last executing test programs: 7.712356807s ago: executing program 2 (id=438): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) sched_setaffinity(0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0/../file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$binfmt_register(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000200)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x8, 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, '/proc/sys/fs/binfmt_misc/register\x00', 0x3a, './file0/../file0', 0x3a, [0x43]}, 0x75) r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000bc0), 0x2, 0x0) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000004c0)={[0x8aba, 0x100d, 0x4, 0x804, 0x7ffd, 0xf, 0x120000, 0x9, 0x1, 0x5, 0x8000000000000000, 0x1, 0x1, 0xfe, 0x6, 0x1], 0x4000, 0x141200}) ioctl$KVM_CAP_HYPERV_SYNIC2(r7, 0x4068aea3, &(0x7f0000000280)) ioctl$VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000000)={0x800, 0xa, 0x4, 0x0, 0x18}) openat$dsp(0xffffff9c, &(0x7f0000000ac0), 0x101000, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(0xffffffffffffffff, 0xc0044dff, &(0x7f0000000b00)=0x88b) ioctl$VIDIOC_QBUF(r5, 0xc058565d, &(0x7f0000000140)=@multiplanar_userptr={0x0, 0x8, 0x4, 0x0, 0x9, {0x0, 0x2710}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, "dd4291c0"}, 0x0, 0x2, {0x0}}) getpid() r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r9}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000003e00010000000800000000000100000004000000320001800c00108004000b800400e3000c0002002000000000000000"], 0x34}, 0x1, 0x0, 0x0, 0x4811}, 0x4000094) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYRES16=r10], &(0x7f00000001c0)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x41000, 0x5, '\x00', 0x0, @fallback=0x1e}, 0x94) 7.393150645s ago: executing program 0 (id=441): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xa000, 0x40}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c846}, 0x20048004) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000300f8fffcdbdf251c0000002000018008000100", @ANYRES32=r3, @ANYBLOB="140002"], 0x34}, 0x1, 0x0, 0x0, 0xc010}, 0x40000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0x1}, {0x6}]}) syz_usb_connect(0x3, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009bbd8b08e80430ffd1a601220301090222000100000000090400000129fddd000905e2ff"], 0x0) 5.685286312s ago: executing program 0 (id=451): r0 = socket$inet6(0xa, 0x3, 0x88) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x1, 0x12, 0xffffffff}]}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$lan78xx(r2, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) r3 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r3, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x11, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0xffa0}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x50, 0x29, 0x36}}, @ip_tos_u8={{0x38, 0x29, 0x3b}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @loopback}}}], 0x50}, 0x0) 5.487761675s ago: executing program 1 (id=453): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='timerslack_ns\x00') pread64(r1, 0x0, 0x0, 0x1c0000000) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$cont(0x21, r2, 0x8, 0xffff) r3 = dup(r0) write$cgroup_subtree(r3, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) write$binfmt_aout(r3, 0x0, 0xffffffdb) socket$pppoe(0x18, 0x1, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) lsm_get_self_attr(0x66, 0x0, 0xffffffffffffffff, 0xd1679f4207099f46) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) madvise(&(0x7f00006c0000/0x4000)=nil, 0x4000, 0x15) pipe(0x0) socket$inet_udp(0x2, 0x2, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 4.957140045s ago: executing program 0 (id=455): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000280)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xffffffffffffffff}) msgsnd(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="01"], 0x8, 0x0) msgctl$MSG_STAT(r1, 0xb, &(0x7f0000000180)=""/115) msgsnd(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="00001c"], 0x8, 0x0) msgsnd(r1, &(0x7f0000000940)=ANY=[@ANYBLOB="02"], 0x9e, 0x0) msgctl$IPC_RMID(r1, 0x0) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000, &(0x7f00000000c0)=0x9, 0x9, 0x4) r2 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="ad00"/16, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) read$alg(r3, &(0x7f0000000080)=""/54, 0x36) recvmmsg(r2, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000f28c0)={{0x0, 0xa, 0x8, 0x7fffffffffffffff, 0x2, 0x7, 0xd022, 0x0, 0x5, 0x8000, 0x6, 0x7fffffffffffffff, 0x800, 0x6}}) 4.908856751s ago: executing program 2 (id=458): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x2f) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000010902240001000040000904000000092105000001220500090581"], 0x0) syz_usb_control_io$hid(r2, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00222200000096231306e53f070d0000002a940183"], 0x0}, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x39, 0xa, 0x0, "0506ddff0600000000000000000000ea0000001000", 0x50565559}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0xffff, 0x0, 0xa}, {}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0x34ff, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 4.189004917s ago: executing program 0 (id=460): syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000208205a300400001020301090260000301021004091ac93bf8010100000a240107000a000201020904010000010200000904010101010200000905010908"], &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) futex_waitv(&(0x7f0000002140)=[{0x40, 0x0, 0x82}, {0x6, 0x0, 0x8ab2f6c706f9ba89}, {0x5, 0x0}, {0x8, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x395, 0x0, 0x2}, {0x100000001, 0x0, 0x2}, {0x81, 0x0, 0x82}, {0x185, 0x0, 0x2}, {0xfe, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x40, 0x0, 0x82}, {0xc4, 0x0, 0x82}, {0x80000000, 0x0}, {0x36c90000, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x8638, 0x0, 0x2}, {0x4, 0x0, 0x82}, {0x7, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x80}, {0xd, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x3, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x16, 0x0, 0x82}, {0x2, 0x0, 0x2}, {0x1, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x101, 0x0}, {0x9, 0x0, 0x2}, {0x5, 0x0, 0x2}, {0x8000000000000000, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x401, 0x0, 0x2}, {0x5d, 0x0, 0x82}, {0x100000001, 0x0}, {0x20000000000, 0x0, 0x82}, {0x5, 0x0, 0x82}, {0x9, 0x0, 0x82}, {0x8, 0x0, 0x82}, {0x2, 0x0, 0x82}, {0x4, 0x0, 0x82}, {0xfffffffffffff26c, 0x0, 0x2}, {0x8, 0x0, 0x2}, {0x5, 0x0, 0x82}, {0x1, 0x0, 0x2}, {0x3, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x7, 0x0, 0x82}, {0x1, 0x0, 0x82}, {0xfff, 0x0, 0x82}], 0x36, 0x0, 0x0, 0x1) sendmmsg$unix(r1, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x7fffffff, 0x3, 0x665}}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a03000000000000000000010000000900010073797a30000000ba3c000000090a010400000000000000000100000508000a40000000000900020073797a32000000000900010073797a30000000000800054000000010440000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30000000001800038014000080100001800c0002"], 0xc8}, 0x1, 0x0, 0x0, 0x8001}, 0x20040080) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'pimreg\x00'}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="8a67876ae1c24e5f9cccba8c424a98f38d99932a42a3", 0x16, 0x884, &(0x7f0000000080)={0xa, 0x4e21, 0x24, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfd33}, 0x1c) 4.135380144s ago: executing program 1 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400ed001000010029bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="1380000023b201002400128009000100626f6e64000000001400028008000700810000000800030001"], 0x44}, 0x1, 0xf3ffffff, 0x0, 0x404c8e0}, 0xc094) 3.92581524s ago: executing program 1 (id=463): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000040)=0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000004}) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000480)={0x0, 0x4000, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x8000) 3.895309494s ago: executing program 1 (id=464): io_setup(0x26, &(0x7f0000000240)=0x0) r1 = socket(0x10, 0x803, 0x0) io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x10000}]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file1', [], 0xa, "0a345f27458881110800033c3eedafebd12f8ebb4f0803"}, 0x22) syz_usb_connect$cdc_ncm(0x5, 0x125, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x2, 0x1, 0x81, 0x20, 0xed, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "70e22e"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3ff, 0xffff, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x36}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0xfffb, 0x32, 0x5, 0xddd1, 0x5}, @mdlm_detail={0x84, 0x24, 0x13, 0xd1, "76ec5809b73acf5a09515bddb1e1bbe6b3cd15865073c801649b68ae7f9f6310c3f7af499981a0355eafbb31f15b0aeef2e1343bb2cd85a76abd695c527b4bb6c302cc3cca344443136f142dd6694918c3239a8fbf98db904ba97aa67d93c7759c7cf02cbc0bc2a5acb24e155ce3ede9c23a323b5d21186a5f02f2f64a8f25fd"}, @mdlm_detail={0xd, 0x24, 0x13, 0x80, "3231de56999065e68e"}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x3, 0xffff}, @country_functional={0xa, 0x24, 0x7, 0xe, 0x5, [0x4, 0x81]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xdf}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x2, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x59, 0x7}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0x3, 0x0, 0x20, 0x9}, 0x12c, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2, [{0xf5, &(0x7f0000000300)=@string={0xf5, 0x3, "a53bc3c9148c0a811f9e4805441e09dcdb5af98868695cd49e3414bb63eb56b29c78b7e994386dc6040ccdd864ef881586cd3bd58cb971da80f50e1dc4c9b91bfd7feccd4c3a428072277aa7185c7e31e692a3f5ef7b8cb701a368b619a46843518cd8aef37af5d7281c8f4e1d8533279ae67d4247d9bf3467a58df10fa6c765d6f5398f40a27faf4fdcfa7430ca80172dbc9ad4730774839031e7cb57333fcc240fc9520e1dee83d059c7d2b21d399bfcf8b1c4b42ecc0db376bde522ac384be3041226751adcdfdb722a831339d12b64fe54b8096fa53bbc400a71a9fbfc97f8a407e656193138f9bc011f98e09a108948ea"}}, {0x28, &(0x7f0000000400)=@string={0x28, 0x3, "4009162d60fd53cc44fa5a0be523b958ef3dbbcbf63d99b481ef4c11709ed2a02afc8a611cae"}}]}) r2 = gettid() r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing', 0x0, 0x13c) getdents(r3, 0x0, 0x25) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r4, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 2.697906864s ago: executing program 2 (id=469): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback, 0x80}}, 0x100, 0x500, 0x0, 0x0, 0x54}, 0x9c) 2.615695145s ago: executing program 2 (id=471): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f00000002c0)={@empty, @rand_addr=0x64010100, 0x1, 0x40000000000000fe}, 0x20000) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x100}, 0x1c) r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f00000001c0)={0x0, "3c4d83e651b1791481d5da49a0e1f5dd23f3fc71e6a58aae6fd755a19f96a736", 0x3}) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='highspeed', 0x9) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) listen(r1, 0x5d) shutdown(r0, 0x1) r3 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x431}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e20, 0x7fee, @mcast1, 0x9}, 0x1c) connect$pppl2tp(r4, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r5, 0x8, 0x0, 0x0, 0x0, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x32) writev(r4, &(0x7f0000000180)=[{&(0x7f0000000380)="d4", 0xfdef}], 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="5801000040000701feffffff00000000017c0000040042800c00018006000600800a0000340102802e011480080007"], 0x158}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) syz_usb_connect(0x0, 0x3d, &(0x7f0000001040)=ANY=[@ANYBLOB="120100004e826d4094225a4241d10102030109022b0001040000000904000002e964c2000905040600000000000705dce6f3"], 0x0) 2.315835178s ago: executing program 1 (id=472): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000200), 0x2880, 0x0) ioctl$PTP_ENABLE_PPS(r0, 0x40043d04, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x234c, 0xffffffff, 0x0, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x22b8, 0x22b8, 0x22b8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x6, 0x5, 0x0, 0x6, 0x4, 0x5], 0x0, 0x2}, {0x1, [0x4, 0x3, 0x4, 0x2, 0x0, 0x2], 0x6, 0x5}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x61ce, {0x7}}}}, {{@ip={@remote, @rand_addr=0x64010102, 0x0, 0xff, 'wg1\x00', 'hsr0\x00', {0xff}, {}, 0x32, 0x1, 0x40}, 0x0, 0x20d0, 0x2130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x0, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0x9, {0x3ff}}}, @common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x0, 0x1, './cgroup.cpu/syz1\x00', 0xf7, {0x8}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1, 0x4, 0x2, 0x2, 0x4], 0x5, 0x4}, {0x2, [0x0, 0x4, 0x5, 0x1, 0x4, 0x6], 0x2, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x23a8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0xbc00, 0x20, 0x1, 0x800, {{0x18, 0x4, 0x1, 0x6, 0x60, 0x67, 0x0, 0x6, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @timestamp_addr={0x44, 0xc, 0x3f, 0x1, 0x0, [{@private=0xa010100, 0x8}]}, @ssrr={0x89, 0x1b, 0xd8, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010100, @local]}, @ssrr={0x89, 0x7, 0x89, [@local]}, @ssrr={0x89, 0x1b, 0x13, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @dev={0xac, 0x14, 0x14, 0x2c}, @broadcast, @remote]}]}}}}}) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=@delpolicy={0x64, 0x14, 0x100, 0x70bd29, 0x25dfdbfb, {{@in6=@mcast2, @in6=@local, 0x4e20, 0xca, 0x4e22, 0x1, 0x2, 0x40, 0x80, 0x3b, 0x0, r3}, 0x6e6bb4, 0x1}, [@extra_flags={0x8, 0x18, 0x6}, @offload={0xc, 0x1c, {r5, 0x3}}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x8000) preadv2(r1, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x1, 0x2000, 0x3, 0x1f) 2.16605642s ago: executing program 1 (id=473): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x440d4) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000001280)={0x14, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) syz_usb_ep_write$ath9k_ep2(r2, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "79e6a7a2", {0x3, 0x104, 0x0, 0xfb, 0x3ff, 0x97, 0x80}}) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000040)=0x9d5, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="13000000320081084e81f782db44b904021d08", 0x13}], 0x1}, 0x0) write(r3, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) io_setup(0x30, &(0x7f00000001c0)=0x0) r6 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) r7 = eventfd(0xc) io_submit(r5, 0x4c, &(0x7f0000000480)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x9, r6, &(0x7f00000004c0)="19d05addf12f3c27916512f80b57496cda035fe7a8726957b548f8c518250775464a5c2cbfba59d4eef6660fe1a06261bf52da916083bd5ccc956bfd5a7c1c4aab4e1fc32ed0faf7fdb2e531a486213ee0e4c72d56f3a0961d7300259989c74487dbfc2dfb1c48c6e0518d6b65690fa3280ba4ea1713b460a65bc9", 0x0, 0x66, 0x0, 0x1, r7}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffffffffffff, &(0x7f0000000340)="94aab7b21d5f1fdb217880962daed8754066b05132a2a1b192da7e05202546aa718370117ba0bcad1c81005f3a5037f17375197d07059450a55a23984b3b1270d84547823ef09e93e470a5bccce8551f12e93a5f061b393ce6cc9676e8429521f7d815342e47a0bfc59fe25021ac20b9a6faeebb811e6046a169eba7122bd76839a9d5ae01e52058fc3dc37186818f06f0b22b0fc6c633b291d76f38e4c2fcc4ba4262b4d80add21783396c8fc42f301c5ed6890d7d0396dbacacbd9028100"/206, 0x0, 0x5, 0x0, 0x0, r7}]) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) 1.739583628s ago: executing program 3 (id=474): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) ioctl$OCFS2_IOC_MOVE_EXT(r0, 0x40406f06, &(0x7f0000000080)={0x7, 0x2, 0x1, 0x80000001, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$unix(0x1, 0x5, 0x0) shutdown(r1, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000000)=@usbdevfs_connect={0x94d}) r3 = socket(0x2b, 0x1, 0x1) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r4, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$MON_IOCH_MFLUSH(0xffffffffffffffff, 0x9208, 0x100) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x4, 0x1, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x6, &(0x7f0000000140)=0xffffffcd, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4b0731ba60ee5cf0}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, 0x3, 0x8, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2ff}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x40}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) clock_adjtime(0x0, &(0x7f0000000e00)={0xe62b, 0x80000000000000, 0x309, 0x0, 0x9, 0x9f69, 0x0, 0x200000000002000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x30, 0x80000001, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000000aaaaaaaa025979d8e81343704660291ce4a7aabb0806000000000000000000"], 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendto$inet6(r8, &(0x7f0000000140)="6ae541716ea8ecfb7489a526dbd12b018a3cfd5731b2baf8a167890339f0ee8b303cbb0cdc4b0808c98d9d3ec1eabf5eccb83c3908e56ed6212786e32cbcad27b57cf6a07b04db520b8507485ecd890186fa77fbdf2724c254e08e82ed986662b8ed5bc04c774873534d8e8afd47433b67e8426220b62c42fc2a20b8b2b2a44f119ef3169012ca2cc4823b20d3027d61c0af767f99766bc1b3668fcd9fc025dcff097c2d8e1ae633fad48e8a512297108dc51f0a7188f55bdba8d8aa07da4232e4d676556691b562f4787f86cfcea255f7783ca4cd9dcb60061e", 0xda, 0x8004, &(0x7f0000000240)={0xa, 0x0, 0xeb, @mcast2, 0xbb3}, 0x1c) mprotect(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 1.510339487s ago: executing program 3 (id=475): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) sendto$inet6(r0, 0x0, 0x0, 0x24000084, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2801000043000701fefffffffcdbdf25027c0000040045800d01018096001c807100af803357a8dd0d005d002f6465762f6b766d00000000dc619ef1bca494ee36dbcb275ec696cf9b0c366f767b78c0e4a80df548cd3bbff7"], 0x128}, 0x1, 0x0, 0x0, 0xc010}, 0xc000) 1.398500927s ago: executing program 4 (id=476): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000090000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2010000000100004199f8c6aa4a", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.352036421s ago: executing program 3 (id=477): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) fstat64(r0, &(0x7f0000000000)) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x14, &(0x7f0000000040), 0x50) ioctl$XFS_IOC_SWAPEXT(r0, 0xc0a4586d, &(0x7f0000000100)={0x0, r1, r2, 0x0, 0x5, '\x00', {0x1f, 0x10, 0x5, 0xfffffff6, 0x1, 0x8e, 0x100, 0x75c, {0x8001}, {0x3, 0x8}, {0x9, 0x5}, 0x5, 0x0, 0x6, 0x2, 0x80000000, 0x1, 0x1, 0x43d, 0x1, 0x69, '\x00', 0x3, 0x1, 0x6, 0x1}}) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) process_madvise(r4, 0x0, 0x0, 0x14, 0x0) 1.302998196s ago: executing program 4 (id=478): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0x5, 0x0, 0x0, 0xffff, 0x0, 0xffffffbc, 0x10}, [@ldst={0x7, 0xff05, 0x0, 0x0, 0xa}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f00000004c0)=""/195}, 0x94) msgctl$IPC_INFO(0x0, 0x3, &(0x7f00000000c0)=""/156) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000180)={{@my=0x0, 0x400}, 0x0, 0x1}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x80000000, 0x3, 0x3fc, 0x8, 0xfffffffd, 0x0, 0x4000004, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x40, 0x0, 0xf5b1, 0xffffffff, 0x10000000, 0x9, 0x20000400, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x1], [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xedc0, 0x2, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffff8, 0x2, 0x0, 0x2000079, 0x400, 0x0, 0x0, 0x10000, 0x40000, 0x7, 0xc0800000, 0x0, 0x0, 0x0, 0xe1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x4771, 0x0, 0x0, 0x3], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff65, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4], [0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10, 0x5, 0xfffffffd, 0x0, 0x0, 0x0, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ec5, 0x0, 0x8000000, 0x4, 0x0, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f00000000c0)={{@my=0x0}, 0x1}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt(r1, 0x1ff, 0xfffffffe, &(0x7f00000005c0)=""/242, &(0x7f00000006c0)=0xf2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket(0x11, 0xa, 0x3) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r3, &(0x7f0000000000), 0x10) getsockname$packet(r3, 0x0, &(0x7f0000000140)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x48}}, 0x0) r5 = syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x1018002, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYRES32, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0xee00, @ANYBLOB=',allow_other,allow_other,max_read=0x0300000000000000,allow_other,allow_other,default_permissions,blksize=0x0000000000001000,max_read=0x0000000000009f15,default_permissions,blksize=0x0000000000002000,audit,\x00'], 0x1, 0x0, &(0x7f0000000340)="7238aa12ba9fc92c1de781c80f50e90c2ae17bf6c6024002d65abd5a03a6697d6cb8640f8890d33adc17e0aebae8e37a47012a9fb613a8737bb68697e36938c6976abd7a8faed55572f13399d2bce725e9d581dd8efab1d6554404f5ae95e77325932bd95d6a") getdents64(r5, &(0x7f0000000440)=""/122, 0x7a) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) ioctl$FS_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000700)=0x20) r6 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) write$binfmt_register(r6, &(0x7f0000002500)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xa, 0x3a, 'j.