no interfaces? [ 361.832767][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.847979][ T25] usb 3-1: config 0 descriptor?? [ 361.990780][ T990] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 362.141819][ T990] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 362.144986][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.145012][ T990] usb 5-1: Product: syz [ 362.145027][ T990] usb 5-1: Manufacturer: syz [ 362.145041][ T990] usb 5-1: SerialNumber: syz [ 362.175112][ T25] usb 3-1: USB disconnect, device number 60 [ 362.472191][ T990] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 362.476165][ T990] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 362.476194][ T990] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 362.529615][ T990] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 362.567328][ T990] usb 5-1: USB disconnect, device number 67 [ 362.934444][T10159] FAULT_INJECTION: forcing a failure. [ 362.934444][T10159] name failslab, interval 1, probability 0, space 0, times 0 [ 362.957803][T10159] CPU: 0 UID: 0 PID: 10159 Comm: syz.2.1446 Tainted: G L syzkaller #0 PREEMPT(full) [ 362.957836][T10159] Tainted: [L]=SOFTLOCKUP [ 362.957844][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 362.957856][T10159] Call Trace: [ 362.957862][T10159] [ 362.957868][T10159] dump_stack_lvl+0xe8/0x150 [ 362.957889][T10159] should_fail_ex+0x410/0x560 [ 362.957911][T10159] should_failslab+0xa8/0x100 [ 362.957927][T10159] __kmalloc_noprof+0xfe/0x720 [ 362.957938][T10159] ? tomoyo_encode+0x2ad/0x570 [ 362.958018][T10159] ? tomoyo_encode+0x2ad/0x570 [ 362.958040][T10159] tomoyo_encode+0x2ad/0x570 [ 362.958056][T10159] tomoyo_realpath_from_path+0x5fa/0x640 [ 362.958074][T10159] ? tomoyo_path_number_perm+0x219/0x5f0 [ 362.958091][T10159] tomoyo_path_number_perm+0x246/0x5f0 [ 362.958109][T10159] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 362.958125][T10159] ? __lock_acquire+0x747/0x2de0 [ 362.958143][T10159] ? hook_file_ioctl+0x1f2/0x600 [ 362.958189][T10159] ? __fget_files+0x2a/0x420 [ 362.958206][T10159] ? __fget_files+0x2a/0x420 [ 362.958219][T10159] ? __fget_files+0x3a2/0x420 [ 362.958231][T10159] ? __fget_files+0x2a/0x420 [ 362.958247][T10159] security_file_ioctl+0xc3/0x2a0 [ 362.958264][T10159] __se_sys_ioctl+0x47/0x170 [ 362.958278][T10159] do_syscall_64+0x166/0x520 [ 362.958290][T10159] ? trace_irq_disable+0x3b/0x140 [ 362.958301][T10159] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.958312][T10159] ? clear_bhb_loop+0x70/0xc0 [ 362.958326][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.958336][T10159] RIP: 0033:0x7f827d39e159 [ 362.958348][T10159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.958358][T10159] RSP: 002b:00007f827e282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 362.958371][T10159] RAX: ffffffffffffffda RBX: 00007f827d625fa0 RCX: 00007f827d39e159 [ 362.958379][T10159] RDX: 0000200000000940 RSI: 00000000c040565f RDI: 0000000000000004 [ 362.958386][T10159] RBP: 00007f827e282090 R08: 0000000000000000 R09: 0000000000000000 [ 362.958393][T10159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 362.958400][T10159] R13: 00007f827d626038 R14: 00007f827d625fa0 R15: 00007f827d74fa48 [ 362.958417][T10159] [ 362.970566][T10159] ERROR: Out of memory at tomoyo_realpath_from_path. [ 363.770519][ T5717] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 363.850138][ T9] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 363.921130][ T5717] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 363.931573][ T5717] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0x97, changing to 0x87 [ 363.931603][ T5717] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 363.931631][ T5717] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x87 has invalid wMaxPacketSize 0 [ 363.931657][ T5717] usb 4-1: config 0 interface 0 has no altsetting 0 [ 363.968913][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 363.968942][ T5717] usb 4-1: Product: syz [ 363.968955][ T5717] usb 4-1: Manufacturer: syz [ 363.968979][ T5717] usb 4-1: SerialNumber: syz [ 364.003824][ T5717] usb 4-1: config 0 descriptor?? [ 364.022525][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 364.028340][ T9] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 364.043231][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 364.043302][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.076264][ T5717] usb 4-1: selecting invalid altsetting 0 [ 364.082789][ T9] usb 3-1: config 0 descriptor?? [ 364.102280][ T9] hub 3-1:0.0: USB hub found [ 364.285966][ T5692] usb 4-1: USB disconnect, device number 62 [ 364.317660][ T9] hub 3-1:0.0: 1 port detected [ 364.541425][ T9] hub 3-1:0.0: config failed, can't get hub status (err -5) [ 364.610312][ T5717] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 364.770805][ T5717] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 364.784075][ T5717] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 364.784118][ T5717] usb 5-1: config 0 has no interface number 0 [ 364.803791][ T5717] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.803855][ T5717] usb 5-1: Product: syz [ 364.803895][ T5717] usb 5-1: Manufacturer: syz [ 364.803913][ T5717] usb 5-1: SerialNumber: syz [ 364.840954][ T5717] usb 5-1: config 0 descriptor?? [ 364.982896][ T9] hid-generic 0003:046D:C31C.0025: item fetching failed at offset 0/1 [ 364.994704][ T9] hid-generic 0003:046D:C31C.0025: probe with driver hid-generic failed with error -22 [ 365.056801][T10175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1451'. [ 365.069712][ T5717] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 365.094643][ T5717] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 365.105960][ T5717] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 365.114191][ T5717] usb 5-1: media controller created [ 365.131313][ T5717] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 365.255404][T10186] nvme_fabrics: unknown parameter or missing value '#! »›¦1ÝÖæ³R¹Û?¾Ó&nâ¶õ%²ßõƒºë“~ˆÜì[6=pÍŠyz\UÔj@5NãfåWÎrs„)ìq²‰' in ctrl creation request [ 365.562533][ T25] usb 3-1: USB disconnect, device number 61 [ 365.600306][ T5692] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 365.750170][ T5692] usb 1-1: Using ep0 maxpacket: 8 [ 365.750991][ T5692] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 365.751531][ T5692] usb 1-1: config 0 has no interfaces? [ 365.751562][ T5692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.754790][ T5692] usb 1-1: config 0 descriptor?? [ 365.980861][T10197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.991527][T10197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.028342][ T9] usb 1-1: USB disconnect, device number 78 [ 366.060826][ T5692] usb 4-1: new low-speed USB device number 63 using dummy_hcd [ 366.210415][ T990] usb 2-1: new full-speed USB device number 63 using dummy_hcd [ 366.210834][ T5692] usb 4-1: Invalid ep0 maxpacket: 16 [ 366.224954][ T5717] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 366.256404][ T5717] usb 5-1: USB disconnect, device number 68 [ 366.350243][ T5692] usb 4-1: new low-speed USB device number 64 using dummy_hcd [ 366.370810][ T990] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 366.371949][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 366.371981][ T990] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 366.372022][ T990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.375040][ T990] usb 2-1: config 0 descriptor?? [ 366.375899][T10196] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 366.429342][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 366.520900][ T5692] usb 4-1: Invalid ep0 maxpacket: 16 [ 366.526673][ T5692] usb usb4-port1: attempt power cycle [ 366.582285][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 366.588447][ T990] usbhid 2-1:0.0: can't add hid device: -71 [ 366.588553][ T990] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 366.597021][ T990] usb 2-1: USB disconnect, device number 63 [ 366.621580][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.621630][ T9] usb 3-1: Product: syz [ 366.621661][ T9] usb 3-1: Manufacturer: syz [ 366.621677][ T9] usb 3-1: SerialNumber: syz [ 366.776087][ T30] kauditd_printk_skb: 166 callbacks suppressed [ 366.783704][ T30] audit: type=1326 audit(1788819809.080:3519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 366.783760][ T30] audit: type=1326 audit(1788819809.080:3520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 366.783826][ T30] audit: type=1326 audit(1788819809.080:3521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 366.783866][ T30] audit: type=1326 audit(1788819809.080:3522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 366.783905][ T30] audit: type=1326 audit(1788819809.080:3523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 366.783965][ T30] audit: type=1326 audit(1788819809.080:3524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 366.784004][ T30] audit: type=1326 audit(1788819809.080:3525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 366.784040][ T30] audit: type=1326 audit(1788819809.080:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 366.784102][ T30] audit: type=1326 audit(1788819809.080:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 366.784147][ T30] audit: type=1326 audit(1788819809.080:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10205 comm="syz.4.1461" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 366.892287][ T5692] usb 4-1: new low-speed USB device number 65 using dummy_hcd [ 366.923340][ T5692] usb 4-1: Invalid ep0 maxpacket: 16 [ 