last executing test programs: 8.730668369s ago: executing program 3 (id=3624): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) read$alg(r3, &(0x7f00000012c0)=""/4107, 0xbc5) sendmmsg$alg(r3, &(0x7f0000000c80)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="7f1ad71c5e1e2ffd65015711202c22a16e97f0b88f833c486c5fbe2f289a0d0f74a06da438dab866494a247e9e4e4f06f21c7c3f5c4dc83ecf01cf0f3edeb9a676c8fb387ad8e1ef53ac7dfd6baf1ecf42036e181292251526714cf6d8fb4bce389c96bc0e24d3abc248a5b98fa279d377b558a6a1486d3a79e1164c19f1c333019380a90df8ef6b", 0x88}, {&(0x7f0000000180)="b01220ee4b5a0b12c273972ea3edd768dbad1c3febf48a9926f16268a3edc6f2ff97ba688eaaaf7ee0f2264fb2ee0f67e6121291692267d8b34d076518f221f60e554115e2810116af423f9f1534f78900edd661bc516f8d574e309f4913645794855756a586a7ccc83d81ea4d2578711903a191dd576ce98d41453c09625efe7dff4b6222712a7309e131c3841dec7fdfdea97eaa9652e221e15ad8cb5793f185774b0f49782a59e05617354be85a35db7bcfe79be4356ede43b918981ce2318a65cfe8b262", 0xc6}, {&(0x7f0000000280)="faab1d43a65d20ccf90a2bc53c6384d81e049741816045278e7e25ee0c020808bb08ab9992f5ffd89cd1df31c662ff364cbace61fcb7e067b266f3fed7c325d75bd964ef413b57037d7b69e34cdda89b0328e064119c9e8c7beb616f163ccf71e6f0ce625cddf3ac464cae067dc5", 0x6e}, {&(0x7f0000002300)="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", 0xa09}], 0x4, 0x0, 0x0, 0x20000850}], 0x1, 0x4000080) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES8=r3, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) recvmmsg$unix(r1, &(0x7f0000008f40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x5}}], 0x1, 0x0, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80c296f8528f912210", 0x14) connect$inet6(r0, &(0x7f0000000000)={0x2, 0x4e23, 0x0, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@hoplimit={{0x10, 0x29, 0x34, 0x7}}, @pktinfo={{0x20, 0x29, 0x32, {@mcast1}}}], 0x30}}], 0x2, 0x80) 8.350554496s ago: executing program 3 (id=3629): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x10000, 0x100}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_LOCAL6={0x14, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GTP_CREATE_SOCKETS={0x5}]}}}]}, 0x4c}}, 0x24000840) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0xf, 0x7fff8001}]}) personality(0xc548e6a9e9adda56) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0xb173, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1, 0x1, 0x2, "6400cd28ad040d0000000040000400bf00", 0x52424752}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000040)={0x2, 0x0, [{0x892, 0x0, 0x2000000000000000}, {0x13, 0x0, 0x2}]}) syz_usb_control_io(r2, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) socket$tipc(0x1e, 0x5, 0x0) 6.482741737s ago: executing program 4 (id=3635): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) syncfs(0xffffffffffffffff) r1 = syz_usb_connect$uac2(0x3, 0xa0, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000004082054c0040000102030109028e000301053009080b00010107208c0904000000010120000924010040041500070c2403020703000400070081090401000001022000090401010101022000090501090002030b04085128a32990fd6204040200000102200009040201010102200009240201000f0e07011024010201000400000008b8000000030905820908004006030825018203f30600"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000000700)={0x2c, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) syz_usb_control_io$sierra_net(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac2(r1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x4, 0x0, 0x0) r2 = socket(0x2c, 0x3, 0x1000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001e40)=[{{0x0, 0xfffffffffffffe08, &(0x7f0000001a40)=[{&(0x7f00000000c0)=""/188, 0xb3}], 0x4f}, 0x7}], 0x1, 0x2120, 0x0) sendmmsg$inet(r3, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_genetlink_get_family_id$ethtool(0x0, r2) sendmsg$nl_route_sched(r2, 0x0, 0x20004800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x14, r6, 0x1, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x141}, 0x20004081) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r7, 0x0, 0x0) syz_usb_control_io$lan78xx(r7, &(0x7f0000000380)={0xc, &(0x7f0000000080)={0x0, 0x22, 0x31, {0x31, 0x23, "2dbcecc3abe67d482e7d42d00c4f7acd4f642c815d698413578641c84073f4b4374dec08d93db519c36bc9d0865f9c"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40d}}}, &(0x7f00000005c0)={0x1c, &(0x7f00000003c0)={0x20, 0x1, 0x5f, "c2fbf6dd7392e397b77750be239449b6ae1184d9794f40f7b0853a5b12bd56dac9e9234a285d9969dc45cbff5506c6652235e56d191c498e4738aca73406b5854a89857daeaeaf7abab4d0584e5cb3d36df17e200fbedcf84c47bf5452e110"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000480)={0x0, 0x8, 0x1}, &(0x7f00000004c0)={0xc0, 0xa1, 0x4, 0xfffffffc}, &(0x7f0000000500)={0x40, 0xa0, 0x4, 0x6}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "5bfe7377fe19bcbe0e61e46fb25c353587ffe03b2eb797a2b4897ae467a1640a997983c0c4e7e13e0a4325289e6f88"}}) sendmsg$nl_xfrm(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1001000016000104fdffffff00000000fc0200000000000000000000000000012001000000000000000000000000000200040000000000000000802000000000", @ANYRES8=r6, @ANYRES32=r6, @ANYBLOB="fe8000000000000000000000000000102000000033000000ffffffff0000000000000000000000000400000000000000feffffffffffffff0500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000200000000000000000000000000000003000000feffffff0983115400000000900000000000000008000000fdffffff14000d00ac1e000100000000000000000000000004001b"], 0x110}}, 0x4808) 6.399294642s ago: executing program 1 (id=3636): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e40)=ANY=[@ANYBLOB="50000000120001030000000000662b6b0ce600000000fe000000002000000000000000000001000000000000120800000022afb9b547d10f", @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000000000004000100"], 0x50}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r4 = syz_open_dev$sndpcmc(0x0, 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) 6.334940213s ago: executing program 3 (id=3637): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x5, [0x0, 0x0, 0xd1, 0x8b, 0xc]}}) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.823595892s ago: executing program 3 (id=3640): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0x1, 0x5}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x9, 0x8, 0x2, 0x200, 0x101, 0x39, 0x10b7, 0xb3}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20000004) r6 = socket$netlink(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x410000, 0x100000001, 0x210000, 0x1, 0x4, 0x0, 0x5}, 0x1c) sendto$packet(r8, 0x0, 0xfffffd1a, 0x24000854, &(0x7f0000000200)={0x11, 0x6, r7, 0x1, 0xfe}, 0x14) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$KDSETKEYCODE(0xffffffffffffffff, 0x4b4d, &(0x7f00000005c0)={0x8, 0x9}) r9 = openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0xa2}, 0x18) syz_usb_connect$uac3(0x1, 0xdc, &(0x7f00000006c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x499, 0x5009, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xca, 0x3, 0x1, 0x4, 0x50, 0x7, {0x8, 0xb, 0x0, 0x0, 0x1, 0x24}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x3, 0x1b, 0x3}, [@feature_unit={0x11, 0x24, 0x7, 0x5, 0x6, [0x9, 0x8, 0x10]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7fff, 0xd44b, 0x3, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x1, 0x2, 0x5, {0xa, 0x25, 0x25, 0x1000, 0x2, 0x52fc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x40, 0x6, 0x9}, @as_header={0x17, 0x24, 0x1, 0xff, 0x6, 0x5, 0x4, 0xb, 0xa, 0x7, 0x8}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x10, 0x4, 0xf9, 0xd4, '~7'}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x3, 0x4, 0x8, 0xfb, "af85f3311b12c877ce"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0xc281448856b46162, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x40, 0x5, 0x2, 0xff, {0xa, 0x25, 0x25, 0x3ff, 0x6, 0x5}}}}}}}}]}}, &(0x7f0000000ac0)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x250, 0x8, 0x5, 0x4, 0xff, 0x1}, 0x3a, &(0x7f0000000800)={0x5, 0xf, 0x3a, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x4, 0x87, 0x5}, @wireless={0xb, 0x10, 0x1, 0xc, 0x4, 0x0, 0x4, 0x6, 0xf7}, @ssp_cap={0xc, 0x10, 0xa, 0xf8, 0x0, 0x800, 0xf, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x9, 0x7, 0x49f3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0xb, 0x4, 0x8}]}, 0x3, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x455}}, {0xd1, &(0x7f0000000980)=@string={0xd1, 0x3, "8a557e452983c1a78316b1761f55647c42448b0e227bfe884695f3381e95435c3fd4e06215b7f3704c0275e26c7e450bfe34f951574ec992093d257cc838838ae5e4e459f1655ed55ca66b1d7e578a53c32434fd7a5c0d21aeec05ffe1d39f6a4bfb8c0e302d7eedfe0e6b6ef9ef27e112526302ab197ca285758962f969801d73cc2fa3d7f1adc4efaaf56721e8b902e4486a6789631824df22248c89b24b0fe64692dc430bd1cb3d626197e0940f5715e1b7383bdd99ad0a6f64c8fae97624dcdcc4869ce5c9a5adf84ef11e0795"}}, {0x1c, &(0x7f0000000a80)=@string={0x1c, 0x3, "845024fcd37ceafd4ef389398fd9e02abba0dc372a3dde7ba53b"}}]}) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r12, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x4, 0x6, 0x4, 0x71}, 0x8, 0x1, 0x401, 0x4, 0x3ff, 0x3, 0x14, 0xa, 0x2, 0xfffffffb, {0x5, 0xe, 0x6, 0xdce8, 0x8, 0xffffffff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2404c8c0}, 0x4890) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r13, 0x0, 0x0) r14 = syz_genetlink_get_family_id$smc(&(0x7f0000000240), r2) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000540)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)={0x9c, r14, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.584509938s ago: executing program 2 (id=3642): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000080)={@random="a32a61defaa9", @empty, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'o', "b073b2"}}}}}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x40802, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) getdents64(r3, 0x0, 0x46) syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xfffffffd, 0x10000, 0x0, 0x59}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000080)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x10000002, 0xe1, 0x0, 0xb48, 0x9, 0x8, 0x80002001, 0x3}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)=ANY=[@ANYRES32=r5, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=r3, @ANYBLOB="483f61e7acc039143f71ce73859204e39c6e2313c900"/37, @ANYRES64=0x0], 0x20) socket$inet(0x2, 0x4000000000000001, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0200000001000200000000000400020000000000100001"], 0x24, 0x3) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f00000001c0), 0x4) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$TUNSETVNETLE(r4, 0x400454dc, &(0x7f0000000000)=0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000ffd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendto$inet(r0, &(0x7f0000000040)="17", 0xfffffe75, 0x10008085, 0x0, 0x0) 4.702394253s ago: executing program 1 (id=3643): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x44844) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'pimreg1\x00', &(0x7f0000000100)=@ethtool_rxfh_indir={0x39, 0x5, [0x0, 0x0, 0xd1, 0x8b, 0xc]}}) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.50446012s ago: executing program 1 (id=3644): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 4.235489798s ago: executing program 1 (id=3645): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x23c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f00000001c0), 0x8) bind$can_j1939(r3, &(0x7f0000000380)={0x1d, r4, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@deltclass={0x24, 0x29, 0x1, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0xfff3, 0xffff}, {0x7, 0xd}, {0xb, 0x7}}}, 0x24}}, 0x4000050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r6 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), r3) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3000000011"], 0x30}], 0x1}, 0x0) 4.209799151s ago: executing program 2 (id=3646): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x3a, r0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x24044040) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000500)="b9ff0300", 0x0, 0x100, 0x60000000, 0x0, 0xd9, 0x0, &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e8627823"}, 0x4c) 3.018101098s ago: executing program 0 (id=3647): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x8804, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r3, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=@deltclass={0x6c, 0x29, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x4, 0xe}, {0x7, 0xfff6}, {0xffe2, 0x1}}, [@tclass_kind_options=@c_red={0x8}, @tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x1, 0x10}}, @TCA_RATE={0x6, 0x5, {0x9, 0xdd}}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_RATE={0x6, 0x5, {0x9, 0xd}}, @tclass_kind_options=@c_ingress={0xc}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x4) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x9}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000880)=""/191, 0x41}, 0x2ad6}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.842314859s ago: executing program 0 (id=3648): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00'], 0x40}, 0x1, 0x0, 0x0, 0x2000c8c1}, 0x40000) r0 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (fail_nth: 8) 2.841379082s ago: executing program 4 (id=3649): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0}, 0x44844) socket(0x11, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.697763763s ago: executing program 2 (id=3650): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0xefff, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @mcast2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2.577728252s ago: executing program 1 (id=3651): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x5c, 0x0, &(0x7f00000000c0)="e3ef7f670000ec6783b4242b44940000000000000000000000000033a42c9550f50ac311e0f0544b00aab05450dc23d925bde6a1b56f92241432fa00228f9ac40b20ce9f93b909c57270d30b39d3222d69dbeff9b234e35fad21050b", 0x0, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x4c) r0 = syz_open_dev$sg(&(0x7f0000000140), 0xb, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000004340), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc0f8565c, &(0x7f0000000580)={0x0, 0x6, 0x0, {0xa, @pix_mp={0x0, 0x0, 0x41415270, 0x0, 0x0, [{0x8, 0x9}, {}, {0xffdfffff, 0xfffffffb}, {0x80006}, {}, {0x8, 0x800aced}, {0x10000, 0x7}, {0x2}], 0x3}}, 0xfffffffc}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x44, &(0x7f0000000000)={0x4d, 0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x20801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x300, 0xf7, 0xbb, 0x6a, 0x8, 0x413c, 0x8137, 0xe382, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xc, 0x6, 0x30, 0xea, "", [{{0x9, 0x4, 0x11, 0xc, 0x0, 0x24, 0xdc, 0xae, 0x6}}]}}]}}, 0x0) pipe(&(0x7f0000003180)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$rds(0x15, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) pipe2(&(0x7f0000000100), 0x80000) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[], 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f00000000c0)=ANY=[], 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) 2.506389205s ago: executing program 0 (id=3652): sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x14) r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 2.493113518s ago: executing program 2 (id=3653): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001e40)=ANY=[@ANYBLOB="50000000120001030000000000662b6b0ce600000000fe000000002000000000000000000001000000000000120800000022afb9b547d10f", @ANYRES32=0x0, @ANYBLOB="0000000000000000000400000000000004000100"], 0x50}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) ftruncate(r1, 0xc17a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x7, &(0x7f0000000000/0x400000)=nil) r4 = syz_open_dev$sndpcmc(0x0, 0x1, 0x80) ioctl$SNDRV_PCM_IOCTL_UNLINK(r4, 0x4161, 0x0) mbind(&(0x7f00005f7000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) mremap(&(0x7f000008f000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000486000/0x1000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x3, 0x0, 0x0, 0x0) 2.419046276s ago: executing program 3 (id=3654): socket$inet_icmp_raw(0x2, 0x3, 0x1) socket(0x11, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000001300), 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[], 0x18}, 0xc044) syz_open_procfs(0x0, &(0x7f0000000240)='gid_map\x00') ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) openat$nvme_fabrics(0xffffff9c, &(0x7f0000000000), 0x80081, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.853520214s ago: executing program 0 (id=3655): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$unix(0x1, 0x1, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x8010) 1.69510225s ago: executing program 0 (id=3656): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000331000/0x1000)=nil, 0x1000, 0x2000, 0x4, &(0x7f00003e0000/0x2000)=nil) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r1, 0x40186e8d, &(0x7f0000000240)={&(0x7f0000000180), 0x0, 0x20, 0x4, 0x8}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x0, 0x0, 0x0, 0xbffffffd, 0x0, 0x0, 0x41100, 0x49, '\x00', 0x0, @sched_cls=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000040)={0x4, 0x9, 0x567a5030, 0xb5f}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0, 0x0, 0x400000000000000}]) 1.628923391s ago: executing program 4 (id=3657): creat(0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x1, 0x70bd2b, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4004) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000140), 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000040)={0x10, 0x17, 0x2, {0xffffffffffffffc1, './file0'}}, 0xfffffdab) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x80000007, 0x1}, 0x1c) syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad7, 0x10000, 0x3}, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r4, r5, 0x2c, 0x10000) io_uring_enter(r3, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r3, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) io_uring_enter(r3, 0x788, 0x6a29, 0x1, 0x0, 0xfffffffffffffd04) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)={0x0, 0x3}, 0x8) 1.130066831s ago: executing program 1 (id=3658): r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d370f0100000000000000000006241a0000000c241b4800f3ff00050080050905810300020000000904010000020d00000904010102020d0000090582020004000000090503020002"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000000)={0x44, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20, 0x80, 0x1c, {0x1, 0x28, 0xe4d, 0x80, 0x3fc, 0xfffd, 0x5, 0xfffffffe, 0x800, 0x7543, 0x0, 0x6}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect$cdc_ecm(0xfa13646e8d91cf2d, 0x58, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0x5d, 0x80, 0x4, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x7, 0x24, 0x6, 0x0, 0x0, "cb1f"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x0, 0x401}}, {[{{0x9, 0x5, 0x81, 0x3, 0x470, 0x9, 0xf1, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x5, 0x40, 0xff}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x3, 0x5, 0xfc}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x300, 0x5, 0x3, 0x0, 0x8, 0x4}, 0x60, &(0x7f00000001c0)={0x5, 0xf, 0x60, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0xc8, "a7e14ff9125acbce3df033d0acb4cc10"}, @generic={0x3d, 0x10, 0x4, "1c7c744e2b640462ce5644878bfe5319b37efdaff938ed718cea39951d045351ed3cff48a28dcc2f4495653bab6a7c323256cc4ade77a58b871e"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xb7, 0x2, 0xfb94}]}, 0x6, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x82c}}, {0xdf, &(0x7f0000000280)=@string={0xdf, 0x3, "c17fe184921345a323c443bc70fdec17885a59f28d7ff680f6df2988f78029b71c6c8d75e057b14be275b7a724d6522047d96edca797fcaf0e12c1d686b417c0b8fed1a924d742ab2940da4da6fda346abf224373225fb7a330e369300555d20bc793f5a6a230ac2520a747734ae2d4412d74c22c027dc355f2e79eedc763d5346529cf78040c89eeb69fe8470c117eec29653df5c45b995d8b3700aad00d02a99bb9e208ab6ea552a67b0e386846ce2a8f29fb790be30d00b5d4df1106f016ee35281331e6f1ea6494863c307c31847680919c271c30286543b21fc3a"}}, {0x9c, &(0x7f0000000c00)=ANY=[@ANYBLOB="9c6fbca917e685007d41c0e3d987988ba206f4ee6693fc24e3f72a10aeb760c56c43a219cc5e28b108004a90f041c6a9e2d12d3b21dbcb5a94f7114ed990c568b3888c2557c8b3cefcb775484e1585dfbfe08526e73660d29fdbae1de1601b534336d06ee1a525ead90fd00bf03bcf55c4336c8e5190232c71676294a050c6579c3479da76f23b25a4a0a3e84f0872084b397eb29ed0516197eba450a34ed79a5081759dec5d27fcbf46449c336307397113b0dd7ceb9a0dcaaad3662340a8943d1bfe913255cbe16d4d037709b7b00a165a33306a9356abdb6c90b27759828ed3d6b460f43b0eddf99482"]}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x801}}, {0x62, &(0x7f0000000480)=@string={0x62, 