-\xaa', 0x3a, '', 0x3a, './file0'}, 0x2b) openat$procfs(0xffffff9c, &(0x7f00000003c0)='/proc/tty/drivers\x00', 0x0, 0x0) r7 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r7, 0x4236}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r2) 1.120630877s ago: executing program 2 (id=479): r0 = syz_open_dev$sg(&(0x7f0000000300), 0x4a38, 0x141000) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x53, 0xfffffffffffffffc, 0x6, 0x20, @buffer={0x0, 0x2c, 0x0}, &(0x7f00000001c0)="19274c199f6e", 0x0, 0x1000000c, 0x0, 0x0, 0x0}) r1 = socket$igmp(0x2, 0x3, 0x2) fcntl$lock(r1, 0x7, &(0x7f0000000080)={0x1, 0x0, 0x2, 0xffffffffffff0000}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601046c0001000000000000000000050005000a000000050001000600000005000400000000000900020073797a300000000014000300686173683a69702c706f72742c697000140007800800084000002f54080006"], 0x60}}, 0x0) 1.04881073s ago: executing program 3 (id=480): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040)={0x806, 0xffffffffffffffff}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000b40)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x9, 0x0, "1d"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0xfc, 0xc0000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x60}, 0x1, 0x7}, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc0012fb, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000300)={'fscrypt:', @desc4}, &(0x7f0000000340)={0x0, "7e3385a719d09735b696a5a4d1c66a222f18f700594c74d1487d849b4e53f403468f7fc51b14f42410bf747cf025bac303f7c773d608f730bbec18f81c2821ac", 0x29}, 0x48, r2) keyctl$get_security(0x11, r4, &(0x7f0000000480)=""/235, 0xeb) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.impure\x00', 0x0, 0x0, 0x2) r5 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) request_key(&(0x7f0000000080)='cifs.spnego\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='big_key\x00', r5) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x6c, &(0x7f0000000680)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="dce65fbcee00", @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x0, 0x3, 0x5e, 0x64, 0x0, 0xa, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast, {[@ra={0x94, 0x4, 0x1}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2, [0x81]}, {}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x0, {{0x8, 0x1, 0x7, 0x0, 0x1, 0x0, 0x3, 0xb0}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x3, {{0x9, 0x2, 0x0, 0x2, 0x1, 0x3, 0x3, 0x7}, 0x2, {0x8, 0x3, 0x0, 0x0, 0x0, 0x1, 0x2, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) socket$tipc(0x1e, 0x5, 0x0) 1.034382155s ago: executing program 0 (id=481): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x28, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}, @nested={0x4, 0x37}]}, 0x28}], 0x1}, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0) r1 = openat$binder_debug(0xffffff9c, &(0x7f00000025c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) splice(r1, 0x0, r1, 0x0, 0x4b, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000002500010024bd7002ffdbdf250800000004005ae06df4b76b361b"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r3, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r3, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r10) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r11 = socket$kcm(0x11, 0x3, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x4ac, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x478, 0x2, [@TCA_MATCHALL_ACT={0x474, 0x2, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0x5, 0x4, 0x2, 0x4, 0x5, 0x2234, 0x83, 0x81b, 0x7fe, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x800004, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x0, 0x80000000, 0x1, 0x790, 0x5, 0x1, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x0, 0xffffffff, 0x1, 0x3, 0x3, 0x5b1f, 0x7b0, 0x3, 0x100, 0xfffffffe, 0xd, 0xff, 0x3, 0xfffc, 0x6, 0x10a4, 0x11ff, 0x80, 0x4, 0x7, 0x3, 0x1, 0x3, 0x2, 0x9, 0x81, 0x7, 0x8, 0x5, 0x10001, 0x8f7, 0x3, 0xfffffef9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0xffffca9a, 0x6, 0x7, 0x8, 0x100, 0xc0000000, 0x0, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x7, 0x80000000, 0x7f, 0x7, 0x9, 0xff, 0x24, 0x5, 0x8, 0x6, 0x10007e, 0x8, 0x0, 0x5, 0x470, 0x7f, 0xe, 0x0, 0x1, 0x0, 0x4, 0x10009, 0x61, 0x200, 0x9, 0x2, 0x2, 0x6, 0x3ff, 0x8, 0x7, 0x11, 0xda56, 0x7ffffffe, 0x180, 0x2f0cb955, 0x7, 0x8, 0xf, 0x6ae, 0x9, 0x0, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0x9, 0x7, 0x6, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0xf7800000, 0x40ac, 0x8, 0x3, 0x10, 0x9, 0x8, 0x80000001, 0x0, 0x74, 0x2, 0x7fffffff, 0x3, 0xa, 0x3, 0xffffffff, 0x8, 0x9, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0xa, 0x300, 0x5, 0x8d, 0x6, 0xffffffff, 0xffb, 0xff, 0x3, 0x8, 0x3, 0x2, 0x9, 0xb, 0x399d, 0x5, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x528c, 0x206, 0x5f, 0xac, 0xf, 0x4, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x6, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x80001, 0x5, 0x354d, 0x4, 0x2, 0x1, 0x200, 0x0, 0x8, 0x7, 0x0, 0x80, 0x5, 0x8, 0x1, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0xafb, 0x805915, 0x10001, 0x1]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x8, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0xa, 0xb}, {0x6, 0x1, 0xd, 0x800, 0x1}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r11, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r9, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 952.749013ms ago: executing program 2 (id=482): io_setup(0x26, &(0x7f0000000240)=0x0) r1 = socket(0x10, 0x803, 0x0) io_submit(r0, 0x1, &(0x7f00000006c0)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x8, r1, 0x0, 0x0, 0x10000}]) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file1', [], 0xa, "0a345f27458881110800033c3eedafebd12f8ebb4f0803"}, 0x22) syz_usb_connect$cdc_ncm(0x5, 0x125, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x113, 0x2, 0x1, 0x81, 0x20, 0xed, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "70e22e"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x3ff, 0xffff, 0x5}, {0x6, 0x24, 0x1a, 0x401, 0x36}, [@mbim={0xc, 0x24, 0x1b, 0x7, 0xfffb, 0x32, 0x5, 0xddd1, 0x5}, @mdlm_detail={0x84, 0x24, 0x13, 0xd1, "76ec5809b73acf5a09515bddb1e1bbe6b3cd15865073c801649b68ae7f9f6310c3f7af499981a0355eafbb31f15b0aeef2e1343bb2cd85a76abd695c527b4bb6c302cc3cca344443136f142dd6694918c3239a8fbf98db904ba97aa67d93c7759c7cf02cbc0bc2a5acb24e155ce3ede9c23a323b5d21186a5f02f2f64a8f25fd"}, @mdlm_detail={0xd, 0x24, 0x13, 0x80, "3231de56999065e68e"}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x3, 0xffff}, @country_functional={0xa, 0x24, 0x7, 0xe, 0x5, [0x4, 0x81]}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xdf}]}, {{0x9, 0x5, 0x81, 0x3, 0x10, 0x6, 0x2, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x3, 0x8, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x59, 0x7}}}}}}}]}}, &(0x7f0000000440)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0x2, 0x3, 0x0, 0x20, 0x9}, 0x12c, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2, [{0xf5, &(0x7f0000000300)=@string={0xf5, 0x3, "a53bc3c9148c0a811f9e4805441e09dcdb5af98868695cd49e3414bb63eb56b29c78b7e994386dc6040ccdd864ef881586cd3bd58cb971da80f50e1dc4c9b91bfd7feccd4c3a428072277aa7185c7e31e692a3f5ef7b8cb701a368b619a46843518cd8aef37af5d7281c8f4e1d8533279ae67d4247d9bf3467a58df10fa6c765d6f5398f40a27faf4fdcfa7430ca80172dbc9ad4730774839031e7cb57333fcc240fc9520e1dee83d059c7d2b21d399bfcf8b1c4b42ecc0db376bde522ac384be3041226751adcdfdb722a831339d12b64fe54b8096fa53bbc400a71a9fbfc97f8a407e656193138f9bc011f98e09a108948ea"}}, {0x28, &(0x7f0000000400)=@string={0x28, 0x3, "4009162d60fd53cc44fa5a0be523b958ef3dbbcbf63d99b481ef4c11709ed2a02afc8a611cae"}}]}) r2 = gettid() r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/tracing', 0x0, 0x13c) getdents(r3, 0x0, 0x25) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r4, 0x1) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x2e, &(0x7f0000000000)=0x21ea, 0x4) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 949.086374ms ago: executing program 4 (id=483): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d40)=ANY=[@ANYBLOB="2801000043000701fefffffffcdbdf25027c0000040045800d01018096001c807100af803357a8dd0d005d002f6465762f6b766d00000000dc619ef1bca494ee36dbcb275ec696cf9b0c366f767b"], 0x128}, 0x1, 0x0, 0x0, 0xc010}, 0xc000) 463.757421ms ago: executing program 4 (id=484): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r0, 0x84, 0xd, 0x0, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0003}]}) r1 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000a40)="1debb5002d", 0x5, 0xfffffffffffffffe) keyctl$read(0xb, r1, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) io_setup(0x6, &(0x7f00000003c0)=0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x40900, 0x0) io_submit(r2, 0x1, &(0x7f00000000c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) getcwd(&(0x7f0000001300)=""/98, 0x62) 349.1909ms ago: executing program 3 (id=485): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x27}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x7}, @CTA_TUPLE_ORIG={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0xc1105511, &(0x7f0000000040)) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010002000000000000000c000000180001801400020073797a5f74756e0000000000000000fd200003801c000380140001800400030004000300"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = accept4$packet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x80000) getsockname$packet(r7, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r6, 0x10040) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10000, 0xffffff87}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x8001, 0x400056}]}}}}}}}, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r1, 0xc040aed5, &(0x7f00000001c0)={0x8000000, 0x10000}) 162.524992ms ago: executing program 4 (id=486): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000000)) 143.705502ms ago: executing program 0 (id=487): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x30}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0x6, 0x5, 0x4, 0x0, 0x8, 0xa5b4}}, {0x4}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 1.301032ms ago: executing program 3 (id=488): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000090000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa4000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000008000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000080)="d2010000000100004199f8c6aa4a", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 0s ago: executing program 4 (id=489): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="77690addcfbe1fbb66ec", 0xfd9c}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r3, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1}}], 0x1, 0x100, 0x0) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) splice(r1, 0x0, r4, 0x0, 0x80000025a5, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001a80)=ANY=[@ANYBLOB="1c000000010401010000000000000000020000020500d90003000000"], 0x1c}, 0x1, 0x0, 0x0, 0xc044}, 0x8000) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff9f, &(0x7f0000000080)=ANY=[]) r6 = syz_ublk_setup_io_uring(0x9a1, &(0x7f0000000040)={0x0, 0xd81c, 0x400, 0x2, 0x261}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) io_uring_setup(0x7aba, &(0x7f0000000180)={0x0, 0xa67a, 0x80, 0x1, 0x111, 0x0, r6}) kernel console output (not intermixed with test programs): : New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.500133][ T29] usb 2-1: Product: 鉫竀݅舀譍侾꜁η碡䑊ᐘ，선蕈ힴ鎃ܤ諬몬쐿䅏쟛䏥紹뙏꠳ԥ﮹⒎삑঱北⤧㑲⚨뉡鶃ㅖ鲲拿뾯쟊һྜ嵂ො鈬魍똉鏜㫼ፗ爪髀ϋ沈䖨㧫ﮋ욭ᅺ釜䍈ᳰ앸ٴ혎ᰄ썊峬ហ兡⪓粏뗎ꭤ஢켢윹퍦嫸₡덌ꥂ䢖䈿♳脪댒胻奀듟⊢ℱ华䰹嘶ꌢꌅ瞊롳語壳㢄쯃ᶅ猸댡骪곘퀛粳運㮊 [ 128.572691][ T29] usb 2-1: Manufacturer: ࠧ [ 128.594015][ T29] usb 2-1: SerialNumber: ࠚ [ 128.681859][ T5704] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 128.701836][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 128.707949][ T5704] usb 3-1: no configurations [ 128.716196][ T5704] usb 3-1: can't read configurations, error -22 [ 128.861179][ T5704] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 128.924198][ T5704] usb 3-1: Using ep0 maxpacket: 32 [ 128.952738][ T5704] usb 3-1: no configurations [ 128.973652][ T5704] usb 3-1: can't read configurations, error -22 [ 129.004229][ T5704] usb usb3-port1: unable to enumerate USB device [ 129.090787][ T6365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 129.360312][ T6362] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.370229][ T6362] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.544356][ T5704] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 129.620712][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 129.664892][ T6362] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 129.711045][ T5704] usb 4-1: Using ep0 maxpacket: 32 [ 129.725404][ T5704] usb 4-1: unable to get BOS descriptor or descriptor too short [ 129.760189][ T5704] usb 4-1: config 249 has an invalid interface number: 132 but max is 0 [ 129.800821][ T5704] usb 4-1: config 249 has no interface number 0 [ 129.821911][ T5704] usb 4-1: config 249 interface 132 altsetting 255 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 129.851712][ T5704] usb 4-1: config 249 interface 132 has no altsetting 0 [ 129.874343][ T5704] usb 4-1: New USB device found, idVendor=0707, idProduct=0200, bcdDevice=4f.f3 [ 129.893781][ T5704] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.903347][ T5704] usb 4-1: Product: syz [ 129.907677][ T5704] usb 4-1: Manufacturer: syz [ 129.921925][ T5704] usb 4-1: SerialNumber: syz [ 130.123921][ T136] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.149079][ T136] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.180349][ T136] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.209634][ T136] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.424084][ T5704] pegasus 4-1:249.132: Missing or invalid endpoints [ 130.452678][ T5704] usb 4-1: USB disconnect, device number 11 [ 130.674531][ T6396] netlink: 84 bytes leftover after parsing attributes in process `syz.0.186'. [ 130.853765][ T6403] netlink: 'syz.0.188': attribute type 1 has an invalid length. [ 130.884236][ T6403] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.892512][ T6403] IPv6: NLM_F_CREATE should be set when creating new route [ 131.094171][ T29] cdc_ncm 2-1:1.0: bind() failure [ 131.148373][ T29] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 131.174419][ T29] cdc_ncm 2-1:1.1: bind() failure [ 131.213935][ T6408] input: syz0 as /devices/virtual/input/input13 [ 131.225414][ T29] usb 2-1: USB disconnect, device number 19 [ 131.312173][ T6385] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 131.395638][ T6408] loop7: detected capacity change from 0 to 7 [ 131.486621][ T6385] usb 5-1: Using ep0 maxpacket: 8 [ 131.513668][ T6385] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 131.523098][ T6385] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 131.533737][ T6385] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 131.545742][ T6385] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 131.586054][ T6385] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 131.617841][ T6385] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 131.639985][ T6385] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.674581][ T6408] Dev loop7: unable to read RDB block 7 [ 131.706915][ C0] invalid error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 131.716923][ C0] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 131.735795][ T6408] loop7: unable to read partition table [ 131.747129][ T6408] loop7: partition table beyond EOD, truncated [ 131.757536][ T6408] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 131.838377][ T6372] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 131.889766][ T6425] netlink: 21056 bytes leftover after parsing attributes in process `syz.3.194'. [ 131.954524][ T6429] netlink: 'syz.2.195': attribute type 32 has an invalid length. [ 131.966490][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.195'. [ 132.001015][ T6372] usb 1-1: Using ep0 maxpacket: 16 [ 