366.941073][ T25] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 366.964589][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 366.964648][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 366.964677][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 367.040429][ T5692] usb 4-1: new low-speed USB device number 66 using dummy_hcd [ 367.071931][ T5692] usb 4-1: Invalid ep0 maxpacket: 16 [ 367.072361][ T5692] usb usb4-port1: unable to enumerate USB device [ 367.100240][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 367.101328][ T25] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 7.00 [ 367.106781][ T25] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.106813][ T25] usb 1-1: Product: syz [ 367.106842][ T25] usb 1-1: Manufacturer: syz [ 367.106861][ T25] usb 1-1: SerialNumber: syz [ 367.113893][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 367.126301][ T25] usb 1-1: config 0 descriptor?? [ 367.166938][ T25] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 367.173092][ T25] usb 1-1: Detected FT2232H [ 367.183908][ T9] usb 3-1: USB disconnect, device number 62 [ 367.199446][ T5618] udevd[5618]: setting mode of /dev/bus/usb/003/062 to 020664 failed: No such file or directory [ 367.199602][ T5618] udevd[5618]: setting owner of /dev/bus/usb/003/062 to uid=0, gid=0 failed: No such file or directory [ 367.398276][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 367.398715][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 367.408393][ T25] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 367.419918][ T25] usb 1-1: USB disconnect, device number 79 [ 367.432393][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 367.435252][ T25] ftdi_sio 1-1:0.0: device disconnected [ 367.470153][ T5692] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 367.621097][ T5692] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 367.622399][ T5692] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 367.622435][ T5692] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 367.622474][ T5692] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.628432][T10211] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 367.636158][ T5692] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 367.750286][ T990] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 367.901617][ T990] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 367.902616][ T990] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 367.902664][ T990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 224, setting to 64 [ 367.903720][ T990] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 367.903744][ T990] usb 3-1: Manufacturer: syz [ 367.912293][ T990] usb 3-1: config 0 descriptor?? [ 368.003286][ T990] rc_core: IR keymap rc-hauppauge not found [ 368.003325][ T990] Registered IR keymap rc-empty [ 368.005240][ T990] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 368.014443][ T990] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input29 [ 368.403512][ T5717] usb 3-1: USB disconnect, device number 63 [ 368.770165][ T990] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 368.920191][ T990] usb 5-1: Using ep0 maxpacket: 32 [ 368.922380][ T990] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 368.927234][ T990] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.927280][ T990] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.933171][ T990] usb 5-1: config 0 descriptor?? [ 368.945514][ T990] hub 5-1:0.0: USB hub found [ 368.967455][ T5717] usb 4-1: new full-speed USB device number 67 using dummy_hcd [ 369.121631][T10238] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1471'. [ 369.133574][ T5717] usb 4-1: unable to get BOS descriptor or descriptor too short [ 369.137759][ T990] hub 5-1:0.0: 1 port detected [ 369.148618][ T5717] usb 4-1: not running at top speed; connect to a high speed hub [ 369.156897][ T5717] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 369.174877][ T5717] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 369.174923][ T5717] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 369.174964][ T5717] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 369.175012][ T5717] usb 4-1: config 14 has no interface number 0 [ 369.175033][ T5717] usb 4-1: config 14 has no interface number 1 [ 369.175094][ T5717] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 369.175118][ T5717] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 369.175171][ T5717] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 369.175200][ T5717] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 369.175227][ T5717] usb 4-1: config 14 interface 57 has no altsetting 0 [ 369.175247][ T5717] usb 4-1: config 14 interface 228 has no altsetting 0 [ 369.279773][ T5717] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.279842][ T5717] usb 4-1: Product: syz [ 369.279875][ T5717] usb 4-1: Manufacturer: syz [ 369.279895][ T5717] usb 4-1: SerialNumber: syz [ 369.341455][ T990] hub 5-1:0.0: config failed, can't get hub status (err -5) [ 369.725829][ T5717] legousbtower 4-1:14.57: interrupt endpoints not found [ 369.735746][T10246] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1475'. [ 369.741348][ T5692] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 369.775267][ T990] hid-generic 0003:046D:C31C.0026: item fetching failed at offset 0/1 [ 369.775971][ T990] hid-generic 0003:046D:C31C.0026: probe with driver hid-generic failed with error -22 [ 369.906961][ T5692] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 369.916527][ T5692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.916586][ T5692] usb 1-1: Product: syz [ 369.916602][ T5692] usb 1-1: Manufacturer: syz [ 369.916617][ T5692] usb 1-1: SerialNumber: syz [ 370.042570][ T990] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 370.101699][ T25] usb 5-1: USB disconnect, device number 69 [ 370.131325][ T5692] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 370.131410][ T5692] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 370.131429][ T5692] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 370.166659][ T5717] legousbtower 4-1:14.228: get version request failed: -71 [ 370.166883][ T5717] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 370.171823][ T5692] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 370.193215][ T990] usb 3-1: not running at top speed; connect to a high speed hub [ 370.193251][ T990] usb 3-1: New USB device found, idVendor=0582, idProduct=010f, bcdDevice= 0.40 [ 370.194445][ T990] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 220, changing to 4 [ 370.194473][ T990] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 370.194510][ T990] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 36, changing to 4 [ 370.197128][ T990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.197152][ T990] usb 3-1: Product: ᇆۉꮃ茞㯑䯴ãœã¢¾âœ•íœ®ìƒŠå«ƒê›¥ë·”뎓྘ۥãžâ“¼ì§¾ [ 370.197176][ T990] usb 3-1: Manufacturer: 㜷競â½ê¢±è½å¨¶âˆŽì®–ⓟ๊濥岸꼈茫飣꣛࣪棯䢠âŸç…²ä„… [ 370.197193][ T990] usb 3-1: SerialNumber: syz [ 370.276127][ T5692] usb 1-1: USB disconnect, device number 80 [ 370.306023][ T5717] usb 4-1: USB disconnect, device number 67 [ 370.459126][ T5715] usb 2-1: USB disconnect, device number 64 [ 370.596477][ T990] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 370.597775][ T990] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 370.646134][ T990] usb 3-1: USB disconnect, device number 64 [ 370.683560][T10252] syz_tun: entered allmulticast mode [ 370.700339][ T7844] udevd[7844]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 370.706142][T10251] syz_tun: left allmulticast mode [ 370.818884][ T5715] hid-generic 0000:0000:0000.0027: unknown main item tag 0x0 [ 370.837806][ T5715] hid-generic 0000:0000:0000.0027: hidraw0: HID v0.00 Device [syz1] on syz0 [ 371.207688][ T25] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 371.227872][T10271] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1485'. [ 371.351872][ T25] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=65.c8 [ 371.354243][ T25] usb 4-1: config 3 has an invalid interface number: 137 but max is 1 [ 371.354268][ T25] usb 4-1: config 3 has an invalid interface number: 246 but max is 1 [ 371.354288][ T25] usb 4-1: config 3 has no interface number 0 [ 371.354304][ T25] usb 4-1: config 3 has no interface number 1 [ 371.354352][ T25] usb 4-1: config 3 interface 137 altsetting 8 bulk endpoint 0x2 has invalid maxpacket 8 [ 371.354386][ T25] usb 4-1: config 3 interface 246 altsetting 9 endpoint 0x1 has invalid maxpacket 21880, setting to 64 [ 371.354412][ T25] usb 4-1: config 3 interface 137 has no altsetting 0 [ 371.354430][ T25] usb 4-1: config 3 interface 246 has no altsetting 0 [ 371.356501][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.356534][ T25] usb 4-1: Product: syz [ 371.356549][ T25] usb 4-1: Manufacturer: syz [ 371.356563][ T25] usb 4-1: SerialNumber: syz [ 371.406381][T10260] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 371.480682][ T990] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 371.630216][ T990] usb 2-1: Invalid ep0 maxpacket: 16 [ 371.638794][T10260] cifs: Unknown parameter 'rootmode' [ 371.645918][T10260] cifs: Unknown parameter 'rootmode' [ 371.715655][ T25] usb 4-1: USB disconnect, device number 68 [ 371.740425][ T5692] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 371.760231][ T990] usb 2-1: new low-speed USB device number 66 using dummy_hcd [ 371.890826][ T5692] usb 3-1: Using ep0 maxpacket: 32 [ 371.891518][ T5692] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 371.892475][ T5692] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 371.892520][ T5692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.897232][ T5692] usb 3-1: config 0 descriptor?? [ 371.903796][ T5692] hub 3-1:0.0: USB hub found [ 371.910085][ T990] usb 2-1: Invalid ep0 maxpacket: 16 [ 371.910381][ T990] usb usb2-port1: attempt power cycle [ 371.957145][T10280] ip6t_srh: unknown srh invflags 4000 [ 372.103207][ T5692] hub 3-1:0.0: 1 port detected [ 372.192470][ T25] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 372.250143][ T990] usb 2-1: new low-speed USB device number 67 using dummy_hcd [ 372.272704][ T990] usb 2-1: Invalid ep0 maxpacket: 16 [ 372.305685][ T5692] hub 3-1:0.0: config failed, can't get hub status (err -5) [ 372.320317][ T5715] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 372.340960][ T25] usb 1-1: New USB device found, idVendor=5543, idProduct=3031, bcdDevice= 0.34 [ 372.342241][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.342287][ T25] usb 1-1: config 0 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 372.342314][ T25] usb 1-1: config 0 interface 0 has no altsetting 0 [ 372.342346][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.353036][ T25] usb 1-1: config 0 descriptor?? [ 372.361752][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 372.402655][ T990] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 372.420919][ T990] usb 2-1: Invalid ep0 maxpacket: 16 [ 372.421226][ T990] usb usb2-port1: unable to enumerate USB device [ 372.471137][ T5715] usb 5-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 372.472358][ T5715] usb 5-1: config 1 has an invalid interface number: 3 but max is 0 [ 372.472383][ T5715] usb 5-1: config 1 has no interface number 0 [ 372.474936][ T5715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.474961][ T5715] usb 5-1: Product: syz [ 372.474975][ T5715] usb 5-1: Manufacturer: syz [ 372.474990][ T5715] usb 5-1: SerialNumber: syz [ 372.486140][ T5715] usb 5-1: 3:1 : does not exist [ 372.486164][ T5715] usb 5-1: 3:2 : does not exist [ 372.693254][T10283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.702639][T10283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.727006][ T5692] hid-generic 0003:046D:C31C.0028: item fetching failed at offset 0/1 [ 372.736218][ T5692] hid-generic 0003:046D:C31C.0028: probe with driver hid-generic failed with error -22 [ 372.744680][ T5715] usb 5-1: USB disconnect, device number 70 [ 373.050376][ T5692] usb 3-1: USB disconnect, device number 65 [ 373.470222][ T5715] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 373.540687][ T5692] usb 5-1: new full-speed USB device number 71 using dummy_hcd [ 373.620645][ T5715] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 373.624595][ T5715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.624625][ T5715] usb 4-1: Product: syz [ 373.624639][ T5715] usb 4-1: Manufacturer: syz [ 373.624654][ T5715] usb 4-1: SerialNumber: syz [ 373.680301][ T5692] usb 5-1: device descriptor read/64, error -71 [ 373.708206][ T30] kauditd_printk_skb: 206 callbacks suppressed [ 373.710291][ T30] audit: type=1326 audit(1788819816.010:3735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827d39e159 code=0x7ffc0000 [ 373.739759][ T30] audit: type=1326 audit(1788819816.010:3736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827d39e159 code=0x7ffc0000 [ 373.739910][ T30] audit: type=1326 audit(1788819816.040:3737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f827d39e159 code=0x7ffc0000 [ 373.740259][ T30] audit: type=1326 audit(1788819816.040:3738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827d39e159 code=0x7ffc0000 [ 373.742027][ T30] audit: type=1326 audit(1788819816.050:3739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827d39e159 code=0x7ffc0000 [ 373.771677][ T30] audit: type=1326 audit(1788819816.080:3740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f827d39e159 code=0x7ffc0000 [ 373.772218][ T30] audit: type=1326 audit(1788819816.080:3741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827d39e159 code=0x7ffc0000 [ 373.772689][ T30] audit: type=1326 audit(1788819816.080:3742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f827d39e159 code=0x7ffc0000 [ 373.773158][ T30] audit: type=1326 audit(1788819816.080:3743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f827d39e159 code=0x7ffc0000 [ 373.773506][ T30] audit: type=1326 audit(1788819816.080:3744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10296 comm="syz.2.1494" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f827d39e159 code=0x7ffc0000 [ 373.961317][ T5715] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 373.961373][ T5715] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 373.961394][ T5715] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 373.992812][ T5715] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 374.023201][ T5715] usb 4-1: USB disconnect, device number 69 [ 374.141582][ T5692] usb 5-1: new full-speed USB device number 72 using dummy_hcd [ 374.280149][ T5692] usb 5-1: device descriptor read/64, error -71 [ 374.359494][T10305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1498'. [ 374.380231][ T5717] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 374.390487][ T5692] usb usb5-port1: attempt power cycle [ 374.510479][ T5717] usb 3-1: device descriptor read/64, error -71 [ 374.567236][T10309] PKCS7: Unknown OID: [4] 0.0 [ 374.567266][T10309] PKCS7: Only support pkcs7_signedData type [ 374.742094][ T5692] usb 5-1: new full-speed USB device number 73 using dummy_hcd [ 374.750580][ T5717] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 374.781785][ T5692] usb 5-1: device descriptor read/8, error -71 [ 374.809527][ T9] usb 1-1: USB disconnect, device number 81 [ 374.880527][ T5717] usb 3-1: device descriptor read/64, error -71 [ 374.994284][ T5717] usb usb3-port1: attempt power cycle [ 375.020503][ T5692] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 375.030090][ T5748] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 375.041223][ T5692] usb 5-1: device descriptor read/8, error -71 [ 375.151064][ T5692] usb usb5-port1: unable to enumerate USB device [ 375.180247][ T5748] usb 4-1: Using ep0 maxpacket: 8 [ 375.187572][ T5748] usb 4-1: unable to get BOS descriptor or descriptor too short [ 375.187640][ T5748] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 375.209567][ T5748] usb 4-1: config 1 has an invalid descriptor of length 221, skipping remainder of the config [ 375.209614][ T5748] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 375.209653][ T5748] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 375.233460][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=232, SerialNumber=3 [ 375.233489][ T5748] usb 4-1: Product: syz [ 375.233505][ T5748] usb 4-1: Manufacturer: syz [ 375.233519][ T5748] usb 4-1: SerialNumber: syz [ 375.276140][T10327] syzkaller0: entered promiscuous mode [ 375.276169][T10327] syzkaller0: entered allmulticast mode [ 375.292858][T10327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1507'. [ 375.330713][ T5717] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 375.363174][ T5717] usb 3-1: device descriptor read/8, error -71 [ 375.558847][T10311] batadv0: entered promiscuous mode [ 375.562107][T10311] vlan3: entered promiscuous mode [ 375.600753][ T5717] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 375.623885][ T5717] usb 3-1: device descriptor read/8, error -71 [ 375.700108][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 375.727082][ T5748] cdc_ncm 4-1:1.0: invalid descriptor buffer length [ 375.727129][ T5748] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 375.727165][ T5748] cdc_ncm 4-1:1.0: bind() failure [ 375.730467][ T5717] usb usb3-port1: unable to enumerate USB device [ 375.741640][ T5748] usb 4-1: USB disconnect, device number 70 [ 375.852214][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 375.856884][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.856913][ T9] usb 1-1: Product: syz [ 375.856928][ T9] usb 1-1: Manufacturer: syz [ 375.856942][ T9] usb 1-1: SerialNumber: syz [ 375.873020][T10342] netlink: 'syz.1.1514': attribute type 34 has an invalid length. [ 375.873040][T10342] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'. [ 375.907057][T10342] bond1: option lacp_strict: invalid value (255) [ 375.915856][T10342] bond1 (unregistering): Released all slaves [ 376.071914][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 376.071991][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 376.072008][ T9] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 376.086472][ T9] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 376.092475][ T9] usb 1-1: USB disconnect, device number 82 [ 376.708182][T10363] x_tables: ip6_tables: conntrack.2 match: invalid size 160 (kernel) != (user) 168 [ 376.719743][T10363] netlink: 'syz.4.1522': attribute type 1 has an invalid length. [ 376.719808][T10363] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.831475][T10367] syzkaller1: entered promiscuous mode [ 376.837236][T10367] syzkaller1: entered allmulticast mode [ 376.933530][T10369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1525'. [ 376.957343][T10369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.960336][ T9] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 376.964058][T10369] lo: entered allmulticast mode [ 376.964329][T10369] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 376.974480][T10369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 376.987748][T10369] bond1: (slave lo): Enslaving as an active interface