0x3, "82c566a8927412a245b30a4c354a8b979ce1a8e62852283e4fb1e94dae6d432ebde1da93782c9b1a5699832d16f4703c6643dd488c87c6201171289610295e86d7b25b57604bdc3d3e5e17222ee8eb80f461f757ce871fc835c3dd5745267625"}}, {0xfb, &(0x7f0000000540)=@string={0xfb, 0x3, "3f67a0162981ddf895d76af8cac033656f2fd93746efc3e3ac5f2c8cdab2aa3b4cf9d40c13f3921d01be730308adc98b19c1d0fea9fbd3991e9ffbfc422173ba1a6b90a051dc087d73651512a66442a077d5fbc3fc4e3748c67fd4f546f1b524d3a0d46791cc613ec6fda91ec6315690e324795b6a4428c6524e0bb6409cb3666b12061cab180e335815be7bf095863d2f478bd35b4384b3710d8d37c1dcbbf58c26f66fea41d52180d468be61cc176e94ce89bcd7d0d9dd9839fe338f70b8557d3bb50a33e9bd4a56370694e6052b4a33d7892f8491fb0ea26eb1896c5d607cc88f9f0d8bcb16bcb48be00cfe834ca370adcbb9147eb89c32"}}]}) syz_usb_control_io(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000001080)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x3, 0x33, 0x20, 0x66, 0x0, 0x40, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x44, 0x4, "0f24"}]}}, {0x1e, 0xb, 0x0, @loopback}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x21c}, @IPSET_ATTR_SIZE={0x8}]}]}, 0x5c}}, 0x0) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) r4 = syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000500)={{0x12, 0x1, 0x250, 0x7, 0x1, 0x3, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc7, 0xc0, 0x1, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x3ef, 0x80, 0xf, 0x9}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7f, 0x4, 0x1}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f00000006c0)={0xa, 0x6, 0x200, 0xff, 0x28, 0x0, 0x10, 0xc}, 0x94, &(0x7f0000000700)={0x5, 0xf, 0x94, 0x4, [@ptm_cap={0x3}, @generic={0x75, 0x10, 0x2, "adbb516e1bfe8bdc9b459f9ec2dd9344ed48c37793aa1f87d830982bd4da10f1c686125c60a29b2bc214001ab0873a9e6d25a0e546330f6ff996e00d137b2e408ae6bdc5282691bc443cfbafbed7b9c6dcd6e7ff7bc2db8ec9e41857010b16e0c799bd8ea240d3458e24c544434f226ea8f0"}, @ss_container_id={0x14, 0x10, 0x4, 0x6, "04de1a0287b1c75a110ac23bff4407cd"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x44e}}]}) syz_usb_control_io$printer(r4, &(0x7f0000000980)={0xc, &(0x7f0000000840)={0x40, 0x2f, 0x64, {0x64, 0x2, "bcdcd4f407864bb952a80e434d07477522f98e50210229cd53b9fb0500da9d9322078ea93576f6559868f66d46b145a6b5678be6b1bcd638851ee4881e02b91241f3e12a30655678a0a706e0e7bd2e758548f143c46b1aad30d65a46241d2bb1390d"}}, &(0x7f00000008c0)={0x0, 0x3, 0x7b, @string={0x7b, 0x3, "002c45af65a78b4be15eea297342dbbc4aef563ffcd202b35c445d4e0a1470210ca579cd59643a0a50b92d1b01dc82392d94824bb00c4290aca02605b6e846e99e9d5bedb5f61d0e08470d5641dbd6aebf4bc037867be21fcc6f8017d66651153f3812f226d5d6ff7e4c4e3e631efc4e1dd329010a1afc6ed8"}}}, &(0x7f0000000bc0)={0x1c, &(0x7f0000000a00)=ANY=[@ANYBLOB="400563000000958396f427a7702d4e1813914a95fba4f7f4e9b741bb8d478f95b0f8bfba8aeb919c9b7c434e66ebbe323a3b9c924b941e5e188a368b081c8f7870a7054739ab82a1704abb916b64025e0b02169b5f60aec23b3629b5b63ef02a42aa"], &(0x7f0000000a80)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000ac0)={0x0, 0x8, 0x1, 0xa}, &(0x7f0000000b00)={0x20, 0x0, 0xe, {0xc, "7d7ef78cee17032513c7f914"}}, &(0x7f0000000b40)={0x20, 0x1, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x1, 0x6}}) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2713, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x28, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3000a}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004800}, 0x800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x8c}}, 0x0) sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.096431498s ago: executing program 3 (id=3659): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1e0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c840}, 0x840) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MP_STATE(0xffffffffffffffff, 0x4004ae99, &(0x7f0000000000)=0x3) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000180)={0xb6, 0x0, 0x8}) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000200)={{0xfffffffffffffffc, 0x0, 0x7, 0x1, 0xfff}}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x20082, 0x0) ioctl$RTC_ALM_READ(r5, 0x4008700c, &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc8, 0x74, 0x13, 0x40, 0x7c4, 0xa4a5, 0x52ed, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xd3, 0x8, 0x50, 0x5, "", [{{0x9, 0x4, 0x7b, 0x9, 0x0, 0x33, 0xd4, 0x7b, 0xd6}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x2, 0x0, @ioapic={0xf000, 0xfffffffe, 0x0, 0xeffffdff, 0x0, [{0x0, 0xec, 0xd}, {0x18, 0x5, 0xfe}, {0xfc, 0x1}, {0xfe, 0x0, 0x7f, '\x00', 0x6}, {0x8, 0x0, 0x1, '\x00', 0xb}, {0x0, 0x0, 0x0, '\x00', 0x81}, {0x20, 0x81}, {0x8, 0xe}, {0x0, 0x7, 0x0, '\x00', 0x7f}, {0x8, 0x6, 0x2}, {0x0, 0x3}, {0x1, 0x50, 0x9}, {0x4, 0x7, 0x4, '\x00', 0xf7}, {0x1, 0x4e}, {0x2, 0x3, 0x4, '\x00', 0xfe}, {0x0, 0x0, 0xfe, '\x00', 0xfd}, {0x0, 0x0, 0x80, '\x00', 0x2}, {0x0, 0x0, 0x0, '\x00', 0x3}, {0x6, 0x5, 0x7, '\x00', 0x8}, {0x80, 0x4, 0x49, '\x00', 0x3d}, {0x1, 0x4, 0x8}, {0x0, 0x0, 0x0, '\x00', 0x1}, {0x1, 0x6}, {0xfc, 0x5, 0xb}]}}) setrlimit(0xf, &(0x7f0000000100)={0x2, 0x5}) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r6, &(0x7f0000000300)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xa3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r8, &(0x7f00000000c0)=ANY=[], 0x6a) (fail_nth: 4) 741.537311ms ago: executing program 0 (id=3660): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x3a, r0, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x24044040) r2 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, 0x0, &(0x7f0000000180)={0x0, 0x101, 0x800, 0x103, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e4, 0x4, 0xfffffffe, 0x146, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8dd0, 0x0, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0x2, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={0xffffffffffffffff, 0x18000000000002a0, 0x4, 0x0, &(0x7f0000000500)="b9ff0300", 0x0, 0x100, 0x60000000, 0x0, 0xd9, 0x0, &(0x7f0000000280)="8dc92a8ff39080a675b6565efa3ed46f2a2756e4686c04020000002599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc06003fa40e054d38d49dfbebc2f137fc7110f48727f3ac3d6c83f6fda9222d2acdb0b3b9374206648707f4f5aeabd986d5f491389e9114ba8bd9aeeeed448e227802a455d6ba62aebeebc45885165e2501c30dc33fa47f5627e572e8627823"}, 0x4c) 627.139527ms ago: executing program 4 (id=3661): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a80)="2e00000011008188040f46ecdb4cb9cca7480ef413000000e3bd6efb440009000e000a400d000000ba80", 0x2a}], 0x1}, 0x6400000c) 516.036257ms ago: executing program 4 (id=3662): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000010000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d8008a2fe5bdaad140004009c7e472c916020fe41bcc5aa8f56c9471400050080ab8be51421cfa3c9e5cbfe8217e0af0800010000000000080001000000000060001a803f0003"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) 210.3621ms ago: executing program 2 (id=3663): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x10002, 0x1, 0x3000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x84, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x58, 0x3, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x48, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}]}}}, {0x29, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x108}}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f000016f000/0x2000)=nil, 0x2000, 0x1000009, 0x8031, 0xffffffffffffffff, 0x0) 170.820832ms ago: executing program 4 (id=3664): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x501201, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @ioapic={0x0, 0x0, 0x0, 0x0, 0x0, [{}, {}, {0x0, 0x2}, {}, {}, {0x0, 0x4, 0x0, '\x00', 0x1}, {0x0, 0xff}, {}, {0x0, 0x3}, {0x0, 0x0, 0x9}, {0x0, 0x0, 0x0, '\x00', 0xfe}, {}, {}, {0x20}, {}, {}, {0x3}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x6}, {}, {0x0, 0x2, 0x40}]}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x4048aecb, &(0x7f0000000380)) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) r7 = syz_open_dev$radio(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_OVERLAY(r7, 0x4004560e, &(0x7f00000000c0)=0x8) r8 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x8000, 0x5a) r9 = openat$cgroup_int(r8, &(0x7f0000000400)='cpu.max\x00', 0x2, 0x0) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYRESOCT=r0], 0x0) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io$hid(r10, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r10, 0x0, 0x0) syz_usb_control_io$uac2(r10, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendfile(r9, r9, &(0x7f0000000240)=0x3, 0x85b5) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r11, 0x8916, &(0x7f00000020c0)={'virt_wifi0\x00', {0x2, 0x4e21, @multicast1}}) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001000ffff27bd7000fbdbdf250000000061fa377587b0b4c123db456823381450414a6654e073ad115b48ea37e8d5ea3d551db31a269bd5beb2774ef937bbf94b399a1a964ba45139d7718e478b856bf10d124bce", @ANYRES32=0x0, @ANYBLOB="03fc0300145f02002c0012800e0001006970366772657461700000001800028014000700fefffffffffffffffffffffffffffffe0800040001000100"], 0x54}, 0x1, 0x0, 0x0, 0x14044080}, 0x0) ioctl$KVM_CREATE_DEVICE(r13, 0xc018aec0, &(0x7f0000000000)={0xb, 0xffffffffffffffff, 0x1}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xfff2}, {0x2, 0xffff}, {0xfff9, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x4c}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x4000885) 0s ago: executing program 2 (id=3665): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r1 = openat$dsp(0xffffff9c, &(0x7f0000000000), 0x2a0840, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000000040)=0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = getpgid(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000001c40)=[{{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000000400)="644ad236caf8b2d4429fd1c3b06d81f973cf72b1f77d696b2b359a2fd7fa9f60a758514aa4915edf17bc2b67bb9c68bc556990dacd7ac548b33a", 0x3a}, {&(0x7f0000000440)="b7ba5ef84e528e4972926aa67b65aef2aa0794b40a61bd376786f0a821b0688a143087bf46ac", 0x26}, {&(0x7f0000000ac0)="c4f9360be3754c7b8afb245cc573f32c943fb31b65693c24c543959f98f1ac1fc509b258af526b161ac6a8f7187f4812cc36c6e9f035bf2bc053edd5150fffaacbd6be5092957d0f320c95d598d498f03e8d1f328653b037da2339c9031e127cce1225b198eb415e391da1fcf2d96bea00f04ba4b90b734c0ecf40e7e0a47bd634776d1876215006e49e6a54e901c8650629cc98ad4886832cd4f5ca9f519fc73a90e40968934015993baf8e6a497fa5a031d2414edb1bc61a2d5d5473197b57974c7b50158a206788bae3df04cbafbccb1f1663de726e011e0bed0388c4c79c2f96770a2f3ff051e74a7de417c3ff2c64062ef4c38be386282b3d17d1a513a56817ca76b24dd2f12d5e78a55804a0216459566af12b08c852ca371d10b165c385ad2d487da8cf3035221646a174a25636a1889e080bacc0d2141217eab2f2120b0ddc56b36bb1b32fab7824b7ad53e62f27efa22a64a399cebeedd40606ef85691b0fe6a348ae79e7926bcd617875d7eb704da3727dbc30dfda67b0b94aa6c835d26c579a7c484ec393d7d690663c9e5c0a05d13e1fc59e53e287d971b38f229bbc9251e24a9bc1f8568a6f839629478872ff453a60214385e5be3fda0b696aef0f26a6183e8b947b9dbe9bb55f1af85604e843d3c38c0d03af2b25a3161217c72f03ed1f63cceca5d2014531b10fb47650a01e9ca1ce8c8b4c95501ae1bcb201a7a5ffb774f8647f9bfab0c8c9237c10944d64a589487252d4b7c9effc96fe017c1682d1adc87085a734c7f8de2c2b0b38e817f6a35f898f2d7069d5ebe635c1dc1dee4cfbb5b454861e74d422197803b32f8cbe3d7fe13beff125a9494d18df6532d31876df2e95f31ab247fa3383c41d37754fdf6c73bd7c3204bf0d983ae19dc9fdf6dd94d7f688d28030015d73fefbbb5d8d5aa809a1b068ede5901008741a5a9767bb2ef7abe9b720ad09a4cdb0bbef18a4938275e5311f8e8d9613f85aad2498307bbf5a6126e2b01846f6695a3ab3e0b18c8b9a64bc849e4031364f6fc41d5e6423ca70ac6d0314276b7b184194c7b136a6e7f9c09b9da197d17949445b5a09b1dcb767c83bdbff9a9a875ce3d4e8f4dbd33a1392ddef6eca4321bbc98be462efc6f1d12d35b4bb959fb9621e18dff4f440afe67c72aabd8bbf7b5bc183421857e7f447d40c12882cd5184b3befd0e1793081dddf929df01ae7c78290cd29e1da912eac40b3944a294a6bb17136d023ff203e32f9cd112b63adbdb830f265b51d1e10a296d3c3d4786264cedb6a3cd109a29e66ec099fbc3223146880db516ec83e0ed8b41ad5209b39763f2f64bd85fb0a55fdb698bdbe269d8e0ee9bfa19260530d6a0751ff8106026eff68a8509615edac9f35c8d79bfabf0e2b3bc7924e5dfada4e2d3b9215047cd0925974965b7d29c11e52334675c8b68e17d5d3e5aafcd167df4f4a0a2138c11901bc44a0946ad2203d4d867bb50a0304766c0a7a01326667b6b05078a5cee43b77bfb1ceb7267bd3f481595a57d2a7b681912206fe58c02c54b97db8dc6e9b73f1ac62a1dfb925738094695d2d69e8871af2e1ef885571950179da4365ba3d64d716dd32cf6b22048080f77d8446bf496c2d88b8a2d0c791c4d92d94090a8fd8c9f0190a5b587da89fcf063c99bf5f9725abf85888cdbe56f2ec0b7e74de4c9b181bb06710ac482049c7a63f7e6ae95155a56137d5fbdb39eaf1d14a05b85920532b2135f072cdc6cae63a55be8e9f3d4f9d31a64774a9c5a2270749089d57320d27f6241fa905047cff962978a6158444adb40cfd17ac216c070a54f47e6d843ed2c4ec8a3d7e474d116ed898b84bb973aee0dcd1102a2d82632f3693fc006c5fb120eb2c8dbd00cc7335eeb8d70534ab3bdc1033daf1eb8062846d81c34dbff71559d43ca540b9ecf0561f4faee8e4b84c076b53bc718d3bbc6f68f7c7f0456aeedbd5ca5c908427df69480da9dbf82d63fb4022955df331b635b31223002168840d7cace280ad0d3784eb20c986eb9a4c333161434dc47cace28f696ed8aad2157cd9d1b94e9c36858afb985ca6cf2ce5459241a2dbf460fd5cf068c9d59ac38b758536f63a0d32b702fdaeb27612514591d6530f826f5c9daa0ece21f36d19bad903afe9120fb1acc7c47c2bb1c0b3e97965ed5eb7deb897d5b6c4b11c55b4a86b3907086caad705c4c87a920d7b6efe73564cdd4be84f9e10f0df9b264b211cff77f2bebcc9624a3bca31520b2ca827436f4827680c2d07054bf335a7988d20d1388e5d9c0f3eb4a9fa3638516494cbfb03d00e0c1f0937fb785711c7e9a0fcec9bd626ddaedac2372573fbcc67b27569dc0831c4473577570e17f2e552b8df32b2679e6952758b108c85b9da81b38a8a0cd56d0ed4668bef615abb3d7798fcee13eb86b6ce58e50a0ff952f6f29db405052f434e501510c8f0b6d5c17de50a1815fe64a65c75587ae037281342c84b441756fe87fee7604c0b073e8a3f026a4fed2fd0b7223f63da44ce2db81819121262d06d4005fcbc2a3ba3c8c7c9db64508911357e01a55ed65421ad0372fa16e04134e341579ba84fc981d4b260a78f3464c81aa415cf89f3cf7e7ed875e853c246ec9b835ff06a944367898518539f4c63184e2be50cc4317df109baec45422ccf4f3b7e091748089e78a3bd8f3759b786414f555a30780f9330a3ca3b9881d9bdac00545f1209f9cb2174682c18d360966ac63290ba6b6610e61c26908e95ef658d588ae9b4f9f8924fd278d2970c5fc7b11527fbc5bdaa3f0f42a0f5c3a06842cf5c14f28ac84e02d7e99861e1788ad061c0c7752f7f59d59991ceefe1e04b3aaa5b58d812aa0b8d04374a7bc6d5c8f0f9d6ab94356c4b6dd58d2a248c369cb1307d9533ce21f343b3a6d88b2e95ebe41b1f0a778b87b8c3984997f4af21f6922cec2adffe014e3f1df748c7fe6f9c17376ef1730e9ea5fe7cf7e604a6386687734b8a01b37a97c2f071ebf130c1567230ffab350cb72e106f194a3901cd0439c1cf2ce47ce17bf52f0d5e6e95b17b34d7bbe5550edb118230851f2b8eaaaf04648c37a5f84168ee2e56eeec5797f9cb7c68c9b7aa4ed42a1d2ca010535c42a8bdd3d26098c0b65a468eb4b3b060ce7ec22a68c89d5ef42fcba1370d9e93102fd5be353032c0360250d62b41f2b03b3e68ac0beeb4c2eec1fda3514ad64a5592012507fded878d70c87ee487ce1393b2d914adcd6323379146dfb9fd0651e19e5e08ab121f25cda6291205c3217a498738e74bee19d931ec95a999753f339a1b27696f208853776e9859c77dfec836f4f7d2489f3779e28668303911134286f315be6dd8d45baaad3c0637e86ff62695582b6ec9658ebe65efa88a0503422327df7105a7f237f3d1d937e3259d5256166f40d0d14252359ca33280588575f2b017181381fd5ea59256e3e6c6bbc20f781e08a2072eec10e76c07ccd63f1adee56700c8ba213e923cb4a345f4af9fc05af6e9b8df24c93da863007afaf6dd2f1db941337f10a6fd6cd288316e665519517e2b1865a8425467a51b11c3c2cb6ee83ebc0b1ef8ae8d0f3665d06a1d36e0c05834b5c2685397748dee0f731cbe79210b63fe62c75cb58764bfb25009651893b4850471cfca65dde8c907c96389bc19e44cdad6b667db08d52d0a7aeec903fbdbefdf9f9fe12910006748a85e4a02e14f4fab5a4a4307e7bdb2ac00e7dc3380cac052a24420c87f3b672bc31f0ba75612ed5e3ceb58d1720cc734b89aef273e46eae8902faafa8b1b712b924794e58302991fcfd391925394ebfa7ec8218c291f098c2120a35d218a3ce78cff224982c4a90a5681c6ae015858f9fd97958c0fe51235d5724f4e0155fedd47c1b4d9812a23cd34c19fbe6db6c26f10ab711106d99e96425b22282df2f1b4bf19165a7ddeb6d111a7113083be9407695bbc97ea510873b56cccd9ab3cd67623c760df9e932b944d821faedd0342a2c0d3ea3c3c4b742b9cc0bb8b81289bcd50e31a95ee51e9b6363106ccb6b3140afa799fc825c5f03a8f98a429d8ac2778e1c5445c0521e2edcc262d52f18fe4ee17bcf2fddbf5fd1d0e7e81d44dc676b0b251c97a918976d272c812c6f191402a4c3e6992df3e5edc78161d44671ba53d73ec350b4ea8b60a70e4a61993e5e2ee2a5a7d88dc554b395749b617fa84cdfc0dc04e15a2e78ce1607dca509a28c225578326b8a1ad32736fe4402c9eaae35dfd40bbbd6c80eaba270c6621273838247b9918ca48c2faf41087f63c61a0361af4859d22291fec2094a100b57f11d8b87081288f798681bdfffdb8f89d8a8b6b46833aa2feeb19c395f3fe088d4f81cb25c387bad5874b0bb917c0c712de7d3c989d0308f67d7ff43c42be285e0a590a33a6fd6b141a694f5f78866d72d1c5d8cdc6e88706e2d10e333d26b45f3e7c919617a604b439d6a55620bda1e0df9f570bd63613083ef45fe56b3408380d78c7ba176a5c2e178de7a23c2defafbb99098ed6fb82772c183592e0f1251a94261f2c3def31e63e8755a9520db71afa2e8b4d745d5ed82c00a6839a509dd5ad30cee3eaf4cfdf633a2f2680464a8b01538545632b7ccb8f0c6f5ec7b6b23866de9cf8ed67fa0356697be9d206f13d9863cb6b0f7f9ccde1e1cac8a1194ad04d9ab4e21612c64232ab0e4037fe223fbcf965b892cbab532290d73fc6abb951f6848803dc0f49871120ee36e542005e8c2cc98dda9c09e4f9557fcc59d62d7ed44d8ee80aae0ae19414c14f5e6bec1a50be18244a007a4acaeb7af670a9092b06d82e34895dd3d80f55877b0016d1f136b4a058f6f64497e0ce242775ce9ba422825f2bf513735e7d6a9120a1f6b530d4dac9abd4ad58ad18cec419a808e4a3c4c593832d9e21486767a7ce3709cad1410d07e57099f552c92b547bd6a5fe47fee9454840713954d54a0f24056e9e644c5de21fac6485585536acf8384738dbcb2ca0c4aef50abb296b85857b0b1dcedda352882ef8b6a2b961da5f90ec99d71f878e26e9975bf1191b38137eb914ce9e4aa875312cb5aece130c8c0b87984a02e250e8de4a6d598595ffbb7ff24a64345481c8be997cca72cb48fb9c066a3997b1a763a6a5e5cbdfed6506c39537cdb4ef4213852cd729ceb5a8624f13ebfdf3092f9a4cd97900cb88eb78ae694694b6711fb26e2b5cbef2d3eb7b7a08a4207302da64dfb0cccce2eb873be73de17a225e1afd2ffe09f0dd71a6d3dec955bf89de0e6fa83fc17216672e3c9f167ab5689d925a6cb4a50319759ae5f4ec68084ed3a31f8b744e2e296e8174397885dee656f51c7e537a7849342f7b580da7abdd1417fa8908939de53dd8e92628f6f375d5ba76c0306d37d45efe6576a126b2f4fdd08f785fdff42a0e0a2d6c47069405abd50284487088f2bf9ed3641c8fc1fe6c2e9269000b18e8fe3a8cd255129a9d8727b3135b15fc66f5f4c771322ab043d04c6e2fb89dd333edb51b018d44029d631db6e24272c7aca9b606200d66856769d259264c6f09d4ddf5df617153a7f658c1c165f82c9c91a2c8b12468ba3d193e74fcc2b7b36ddfe109d0be7b67304d3c8fb401e895c52161b8e01114bbb5c7b04624ab39e09e059fc0053fcae3a57ea202587023898c5e915e9ee6a941818e97d11cb83f8db459a1f19afbc6dd9fbdef2b9915d00b2ffd4e96f743d41da7604682ea2ff1b2f7e2da54d0710e3e7b85a6bfeba7e2b6ac6ca95681f10acbbbb90959e714e178d49e7b2c366e417367bffce24029", 0x1000}, {&(0x7f0000001ac0)="1f7e8ae1d26b8e057e4bf31574be9d45d202e4a3420281db1ee08cdbf7ef59614e95f773d30a30dec63e4cd6a91e163e68eb7a70d38f00085495587b67e55b57340e4c45089b65638a2b89064e3e348be2e5bd34c034db05cf10de0385dbfa3d1de0690167fabc558a47419f0bd251b231905e47a36ecdee919a0733963e81253828dca5d728b4fee2f59f3659e6b474b386687b7649e26fa50ac4cc518362ae53ad0210192ac8d6", 0xa8}, {&(0x7f0000001b80)="4f31ea23551549090c072d3ef8f2ae493f4714fe8087441d6ba39fe651a197530b4ae29dee1a848a7d34244f3f067a43b1e938e2906889ae3399c7ce", 0xfffffffffffffce4}], 0x5, &(0x7f0000001c00)=[@rights={{0x28, 0x1, 0x1, [r4, r4, r0, r1, r5, r4, r2]}}], 0x28, 0x80}}], 0x1, 0x4008800) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r6 = add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='5', 0x1, 0xfffffffffffffffd) keyctl$KEYCTL_MOVE(0x1e, r6, 0xfffffffffffffffb, 0xffffffffffffffff, 0x1) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x3ff, r7, 0x0, 0x100000000000000}, 0x38) socket(0x2b, 0x1, 0x1) r8 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0001}]}) readv(r9, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1) close_range(r10, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x28}}, 0x40010) r11 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[], 0x0) syz_usb_control_io$hid(r11, 0x0, 0x0) syz_usb_control_io$hid(r11, &(0x7f00000003c0)={0x14, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0) r12 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r12, 