132.014878][ T6372] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 132.031635][ T6372] usb 1-1: config 0 has no interface number 0 [ 132.037972][ T6372] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 132.048555][ T6372] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 132.068581][ T6372] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 132.088038][ T6372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.105671][ T6429] bond1: option coupled_control: invalid value (255) [ 132.108515][ T6372] usb 1-1: Product: syz [ 132.130061][ T6372] usb 1-1: Manufacturer: syz [ 132.139385][ T6372] usb 1-1: SerialNumber: syz [ 132.154468][ T6372] usb 1-1: config 0 descriptor?? [ 132.165454][ T6429] bond1 (unregistering): Released all slaves [ 132.178768][ T6421] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.201923][ T5628] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 132.202095][ T6421] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.366458][ T5628] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 132.382836][ T5628] usb 4-1: config 0 has no interface number 0 [ 132.405920][ T5628] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 132.430191][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.454273][ T6408] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.464337][ T5628] usb 4-1: Product: syz [ 132.473672][ T5628] usb 4-1: Manufacturer: syz [ 132.479190][ T6408] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 132.494295][ T5628] usb 4-1: SerialNumber: syz [ 132.539382][ T5628] usb 4-1: config 0 descriptor?? [ 132.563183][ T5628] usb 4-1: selecting invalid altsetting 1 [ 132.588031][ T5628] dvb_ttusb_budget: ttusb_init_controller: error [ 132.609462][ T5628] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 132.628591][ T6442] capability: warning: `syz.4.189' uses deprecated v2 capabilities in a way that may be insecure [ 132.674098][ T6442] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 132.703940][ T6374] IPVS: starting estimator thread 0... [ 132.720831][ T6372] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 132.773949][ T6372] asix 1-1:0.34: probe with driver asix failed with error -71 [ 132.834875][ T5628] DVB: Unable to find symbol stv0299_attach() [ 132.841032][ T6447] IPVS: using max 28 ests per chain, 67200 per kthread [ 132.848491][ T6425] netlink: 72 bytes leftover after parsing attributes in process `syz.3.194'. [ 132.857473][ T6372] usb 1-1: USB disconnect, device number 8 [ 132.870367][ T6429] mmap: syz.2.195 (6429) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.976297][ T1315] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.984741][ T1315] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.025507][ T4994] Dev loop7: unable to read RDB block 7 [ 133.044855][ T4994] loop7: unable to read partition table [ 133.066214][ T4994] loop7: partition table beyond EOD, truncated [ 133.096363][ T5628] DVB: Unable to find symbol tda8083_attach() [ 133.107388][ T5628] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 133.195723][ T6373] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 133.204365][ T5628] usb 4-1: USB disconnect, device number 12 [ 133.382013][ T6373] usb 2-1: Using ep0 maxpacket: 32 [ 133.391558][ T6373] usb 2-1: no configurations [ 133.398696][ T6373] usb 2-1: can't read configurations, error -22 [ 133.553857][ T6373] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 133.688524][ T6453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.198'. [ 133.741032][ T6373] usb 2-1: Using ep0 maxpacket: 32 [ 133.756635][ T6373] usb 2-1: no configurations [ 133.767803][ T6373] usb 2-1: can't read configurations, error -22 [ 133.788811][ T6373] usb usb2-port1: attempt power cycle [ 134.151279][ T6373] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 134.192921][ T6373] usb 2-1: Using ep0 maxpacket: 32 [ 134.209122][ T6373] usb 2-1: no configurations [ 134.215874][ T6373] usb 2-1: can't read configurations, error -22 [ 134.361088][ T5628] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 134.369714][ T6373] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 134.422666][ T6373] usb 2-1: Using ep0 maxpacket: 32 [ 134.430083][ T6373] usb 2-1: no configurations [ 134.441044][ T6373] usb 2-1: can't read configurations, error -22 [ 134.458279][ T6373] usb usb2-port1: unable to enumerate USB device [ 134.521014][ T5628] usb 4-1: device descriptor read/64, error -71 [ 134.736152][ T6386] usb 5-1: USB disconnect, device number 13 [ 134.773128][ T5628] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 134.773727][ T5704] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 134.900370][ T6494] sctp: [Deprecated]: syz.4.214 (pid 6494) Use of int in max_burst socket option deprecated. [ 134.900370][ T6494] Use struct sctp_assoc_value instead [ 134.921053][ T5628] usb 4-1: device descriptor read/64, error -71 [ 134.941957][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 134.949291][ T5704] usb 1-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 134.979300][ T5704] usb 1-1: config 0 interface 0 has no altsetting 0 [ 134.993079][ T5704] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 135.002819][ T5704] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.015432][ T5704] usb 1-1: config 0 descriptor?? [ 135.042468][ T5628] usb usb4-port1: attempt power cycle [ 135.227700][ T6504] sg_write: data in/out 443356/194 bytes for SCSI command 0x0-- guessing data in; [ 135.227700][ T6504] program syz.2.217 not setting count and/or reply_len properly [ 135.381047][ T5628] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 135.401821][ T6510] FAULT_INJECTION: forcing a failure. [ 135.401821][ T6510] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 135.416202][ T6510] CPU: 0 UID: 0 PID: 6510 Comm: syz.4.219 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.416231][ T6510] Tainted: [L]=SOFTLOCKUP [ 135.416238][ T6510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 135.416248][ T6510] Call Trace: [ 135.416256][ T6510] [ 135.416264][ T6510] dump_stack_lvl+0xe8/0x150 [ 135.416291][ T6510] should_fail_ex+0x412/0x560 [ 135.416322][ T6510] _copy_to_user+0x31/0xb0 [ 135.416353][ T6510] simple_read_from_buffer+0xe1/0x170 [ 135.416382][ T6510] proc_fail_nth_read+0x1bb/0x230 [ 135.416410][ T6510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.416437][ T6510] ? rw_verify_area+0x2a6/0x4d0 [ 135.416461][ T6510] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 135.416487][ T6510] vfs_read+0x20c/0xa70 [ 135.416519][ T6510] ? __pfx___mutex_lock+0x10/0x10 [ 135.416557][ T6510] ? __pfx_vfs_read+0x10/0x10 [ 135.416583][ T6510] ? __fget_files+0x2a/0x420 [ 135.416610][ T6510] ? __fget_files+0x3a0/0x420 [ 135.416631][ T6510] ? __fget_files+0x2a/0x420 [ 135.416664][ T6510] ksys_read+0x150/0x270 [ 135.416693][ T6510] ? __pfx_ksys_read+0x10/0x10 [ 135.416723][ T6510] ? asm_int80_emulation+0x1a/0x20 [ 135.416747][ T6510] do_int80_emulation+0x181/0x530 [ 135.416765][ T6510] ? trace_irq_disable+0x3b/0x140 [ 135.416792][ T6510] ? asm_int80_emulation+0x1a/0x20 [ 135.416808][ T6510] ? clear_bhb_loop+0x40/0x90 [ 135.416827][ T6510] ? clear_bhb_loop+0x40/0x90 [ 135.416851][ T6510] asm_int80_emulation+0x1a/0x20 [ 135.416867][ T6510] RIP: 0023:0xf71c61ab [ 135.416885][ T6510] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 135.416900][ T6510] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 135.416922][ T6510] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f54865d0 [ 135.416934][ T6510] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 135.416945][ T6510] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 135.416955][ T6510] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 135.416966][ T6510] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 135.416996][ T6510] [ 135.417131][ T5628] usb 4-1: device descriptor read/8, error -71 [ 135.470064][ T5704] mcp2221 0003:04D8:00DD.0008: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 135.802416][ T5628] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 135.831711][ T5628] usb 4-1: device descriptor read/8, error -71 [ 135.841905][ T6373] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 135.897670][ T5704] usb 1-1: USB disconnect, device number 9 [ 135.946229][ T5628] usb usb4-port1: unable to enumerate USB device [ 136.005015][ T6373] usb 3-1: config 5 has an invalid interface number: 42 but max is 0 [ 136.029073][ T6373] usb 3-1: config 5 has no interface number 0 [ 136.056790][ T6373] usb 3-1: config 5 interface 42 has no altsetting 0 [ 136.077196][ T6373] usb 3-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice=e0.90 [ 136.087854][ T6373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.102135][ T6373] usb 3-1: Product: syz [ 136.108858][ T6373] usb 3-1: Manufacturer: syz [ 136.117724][ T6373] usb 3-1: SerialNumber: syz [ 136.133928][ T6526] FAULT_INJECTION: forcing a failure. [ 136.133928][ T6526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 136.148636][ T6526] CPU: 1 UID: 0 PID: 6526 Comm: syz.4.224 Tainted: G L syzkaller #0 PREEMPT(full) [ 136.148666][ T6526] Tainted: [L]=SOFTLOCKUP [ 136.148673][ T6526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 136.148683][ T6526] Call Trace: [ 136.148690][ T6526] [ 136.148698][ T6526] dump_stack_lvl+0xe8/0x150 [ 136.148727][ T6526] should_fail_ex+0x412/0x560 [ 136.148759][ T6526] _copy_to_user+0x31/0xb0 [ 136.148788][ T6526] simple_read_from_buffer+0xe1/0x170 [ 136.148817][ T6526] proc_fail_nth_read+0x1bb/0x230 [ 136.148843][ T6526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.148870][ T6526] ? rw_verify_area+0x2a6/0x4d0 [ 136.148894][ T6526] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 136.148920][ T6526] vfs_read+0x20c/0xa70 [ 136.148951][ T6526] ? __pfx___mutex_lock+0x10/0x10 [ 136.148980][ T6526] ? __pfx_vfs_read+0x10/0x10 [ 136.149006][ T6526] ? __fget_files+0x2a/0x420 [ 136.149034][ T6526] ? __fget_files+0x3a0/0x420 [ 136.149054][ T6526] ? __fget_files+0x2a/0x420 [ 136.149086][ T6526] ksys_read+0x150/0x270 [ 136.149115][ T6526] ? __pfx_ksys_read+0x10/0x10 [ 136.149144][ T6526] ? asm_int80_emulation+0x1a/0x20 [ 136.149168][ T6526] do_int80_emulation+0x181/0x530 [ 136.149186][ T6526] ? trace_irq_disable+0x3b/0x140 [ 136.149212][ T6526] ? asm_int80_emulation+0x1a/0x20 [ 136.149228][ T6526] ? clear_bhb_loop+0x40/0x90 [ 136.149246][ T6526] ? clear_bhb_loop+0x40/0x90 [ 136.149269][ T6526] asm_int80_emulation+0x1a/0x20 [ 136.149285][ T6526] RIP: 0023:0xf71c61ab [ 136.149303][ T6526] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 136.149318][ T6526] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 136.149338][ T6526] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54865d0 [ 136.149351][ T6526] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 136.149361][ T6526] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 136.149371][ T6526] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 136.149382][ T6526] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 136.149412][ T6526] [ 136.408917][ T6373] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.42/input/input15 [ 136.470796][ T4979] bcm5974 3-1:5.42: could not read from device [ 136.486363][ T4979] bcm5974 3-1:5.42: could not read from device [ 136.501615][ T6373] usb 3-1: USB disconnect, device number 13 [ 136.528758][ T4979] bcm5974 3-1:5.42: could not read from device [ 136.567355][ T6532] netlink: 120 bytes leftover after parsing attributes in process `syz.4.227'. [ 136.879263][ T6538] netlink: 204 bytes leftover after parsing attributes in process `syz.4.229'. [ 136.915781][ T6538] netlink: 112 bytes leftover after parsing attributes in process `syz.4.229'. [ 137.263444][ T5628] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 137.301248][ T6386] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 137.423896][ T5628] usb 3-1: config 0 has no interfaces? [ 137.437696][ T5628] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 137.466500][ T5628] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.490706][ T5628] usb 3-1: config 0 descriptor?? [ 137.498321][ T6386] usb 5-1: Using ep0 maxpacket: 8 [ 137.524925][ T6386] usb 5-1: config 6 has an invalid interface number: 213 but max is 1 [ 137.559980][ T6386] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 137.586608][ T6386] usb 5-1: config 6 has 1 interface, different from the descriptor's value: 2 [ 137.613513][ T6386] usb 5-1: config 6 has no interface number 0 [ 137.628835][ T6386] usb 5-1: config 6 interface 213 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 137.670960][ T6386] usb 5-1: config 6 interface 213 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 137.693212][ T6386] usb 5-1: config 6 interface 213 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 137.716032][ T6386] usb 5-1: config 6 interface 213 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 137.720097][ T6543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.751580][ T6386] usb 5-1: New USB device found, idVendor=eb1a, idProduct=e357, bcdDevice=85.86 [ 137.782713][ T6386] usb 5-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 137.820049][ T6543] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.829225][ T6386] usb 5-1: Manufacturer: syz [ 137.849367][ T6386] usb 5-1: SerialNumber: syz [ 137.885940][ T5704] usb 3-1: USB disconnect, device number 14 [ 138.121849][ T5628] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 138.147009][ T6386] em28xx 5-1:6.213: New device syz @ 480 Mbps (eb1a:e357, interface 213, class 213) [ 138.174651][ T6386] em28xx 5-1:6.213: Audio interface 213 found (Vendor Class) [ 138.251799][ T6386] em28xx 5-1:6.213: unknown em28xx chip ID (0) [ 138.268873][ T6386] em28xx 5-1:6.213: Config register raw data: 0xfffffffb [ 138.286645][ T6386] em28xx 5-1:6.213: AC97 chip type couldn't be determined [ 138.286661][ T6386] em28xx 5-1:6.213: No AC97 audio processor [ 138.310131][ T6386] usb 5-1: USB disconnect, device number 14 [ 138.311506][ T5628] usb 1-1: Using ep0 maxpacket: 32 [ 138.312179][ T6386] em28xx 5-1:6.213: Disconnecting em28xx [ 138.320817][ T5628] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.320846][ T5628] usb 1-1: config 0 has no interfaces? [ 138.330218][ T5628] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 138.330250][ T5628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.330269][ T5628] usb 1-1: Product: syz [ 138.330283][ T5628] usb 1-1: Manufacturer: syz [ 138.330296][ T5628] usb 1-1: SerialNumber: syz [ 138.336015][ T6386] em28xx 5-1:6.213: Freeing device [ 138.363180][ T5628] usb 1-1: config 0 descriptor?? [ 138.481045][ T5704] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 138.611136][ T5704] usb 3-1: device descriptor read/64, error -71 [ 138.762757][ T5628] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 138.851078][ T5704] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 138.923035][ T5628] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 138.934077][ T6374] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 138.941760][ T5628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 138.952894][ T5628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.962848][ T5628] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 138.980128][ T5628] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 138.989420][ T5628] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 138.991077][ T5704] usb 3-1: device descriptor read/64, error -71 [ 138.997799][ T5628] usb 2-1: Manufacturer: syz [ 139.013309][ T5628] usb 2-1: config 0 descriptor?? [ 139.121552][ T5704] usb usb3-port1: attempt power cycle [ 139.129228][ T6374] usb 5-1: config 36 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 139.143746][ T6374] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 139.154948][ T6374] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 139.163341][ T6374] usb 5-1: Manufacturer: syz [ 139.167985][ T6374] usb 5-1: SerialNumber: syz [ 139.280843][ T6573] FAULT_INJECTION: forcing a failure. [ 139.280843][ T6573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.280896][ T6573] CPU: 1 UID: 0 PID: 6573 Comm: syz.1.237 Tainted: G L syzkaller #0 PREEMPT(full) [ 139.280926][ T6573] Tainted: [L]=SOFTLOCKUP [ 139.280932][ T6573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 139.280942][ T6573] Call Trace: [ 139.280950][ T6573] [ 139.280958][ T6573] dump_stack_lvl+0xe8/0x150 [ 139.280986][ T6573] should_fail_ex+0x412/0x560 [ 139.281016][ T6573] _copy_to_user+0x31/0xb0 [ 139.281044][ T6573] simple_read_from_buffer+0xe1/0x170 [ 139.281072][ T6573] proc_fail_nth_read+0x1bb/0x230 [ 139.281099][ T6573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.281125][ T6573] ? rw_verify_area+0x2a6/0x4d0 [ 139.281149][ T6573] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.281172][ T6573] vfs_read+0x20c/0xa70 [ 139.281202][ T6573] ? __pfx___mutex_lock+0x10/0x10 [ 139.281231][ T6573] ? __pfx_vfs_read+0x10/0x10 [ 139.281258][ T6573] ? __fget_files+0x2a/0x420 [ 139.281284][ T6573] ? __fget_files+0x3a0/0x420 [ 139.281303][ T6573] ? __fget_files+0x2a/0x420 [ 139.281332][ T6573] ksys_read+0x150/0x270 [ 139.281359][ T6573] ? __pfx_ksys_read+0x10/0x10 [ 139.281386][ T6573] ? asm_int80_emulation+0x1a/0x20 [ 139.281411][ T6573] do_int80_emulation+0x181/0x530 [ 139.281428][ T6573] ? trace_irq_disable+0x3b/0x140 [ 139.281454][ T6573] ? asm_int80_emulation+0x1a/0x20 [ 139.281469][ T6573] ? clear_bhb_loop+0x40/0x90 [ 139.281487][ T6573] ? clear_bhb_loop+0x40/0x90 [ 139.281510][ T6573] asm_int80_emulation+0x1a/0x20 [ 139.281528][ T6573] RIP: 0023:0xf71361ab [ 139.281556][ T6573] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 139.281570][ T6573] RSP: 002b:00000000f53d54bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 139.281591][ T6573] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000f53d55d0 [ 139.281603][ T6573] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 139.281612][ T6573] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 139.281622][ T6573] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 139.281632][ T6573] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 139.281661][ T6573] [ 139.284042][ T5628] usbhid 2-1:0.0: can't add hid device: -71 [ 139.284187][ T5628] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 139.308086][ T5628] usb 2-1: USB disconnect, device number 24 [ 139.383535][ T6571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.558082][ T6571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.573963][ T6374] usbhid 5-1:36.0: couldn't find an input interrupt endpoint [ 139.588393][ T6374] usb 5-1: USB disconnect, device number 15 [ 139.621382][ T5704] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 139.641670][ T5704] usb 3-1: device descriptor read/8, error -71 [ 139.881848][ T5704] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 