with an up link [ 377.111532][ T9] usb 5-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 377.125169][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.125226][ T9] usb 5-1: Product: syz [ 377.125260][ T9] usb 5-1: Manufacturer: syz [ 377.125275][ T9] usb 5-1: SerialNumber: syz [ 377.171867][ T9] ums_eneub6250 5-1:1.0: USB Mass Storage device detected [ 377.235056][ T9] scsi host1: usb-storage 5-1:1.0 [ 377.436581][T10393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.448460][T10393] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.592556][T10398] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1531'. [ 377.802981][ T9] ums_eneub6250 5-1:1.0: probe with driver ums_eneub6250 failed with error 3 [ 377.842302][ T5748] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 377.924430][ T9] usb 5-1: USB disconnect, device number 75 [ 377.992092][ T5748] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 378.003502][ T5748] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.003550][ T5748] usb 1-1: Product: syz [ 378.003565][ T5748] usb 1-1: Manufacturer: syz [ 378.003580][ T5748] usb 1-1: SerialNumber: syz [ 378.284435][ T5748] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 378.284516][ T5748] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 378.284535][ T5748] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 378.323774][ T5748] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 378.363961][ T5748] usb 1-1: USB disconnect, device number 83 [ 378.550751][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.557809][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.778243][ T30] kauditd_printk_skb: 226 callbacks suppressed [ 378.784690][ T30] audit: type=1326 audit(1788819821.080:3971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.4.1537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 378.820219][ T30] audit: type=1326 audit(1788819821.120:3972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.4.1537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 378.820304][ T30] audit: type=1326 audit(1788819821.120:3973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.4.1537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 378.821178][ T30] audit: type=1326 audit(1788819821.130:3974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.4.1537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 378.824172][ T30] audit: type=1326 audit(1788819821.130:3975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.4.1537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 378.824217][ T30] audit: type=1326 audit(1788819821.130:3976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.4.1537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 378.826114][ T30] audit: type=1326 audit(1788819821.130:3977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.4.1537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 378.826158][ T30] audit: type=1326 audit(1788819821.130:3978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.4.1537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 378.827907][ T30] audit: type=1326 audit(1788819821.130:3979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.4.1537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 378.860995][ T30] audit: type=1326 audit(1788819821.160:3980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10409 comm="syz.4.1537" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 379.192347][T10413] fuse: Bad value for 'group_id' [ 379.192390][T10413] fuse: Bad value for 'group_id' [ 379.300598][ T9] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 379.474229][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 379.476980][ T9] usb 5-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 379.478016][ T9] usb 5-1: config index 0 descriptor too short (expected 6427, got 27) [ 379.478041][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.478060][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 379.479478][ T9] usb 5-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 379.479500][ T9] usb 5-1: Product: syz [ 379.479512][ T9] usb 5-1: Manufacturer: syz [ 379.493841][ T9] usb 5-1: config 0 descriptor?? [ 380.081726][ T25] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 380.170797][T10442] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1546'. [ 380.242827][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 380.257811][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.267403][ T25] usb 4-1: Product: syz [ 380.272106][ T25] usb 4-1: Manufacturer: syz [ 380.276937][ T25] usb 4-1: SerialNumber: syz [ 380.337731][ T990] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 380.562287][ T9] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 380.690419][ T9] usb 3-1: device descriptor read/64, error -71 [ 380.809068][ T25] usb 4-1: USB disconnect, device number 71 [ 380.876294][T10451] netlink: 8752 bytes leftover after parsing attributes in process `syz.0.1550'. [ 380.963060][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 381.090094][ T9] usb 3-1: device descriptor read/64, error -71 [ 381.200661][ T9] usb usb3-port1: attempt power cycle [ 381.295463][T10467] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1554'. [ 381.420686][ T990] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 381.420911][ T990] ath9k_htc: Failed to initialize the device [ 381.435795][ T25] usb 4-1: ath9k_htc: USB layer deinitialized [ 381.526104][T10473] FAULT_INJECTION: forcing a failure. [ 381.526104][T10473] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.539502][T10473] CPU: 1 UID: 0 PID: 10473 Comm: syz.3.1557 Tainted: G L syzkaller #0 PREEMPT(full) [ 381.539535][T10473] Tainted: [L]=SOFTLOCKUP [ 381.539543][T10473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.539555][T10473] Call Trace: [ 381.539564][T10473] [ 381.539572][T10473] dump_stack_lvl+0xe8/0x150 [ 381.539606][T10473] should_fail_ex+0x410/0x560 [ 381.539643][T10473] _copy_from_user+0x2d/0xb0 [ 381.539666][T10473] ___sys_sendmsg+0x1c6/0x360 [ 381.539830][T10473] ? __pfx____sys_sendmsg+0x10/0x10 [ 381.539849][T10473] ? __lock_acquire+0x747/0x2de0 [ 381.539913][T10473] __sys_sendmmsg+0x273/0x4d0 [ 381.539943][T10473] ? __pfx___sys_sendmmsg+0x10/0x10 [ 381.539992][T10473] ? ksys_write+0x1fc/0x270 [ 381.540021][T10473] ? __pfx_ksys_write+0x10/0x10 [ 381.540061][T10473] __x64_sys_sendmmsg+0xa0/0xc0 [ 381.540086][T10473] do_syscall_64+0x166/0x520 [ 381.540105][T10473] ? trace_irq_disable+0x3b/0x140 [ 381.540124][T10473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.540142][T10473] ? clear_bhb_loop+0x70/0xc0 [ 381.540165][T10473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.540184][T10473] RIP: 0033:0x7f93b679e159 [ 381.540202][T10473] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.540219][T10473] RSP: 002b:00007f93b75fd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 381.540240][T10473] RAX: ffffffffffffffda RBX: 00007f93b6a25fa0 RCX: 00007f93b679e159 [ 381.540255][T10473] RDX: 0000000000000318 RSI: 00002000000bd000 RDI: 0000000000000004 [ 381.540268][T10473] RBP: 00007f93b75fd090 R08: 0000000000000000 R09: 0000000000000000 [ 381.540280][T10473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 381.540292][T10473] R13: 00007f93b6a26038 R14: 00007f93b6a25fa0 R15: 00007f93b6b4fa48 [ 381.540324][T10473] [ 381.542496][ T5715] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 381.542638][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 381.562466][ T9] usb 3-1: device descriptor read/8, error -71 [ 381.713340][ T5715] usb 2-1: Using ep0 maxpacket: 8 [ 381.714837][ T5715] usb 2-1: New USB device found, idVendor=053c, idProduct=a4a1, bcdDevice= 0.40 [ 381.720689][ T5715] usb 2-1: config index 0 descriptor too short (expected 341, got 85) [ 381.720716][ T5715] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 381.720757][ T5715] usb 2-1: config 1 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 381.720785][ T5715] usb 2-1: config 1 interface 0 has no altsetting 0 [ 381.735176][ T5715] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.735204][ T5715] usb 2-1: Product: syz [ 381.735219][ T5715] usb 2-1: Manufacturer: syz [ 381.735234][ T5715] usb 2-1: SerialNumber: syz [ 381.816877][ T9] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 381.844808][ T9] usb 3-1: device descriptor read/8, error -71 [ 381.950547][ T9] usb usb3-port1: unable to enumerate USB device [ 382.264294][ T5748] usb 5-1: USB disconnect, device number 76 [ 382.410171][ T9] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 382.462618][T10485] FAULT_INJECTION: forcing a failure. [ 382.462618][T10485] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 382.476782][T10485] CPU: 1 UID: 0 PID: 10485 Comm: syz.4.1563 Tainted: G L syzkaller #0 PREEMPT(full) [ 382.476815][T10485] Tainted: [L]=SOFTLOCKUP [ 382.476822][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 382.476834][T10485] Call Trace: [ 382.476842][T10485] [ 382.476852][T10485] dump_stack_lvl+0xe8/0x150 [ 382.476886][T10485] should_fail_ex+0x410/0x560 [ 382.476924][T10485] prepare_alloc_pages+0x223/0x600 [ 382.476952][T10485] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 382.476978][T10485] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 382.477003][T10485] ? __pfx_policy_nodemask+0x10/0x10 [ 382.477027][T10485] ? try_to_migrate+0x33d/0x400 [ 382.477046][T10485] ? __pfx_try_to_migrate+0x10/0x10 [ 382.477067][T10485] alloc_pages_mpol+0x21e/0x390 [ 382.477096][T10485] folio_alloc_mpol_noprof+0x39/0x160 [ 382.477119][T10485] migrate_pages_batch+0xb1f/0x4f50 [ 