0x81044804, &(0x7f00000001c0)={0x1, 0x2}) kernel console output (not intermixed with test programs): nconfined pid=18638 comm="syz.4.3366" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 939.360993][T18651] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 939.370406][ T9] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 939.418877][ T30] audit: type=1326 audit(1785056500.662:3082): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18650 comm="syz.1.3370" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 939.458014][T15871] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 939.475356][ T30] audit: type=1326 audit(1785056500.662:3083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18650 comm="syz.1.3370" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 939.513206][ T30] audit: type=1326 audit(1785056500.662:3084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18650 comm="syz.1.3370" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 939.564726][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 939.579670][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 939.595984][T15871] usb 3-1: device descriptor read/64, error -71 [ 939.608033][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 939.629621][ T9] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 939.664777][ T9] usb 4-1: New USB device found, idVendor=0644, idProduct=8021, bcdDevice= 0.40 [ 939.680379][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 939.690388][ T9] usb 4-1: Product: syz [ 939.694633][ T9] usb 4-1: Manufacturer: syz [ 939.700107][ T9] usb 4-1: SerialNumber: syz [ 939.756847][T18664] FAULT_INJECTION: forcing a failure. [ 939.756847][T18664] name failslab, interval 1, probability 0, space 0, times 0 [ 939.772082][T18664] CPU: 1 UID: 0 PID: 18664 Comm: syz.1.3374 Tainted: G L syzkaller #0 PREEMPT(full) [ 939.772128][T18664] Tainted: [L]=SOFTLOCKUP [ 939.772138][T18664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 939.772159][T18664] Call Trace: [ 939.772170][T18664] [ 939.772185][T18664] dump_stack_lvl+0xe8/0x150 [ 939.772227][T18664] should_fail_ex+0x40c/0x560 [ 939.772273][T18664] should_failslab+0xa8/0x100 [ 939.772320][T18664] __kmalloc_cache_node_noprof+0xaa/0x630 [ 939.772364][T18664] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 939.772407][T18664] ? __get_vm_area_node+0x136/0x300 [ 939.772442][T18664] ? __get_vm_area_node+0x136/0x300 [ 939.772478][T18664] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 939.772527][T18664] __get_vm_area_node+0x136/0x300 [ 939.772568][T18664] __vmalloc_node_range_noprof+0x358/0x1730 [ 939.772610][T18664] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 939.772774][T18664] ? __pfx___mutex_trylock_common+0x10/0x10 [ 939.772813][T18664] ? rcu_is_watching+0x15/0xb0 [ 939.772861][T18664] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 939.772905][T18664] ? __mutex_unlock_slowpath+0x731/0x900 [ 939.772949][T18664] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 939.772978][T18664] vmalloc_noprof+0xb2/0xe0 [ 939.773016][T18664] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 939.773056][T18664] snd_dma_alloc_dir_pages+0x120/0x220 [ 939.773093][T18664] do_alloc_pages+0x11c/0x260 [ 939.773127][T18664] snd_pcm_lib_malloc_pages+0x33a/0x780 [ 939.773171][T18664] snd_pcm_hw_params+0x870/0x1d50 [ 939.773269][T18664] ? do_raw_spin_lock+0x12b/0x2f0 [ 939.773311][T18664] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 939.773351][T18664] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 939.773404][T18664] ? snd_pcm_kernel_ioctl+0x336/0xa70 [ 939.773440][T18664] snd_pcm_oss_change_params_locked+0x1e90/0x3c80 [ 939.773546][T18664] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 939.773597][T18664] ? __mutex_unlock_slowpath+0x731/0x900 [ 939.773642][T18664] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 939.773678][T18664] ? __might_fault+0xaf/0x130 [ 939.773732][T18664] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 939.773779][T18664] snd_pcm_oss_set_channels+0x1b6/0x4e0 [ 939.773830][T18664] snd_pcm_oss_ioctl+0xadb/0xdf0 [ 939.773875][T18664] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 939.773913][T18664] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 939.773947][T18664] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 939.773984][T18664] ? __fget_files+0x3a2/0x420 [ 939.774031][T18664] ? fput+0xa0/0xd0 [ 939.774068][T18664] ? ksys_write+0x242/0x270 [ 939.774112][T18664] __do_fast_syscall_32+0x23e/0x6f0 [ 939.774151][T18664] ? do_fast_syscall_32+0x33/0x70 [ 939.774181][T18664] ? lockdep_hardirqs_on+0x7a/0x110 [ 939.774208][T18664] ? asm_int80_emulation+0x1a/0x20 [ 939.774236][T18664] ? do_int80_emulation+0x29f/0x550 [ 939.774269][T18664] ? trace_irq_disable+0x3b/0x140 [ 939.774310][T18664] do_fast_syscall_32+0x33/0x70 [ 939.774345][T18664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 939.774384][T18664] RIP: 0023:0xf709f0ec [ 939.774412][T18664] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 939.774438][T18664] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 939.774469][T18664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045006 [ 939.774487][T18664] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 939.774502][T18664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 939.774519][T18664] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 939.774536][T18664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 939.774574][T18664] [ 939.775012][T18664] syz.1.3374: vmalloc error: size 2097152, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 939.846149][T15871] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 939.978559][T18664] ,cpuset= [ 940.043855][T15874] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 940.048210][T18664] / [ 940.205687][T15874] usb 5-1: Using ep0 maxpacket: 32 [ 940.206116][T18664] ,mems_allowed=0-1 [ 940.213438][T15874] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 940.222414][T18664] [ 940.226930][T15871] usb 3-1: device descriptor read/64, error -71 [ 940.228943][T15874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 940.235535][T18664] CPU: 1 UID: 0 PID: 18664 Comm: syz.1.3374 Tainted: G L syzkaller #0 PREEMPT(full) [ 940.235620][T18664] Tainted: [L]=SOFTLOCKUP [ 940.235641][T18664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 940.235680][T18664] Call Trace: [ 940.235710][T18664] [ 940.235732][T18664] dump_stack_lvl+0xe8/0x150 [ 940.235852][T18664] warn_alloc+0x24c/0x270 [ 940.235934][T18664] ? __kasan_kmalloc+0x22/0xb0 [ 940.236026][T18664] ? __pfx_warn_alloc+0x10/0x10 [ 940.236108][T18664] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 940.236231][T18664] ? __get_vm_area_node+0x2af/0x300 [ 940.236340][T18664] __vmalloc_node_range_noprof+0x37d/0x1730 [ 940.236428][T18664] ? __pfx___mutex_trylock_common+0x10/0x10 [ 940.236492][T18664] ? rcu_is_watching+0x15/0xb0 [ 940.236598][T18664] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 940.236676][T18664] ? __mutex_unlock_slowpath+0x731/0x900 [ 940.236764][T18664] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 940.236837][T18664] vmalloc_noprof+0xb2/0xe0 [ 940.236862][T18664] ? snd_dma_alloc_dir_pages+0x120/0x220 [ 940.236886][T18664] snd_dma_alloc_dir_pages+0x120/0x220 [ 940.236913][T18664] do_alloc_pages+0x11c/0x260 [ 940.236976][T18664] snd_pcm_lib_malloc_pages+0x33a/0x780 [ 940.237098][T18664] snd_pcm_hw_params+0x870/0x1d50 [ 940.237196][T18664] ? do_raw_spin_lock+0x12b/0x2f0 [ 940.237280][T18664] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 940.237354][T18664] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 940.237450][T18664] ? snd_pcm_kernel_ioctl+0x336/0xa70 [ 940.237542][T18664] snd_pcm_oss_change_params_locked+0x1e90/0x3c80 [ 940.237704][T18664] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 940.237813][T18664] ? __mutex_unlock_slowpath+0x731/0x900 [ 940.237893][T18664] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 940.237961][T18664] ? __might_fault+0xaf/0x130 [ 940.238040][T18664] snd_pcm_oss_get_active_substream+0x1e2/0x280 [ 940.238137][T18664] snd_pcm_oss_set_channels+0x1b6/0x4e0 [ 940.238228][T18664] snd_pcm_oss_ioctl+0xadb/0xdf0 [ 940.238327][T18664] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 940.238425][T18664] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 940.238506][T18664] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 940.238581][T18664] ? __fget_files+0x3a2/0x420 [ 940.238700][T18664] ? fput+0xa0/0xd0 [ 940.238770][T18664] ? ksys_write+0x242/0x270 [ 940.238865][T18664] __do_fast_syscall_32+0x23e/0x6f0 [ 940.238934][T18664] ? do_fast_syscall_32+0x33/0x70 [ 940.238996][T18664] ? lockdep_hardirqs_on+0x7a/0x110 [ 940.239054][T18664] ? asm_int80_emulation+0x1a/0x20 [ 940.239112][T18664] ? do_int80_emulation+0x29f/0x550 [ 940.239166][T18664] ? trace_irq_disable+0x3b/0x140 [ 940.239246][T18664] do_fast_syscall_32+0x33/0x70 [ 940.239334][T18664] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 940.239390][T18664] RIP: 0023:0xf709f0ec [ 940.239447][T18664] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 940.239508][T18664] RSP: 002b:00000000f548d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 940.239570][T18664] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0045006 [ 940.239613][T18664] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000 [ 940.239652][T18664] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 940.239684][T18664] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 940.239723][T18664] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 940.239833][T18664] [ 940.272699][T18664] Mem-Info: [ 940.336803][T15871] usb usb3-port1: attempt power cycle [ 940.546299][T18664] active_anon:8450 inactive_anon:0 isolated_anon:0 [ 940.546299][T18664] active_file:0 inactive_file:57979 isolated_file:0 [ 940.546299][T18664] unevictable:768 dirty:299 writeback:0 [ 940.546299][T18664] slab_reclaimable:8577 slab_unreclaimable:104136 [ 940.546299][T18664] mapped:33203 shmem:3338 pagetables:1412 [ 940.546299][T18664] sec_pagetables:5 bounce:0 [ 940.546299][T18664] kernel_misc_reclaimable:0 [ 940.546299][T18664] free:1295920 free_pcp:10326 free_cma:0 [ 940.566948][T15874] usb 5-1: config 0 descriptor?? [ 940.635975][T18664] Node 0 active_anon:33796kB inactive_anon:0kB active_file:0kB inactive_file:231440kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:132644kB dirty:1196kB writeback:0kB shmem:11812kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14784kB pagetables:5484kB sec_pagetables:20kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 940.663436][ T9] usb 4-1: us122l: couldn't allocate write buffer [ 940.699958][ T9] snd-usb-us122l 4-1:1.1: probe with driver snd-usb-us122l failed with error -22 [ 940.716538][ T9] usb 4-1: USB disconnect, device number 5 [ 940.743406][T15874] gspca_main: sunplus-2.14.0 probing 041e:400b [ 940.763858][T18664] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:168kB dirty:0kB writeback:0kB shmem:1540kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 940.801729][T18664] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 940.833905][T18664] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 940.844079][T18664] Node 0 DMA32 free:1229780kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33796kB inactive_anon:0kB active_file:0kB inactive_file:231440kB unevictable:1536kB writepending:1196kB zspages:0kB present:3129332kB managed:2548600kB mlocked:0kB bounce:0kB free_pcp:41712kB local_pcp:20796kB free_cma:0kB [ 940.883900][ T9976] udevd[9976]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 940.895345][T18664] lowmem_reserve[]: 0 0 0 0 0 [ 940.921932][T18664] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:260kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 940.959363][T18664] lowmem_reserve[]: 0 0 0 0 0 [ 940.964461][T18664] Node 1 Normal free:3938540kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:476kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 940.996614][T18664] lowmem_reserve[]: 0 0 0 0 0 [ 941.001490][T18664] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 941.022532][T18664] Node 0 DMA32: 819*4kB (UME) 1163*8kB (UME) 611*16kB (UME) 496*32kB (UME) 220*64kB (UME) 281*128kB (UME) 197*256kB (UME) 97*512kB (UME) 67*1024kB (UME) 5*2048kB (UM) 235*4096kB (UM) = 1229780kB [ 941.042787][T18664] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 941.054971][T18664] Node 1 Normal: 3*4kB (UM) 2*8kB (M) 5*16kB (UM) 10*32kB (UM) 11*64kB (UM) 3*128kB (U) 3*256kB (UM) 2*512kB (M) 3*1024kB (UM) 2*2048kB (U) 959*4096kB (UM) = 3938540kB [ 941.072445][T18664] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 941.072800][T15871] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 941.090097][T18664] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 941.099704][T18664] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 941.111002][T15871] usb 3-1: device descriptor read/8, error -71 [ 941.121101][T18664] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 941.133008][T18664] 61315 total pagecache pages [ 941.137867][T18664] 0 pages in swap cache [ 941.142055][T18664] Free swap = 124996kB [ 941.146429][T18664] Total swap = 124996kB [ 941.150666][T18664] 2097051 pages RAM [ 941.154497][T18664] 0 pages HighMem/MovableOnly [ 941.159709][T18664] 428221 pages reserved [ 941.163957][T18664] 0 pages cma reserved [ 941.168530][T15874] gspca_sunplus: reg_w_riv err -71 [ 941.175711][T15874] sunplus 5-1:0.0: probe with driver sunplus failed with error -71 [ 941.193227][T15874] usb 5-1: USB disconnect, device number 37 [ 941.365912][T15871] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 941.397719][T15871] usb 3-1: device descriptor read/8, error -71 [ 941.479672][T18675] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3376'. [ 941.506713][T15871] usb usb3-port1: unable to enumerate USB device [ 941.685735][T15866] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 941.847656][T15866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 941.870154][T15866] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.889947][T15866] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 941.904412][T15866] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 941.948371][T15866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.984843][T15866] usb 2-1: config 0 descriptor?? [ 943.602391][T18698] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 944.639520][T15866] usbhid 2-1:0.0: can't add hid device: -71 [ 944.675195][T15866] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 944.728053][T15866] usb 2-1: USB disconnect, device number 17 [ 944.905983][T15874] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 944.986705][ T30] kauditd_printk_skb: 34 callbacks suppressed [ 944.986725][ T30] audit: type=1326 audit(1785056506.232:3119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.0.3391" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 945.044185][ T30] audit: type=1326 audit(1785056506.232:3120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.0.3391" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 945.067318][T15874] usb 4-1: Using ep0 maxpacket: 32 [ 945.069986][ T30] audit: type=1326 audit(1785056506.232:3121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.0.3391" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 945.087060][T15874] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 945.121097][T15874] usb 4-1: config 0 has no interface number 0 [ 945.121652][ T30] audit: type=1326 audit(1785056506.232:3122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.0.3391" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 945.134314][T15874] usb 4-1: config 0 interface 184 has no altsetting 0 [ 945.156758][ T30] audit: type=1326 audit(1785056506.232:3123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.0.3391" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 945.185286][T15866] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 945.213211][ T30] audit: type=1326 audit(1785056506.232:3124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.0.3391" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 945.213753][T15874] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 945.266548][ T30] audit: type=1326 audit(1785056506.232:3125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18715 comm="syz.0.3391" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 945.281708][T15874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 945.315532][T18720] FAULT_INJECTION: forcing a failure. [ 945.315532][T18720] name failslab, interval 1, probability 0, space 0, times 0 [ 945.317427][T15874] usb 4-1: Product: syz [ 945.335079][T18720] CPU: 1 UID: 0 PID: 18720 Comm: syz.0.3393 Tainted: G L syzkaller #0 PREEMPT(full) [ 945.335116][T18720] Tainted: [L]=SOFTLOCKUP [ 945.335125][T18720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 945.335138][T18720] Call Trace: [ 945.335147][T18720] [ 945.335156][T18720] dump_stack_lvl+0xe8/0x150 [ 945.335195][T18720] should_fail_ex+0x40c/0x560 [ 945.335229][T18720] should_failslab+0xa8/0x100 [ 945.335266][T18720] __kmalloc_noprof+0xfe/0x720 [ 945.335297][T18720] ? video_usercopy+0x1b1/0x1430 [ 945.335446][T18720] ? video_usercopy+0x1b1/0x1430 [ 945.335482][T18720] video_usercopy+0x1b1/0x1430 [ 945.335519][T18720] ? __pfx___video_do_ioctl+0x10/0x10 [ 945.335548][T18720] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 945.335572][T18720] ? __pfx_video_usercopy+0x10/0x10 [ 945.335620][T18720] ? __fget_files+0x2a/0x420 [ 945.335653][T18720] v4l2_ioctl+0x18d/0x1e0 [ 945.335684][T18720] v4l2_compat_ioctl32+0x1c4/0x270 [ 945.335770][T18720] __ia32_compat_sys_ioctl+0x5ea/0x950 [ 945.335799][T18720] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 945.335832][T18720] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 945.335860][T18720] ? __fget_files+0x3a2/0x420 [ 945.335897][T18720] ? fput+0xa0/0xd0 [ 945.335927][T18720] ? ksys_write+0x242/0x270 [ 945.335962][T18720] __do_fast_syscall_32+0x23e/0x6f0 [ 945.335990][T18720] ? do_fast_syscall_32+0x33/0x70 [ 945.336016][T18720] ? lockdep_hardirqs_on+0x7a/0x110 [ 945.336036][T18720] ? asm_int80_emulation+0x1a/0x20 [ 945.336055][T18720] ? do_int80_emulation+0x29f/0x550 [ 945.336079][T18720] ? trace_irq_disable+0x3b/0x140 [ 945.336109][T18720] do_fast_syscall_32+0x33/0x70 [ 945.336136][T18720] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 945.336164][T18720] RIP: 0023:0xf705f0ec [ 945.336185][T18720] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 945.336204][T18720] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 945.336227][T18720] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c0d05605 [ 945.336243][T18720] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000 [ 945.336257][T18720] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 945.336270][T18720] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 945.336284][T18720] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 945.336314][T18720] [ 945.376345][T15874] usb 4-1: Manufacturer: syz [ 945.378821][T15866] usb 2-1: Using ep0 maxpacket: 32 [ 945.383289][T15874] usb 4-1: SerialNumber: syz [ 945.496358][T15866] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 945.610393][T15874] usb 4-1: config 0 descriptor?? [ 945.708732][T15866] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 945.735685][ T30] audit: type=1326 audit(1785056506.972:3126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18721 comm="syz.4.3394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 945.785492][T15866] usb 2-1: config 0 descriptor?? [ 945.798702][ T30] audit: type=1326 audit(1785056506.972:3127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18721 comm="syz.4.3394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 945.837153][T15866] gspca_main: sunplus-2.14.0 probing 041e:400b [ 945.866676][ T30] audit: type=1326 audit(1785056506.972:3128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18721 comm="syz.4.3394" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 946.200538][T15866] gspca_sunplus: reg_w_riv err -71 [ 946.207559][T15866] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 946.250145][T15866] usb 2-1: USB disconnect, device number 18 [ 