139.902771][ T5704] usb 3-1: device descriptor read/8, error -71 [ 140.012176][ T5704] usb usb3-port1: unable to enumerate USB device [ 140.032910][ T6386] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 140.191075][ T6386] usb 2-1: Using ep0 maxpacket: 32 [ 140.209598][ T6386] usb 2-1: config 0 has an invalid interface number: 43 but max is 0 [ 140.222123][ T6386] usb 2-1: config 0 has no interface number 0 [ 140.228789][ T6386] usb 2-1: config 0 interface 43 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 140.244943][ T6386] usb 2-1: config 0 interface 43 has no altsetting 0 [ 140.260239][ T6386] usb 2-1: New USB device found, idVendor=0499, idProduct=1507, bcdDevice=15.f4 [ 140.273015][ T6386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.282890][ T6585] netlink: 4 bytes leftover after parsing attributes in process `syz.2.240'. [ 140.291972][ T6386] usb 2-1: Product: syz [ 140.291996][ T6386] usb 2-1: Manufacturer: syz [ 140.292011][ T6386] usb 2-1: SerialNumber: syz [ 140.309038][ T6386] usb 2-1: config 0 descriptor?? [ 140.318943][ T6584] netlink: 204 bytes leftover after parsing attributes in process `syz.4.242'. [ 140.330265][ T6584] netlink: 100 bytes leftover after parsing attributes in process `syz.4.242'. [ 140.584287][ T6575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.617688][ T6575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.827794][ T6590] netlink: 212352 bytes leftover after parsing attributes in process `syz.4.244'. [ 140.938924][ T29] usb 1-1: USB disconnect, device number 10 [ 141.274809][ T6604] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.448440][ T6386] usb 2-1: USB disconnect, device number 25 [ 141.594405][ T5690] udevd[5690]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.43/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.022132][ T6620] IPv6: addrconf: prefix option has invalid lifetime [ 142.084078][ T6623] netlink: 204 bytes leftover after parsing attributes in process `syz.4.253'. [ 142.131656][ T6623] netlink: 100 bytes leftover after parsing attributes in process `syz.4.253'. [ 142.281161][ T6627] tipc: Started in network mode [ 142.313142][ T6627] tipc: Node identity ba6ea271da3a, cluster identity 4711 [ 142.331467][ T6374] usb 2-1: new low-speed USB device number 26 using dummy_hcd [ 142.364228][ T6627] tipc: Enabled bearer , priority 0 [ 142.397328][ T6629] syzkaller0: entered promiscuous mode [ 142.418279][ T6629] syzkaller0: entered allmulticast mode [ 142.503450][ T6627] tipc: Resetting bearer [ 142.534015][ T6626] tipc: Resetting bearer [ 142.570857][ T6374] usb 2-1: unable to get BOS descriptor or descriptor too short [ 142.590739][ T6626] tipc: Disabling bearer [ 142.610434][ T6374] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1023, setting to 0 [ 142.632994][ T6374] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 142.680447][ T6374] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1023, setting to 0 [ 142.737689][ T6374] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0014, bcdDevice= 0.40 [ 142.760966][ T6374] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.770005][ T6374] usb 2-1: Manufacturer: ᕷ낙懁Ძᠣ홙糑嘰涺⤩ꋓ [ 142.893982][ T6637] gtp0: entered promiscuous mode [ 142.910045][ T6637] gtp0: entered allmulticast mode [ 143.004287][ T6374] usb 2-1: low speed audio streaming not supported [ 143.029133][ T6374] usb 2-1: low speed audio streaming not supported [ 143.064161][ T6646] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 143.098334][ T6646] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 143.104184][ T6374] usb 2-1: USB disconnect, device number 26 [ 143.191139][ T6386] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 143.206057][ T5690] udevd[5690]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.401116][ T6386] usb 3-1: Using ep0 maxpacket: 32 [ 143.408609][ T6386] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 143.420591][ T6386] usb 3-1: config 0 has no interfaces? [ 143.430785][ T6386] usb 3-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 143.440963][ T6386] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.450886][ T6386] usb 3-1: Product: syz [ 143.456016][ T6386] usb 3-1: Manufacturer: syz [ 143.460661][ T6386] usb 3-1: SerialNumber: syz [ 143.471793][ T6386] usb 3-1: config 0 descriptor?? [ 143.561198][ T29] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 143.733303][ T29] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 143.742828][ T29] usb 4-1: config 0 has no interface number 0 [ 143.754862][ T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 143.776222][ T29] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 143.787648][ T29] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 143.797442][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.812680][ T29] usb 4-1: config 0 descriptor?? [ 143.954256][ T6386] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 144.111379][ T6386] usb 2-1: Using ep0 maxpacket: 16 [ 144.121997][ T6386] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 144.132764][ T6386] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.141079][ T6386] usb 2-1: Product: syz [ 144.145413][ T6386] usb 2-1: Manufacturer: syz [ 144.150208][ T6386] usb 2-1: SerialNumber: syz [ 144.158885][ T6386] usb 2-1: config 0 descriptor?? [ 144.166936][ T6386] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 144.175418][ T6387] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 144.195815][ T6386] usb 2-1: Detected FT-X [ 144.270625][ T29] uclogic 0003:256C:006D.0009: unknown main item tag 0x0 [ 144.284032][ T29] uclogic 0003:256C:006D.0009: unknown main item tag 0x0 [ 144.294201][ T29] uclogic 0003:256C:006D.0009: unknown main item tag 0x0 [ 144.302816][ T29] uclogic 0003:256C:006D.0009: unknown main item tag 0x0 [ 144.313339][ T29] uclogic 0003:256C:006D.0009: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.3-1/input1 [ 144.335562][ T6387] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 144.347124][ T6387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 144.359795][ T6387] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.373068][ T6387] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 144.388042][ T6387] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 144.399662][ T6387] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 144.410796][ T6387] usb 1-1: Manufacturer: syz [ 144.422243][ T6387] usb 1-1: config 0 descriptor?? [ 144.521033][ T6374] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 144.578438][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 144.578459][ T30] audit: type=1326 audit(1779011146.510:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.1.263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3901c code=0x7ffc0000 [ 144.614759][ T30] audit: type=1326 audit(1779011146.520:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.1.263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3901c code=0x7ffc0000 [ 144.641552][ T30] audit: type=1326 audit(1779011146.550:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.1.263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f3901c code=0x7ffc0000 [ 144.666182][ T30] audit: type=1326 audit(1779011146.550:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.1.263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3901c code=0x7ffc0000 [ 144.692272][ T30] audit: type=1326 audit(1779011146.550:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.1.263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3901c code=0x7ffc0000 [ 144.717207][ T6374] usb 5-1: Using ep0 maxpacket: 16 [ 144.725469][ T30] audit: type=1326 audit(1779011146.550:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.1.263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf7f3901c code=0x7ffc0000 [ 144.751147][ T6374] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 144.751205][ T6374] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 144.751228][ T6374] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 144.751253][ T6374] usb 5-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 144.751275][ T6374] usb 5-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 144.751297][ T6374] usb 5-1: config 1 interface 0 has no altsetting 0 [ 144.751331][ T6374] usb 5-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 144.751352][ T6374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.761296][ T6374] ums-sddr09 5-1:1.0: USB Mass Storage device detected [ 144.772923][ T30] audit: type=1326 audit(1779011146.550:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.1.263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3901c code=0x7ffc0000 [ 144.883418][ T30] audit: type=1326 audit(1779011146.550:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.1.263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f3901c code=0x7ffc0000 [ 144.908365][ T30] audit: type=1326 audit(1779011146.550:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.1.263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f3901c code=0x7ffc0000 [ 144.936672][ T30] audit: type=1326 audit(1779011146.550:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6655 comm="syz.1.263" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=361 compat=1 ip=0xf7f3901c code=0x7ffc0000 [ 144.998014][ T6374] scsi host1: usb-storage 5-1:1.0 [ 145.039788][ T6669] binder: 6660:6669 ioctl 80085502 f54844f0 returned -22 [ 145.040280][ T6669] binder: 6660:6669 ioctl 80085502 f54844f0 returned -22 [ 145.041661][ T6387] usbhid 1-1:0.0: can't add hid device: -71 [ 145.041792][ T6387] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 145.046427][ T6669] binder: 6660:6669 ioctl 80085502 f54844f0 returned -22 [ 145.048861][ T6387] usb 1-1: USB disconnect, device number 11 [ 145.088405][ T6373] usb 4-1: USB disconnect, device number 17 [ 145.209500][ T6664] netlink: 148 bytes leftover after parsing attributes in process `syz.4.266'. [ 145.232182][ T6672] capability: warning: `syz.3.267' uses 32-bit capabilities (legacy support in use) [ 145.252405][ T29] usb 5-1: USB disconnect, device number 16 [ 146.009542][ T6387] usb 3-1: USB disconnect, device number 19 [ 146.463374][ T5704] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 146.525743][ T6697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.274'. [ 146.545024][ T6697] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.554345][ T6697] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.617389][ T6704] syz.3.276 uses obsolete (PF_INET,SOCK_PACKET) [ 146.654952][ T5704] usb 1-1: Using ep0 maxpacket: 16 [ 146.680216][ T5704] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 146.711187][ T5704] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.722412][ T6386] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 146.730174][ T5704] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 146.741920][ T6386] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 146.770613][ T5704] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 146.802303][ T5704] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.810683][ T5704] usb 1-1: Product: syz [ 146.817082][ T5704] usb 1-1: Manufacturer: syz [ 146.822024][ T5704] usb 1-1: SerialNumber: syz [ 146.833339][ T6386] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 146.852585][ T6386] usb 2-1: USB disconnect, device number 27 [ 146.866601][ T5704] usb 1-1: 0:2 : does not exist [ 146.914744][ T6386] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 146.959074][ T6386] ftdi_sio 2-1:0.0: device disconnected [ 147.031270][ T5628] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 147.104388][ T6714] netlink: 204 bytes leftover after parsing attributes in process `syz.2.280'. [ 147.115697][ T6714] netlink: 92 bytes leftover after parsing attributes in process `syz.2.280'. [ 147.191792][ T5628] usb 5-1: device descriptor read/64, error -71 [ 147.275932][ T6680] netlink: 'syz.0.271': attribute type 6 has an invalid length. [ 147.331045][ T6373] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 147.441357][ T5628] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 147.479203][ T6725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.285'. [ 147.512029][ T6373] usb 4-1: Using ep0 maxpacket: 32 [ 147.523636][ T6373] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.540498][ T6373] usb 4-1: config 0 has no interfaces? [ 147.553377][ T6373] usb 4-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 147.563561][ T6726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 147.574225][ T6373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.582391][ T6373] usb 4-1: Product: syz [ 147.586735][ T6373] usb 4-1: Manufacturer: syz [ 147.591490][ T5628] usb 5-1: device descriptor read/64, error -71 [ 147.598043][ T6373] usb 4-1: SerialNumber: syz [ 147.617392][ T6373] usb 4-1: config 0 descriptor?? [ 147.711687][ T5628] usb usb5-port1: attempt power cycle [ 147.985831][ T5704] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 148.038763][ T5704] usb 1-1: USB disconnect, device number 12 [ 148.061421][ T5628] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 148.105020][ T5628] usb 5-1: device descriptor read/8, error -71 [ 148.231173][ T6729] syzkaller0: entered promiscuous mode [ 148.240008][ T6729] syzkaller0: entered allmulticast mode [ 148.288261][ T6729] tipc: Started in network mode [ 148.295421][ T6729] tipc: Node identity 860dbbfe429a, cluster identity 4711 [ 148.307111][ T6729] tipc: Enabled bearer , priority 0 [ 148.335327][ T6729] tipc: Resetting bearer [ 148.375355][ T6728] tipc: Resetting bearer [ 148.411079][ T5628] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 148.425372][ T6728] tipc: Disabling bearer [ 148.461596][ T5628] usb 5-1: device descriptor read/8, error -71 [ 148.572116][ T5628] usb usb5-port1: unable to enumerate USB device [ 148.970047][ T6735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.288'. [ 150.093581][ T6386] usb 4-1: USB disconnect, device number 18 [ 151.161312][ T6745] netlink: 204 bytes leftover after parsing attributes in process `syz.1.293'. [ 151.180286][ T6746] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 151.183651][ T6745] netlink: 88 bytes leftover after parsing attributes in process `syz.1.293'. [ 151.371040][ T6386] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 151.381533][ T6374] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 151.532129][ T6374] usb 4-1: Using ep0 maxpacket: 32 [ 151.532269][ T6386] usb 1-1: Using ep0 maxpacket: 32 [ 151.537419][ T5628] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 151.550562][ T6373] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 151.560356][ T6386] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 151.570670][ T6386] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.572310][ T6374] usb 4-1: config 0 has an invalid interface number: 167 but max is 0 [ 151.589820][ T6386] usb 1-1: config 0 descriptor?? [ 151.603260][ T6374] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.626054][ T6374] usb 4-1: config 0 has no interface number 0 [ 151.637335][ T6374] usb 4-1: config 0 interface 167 altsetting 1 bulk endpoint 0xA has invalid maxpacket 1024 [ 151.648093][ T6374] usb 4-1: config 0 interface 167 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 151.658296][ T6374] usb 4-1: config 0 interface 167 altsetting 1 bulk endpoint 0x6 has invalid maxpacket 0 [ 151.673591][ T6374] usb 4-1: config 0 interface 167 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 151.687173][ T6374] usb 4-1: config 0 interface 167 has no altsetting 0 [ 151.701280][ T6374] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=20.63 [ 151.713510][ T6373] usb 3-1: Using ep0 maxpacket: 32 [ 151.720521][ T6374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.729455][ T5628] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 151.742368][ T5628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.750870][ T6374] usb 4-1: Product: syz [ 151.756393][ T6374] usb 4-1: Manufacturer: syz [ 151.764711][ T6373] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 151.776679][ T6374] usb 4-1: SerialNumber: syz [ 151.784492][ T5628] usb 2-1: config 0 descriptor?? [ 151.790502][ T6373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.806902][ T6386] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 151.812879][ T5628] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 151.820447][ T6373] usb 3-1: Product: syz [ 151.827480][ T6374] usb 4-1: config 0 descriptor?? [ 151.834405][ T6373] usb 3-1: Manufacturer: syz [ 151.839558][ T6373] usb 3-1: SerialNumber: syz [ 151.844951][ T6744] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 151.855965][ T6386] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 151.869923][ T6386] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 151.871893][ T6373] usb 3-1: config 0 descriptor?? [ 151.890050][ T6386] usb 1-1: media controller created [ 151.919876][ T6386] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 152.105838][ T6386] az6027: usb out operation failed. (-71) [ 152.122774][ T6386] az6027: usb out operation failed. (-71) [ 152.135501][ T6386] stb0899_attach: Driver disabled by Kconfig [ 152.152159][ T6386] az6027: no front-end attached [ 152.152159][ T6386] [ 152.161662][ T6386] az6027: usb out operation failed. (-71) [ 152.168184][ T6386] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 152.200181][ T6386] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input17 [ 152.227894][ T6386] dvb-usb: schedule remote query interval to 400 msecs. [ 152.235839][ T5628] cpia1 2-1:0.0: unexpected state after lo power cmd: c2 [ 152.250660][ T6386] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 152.279448][ T6386] usb 1-1: USB disconnect, device number 13 [ 152.357164][ T6386] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 152.448134][ T5628] gspca_cpia1: usb_control_msg 01, error -71 [ 152.462311][ T5628] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 152.500435][ T5628] usb 2-1: USB disconnect, device number 28 [ 152.973076][ T6373] airspy 3-1:0.0: usb_control_msg() failed -110 request 09 [ 153.027329][ T6373] airspy 3-1:0.0: Could not detect board [ 153.077906][ T6373] airspy 3-1:0.0: probe with driver airspy failed with error -110 [ 153.148881][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 153.360553][ T6782] netlink: 204 bytes leftover after parsing attributes in process `syz.4.303'. [ 153.386472][ T6782] netlink: 92 bytes leftover after parsing attributes in process `syz.4.303'. [ 153.430405][ T6778] fuse: Unknown parameter '0xffffffffffffffff' [ 153.482161][ T6373] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 153.547191][ T6784] netlink: 204 bytes leftover after parsing attributes in process `syz.4.304'. [ 153.565680][ T6784] netlink: 88 bytes leftover after