382.477145][T10485] ? finish_task_switch+0x40e/0xc60 [ 382.477193][T10485] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 382.477223][T10485] ? __pfx_migrate_pages_batch+0x10/0x10 [ 382.477261][T10485] ? __pfx___schedule+0x10/0x10 [ 382.477366][T10485] ? __mpol_dup+0x79/0x330 [ 382.477391][T10485] ? stack_trace_save+0xa9/0x100 [ 382.477435][T10485] ? irqentry_exit+0x218/0x910 [ 382.477454][T10485] ? lockdep_hardirqs_on+0x7b/0x110 [ 382.477473][T10485] ? irqentry_exit+0x218/0x910 [ 382.477504][T10485] ? migrate_pages+0x1794/0x2920 [ 382.477533][T10485] migrate_pages+0x1b9f/0x2920 [ 382.477576][T10485] ? __pfx_alloc_migration_target_by_mpol+0x10/0x10 [ 382.477610][T10485] ? __pfx_migrate_pages+0x10/0x10 [ 382.477643][T10485] ? current_cpuset_is_being_rebound+0x1d/0x300 [ 382.477683][T10485] ? current_cpuset_is_being_rebound+0x1d/0x300 [ 382.477705][T10485] ? current_cpuset_is_being_rebound+0x1d/0x300 [ 382.477756][T10485] __se_sys_mbind+0xe82/0x10e0 [ 382.477789][T10485] ? __pfx___se_sys_mbind+0x10/0x10 [ 382.477824][T10485] ? fput+0xa0/0xd0 [ 382.477847][T10485] ? ksys_write+0x242/0x270 [ 382.477877][T10485] ? __pfx_ksys_write+0x10/0x10 [ 382.477910][T10485] ? __x64_sys_mbind+0x21/0xf0 [ 382.477933][T10485] do_syscall_64+0x166/0x520 [ 382.477953][T10485] ? trace_irq_disable+0x3b/0x140 [ 382.477973][T10485] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.477994][T10485] ? clear_bhb_loop+0x70/0xc0 [ 382.478019][T10485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.478039][T10485] RIP: 0033:0x7fd6dd59e159 [ 382.478059][T10485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.478077][T10485] RSP: 002b:00007fd6de477028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ed [ 382.478100][T10485] RAX: ffffffffffffffda RBX: 00007fd6dd825fa0 RCX: 00007fd6dd59e159 [ 382.478116][T10485] RDX: 0000000000000004 RSI: 0000000000800000 RDI: 0000200000001000 [ 382.478129][T10485] RBP: 00007fd6de477090 R08: 0000000000000000 R09: 0000000000000002 [ 382.478143][T10485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.478156][T10485] R13: 00007fd6dd826038 R14: 00007fd6dd825fa0 R15: 00007fd6dd94fa48 [ 382.478188][T10485] [ 382.560135][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 382.564643][ T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 382.615915][ T9] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 382.615950][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.615970][ T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 382.626185][ T9] usb 1-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 382.626212][ T9] usb 1-1: Product: syz [ 382.626226][ T9] usb 1-1: Manufacturer: syz [ 382.637852][ T9] usb 1-1: config 0 descriptor?? [ 383.358090][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 383.418073][T10502] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 383.840724][ T9] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 383.990401][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 383.991625][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 383.993381][ T9] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 383.993405][ T9] usb 3-1: config 0 has no interface number 0 [ 384.005946][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.005974][ T9] usb 3-1: Product: syz [ 384.005989][ T9] usb 3-1: Manufacturer: syz [ 384.006004][ T9] usb 3-1: SerialNumber: syz [ 384.027603][ T9] usb 3-1: config 0 descriptor?? [ 384.060966][ T9] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 384.061123][ T9] usb 3-1: selecting invalid altsetting 1 [ 384.061163][ T9] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 384.088976][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 384.094218][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 384.097508][ T9] usb 3-1: media controller created [ 384.149183][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 384.419055][ T5715] usb 2-1: No union descriptors [ 384.446145][ T5715] usb 2-1: USB disconnect, device number 69 [ 384.909252][ T30] kauditd_printk_skb: 262 callbacks suppressed [ 384.909321][ T30] audit: type=1326 audit(1788819827.210:4243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210839e159 code=0x7ffc0000 [ 384.909611][ T30] audit: type=1326 audit(1788819827.210:4244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210839e159 code=0x7ffc0000 [ 384.971689][ T30] audit: type=1326 audit(1788819827.280:4245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f210839e159 code=0x7ffc0000 [ 384.971758][ T30] audit: type=1326 audit(1788819827.280:4246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210839e159 code=0x7ffc0000 [ 384.971792][ T30] audit: type=1326 audit(1788819827.280:4247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210839e159 code=0x7ffc0000 [ 384.974090][ T30] audit: type=1326 audit(1788819827.280:4248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f210839e159 code=0x7ffc0000 [ 384.974659][ T30] audit: type=1326 audit(1788819827.280:4249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210839e159 code=0x7ffc0000 [ 384.975137][ T30] audit: type=1326 audit(1788819827.280:4250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f210839e159 code=0x7ffc0000 [ 384.975761][ T30] audit: type=1326 audit(1788819827.280:4251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210839e159 code=0x7ffc0000 [ 384.976725][ T30] audit: type=1326 audit(1788819827.280:4252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1577" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f210839e159 code=0x7ffc0000 [ 385.264300][ T9] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 385.264394][ T9] zl10353_read_register: readreg error (reg=127, ret==-110) [ 385.700690][ T25] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 385.760919][ T5748] usb 1-1: USB disconnect, device number 84 [ 385.827656][ T9] usb 3-1: USB disconnect, device number 74 [ 385.862746][ T25] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 385.875631][ T25] usb 4-1: config 0 has no interfaces? [ 385.884966][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.893563][ T25] usb 4-1: Product: syz [ 385.897886][ T25] usb 4-1: Manufacturer: syz [ 385.902705][ T25] usb 4-1: SerialNumber: syz [ 385.913092][ T25] usb 4-1: config 0 descriptor?? [ 385.962591][T10556] FAULT_INJECTION: forcing a failure. [ 385.962591][T10556] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 385.976088][T10556] CPU: 1 UID: 0 PID: 10556 Comm: syz.2.1588 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.976120][T10556] Tainted: [L]=SOFTLOCKUP [ 385.976139][T10556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 385.976151][T10556] Call Trace: [ 385.976160][T10556] [ 385.976170][T10556] dump_stack_lvl+0xe8/0x150 [ 385.976205][T10556] should_fail_ex+0x410/0x560 [ 385.976242][T10556] _copy_to_user+0x31/0xb0 [ 385.976268][T10556] simple_read_from_buffer+0xe1/0x170 [ 385.976300][T10556] proc_fail_nth_read+0x1bb/0x230 [ 385.976329][T10556] ? common_file_perm+0x20e/0x2b0 [ 385.976355][T10556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.976388][T10556] ? rw_verify_area+0x24a/0x4c0 [ 385.976419][T10556] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 385.976448][T10556] vfs_read+0x213/0xa80 [ 385.976475][T10556] ? trace_contention_end+0x3d/0x140 [ 385.976501][T10556] ? __mutex_lock+0x30b/0x1550 [ 385.976523][T10556] ? __pfx_vfs_read+0x10/0x10 [ 385.976553][T10556] ? __x64_sys_lseek+0x181/0x1e0 [ 385.976620][T10556] ksys_read+0x150/0x270 [ 385.976660][T10556] ? __pfx_ksys_read+0x10/0x10 [ 385.976702][T10556] do_syscall_64+0x166/0x520 [ 385.976719][T10556] ? trace_irq_disable+0x3b/0x140 [ 385.976736][T10556] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.976756][T10556] ? clear_bhb_loop+0x70/0xc0 [ 385.976778][T10556] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.976796][T10556] RIP: 0033:0x7f827d35e98e [ 385.976814][T10556] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 385.976831][T10556] RSP: 002b:00007f827e281fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 385.976850][T10556] RAX: ffffffffffffffda RBX: 00007f827e2826c0 RCX: 00007f827d35e98e [ 385.976863][T10556] RDX: 000000000000000f RSI: 00007f827e2820a0 RDI: 0000000000000004 [ 385.976874][T10556] RBP: 00007f827e282090 R08: 0000000000000000 R09: 0000000000000000 [ 385.976886][T10556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 385.976896][T10556] R13: 00007f827d626038 R14: 00007f827d625fa0 R15: 00007f827d74fa48 [ 385.976922][T10556] [ 386.287771][T10542] input: syz0 as /devices/virtual/input/input30 [ 386.662926][ T9] usb 4-1: USB disconnect, device number 72 [ 386.695219][T10571] bridge_slave_0: left allmulticast mode [ 386.695275][T10571] bridge_slave_0: left promiscuous mode [ 386.707178][T10571] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.739915][T10571] bridge_slave_1: left promiscuous mode [ 386.748431][T10571] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.776092][T10571] bond0: (slave bond_slave_0): Releasing backup interface [ 386.803271][T10571] bond0: (slave bond_slave_1): Releasing backup interface [ 386.828971][T10571] team0: Port device team_slave_0 removed [ 386.845708][T10571] team0: Port device team_slave_1 removed [ 386.856774][T10571] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 387.191085][T10607] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1598'. [ 387.355101][T10609] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1599'. [ 387.355132][T10609] openvswitch: netlink: Flow key attr not present in new flow. [ 387.450427][ T5748] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 387.610818][ T5748] usb 2-1: Using ep0 maxpacket: 8 [ 387.619363][ T5748] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 387.622439][ T5748] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 387.622467][ T5748] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.622486][ T5748] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.630592][ T5748] usb 2-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 387.630618][ T5748] usb 2-1: Product: syz [ 387.630632][ T5748] usb 2-1: Manufacturer: syz [ 387.648816][ T5748] usb 2-1: config 0 descriptor?? [ 387.812136][ T5748] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 387.971207][ T5748] usb 3-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00 [ 387.972352][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.972383][ T5748] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.972445][ T5748] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.994999][ T5748] usb 3-1: config 0 descriptor?? [ 388.102489][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1603'. [ 388.223411][T10625] FAULT_INJECTION: forcing a failure. [ 388.223411][T10625] name failslab, interval 1, probability 0, space 0, times 0 [ 388.223473][T10625] CPU: 0 UID: 0 PID: 10625 Comm: syz.0.1604 Tainted: G L syzkaller #0 PREEMPT(full) [ 388.223499][T10625] Tainted: [L]=SOFTLOCKUP [ 388.223506][T10625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 388.223516][T10625] Call Trace: [ 388.223522][T10625] [ 388.223530][T10625] dump_stack_lvl+0xe8/0x150 [ 388.223560][T10625] should_fail_ex+0x410/0x560 [ 388.223596][T10625] should_failslab+0xa8/0x100 [ 388.223620][T10625] ? inet_bind2_bucket_create+0x34/0x510 [ 388.223723][T10625] kmem_cache_alloc_noprof+0xa1/0x600 [ 388.223752][T10625] ? kmem_cache_alloc_noprof+0x31f/0x600 [ 388.223779][T10625] ? inet_bind_bucket_create+0x30/0x240 [ 388.223803][T10625] ? inet_bind2_bucket_create+0x34/0x510 [ 388.223831][T10625] inet_bind2_bucket_create+0x34/0x510 [ 388.223857][T10625] inet_csk_get_port+0xf58/0x1740 [ 388.223907][T10625] inet_csk_listen_start+0x17c/0x380 [ 388.223936][T10625] __inet_listen_sk+0x2d3/0x5c0 [ 388.224004][T10625] ? __pfx___inet_listen_sk+0x10/0x10 [ 388.224035][T10625] ? mptcp_listen+0x21d/0x600 [ 388.224132][T10625] ? __local_bh_enable_ip+0xd6/0x140 [ 388.224168][T10625] mptcp_listen+0x229/0x600 [ 388.224193][T10625] __x64_sys_listen+0x1c7/0x240 [ 388.224217][T10625] do_syscall_64+0x166/0x520 [ 388.224236][T10625] ? trace_irq_disable+0x3b/0x140 [ 388.224255][T10625] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.224275][T10625] ? clear_bhb_loop+0x70/0xc0 [ 388.224299][T10625] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.224318][T10625] RIP: 0033:0x7f440b99e159 [ 388.224337][T10625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 388.224354][T10625] RSP: 002b:00007f440c812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 388.224375][T10625] RAX: ffffffffffffffda RBX: 00007f440bc25fa0 RCX: 00007f440b99e159 [ 388.224389][T10625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 388.224401][T10625] RBP: 00007f440c812090 R08: 0000000000000000 R09: 0000000000000000 [ 388.224413][T10625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 388.224425][T10625] R13: 00007f440bc26038 R14: 00007f440bc25fa0 R15: 00007f440bd4fa48 [ 388.224464][T10625] [ 388.494604][ T5748] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0 [ 388.494653][ T5748] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0 [ 388.494697][ T5748] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0 [ 388.494721][ T5748] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0 [ 388.494747][ T5748] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0 [ 388.494774][ T5748] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0 [ 388.494802][ T5748] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0 [ 388.494827][ T5748] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0 [ 388.494852][ T5748] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0 [ 388.494879][ T5748] asus 0003:0B05:1ABE.0029: unknown main item tag 0x0 [ 388.575065][ T5748] asus 0003:0B05:1ABE.0029: hidraw0: USB HID v7f.fd Device [HID 0b05:1abe] on usb-dummy_hcd.2-1/input0 [ 388.990322][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 389.017607][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 389.868453][ T5748] usb 3-1: USB disconnect, device number 75 [ 390.132274][ T9] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 390.184707][T10660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1614'. [ 390.194877][T10660] FAULT_INJECTION: forcing a failure. [ 390.194877][T10660] name failslab, interval 1, probability 0, space 0, times 0 [ 390.209350][T10660] CPU: 1 UID: 0 PID: 10660 Comm: syz.0.1614 Tainted: G L syzkaller #0 PREEMPT(full) [ 390.209383][T10660] Tainted: [L]=SOFTLOCKUP [ 390.209391][T10660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.209404][T10660] Call Trace: [ 390.209413][T10660] [ 390.209422][T10660] dump_stack_lvl+0xe8/0x150 [ 390.209459][T10660] should_fail_ex+0x410/0x560 [ 390.209497][T10660] should_failslab+0xa8/0x100 [ 390.209521][T10660] ? __kernfs_new_node+0xe6/0x980 [ 390.209582][T10660] kmem_cache_alloc_noprof+0xa1/0x600 [ 390.209617][T10660] ? kstrdup+0x81/0x100 [ 390.209655][T10660] ? __kernfs_new_node+0xe6/0x980 [ 390.209683][T10660] __kernfs_new_node+0xe6/0x980 [ 390.209713][T10660] ? __pfx___kernfs_new_node+0x10/0x10 [ 390.209734][T10660] ? kernfs_root+0x1c/0x230 [ 390.209759][T10660] ? kernfs_root+0x1c/0x230 [ 390.209778][T10660] ? kernfs_root+0x1c/0x230 [ 390.209794][T10660] ? kernfs_root+0x1c/0x230 [ 390.209818][T10660] kernfs_new_node+0xea/0x140 [ 390.209843][T10660] kernfs_create_link+0xa7/0x200 [ 390.209873][T10660] sysfs_do_create_link_sd+0x83/0x110 [ 390.209904][T10660] device_add_class_symlinks+0x1cf/0x240 [ 390.210030][T10660] device_add+0x467/0xb80 [ 390.210058][T10660] netdev_register_kobject+0x197/0x350 [ 390.210163][T10660] register_netdevice+0x1433/0x1eb0 [ 390.210260][T10660] ? __pfx_register_netdevice+0x10/0x10 [ 390.210287][T10660] ? validate_linkmsg+0x765/0x950 [ 390.210371][T10660] ? rtnl_create_link+0xa04/0xd70 [ 390.210404][T10660] rtnl_newlink_create+0x314/0x7b0 [ 390.210436][T10660] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 390.210462][T10660] ? __pfx___mutex_lock+0x10/0x10 [ 390.210494][T10660] ? ns_capable+0x89/0xe0 [ 390.210525][T10660] rtnl_newlink+0x166d/0x1c30 [ 390.210562][T10660] ? __pfx_rtnl_newlink+0x10/0x10 [ 390.210582][T10660] ? do_syscall_64+0x166/0x520 [ 390.210600][T10660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.210663][T10660] ? kasan_quarantine_put+0xbb/0x1f0 [ 390.210684][T10660] ? lockdep_hardirqs_on+0x7b/0x110 [ 390.210708][T10660] ? nlmon_xmit+0xb0/0x100 [ 390.210769][T10660] ? kmem_cache_free+0x182/0x650 [ 390.210801][T10660] ? __lock_acquire+0x747/0x2de0 [ 390.210832][T10660] ? __local_bh_enable_ip+0xd6/0x140 [ 390.210859][T10660] ? lockdep_hardirqs_on+0x7b/0x110 [ 390.210877][T10660] ? __dev_queue_xmit+0x29b/0x3820 [ 390.210927][T10660] ? __local_bh_enable_ip+0xd6/0x140 [ 390.210951][T10660] ? __dev_queue_xmit+0x29b/0x3820 [ 390.210984][T10660] ? lock_acquire+0x115/0x350 [ 390.211019][T10660] ? __pfx_rtnl_newlink+0x10/0x10 [ 390.211039][T10660] rtnetlink_rcv_msg+0x802/0xc00 [ 390.211065][T10660] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 390.211085][T10660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.211105][T10660] ? ref_tracker_free+0x689/0x830 [ 390.211130][T10660] ? __pfx_ref_tracker_free+0x10/0x10 [ 390.211162][T10660] netlink_rcv_skb+0x226/0x4a0 [ 390.211241][T10660] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 390.211264][T10660] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 390.211304][T10660] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.211330][T10660] ? netlink_deliver_tap+0x2e/0x1b0 [ 390.211361][T10660] netlink_unicast+0x7bd/0x940 [ 390.211396][T10660] netlink_sendmsg+0x813/0xb40 [ 390.211434][T10660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.211468][T10660] ? apparmor_socket_sendmsg+0x98/0x360 [ 390.211492][T10660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 390.211517][T10660] sock_sendmsg_nosec+0x13a/0x180 [ 390.211547][T10660] ____sys_sendmsg+0x54e/0x850 [ 390.211574][T10660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 390.211604][T10660] ? import_iovec+0x73/0xa0 [ 390.211630][T10660] ___sys_sendmsg+0x2a5/0x360 [ 390.211660][T10660] ? __lock_acquire+0x747/0x2de0 [ 390.211685][T10660] ? __pfx____sys_sendmsg+0x10/0x10 [ 390.211744][T10660] ? __fget_files+0x2a/0x420 [ 390.211770][T10660] ? __fget_files+0x3a2/0x420 [ 390.211808][T10660] __x64_sys_sendmsg+0x1b1/0x290 [ 390.211835][T10660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 390.211881][T10660] do_syscall_64+0x166/0x520 [ 390.211900][T10660] ? trace_irq_disable+0x3b/0x140 [ 390.211920][T10660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.211941][T10660] ? clear_bhb_loop+0x70/0xc0 [ 390.211966][T10660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.211986][T10660] RIP: 0033:0x7f440b99e159 [ 390.212007][T10660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.212025][T10660] RSP: 002b:00007f440c812028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 390.212047][T10660] RAX: ffffffffffffffda RBX: 00007f440bc25fa0 RCX: 00007f440b99e159 [ 390.212062][T10660] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 390.212075][T10660] RBP: 00007f440c812090 R08: 0000000000000000 R09: 0000000000000000 [ 390.212089][T10660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.212102][T10660] R13: 00007f440bc26038 R14: 