946.644311][T18708] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 946.658380][T18708] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 946.812130][T15874] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 946.845483][T15874] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 946.891480][T15874] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 946.935101][T15874] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 946.961475][T15874] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 947.004870][T15874] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 947.066819][T15874] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 947.141988][T15874] usb 4-1: USB disconnect, device number 6 [ 947.275541][T18740] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 947.371459][T18748] netlink: 'syz.1.3398': attribute type 39 has an invalid length. [ 947.647279][T18748] hsr_slave_0 (unregistering): left promiscuous mode [ 947.828350][T18751] syz_tun: entered allmulticast mode [ 948.029020][T18754] netlink: 'syz.2.3403': attribute type 2 has an invalid length. [ 948.278912][T18757] netlink: 'syz.3.3404': attribute type 3 has an invalid length. [ 948.457718][T18757] bridge1: entered promiscuous mode [ 948.681193][T18762] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3406'. [ 948.695776][T18764] FAULT_INJECTION: forcing a failure. [ 948.695776][T18764] name failslab, interval 1, probability 0, space 0, times 0 [ 948.731451][T18764] CPU: 1 UID: 0 PID: 18764 Comm: syz.2.3407 Tainted: G L syzkaller #0 PREEMPT(full) [ 948.731486][T18764] Tainted: [L]=SOFTLOCKUP [ 948.731495][T18764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 948.731516][T18764] Call Trace: [ 948.731526][T18764] [ 948.731535][T18764] dump_stack_lvl+0xe8/0x150 [ 948.731574][T18764] should_fail_ex+0x40c/0x560 [ 948.731607][T18764] should_failslab+0xa8/0x100 [ 948.731642][T18764] __kmalloc_noprof+0xfe/0x720 [ 948.731669][T18764] ? rcu_is_watching+0x15/0xb0 [ 948.731690][T18764] ? tomoyo_realpath_from_path+0xef/0x640 [ 948.731714][T18764] ? tomoyo_realpath_from_path+0xef/0x640 [ 948.731746][T18764] tomoyo_realpath_from_path+0xef/0x640 [ 948.731779][T18764] ? tomoyo_path_number_perm+0x219/0x5f0 [ 948.731812][T18764] tomoyo_path_number_perm+0x246/0x5f0 [ 948.731848][T18764] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 948.731881][T18764] ? __lock_acquire+0x683/0x2cf0 [ 948.731927][T18764] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 948.731971][T18764] ? __fget_files+0x2a/0x420 [ 948.732007][T18764] ? __fget_files+0x3a2/0x420 [ 948.732036][T18764] ? __fget_files+0x2a/0x420 [ 948.732072][T18764] security_file_ioctl_compat+0xc3/0x2a0 [ 948.732108][T18764] __ia32_compat_sys_ioctl+0x139/0x950 [ 948.732137][T18764] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 948.732163][T18764] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 948.732192][T18764] ? __fget_files+0x3a2/0x420 [ 948.732228][T18764] ? fput+0xa0/0xd0 [ 948.732257][T18764] ? ksys_write+0x242/0x270 [ 948.732293][T18764] __do_fast_syscall_32+0x23e/0x6f0 [ 948.732320][T18764] ? do_fast_syscall_32+0x33/0x70 [ 948.732345][T18764] ? lockdep_hardirqs_on+0x7a/0x110 [ 948.732369][T18764] ? asm_int80_emulation+0x1a/0x20 [ 948.732390][T18764] ? do_int80_emulation+0x29f/0x550 [ 948.732414][T18764] ? trace_irq_disable+0x3b/0x140 [ 948.732446][T18764] do_fast_syscall_32+0x33/0x70 [ 948.732473][T18764] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 948.732501][T18764] RIP: 0023:0xf70cf0ec [ 948.732530][T18764] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 948.732549][T18764] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 948.732572][T18764] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000000541e [ 948.732587][T18764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 948.732600][T18764] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 948.732612][T18764] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 948.732625][T18764] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 948.732657][T18764] [ 948.732677][T18764] ERROR: Out of memory at tomoyo_realpath_from_path. [ 949.026574][T18742] syz_tun: left allmulticast mode [ 949.049852][T18768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3409'. [ 949.146665][T15864] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 949.244971][T18773] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3411'. [ 949.288416][T18773] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.297161][T18773] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.321614][T15864] usb 4-1: Using ep0 maxpacket: 32 [ 949.344252][T15864] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 949.367418][T15864] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.403341][T15864] usb 4-1: config 0 descriptor?? [ 949.439786][T15864] gspca_main: sunplus-2.14.0 probing 041e:400b [ 949.827051][T15864] gspca_sunplus: reg_w_riv err -71 [ 949.839310][T15864] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 949.861294][T15864] usb 4-1: USB disconnect, device number 7 [ 949.927735][T15866] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 949.935271][T18782] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 1 out of range (51000000..2150000000) [ 949.970836][T18785] erspan0: entered promiscuous mode [ 949.976389][T18785] erspan0: entered allmulticast mode [ 950.106180][T15866] usb 2-1: Using ep0 maxpacket: 32 [ 950.126914][T15866] usb 2-1: config 0 has an invalid interface number: 12 but max is 0 [ 950.147112][T15866] usb 2-1: config 0 has no interface number 0 [ 950.168356][T15866] usb 2-1: config 0 interface 12 has no altsetting 0 [ 950.188560][T15866] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 950.205771][T15866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.214041][T15866] usb 2-1: Product: syz [ 950.219950][T15866] usb 2-1: Manufacturer: syz [ 950.229676][T15866] usb 2-1: SerialNumber: syz [ 950.249607][T15866] usb 2-1: config 0 descriptor?? [ 950.288069][T18793] ip6tnl2: entered promiscuous mode [ 950.310581][T18793] input: syz1 as /devices/virtual/input/input79 [ 950.439005][T16383] Bluetooth: hci2: ISO packet too small [ 950.776446][T15864] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 950.924989][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 950.925008][ T30] audit: type=1326 audit(1785056512.162:3149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3425" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 950.973639][T15864] usb 5-1: Using ep0 maxpacket: 8 [ 950.989933][ T30] audit: type=1326 audit(1785056512.202:3150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3425" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 951.019151][ T30] audit: type=1326 audit(1785056512.202:3151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3425" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 951.045372][T18811] kvm: kvm [18810]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 951.051079][T15864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 951.063376][ T30] audit: type=1326 audit(1785056512.202:3152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3425" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 951.094355][T15864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 951.107864][T15864] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 951.118122][T15864] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 951.135107][ T30] audit: type=1326 audit(1785056512.202:3153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3425" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 951.167359][T15864] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 951.177423][T15864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.186234][ T30] audit: type=1326 audit(1785056512.202:3154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18810 comm="syz.3.3425" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 951.216687][T15864] usb 5-1: Product: syz [ 951.221295][T15864] usb 5-1: Manufacturer: syz [ 951.227735][T15864] usb 5-1: SerialNumber: syz [ 951.234964][ T30] audit: type=1326 audit(1785056512.282:3155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18817 comm="syz.0.3428" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf705f0ec code=0x0 [ 951.384979][T18825] fuse: Bad value for 'user_id' [ 951.400990][T18825] fuse: Bad value for 'user_id' [ 951.890433][T18834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3432'. [ 951.905315][T18834] FAULT_INJECTION: forcing a failure. [ 951.905315][T18834] name failslab, interval 1, probability 0, space 0, times 0 [ 951.920088][T18834] CPU: 0 UID: 0 PID: 18834 Comm: syz.0.3432 Tainted: G L syzkaller #0 PREEMPT(full) [ 951.920121][T18834] Tainted: [L]=SOFTLOCKUP [ 951.920130][T18834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 951.920144][T18834] Call Trace: [ 951.920153][T18834] [ 951.920162][T18834] dump_stack_lvl+0xe8/0x150 [ 951.920202][T18834] should_fail_ex+0x40c/0x560 [ 951.920235][T18834] should_failslab+0xa8/0x100 [ 951.920288][T18834] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 951.920317][T18834] ? skb_clone+0x212/0x3a0 [ 951.920351][T18834] ? skb_clone+0x212/0x3a0 [ 951.920384][T18834] skb_clone+0x212/0x3a0 [ 951.920408][T18834] ? dev_queue_xmit_nit+0x25c/0xac0 [ 951.920433][T18834] dev_queue_xmit_nit+0x28d/0xac0 [ 951.920455][T18834] ? dev_queue_xmit_nit+0x2d/0xac0 [ 951.920487][T18834] dev_hard_start_xmit+0x1c1/0x830 [ 951.920531][T18834] __dev_queue_xmit+0x14c0/0x3820 [ 951.920557][T18834] ? __do_fast_syscall_32+0x23e/0x6f0 [ 951.920584][T18834] ? do_fast_syscall_32+0x33/0x70 [ 951.920623][T18834] ? __dev_queue_xmit+0x29b/0x3820 [ 951.920662][T18834] ? __pfx___dev_queue_xmit+0x10/0x10 [ 951.920702][T18834] ? __copy_skb_header+0xa3/0x4a0 [ 951.920729][T18834] ? __asan_memcpy+0x40/0x70 [ 951.920754][T18834] ? __skb_clone+0x5c/0x6c0 [ 951.920784][T18834] ? __skb_clone+0x449/0x6c0 [ 951.920814][T18834] ? skb_clone+0x246/0x3a0 [ 951.920844][T18834] __netlink_deliver_tap+0x5b4/0x860 [ 951.920882][T18834] ? netlink_deliver_tap+0x2e/0x1b0 [ 951.920908][T18834] netlink_deliver_tap+0x19c/0x1b0 [ 951.920936][T18834] netlink_unicast+0x77f/0x940 [ 951.920971][T18834] netlink_sendmsg+0x813/0xb40 [ 951.921009][T18834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.921040][T18834] ? aa_sock_msg_perm+0xf1/0x1b0 [ 951.921071][T18834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 951.921096][T18834] sock_sendmsg_nosec+0x13a/0x180 [ 951.921131][T18834] ____sys_sendmsg+0x54e/0x850 [ 951.921175][T18834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 951.921234][T18834] ___sys_sendmsg+0x2a5/0x360 [ 951.921260][T18834] ? __lock_acquire+0x683/0x2cf0 [ 951.921298][T18834] ? __pfx____sys_sendmsg+0x10/0x10 [ 951.921330][T18834] ? get_pid_task+0x20/0x1f0 [ 951.921361][T18834] ? get_pid_task+0x20/0x1f0 [ 951.921415][T18834] ? get_pid_task+0x20/0x1f0 [ 951.921484][T18834] ? __fget_files+0x2a/0x420 [ 951.921512][T18834] ? __fget_files+0x3a2/0x420 [ 951.921551][T18834] __sys_sendmsg+0x177/0x240 [ 951.921592][T18834] ? __pfx___sys_sendmsg+0x10/0x10 [ 951.921637][T18834] __do_fast_syscall_32+0x23e/0x6f0 [ 951.921664][T18834] ? do_fast_syscall_32+0x33/0x70 [ 951.921688][T18834] ? lockdep_hardirqs_on+0x7a/0x110 [ 951.921704][T18834] ? asm_int80_emulation+0x1a/0x20 [ 951.921740][T18834] ? do_int80_emulation+0x29f/0x550 [ 951.921773][T18834] do_fast_syscall_32+0x33/0x70 [ 951.921799][T18834] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 951.921835][T18834] RIP: 0023:0xf705f0ec [ 951.921859][T18834] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 951.921873][T18834] RSP: 002b:00000000f544d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 951.921906][T18834] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800002c0 [ 951.921922][T18834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 951.921935][T18834] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 951.921946][T18834] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 951.921958][T18834] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 951.921995][T18834] [ 951.922795][T18834] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3432'. [ 952.012475][T15864] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 952.110274][T18834] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3432'. [ 952.120518][T15864] cdc_ncm 5-1:1.0: bind() failure [ 952.331139][T15866] f81534 2-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 952.340468][T15866] f81534 2-1:0.12: f81534_find_config_idx: read failed: -71 [ 952.348880][T15866] f81534 2-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 952.358606][T15866] f81534 2-1:0.12: probe with driver f81534 failed with error -71 [ 952.371630][T15864] usb 5-1: USB disconnect, device number 38 [ 952.437301][T15866] usb 2-1: USB disconnect, device number 19 [ 952.455247][T18838] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3433'. [ 952.499510][T18838] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3433'. [ 952.512584][T18838] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3433'. [ 952.651283][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3436'. [ 952.700340][ T30] audit: type=1326 audit(1785056513.932:3156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18839 comm="syz.3.3435" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf706f0ec code=0x0 [ 953.221429][T18866] syzkaller0: entered promiscuous mode [ 953.251847][T18866] syzkaller0: entered allmulticast mode [ 953.266114][ T30] audit: type=1326 audit(1785056514.512:3157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3441" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 953.361465][ T30] audit: type=1326 audit(1785056514.532:3158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18862 comm="syz.0.3441" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 953.391175][T18865] kvm: kvm [18862]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 953.624302][T18870] kvm: kvm [18869]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 953.879084][ T5639] Bluetooth: hci1: ISO packet too small [ 954.215715][T15866] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 954.306134][T16383] Bluetooth: hci0: command 0x0406 tx timeout [ 954.416238][T15866] usb 2-1: Using ep0 maxpacket: 8 [ 954.443174][T15866] usb 2-1: unable to get BOS descriptor or descriptor too short [ 954.473793][T15866] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 954.504489][T15866] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 954.553305][T15866] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 954.591929][T15866] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 954.607400][T15866] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.637380][T15866] usb 2-1: Product: syz [ 954.658917][T15866] usb 2-1: Manufacturer: syz [ 954.675715][T15866] usb 2-1: SerialNumber: syz [ 954.896636][T18896] tipc: Started in network mode [ 954.915871][T18896] tipc: Node identity , cluster identity 4711 [ 954.923009][T18896] tipc: Failed to obtain node identity [ 954.928738][T18896] tipc: Enabling of bearer rejected, failed to enable media [ 954.949226][T18895] binder: 18892:18895 ioctl c0306201 80000280 returned -14 [ 955.064261][T18902] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 955.196341][T15874] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 955.343041][T18914] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 955.375711][T15874] usb 4-1: Using ep0 maxpacket: 8 [ 955.387919][T15874] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.408564][T15874] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0 [ 955.430774][T15874] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 955.468939][T15874] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01 [ 955.478276][T15874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 955.486801][T15874] usb 4-1: Product: syz [ 955.491043][T15874] usb 4-1: Manufacturer: syz [ 955.496199][T15874] usb 4-1: SerialNumber: syz [ 955.532607][T15874] usb 4-1: config 0 descriptor?? [ 955.569549][T15874] radioshark 4-1:0.0: Invalid radioSHARK device [ 955.580882][T15874] radioshark 4-1:0.0: probe with driver radioshark failed with error -22 [ 955.591064][T15874] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 955.609657][T15866] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found [ 955.641214][T15866] cdc_ncm 2-1:1.0: bind() failure [ 955.697392][T15866] usb 2-1: USB disconnect, device number 20 [ 955.772669][T18920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3460'. [ 955.836475][T15874] usb 4-1: USB disconnect, device number 8 [ 955.983380][T18924] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 956.001111][T18924] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 956.010552][T18924] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 956.211340][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 956.211358][ T30] audit: type=1326 audit(1785056517.452:3211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18913 comm="syz.0.3458" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 956.243459][ T30] audit: type=1326 audit(1785056517.492:3212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18913 comm="syz.0.3458" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 956.511579][T18934] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 956.561191][ T30] audit: type=1326 audit(1785056517.802:3213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18933 comm="syz.0.3465" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 956.599838][ T30] audit: type=1326 audit(1785056517.802:3214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18933 comm="syz.0.3465" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 956.625410][ T30] audit: type=1326 audit(1785056517.832:3215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18933 comm="syz.0.3465" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 956.651573][ T30] audit: type=1326 audit(1785056517.832:3216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18933 comm="syz.0.3465" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 956.696477][ T30] audit: type=1326 audit(1785056517.832:3217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18933 comm="syz.0.3465" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 956.795693][ T30] audit: type=1326 audit(1785056517.832:3218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18933 comm="syz.0.3465" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 956.831743][ T30] audit: type=1326 audit(1785056517.832:3219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18933 comm="syz.0.3465" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 957.021824][T18944] netlink: 'syz.4.3468': attribute type 1 has an invalid length. [ 957.316365][T16383] Bluetooth: hci0: ISO packet too small [ 957.341216][T18944] bond0: entered promiscuous mode [ 957.392995][T18944] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.488205][T18959] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 957.496771][T18959] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 957.636122][T15874] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 957.808006][T15874] usb 4-1: Using ep0 maxpacket: 8 [ 957.830143][T15874] usb 4-1: unable to get BOS descriptor or descriptor too short [ 957.869837][T15874] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 957.895528][T15874] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 957.914667][T18968] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 957.917617][T15874] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 957.982926][T15874] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 957.998309][T18973] futex_wake_op: syz.2.3477 tries to shift op by 32; fix this program [ 958.014761][T15874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.038636][T15874] usb 4-1: Product: syz [ 958.049015][ T30] audit: type=1326 audit(1785056519.282:3220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18967 comm="syz.1.3475" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 958.078764][T15874] usb 4-1: Manufacturer: syz [ 958.101087][T15874] usb 4-1: SerialNumber: syz [ 958.144921][T18978] FAULT_INJECTION: forcing a failure. [ 958.144921][T18978] name failslab, interval 