parsing attributes in process `syz.4.304'. [ 153.664237][ T6373] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 153.682969][ T6373] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 153.714400][ T6373] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 153.738461][ T6373] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 153.776255][ T6373] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 153.788119][ T6373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 153.797436][ T6373] usb 1-1: SerialNumber: syz [ 154.159397][ T6374] usbtest 4-1:0.167: couldn't get endpoints, -22 [ 154.198568][ T6374] usbtest 4-1:0.167: probe with driver usbtest failed with error -22 [ 154.236342][ T6373] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 154.273609][ T6374] usb 4-1: USB disconnect, device number 19 [ 154.293058][ T6373] usb 1-1: USB disconnect, device number 14 [ 154.342413][ T5628] usb 3-1: USB disconnect, device number 20 [ 154.589909][ T6808] gtp0: entered promiscuous mode [ 154.589955][ T6808] gtp0: entered allmulticast mode [ 154.649267][ T6815] loop0: detected capacity change from 0 to 7 [ 155.412079][ T6815] Dev loop0: unable to read RDB block 7 [ 155.419464][ T6815] loop0: unable to read partition table [ 155.426952][ T6815] loop0: partition table beyond EOD, truncated [ 155.442235][ T6815] loop_reread_partitions: partition scan of loop0 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 155.678908][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 155.678928][ T30] audit: type=1326 audit(1779011157.610:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.0.314" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x0 [ 155.748885][ T6818] tipc: Enabled bearer , priority 5 [ 155.863965][ T6823] netlink: 204 bytes leftover after parsing attributes in process `syz.3.316'. [ 155.871053][ T6374] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 155.881641][ T6823] netlink: 88 bytes leftover after parsing attributes in process `syz.3.316'. [ 156.031176][ T6374] usb 3-1: Using ep0 maxpacket: 8 [ 156.039445][ T6374] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 156.047479][ T6374] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 156.077000][ T6374] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 156.106449][ T6374] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.140353][ T6374] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.177916][ T6374] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.210326][ T6374] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 156.258167][ T6374] usb 3-1: config 168 interface 0 has no altsetting 0 [ 156.282664][ T6374] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 156.293453][ T6374] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 156.315168][ T6374] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 156.341412][ T6374] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.353361][ T6374] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.364655][ T6374] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.376486][ T6374] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 156.391279][ T6374] usb 3-1: config 168 interface 0 has no altsetting 0 [ 156.404808][ T6374] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 156.429454][ T6374] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 156.460464][ T6374] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 156.503472][ T6374] usb 3-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 156.537484][ T6374] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 156.556756][ T6374] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 156.570862][ T6374] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 156.588271][ T6374] usb 3-1: config 168 interface 0 has no altsetting 0 [ 156.627674][ T6374] usb 3-1: string descriptor 0 read error: -22 [ 156.638350][ T6374] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 156.656008][ T6374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.683021][ T6374] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 156.998948][ T6374] usb 3-1: USB disconnect, device number 21 [ 157.350092][ T6840] FAULT_INJECTION: forcing a failure. [ 157.350092][ T6840] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.381134][ T6840] CPU: 1 UID: 0 PID: 6840 Comm: syz.4.321 Tainted: G L syzkaller #0 PREEMPT(full) [ 157.381167][ T6840] Tainted: [L]=SOFTLOCKUP [ 157.381173][ T6840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 157.381184][ T6840] Call Trace: [ 157.381192][ T6840] [ 157.381201][ T6840] dump_stack_lvl+0xe8/0x150 [ 157.381230][ T6840] should_fail_ex+0x412/0x560 [ 157.381261][ T6840] _copy_from_user+0x2d/0xb0 [ 157.381290][ T6840] get_compat_msghdr+0xb3/0x4c0 [ 157.381322][ T6840] ? _parse_integer_limit+0x1ae/0x1f0 [ 157.381345][ T6840] ? __pfx_get_compat_msghdr+0x10/0x10 [ 157.381375][ T6840] ? kstrtoull+0x12f/0x1d0 [ 157.381405][ T6840] ___sys_sendmsg+0x201/0x360 [ 157.381437][ T6840] ? __lock_acquire+0x6b5/0x2cf0 [ 157.381462][ T6840] ? __pfx____sys_sendmsg+0x10/0x10 [ 157.381490][ T6840] ? get_pid_task+0x20/0x1f0 [ 157.381514][ T6840] ? get_pid_task+0x20/0x1f0 [ 157.381535][ T6840] ? get_pid_task+0x20/0x1f0 [ 157.381586][ T6840] ? __fget_files+0x2a/0x420 [ 157.381609][ T6840] ? __fget_files+0x3a0/0x420 [ 157.381641][ T6840] __sys_sendmsg+0x183/0x260 [ 157.381671][ T6840] ? __pfx___sys_sendmsg+0x10/0x10 [ 157.381730][ T6840] __do_fast_syscall_32+0x229/0x6e0 [ 157.381750][ T6840] ? do_fast_syscall_32+0x33/0x70 [ 157.381766][ T6840] ? lockdep_hardirqs_on+0x7a/0x110 [ 157.381792][ T6840] ? asm_int80_emulation+0x1a/0x20 [ 157.381810][ T6840] ? do_int80_emulation+0x286/0x530 [ 157.381826][ T6840] ? trace_irq_disable+0x3b/0x140 [ 157.381857][ T6840] do_fast_syscall_32+0x33/0x70 [ 157.381875][ T6840] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 157.381898][ T6840] RIP: 0023:0xf7fc801c [ 157.381917][ T6840] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 157.381933][ T6840] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 157.381955][ T6840] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800002c0 [ 157.381968][ T6840] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 157.381979][ T6840] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 157.381990][ T6840] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 157.382001][ T6840] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 157.382030][ T6840] [ 157.965247][ T4994] Dev loop0: unable to read RDB block 7 [ 157.992057][ T4994] loop0: unable to read partition table [ 158.020322][ T4994] loop0: partition table beyond EOD, truncated [ 158.401045][ T6374] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 158.627327][ T6374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 158.658558][ T6374] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.685462][ T6374] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 158.711069][ T6374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.733260][ T6374] usb 5-1: config 0 descriptor?? [ 159.096561][ T6859] netlink: 204 bytes leftover after parsing attributes in process `syz.3.327'. [ 159.184836][ T6374] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 159.204060][ T6374] cm6533_jd 0003:0D8C:0022.000A: unknown main item tag 0x0 [ 159.240150][ T6374] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000A/input/input18 [ 159.380189][ T6374] cm6533_jd 0003:0D8C:0022.000A: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 159.400126][ T6850] netlink: 16 bytes leftover after parsing attributes in process `syz.4.325'. [ 159.500439][ T6868] syzkaller0: entered promiscuous mode [ 159.521719][ T6868] syzkaller0: entered allmulticast mode [ 159.522144][ T6850] input: syz1 as /devices/virtual/input/input19 [ 159.601806][ T6868] 0: reclassify loop, rule prio 0, protocol 800 [ 159.805573][ T29] usb 5-1: USB disconnect, device number 21 [ 160.063165][ T6883] input: syz0 as /devices/virtual/input/input20 [ 160.451159][ T6386] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 160.493016][ T6896] netlink: 72 bytes leftover after parsing attributes in process `syz.4.340'. [ 160.537343][ T6896] netlink: 'syz.4.340': attribute type 1 has an invalid length. [ 160.571076][ T6374] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 160.633979][ T6386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.671722][ T6386] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.706815][ T6386] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.737602][ T6374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.761004][ T6386] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.793622][ T6374] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.798731][ T6386] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.826604][ T6374] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 160.841547][ T6900] netlink: 'syz.4.341': attribute type 1 has an invalid length. [ 160.852943][ T6386] usb 4-1: config 0 descriptor?? [ 160.865164][ T6374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.904168][ T6374] usb 2-1: config 0 descriptor?? [ 161.118022][ T6902] netlink: 204 bytes leftover after parsing attributes in process `syz.4.342'. [ 161.357856][ T6374] pyra 0003:1E7D:2CF6.000C: unknown main item tag 0x2 [ 161.364243][ T6386] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 161.395247][ T30] audit: type=1326 audit(1779011163.330:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc801c code=0x7ffc0000 [ 161.447010][ T30] audit: type=1326 audit(1779011163.370:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc801c code=0x7ffc0000 [ 161.472232][ T6374] pyra 0003:1E7D:2CF6.000C: hidraw1: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.1-1/input0 [ 161.514648][ T30] audit: type=1326 audit(1779011163.370:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc801c code=0x7ffc0000 [ 161.546563][ T30] audit: type=1326 audit(1779011163.370:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc801c code=0x7ffc0000 [ 161.597848][ T30] audit: type=1326 audit(1779011163.370:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc801c code=0x7ffc0000 [ 161.658483][ T6386] usb 2-1: USB disconnect, device number 29 [ 161.666663][ T30] audit: type=1326 audit(1779011163.370:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7fc801c code=0x7ffc0000 [ 161.737860][ T30] audit: type=1326 audit(1779011163.370:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc801c code=0x7ffc0000 [ 161.845740][ T30] audit: type=1326 audit(1779011163.370:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc801c code=0x7ffc0000 [ 161.852803][ T6909] fido_id[6909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 161.928603][ C0] plantronics 0003:047F:FFFF.000B: hid_field_extract() called with n (132) > 32! (syz.3.338) [ 161.959500][ T30] audit: type=1326 audit(1779011163.370:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fc801c code=0x7ffc0000 [ 161.986340][ T5628] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 161.998037][ T30] audit: type=1326 audit(1779011163.370:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6906 comm="syz.4.344" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=3 compat=1 ip=0xf7fc801c code=0x7ffc0000 [ 162.147872][ T5628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.179965][ T5628] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.190495][ T5628] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 162.200688][ T5628] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.223289][ T5628] usb 5-1: config 0 descriptor?? [ 162.257082][ T6373] usb 4-1: USB disconnect, device number 20 [ 162.562876][ T6929] netlink: 76 bytes leftover after parsing attributes in process `syz.2.350'. [ 162.657382][ T5628] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 162.678353][ T5628] cm6533_jd 0003:0D8C:0022.000D: unknown main item tag 0x0 [ 162.713694][ T5628] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.000D/input/input21 [ 162.741419][ T5628] cm6533_jd 0003:0D8C:0022.000D: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 162.771143][ T6386] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 162.895984][ T6907] netlink: 44 bytes leftover after parsing attributes in process `syz.4.344'. [ 162.920215][ T6907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.934037][ T6386] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 162.934341][ T6907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.957731][ T6386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 162.980633][ T6386] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 162.992760][ T6386] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 163.014054][ T6386] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 163.027677][ T6386] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.039404][ T6373] usb 5-1: USB disconnect, device number 22 [ 163.041558][ T6386] usb 2-1: config 0 descriptor?? [ 163.094551][ T5628] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 163.271009][ T5628] usb 1-1: Using ep0 maxpacket: 8 [ 163.281713][ T5628] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 163.298075][ T5628] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 163.321771][ T5628] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 163.344835][ T5628] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 163.356405][ T5628] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 163.368557][ T5628] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 163.385573][ T5628] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 163.401860][ T5628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.490325][ T6932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.504241][ T6386] plantronics 0003:047F:FFFF.000E: ignoring exceeding usage max [ 163.526715][ T6932] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.559490][ T6386] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 163.620509][ T6386] usb 2-1: USB disconnect, device number 30 [ 163.636911][ T5628] usb 1-1: usb_control_msg returned -32 [ 163.664233][ T5628] usbtmc 1-1:16.0: can't read capabilities [ 163.790232][ T6944] netlink: 204 bytes leftover after parsing attributes in process `syz.1.354'. [ 163.801331][ T6942] fido_id[6942]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 164.000764][ C1] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 164.014438][ T6950] usbtmc 1-1:16.0: Unable to send data, error -71 [ 164.381241][ T5704] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 164.563691][ T5704] usb 4-1: Using ep0 maxpacket: 16 [ 164.579740][ T5704] usb 4-1: config index 0 descriptor too short (expected 67, got 36) [ 164.596415][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 164.614996][ T5704] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 164.625929][ T5704] usb 4-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 164.638225][ T5704] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.669611][ T5704] usb 4-1: config 0 descriptor?? [ 164.895719][ T6954] netlink: 12 bytes leftover after parsing attributes in process `syz.3.357'. [ 164.911306][ T29] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 164.923069][ T6954] netlink: 32 bytes leftover after parsing attributes in process `syz.3.357'. [ 165.081099][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 165.097137][ T29] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 165.115679][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 165.130504][ T29] usb 5-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.40 [ 165.145704][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.156799][ T29] usb 5-1: Product: ᅀỨ䟃팓ⱗ偕ⓢ㎪ṃ弪칯⥾挚홠䠈㇔츟㱋伯䙾慉꿹톌댈ರ❕奉ꢩ [ 165.169314][ T5704] usbhid 4-1:0.0: can't add hid device: -71 [ 165.176916][ T29] usb 5-1: Manufacturer: Ђ [ 165.181990][ T5704] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 165.191967][ T29] usb 5-1: SerialNumber:   [ 165.205029][ T5704] usb 4-1: USB disconnect, device number 21 [ 165.581145][ T6387] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 165.740222][ T6387] usb 2-1: unable to get BOS descriptor or descriptor too short [ 165.765825][ T6387] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 165.797889][ T6387] usb 2-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 165.814424][ T6387] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.836912][ T6387] usb 2-1: Product: syz [ 165.848942][ T6374] usb 1-1: USB disconnect, device number 15 [ 165.849617][ T6387] usb 2-1: Manufacturer: syz [ 165.879958][ T6387] usb 2-1: SerialNumber: syz [ 166.179743][ T6981] netlink: 27 bytes leftover after parsing attributes in process `syz.0.365'. [ 166.198950][ T6967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.220819][ T6967] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 166.299860][ T6387] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 166.323315][ T6387] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 166.333238][ T6387] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 166.347726][ T6387] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 166.357929][ T6387] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 166.372441][ T6387] usb 2-1: 2:1 : no or invalid class specific endpoint descriptor [ 166.386006][ T6387] usb 2-1: 2:1 : unknown format tag 0x4 is detected. processed as MPEG. [ 166.398825][ T6387] usb 2-1: found format II with max.bitrate = 4, frame size=7372 [ 166.407748][ T6387] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 166.424907][ T6984] Cannot find map_set index 2 as target [ 166.546358][ T6387] usb 2-1: USB disconnect, device number 31 [ 166.727545][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.235622][ T6984] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.253580][ T6984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.313860][ T6984] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 167.343622][ T6984] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.357129][ T6984] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 167.378996][ T6984] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 167.398605][ T6984] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.410032][ T6984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.436305][ T6984] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 167.478910][ T6984] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.485905][ T6984] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.501978][ T6984] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 167.514925][ T6984] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 167.522586][ T6984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 167.536940][ T6984] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 167.774313][ T7004] x_tables: duplicate underflow at hook 3 [ 167.843255][ T5628] hid-generic 0FED:0800:0004.000F: unknown main item tag 0x0 [ 167.863833][ T5628] hid-generic 0FED:0800:0004.000F: unknown main item tag 0x0 [ 167.884531][ T5628] hid-generic 0FED:0800:0004.000F: unknown main item tag 0x0 [ 167.898197][ T5628] hid-generic 0FED:0800:0004.000F: unknown main item tag 0x0 [ 167.899903][ T7007] kvm: pic: single mode not supported [ 167.906079][ T7007] kvm: pic: level sensitive irq not supported [ 167.909088][ T5628] hid-generic 0FED:0800:0004.000F: unknown main item tag 0x0 [ 167.946075][ T7007] kvm: pic: non byte read [ 167.949335][ T5628] hid-generic 0FED:0800:0004.000F: unknown main item tag 0x0 [ 167.962064][ T7007] kvm: pic: non byte read [ 167.969376][ T7007] kvm: pic: non byte read [ 167.970289][ T5628] hid-generic 0FED:0800:0004.000F: unknown main item tag 0x0 [ 167.978675][ T7007] kvm: pic: non byte read [ 167.989122][ T7007] kvm: pic: single mode not supported [ 167.989142][ T7007] kvm: pic: level sensitive irq not supported [ 167.994880][ T7007] kvm: pic: non byte read [ 168.005486][ T5628] hid-generic 0FED:0800:0004.000F: unknown main item tag 0x0 [ 168.005521][ T5628] hid-generic 0FED:0800:0004.000F: unknown main item tag 0x0 [ 168.025127][ T7007] kvm: pic: non byte read [ 168.030525][ T7007] kvm: pic: level sensitive irq not supported [ 168.030755][ T7007] kvm: pic: non byte read [ 168.046137][ T7014] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 168.056771][ T5628] hid-generic 0FED:0800:0004.000F: unknown main item tag 0x0 [ 168.073301][ T7007] kvm: pic: single mode not supported [ 168.073350][ T7007] kvm: pic: level sensitive irq not supported [ 168.094931][ T7007] kvm: pic: non byte read [ 168.110354][ T7007] kvm: pic: non byte read [ 168.133476][ T5628] hid-generic 0FED:0800:0004.000F: hidraw0: HID vffffff.fa Device [syz1] on syz1 [ 168.170216][ T29] usbhid 5-1:1.0: can't add hid device: -71 [ 168.194351][ T29] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 168.267596][ T29] usb 5-1: USB disconnect, device number 23 [ 168.364013][ T7015] fido_id[7015]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 168.571052][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 168.591019][ T5628] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 168.761417][ T5628] usb 4-1: Using ep0 maxpacket: 8 [ 168.771376][ T29] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 168.774955][ T5628] usb 4-1: config 1 interface 0 has no altsetting 0 [ 168.803102][ T5628] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.40 [ 168.834128][ T5628] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.860013][ T5628] usb 4-1: Product: syz [ 168.875893][ T5628] usb 4-1: Manufacturer: syz [ 168.887601][ T5628] usb 4-1: SerialNumber: syz [ 168.942966][ T29] usb 3-1: config 0 has no interfaces? [ 168.957866][ T29] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 168.977532][ T29] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 168.998031][ T29] usb 3-1: Product: syz [ 169.008823][ T7034] syzkaller0: entered promiscuous mode [ 169.017873][ T29] usb 3-1: Manufacturer: syz [ 169.032623][ T29] usb 3-1: config 0 descriptor?? [ 169.037985][ T7034] syzkaller0: entered allmulticast mode [ 169.062263][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.383'. [ 169.081174][ T7034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.383'. [ 169.102802][ T7034] 0: reclassify loop, rule prio 0, protocol 800 [ 169.155145][ T5628] usbhid 4-1:1.0: can't add hid device: -71 [ 169.182460][ T5628] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 169.216020][ T5628] usb 4-1: USB disconnect, device number 22 [ 169.266100][ T6385] usb 3-1: USB disconnect, device number 22 [ 169.371417][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 169.451430][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 169.531108][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.531288][ T5643] Bluetooth: hci2: command 0x0c1a tx timeout [ 169.676059][ T7047] sg_write: data in/out 431070/658 bytes for SCSI command 0x0-- guessing data in; [ 169.676059][ T7047] program syz.0.388 not setting count and/or reply_len properly [ 170.291068][ T5628] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 170.464953][ T5628] usb 3-1: Using ep0 maxpacket: 32 [ 170.482966][ T5628] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.517469][ T5628] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.543956][ T5628] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 170.560385][ T5628] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 170.580403][ T7065] Cannot find set identified by id 7 to match [ 170.586697][ T5628] usb 3-1: Product: syz [ 170.596634][ T5628] usb 3-1: Manufacturer: syz [ 170.620553][ T5628] hub 3-1:4.0: USB hub found [ 170.653906][ T5643] Bluetooth: hci1: command 0x0c1a tx timeout [ 170.813296][ T5628] hub 3-1:4.0: 2 ports detected [ 170.870293][ T7074] netlink: 'syz.1.399': attribute type 61 has an invalid length. [ 170.918271][ T7074] netlink: 'syz.1.399': attribute type 61 has an invalid length. [ 171.029390][ T7055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.042288][ T7055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.291068][ T6372] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 171.452813][ T5643] Bluetooth: hci0: command 0x0c1a tx timeout [ 171.471100][ T6372] usb 4-1: Using ep0 maxpacket: 16 [ 171.491200][ T6372] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 171.513019][ T6372] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 171.531292][ T5643] Bluetooth: hci3: command 0x0c1a tx timeout [ 171.558435][ T6372] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 171.581824][ T6372] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.600327][ T6372] usb 4-1: Product: syz [ 171.601049][ T6385] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 171.604694][ T6372] usb 4-1: Manufacturer: ीⴖﵠ챓梅୚⏥墹㷯쮻㷶뒙ᅌ鹰ꃒﰪ憊긜 [ 171.617942][ T7097] FAULT_INJECTION: forcing a failure. [ 171.617942][ T7097] name failslab, interval 1, probability 0, space 0, times 0 [ 171.622120][ T5643] Bluetooth: hci2: command 0x0c1a tx timeout [ 171.640186][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout [ 171.642581][ T6372] usb 4-1: SerialNumber: syz [ 171.671919][ T7097] CPU: 1 UID: 0 PID: 7097 Comm: syz.1.406 Tainted: G L syzkaller #0 PREEMPT(full) [ 171.671948][ T7097] Tainted: [L]=SOFTLOCKUP [ 171.671955][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 171.671965][ T7097] Call Trace: [ 171.671972][ T7097] [ 171.671981][ T7097] dump_stack_lvl+0xe8/0x150 [ 171.672009][ T7097] should_fail_ex+0x412/0x560 [ 171.672040][ T7097] should_failslab+0xa8/0x100 [ 171.672071][ T7097] __kmalloc_cache_noprof+0x88/0x660 [ 171.672098][ T7097] ? ima_add_digest_entry+0x56/0x350 [ 171.672133][ T7097] ima_add_digest_entry+0x56/0x350 [ 171.672156][ T7097] ? ima_add_template_entry+0x20a/0x830 [ 171.672186][ T7097] ima_add_template_entry+0x5f6/0x830 [ 171.672216][ T7097] ? ima_add_template_entry+0x20a/0x830 [ 171.672243][ T7097] ? ima_alloc_init_template+0x183/0x700 [ 171.672263][ T7097] ? __pfx_ima_add_template_entry+0x10/0x10 [ 171.672293][ T7097] ? ima_calc_field_array_hash+0x439/0x4b0 [ 171.672321][ T7097] ima_store_measurement+0x2b5/0x670 [ 171.672351][ T7097] ? __pfx_ima_store_measurement+0x10/0x10 [ 171.672369][ T7097] ? ima_d_path+0x16b/0x230 [ 171.672407][ T7097] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 171.672441][ T7097] process_measurement+0x13e5/0x1c80 [ 171.672480][ T7097] ? __pfx_process_measurement+0x10/0x10 [ 171.672499][ T7097] ? aa_file_perm+0x192/0x15e0 [ 171.672563][ T7097] ? get_pid_task+0x20/0x1f0 [ 171.672602][ T7097] ima_file_mmap+0x1b0/0x200 [ 171.672632][ T7097] ? __pfx_ima_file_mmap+0x10/0x10 [ 171.672669][ T7097] ? apparmor_mmap_file+0x2da/0x3e0 [ 171.672694][ T7097] security_mmap_file+0x773/0xa20 [ 171.672716][ T7097] vm_mmap_pgoff+0x134/0x4f0 [ 171.672743][ T7097] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 171.672764][ T7097] ? __fget_files+0x2a/0x420 [ 171.672790][ T7097] ? __fget_files+0x2a/0x420 [ 171.672812][ T7097] ? __fget_files+0x2a/0x420 [ 171.672840][ T7097] ksys_mmap_pgoff+0x51e/0x760 [ 171.672869][ T7097] __do_fast_syscall_32+0x229/0x6e0 [ 171.672888][ T7097] ? do_fast_syscall_32+0x33/0x70 [ 171.672904][ T7097] ? lockdep_hardirqs_on+0x7a/0x110 [ 171.672929][ T7097] ? asm_int80_emulation+0x1a/0x20 [ 171.672947][ T7097] ? do_int80_emulation+0x286/0x530 [ 171.672963][ T7097] ? trace_irq_disable+0x3b/0x140 [ 171.672993][ T7097] do_fast_syscall_32+0x33/0x70 [ 171.673011][ T7097] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 171.673033][ T7097] RIP: 0023:0xf7f3901c [ 171.673052][ T7097] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 171.673068][ T7097] RSP: 002b:00000000f53f650c EFLAGS: 00000206 ORIG_RAX: 00000000000000c0 [ 171.673087][ T7097] RAX: ffffffffffffffda RBX: 0000000080000000 RCX: 0000000000002000 [ 171.673099][ T7097] RDX: 000000005e114b6f RSI: 0000000000000012 RDI: 0000000000000003 [ 171.673111][ T7097] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 171.673122][ T7097] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 171.673133][ T7097] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 171.673162][ T7097] [ 171.673282][ T7097] ima: OUT OF MEMORY ERROR creating queue entry [ 171.770404][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.408'. [ 171.831155][ T30] kauditd_printk_skb: 164 callbacks suppressed [ 171.831173][ T30] audit: type=1804 audit(1779011173.750:277): pid=7097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.1.406" name="/newroot/78/cpuacct.usage_percpu" dev="tmpfs" ino=413 res=0 errno=0 [ 171.871564][ T5628] hub 3-1:4.0: hub_hub_status failed (err = -32) [ 171.876284][ T6385] usb 5-1: device descriptor read/64, error -71 [ 171.937140][ T5628] hub 3-1:4.0: config failed, can't get hub status (err -32) [ 172.107163][ T6372] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 172.122515][ T6372] cdc_ncm 4-1:1.0: bind() failure [ 172.147153][ T6372] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 172.180055][ T6372] cdc_ncm 4-1:1.1: bind() failure [ 172.181797][ T6385] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 172.235877][ T6372] usb 4-1: USB disconnect, device number 23 [ 172.332890][ T6385] usb 5-1: device descriptor read/64, error -71 [ 172.441310][ T6385] usb usb5-port1: attempt power cycle [ 172.731820][ T5632] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.781735][ T6385] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 172.801271][ T7117] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.816786][ T7117] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.832617][ T6385] usb 5-1: device descriptor read/8, error -71 [ 172.883298][ T7117] gtp0: left promiscuous mode [ 173.067598][ T30] audit: type=1326 audit(1779011175.000:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 173.094881][ T6385] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 173.112719][ T30] audit: type=1326 audit(1779011175.040:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 173.138153][ T7127] FAULT_INJECTION: forcing a failure. [ 173.138153][ T7127] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.152174][ T7127] CPU: 1 UID: 0 PID: 7127 Comm: syz.0.417 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.152207][ T7127] Tainted: [L]=SOFTLOCKUP [ 173.152213][ T7127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.152224][ T7127] Call Trace: [ 173.152232][ T7127] [ 173.152239][ T7127] dump_stack_lvl+0xe8/0x150 [ 173.152273][ T7127] should_fail_ex+0x412/0x560 [ 173.152304][ T7127] _copy_to_user+0x31/0xb0 [ 173.152334][ T7127] simple_read_from_buffer+0xe1/0x170 [ 173.152362][ T7127] proc_fail_nth_read+0x1bb/0x230 [ 173.152388][ T7127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.152414][ T7127] ? rw_verify_area+0x2a6/0x4d0 [ 173.152439][ T7127] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 173.152463][ T7127] vfs_read+0x20c/0xa70 [ 173.152495][ T7127] ? __pfx___mutex_lock+0x10/0x10 [ 173.152525][ T7127] ? __pfx_vfs_read+0x10/0x10 [ 173.152553][ T7127] ? __fget_files+0x2a/0x420 [ 173.152581][ T7127] ? __fget_files+0x3a0/0x420 [ 173.152602][ T7127] ? __fget_files+0x2a/0x420 [ 173.152634][ T7127] ksys_read+0x150/0x270 [ 173.152672][ T7127] ? __pfx_ksys_read+0x10/0x10 [ 173.152704][ T7127] ? __secure_computing+0xe1/0x2a0 [ 173.152730][ T7127] do_int80_emulation+0x181/0x530 [ 173.152749][ T7127] ? asm_int80_emulation+0x1a/0x20 [ 173.152768][ T7127] ? clear_bhb_loop+0x40/0x90 [ 173.152786][ T7127] ? clear_bhb_loop+0x40/0x90 [ 173.152810][ T7127] asm_int80_emulation+0x1a/0x20 [ 173.152828][ T7127] RIP: 0023:0xf71e61ab [ 173.152846][ T7127] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 173.152863][ T7127] RSP: 002b:00000000f54a64bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 173.152884][ T7127] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54a65d0 [ 173.152897][ T7127] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 173.152908][ T7127] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.152919][ T7127] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 173.152930][ T7127] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.152961][ T7127] [ 173.154459][ T6385] usb 5-1: device descriptor read/8, error -71 [ 173.221615][ T6372] usb 3-1: USB disconnect, device number 23 [ 173.227974][ T30] audit: type=1326 audit(1779011175.040:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 173.540182][ T7129] tipc: Can't bind to reserved service type 0 [ 173.541527][ T6385] usb usb5-port1: unable to enumerate USB device [ 173.565165][ T5632] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.572089][ T7129] netlink: 'syz.2.418': attribute type 1 has an invalid length. [ 173.587592][ T30] audit: type=1326 audit(1779011175.040:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 173.588312][ T7136] FAULT_INJECTION: forcing a failure. [ 173.588312][ T7136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.612774][ T5632] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.631179][ T30] audit: type=1326 audit(1779011175.040:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 173.658467][ T30] audit: type=1326 audit(1779011175.040:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 173.684604][ T30] audit: type=1326 audit(1779011175.040:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7fe401c code=0x7ffc0000 [ 173.708841][ T5632] Bluetooth: hci4: command 0x0c1a tx timeout [ 173.715255][ T5632] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.725365][ T30] audit: type=1326 audit(1779011175.080:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf71e61ab code=0x7ffc0000 [ 173.751711][ T7136] CPU: 1 UID: 0 PID: 7136 Comm: syz.0.420 Tainted: G L syzkaller #0 PREEMPT(full) [ 173.751742][ T7136] Tainted: [L]=SOFTLOCKUP [ 173.751748][ T7136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 173.751759][ T7136] Call Trace: [ 173.751767][ T7136] [ 173.751774][ T7136] dump_stack_lvl+0xe8/0x150 [ 173.751803][ T7136] should_fail_ex+0x412/0x560 [ 173.751833][ T7136] _copy_from_user+0x2d/0xb0 [ 173.751862][ T7136] cmsghdr_from_user_compat_to_kern+0x3a4/0x810 [ 173.751890][ T7136] ? __might_fault+0xaf/0x130 [ 173.751923][ T7136] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 173.751962][ T7136] ____sys_sendmsg+0x220/0x9f0 [ 173.751996][ T7136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 173.752027][ T7136] ? kstrtoull+0x12f/0x1d0 [ 173.752056][ T7136] ___sys_sendmsg+0x2a5/0x360 [ 173.752081][ T7136] ? __lock_acquire+0x6b5/0x2cf0 [ 173.752111][ T7136] ? __pfx____sys_sendmsg+0x10/0x10 [ 173.752138][ T7136] ? get_pid_task+0x20/0x1f0 [ 173.752161][ T7136] ? get_pid_task+0x20/0x1f0 [ 173.752182][ T7136] ? get_pid_task+0x20/0x1f0 [ 173.752232][ T7136] ? __fget_files+0x2a/0x420 [ 173.752252][ T7136] ? __fget_files+0x3a0/0x420 [ 173.752283][ T7136] __sys_sendmsg+0x183/0x260 [ 173.752313][ T7136] ? __pfx___sys_sendmsg+0x10/0x10 [ 173.752359][ T7136] __do_fast_syscall_32+0x229/0x6e0 [ 173.752378][ T7136] ? do_fast_syscall_32+0x33/0x70 [ 173.752405][ T7136] ? lockdep_hardirqs_on+0x7a/0x110 [ 173.752431][ T7136] ? asm_int80_emulation+0x1a/0x20 [ 173.752449][ T7136] ? do_int80_emulation+0x286/0x530 [ 173.752465][ T7136] ? trace_irq_disable+0x3b/0x140 [ 173.752495][ T7136] do_fast_syscall_32+0x33/0x70 [ 173.752511][ T7136] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 173.752533][ T7136] RIP: 0023:0xf7fe401c [ 173.752551][ T7136] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 173.752568][ T7136] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 173.752588][ T7136] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080002680 [ 173.752600][ T7136] RDX: 0000000020000800 RSI: 0000000000000000 RDI: 0000000000000000 [ 173.752611][ T7136] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 173.752622][ T7136] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 173.752633][ T7136] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 173.752662][ T7136] [ 174.037151][ T7129] bond1: entered promiscuous mode [ 174.043101][ T7129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 174.051079][ T30] audit: type=1326 audit(1779011175.080:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.417" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf71e61ab code=0x7ffc0000 [ 174.449551][ T5628] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 174.616386][ T5628] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 174.624902][ T5628] usb 1-1: config 0 has no interface number 0 [ 174.635889][ T5628] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 174.646509][ T5628] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.654993][ T5628] usb 1-1: Product: syz [ 174.662603][ T5628] usb 1-1: Manufacturer: syz [ 174.667372][ T5628] usb 1-1: SerialNumber: syz [ 174.672180][ T6374] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 174.685673][ T5628] usb 1-1: config 0 descriptor?? [ 174.688809][ T7156] FAULT_INJECTION: forcing a failure. [ 174.688809][ T7156] name failslab, interval 1, probability 0, space 0, times 0 [ 174.694830][ T5628] usb 1-1: selecting invalid altsetting 1 [ 174.707426][ T7156] CPU: 1 UID: 0 PID: 7156 Comm: syz.4.428 Tainted: G L syzkaller #0 PREEMPT(full) [ 174.707454][ T7156] Tainted: [L]=SOFTLOCKUP [ 174.707460][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 174.707470][ T7156] Call Trace: [ 174.707477][ T7156] [ 174.707485][ T7156] dump_stack_lvl+0xe8/0x150 [ 174.707510][ T7156] should_fail_ex+0x412/0x560 [ 174.707538][ T7156] should_failslab+0xa8/0x100 [ 174.707564][ T7156] __kmalloc_cache_noprof+0x88/0x660 [ 174.707586][ T7156] ? __sctp_v6_cmp_addr+0x1e6/0x510 [ 174.707611][ T7156] ? sctp_add_bind_addr+0x8c/0x370 [ 174.707640][ T7156] sctp_add_bind_addr+0x8c/0x370 [ 174.707667][ T7156] sctp_copy_local_addr_list+0x314/0x4f0 [ 174.707694][ T7156] ? sctp_copy_local_addr_list+0xa4/0x4f0 [ 174.707718][ T7156] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 174.707750][ T7156] ? sctp_v4_is_any+0x35/0x60 [ 174.707765][ T7156] ? sctp_copy_one_addr+0x93/0x360 [ 174.707792][ T7156] sctp_bind_addr_copy+0xb3/0x3c0 [ 174.707817][ T7156] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 174.707841][ T7156] sctp_connect_new_asoc+0x2ff/0x6b0 [ 174.707863][ T7156] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 174.707884][ T7156] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 174.707903][ T7156] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 174.707919][ T7156] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 174.707939][ T7156] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 174.707961][ T7156] ? security_sctp_bind_connect+0x7e/0x2c0 [ 174.707983][ T7156] sctp_sendmsg+0x1576/0x2c50 [ 174.708017][ T7156] ? __pfx_sctp_sendmsg+0x10/0x10 [ 174.708039][ T7156] ? aa_sk_perm+0x6d5/0x900 [ 174.708061][ T7156] ? __might_fault+0xaf/0x130 [ 174.708086][ T7156] ? __pfx_aa_sk_perm+0x10/0x10 [ 174.708109][ T7156] ? sock_rps_record_flow+0x19/0x350 [ 174.708129][ T7156] ? inet_sendmsg+0x2f4/0x370 [ 174.708144][ T7156] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 174.708168][ T7156] ____sys_sendmsg+0x80a/0x9f0 [ 174.708200][ T7156] ? __pfx_____sys_sendmsg+0x10/0x10 [ 174.708239][ T7156] ___sys_sendmsg+0x2a5/0x360 [ 174.708260][ T7156] ? __lock_acquire+0x6b5/0x2cf0 [ 174.708282][ T7156] ? __pfx____sys_sendmsg+0x10/0x10 [ 174.708309][ T7156] ? kstrtoull+0x12f/0x1d0 [ 174.708355][ T7156] ? __fget_files+0x2a/0x420 [ 174.708381][ T7156] ? __fget_files+0x3a0/0x420 [ 174.708411][ T7156] __sys_sendmmsg+0x2e7/0x4e0 [ 174.708439][ T7156] ? __pfx___sys_sendmmsg+0x10/0x10 [ 174.708490][ T7156] ? fput+0xa0/0xd0 [ 174.708509][ T7156] ? ksys_write+0x242/0x270 [ 174.708539][ T7156] __ia32_compat_sys_sendmmsg+0xa2/0xc0 [ 174.708566][ T7156] __do_fast_syscall_32+0x229/0x6e0 [ 174.708583][ T7156] ? do_fast_syscall_32+0x33/0x70 [ 174.708597][ T7156] ? lockdep_hardirqs_on+0x7a/0x110 [ 174.708618][ T7156] ? asm_int80_emulation+0x1a/0x20 [ 174.708634][ T7156] ? do_int80_emulation+0x286/0x530 [ 174.708654][ T7156] do_fast_syscall_32+0x33/0x70 [ 174.708670][ T7156] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 174.708690][ T7156] RIP: 0023:0xf7fc801c [ 174.708706][ T7156] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 174.708720][ T7156] RSP: 002b:00000000f548650c EFLAGS: 00000206 ORIG_RAX: 0000000000000159 [ 174.708739][ T7156] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000680 [ 174.708751][ T7156] RDX: 0000000000000001 RSI: 0000000020000014 RDI: 0000000000000000 [ 174.708761][ T7156] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 174.708770][ T7156] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 174.708780][ T7156] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 174.708807][ T7156] [ 174.738068][ T29] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 174.746384][ T5628] dvb_ttusb_budget: ttusb_init_controller: error [ 174.871004][ T6385] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 174.876874][ T5628] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 174.901019][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 174.974566][ T6374] usb 4-1: Using ep0 maxpacket: 16 [ 174.977482][ T6374] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 174.986287][ T7162] wireguard0: entered promiscuous mode [ 175.006600][ T6374] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 175.009077][ T7162] wireguard0: entered allmulticast mode [ 175.171379][ T29] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.182414][ T6385] usb 2-1: Using ep0 maxpacket: 16 [ 175.187573][ T29] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.198003][ T29] usb 3-1: config 0 interface 0 has no altsetting 0 [ 175.205969][ T6385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.221486][ T6385] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.231720][ T29] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 175.241199][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.257677][ T6385] usb 2-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 175.271080][ T6385] usb 2-1: New USB device strings: Mfr=34, Product=0, SerialNumber=0 [ 175.290147][ T29] usb 3-1: config 0 descriptor?? [ 175.311844][ T6385] usb 2-1: Manufacturer: syz [ 175.324661][ T6374] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 175.345844][ T6374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.366307][ T6385] usb 2-1: config 0 descriptor?? [ 175.370864][ T5628] DVB: Unable to find symbol stv0299_attach() [ 175.383265][ T6374] usb 4-1: Product: syz [ 175.400615][ T6374] usb 4-1: Manufacturer: ीⴖﵠ챓梅୚⏥墹㷯쮻㷶뒙ᅌ鹰ꃒﰪ憊긜 [ 175.420135][ T6374] usb 4-1: SerialNumber: syz [ 175.541323][ T5628] DVB: Unable to find symbol tda8083_attach() [ 175.558112][ T5628] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 175.584634][ T5628] usb 1-1: USB disconnect, device number 16 [ 175.742773][ T7178] FAULT_INJECTION: forcing a failure. [ 175.742773][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.744613][ T29] hid (null): report_id 1491813125 is invalid [ 175.764119][ T6374] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 175.771474][ T29] hid (null): unknown global tag 0xd [ 175.777594][ T29] hid (null): global environment stack underflow [ 175.784545][ T29] hid (null): global environment stack underflow [ 175.792604][ T6374] cdc_ncm 4-1:1.0: bind() failure [ 175.803285][ T7178] CPU: 0 UID: 0 PID: 7178 Comm: syz.4.432 Tainted: G L syzkaller #0 PREEMPT(full) [ 175.803316][ T7178] Tainted: [L]=SOFTLOCKUP [ 175.803321][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 175.803332][ T7178] Call Trace: [ 175.803339][ T7178] [ 175.803347][ T7178] dump_stack_lvl+0xe8/0x150 [ 175.803386][ T7178] should_fail_ex+0x412/0x560 [ 175.803417][ T7178] _copy_to_user+0x31/0xb0 [ 175.803447][ T7178] simple_read_from_buffer+0xe1/0x170 [ 175.803475][ T7178] proc_fail_nth_read+0x1bb/0x230 [ 175.803501][ T7178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.803527][ T7178] ? rw_verify_area+0x2a6/0x4d0 [ 175.803551][ T7178] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.803576][ T7178] vfs_read+0x20c/0xa70 [ 175.803605][ T7178] ? __pfx___mutex_lock+0x10/0x10 [ 175.803632][ T7178] ? __pfx_vfs_read+0x10/0x10 [ 175.803658][ T7178] ? __fget_files+0x2a/0x420 [ 175.803685][ T7178] ? __fget_files+0x3a0/0x420 [ 175.803706][ T7178] ? __fget_files+0x2a/0x420 [ 175.803736][ T7178] ksys_read+0x150/0x270 [ 175.803764][ T7178] ? __pfx_ksys_read+0x10/0x10 [ 175.803791][ T7178] ? asm_int80_emulation+0x1a/0x20 [ 175.803815][ T7178] do_int80_emulation+0x181/0x530 [ 175.803841][ T7178] ? trace_irq_disable+0x3b/0x140 [ 175.803868][ T7178] ? asm_int80_emulation+0x1a/0x20 [ 175.803885][ T7178] ? clear_bhb_loop+0x40/0x90 [ 175.803903][ T7178] ? clear_bhb_loop+0x40/0x90 [ 175.803927][ T7178] asm_int80_emulation+0x1a/0x20 [ 175.803945][ T7178] RIP: 0023:0xf71c61ab [ 175.803962][ T7178] Code: 57 56 53 8b 44 24 14 f6 00 08 75 23 8b 44 24 18 8b 5c 24 1c 8b 4c 24 20 8b 54 24 24 8b 74 24 28 8b 7c 24 2c 8b 6c 24 30 cd 80 <5b> 5e 5f 5d c3 5b 5e 5f 5d e9 f7 a1 ff ff 66 90 66 90 66 90 90 53 [ 175.803979][ T7178] RSP: 002b:00000000f54864bc EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 175.803999][ T7178] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f54865d0 [ 175.804011][ T7178] RDX: 000000000000000f RSI: 0000000000000000 RDI: 0000000000000000 [ 175.804022][ T7178] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 175.804032][ T7178] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 175.804044][ T7178] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 175.804072][ T7178] [ 175.812568][ T6385] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:041E:3100.0010/input/input23 [ 175.850688][ T6374] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 175.853963][ T29] hid (null): invalid report_count -1021851464 [ 175.854040][ T29] hid (null): unknown global tag 0xc [ 175.855170][ T29] hid (null): unknown global tag 0xd [ 175.884305][ T6374] cdc_ncm 4-1:1.1: bind() failure [ 175.887792][ T29] hid (null): usage index exceeded [ 175.935184][ T6374] usb 4-1: USB disconnect, device number 24 [ 175.947003][ T7152] futex_wake_op: syz.2.426 tries to shift op by 32; fix this program [ 176.023617][ T7182] FAULT_INJECTION: forcing a failure. [ 176.023617][ T7182] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 176.028299][ T29] hid (null): unknown global tag 0xe [ 176.051660][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.061066][ T7182] CPU: 1 UID: 0 PID: 7182 Comm: syz.0.433 Tainted: G L syzkaller #0 PREEMPT(full) [ 176.061095][ T7182] Tainted: [L]=SOFTLOCKUP [ 176.061101][ T7182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 176.061111][ T7182] Call Trace: [ 176.061118][ T7182] [ 176.061125][ T7182] dump_stack_lvl+0xe8/0x150 [ 176.061152][ T7182] should_fail_ex+0x412/0x560 [ 176.061178][ T7182] _copy_from_iter+0x1d3/0x1670 [ 176.061204][ T7182] ? rcu_is_watching+0x15/0xb0 [ 176.061229][ T7182] ? __pfx__copy_from_iter+0x10/0x10 [ 176.061257][ T7182] ? netlink_sendmsg+0x650/0xb40 [ 176.061279][ T7182] ? skb_put+0x11b/0x210 [ 176.061304][ T7182] netlink_sendmsg+0x6c0/0xb40 [ 176.061334][ T7182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.061360][ T7182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 176.061383][ T7182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 176.061408][ T7182] ____sys_sendmsg+0x972/0x9f0 [ 176.061439][ T7182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.061465][ T7182] ? kstrtoull+0x12f/0x1d0 [ 176.061492][ T7182] ___sys_sendmsg+0x2a5/0x360 [ 176.061513][ T7182] ? __lock_acquire+0x6b5/0x2cf0 [ 176.061536][ T7182] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.061560][ T7182] ? get_pid_task+0x20/0x1f0 [ 176.061580][ T7182] ? get_pid_task+0x20/0x1f0 [ 176.061598][ T7182] ? get_pid_task+0x20/0x1f0 [ 176.061650][ T7182] ? __fget_files+0x2a/0x420 [ 176.061669][ T7182] ? __fget_files+0x3a0/0x420 [ 176.061697][ T7182] __sys_sendmsg+0x183/0x260 [ 176.061722][ T7182] ? __pfx___sys_sendmsg+0x10/0x10 [ 176.061764][ T7182] __do_fast_syscall_32+0x229/0x6e0 [ 176.061781][ T7182] ? do_fast_syscall_32+0x33/0x70 [ 176.061795][ T7182] ? lockdep_hardirqs_on+0x7a/0x110 [ 176.061817][ T7182] ? asm_int80_emulation+0x1a/0x20 [ 176.061833][ T7182] ? do_int80_emulation+0x286/0x530 [ 176.061847][ T7182] ? trace_irq_disable+0x3b/0x140 [ 176.061873][ T7182] do_fast_syscall_32+0x33/0x70 [ 176.061889][ T7182] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 176.061909][ T7182] RIP: 0023:0xf7fe401c [ 176.061925][ T7182] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 176.061939][ T7182] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 176.061958][ T7182] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800000c0 [ 176.061970][ T7182] RDX: 000000000000c000 RSI: 0000000000000000 RDI: 0000000000000000 [ 176.061980][ T7182] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 176.061990][ T7182] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 176.062000][ T7182] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 176.062027][ T7182] [ 176.109495][ T29] hid (null): unknown global tag 0xc [ 176.158750][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.213653][ T29] hid (null): report_id 56010 is invalid [ 176.273358][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.284277][ T29] hid (null): unknown global tag 0xe [ 176.299493][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.304986][ T6385] creative-sb0540 0003:041E:3100.0010: input,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 176.458040][ T29] hid (null): unknown global tag 0xd [ 176.463549][ T29] hid (null): unknown global tag 0xd [ 176.509897][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.602290][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.640164][ T7158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.665970][ T7158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.703859][ T29] usb 2-1: USB disconnect, device number 32 [ 176.803817][ T7190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.436'. [ 176.825160][ T7190] openvswitch: netlink: Actions may not be safe on all matching packets [ 176.856776][ T6385] usb 3-1: USB disconnect, device number 24 [ 177.445663][ T7221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.438'. [ 177.564501][ T5628] hid_parser_main: 94 callbacks suppressed [ 177.564518][ T5628] hid-generic 0FED:0800:0004.0012: unknown main item tag 0x0 [ 177.596284][ T5628] hid-generic 0FED:0800:0004.0012: unknown main item tag 0x0 [ 177.606940][ T5628] hid-generic 0FED:0800:0004.0012: unknown main item tag 0x0 [ 177.620428][ T5628] hid-generic 0FED:0800:0004.0012: unknown main item tag 0x0 [ 177.632088][ T5628] hid-generic 0FED:0800:0004.0012: unknown main item tag 0x0 [ 177.641431][ T6372] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 177.662183][ T5628] hid-generic 0FED:0800:0004.0012: unknown main item tag 0x0 [ 177.690632][ T5628] hid-generic 0FED:0800:0004.0012: unknown main item tag 0x0 [ 177.698611][ T5628] hid-generic 0FED:0800:0004.0012: unknown main item tag 0x0 [ 177.706505][ T5628] hid-generic 0FED:0800:0004.0012: unknown main item tag 0x0 [ 177.721918][ T5628] hid-generic 0FED:0800:0004.0012: unknown main item tag 0x0 [ 177.740681][ T5628] hid-generic 0FED:0800:0004.0012: hidraw0: HID vffffff.fa Device [syz1] on syz1 [ 177.812849][ T6372] usb 1-1: Using ep0 maxpacket: 8 [ 177.829594][ T6372] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.849694][ T6372] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 177.872262][ T7228] fido_id[7228]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 177.896274][ T6372] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 177.908076][ T6372] usb 1-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 177.949441][ T6372] usb 1-1: Product: syz [ 177.965501][ T6372] usb 1-1: Manufacturer: syz [ 177.997943][ T6372] usb 1-1: SerialNumber: syz [ 178.035347][ T6372] usb 1-1: config 0 descriptor?? [ 178.181045][ T29] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 178.192786][ T6372] rc_core: IR keymap rc-imon-rsc not found [ 178.215220][ T6372] Registered IR keymap rc-empty [ 178.246904][ T6372] rc rc0: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 178.290385][ T6372] input: iMON Station as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 178.321160][ T7239] netlink: 'syz.1.449': attribute type 1 has an invalid length. [ 178.321712][ T7240] netlink: 4 bytes leftover after parsing attributes in process `syz.1.449'. [ 178.348280][ T6372] usb 1-1: USB disconnect, device number 17 [ 178.352857][ T29] usb 4-1: Using ep0 maxpacket: 16 [ 178.368095][ T29] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 178.380583][ T29] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 178.412631][ T29] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 178.428552][ T29] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.449186][ T29] usb 4-1: Product: syz [ 178.455668][ T29] usb 4-1: Manufacturer: ीⴖﵠ챓梅୚⏥墹㷯쮻㷶뒙ᅌ鹰ꃒﰪ憊긜 [ 178.471154][ T29] usb 4-1: SerialNumber: syz [ 178.491430][ T6385] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 178.586915][ T7239] bond1: entered promiscuous mode [ 178.596079][ T7239] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.652034][ T6385] usb 5-1: Using ep0 maxpacket: 32 [ 178.661817][ T6385] usb 5-1: unable to get BOS descriptor or descriptor too short [ 178.671434][ T6385] usb 5-1: config 8 has an invalid interface number: 23 but max is 0 [ 178.681094][ T6385] usb 5-1: config 8 has no interface number 0 [ 178.687302][ T6385] usb 5-1: config 8 interface 23 has no altsetting 0 [ 178.697298][ T6385] usb 5-1: New USB device found, idVendor=10b9, idProduct=5001, bcdDevice=37.be [ 178.708659][ T6385] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.721036][ T6385] usb 5-1: Product: syz [ 178.739847][ T29] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 178.751145][ T6385] usb 5-1: Manufacturer: syz [ 178.758322][ T29] cdc_ncm 4-1:1.0: bind() failure [ 178.767835][ T6385] usb 5-1: SerialNumber: syz [ 178.787988][ T29] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 178.810984][ T29] cdc_ncm 4-1:1.1: bind() failure [ 178.842849][ T29] usb 4-1: USB disconnect, device number 25 [ 179.076185][ T6385] dvb-usb: found a 'Humax/Coex DVB-T USB Stick 2.0 High Speed' in warm state. [ 179.107113][ T6385] dvb-usb: bulk message failed: -22 (3/0) [ 179.137135][ T6385] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 179.154509][ T6385] dvbdev: DVB: registering new adapter (Humax/Coex DVB-T USB Stick 2.0 High Speed) [ 179.164276][ T6385] usb 5-1: media controller created [ 179.189315][ T6385] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 179.285262][ T6385] dvb-usb: bulk message failed: -22 (6/0) [ 179.305410][ T6385] dvb-usb: bulk message failed: -22 (6/0) [ 179.312475][ T6385] dvb-usb: no frontend was attached by 'Humax/Coex DVB-T USB Stick 2.0 High Speed' [ 179.329371][ T6385] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input25 [ 179.346541][ T6385] dvb-usb: schedule remote query interval to 150 msecs. [ 179.353890][ T6385] dvb-usb: Humax/Coex DVB-T USB Stick 2.0 High Speed successfully initialized and connected. [ 179.387739][ T6385] usb 5-1: USB disconnect, device number 28 [ 179.494461][ T6385] dvb-usb: Humax/Coex DVB-T USB Stick 2.0 High Spe successfully deinitialized and disconnected. [ 179.789400][ T7260] FAULT_INJECTION: forcing a failure. [ 179.789400][ T7260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 179.818401][ T7260] CPU: 0 UID: 0 PID: 7260 Comm: syz.3.456 Tainted: G L syzkaller #0 PREEMPT(full) [ 179.818434][ T7260] Tainted: [L]=SOFTLOCKUP [ 179.818441][ T7260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 179.818452][ T7260] Call Trace: [ 179.818459][ T7260] [ 179.818466][ T7260] dump_stack_lvl+0xe8/0x150 [ 179.818495][ T7260] should_fail_ex+0x412/0x560 [ 179.818525][ T7260] _copy_from_user+0x2d/0xb0 [ 179.818551][ T7260] cmsghdr_from_user_compat_to_kern+0x3a4/0x810 [ 179.818587][ T7260] ? copy_compat_iovec_from_user+0xf8/0x140 [ 179.818623][ T7260] ? __pfx_cmsghdr_from_user_compat_to_kern+0x10/0x10 [ 179.818661][ T7260] ____sys_sendmsg+0x220/0x9f0 [ 179.818697][ T7260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 179.818727][ T7260] ? kstrtoull+0x12f/0x1d0 [ 179.818757][ T7260] ___sys_sendmsg+0x2a5/0x360 [ 179.818782][ T7260] ? __lock_acquire+0x6b5/0x2cf0 [ 179.818808][ T7260] ? __pfx____sys_sendmsg+0x10/0x10 [ 179.818835][ T7260] ? get_pid_task+0x20/0x1f0 [ 179.818859][ T7260] ? get_pid_task+0x20/0x1f0 [ 179.818880][ T7260] ? get_pid_task+0x20/0x1f0 [ 179.818929][ T7260] ? __fget_files+0x2a/0x420 [ 179.818951][ T7260] ? __fget_files+0x3a0/0x420 [ 179.818978][ T7260] __sys_sendmsg+0x183/0x260 [ 179.819006][ T7260] ? __pfx___sys_sendmsg+0x10/0x10 [ 179.819054][ T7260] __do_fast_syscall_32+0x229/0x6e0 [ 179.819073][ T7260] ? do_fast_syscall_32+0x33/0x70 [ 179.819090][ T7260] ? lockdep_hardirqs_on+0x7a/0x110 [ 179.819115][ T7260] ? asm_int80_emulation+0x1a/0x20 [ 179.819132][ T7260] ? do_int80_emulation+0x286/0x530 [ 179.819149][ T7260] ? trace_irq_disable+0x3b/0x140 [ 179.819179][ T7260] do_fast_syscall_32+0x33/0x70 [ 179.819197][ T7260] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 179.819218][ T7260] RIP: 0023:0xf700f01c [ 179.819237][ T7260] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 179.819252][ T7260] RSP: 002b:00000000f53fd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 179.819274][ T7260] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 0000000080001180 [ 179.819287][ T7260] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 179.819297][ T7260] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 179.819307][ T7260] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 179.819318][ T7260] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 179.819347][ T7260] [ 180.341386][ T6372] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 180.511145][ T6372] usb 3-1: Using ep0 maxpacket: 16 [ 180.523046][ T6372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.541711][ T6372] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 180.557413][ T6372] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 180.571457][ T6372] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 180.598280][ T6372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.629447][ T6372] usb 3-1: config 0 descriptor?? [ 180.731032][ T6374] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 180.921087][ T6374] usb 1-1: Using ep0 maxpacket: 32 [ 180.928376][ T6374] usb 1-1: unable to get BOS descriptor or descriptor too short [ 180.937735][ T6374] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 180.949049][ T6374] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 180.959311][ T6374] usb 1-1: config 1 has no interface number 0 [ 180.965714][ T6374] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 180.979565][ T6374] usb 1-1: New USB device found, idVendor=0582, idProduct=00a3, bcdDevice= 0.40 [ 180.988887][ T6374] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.997045][ T6374] usb 1-1: Product: syz [ 181.001341][ T6374] usb 1-1: Manufacturer: syz [ 181.006031][ T6374] usb 1-1: SerialNumber: syz [ 181.051372][ T6385] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 181.082234][ T6372] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0013/input/input26 [ 181.125241][ T6372] microsoft 0003:045E:07DA.0013: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 181.220974][ T6385] usb 2-1: Using ep0 maxpacket: 16 [ 181.237219][ T6385] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 181.286452][ T6385] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 181.316437][ T6385] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 181.326096][ T6385] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.327643][ T6372] usb 3-1: USB disconnect, device number 25 [ 181.340654][ T6385] usb 2-1: Product: syz [ 181.351993][ T6385] usb 2-1: Manufacturer: ीⴖﵠ챓梅୚⏥墹㷯쮻㷶뒙ᅌ鹰ꃒﰪ憊긜 [ 181.376604][ T6385] usb 2-1: SerialNumber: syz [ 181.702147][ T6385] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 181.711590][ T6385] cdc_ncm 2-1:1.0: bind() failure [ 181.725823][ T6385] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 181.734150][ T6385] cdc_ncm 2-1:1.1: bind() failure [ 181.757581][ T6385] usb 2-1: USB disconnect, device number 33 [ 181.945705][ T7302] sctp: [Deprecated]: syz.2.469 (pid 7302) Use of int in max_burst socket option deprecated. [ 181.945705][ T7302] Use struct sctp_assoc_value instead [ 182.097291][ T7306] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 182.344176][ T6372] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 182.395179][ T7310] x_tables: duplicate underflow at hook 2 [ 182.512959][ T6372] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 182.523892][ T6372] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 182.538287][ T6372] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 182.552324][ T6372] usb 3-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0xDC, changing to 0x8C [ 182.564454][ T6372] usb 3-1: config 4 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 243 [ 182.578681][ T6372] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 182.588708][ T6372] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.598039][ T6372] usb 3-1: Product: syz [ 182.602864][ T6372] usb 3-1: Manufacturer: syz [ 182.607511][ T6372] usb 3-1: SerialNumber: syz [ 182.617501][ T7306] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 182.627277][ T6372] usb 3-1: ucan: probing device on interface #0 [ 182.633706][ T6372] usb 3-1: ucan: invalid out_ep MaxPacketSize [ 182.640075][ T6372] usb 3-1: ucan: probe failed; try to update the device firmware [ 182.771127][ T5628] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 182.834153][ T6385] usb 3-1: USB disconnect, device number 26 [ 182.921015][ T5628] usb 2-1: Using ep0 maxpacket: 16 [ 182.929136][ T5628] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.940077][ T5628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 182.953502][ T5628] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 182.966843][ T5628] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 182.977214][ T5628] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 182.978672][ T7315] syz_tun: entered allmulticast mode [ 182.992265][ T5628] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 183.007562][ T5628] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 183.015852][ T5628] usb 2-1: Manufacturer: syz [ 183.027250][ T5628] usb 2-1: config 0 descriptor?? [ 183.112245][ T7315] syz_tun: left allmulticast mode [ 183.173508][ T7318] netlink: zone id is out of range [ 183.182804][ T7318] netlink: zone id is out of range [ 183.201025][ T7318] netlink: zone id is out of range [ 183.213383][ T7318] netlink: zone id is out of range [ 183.229343][ T7318] netlink: del zone limit has 4 unknown bytes [ 183.331562][ T5628] rc_core: IR keymap rc-hauppauge not found [ 183.346713][ T5628] Registered IR keymap rc-empty [ 183.356412][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.384807][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 183.384826][ T30] audit: type=1326 audit(1779011185.320:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.477" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 183.420452][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.432739][ T30] audit: type=1326 audit(1779011185.320:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.477" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 183.452506][ T5628] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 183.513450][ T30] audit: type=1326 audit(1779011185.320:294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.477" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=20 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 183.519202][ T5628] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input27 [ 183.570561][ T7325] fuse: Bad value for 'fd' [ 183.605580][ T30] audit: type=1326 audit(1779011185.320:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.477" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 183.651853][ T6374] usb 1-1: unknown sample rate [ 183.669741][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.688957][ T30] audit: type=1326 audit(1779011185.320:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.477" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 183.741393][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.791118][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.811766][ T30] audit: type=1326 audit(1779011185.370:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.477" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=434 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 183.836788][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.872844][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.890373][ T7338] netlink: zone id is out of range [ 183.908642][ T7338] netlink: zone id is out of range [ 183.914390][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.917263][ T30] audit: type=1326 audit(1779011185.370:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.477" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 183.938762][ T7338] netlink: zone id is out of range [ 183.953915][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 183.968615][ T30] audit: type=1326 audit(1779011185.370:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.477" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 183.987037][ T6374] usb 1-1: USB disconnect, device number 18 [ 183.999470][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 184.017777][ T7338] netlink: del zone limit has 4 unknown bytes [ 184.041380][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 184.052221][ T6385] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 184.052291][ T30] audit: type=1326 audit(1779011185.410:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.477" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=440 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 184.087334][ T5628] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 184.097934][ T5690] udevd[5690]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.120258][ T7339] netlink: 76 bytes leftover after parsing attributes in process `syz.0.481'. [ 184.127718][ T30] audit: type=1326 audit(1779011185.410:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7322 comm="syz.3.477" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf700f01c code=0x7ffc0000 [ 184.134125][ T5628] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 184.179574][ T7339] syzkaller0: entered promiscuous mode [ 184.203827][ T7339] syzkaller0: entered allmulticast mode [ 184.210112][ T5628] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 184.241017][ T6385] usb 3-1: Using ep0 maxpacket: 16 [ 184.250079][ T6385] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 184.261013][ T6385] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 184.301209][ T6385] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.319156][ T6385] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.347142][ T6385] usb 3-1: Product: syz [ 184.359111][ T6385] usb 3-1: Manufacturer: ीⴖﵠ챓梅୚⏥墹㷯쮻㷶뒙ᅌ鹰ꃒﰪ憊긜 [ 184.374192][ T6385] usb 3-1: SerialNumber: syz [ 184.407599][ T7350] netlink: 'syz.3.485': attribute type 1 has an invalid length. [ 184.666794][ T6385] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 184.682920][ T6385] cdc_ncm 3-1:1.0: bind() failure [ 289.700871][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 289.708055][ C0] rcu: (detected by 0, t=10502 jiffies, g=32533, q=330 ncpus=2) [ 289.715885][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10502 (4294966073-4294955571), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 289.729531][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g32533 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 289.740912][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 289.750913][ C0] rcu: RCU grace-period kthread stack dump: [ 289.756927][ C0] task:rcu_preempt state:R running task stack:27544 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 289.771117][ C0] Call Trace: [ 289.774504][ C0] [ 289.777455][ C0] __schedule+0x1821/0x5740 [ 289.782079][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 289.787245][ C0] ? __pfx___schedule+0x10/0x10 [ 289.792137][ C0] ? schedule+0x90/0x360 [ 289.796410][ C0] schedule+0x164/0x360 [ 289.800680][ C0] schedule_timeout+0x158/0x2c0 [ 289.805557][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 289.811072][ C0] ? __pfx_process_timeout+0x10/0x10 [ 289.816571][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 289.822485][ C0] ? prepare_to_swait_event+0x340/0x370 [ 289.828061][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 289.832931][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 289.838162][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 289.842952][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 289.848269][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 289.853582][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.859685][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 289.864386][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 289.869871][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 289.875873][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 289.880851][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 289.885914][ C0] kthread+0x389/0x470 [ 289.890530][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 289.895916][ C0] ? __pfx_kthread+0x10/0x10 [ 289.900674][ C0] ret_from_fork+0x514/0xb70 [ 289.905325][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 289.910557][ C0] ? __switch_to+0xc79/0x1410 [ 289.915445][ C0] ? __pfx_kthread+0x10/0x10 [ 289.920584][ C0] ret_from_fork_asm+0x1a/0x30 [ 289.925578][ C0] [ 289.928636][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 289.935070][ C0] Sending NMI from CPU 0 to CPUs 1: [ 289.941700][ C1] NMI backtrace for cpu 1 [ 289.941718][ C1] CPU: 1 UID: 0 PID: 7354 Comm: syz.0.487 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.941740][ C1] Tainted: [L]=SOFTLOCKUP [ 289.941745][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 289.941761][ C1] RIP: 0010:__remove_hrtimer+0x193/0x3e0 [ 289.941788][ C1] Code: c3 48 8b 44 24 08 4c 8d 60 44 4c 89 e0 48 c1 e8 03 0f b6 04 28 84 c0 0f 85 ea 01 00 00 41 21 1c 24 4d 85 ed 0f 85 76 ff ff ff <4d> 8d 67 60 4c 89 e0 48 c1 e8 03 80 3c 28 00 74 08 4c 89 e7 e8 c4 [ 289.941801][ C1] RSP: 0018:ffffc90000a08d90 EFLAGS: 00000046 [ 289.941816][ C1] RAX: 0000000000000000 RBX: 00000000fffffffd RCX: 0000000000000001 [ 289.941827][ C1] RDX: 0000000000010000 RSI: 0000000000000001 RDI: 0000000000000020 [ 289.941837][ C1] RBP: dffffc0000000000 R08: ffff88807b2d6327 R09: 0000000000000000 [ 289.941848][ C1] R10: ffff88807b2d6318 R11: ffffed100f65ac65 R12: ffff8880b87282c4 [ 289.941858][ C1] R13: 0000000000000000 R14: ffff88807b2d6300 R15: ffff8880b87283c0 [ 289.941868][ C1] FS: 0000000000000000(0000) GS:ffff88812538a000(0063) knlGS:00000000f54a6b40 [ 289.941882][ C1] CS: 0010 DS: 002b ES: 002b CR0: 0000000080050033 [ 289.941892][ C1] CR2: 00000000f50eca81 CR3: 000000007545e000 CR4: 00000000003526f0 [ 289.941908][ C1] Call Trace: [ 289.941917][ C1] [ 289.941927][ C1] __hrtimer_run_queues+0x299/0xa20 [ 289.941954][ C1] hrtimer_interrupt+0x44b/0x950 [ 289.941983][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 289.942003][ C1] sysvec_apic_timer_interrupt+0xa1/0xc0 [ 289.942073][ C1] [ 289.942078][ C1] [ 289.942084][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 289.942100][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 289.942120][ C1] Code: f7 e8 2d ab f6 f5 f7 c3 00 02 00 00 74 05 e8 c0 3f 22 f6 9c 58 a9 00 02 00 00 75 27 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 e4 29 e8 f5 65 8b 05 0d b0 8d 07 85 c0 74 18 5b 41 5e c3 cc cc [ 289.942132][ C1] RSP: 0018:ffffc9000391eec8 EFLAGS: 00000206 [ 289.942145][ C1] RAX: 0000000000000006 RBX: 0000000000000282 RCX: 0000000000000202 [ 289.942155][ C1] RDX: 0000000000000002 RSI: ffffffff8dfab61d RDI: 0000000000000001 [ 289.942164][ C1] RBP: ffffc9000391f1b0 R08: ffffffff9030c6f7 R09: 1ffffffff20618de [ 289.942175][ C1] R10: dffffc0000000000 R11: fffffbfff20618df R12: ffff88807b2d6290 [ 289.942186][ C1] R13: dffffc0000000000 R14: ffff88807b2d62a8 R15: ffff88807b2d62f8 [ 289.942204][ C1] taprio_change+0x30fe/0x3e50 [ 289.942232][ C1] ? __pfx_taprio_change+0x10/0x10 [ 289.942260][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 289.942289][ C1] taprio_init+0x96f/0xbe0 [ 289.942313][ C1] ? __pfx_taprio_init+0x10/0x10 [ 289.942331][ C1] ? qdisc_alloc+0x6ec/0x9e0 [ 289.942351][ C1] ? __pfx_taprio_init+0x10/0x10 [ 289.942369][ C1] qdisc_create+0x7c4/0xf20 [ 289.942385][ C1] ? lockdep_rtnl_is_held+0x26/0x40 [ 289.942401][ C1] tc_modify_qdisc+0x16f0/0x2290 [ 289.942417][ C1] ? rcu_is_watching+0x15/0xb0 [ 289.942439][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 289.942455][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 289.942486][ C1] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 289.942500][ C1] rtnetlink_rcv_msg+0x77e/0xbe0 [ 289.942520][ C1] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 289.942537][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 289.942554][ C1] ? ref_tracker_free+0x693/0x840 [ 289.942574][ C1] ? __pfx_ref_tracker_free+0x10/0x10 [ 289.942591][ C1] ? __asan_memcpy+0x40/0x70 [ 289.942608][ C1] ? __skb_clone+0x63/0x7a0 [ 289.942630][ C1] netlink_rcv_skb+0x232/0x4b0 [ 289.942650][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 289.942668][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 289.942691][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.942709][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 289.942729][ C1] netlink_unicast+0x75c/0x8e0 [ 289.942758][ C1] netlink_sendmsg+0x813/0xb40 [ 289.942781][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 289.942801][ C1] ? aa_sock_msg_perm+0xf1/0x1b0 [ 289.942820][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 289.942840][ C1] ____sys_sendmsg+0x972/0x9f0 [ 289.942865][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 289.942890][ C1] ___sys_sendmsg+0x2a5/0x360 [ 289.942908][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 289.942925][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 289.942946][ C1] ? futex_wait+0x2a2/0x390 [ 289.942976][ C1] ? __fget_files+0x2a/0x420 [ 289.942992][ C1] ? __fget_files+0x3a0/0x420 [ 289.943013][ C1] __sys_sendmsg+0x183/0x260 [ 289.943032][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 289.943060][ C1] __do_fast_syscall_32+0x229/0x6e0 [ 289.943074][ C1] ? do_fast_syscall_32+0x33/0x70 [ 289.943088][ C1] ? irqentry_exit+0x10f/0x760 [ 289.943106][ C1] ? trace_irq_disable+0x3b/0x140 [ 289.943128][ C1] do_fast_syscall_32+0x33/0x70 [ 289.943141][ C1] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 289.943158][ C1] RIP: 0023:0xf7fe401c [ 289.943172][ C1] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 289.943184][ C1] RSP: 002b:00000000f54a650c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 289.943198][ C1] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000800012c0 [ 289.943209][ C1] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 289.943217][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 289.943226][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 289.943235][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 289.943251][ C1]