00007f440bc25fa0 R15: 00007f440bd4fa48 [ 390.212134][T10660] [ 390.290895][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 390.294196][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.294222][ T9] usb 4-1: Product: syz [ 390.294237][ T9] usb 4-1: Manufacturer: syz [ 390.294252][ T9] usb 4-1: SerialNumber: syz [ 390.667387][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 390.667442][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 390.667462][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 390.716759][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 390.780322][ T9] usb 4-1: USB disconnect, device number 73 [ 391.012221][ T30] kauditd_printk_skb: 448 callbacks suppressed [ 391.012271][ T30] audit: type=1326 audit(1788819833.320:4701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.4.1617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 391.040580][ T5748] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 391.056501][ T30] audit: type=1326 audit(1788819833.360:4702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.4.1617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 391.081606][ T4948] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 391.092338][ T30] audit: type=1326 audit(1788819833.400:4703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.4.1617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 391.117919][ T30] audit: type=1326 audit(1788819833.420:4704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.4.1617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 391.117992][ T30] audit: type=1326 audit(1788819833.420:4705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.4.1617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 391.142883][ T30] audit: type=1326 audit(1788819833.440:4706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.4.1617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 391.142942][ T30] audit: type=1326 audit(1788819833.440:4707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.4.1617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 391.142981][ T30] audit: type=1326 audit(1788819833.440:4708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.4.1617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 391.143015][ T30] audit: type=1326 audit(1788819833.440:4709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.4.1617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 391.143062][ T30] audit: type=1326 audit(1788819833.440:4710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10668 comm="syz.4.1617" exe="/root/ci-upstream-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6dd59e159 code=0x7ffc0000 [ 391.171396][ T9] usb 2-1: USB disconnect, device number 70 [ 391.230208][ T5748] usb 3-1: unable to get BOS descriptor or descriptor too short [ 391.230260][ T5748] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 391.235706][ T5748] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.235740][ T5748] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.241622][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.241651][ T5748] usb 3-1: Product: syz [ 391.241666][ T5748] usb 3-1: Manufacturer: syz [ 391.241680][ T5748] usb 3-1: SerialNumber: syz [ 391.285626][ T5748] usb 3-1: selecting invalid altsetting 1 [ 391.296054][ T5748] usb 3-1: unit 6 not found! [ 391.339447][ T4948] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 391.362784][ T4948] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 391.362818][ T4948] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 391.362857][ T4948] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 391.418830][ T4948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.427646][ T4948] usb 1-1: Product: syz [ 391.431993][ T4948] usb 1-1: Manufacturer: syz [ 391.432015][ T4948] usb 1-1: SerialNumber: syz [ 391.455061][T10667] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 391.476993][ T5748] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 391.644908][T10676] syzkaller0: entered promiscuous mode [ 391.644962][T10676] syzkaller0: entered allmulticast mode [ 391.655287][ T5748] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 391.675514][T10667] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 391.746926][ T5618] udevd[5618]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.765162][T10684] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 392.381621][ T5748] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 392.559619][ T5748] usb 2-1: unable to get BOS descriptor or descriptor too short [ 392.561431][ T5748] usb 2-1: not running at top speed; connect to a high speed hub [ 392.561464][ T5748] usb 2-1: New USB device found, idVendor=0421, idProduct=df51, bcdDevice=d7.eb [ 392.562608][ T5748] usb 2-1: config 13 has an invalid interface number: 102 but max is 0 [ 392.562659][ T5748] usb 2-1: config 13 has no interface number 0 [ 392.564850][ T5748] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.564873][ T5748] usb 2-1: Product: syz [ 392.564887][ T5748] usb 2-1: Manufacturer: syz [ 392.564902][ T5748] usb 2-1: SerialNumber: syz [ 392.677463][ T4948] cdc_ncm 1-1:1.0: failed to get mac address [ 392.697018][ T4948] cdc_ncm 1-1:1.0: bind() failure [ 392.697800][ T9] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 392.725653][ T4948] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 392.740486][ T4948] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 392.752715][ T4948] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 392.776534][ T4948] usb 1-1: USB disconnect, device number 85 [ 392.802926][T10692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.814760][T10692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.852839][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 392.864524][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=c3.d4 [ 392.876323][ T9] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 392.876373][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.876414][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.902052][ T9] usb 4-1: New USB device strings: Mfr=78, Product=1, SerialNumber=0 [ 392.902081][ T9] usb 4-1: Product: syz [ 392.902095][ T9] usb 4-1: Manufacturer: syz [ 392.916866][ T9] usb 4-1: config 0 descriptor?? [ 392.923718][ T25] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 393.083043][ T25] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 393.098520][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.098565][ T25] usb 5-1: Product: syz [ 393.098597][ T25] usb 5-1: Manufacturer: syz [ 393.098615][ T25] usb 5-1: SerialNumber: syz [ 393.383264][ T25] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 393.383370][ T25] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 393.383410][ T25] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 393.423538][ T25] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 393.444746][ T25] usb 5-1: USB disconnect, device number 77 [ 393.528632][T10713] syzkaller0: entered promiscuous mode [ 393.528659][T10713] syzkaller0: entered allmulticast mode [ 393.570438][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1632'. [ 393.668785][ T5748] cdc_phonet 2-1:13.102: probe with driver cdc_phonet failed with error -22 [ 393.678907][ T5748] usb 2-1: USB disconnect, device number 71 [ 393.696326][ T5717] usb 3-1: USB disconnect, device number 76 [ 393.786473][T10716] FAULT_INJECTION: forcing a failure. [ 393.786473][T10716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.801647][T10716] CPU: 1 UID: 0 PID: 10716 Comm: syz.2.1634 Tainted: G L syzkaller #0 PREEMPT(full) [ 393.801679][T10716] Tainted: [L]=SOFTLOCKUP [ 393.801687][T10716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 393.801698][T10716] Call Trace: [ 393.801707][T10716] [ 393.801715][T10716] dump_stack_lvl+0xe8/0x150 [ 393.801749][T10716] should_fail_ex+0x410/0x560 [ 393.801796][T10716] _copy_from_user+0x2d/0xb0 [ 393.801824][T10716] do_replace+0x11a/0x470 [ 393.801982][T10716] ? __pfx_do_replace+0x10/0x10 [ 393.802010][T10716] ? bpf_lsm_capable+0x9/0x20 [ 393.802028][T10716] ? security_capable+0x7e/0x2c0 [ 393.802058][T10716] do_ebt_set_ctl+0x2fb/0x1020 [ 393.802081][T10716] ? __lock_acquire+0x747/0x2de0 [ 393.802102][T10716] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 393.802166][T10716] ? __lock_acquire+0x747/0x2de0 [ 393.802198][T10716] ? __mutex_trylock_common+0x15f/0x270 [ 393.802223][T10716] ? __pfx___mutex_trylock_common+0x10/0x10 [ 393.802249][T10716] ? rcu_is_watching+0x16/0xb0 [ 393.802272][T10716] ? trace_contention_end+0x3d/0x140 [ 393.802306][T10716] ? nf_setsockopt+0x221/0x290 [ 393.802373][T10716] ? __mutex_unlock_slowpath+0x731/0x900 [ 393.802402][T10716] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 393.802424][T10716] ? __pfx___mutex_lock+0x10/0x10 [ 393.802455][T10716] nf_setsockopt+0x26f/0x290 [ 393.802479][T10716] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 393.802558][T10716] smc_setsockopt+0x232/0xb00 [ 393.802640][T10716] ? __pfx_smc_setsockopt+0x10/0x10 [ 393.802669][T10716] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 393.802693][T10716] ? __pfx_smc_setsockopt+0x10/0x10 [ 393.802721][T10716] do_sock_setsockopt+0x17c/0x1b0 [ 393.802745][T10716] __x64_sys_setsockopt+0x13d/0x1b0 [ 393.802782][T10716] do_syscall_64+0x166/0x520 [ 393.802801][T10716] ? trace_irq_disable+0x3b/0x140 [ 393.802820][T10716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.802840][T10716] ? clear_bhb_loop+0x70/0xc0 [ 393.802864][T10716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.802882][T10716] RIP: 0033:0x7f827d39e159 [ 393.802900][T10716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.802918][T10716] RSP: 002b:00007f827e282028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 393.802941][T10716] RAX: ffffffffffffffda RBX: 00007f827d625fa0 RCX: 00007f827d39e159 [ 393.802957][T10716] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 393.802968][T10716] RBP: 00007f827e282090 R08: 0000000000000108 R09: 0000000000000000 [ 393.802981][T10716] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000001 [ 393.802994][T10716] R13: 00007f827d626038 R14: 00007f827d625fa0 R15: 00007f827d74fa48 [ 393.803026][T10716] [ 394.130479][ T5717] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 394.172499][T10726] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1636'. [ 394.281527][ T5717] usb 1-1: Using ep0 maxpacket: 8 [ 394.292141][ T5717] usb 1-1: New USB device found, idVendor=1b80, idProduct=e309, bcdDevice=1f.40 [ 394.299686][ T5717] usb 1-1: config 1 has an invalid interface number: 167 but max is 0 [ 394.299715][ T5717] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 394.299741][ T5717] usb 1-1: config 1 has no interface number 0 [ 394.299781][ T5717] usb 1-1: config 1 interface 167 altsetting 167 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 394.299807][ T5717] usb 1-1: config 1 interface 167 altsetting 167 endpoint 0x8A has invalid wMaxPacketSize 0 [ 394.299829][ T5717] usb 1-1: config 1 interface 167 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 394.299855][ T5717] usb 1-1: config 1 interface 167 has no altsetting 0 [ 394.311999][ T5717] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.312026][ T5717] usb 1-1: Product: syz [ 394.312041][ T5717] usb 1-1: Manufacturer: syz [ 394.312056][ T5717] usb 1-1: SerialNumber: syz [ 394.448178][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1638'. [ 394.463239][T10729] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1637'. [ 394.702463][ T5717] em28xx 1-1:1.167: New device syz syz @ 480 Mbps (1b80:e309, interface 167, class 167) [ 394.702554][ T5717] em28xx 1-1:1.167: Video interface 167 found: isoc [ 394.702571][ T5717] em28xx 1-1:1.167: DVB interface 167 found: [ 394.841159][ T5717] em28xx 1-1:1.167: unknown em28xx chip ID (0) [ 394.957176][ T5717] em28xx 1-1:1.167: reading from i2c device at 0xa0 failed (error=-5) [ 394.957308][ T5717] em28xx 1-1:1.167: board has no eeprom [ 395.040184][ T5717] em28xx 1-1:1.167: Identified as Easy Cap Capture DC-60 (card=64) [ 395.040310][ T5717] em28xx 1-1:1.167: analog set to isoc mode. [ 395.040345][ T5717] em28xx 1-1:1.167: dvb set to bulk mode. [ 395.053809][ T5748] em28xx 1-1:1.167: Registering V4L2 extension [ 395.080913][ T5717] usb 1-1: USB disconnect, device number 86 [ 395.084156][ T5717] em28xx 1-1:1.167: Disconnecting em28xx [ 395.201259][T10744] syzkaller0: entered promiscuous mode [ 395.201305][T10744] syzkaller0: entered allmulticast mode [ 395.203198][ T5748] em28xx 1-1:1.167: Config register raw data: 0xffffffed [ 395.203221][ T5748] em28xx 1-1:1.167: AC97 chip type couldn't be determined [ 395.203234][ T5748] em28xx 1-1:1.167: No AC97 audio processor [ 395.209707][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1643'. [ 395.262706][ T5748] usb 1-1: Decoder not found [ 395.274439][ T5748] em28xx 1-1:1.167: failed to create media graph [ 395.274527][ T5748] em28xx 1-1:1.167: V4L2 device video103 deregistered [ 395.333246][ T5748] INFO: trying to register non-static key. [ 395.339419][ T5748] The code is fine but needs lockdep annotation, or maybe [ 395.346585][ T5748] you didn't initialize this object before use? [ 395.352818][ T5748] turning off the locking correctness validator. [ 395.359267][ T5748] CPU: 0 UID: 0 PID: 5748 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.370332][ T5748] Tainted: [L]=SOFTLOCKUP [ 395.374821][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.384884][ T5748] Workqueue: events request_module_async [ 395.390637][ T5748] Call Trace: [ 395.393914][ T5748] [ 395.396841][ T5748] dump_stack_lvl+0xe8/0x150 [ 395.401433][ T5748] assign_lock_key+0x133/0x150 [ 395.406369][ T5748] register_lock_class+0xcc/0x2e0 [ 395.411408][ T5748] __lock_acquire+0x10c/0x2de0 [ 395.416212][ T5748] ? __mutex_trylock_common+0x15f/0x270 [ 395.421749][ T5748] ? __pfx___mutex_trylock_common+0x10/0x10 [ 395.427637][ T5748] lock_acquire+0x115/0x350 [ 395.432135][ T5748] ? __wake_up_common_lock+0x30/0x1f0 [ 395.437604][ T5748] ? rcu_is_watching+0x16/0xb0 [ 395.442406][ T5748] _raw_spin_lock_irqsave+0x40/0x60 [ 395.447623][ T5748] ? __wake_up_common_lock+0x30/0x1f0 [ 395.453044][ T5748] __wake_up_common_lock+0x30/0x1f0 [ 395.458271][ T5748] ? __pfx___mutex_lock+0x10/0x10 [ 395.463407][ T5748] __vb2_queue_cancel+0x2de/0xde0 [ 395.468587][ T5748] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 395.473979][ T5748] vb2_core_queue_release+0x2f/0x150 [ 395.479276][ T5748] vb2_video_unregister_device+0x15b/0x200 [ 395.485170][ T5748] em28xx_v4l2_init+0x1c89/0x3150 [ 395.490220][ T5748] em28xx_init_extension+0x120/0x1d0 [ 395.495505][ T5748] ? process_scheduled_works+0x97a/0x1630 [ 395.501227][ T5748] process_scheduled_works+0xc3d/0x1630 [ 395.506812][ T5748] ? __pfx_process_scheduled_works+0x10/0x10 [ 395.513150][ T5748] ? assign_work+0x3cf/0x5d0 [ 395.517853][ T5748] worker_thread+0xa47/0xfb0 [ 395.522477][ T5748] ? __kthread_parkme+0x71/0x1f0 [ 395.527443][ T5748] kthread+0x38b/0x480 [ 395.531512][ T5748] ? __pfx_worker_thread+0x10/0x10 [ 395.536979][ T5748] ? __pfx_kthread+0x10/0x10 [ 395.541566][ T5748] ret_from_fork+0x514/0xb70 [ 395.546149][ T5748] ? __pfx_ret_from_fork+0x10/0x10 [ 395.551290][ T5748] ? __switch_to+0xc89/0x1420 [ 395.555990][ T5748] ? __pfx_kthread+0x10/0x10 [ 395.560683][ T5748] ret_from_fork_asm+0x1a/0x30 [ 395.565453][ T5748] [ 395.568518][ T5748] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 395.580476][ T5748] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 395.589052][ T5748] CPU: 0 UID: 0 PID: 5748 Comm: kworker/0:7 Tainted: G L syzkaller #0 PREEMPT(full) [ 395.600000][ T5748] Tainted: [L]=SOFTLOCKUP [ 395.604311][ T5748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 395.614365][ T5748] Workqueue: events request_module_async [ 395.620011][ T5748] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 395.625993][ T5748] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 4c a1 97 00 48 ba 00 00 00 00 00 fc [ 395.645600][ T5748] RSP: 0018:ffffc90004267880 EFLAGS: 00010046 [ 395.651670][ T5748] RAX: 0000000000000000 RBX: ffff88803639d740 RCX: 0000000000000001 [ 395.659630][ T5748] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900042677e0 [ 395.667596][ T5748] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 395.675561][ T5748] R10: dffffc0000000000 R11: fffff5200084cefc R12: 0000000000000000 [ 395.683546][ T5748] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88803639d7d0 [ 395.691521][ T5748] FS: 0000000000000000(0000) GS:ffff888124cd6000(0000) knlGS:0000000000000000 [ 395.700483][ T5748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.707078][ T5748] CR2: 0000001b3411eff8 CR3: 0000000075276000 CR4: 00000000003526f0 [ 395.715138][ T5748] Call Trace: [ 395.718412][ T5748] [ 395.721337][ T5748] __vb2_queue_cancel+0x2de/0xde0 [ 395.726376][ T5748] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 395.731750][ T5748] vb2_core_queue_release+0x2f/0x150 [ 395.737052][ T5748] vb2_video_unregister_device+0x15b/0x200 [ 395.742950][ T5748] em28xx_v4l2_init+0x1c89/0x3150 [ 395.747980][ T5748] em28xx_init_extension+0x120/0x1d0 [ 395.753267][ T5748] ? process_scheduled_works+0x97a/0x1630 [ 395.758989][ T5748] process_scheduled_works+0xc3d/0x1630 [ 395.764544][ T5748] ? __pfx_process_scheduled_works+0x10/0x10 [ 395.770614][ T5748] ? assign_work+0x3cf/0x5d0 [ 395.775217][ T5748] worker_thread+0xa47/0xfb0 [ 395.779813][ T5748] ? __kthread_parkme+0x71/0x1f0 [ 395.784761][ T5748] kthread+0x38b/0x480 [ 395.788827][ T5748] ? __pfx_worker_thread+0x10/0x10 [ 395.793935][ T5748] ? __pfx_kthread+0x10/0x10 [ 395.798521][ T5748] ret_from_fork+0x514/0xb70 [ 395.803106][ T5748] ? __pfx_ret_from_fork+0x10/0x10 [ 395.808220][ T5748] ? __switch_to+0xc89/0x1420 [ 395.812901][ T5748] ? __pfx_kthread+0x10/0x10 [ 395.817773][ T5748] ret_from_fork_asm+0x1a/0x30 [ 395.822561][ T5748] [ 395.825582][ T5748] Modules linked in: [ 395.829508][ T5748] ---[ end trace 0000000000000000 ]--- [ 395.834971][ T5748] RIP: 0010:__wake_up_common_lock+0xd6/0x1f0 [ 395.835004][ T5748] Code: 0f 84 d4 00 00 00 44 8b 64 24 04 eb 13 48 ba 00 00 00 00 00 fc ff df 4c 39 fd 0f 84 ba 00 00 00 49 89 ee 48 89 e8 48 c1 e8 03 <80> 3c 10 00 74 12 4c 89 f7 e8 4c a1 97 00 48 ba 00 00 00 00 00 fc [ 395.835019][ T5748] RSP: 0018:ffffc90004267880 EFLAGS: 00010046 [ 395.835036][ T5748] RAX: 0000000000000000 RBX: ffff88803639d740 RCX: 0000000000000001 [ 395.835047][ T5748] RDX: dffffc0000000000 RSI: 0000000000000004 RDI: ffffc900042677e0 [ 395.835059][ T5748] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 395.835070][ T5748] R10: dffffc0000000000 R11: fffff5200084cefc R12: 0000000000000000 [ 395.835082][ T5748] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff88803639d7d0 [ 395.835094][ T5748] FS: 0000000000000000(0000) GS:ffff888124cd6000(0000) knlGS:0000000000000000 [ 395.835107][ T5748] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.835119][ T5748] CR2: 0000001b3411eff8 CR3: 0000000075276000 CR4: 00000000003526f0 [ 395.835154][ T5748] Kernel panic - not syncing: Fatal exception [ 395.937040][ T5748] Kernel Offset: disabled [ 395.941369][ T5748] Rebooting in 86400 seconds..