1, probability 0, space 0, times 0 [ 958.161205][T18978] CPU: 0 UID: 0 PID: 18978 Comm: syz.4.3479 Tainted: G L syzkaller #0 PREEMPT(full) [ 958.161236][T18978] Tainted: [L]=SOFTLOCKUP [ 958.161243][T18978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 958.161254][T18978] Call Trace: [ 958.161261][T18978] [ 958.161269][T18978] dump_stack_lvl+0xe8/0x150 [ 958.161301][T18978] should_fail_ex+0x40c/0x560 [ 958.161328][T18978] should_failslab+0xa8/0x100 [ 958.161361][T18978] __kmalloc_noprof+0xfe/0x720 [ 958.161383][T18978] ? rcu_is_watching+0x15/0xb0 [ 958.161401][T18978] ? tomoyo_realpath_from_path+0xef/0x640 [ 958.161422][T18978] ? tomoyo_realpath_from_path+0xef/0x640 [ 958.161449][T18978] tomoyo_realpath_from_path+0xef/0x640 [ 958.161477][T18978] ? tomoyo_path_number_perm+0x219/0x5f0 [ 958.161506][T18978] tomoyo_path_number_perm+0x246/0x5f0 [ 958.161536][T18978] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 958.161564][T18978] ? __lock_acquire+0x683/0x2cf0 [ 958.161601][T18978] ? hook_file_ioctl_compat+0x1f0/0x5f0 [ 958.161637][T18978] ? __fget_files+0x2a/0x420 [ 958.161665][T18978] ? __fget_files+0x3a2/0x420 [ 958.161689][T18978] ? __fget_files+0x2a/0x420 [ 958.161717][T18978] security_file_ioctl_compat+0xc3/0x2a0 [ 958.161747][T18978] __ia32_compat_sys_ioctl+0x139/0x950 [ 958.161769][T18978] ? __pfx___ia32_compat_sys_ioctl+0x10/0x10 [ 958.161789][T18978] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 958.161811][T18978] ? __fget_files+0x3a2/0x420 [ 958.161856][T18978] ? fput+0xa0/0xd0 [ 958.161880][T18978] ? ksys_write+0x242/0x270 [ 958.161907][T18978] __do_fast_syscall_32+0x23e/0x6f0 [ 958.161928][T18978] ? do_fast_syscall_32+0x33/0x70 [ 958.161948][T18978] ? lockdep_hardirqs_on+0x7a/0x110 [ 958.161966][T18978] ? asm_int80_emulation+0x1a/0x20 [ 958.161983][T18978] ? do_int80_emulation+0x29f/0x550 [ 958.162003][T18978] ? trace_irq_disable+0x3b/0x140 [ 958.162030][T18978] do_fast_syscall_32+0x33/0x70 [ 958.162051][T18978] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 958.162074][T18978] RIP: 0023:0xf70af0ec [ 958.162092][T18978] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 958.162107][T18978] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000036 [ 958.162125][T18978] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 000000009000aecf [ 958.162137][T18978] RDX: 0000000080eaa000 RSI: 0000000000000000 RDI: 0000000000000000 [ 958.162148][T18978] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 958.162157][T18978] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 958.162167][T18978] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 958.162191][T18978] [ 958.162224][T18978] ERROR: Out of memory at tomoyo_realpath_from_path. [ 958.505683][T15871] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 958.668988][T15871] usb 3-1: Using ep0 maxpacket: 16 [ 958.686397][T15871] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 958.700721][T15871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.715677][T15871] usb 3-1: Product: syz [ 958.720030][T15871] usb 3-1: Manufacturer: syz [ 958.726143][T15871] usb 3-1: SerialNumber: syz [ 958.748270][T15871] usb 3-1: config 0 descriptor?? [ 958.765484][T15871] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 958.972753][T15871] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 958.984663][T15874] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 958.999768][T15874] cdc_ncm 4-1:1.0: bind() failure [ 959.005053][T15871] visor 3-1:0.0: probe with driver visor failed with error -5 [ 959.033910][T15874] usb 4-1: USB disconnect, device number 9 [ 959.283680][T15874] usb 3-1: USB disconnect, device number 34 [ 959.769340][T18993] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 960.081800][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3486'. [ 960.615422][T16383] Bluetooth: hci0: ISO packet too small [ 960.843940][T19030] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 960.936622][T15866] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 961.095731][T15866] usb 4-1: Using ep0 maxpacket: 8 [ 961.112707][T15866] usb 4-1: unable to get BOS descriptor or descriptor too short [ 961.131890][T15866] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 961.147091][T15866] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 961.154791][T19034] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3496'. [ 961.165006][T15866] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 961.179777][T19034] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3496'. [ 961.190171][T15866] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 961.203928][T15866] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.216091][T15866] usb 4-1: Product: syz [ 961.220350][T15866] usb 4-1: Manufacturer: syz [ 961.225302][T15866] usb 4-1: SerialNumber: syz [ 961.831565][T19046] futex_wake_op: syz.0.3500 tries to shift op by 32; fix this program [ 961.951120][T15866] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 961.951208][T15866] cdc_ncm 4-1:1.0: bind() failure [ 961.978085][T15866] usb 4-1: USB disconnect, device number 10 [ 962.077903][T19054] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 962.143122][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 962.143141][ T30] audit: type=1326 audit(1785056523.382:3249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.2.3502" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 962.197244][ T30] audit: type=1326 audit(1785056523.382:3250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.2.3502" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 962.222897][ T30] audit: type=1326 audit(1785056523.382:3251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.2.3502" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 962.316126][ T30] audit: type=1326 audit(1785056523.392:3252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.2.3502" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 962.389147][ T30] audit: type=1326 audit(1785056523.392:3253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.2.3502" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 962.472046][ T30] audit: type=1326 audit(1785056523.392:3254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19053 comm="syz.2.3502" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70cf0ec code=0x7ffc0000 [ 962.539997][T19062] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 962.613571][ T30] audit: type=1326 audit(1785056523.842:3255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19059 comm="syz.4.3506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 962.657810][ T30] audit: type=1326 audit(1785056523.842:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19059 comm="syz.4.3506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 962.710618][ T30] audit: type=1326 audit(1785056523.842:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19059 comm="syz.4.3506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 962.772083][ T30] audit: type=1326 audit(1785056523.852:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19059 comm="syz.4.3506" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 962.836576][T19069] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3508'. [ 963.038927][T19073] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.046853][T19073] bridge0: port 1(bridge_slave_0) entered disabled state [ 963.160250][ T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 963.316182][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 963.323917][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 963.344297][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 963.366910][ T10] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 963.384556][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 963.398382][ T9] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 963.425400][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 963.438582][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 963.449243][ T10] usb 4-1: Product: syz [ 963.453488][ T10] usb 4-1: Manufacturer: syz [ 963.458941][ T10] usb 4-1: SerialNumber: syz [ 963.478420][T19071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 963.490390][ T10] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 963.510054][ T10] usbtest 4-1:1.0: Linux user mode ISO test driver [ 963.526237][ T10] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 963.564073][ T9] usb 2-1: config 0 has an invalid interface number: 244 but max is 0 [ 963.579390][T19073] bond0: left promiscuous mode [ 963.584278][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 963.607463][ T9] usb 2-1: config 0 has no interface number 0 [ 963.622972][ T9] usb 2-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 963.635267][T19077] geneve2: entered promiscuous mode [ 963.643975][ T9] usb 2-1: config 0 interface 244 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 963.668732][T17157] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.680040][ T9] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0xC has invalid maxpacket 512, setting to 8 [ 963.694573][T17157] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 48196 - 0 [ 963.714790][T17157] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.721594][ T9] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 8 [ 963.739561][T17157] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 48196 - 0 [ 963.751263][ T9] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt [ 963.751292][T17157] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.763233][T17157] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 48196 - 0 [ 963.782331][T17157] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 963.791284][ T9] usb 2-1: config 0 interface 244 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0 [ 963.826088][ T9] usb 2-1: config 0 interface 244 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 15 [ 963.834797][T17157] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 48196 - 0 [ 963.869731][ T9] usb 2-1: New USB device found, idVendor=1163, idProduct=0200, bcdDevice=e1.32 [ 963.886168][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 963.898852][ T9] usb 2-1: config 0 descriptor?? [ 963.910567][T19080] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 964.120977][ T5724] usb 4-1: USB disconnect, device number 11 [ 964.169916][T19080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 964.186376][T19080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 964.293238][ T9] usb 2-1: string descriptor 0 read error: -71 [ 964.310761][ T9] cypress_m8 2-1:0.244: DeLorme Earthmate USB converter detected [ 964.331240][ T9] earthmate ttyUSB0: required endpoint is missing [ 964.353880][ T9] usb 2-1: USB disconnect, device number 21 [ 964.375232][ T9] cypress_m8 2-1:0.244: device disconnected [ 964.977177][T19111] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3514'. [ 965.060447][T19116] syzkaller0: entered promiscuous mode [ 965.070443][T19116] syzkaller0: entered allmulticast mode [ 965.697936][T19133] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3522'. [ 966.188462][T19141] futex_wake_op: syz.4.3525 tries to shift op by 32; fix this program [ 966.237481][ T5724] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 966.300989][ C1] sd 0:0:1:0: [sda] tag#3926 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 966.311551][ C1] sd 0:0:1:0: [sda] tag#3926 CDB: Read(6) 08 00 9f d1 fe de [ 966.398482][ T5724] usb 4-1: config 0 has no interfaces? [ 966.413254][ T5724] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 966.428937][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.442457][ T5724] usb 4-1: Product: syz [ 966.449764][ T5724] usb 4-1: Manufacturer: syz [ 966.457675][T15871] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 966.465488][ T5724] usb 4-1: SerialNumber: syz [ 966.475801][ T5724] usb 4-1: config 0 descriptor?? [ 966.566477][ T5634] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 966.656474][T15871] usb 5-1: Using ep0 maxpacket: 16 [ 966.668164][T15871] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 966.679408][T15871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.688565][T15871] usb 5-1: Product: syz [ 966.693036][T15871] usb 5-1: Manufacturer: syz [ 966.733648][T15871] usb 5-1: SerialNumber: syz [ 966.741359][ T5634] usb 2-1: Using ep0 maxpacket: 16 [ 966.762327][ T5634] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 966.775059][T15871] usb 5-1: config 0 descriptor?? [ 966.780492][ T5634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 966.796322][ T5634] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 966.811807][ T5634] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 966.824610][ T5634] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 966.839691][T15871] visor 5-1:0.0: Sony Clie 3.5 converter detected [ 966.849547][ T5634] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 966.859037][ T5634] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 966.881595][ T5634] usb 2-1: Manufacturer: syz [ 966.898559][ T5634] usb 2-1: config 0 descriptor?? [ 966.999910][T19138] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 967.021147][T15871] usb 5-1: clie_3_5_startup: get config number bad return length: 0 [ 967.035808][T19138] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.048616][T15871] visor 5-1:0.0: probe with driver visor failed with error -5 [ 967.132309][T19138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 967.233114][T15871] usb 5-1: USB disconnect, device number 39 [ 967.255760][ T5634] rc_core: IR keymap rc-hauppauge not found [ 967.287647][ T5634] Registered IR keymap rc-empty [ 967.302101][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 967.346140][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 967.388015][ T5634] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 967.406359][ T5634] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input80 [ 967.450317][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 967.486018][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 967.511173][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 967.546597][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 967.572094][T19157] FAULT_INJECTION: forcing a failure. [ 967.572094][T19157] name failslab, interval 1, probability 0, space 0, times 0 [ 967.585366][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 967.605818][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 967.613507][T19157] CPU: 0 UID: 0 PID: 19157 Comm: syz.2.3529 Tainted: G L syzkaller #0 PREEMPT(full) [ 967.613532][T19157] Tainted: [L]=SOFTLOCKUP [ 967.613538][T19157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 967.613547][T19157] Call Trace: [ 967.613554][T19157] [ 967.613561][T19157] dump_stack_lvl+0xe8/0x150 [ 967.613590][T19157] should_fail_ex+0x40c/0x560 [ 967.613623][T19157] should_failslab+0xa8/0x100 [ 967.613648][T19157] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 967.613669][T19157] ? skb_clone+0x212/0x3a0 [ 967.613687][T19157] ? skb_clone+0x212/0x3a0 [ 967.613708][T19157] skb_clone+0x212/0x3a0 [ 967.613725][T19157] ? nfnetlink_rcv+0x4b0/0x28c0 [ 967.613804][T19157] nfnetlink_rcv+0x4de/0x28c0 [ 967.613822][T19157] ? __dev_queue_xmit+0x29b/0x3820 [ 967.613844][T19157] ? __local_bh_enable_ip+0xd0/0x130 [ 967.613863][T19157] ? lockdep_hardirqs_on+0x7a/0x110 [ 967.613880][T19157] ? __dev_queue_xmit+0x29b/0x3820 [ 967.613897][T19157] ? __local_bh_enable_ip+0xd0/0x130 [ 967.613914][T19157] ? __dev_queue_xmit+0x29b/0x3820 [ 967.613932][T19157] ? __dev_queue_xmit+0x1edc/0x3820 [ 967.613949][T19157] ? __do_fast_syscall_32+0x23e/0x6f0 [ 967.613967][T19157] ? do_fast_syscall_32+0x33/0x70 [ 967.613992][T19157] ? __dev_queue_xmit+0x29b/0x3820 [ 967.614011][T19157] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 967.614037][T19157] ? ref_tracker_free+0x689/0x830 [ 967.614060][T19157] ? __pfx_ref_tracker_free+0x10/0x10 [ 967.614080][T19157] ? __asan_memcpy+0x40/0x70 [ 967.614098][T19157] ? __skb_clone+0x5c/0x6c0 [ 967.614120][T19157] ? __skb_clone+0x449/0x6c0 [ 967.614141][T19157] ? skb_clone+0x246/0x3a0 [ 967.614160][T19157] ? __netlink_deliver_tap+0x811/0x860 [ 967.614178][T19157] ? netlink_deliver_tap+0x2e/0x1b0 [ 967.614200][T19157] ? netlink_deliver_tap+0x2e/0x1b0 [ 967.614217][T19157] ? netlink_deliver_tap+0x2e/0x1b0 [ 967.614237][T19157] netlink_unicast+0x7bb/0x940 [ 967.614261][T19157] netlink_sendmsg+0x813/0xb40 [ 967.614285][T19157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.614306][T19157] ? aa_sock_msg_perm+0xf1/0x1b0 [ 967.614327][T19157] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.614344][T19157] sock_sendmsg_nosec+0x13a/0x180 [ 967.614367][T19157] ____sys_sendmsg+0x54e/0x850 [ 967.614388][T19157] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.614416][T19157] ___sys_sendmsg+0x2a5/0x360 [ 967.614432][T19157] ? __lock_acquire+0x683/0x2cf0 [ 967.614458][T19157] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.614474][T19157] ? get_pid_task+0x20/0x1f0 [ 967.614496][T19157] ? get_pid_task+0x20/0x1f0 [ 967.614517][T19157] ? get_pid_task+0x20/0x1f0 [ 967.614558][T19157] ? __fget_files+0x2a/0x420 [ 967.614579][T19157] ? __fget_files+0x3a2/0x420 [ 967.614611][T19157] __sys_sendmsg+0x177/0x240 [ 967.614630][T19157] ? __pfx___sys_sendmsg+0x10/0x10 [ 967.614660][T19157] __do_fast_syscall_32+0x23e/0x6f0 [ 967.614678][T19157] ? do_fast_syscall_32+0x33/0x70 [ 967.614695][T19157] ? lockdep_hardirqs_on+0x7a/0x110 [ 967.614711][T19157] ? asm_int80_emulation+0x1a/0x20 [ 967.614725][T19157] ? do_int80_emulation+0x29f/0x550 [ 967.614743][T19157] ? trace_irq_disable+0x3b/0x140 [ 967.614765][T19157] do_fast_syscall_32+0x33/0x70 [ 967.614783][T19157] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 967.614802][T19157] RIP: 0023:0xf70cf0ec [ 967.614816][T19157] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 967.614829][T19157] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 967.614846][T19157] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080009b40 [ 967.614856][T19157] RDX: 0000000024040840 RSI: 0000000000000000 RDI: 0000000000000000 [ 967.614865][T19157] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 967.614874][T19157] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 967.614883][T19157] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 967.614904][T19157] [ 968.074338][T19147] syzkaller0: entered promiscuous mode [ 968.079894][T19147] syzkaller0: entered allmulticast mode [ 968.115991][T15871] usb 4-1: USB disconnect, device number 12 [ 968.166522][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 968.187619][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 968.206537][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 968.230670][ T5634] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 968.269003][ T5634] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 968.278209][ T5634] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 968.289392][ T5634] usb 2-1: USB disconnect, device number 22 [ 968.502116][T19169] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 968.573010][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 968.573029][ T30] audit: type=1326 audit(1785056529.802:3262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.4.3531" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 968.663486][ T30] audit: type=1326 audit(1785056529.802:3263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.4.3531" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 968.699720][T19177] netlink: 14 bytes leftover after parsing attributes in process `syz.3.3534'. [ 968.719138][ T30] audit: type=1326 audit(1785056529.802:3264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.4.3531" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 968.774972][ T30] audit: type=1326 audit(1785056529.802:3265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.4.3531" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 968.827940][ T30] audit: type=1326 audit(1785056529.802:3266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.4.3531" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 968.885539][ T30] audit: type=1326 audit(1785056529.802:3267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.4.3531" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 968.937697][ T30] audit: type=1326 audit(1785056529.802:3268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.4.3531" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 968.994261][ T30] audit: type=1326 audit(1785056529.832:3269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.4.3531" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 969.046935][ T30] audit: type=1326 audit(1785056529.832:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19164 comm="syz.4.3531" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 969.104870][ T30] audit: type=1326 audit(1785056529.882:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19165 comm="syz.0.3533" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 972.868744][T19202] netlink: 'syz.0.3541': attribute type 23 has an invalid length. [ 972.899278][T19206] futex_wake_op: syz.2.3542 tries to shift op by 32; fix this program [ 972.955734][T15865] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 972.966612][ T5724] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 973.128378][T15865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 64, setting to 8 [ 973.143336][T15865] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 64, setting to 8 [ 973.154560][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 973.163592][T15864] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 973.179321][ T5724] usb 2-1: not running at top speed; connect to a high speed hub [ 973.188677][T15865] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9 [ 973.204407][T15865] usb 5-1: New USB device found, idVendor=056e, idProduct=00fd, bcdDevice= 0.00 [ 973.214656][T15865] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.214976][ T5724] usb 2-1: config 1 has an invalid interface number: 116 but max is 0 [ 973.243672][ T5724] usb 2-1: config 1 has no interface number 0 [ 973.251787][T15865] usb 5-1: config 0 descriptor?? [ 973.263077][ T5724] usb 2-1: config 1 interface 116 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 973.280848][T19198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 973.301309][ T5724] usb 2-1: config 1 interface 116 altsetting 15 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 973.302437][T19198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 973.334794][ T5724] usb 2-1: config 1 interface 116 altsetting 15 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 973.350942][T15864] usb 3-1: Using ep0 maxpacket: 16 [ 973.362299][ T5724] usb 2-1: config 1 interface 116 altsetting 15 endpoint 0x81 has invalid maxpacket 48940, setting to 64 [ 973.388172][ T5724] usb 2-1: config 1 interface 116 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 973.412441][T15864] usb 3-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 973.435732][T15864] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.443884][ T5724] usb 2-1: config 1 interface 116 has no altsetting 0 [ 973.456714][T15864] usb 3-1: Product: syz [ 973.463980][ T5724] usb 2-1: New USB device found, idVendor=03f0, idProduct=0307, bcdDevice= 0.01 [ 973.485648][T15864] usb 3-1: Manufacturer: syz [ 973.490478][T15864] usb 3-1: SerialNumber: syz [ 973.495845][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 973.509783][T15864] usb 3-1: config 0 descriptor?? [ 973.521136][ T5724] usb 2-1: Product: syz [ 973.538294][T15864] visor 3-1:0.0: Sony Clie 3.5 converter detected [ 973.544868][ T5724] usb 2-1: Manufacturer: syz [ 973.551226][ T5724] usb 2-1: SerialNumber: syz [ 973.578875][T19197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 973.608379][T19197] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 973.720158][T15864] usb 3-1: clie_3_5_startup: get config number bad return length: 0 [ 973.746370][T15864] visor 3-1:0.0: probe with driver visor failed with error -5 [ 973.840967][ T5724] ums-usbat 2-1:1.116: USB Mass Storage device detected [ 973.859624][T15865] elecom 0003:056E:00FD.0053: ignoring exceeding usage max [ 973.887168][T15865] elecom 0003:056E:00FD.0053: item fetching failed at offset 24/38 [ 973.896652][T15865] elecom 0003:056E:00FD.0053: probe with driver elecom failed with error -22 [ 973.947344][ T5724] ums-usbat 2-1:1.116: probe with driver ums-usbat failed with error -5 [ 973.981399][ T5724] usb 2-1: USB disconnect, device number 23 [ 974.032757][ T5287] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 974.068404][T15865] usb 5-1: USB disconnect, device number 40 [ 974.105414][T15864] usb 3-1: USB disconnect, device number 35 [ 974.458751][T19250] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 974.489078][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 974.489098][ T30] audit: type=1326 audit(1785056535.732:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.1.3544" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 974.521188][ T30] audit: type=1326 audit(1785056535.732:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.1.3544" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 974.546139][ T30] audit: type=1326 audit(1785056535.732:3280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.1.3544" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 974.571055][ T30] audit: type=1326 audit(1785056535.732:3281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.1.3544" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 974.596252][ T30] audit: type=1326 audit(1785056535.732:3282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.1.3544" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 974.642968][ T30] audit: type=1326 audit(1785056535.732:3283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19249 comm="syz.1.3544" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 975.526815][T19263] syzkaller0: entered promiscuous mode [ 975.532393][T19263] syzkaller0: entered allmulticast mode [ 976.003921][T19276] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3551'. [ 976.087672][T19276] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3551'. [ 976.110166][T19276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3551'. [ 976.303383][ T30] audit: type=1326 audit(1785056537.542:3284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.4.3554" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 976.470396][ T30] audit: type=1326 audit(1785056537.542:3285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.4.3554" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 976.591180][ T30] audit: type=1326 audit(1785056537.542:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.4.3554" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 976.665655][ T30] audit: type=1326 audit(1785056537.552:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19280 comm="syz.4.3554" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 976.905219][T19289] FAULT_INJECTION: forcing a failure. [ 976.905219][T19289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 976.945843][T19289] CPU: 0 UID: 0 PID: 19289 Comm: syz.2.3556 Tainted: G L syzkaller #0 PREEMPT(full) [ 976.945884][T19289] Tainted: [L]=SOFTLOCKUP [ 976.945890][T19289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 976.945900][T19289] Call Trace: [ 976.945907][T19289] [ 976.945913][T19289] dump_stack_lvl+0xe8/0x150 [ 976.945945][T19289] should_fail_ex+0x40c/0x560 [ 976.945973][T19289] _copy_from_user+0x2d/0xb0 [ 976.945990][T19289] input_event_from_user+0xfe/0x290 [ 976.946095][T19289] ? __pfx_input_event_from_user+0x10/0x10 [ 976.946127][T19289] evdev_write+0x2c7/0x4c0 [ 976.946170][T19289] ? __lock_acquire+0x683/0x2cf0 [ 976.946198][T19289] ? __pfx_evdev_write+0x10/0x10 [ 976.946221][T19289] ? bpf_lsm_file_permission+0x9/0x20 [ 976.946241][T19289] ? security_file_permission+0x75/0x260 [ 976.946267][T19289] ? rw_verify_area+0x203/0x4c0 [ 976.946295][T19289] ? __pfx_evdev_write+0x10/0x10 [ 976.946316][T19289] vfs_write+0x296/0xba0 [ 976.946344][T19289] ? __pfx_vfs_write+0x10/0x10 [ 976.946361][T19289] ? __fget_files+0x2a/0x420 [ 976.946385][T19289] ? __fget_files+0x2a/0x420 [ 976.946406][T19289] ? __fget_files+0x3a2/0x420 [ 976.946427][T19289] ? __fget_files+0x2a/0x420 [ 976.946454][T19289] ksys_write+0x150/0x270 [ 976.946472][T19289] ? __pfx_ksys_write+0x10/0x10 [ 976.946498][T19289] __do_fast_syscall_32+0x23e/0x6f0 [ 976.946520][T19289] ? do_fast_syscall_32+0x33/0x70 [ 976.946537][T19289] ? lockdep_hardirqs_on+0x7a/0x110 [ 976.946554][T19289] ? asm_int80_emulation+0x1a/0x20 [ 976.946570][T19289] ? do_int80_emulation+0x29f/0x550 [ 976.946587][T19289] ? trace_irq_disable+0x3b/0x140 [ 976.946611][T19289] do_fast_syscall_32+0x33/0x70 [ 976.946630][T19289] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 976.946649][T19289] RIP: 0023:0xf70cf0ec [ 976.946663][T19289] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 976.946677][T19289] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 976.946693][T19289] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000040 [ 976.946704][T19289] RDX: 000000000000ff0f RSI: 0000000000000000 RDI: 0000000000000000 [ 976.946713][T19289] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 976.946722][T19289] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 976.946731][T19289] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 976.946752][T19289] [ 977.315023][T19291] futex_wake_op: syz.1.3557 tries to shift op by 32; fix this program [ 977.563513][T19297] syzkaller0: entered promiscuous mode [ 977.576079][T19297] syzkaller0: entered allmulticast mode [ 977.589573][T15871] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 977.759054][T15871] usb 2-1: Using ep0 maxpacket: 16 [ 977.774553][T15871] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 977.802745][T15871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 977.825547][T15871] usb 2-1: Product: syz [ 977.838656][T15871] usb 2-1: Manufacturer: syz [ 977.851044][T15871] usb 2-1: SerialNumber: syz [ 977.865521][T15871] usb 2-1: config 0 descriptor?? [ 977.898572][T15871] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 978.087155][T15871] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 978.105890][T15871] visor 2-1:0.0: probe with driver visor failed with error -5 [ 978.454308][ T5724] usb 2-1: USB disconnect, device number 24 [ 978.791698][T19323] syzkaller0: entered promiscuous mode [ 978.807306][T19323] syzkaller0: entered allmulticast mode [ 978.828188][T19322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3563'. [ 978.840533][T19323] FAULT_INJECTION: forcing a failure. [ 978.840533][T19323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.854532][T19323] CPU: 1 UID: 0 PID: 19323 Comm: syz.2.3565 Tainted: G L syzkaller #0 PREEMPT(full) [ 978.854569][T19323] Tainted: [L]=SOFTLOCKUP [ 978.854577][T19323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 978.854590][T19323] Call Trace: [ 978.854599][T19323] [ 978.854609][T19323] dump_stack_lvl+0xe8/0x150 [ 978.854647][T19323] should_fail_ex+0x40c/0x560 [ 978.854680][T19323] _copy_from_user+0x2d/0xb0 [ 978.854702][T19323] __sys_sendto+0x2a9/0x5a0 [ 978.854732][T19323] ? __pfx___sys_sendto+0x10/0x10 [ 978.854761][T19323] ? __fget_files+0x3a2/0x420 [ 978.854797][T19323] ? ksys_write+0x242/0x270 [ 978.855222][T19323] __ia32_sys_sendto+0xdd/0x100 [ 978.855245][T19323] __do_fast_syscall_32+0x23e/0x6f0 [ 978.855269][T19323] ? do_fast_syscall_32+0x33/0x70 [ 978.855291][T19323] ? lockdep_hardirqs_on+0x7a/0x110 [ 978.855318][T19323] ? asm_int80_emulation+0x1a/0x20 [ 978.855340][T19323] ? do_int80_emulation+0x29f/0x550 [ 978.855364][T19323] ? trace_irq_disable+0x3b/0x140 [ 978.855396][T19323] do_fast_syscall_32+0x33/0x70 [ 978.855422][T19323] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 978.855448][T19323] RIP: 0023:0xf70cf0ec [ 978.855468][T19323] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 978.855486][T19323] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000171 [ 978.855509][T19323] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0 [ 978.855525][T19323] RDX: 000000000000fdef RSI: 0000000000000004 RDI: 0000000080000140 [ 978.855538][T19323] RBP: 0000000000000014 R08: 0000000000000000 R09: 0000000000000000 [ 978.855552][T19323] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 978.855564][T19323] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 978.855594][T19323] [ 979.474380][T19337] syzkaller0: entered promiscuous mode [ 979.483391][T19337] syzkaller0: entered allmulticast mode [ 980.225798][ T5634] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 980.376032][ T5634] usb 4-1: Using ep0 maxpacket: 32 [ 980.427121][ T5634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 980.463351][ T5634] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 980.500718][ T5634] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 980.556131][ T5634] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.582731][ T5634] usb 4-1: config 0 descriptor?? [ 980.604679][ T5634] hub 4-1:0.0: USB hub found [ 980.745697][T15871] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 980.799193][ T5634] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 980.898997][T19365] loop6: detected capacity change from 0 to 2640 [ 980.929429][T19365] buffer_io_error: 9 callbacks suppressed [ 980.929443][T19365] Buffer I/O error on dev loop6, logical block 0, async page read [ 980.947743][T15871] usb 5-1: Using ep0 maxpacket: 16 [ 980.952840][T19365] Buffer I/O error on dev loop6, logical block 0, async page read [ 980.966551][T15871] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 980.984654][T15871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.016774][T19365] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.032800][T15871] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 981.063195][T15871] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 981.084076][T19367] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.105798][T15871] usb 5-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 981.131053][T15871] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.142977][T19364] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.166802][T15871] usb 5-1: config 0 descriptor?? [ 981.203419][T19365] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.243629][T19365] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.280541][T19364] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.321662][T19367] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.358244][T19365] Buffer I/O error on dev loop6, logical block 0, async page read [ 981.411276][T19365] ldm_validate_partition_table(): Disk read failed. [ 981.443105][T19365] Dev loop6: unable to read RDB block 0 [ 981.471279][T19365] loop6: unable to read partition table [ 981.524198][T19365] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 981.799846][T15871] usbhid 5-1:0.0: can't add hid device: -71 [ 981.806737][T15871] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 981.836073][T15871] usb 5-1: USB disconnect, device number 41 [ 982.474194][T19381] FAULT_INJECTION: forcing a failure. [ 982.474194][T19381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 982.533515][T19381] CPU: 0 UID: 0 PID: 19381 Comm: syz.4.3577 Tainted: G L syzkaller #0 PREEMPT(full) [ 982.533541][T19381] Tainted: [L]=SOFTLOCKUP [ 982.533548][T19381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 982.533560][T19381] Call Trace: [ 982.533566][T19381] [ 982.533574][T19381] dump_stack_lvl+0xe8/0x150 [ 982.533603][T19381] should_fail_ex+0x40c/0x560 [ 982.533628][T19381] _copy_from_user+0x2d/0xb0 [ 982.533644][T19381] do_ip_vs_set_ctl+0x35d/0xaf0 [ 982.533760][T19381] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 982.533804][T19381] ? aa_sk_perm+0x6d5/0x900 [ 982.533820][T19381] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 982.533844][T19381] ? kmem_cache_free+0x182/0x650 [ 982.533867][T19381] ? __pfx_aa_sk_perm+0x10/0x10 [ 982.533886][T19381] nf_setsockopt+0x26f/0x290 [ 982.533937][T19381] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 982.533964][T19381] do_sock_setsockopt+0x17c/0x1b0 [ 982.533984][T19381] __ia32_sys_setsockopt+0x13d/0x1b0 [ 982.534005][T19381] __do_fast_syscall_32+0x23e/0x6f0 [ 982.534025][T19381] ? do_fast_syscall_32+0x33/0x70 [ 982.534042][T19381] ? lockdep_hardirqs_on+0x7a/0x110 [ 982.534059][T19381] ? asm_int80_emulation+0x1a/0x20 [ 982.534073][T19381] ? do_int80_emulation+0x29f/0x550 [ 982.534095][T19381] do_fast_syscall_32+0x33/0x70 [ 982.534114][T19381] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 982.534133][T19381] RIP: 0023:0xf70af0ec [ 982.534147][T19381] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 982.534161][T19381] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 982.534178][T19381] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000000000000 [ 982.534195][T19381] RDX: 0000000000000482 RSI: 00000000800008c0 RDI: 000000000000002c [ 982.534205][T19381] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 982.534214][T19381] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 982.534223][T19381] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 982.534277][T19381] [ 982.911128][ T5634] usbhid 4-1:0.0: can't add hid device: -71 [ 982.918076][ T5634] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 982.956478][ T5634] usb 4-1: USB disconnect, device number 13 [ 983.043707][T19384] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 983.077732][T19387] FAULT_INJECTION: forcing a failure. [ 983.077732][T19387] name failslab, interval 1, probability 0, space 0, times 0 [ 983.115917][T19387] CPU: 1 UID: 0 PID: 19387 Comm: syz.4.3579 Tainted: G L syzkaller #0 PREEMPT(full) [ 983.115952][T19387] Tainted: [L]=SOFTLOCKUP [ 983.115959][T19387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 983.115973][T19387] Call Trace: [ 983.115982][T19387] [ 983.115992][T19387] dump_stack_lvl+0xe8/0x150 [ 983.116031][T19387] should_fail_ex+0x40c/0x560 [ 983.116065][T19387] should_failslab+0xa8/0x100 [ 983.116101][T19387] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 983.116129][T19387] ? local_lock_release+0x9c/0x160 [ 983.116165][T19387] ? __alloc_skb+0x1d7/0x7a0 [ 983.116184][T19387] ? __alloc_skb+0x1d7/0x7a0 [ 983.116212][T19387] __alloc_skb+0x1d7/0x7a0 [ 983.116239][T19387] netlink_ack+0x136/0xb30 [ 983.116262][T19387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 983.116293][T19387] ? __pfx_nl80211_post_doit+0x10/0x10 [ 983.116420][T19387] netlink_rcv_skb+0x2a4/0x4a0 [ 983.116441][T19387] ? __pfx_genl_rcv_msg+0x10/0x10 [ 983.116472][T19387] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 983.116504][T19387] ? down_read+0x2be/0x330 [ 983.116530][T19387] genl_rcv+0x28/0x40 [ 983.116554][T19387] netlink_unicast+0x7bb/0x940 [ 983.116581][T19387] netlink_sendmsg+0x813/0xb40 [ 983.116619][T19387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.116644][T19387] ? aa_sock_msg_perm+0xf1/0x1b0 [ 983.116669][T19387] ? __pfx_netlink_sendmsg+0x10/0x10 [ 983.116689][T19387] sock_sendmsg_nosec+0x13a/0x180 [ 983.116717][T19387] ____sys_sendmsg+0x54e/0x850 [ 983.116742][T19387] ? __pfx_____sys_sendmsg+0x10/0x10 [ 983.116775][T19387] ___sys_sendmsg+0x2a5/0x360 [ 983.116795][T19387] ? __lock_acquire+0x683/0x2cf0 [ 983.116824][T19387] ? __pfx____sys_sendmsg+0x10/0x10 [ 983.116843][T19387] ? get_pid_task+0x20/0x1f0 [ 983.116870][T19387] ? get_pid_task+0x20/0x1f0 [ 983.116899][T19387] ? get_pid_task+0x20/0x1f0 [ 983.116949][T19387] ? __fget_files+0x2a/0x420 [ 983.116973][T19387] ? __fget_files+0x3a2/0x420 [ 983.117006][T19387] __sys_sendmsg+0x177/0x240 [ 983.117031][T19387] ? __pfx___sys_sendmsg+0x10/0x10 [ 983.117066][T19387] __do_fast_syscall_32+0x23e/0x6f0 [ 983.117088][T19387] ? do_fast_syscall_32+0x33/0x70 [ 983.117108][T19387] ? lockdep_hardirqs_on+0x7a/0x110 [ 983.117126][T19387] ? asm_int80_emulation+0x1a/0x20 [ 983.117143][T19387] ? do_int80_emulation+0x29f/0x550 [ 983.117164][T19387] ? trace_irq_disable+0x3b/0x140 [ 983.117190][T19387] do_fast_syscall_32+0x33/0x70 [ 983.117211][T19387] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 983.117233][T19387] RIP: 0023:0xf70af0ec [ 983.117250][T19387] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 983.117266][T19387] RSP: 002b:00000000f549d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 983.117285][T19387] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000800000c0 [ 983.117298][T19387] RDX: 0000000000028000 RSI: 0000000000000000 RDI: 0000000000000000 [ 983.117309][T19387] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 983.117319][T19387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 983.117329][T19387] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 983.117354][T19387] [ 983.645248][T19389] futex_wake_op: syz.1.3580 tries to shift op by 32; fix this program [ 983.926122][ T10] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 984.096119][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 984.107729][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 984.117488][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 984.128774][ T10] usb 2-1: Product: syz [ 984.133171][ T10] usb 2-1: Manufacturer: syz [ 984.138551][ T10] usb 2-1: SerialNumber: syz [ 984.152613][ T10] usb 2-1: config 0 descriptor?? [ 984.168807][ T10] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 984.368604][ T10] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 984.386164][ T10] visor 2-1:0.0: probe with driver visor failed with error -5 [ 985.556092][T15871] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 985.715691][T15871] usb 3-1: Using ep0 maxpacket: 8 [ 985.723511][T15871] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 985.733999][T15871] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 12402, setting to 1024 [ 985.746940][T15871] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 985.769461][T15871] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 985.796677][T15871] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 985.806410][T15871] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.814569][T15871] usb 3-1: Product: syz [ 985.828193][T15871] usb 3-1: Manufacturer: syz [ 985.837558][T15871] usb 3-1: SerialNumber: syz [ 985.863623][T19407] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 985.879321][T19407] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 988.070754][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 988.070773][ T30] audit: type=1326 audit(1785056549.312:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.0.3586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 988.098001][T19417] kvm: kvm [19416]: vcpu0, guest rIP: 0x1a3 Unhandled WRMSR(0xc2) = 0x8000 [ 988.111211][ T30] audit: type=1326 audit(1785056549.312:3291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.0.3586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 988.163084][ T30] audit: type=1326 audit(1785056549.322:3292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.0.3586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 988.190775][ T30] audit: type=1326 audit(1785056549.322:3293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.0.3586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 988.217610][ T30] audit: type=1326 audit(1785056549.322:3294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.0.3586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 988.247180][ T30] audit: type=1326 audit(1785056549.322:3295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.0.3586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 988.288624][ T30] audit: type=1326 audit(1785056549.322:3296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.0.3586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 988.313605][ T30] audit: type=1326 audit(1785056549.402:3297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.0.3586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 988.339922][ T30] audit: type=1326 audit(1785056549.402:3298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19416 comm="syz.0.3586" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf705f0ec code=0x7ffc0000 [ 988.808161][ T30] audit: type=1326 audit(1785056550.052:3299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19419 comm="syz.4.3587" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70af0ec code=0x0 [ 989.754823][T15871] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 989.791198][T15871] usbtest 3-1:1.0: Linux user mode ISO test driver [ 989.807188][T15871] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 989.807275][ T5724] usb 2-1: USB disconnect, device number 25 [ 989.882063][T15871] usb 3-1: USB disconnect, device number 36 [ 990.076627][ T5639] Bluetooth: hci2: command 0x0406 tx timeout [ 990.200331][T19435] program syz.2.3591 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 990.466085][ T5724] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 990.663797][ T5724] usb 2-1: not running at top speed; connect to a high speed hub [ 990.690427][ T5724] usb 2-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 990.704826][ T5724] usb 2-1: config 1 interface 0 has no altsetting 0 [ 990.743288][ T5724] usb 2-1: string descriptor 0 read error: -22 [ 990.750209][ T5724] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.40 [ 990.789886][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 990.830563][T19433] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 991.045705][T15871] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 991.241892][T15871] usb 5-1: unable to get BOS descriptor or descriptor too short [ 991.262723][T15871] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 991.305044][T15871] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 991.376685][T19433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.400408][T15871] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 991.400817][T19433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.441807][T15871] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 991.483444][T19433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 991.519042][T15871] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 991.564063][T19433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 991.591575][T15871] usb 5-1: config 1 interface 1 has no altsetting 0 [ 991.610938][T15871] usb 5-1: string descriptor 0 read error: -22 [ 991.622658][T15871] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 991.635184][ T5724] usbhid 2-1:1.0: can't add hid device: -71 [ 991.662678][ T5724] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 991.663427][T15871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.713993][ T5724] usb 2-1: USB disconnect, device number 26 [ 992.438568][T15871] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2) [ 992.854321][T19461] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 993.108616][ T1317] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.115480][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.573190][T19471] IPVS: set_ctl: invalid protocol: 135 127.0.0.1:20002 [ 993.616253][T15871] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 993.791899][T15871] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 993.821919][T15866] usb 5-1: USB disconnect, device number 42 [ 993.829567][T15871] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 993.868356][T19473] syzkaller0: entered promiscuous mode [ 993.879312][T15871] usb 2-1: config 0 interface 0 has no altsetting 0 [ 993.889184][T19473] syzkaller0: entered allmulticast mode [ 993.899266][T15871] usb 2-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 993.923298][T15871] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.033937][T15871] usb 2-1: config 0 descriptor?? [ 994.487785][T15866] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 994.517215][ T9] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 994.532795][T15871] usbhid 2-1:0.0: can't add hid device: -71 [ 994.542996][T15871] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 994.561842][T15871] usb 2-1: USB disconnect, device number 27 [ 994.643792][ T30] kauditd_printk_skb: 23 callbacks suppressed [ 994.643812][ T30] audit: type=1326 audit(1785056555.882:3323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19496 comm="syz.1.3611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 994.648184][T15866] usb 5-1: Using ep0 maxpacket: 16 [ 994.657722][ T30] audit: type=1326 audit(1785056555.892:3324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19496 comm="syz.1.3611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 994.712482][T15866] usb 5-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.725659][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 994.731317][ T30] audit: type=1326 audit(1785056555.892:3325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19496 comm="syz.1.3611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 994.738525][T15864] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 994.764922][ T9] usb 3-1: config 0 has no interfaces? [ 994.772406][T15866] usb 5-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 994.786391][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 994.799275][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.803082][T15866] usb 5-1: config 1 interface 0 has no altsetting 0 [ 994.826093][ T9] usb 3-1: config 0 descriptor?? [ 994.838107][T15866] usb 5-1: New USB device found, idVendor=0458, idProduct=5019, bcdDevice= 0.40 [ 994.855772][T15866] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 994.864436][ T30] audit: type=1326 audit(1785056555.892:3326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19496 comm="syz.1.3611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 994.886108][T15866] usb 5-1: Product: syz [ 994.905631][T15866] usb 5-1: Manufacturer: syz [ 994.910447][T15866] usb 5-1: SerialNumber: syz [ 994.937127][ T30] audit: type=1326 audit(1785056555.942:3327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19496 comm="syz.1.3611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 994.962080][T15864] usb 4-1: Using ep0 maxpacket: 16 [ 994.971954][T15864] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 994.994091][T15864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.014461][T15864] usb 4-1: Product: syz [ 995.020123][T15864] usb 4-1: Manufacturer: syz [ 995.035120][T15864] usb 4-1: SerialNumber: syz [ 995.044184][T15864] usb 4-1: config 0 descriptor?? [ 995.086103][T19484] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 995.087932][T15864] gspca_main: spca508-2.14.0 probing 041e:4018 [ 995.136201][T19479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.147325][T19479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.182976][ T30] audit: type=1326 audit(1785056556.422:3328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19496 comm="syz.1.3611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 995.217100][ T30] audit: type=1326 audit(1785056556.452:3329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19496 comm="syz.1.3611" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf709f0ec code=0x7ffc0000 [ 995.242675][T15866] usbhid 5-1:1.0: can't add hid device: -71 [ 995.254626][T15871] usb 3-1: USB disconnect, device number 37 [ 995.280080][T15864] gspca_spca508: reg_read err -32 [ 995.308122][T15866] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 995.341649][T15866] usb 5-1: USB disconnect, device number 43 [ 995.403274][T15864] gspca_spca508: reg_read err -32 [ 995.554800][T19504] futex_wake_op: syz.1.3613 tries to shift op by 32; fix this program [ 995.681623][T15864] gspca_spca508: reg_read err -71 [ 995.695795][T15864] gspca_spca508: reg_read err -71 [ 995.706627][T15864] gspca_spca508: reg write: error -71 [ 995.716192][T15864] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 995.738927][T15864] usb 4-1: USB disconnect, device number 14 [ 995.816395][T15871] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 995.872881][T19509] netlink: 'syz.2.3615': attribute type 2 has an invalid length. [ 995.995825][T15871] usb 2-1: Using ep0 maxpacket: 16 [ 996.017910][T15871] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 996.035656][T15871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.054096][T15871] usb 2-1: Product: syz [ 996.060421][T15871] usb 2-1: Manufacturer: syz [ 996.068721][T15871] usb 2-1: SerialNumber: syz [ 996.089117][T15871] usb 2-1: config 0 descriptor?? [ 996.115031][T15871] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 996.122923][T19515] FAULT_INJECTION: forcing a failure. [ 996.122923][T19515] name failslab, interval 1, probability 0, space 0, times 0 [ 996.137500][T19515] CPU: 1 UID: 0 PID: 19515 Comm: syz.2.3617 Tainted: G L syzkaller #0 PREEMPT(full) [ 996.137535][T19515] Tainted: [L]=SOFTLOCKUP [ 996.137543][T19515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 996.137557][T19515] Call Trace: [ 996.137566][T19515] [ 996.137575][T19515] dump_stack_lvl+0xe8/0x150 [ 996.137616][T19515] should_fail_ex+0x40c/0x560 [ 996.137648][T19515] should_failslab+0xa8/0x100 [ 996.137682][T19515] __kmalloc_noprof+0xfe/0x720 [ 996.137715][T19515] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 996.137746][T19515] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 996.137788][T19515] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 996.137830][T19515] genl_family_rcv_msg_doit+0xda/0x340 [ 996.137871][T19515] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 996.137911][T19515] ? apparmor_capable+0x126/0x170 [ 996.137943][T19515] ? bpf_lsm_capable+0x9/0x20 [ 996.137970][T19515] ? security_capable+0x7e/0x2c0 [ 996.138000][T19515] genl_rcv_msg+0x614/0x7a0 [ 996.138038][T19515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 996.138068][T19515] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 996.138104][T19515] ? __pfx_ref_tracker_free+0x10/0x10 [ 996.138135][T19515] ? __asan_memcpy+0x40/0x70 [ 996.138160][T19515] ? __skb_clone+0x5c/0x6c0 [ 996.138191][T19515] netlink_rcv_skb+0x226/0x4a0 [ 996.138218][T19515] ? __pfx_genl_rcv_msg+0x10/0x10 [ 996.138251][T19515] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 996.138293][T19515] ? down_read+0x2be/0x330 [ 996.138326][T19515] genl_rcv+0x28/0x40 [ 996.138355][T19515] netlink_unicast+0x7bb/0x940 [ 996.138391][T19515] netlink_sendmsg+0x813/0xb40 [ 996.138427][T19515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.138467][T19515] ? aa_sock_msg_perm+0xf1/0x1b0 [ 996.138497][T19515] ? __pfx_netlink_sendmsg+0x10/0x10 [ 996.138523][T19515] sock_sendmsg_nosec+0x13a/0x180 [ 996.138558][T19515] ____sys_sendmsg+0x54e/0x850 [ 996.138589][T19515] ? __pfx_____sys_sendmsg+0x10/0x10 [ 996.138631][T19515] ___sys_sendmsg+0x2a5/0x360 [ 996.138655][T19515] ? __lock_acquire+0x683/0x2cf0 [ 996.138692][T19515] ? __pfx____sys_sendmsg+0x10/0x10 [ 996.138716][T19515] ? get_pid_task+0x20/0x1f0 [ 996.138749][T19515] ? get_pid_task+0x20/0x1f0 [ 996.138778][T19515] ? get_pid_task+0x20/0x1f0 [ 996.138843][T19515] ? __fget_files+0x2a/0x420 [ 996.138873][T19515] ? __fget_files+0x3a2/0x420 [ 996.138923][T19515] __sys_sendmsg+0x177/0x240 [ 996.138951][T19515] ? __pfx___sys_sendmsg+0x10/0x10 [ 996.138998][T19515] __do_fast_syscall_32+0x23e/0x6f0 [ 996.139026][T19515] ? do_fast_syscall_32+0x33/0x70 [ 996.139052][T19515] ? lockdep_hardirqs_on+0x7a/0x110 [ 996.139075][T19515] ? asm_int80_emulation+0x1a/0x20 [ 996.139097][T19515] ? do_int80_emulation+0x29f/0x550 [ 996.139122][T19515] ? trace_irq_disable+0x3b/0x140 [ 996.139154][T19515] do_fast_syscall_32+0x33/0x70 [ 996.139182][T19515] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 996.139209][T19515] RIP: 0023:0xf70cf0ec [ 996.139231][T19515] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 996.139250][T19515] RSP: 002b:00000000f54bd50c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 996.139274][T19515] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100 [ 996.139289][T19515] RDX: 0000000000000084 RSI: 0000000000000000 RDI: 0000000000000000 [ 996.139303][T19515] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 996.139317][T19515] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 996.139331][T19515] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 996.139365][T19515] [ 996.260250][T19517] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 996.524908][T15871] usb 2-1: clie_3_5_startup: get config number bad return length: 0 [ 996.535416][T15871] visor 2-1:0.0: probe with driver visor failed with error -5 [ 996.595382][ T30] audit: type=1326 audit(1785056557.832:3330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.4.3618" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 996.632677][ T30] audit: type=1326 audit(1785056557.872:3331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.4.3618" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 996.792428][ T30] audit: type=1326 audit(1785056557.872:3332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19516 comm="syz.4.3618" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 997.015136][T15866] usb 2-1: USB disconnect, device number 28 [ 997.778062][T19549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3628'. [ 997.813687][T19551] netlink: 'syz.0.3627': attribute type 2 has an invalid length. [ 998.125789][T15871] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 998.295745][T15871] usb 4-1: Using ep0 maxpacket: 16 [ 998.306995][T15871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.320646][T15871] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.332287][ T5724] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 998.334035][T15871] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 998.361895][T15871] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 998.373223][T15871] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.388040][T15871] usb 4-1: config 0 descriptor?? [ 998.546356][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 998.562482][ T5724] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 998.583533][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.610505][ T5724] usb 2-1: config 0 descriptor?? [ 998.641675][ T5724] gspca_main: sunplus-2.14.0 probing 041e:400b [ 998.726494][T19569] nvme_fabrics: unknown parameter or missing value 'syz0' in ctrl creation request [ 998.841124][T15871] hid_parser_main: 113 callbacks suppressed [ 998.841159][T15871] shield 0003:0955:7214.0054: unknown main item tag 0x0 [ 998.881511][T15871] shield 0003:0955:7214.0054: unknown main item tag 0x0 [ 998.896187][T15871] shield 0003:0955:7214.0054: unknown main item tag 0x0 [ 998.913503][T15871] shield 0003:0955:7214.0054: unknown main item tag 0x0 [ 998.931757][T15871] shield 0003:0955:7214.0054: unknown main item tag 0x0 [ 998.973593][T15871] input: HID 0955:7214 Haptics as /devices/virtual/input/input81 [ 999.054363][ T5724] gspca_sunplus: reg_w_riv err -71 [ 999.089101][ T5724] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 999.147492][ T5724] usb 2-1: USB disconnect, device number 29 [ 999.387602][T15871] shield 0003:0955:7214.0054: Registered Thunderstrike controller [ 999.408111][T15871] shield 0003:0955:7214.0054: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 999.513422][T15871] usb 4-1: USB disconnect, device number 15 [ 999.519688][ T10] shield 0003:0955:7214.0054: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 999.574504][ T10] shield 0003:0955:7214.0054: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 999.607729][ T10] shield 0003:0955:7214.0054: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 999.660872][ T10] shield 0003:0955:7214.0054: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 999.928991][ T30] kauditd_printk_skb: 12 callbacks suppressed [ 999.929012][ T30] audit: type=1326 audit(1785056561.172:3345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.3.3637" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 999.997879][ T30] audit: type=1326 audit(1785056561.212:3346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.3.3637" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1000.023697][T19581] syzkaller1: entered promiscuous mode [ 1000.030324][ T30] audit: type=1326 audit(1785056561.212:3347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.3.3637" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=360 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1000.049534][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1000.064224][T19581] syzkaller1: entered allmulticast mode [ 1000.082614][T19583] futex_wake_op: syz.0.3639 tries to shift op by 32; fix this program [ 1000.091058][ T30] audit: type=1326 audit(1785056561.212:3348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.3.3637" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1000.129768][ T30] audit: type=1326 audit(1785056561.212:3349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.3.3637" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1000.157670][ T30] audit: type=1326 audit(1785056561.242:3350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.3.3637" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1000.205848][ T30] audit: type=1326 audit(1785056561.242:3351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19576 comm="syz.3.3637" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf706f0ec code=0x7ffc0000 [ 1000.259456][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1000.280119][ T10] usb 5-1: config 1 has an invalid interface descriptor of length 4, skipping [ 1000.324236][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.357444][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1000.369376][ T10] usb 5-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 1000.380520][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.393361][ T10] usb 5-1: Product: syz [ 1000.398061][ T10] usb 5-1: Manufacturer: syz [ 1000.403518][ T10] usb 5-1: SerialNumber: syz [ 1000.442671][T19587] syzkaller0: entered promiscuous mode [ 1000.450715][T19587] syzkaller0: entered allmulticast mode [ 1000.634473][ T10] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1000.680935][ T30] audit: type=1326 audit(1785056561.922:3352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19592 comm="syz.2.3642" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf70cf0ec code=0x0 [ 1000.706753][ T5724] usb 4-1: new low-speed USB device number 16 using dummy_hcd [ 1000.875750][ T5724] usb 4-1: Invalid ep0 maxpacket: 16 [ 1001.055763][ T5724] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 1001.215746][ T5724] usb 4-1: Invalid ep0 maxpacket: 16 [ 1001.225044][ T5724] usb usb4-port1: attempt power cycle [ 1001.595704][ T5724] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 1001.616680][ T5724] usb 4-1: Invalid ep0 maxpacket: 16 [ 1001.756185][ T5724] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 1001.786699][ T5724] usb 4-1: Invalid ep0 maxpacket: 16 [ 1001.794958][ T5724] usb usb4-port1: unable to enumerate USB device [ 1002.029742][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3645'. [ 1002.168009][T19599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.176685][ T5724] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1002.184886][T19599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.196694][T19599] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3635'. [ 1002.335770][ T5724] usb 3-1: Using ep0 maxpacket: 32 [ 1002.344959][ T5724] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1002.356020][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1002.371416][ T5724] usb 3-1: config 0 descriptor?? [ 1002.394541][ T5724] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1002.790306][ T5724] gspca_sunplus: reg_w_riv err -71 [ 1002.802712][ T5724] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 1002.819762][ T5724] usb 3-1: USB disconnect, device number 38 [ 1003.183168][T19615] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.251358][ T9] usb 5-1: USB disconnect, device number 44 [ 1003.303575][T19619] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3648'. [ 1003.361426][T19619] netlink: 'syz.0.3648': attribute type 30 has an invalid length. [ 1003.380994][ T30] audit: type=1326 audit(1785056564.622:3353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19620 comm="syz.4.3649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1003.447232][ T30] audit: type=1326 audit(1785056564.652:3354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19620 comm="syz.4.3649" exe="/root/ci-upstream-kasan-gce-386/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf70af0ec code=0x7ffc0000 [ 1003.911031][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1004.097203][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 1004.121550][T19628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.156564][T19628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.194884][T19628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.235869][T19628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.246147][T19628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.272717][T19628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.334920][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1004.355063][ T9] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1004.386187][ T9] usb 2-1: can't read configurations, error -71 [ 1004.661135][T19644] geneve2: left promiscuous mode [ 1004.692986][ T5793] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 48196 - 0 [ 1004.769005][ T5793] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 48196 - 0 [ 1004.808141][ T8119] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 48196 - 0 [ 1004.835396][ T8119] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 48196 - 0 [ 1005.223603][T19638] syz.0.3656 (19638): drop_caches: 2 [ 1005.435693][T15865] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1005.476459][ T9] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1005.607958][T15865] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1005.622261][T15865] usb 4-1: config 211 has an invalid interface number: 123 but max is 0 [ 1005.643546][T15865] usb 4-1: config 211 has no interface number 0 [ 1005.665334][T15865] usb 4-1: config 211 interface 123 has no altsetting 0 [ 1005.680384][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1005.694241][T15865] usb 4-1: New USB device found, idVendor=07c4, idProduct=a4a5, bcdDevice=52.ed [ 1005.710120][T19661] netlink: 'syz.4.3662': attribute type 12 has an invalid length. [ 1005.718347][T15865] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.721902][ T9] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1005.739944][T19661] netlink: 'syz.4.3662': attribute type 29 has an invalid length. [ 1005.750878][T15865] usb 4-1: Product: syz [ 1005.762589][T15865] usb 4-1: Manufacturer: syz [ 1005.768034][T19661] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1005.770423][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1005.780823][T15865] usb 4-1: SerialNumber: syz [ 1005.807815][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.808089][T19661] netlink: 59 bytes leftover after parsing attributes in process `syz.4.3662'. [ 1005.851510][ T9] usb 2-1: Product: syz [ 1005.875675][ T9] usb 2-1: Manufacturer: syz [ 1005.885676][ T9] usb 2-1: SerialNumber: syz [ 1005.918022][ T9] cdc_mbim 2-1:1.0: skipping garbage [ 1006.124064][T19650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1006.145158][T19653] [ 1006.147597][T19653] ====================================================== [ 1006.154664][T19653] WARNING: possible circular locking dependency detected [ 1006.162174][T19653] syzkaller #0 Tainted: G L [ 1006.168282][T19653] ------------------------------------------------------ [ 1006.175342][T19653] syz.3.3659/19653 is trying to acquire lock: [ 1006.181440][T19653] ffffffff8ec5ed80 (pcpu_alloc_mutex){+.+.}-{4:4}, at: pcpu_alloc_noprof+0x231/0x1900 [ 1006.191062][T19653] [ 1006.191062][T19653] but task is already holding lock: [ 1006.198564][T19653] ffff8880274eb840 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x27b/0x420 [ 1006.208858][T19653] [ 1006.208858][T19653] which lock already depends on the new lock. [ 1006.208858][T19653] [ 1006.219275][T19653] [ 1006.219275][T19653] the existing dependency chain (in reverse order) is: [ 1006.228392][T19653] [ 1006.228392][T19653] -> #2 (&q->q_usage_counter(io)#17){++++}-{0:0}: [ 1006.237033][T19653] blk_alloc_queue+0x544/0x690 [ 1006.242432][T19653] __blk_mq_alloc_disk+0x194/0x390 [ 1006.248220][T19653] loop_add+0x480/0xb40 [ 1006.253004][T19653] loop_init+0xd7/0x160 [ 1006.257810][T19653] do_one_initcall+0x250/0x870 [ 1006.263134][T19653] do_initcall_level+0x10a/0x1a0 [ 1006.268687][T19653] do_initcalls+0x59/0xa0 [ 1006.273578][T19653] kernel_init_freeable+0x29d/0x3e0 [ 1006.279331][T19653] kernel_init+0x1d/0x1d0 [ 1006.284248][T19653] ret_from_fork+0x514/0xb70 [ 1006.289400][T19653] ret_from_fork_asm+0x1a/0x30 [ 1006.294739][T19653] [ 1006.294739][T19653] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1006.301988][T19653] fs_reclaim_acquire+0x71/0x100 [ 1006.307482][T19653] prepare_alloc_pages+0x15b/0x650 [ 1006.313147][T19653] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1006.319502][T19653] __alloc_pages_noprof+0x10/0x100 [ 1006.325161][T19653] pcpu_populate_chunk+0x181/0xb30 [ 1006.330811][T19653] pcpu_alloc_noprof+0xbca/0x1900 [ 1006.336385][T19653] bpf_map_alloc_percpu+0x65/0x180 [ 1006.342048][T19653] array_map_alloc+0x377/0x710 [ 1006.347384][T19653] map_create+0xf2a/0x1b90 [ 1006.352375][T19653] __sys_bpf+0xaea/0xd90 [ 1006.357162][T19653] __ia32_sys_bpf+0xba/0xd0 [ 1006.362212][T19653] __do_fast_syscall_32+0x23e/0x6f0 [ 1006.367956][T19653] do_fast_syscall_32+0x33/0x70 [ 1006.373372][T19653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1006.380253][T19653] [ 1006.380253][T19653] -> #0 (pcpu_alloc_mutex){+.+.}-{4:4}: [ 1006.388039][T19653] __lock_acquire+0x1520/0x2cf0 [ 1006.393445][T19653] lock_acquire+0x106/0x350 [ 1006.398495][T19653] __mutex_lock+0x19d/0x1550 [ 1006.403739][T19653] pcpu_alloc_noprof+0x231/0x1900 [ 1006.409306][T19653] __percpu_counter_init_many+0x42/0x380 [ 1006.415478][T19653] blkg_rwstat_init+0x2c/0x170 [ 1006.420776][T19653] throtl_pd_alloc+0xb6/0x460 [ 1006.426174][T19653] blkcg_activate_policy+0x650/0xb10 [ 1006.432338][T19653] blk_throtl_init+0x2f7/0x420 [ 1006.437647][T19653] tg_set_conf+0x1db/0x4e0 [ 1006.442608][T19653] cgroup_file_write+0x331/0x8f0 [ 1006.448112][T19653] kernfs_fop_write_iter+0x3a4/0x540 [ 1006.453953][T19653] vfs_write+0x612/0xba0 [ 1006.458734][T19653] ksys_write+0x150/0x270 [ 1006.463605][T19653] __do_fast_syscall_32+0x23e/0x6f0 [ 1006.469355][T19653] do_fast_syscall_32+0x33/0x70 [ 1006.474766][T19653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1006.481638][T19653] [ 1006.481638][T19653] other info that might help us debug this: [ 1006.481638][T19653] [ 1006.491889][T19653] Chain exists of: [ 1006.491889][T19653] pcpu_alloc_mutex --> fs_reclaim --> &q->q_usage_counter(io)#17 [ 1006.491889][T19653] [ 1006.506048][T19653] Possible unsafe locking scenario: [ 1006.506048][T19653] [ 1006.513531][T19653] CPU0 CPU1 [ 1006.518916][T19653] ---- ---- [ 1006.524340][T19653] lock(&q->q_usage_counter(io)#17); [ 1006.529742][T19653] lock(fs_reclaim); [ 1006.536291][T19653] lock(&q->q_usage_counter(io)#17); [ 1006.544311][T19653] lock(pcpu_alloc_mutex); [ 1006.548868][T19653] [ 1006.548868][T19653] *** DEADLOCK *** [ 1006.548868][T19653] [ 1006.557217][T19653] 7 locks held by syz.3.3659/19653: [ 1006.562453][T19653] #0: ffff888012880470 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1006.571554][T19653] #1: ffff88802a3f4450 (sb_writers#10){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1006.580938][T19653] #2: ffff88805522d080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d8/0x540 [ 1006.590901][T19653] #3: ffff888029817878 (kn->active#91){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22b/0x540 [ 1006.601494][T19653] #4: ffff8880274eba40 (&q->rq_qos_mutex){+.+.}-{4:4}, at: blkg_conf_open_bdev+0x2a8/0x3c0 [ 1006.611656][T19653] #5: ffff8880274eb840 (&q->q_usage_counter(io)#17){++++}-{0:0}, at: blk_throtl_init+0x27b/0x420 [ 1006.622772][T19653] #6: ffff8880274eb878 (&q->q_usage_counter(queue)){+.+.}-{0:0}, at: blk_throtl_init+0x27b/0x420 [ 1006.633517][T19653] [ 1006.633517][T19653] stack backtrace: [ 1006.639457][T19653] CPU: 0 UID: 0 PID: 19653 Comm: syz.3.3659 Tainted: G L syzkaller #0 PREEMPT(full) [ 1006.639486][T19653] Tainted: [L]=SOFTLOCKUP [ 1006.639494][T19653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1006.639506][T19653] Call Trace: [ 1006.639514][T19653] [ 1006.639523][T19653] dump_stack_lvl+0xe8/0x150 [ 1006.639552][T19653] print_circular_bug+0x2e1/0x300 [ 1006.639573][T19653] check_noncircular+0x12e/0x150 [ 1006.639593][T19653] __lock_acquire+0x1520/0x2cf0 [ 1006.639629][T19653] ? trace_irq_disable+0x3b/0x140 [ 1006.639660][T19653] ? pcpu_alloc_noprof+0x231/0x1900 [ 1006.639681][T19653] lock_acquire+0x106/0x350 [ 1006.639705][T19653] ? pcpu_alloc_noprof+0x231/0x1900 [ 1006.639732][T19653] __mutex_lock+0x19d/0x1550 [ 1006.639752][T19653] ? pcpu_alloc_noprof+0x231/0x1900 [ 1006.639776][T19653] ? tg_set_conf+0x1db/0x4e0 [ 1006.639797][T19653] ? kernfs_fop_write_iter+0x3a4/0x540 [ 1006.639815][T19653] ? vfs_write+0x612/0xba0 [ 1006.639830][T19653] ? ksys_write+0x150/0x270 [ 1006.639845][T19653] ? __do_fast_syscall_32+0x23e/0x6f0 [ 1006.639865][T19653] ? do_fast_syscall_32+0x33/0x70 [ 1006.639884][T19653] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1006.639913][T19653] ? pcpu_alloc_noprof+0x231/0x1900 [ 1006.639934][T19653] ? __pfx___mutex_lock+0x10/0x10 [ 1006.639960][T19653] pcpu_alloc_noprof+0x231/0x1900 [ 1006.639983][T19653] ? rcu_is_watching+0x15/0xb0 [ 1006.640000][T19653] ? __kasan_kmalloc+0x93/0xb0 [ 1006.640025][T19653] __percpu_counter_init_many+0x42/0x380 [ 1006.640052][T19653] ? throtl_pd_alloc+0x9d/0x460 [ 1006.640071][T19653] blkg_rwstat_init+0x2c/0x170 [ 1006.640088][T19653] throtl_pd_alloc+0xb6/0x460 [ 1006.640110][T19653] ? __pfx_throtl_pd_alloc+0x10/0x10 [ 1006.640133][T19653] blkcg_activate_policy+0x650/0xb10 [ 1006.640166][T19653] blk_throtl_init+0x2f7/0x420 [ 1006.640192][T19653] tg_set_conf+0x1db/0x4e0 [ 1006.640212][T19653] ? kernfs_root+0x1c/0x230 [ 1006.640237][T19653] ? __pfx_tg_set_conf+0x10/0x10 [ 1006.640258][T19653] ? kernfs_root+0x1c/0x230 [ 1006.640282][T19653] ? kernfs_root+0x1c/0x230 [ 1006.640305][T19653] ? kernfs_root+0x1c/0x230 [ 1006.640334][T19653] ? kernfs_root+0x1ea/0x230 [ 1006.640359][T19653] ? __pfx_tg_set_conf_uint+0x10/0x10 [ 1006.640384][T19653] cgroup_file_write+0x331/0x8f0 [ 1006.640403][T19653] ? kernfs_fop_write_iter+0x22b/0x540 [ 1006.640428][T19653] ? __pfx_cgroup_file_write+0x10/0x10 [ 1006.640448][T19653] ? __kmalloc_noprof+0x396/0x720 [ 1006.640473][T19653] ? vfs_write+0x22b/0xba0 [ 1006.640489][T19653] ? __kmalloc_noprof+0x1ad/0x720 [ 1006.640514][T19653] ? __pfx_cgroup_file_write+0x10/0x10 [ 1006.640532][T19653] kernfs_fop_write_iter+0x3a4/0x540 [ 1006.640552][T19653] vfs_write+0x612/0xba0 [ 1006.640571][T19653] ? __pfx_vfs_write+0x10/0x10 [ 1006.640592][T19653] ? __fget_files+0x2a/0x420 [ 1006.640622][T19653] ksys_write+0x150/0x270 [ 1006.640640][T19653] ? __pfx_ksys_write+0x10/0x10 [ 1006.640659][T19653] __do_fast_syscall_32+0x23e/0x6f0 [ 1006.640680][T19653] ? do_fast_syscall_32+0x33/0x70 [ 1006.640700][T19653] ? lockdep_hardirqs_on+0x7a/0x110 [ 1006.640718][T19653] ? asm_int80_emulation+0x1a/0x20 [ 1006.640738][T19653] ? do_int80_emulation+0x29f/0x550 [ 1006.640761][T19653] do_fast_syscall_32+0x33/0x70 [ 1006.640781][T19653] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1006.640802][T19653] RIP: 0023:0xf706f0ec [ 1006.640818][T19653] Code: 90 85 d2 74 0a 89 ce 81 e6 ff 0f 00 00 89 32 85 c0 74 05 c1 e9 0c 89 08 31 c0 5e 5d c3 90 0f 1f 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 58 b8 [ 1006.640834][T19653] RSP: 002b:00000000f545d50c EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 1006.640852][T19653] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 00000000800000c0 [ 1006.640866][T19653] RDX: 000000000000006a RSI: 0000000000000000 RDI: 0000000000000000 [ 1006.640879][T19653] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1006.640889][T19653] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1006.640900][T19653] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1006.640917][T19653] [ 1007.051993][T15865] usb-storage 4-1:211.123: USB Mass Storage device detected [ 1007.073853][T15865] usb-storage 4-1:211.123: Quirks match for vid 07c4 pid a4a5: 420 [ 1007.110384][T15865] usb 4-1: USB disconnect, device number 20 [ 1007.165761][T15866] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1007.295730][T15866] usb 5-1: device descriptor read/64, error -71 [ 1007.325715][T15864] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1007.439319][T19650] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1007.447257][ T9] cdc_mbim 2-1:1.0: setting tx_max = 16384 [ 1007.454251][ T9] cdc_mbim 2-1:1.0: cdc-wdm0: USB WDM device [ 1007.461992][ T9] wwan wwan0: port wwan0mbim0 attached [ 1007.472432][ T9] cdc_mbim 2-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.1-1, CDC MBIM, 02:4c:43:8c:ef:72 [ 1007.486063][T15864] usb 3-1: Using ep0 maxpacket: 32 [ 1007.496087][T15864] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 1007.519059][T15864] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1007.528708][T15864] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1007.538195][T15864] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1007.549175][T15866] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1007.563050][T15864] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1007.574975][T15864] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1007.588899][T15864] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1007.600810][T15864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.614772][T15864] usb 3-1: config 0 descriptor?? [ 1007.695748][T15866] usb 5-1: device descriptor read/64, error -71 [ 1007.783708][ C0] wdm_int_callback: 34 callbacks suppressed [ 1007.783737][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1007.796671][ C0] wdm_int_callback: 34 callbacks suppressed [ 1007.796698][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1007.809498][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1007.816238][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1007.817040][T15866] usb usb5-port1: attempt power cycle [ 1007.823629][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1007.834655][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1007.841142][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1007.847892][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1007.854335][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1007.861069][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1007.867701][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1007.874438][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1007.881019][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1007.887768][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1007.894343][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1007.901085][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1007.907507][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1007.914254][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1007.920655][ C0] cdc_mbim 2-1:1.0: nonzero urb status received: -71 [ 1007.927390][ C0] cdc_mbim 2-1:1.0: wdm_int_callback - 0 bytes [ 1007.944439][T15864] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 39 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1008.051409][T10836] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.063144][T10836] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.080951][T10836] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.098875][T10836] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.186384][T15866] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1008.201241][ T9] usb 3-1: USB disconnect, device number 39 [ 1008.216328][T15866] usb 5-1: device descriptor read/8, error -71 [ 1008.223283][ T9] usblp1: removed [ 1008.317694][ T5287] 8021q: adding VLAN 0 to HW filter on device wwan0 [ 1008.491293][T15866] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1008.546321][T15866] usb 5-1: device descriptor read/8, error -71 [ 1008.655865][T15866] usb usb5-port1: unable to enumerate USB device [ 1008.671376][ T9] usb 2-1: USB disconnect, device number 31 [ 1008.691739][ T9] cdc_mbim 2-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.1-1, CDC MBIM [ 1008.760931][ T9] wwan wwan0: port wwan0mbim0 disconnected [ 1010.545652][ T5639] Bluetooth: hci1: command 0x0406 tx timeout